@open-mercato/core 0.6.5-develop.4384.1.ce2ec6eaaa → 0.6.5-develop.4397.1.9a65481757

package/dist/modules/communication_channels/workers/gmail-history-sync.js

@@ -0,0 +1,154 @@
+import { findOneWithDecryption } from "@open-mercato/shared/lib/encryption/find";
+import { CommunicationChannel } from "../data/entities.js";
+import {
+  COMMUNICATION_CHANNELS_INGEST_INBOUND_COMMAND_ID
+} from "../commands/ingest-inbound-message.js";
+import { COMMUNICATION_CHANNELS_QUEUES } from "../lib/queue.js";
+import { preservePushState } from "../lib/push-state.js";
+import { refreshCredentialsIfNeeded } from "../lib/credential-refresh.js";
+import { classifyOutboundError } from "../lib/error-classification.js";
+import { writeIngestDeadLetter } from "../lib/dead-letter.js";
+const MAX_DRAIN_PAGES = 100;
+const metadata = {
+  queue: COMMUNICATION_CHANNELS_QUEUES.gmailHistorySync,
+  id: "communication_channels:gmail-history-sync",
+  concurrency: 5
+};
+async function handle(job, ctx) {
+  const { channelId, scope } = job.payload;
+  const em = ctx.resolve("em").fork();
+  const adapterRegistry = ctx.resolve("channelAdapterRegistry");
+  const channel = await findOneWithDecryption(
+    em,
+    CommunicationChannel,
+    {
+      id: channelId,
+      tenantId: scope.tenantId,
+      organizationId: scope.organizationId ?? null,
+      deletedAt: null
+    },
+    void 0,
+    scope
+  );
+  if (!channel) {
+    console.warn(`[gmail-history-sync] channel ${channelId} not found (skip)`);
+    return;
+  }
+  if (!channel.isActive || channel.status !== "connected") return;
+  const adapter = adapterRegistry?.get(channel.providerKey);
+  if (!adapter || typeof adapter.applyPushNotification !== "function") {
+    console.warn(
+      `[gmail-history-sync] adapter for '${channel.providerKey}' does not support applyPushNotification`
+    );
+    return;
+  }
+  let credentialsService = null;
+  try {
+    credentialsService = ctx.resolve("integrationCredentialsService");
+  } catch {
+    credentialsService = null;
+  }
+  const credentialsScope = {
+    tenantId: scope.tenantId,
+    organizationId: scope.organizationId ?? scope.tenantId,
+    userId: channel.userId ?? null
+  };
+  let credentials = {};
+  if (channel.credentialsRef && credentialsService) {
+    try {
+      credentials = await credentialsService.resolve(`channel_${channel.providerKey}`, credentialsScope) ?? {};
+    } catch {
+      credentials = {};
+    }
+  }
+  const refreshed = await refreshCredentialsIfNeeded(
+    { adapter, channelId: channel.id, credentials, scope: credentialsScope },
+    { credentialsService }
+  );
+  credentials = refreshed.credentials;
+  let page;
+  try {
+    page = await adapter.applyPushNotification({
+      credentials,
+      scope: { tenantId: scope.tenantId, organizationId: scope.organizationId ?? scope.tenantId },
+      channelState: channel.channelState ?? {},
+      notification: job.payload.notification
+    });
+  } catch (err) {
+    const classification = classifyOutboundError(err);
+    if (classification.transient) throw err;
+    console.warn(
+      `[gmail-history-sync] permanent failure applying push for channel ${channel.id}: ${classification.message}`
+    );
+    return;
+  }
+  const messages = Array.isArray(page?.messages) ? page.messages : [];
+  if (messages.length > 0) {
+    const commandBus = ctx.resolve("commandBus");
+    const containerProxy = { resolve: ctx.resolve.bind(ctx) };
+    const commandCtx = {
+      container: containerProxy,
+      auth: null,
+      organizationScope: null,
+      selectedOrganizationId: scope.organizationId ?? null,
+      organizationIds: scope.organizationId ? [scope.organizationId] : null
+    };
+    for (const message of messages) {
+      try {
+        const input = {
+          channelId: channel.id,
+          providerKey: channel.providerKey,
+          channelType: channel.channelType,
+          scope: { tenantId: scope.tenantId, organizationId: scope.organizationId ?? null },
+          message
+        };
+        await commandBus.execute(COMMUNICATION_CHANNELS_INGEST_INBOUND_COMMAND_ID, {
+          input,
+          ctx: commandCtx
+        });
+      } catch (err) {
+        const classification = classifyOutboundError(err);
+        if (classification.transient) {
+          throw err;
+        }
+        console.warn(
+          `[gmail-history-sync] permanent ingest failure for channel ${channel.id}: ${classification.message}`
+        );
+        await writeIngestDeadLetter({ em, scope, channel, message, err, errorMessage: classification.message });
+      }
+    }
+  }
+  if (page?.nextCursor) {
+    try {
+      const decoded = JSON.parse(Buffer.from(page.nextCursor, "base64").toString("utf-8"));
+      channel.channelState = preservePushState(channel.channelState, decoded);
+      channel.lastPolledAt = /* @__PURE__ */ new Date();
+      await em.flush();
+    } catch (err) {
+      console.warn(
+        `[gmail-history-sync] failed to persist next cursor for channel ${channel.id}: ${err instanceof Error ? err.message : String(err)}`
+      );
+    }
+  }
+  if (page?.hasMore && page?.nextCursor) {
+    const drainPage = job.payload.drainPage ?? 0;
+    if (drainPage < MAX_DRAIN_PAGES) {
+      const queue = (await import("../lib/queue.js")).getCommunicationChannelsQueue(
+        COMMUNICATION_CHANNELS_QUEUES.gmailHistorySync
+      );
+      await queue.enqueue(
+        { ...job.payload, drainPage: drainPage + 1 },
+        { delayMs: 250 }
+      );
+    } else {
+      console.warn(
+        `[gmail-history-sync] drain page cap (${MAX_DRAIN_PAGES}) reached for channel ${channelId}; stopping re-enqueue`
+      );
+    }
+  }
+}
+export {
+  handle as default,
+  metadata
+};
+//# sourceMappingURL=gmail-history-sync.js.map

package/dist/modules/communication_channels/workers/gmail-history-sync.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/communication_channels/workers/gmail-history-sync.ts"],
+  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport type { JobContext, QueuedJob, WorkerMeta } from '@open-mercato/queue'\nimport type { CommandBus } from '@open-mercato/shared/lib/commands'\nimport { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { CommunicationChannel } from '../data/entities'\nimport {\n  COMMUNICATION_CHANNELS_INGEST_INBOUND_COMMAND_ID,\n  type IngestInboundMessageInput,\n} from '../commands/ingest-inbound-message'\nimport { COMMUNICATION_CHANNELS_QUEUES } from '../lib/queue'\nimport { preservePushState } from '../lib/push-state'\nimport { refreshCredentialsIfNeeded } from '../lib/credential-refresh'\nimport { classifyOutboundError } from '../lib/error-classification'\nimport { writeIngestDeadLetter } from '../lib/dead-letter'\nimport type { ChannelAdapterRegistry } from '../lib/registry'\n\n/**\n * Spec C \u00A7 Phase C2 \u2014 Gmail Pub/Sub push delivery worker.\n *\n * One job per verified webhook notification. Calls\n * `adapter.applyPushNotification(...)` to walk `users.history.list` from the\n * channel's stored `historyId`, then dispatches each message through\n * `ingest-inbound-message` (same path as the polling worker).\n *\n * Concurrency: bounded by the queue's default (10). Per-channel ordering is\n * NOT guaranteed across notifications \u2014 but the ingest command is idempotent\n * on `(channel_id, external_message_id)`, and Gmail's history cursor advances\n * monotonically per channel, so out-of-order replay is safe.\n */\nexport type GmailHistorySyncJobPayload = {\n  channelId: string\n  scope: { tenantId: string; organizationId: string | null }\n  notification: { emailAddress: string; historyId: string }\n  /** Self-re-enqueue drain counter (bounds the multi-page drain loop). */\n  drainPage?: number\n}\n\n/** Hard cap on self-re-enqueue drain pages \u2014 guards against an adapter that\n *  returns `hasMore` with a non-advancing cursor (a tight, unbounded loop). */\nconst MAX_DRAIN_PAGES = 100\n\nexport const metadata: WorkerMeta = {\n  queue: COMMUNICATION_CHANNELS_QUEUES.gmailHistorySync,\n  id: 'communication_channels:gmail-history-sync',\n  concurrency: 5,\n}\n\ntype HandlerContext = JobContext & {\n  resolve: <T = unknown>(name: string) => T\n}\n\ntype CredentialsServiceLike = {\n  resolve: (\n    integrationId: string,\n    scope: { organizationId: string; tenantId: string; userId?: string | null },\n  ) => Promise<Record<string, unknown> | null>\n  save?: (\n    integrationId: string,\n    credentials: Record<string, unknown>,\n    scope: { organizationId: string; tenantId: string; userId?: string | null },\n  ) => Promise<void>\n}\n\nexport default async function handle(\n  job: QueuedJob<GmailHistorySyncJobPayload>,\n  ctx: HandlerContext,\n): Promise<void> {\n  const { channelId, scope } = job.payload\n  const em = (ctx.resolve('em') as EntityManager).fork()\n  const adapterRegistry = ctx.resolve<ChannelAdapterRegistry>('channelAdapterRegistry')\n\n  const channel = await findOneWithDecryption(\n    em,\n    CommunicationChannel,\n    {\n      id: channelId,\n      tenantId: scope.tenantId,\n      organizationId: scope.organizationId ?? null,\n      deletedAt: null,\n    },\n    undefined,\n    scope,\n  )\n  if (!channel) {\n    console.warn(`[gmail-history-sync] channel ${channelId} not found (skip)`)\n    return\n  }\n  if (!channel.isActive || channel.status !== 'connected') return\n\n  const adapter = adapterRegistry?.get(channel.providerKey)\n  if (!adapter || typeof adapter.applyPushNotification !== 'function') {\n    console.warn(\n      `[gmail-history-sync] adapter for '${channel.providerKey}' does not support applyPushNotification`,\n    )\n    return\n  }\n\n  let credentialsService: CredentialsServiceLike | null = null\n  try {\n    credentialsService = ctx.resolve<CredentialsServiceLike>('integrationCredentialsService')\n  } catch {\n    credentialsService = null\n  }\n  const credentialsScope = {\n    tenantId: scope.tenantId,\n    organizationId: scope.organizationId ?? scope.tenantId,\n    userId: channel.userId ?? null,\n  }\n  let credentials: Record<string, unknown> = {}\n  if (channel.credentialsRef && credentialsService) {\n    try {\n      credentials =\n        (await credentialsService.resolve(`channel_${channel.providerKey}`, credentialsScope)) ?? {}\n    } catch {\n      credentials = {}\n    }\n  }\n  const refreshed = await refreshCredentialsIfNeeded(\n    { adapter, channelId: channel.id, credentials, scope: credentialsScope },\n    { credentialsService },\n  )\n  credentials = refreshed.credentials\n\n  let page\n  try {\n    page = await adapter.applyPushNotification({\n      credentials,\n      scope: { tenantId: scope.tenantId, organizationId: scope.organizationId ?? scope.tenantId },\n      channelState: (channel.channelState as Record<string, unknown> | null) ?? {},\n      notification: job.payload.notification as unknown as Record<string, unknown>,\n    })\n  } catch (err) {\n    const classification = classifyOutboundError(err)\n    if (classification.transient) throw err\n    console.warn(\n      `[gmail-history-sync] permanent failure applying push for channel ${channel.id}: ${classification.message}`,\n    )\n    return\n  }\n\n  const messages = Array.isArray(page?.messages) ? page.messages : []\n  if (messages.length > 0) {\n    const commandBus = ctx.resolve<CommandBus>('commandBus')\n    const containerProxy = { resolve: ctx.resolve.bind(ctx) }\n    const commandCtx = {\n      container: containerProxy as never,\n      auth: null,\n      organizationScope: null,\n      selectedOrganizationId: scope.organizationId ?? null,\n      organizationIds: scope.organizationId ? [scope.organizationId] : null,\n    }\n    for (const message of messages) {\n      try {\n        const input: IngestInboundMessageInput = {\n          channelId: channel.id,\n          providerKey: channel.providerKey,\n          channelType: channel.channelType,\n          scope: { tenantId: scope.tenantId, organizationId: scope.organizationId ?? null },\n          message,\n        }\n        await commandBus.execute(COMMUNICATION_CHANNELS_INGEST_INBOUND_COMMAND_ID, {\n          input,\n          ctx: commandCtx as never,\n        })\n      } catch (err) {\n        const classification = classifyOutboundError(err)\n        if (classification.transient) {\n          // Per-message commit semantics from Spec B: re-throw so queue\n          // retry re-runs from a safe point.\n          throw err\n        }\n        console.warn(\n          `[gmail-history-sync] permanent ingest failure for channel ${channel.id}: ${classification.message}`,\n        )\n        await writeIngestDeadLetter({ em, scope, channel, message, err, errorMessage: classification.message })\n      }\n    }\n  }\n\n  // Persist the adapter's advanced cursor (encoded in nextCursor) back to\n  // channel.channelState. fetchHistory's nextCursor is a base64-JSON blob\n  // mirroring the new GmailChannelState \u2014 same as the polling worker writes.\n  if (page?.nextCursor) {\n    try {\n      const decoded = JSON.parse(Buffer.from(page.nextCursor, 'base64').toString('utf-8')) as Record<string, unknown>\n      // Carry the push keys forward via preservePushState rather than spreading\n      // the decoded cursor wholesale: a blind spread would retain a stale\n      // `pendingHistoryPageToken` after a completed drain and mis-route the next\n      // push notification.\n      channel.channelState = preservePushState(channel.channelState, decoded)\n      channel.lastPolledAt = new Date()\n      await em.flush()\n    } catch (err) {\n      console.warn(\n        `[gmail-history-sync] failed to persist next cursor for channel ${channel.id}: ${\n          err instanceof Error ? err.message : String(err)\n        }`,\n      )\n    }\n  }\n\n  if (page?.hasMore && page?.nextCursor) {\n    // Re-enqueue self so the drain continues. The Pub/Sub notification fired\n    // once, but `history.list` may need multiple pages on a busy mailbox.\n    // Bound the drain and add a small delay so an adapter that returns\n    // `hasMore: true` with a non-advancing cursor cannot spin a tight,\n    // unthrottled re-enqueue loop against the provider/queue.\n    const drainPage = job.payload.drainPage ?? 0\n    if (drainPage < MAX_DRAIN_PAGES) {\n      const queue = (await import('../lib/queue')).getCommunicationChannelsQueue(\n        COMMUNICATION_CHANNELS_QUEUES.gmailHistorySync,\n      )\n      await queue.enqueue(\n        { ...job.payload, drainPage: drainPage + 1 } as unknown as Record<string, unknown>,\n        { delayMs: 250 },\n      )\n    } else {\n      console.warn(\n        `[gmail-history-sync] drain page cap (${MAX_DRAIN_PAGES}) reached for channel ${channelId}; stopping re-enqueue`,\n      )\n    }\n  }\n}\n"],
+  "mappings": "AAGA,SAAS,6BAA6B;AACtC,SAAS,4BAA4B;AACrC;AAAA,EACE;AAAA,OAEK;AACP,SAAS,qCAAqC;AAC9C,SAAS,yBAAyB;AAClC,SAAS,kCAAkC;AAC3C,SAAS,6BAA6B;AACtC,SAAS,6BAA6B;AA0BtC,MAAM,kBAAkB;AAEjB,MAAM,WAAuB;AAAA,EAClC,OAAO,8BAA8B;AAAA,EACrC,IAAI;AAAA,EACJ,aAAa;AACf;AAkBA,eAAO,OACL,KACA,KACe;AACf,QAAM,EAAE,WAAW,MAAM,IAAI,IAAI;AACjC,QAAM,KAAM,IAAI,QAAQ,IAAI,EAAoB,KAAK;AACrD,QAAM,kBAAkB,IAAI,QAAgC,wBAAwB;AAEpF,QAAM,UAAU,MAAM;AAAA,IACpB;AAAA,IACA;AAAA,IACA;AAAA,MACE,IAAI;AAAA,MACJ,UAAU,MAAM;AAAA,MAChB,gBAAgB,MAAM,kBAAkB;AAAA,MACxC,WAAW;AAAA,IACb;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACA,MAAI,CAAC,SAAS;AACZ,YAAQ,KAAK,gCAAgC,SAAS,mBAAmB;AACzE;AAAA,EACF;AACA,MAAI,CAAC,QAAQ,YAAY,QAAQ,WAAW,YAAa;AAEzD,QAAM,UAAU,iBAAiB,IAAI,QAAQ,WAAW;AACxD,MAAI,CAAC,WAAW,OAAO,QAAQ,0BAA0B,YAAY;AACnE,YAAQ;AAAA,MACN,qCAAqC,QAAQ,WAAW;AAAA,IAC1D;AACA;AAAA,EACF;AAEA,MAAI,qBAAoD;AACxD,MAAI;AACF,yBAAqB,IAAI,QAAgC,+BAA+B;AAAA,EAC1F,QAAQ;AACN,yBAAqB;AAAA,EACvB;AACA,QAAM,mBAAmB;AAAA,IACvB,UAAU,MAAM;AAAA,IAChB,gBAAgB,MAAM,kBAAkB,MAAM;AAAA,IAC9C,QAAQ,QAAQ,UAAU;AAAA,EAC5B;AACA,MAAI,cAAuC,CAAC;AAC5C,MAAI,QAAQ,kBAAkB,oBAAoB;AAChD,QAAI;AACF,oBACG,MAAM,mBAAmB,QAAQ,WAAW,QAAQ,WAAW,IAAI,gBAAgB,KAAM,CAAC;AAAA,IAC/F,QAAQ;AACN,oBAAc,CAAC;AAAA,IACjB;AAAA,EACF;AACA,QAAM,YAAY,MAAM;AAAA,IACtB,EAAE,SAAS,WAAW,QAAQ,IAAI,aAAa,OAAO,iBAAiB;AAAA,IACvE,EAAE,mBAAmB;AAAA,EACvB;AACA,gBAAc,UAAU;AAExB,MAAI;AACJ,MAAI;AACF,WAAO,MAAM,QAAQ,sBAAsB;AAAA,MACzC;AAAA,MACA,OAAO,EAAE,UAAU,MAAM,UAAU,gBAAgB,MAAM,kBAAkB,MAAM,SAAS;AAAA,MAC1F,cAAe,QAAQ,gBAAmD,CAAC;AAAA,MAC3E,cAAc,IAAI,QAAQ;AAAA,IAC5B,CAAC;AAAA,EACH,SAAS,KAAK;AACZ,UAAM,iBAAiB,sBAAsB,GAAG;AAChD,QAAI,eAAe,UAAW,OAAM;AACpC,YAAQ;AAAA,MACN,oEAAoE,QAAQ,EAAE,KAAK,eAAe,OAAO;AAAA,IAC3G;AACA;AAAA,EACF;AAEA,QAAM,WAAW,MAAM,QAAQ,MAAM,QAAQ,IAAI,KAAK,WAAW,CAAC;AAClE,MAAI,SAAS,SAAS,GAAG;AACvB,UAAM,aAAa,IAAI,QAAoB,YAAY;AACvD,UAAM,iBAAiB,EAAE,SAAS,IAAI,QAAQ,KAAK,GAAG,EAAE;AACxD,UAAM,aAAa;AAAA,MACjB,WAAW;AAAA,MACX,MAAM;AAAA,MACN,mBAAmB;AAAA,MACnB,wBAAwB,MAAM,kBAAkB;AAAA,MAChD,iBAAiB,MAAM,iBAAiB,CAAC,MAAM,cAAc,IAAI;AAAA,IACnE;AACA,eAAW,WAAW,UAAU;AAC9B,UAAI;AACF,cAAM,QAAmC;AAAA,UACvC,WAAW,QAAQ;AAAA,UACnB,aAAa,QAAQ;AAAA,UACrB,aAAa,QAAQ;AAAA,UACrB,OAAO,EAAE,UAAU,MAAM,UAAU,gBAAgB,MAAM,kBAAkB,KAAK;AAAA,UAChF;AAAA,QACF;AACA,cAAM,WAAW,QAAQ,kDAAkD;AAAA,UACzE;AAAA,UACA,KAAK;AAAA,QACP,CAAC;AAAA,MACH,SAAS,KAAK;AACZ,cAAM,iBAAiB,sBAAsB,GAAG;AAChD,YAAI,eAAe,WAAW;AAG5B,gBAAM;AAAA,QACR;AACA,gBAAQ;AAAA,UACN,6DAA6D,QAAQ,EAAE,KAAK,eAAe,OAAO;AAAA,QACpG;AACA,cAAM,sBAAsB,EAAE,IAAI,OAAO,SAAS,SAAS,KAAK,cAAc,eAAe,QAAQ,CAAC;AAAA,MACxG;AAAA,IACF;AAAA,EACF;AAKA,MAAI,MAAM,YAAY;AACpB,QAAI;AACF,YAAM,UAAU,KAAK,MAAM,OAAO,KAAK,KAAK,YAAY,QAAQ,EAAE,SAAS,OAAO,CAAC;AAKnF,cAAQ,eAAe,kBAAkB,QAAQ,cAAc,OAAO;AACtE,cAAQ,eAAe,oBAAI,KAAK;AAChC,YAAM,GAAG,MAAM;AAAA,IACjB,SAAS,KAAK;AACZ,cAAQ;AAAA,QACN,kEAAkE,QAAQ,EAAE,KAC1E,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,CACjD;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA,MAAI,MAAM,WAAW,MAAM,YAAY;AAMrC,UAAM,YAAY,IAAI,QAAQ,aAAa;AAC3C,QAAI,YAAY,iBAAiB;AAC/B,YAAM,SAAS,MAAM,OAAO,cAAc,GAAG;AAAA,QAC3C,8BAA8B;AAAA,MAChC;AACA,YAAM,MAAM;AAAA,QACV,EAAE,GAAG,IAAI,SAAS,WAAW,YAAY,EAAE;AAAA,QAC3C,EAAE,SAAS,IAAI;AAAA,MACjB;AAAA,IACF,OAAO;AACL,cAAQ;AAAA,QACN,wCAAwC,eAAe,yBAAyB,SAAS;AAAA,MAC3F;AAAA,IACF;AAAA,EACF;AACF;",
+  "names": []
+}

package/dist/modules/communication_channels/workers/gmail-renew-watch.js

@@ -0,0 +1,95 @@
+import { findWithDecryption } from "@open-mercato/shared/lib/encryption/find";
+import { CommunicationChannel } from "../data/entities.js";
+import { COMMUNICATION_CHANNELS_QUEUES } from "../lib/queue.js";
+import { pushRenew } from "../commands/push-renew.js";
+import { emitCommunicationChannelsEvent } from "../events.js";
+const metadata = {
+  queue: COMMUNICATION_CHANNELS_QUEUES.gmailRenewWatch,
+  id: "communication_channels:gmail-renew-watch",
+  concurrency: 1
+};
+const LEAD_HOURS = Math.max(
+  1,
+  Number.parseInt(process.env.OM_PUSH_RENEWAL_GMAIL_LEAD_HOURS ?? "24", 10) || 24
+);
+async function handle(job, ctx) {
+  const em = ctx.resolve("em").fork();
+  const cutoffMs = Date.now() + LEAD_HOURS * 60 * 60 * 1e3;
+  const scope = job?.payload?.scope ?? null;
+  const where = {
+    providerKey: "gmail",
+    isActive: true,
+    deletedAt: null
+  };
+  if (scope?.tenantId) where.tenantId = scope.tenantId;
+  if (scope?.organizationId) where.organizationId = scope.organizationId;
+  const channels = await findWithDecryption(
+    em,
+    CommunicationChannel,
+    where,
+    void 0,
+    scope ? { tenantId: scope.tenantId, organizationId: scope.organizationId ?? null } : void 0
+  );
+  const containerProxy = ctx.container;
+  let renewed = 0;
+  let failed = 0;
+  for (const channel of channels) {
+    const state = channel.channelState ?? null;
+    if (!state || state.pushStatus !== "active") continue;
+    if (typeof state.watchExpirationMs !== "number") continue;
+    if (state.watchExpirationMs > cutoffMs) continue;
+    const organizationId = channel.organizationId;
+    if (!organizationId) {
+      console.warn(
+        `[gmail-renew-watch] skipping channel ${channel.id} \u2014 no organizationId on row`
+      );
+      continue;
+    }
+    try {
+      const container = resolveContainer(containerProxy, ctx);
+      const result = await pushRenew({
+        container,
+        scope: {
+          tenantId: channel.tenantId,
+          organizationId,
+          userId: channel.userId ?? null
+        },
+        input: { channelId: channel.id }
+      });
+      if (result.pushStatus === "active") {
+        renewed += 1;
+        await emitCommunicationChannelsEvent(
+          "communication_channels.push.renewed",
+          {
+            channelId: channel.id,
+            providerKey: channel.providerKey,
+            tenantId: channel.tenantId,
+            organizationId
+          },
+          { persistent: false }
+        );
+      } else {
+        failed += 1;
+      }
+    } catch (err) {
+      failed += 1;
+      console.warn(
+        `[gmail-renew-watch] failed to renew channel ${channel.id}: ${err instanceof Error ? err.message : String(err)}`
+      );
+    }
+  }
+  if (renewed > 0 || failed > 0) {
+    console.info(`[gmail-renew-watch] renewed=${renewed} failed=${failed}`);
+  }
+}
+function resolveContainer(containerProxy, ctx) {
+  if (containerProxy && typeof containerProxy === "object" && "resolve" in containerProxy) {
+    return containerProxy;
+  }
+  return { resolve: ctx.resolve.bind(ctx) };
+}
+export {
+  handle as default,
+  metadata
+};
+//# sourceMappingURL=gmail-renew-watch.js.map

package/dist/modules/communication_channels/workers/gmail-renew-watch.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/communication_channels/workers/gmail-renew-watch.ts"],
+  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport type { JobContext, QueuedJob, WorkerMeta } from '@open-mercato/queue'\nimport { findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { CommunicationChannel } from '../data/entities'\nimport { COMMUNICATION_CHANNELS_QUEUES } from '../lib/queue'\nimport { pushRenew } from '../commands/push-renew'\nimport { emitCommunicationChannelsEvent } from '../events'\n\n/**\n * Spec C \u00A7 Phase C4 \u2014 Daily cron that re-issues `gmail.users.watch` for\n * channels whose `watchExpirationMs` is within the renewal lead window.\n *\n * Gmail watch expires after ~7 days. We renew with a lead time of\n * `OM_PUSH_RENEWAL_GMAIL_LEAD_HOURS` (default 24h) so a missed cron tick\n * doesn't drop us into the polling fallback.\n *\n * The actual renewal is delegated to `pushRenew` (which in turn calls\n * `pushRegister`) \u2014 Gmail's `users.watch` is idempotent, so re-calling it\n * just returns a fresh `historyId` + `expiration` and persists them.\n *\n * Scoped to `job.payload.scope` (the cron is registered per-org in\n * `setup.ts`); each per-org cron tick only walks channels for its own\n * `(tenantId, organizationId)`. A missing scope means the legacy global\n * sweep variant \u2014 supported for backwards compatibility, but new\n * registrations always carry a scope.\n */\nexport type GmailRenewWatchPayload = {\n  scope?: { tenantId: string; organizationId: string | null }\n}\n\nexport const metadata: WorkerMeta = {\n  queue: COMMUNICATION_CHANNELS_QUEUES.gmailRenewWatch,\n  id: 'communication_channels:gmail-renew-watch',\n  concurrency: 1,\n}\n\ntype HandlerContext = JobContext & { resolve: <T = unknown>(name: string) => T }\n\nconst LEAD_HOURS = Math.max(\n  1,\n  Number.parseInt(process.env.OM_PUSH_RENEWAL_GMAIL_LEAD_HOURS ?? '24', 10) || 24,\n)\n\nexport default async function handle(\n  job: QueuedJob<GmailRenewWatchPayload>,\n  ctx: HandlerContext,\n): Promise<void> {\n  const em = (ctx.resolve('em') as EntityManager).fork()\n  const cutoffMs = Date.now() + LEAD_HOURS * 60 * 60 * 1000\n  const scope = job?.payload?.scope ?? null\n\n  // Per-org cron: filter by the scope embedded in the payload. The unscoped\n  // fallback is preserved so a deploy that hand-enqueues a renewal sweep\n  // (e.g. an operator-triggered backfill) still works.\n  const where: Record<string, unknown> = {\n    providerKey: 'gmail',\n    isActive: true,\n    deletedAt: null,\n  }\n  if (scope?.tenantId) where.tenantId = scope.tenantId\n  if (scope?.organizationId) where.organizationId = scope.organizationId\n  const channels = await findWithDecryption(\n    em,\n    CommunicationChannel,\n    where,\n    undefined,\n    scope ? { tenantId: scope.tenantId, organizationId: scope.organizationId ?? null } : undefined,\n  )\n\n  const containerProxy = (ctx as unknown as { container?: unknown }).container\n  let renewed = 0\n  let failed = 0\n  for (const channel of channels) {\n    const state =\n      (channel.channelState as { watchExpirationMs?: number; pushStatus?: string } | null) ?? null\n    if (!state || state.pushStatus !== 'active') continue\n    if (typeof state.watchExpirationMs !== 'number') continue\n    if (state.watchExpirationMs > cutoffMs) continue\n\n    const organizationId = channel.organizationId\n    if (!organizationId) {\n      console.warn(\n        `[gmail-renew-watch] skipping channel ${channel.id} \u2014 no organizationId on row`,\n      )\n      continue\n    }\n\n    try {\n      const container = resolveContainer(containerProxy, ctx)\n      const result = await pushRenew({\n        container,\n        scope: {\n          tenantId: channel.tenantId,\n          organizationId,\n          userId: channel.userId ?? null,\n        },\n        input: { channelId: channel.id },\n      })\n      if (result.pushStatus === 'active') {\n        renewed += 1\n        await emitCommunicationChannelsEvent(\n          'communication_channels.push.renewed',\n          {\n            channelId: channel.id,\n            providerKey: channel.providerKey,\n            tenantId: channel.tenantId,\n            organizationId,\n          },\n          { persistent: false },\n        )\n      } else {\n        failed += 1\n      }\n    } catch (err) {\n      failed += 1\n      console.warn(\n        `[gmail-renew-watch] failed to renew channel ${channel.id}: ${\n          err instanceof Error ? err.message : String(err)\n        }`,\n      )\n    }\n  }\n  if (renewed > 0 || failed > 0) {\n    console.info(`[gmail-renew-watch] renewed=${renewed} failed=${failed}`)\n  }\n}\n\nfunction resolveContainer(\n  containerProxy: unknown,\n  ctx: { resolve: <T = unknown>(name: string) => T },\n): import('awilix').AwilixContainer {\n  // The queue runtime exposes container access via `ctx.container` in\n  // dedicated worker harnesses, but the bare-worker contract only provides\n  // `ctx.resolve(name)`. Both shapes appear in production (test harness,\n  // AUTO_SPAWN_WORKERS) so we accept either.\n  if (containerProxy && typeof containerProxy === 'object' && 'resolve' in containerProxy) {\n    return containerProxy as import('awilix').AwilixContainer\n  }\n  // Synthesize a minimal container shape from `resolve`.\n  return { resolve: ctx.resolve.bind(ctx) } as unknown as import('awilix').AwilixContainer\n}\n"],
+  "mappings": "AAEA,SAAS,0BAA0B;AACnC,SAAS,4BAA4B;AACrC,SAAS,qCAAqC;AAC9C,SAAS,iBAAiB;AAC1B,SAAS,sCAAsC;AAwBxC,MAAM,WAAuB;AAAA,EAClC,OAAO,8BAA8B;AAAA,EACrC,IAAI;AAAA,EACJ,aAAa;AACf;AAIA,MAAM,aAAa,KAAK;AAAA,EACtB;AAAA,EACA,OAAO,SAAS,QAAQ,IAAI,oCAAoC,MAAM,EAAE,KAAK;AAC/E;AAEA,eAAO,OACL,KACA,KACe;AACf,QAAM,KAAM,IAAI,QAAQ,IAAI,EAAoB,KAAK;AACrD,QAAM,WAAW,KAAK,IAAI,IAAI,aAAa,KAAK,KAAK;AACrD,QAAM,QAAQ,KAAK,SAAS,SAAS;AAKrC,QAAM,QAAiC;AAAA,IACrC,aAAa;AAAA,IACb,UAAU;AAAA,IACV,WAAW;AAAA,EACb;AACA,MAAI,OAAO,SAAU,OAAM,WAAW,MAAM;AAC5C,MAAI,OAAO,eAAgB,OAAM,iBAAiB,MAAM;AACxD,QAAM,WAAW,MAAM;AAAA,IACrB;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,QAAQ,EAAE,UAAU,MAAM,UAAU,gBAAgB,MAAM,kBAAkB,KAAK,IAAI;AAAA,EACvF;AAEA,QAAM,iBAAkB,IAA2C;AACnE,MAAI,UAAU;AACd,MAAI,SAAS;AACb,aAAW,WAAW,UAAU;AAC9B,UAAM,QACH,QAAQ,gBAA+E;AAC1F,QAAI,CAAC,SAAS,MAAM,eAAe,SAAU;AAC7C,QAAI,OAAO,MAAM,sBAAsB,SAAU;AACjD,QAAI,MAAM,oBAAoB,SAAU;AAExC,UAAM,iBAAiB,QAAQ;AAC/B,QAAI,CAAC,gBAAgB;AACnB,cAAQ;AAAA,QACN,wCAAwC,QAAQ,EAAE;AAAA,MACpD;AACA;AAAA,IACF;AAEA,QAAI;AACF,YAAM,YAAY,iBAAiB,gBAAgB,GAAG;AACtD,YAAM,SAAS,MAAM,UAAU;AAAA,QAC7B;AAAA,QACA,OAAO;AAAA,UACL,UAAU,QAAQ;AAAA,UAClB;AAAA,UACA,QAAQ,QAAQ,UAAU;AAAA,QAC5B;AAAA,QACA,OAAO,EAAE,WAAW,QAAQ,GAAG;AAAA,MACjC,CAAC;AACD,UAAI,OAAO,eAAe,UAAU;AAClC,mBAAW;AACX,cAAM;AAAA,UACJ;AAAA,UACA;AAAA,YACE,WAAW,QAAQ;AAAA,YACnB,aAAa,QAAQ;AAAA,YACrB,UAAU,QAAQ;AAAA,YAClB;AAAA,UACF;AAAA,UACA,EAAE,YAAY,MAAM;AAAA,QACtB;AAAA,MACF,OAAO;AACL,kBAAU;AAAA,MACZ;AAAA,IACF,SAAS,KAAK;AACZ,gBAAU;AACV,cAAQ;AAAA,QACN,+CAA+C,QAAQ,EAAE,KACvD,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,CACjD;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACA,MAAI,UAAU,KAAK,SAAS,GAAG;AAC7B,YAAQ,KAAK,+BAA+B,OAAO,WAAW,MAAM,EAAE;AAAA,EACxE;AACF;AAEA,SAAS,iBACP,gBACA,KACkC;AAKlC,MAAI,kBAAkB,OAAO,mBAAmB,YAAY,aAAa,gBAAgB;AACvF,WAAO;AAAA,EACT;AAEA,SAAO,EAAE,SAAS,IAAI,QAAQ,KAAK,GAAG,EAAE;AAC1C;",
+  "names": []
+}

package/dist/modules/communication_channels/workers/inbound-processor.js

@@ -0,0 +1,56 @@
+import {
+  COMMUNICATION_CHANNELS_INGEST_INBOUND_COMMAND_ID
+} from "../commands/ingest-inbound-message.js";
+import { COMMUNICATION_CHANNELS_QUEUES } from "../lib/queue.js";
+const metadata = {
+  queue: COMMUNICATION_CHANNELS_QUEUES.inbound,
+  id: "communication_channels:inbound-processor",
+  concurrency: 10
+};
+async function handle(job, ctx) {
+  const { providerKey, channelId, channelType, raw, scope } = job.payload;
+  const adapterRegistry = ctx.resolve("channelAdapterRegistry");
+  const adapter = adapterRegistry?.get(providerKey);
+  if (!adapter) {
+    throw new Error(
+      `No ChannelAdapter registered for providerKey '${providerKey}' (worker job ${job.id}). Check that the provider package is enabled in modules.ts.`
+    );
+  }
+  const normalized = await adapter.normalizeInbound(raw);
+  if (!normalized?.externalMessageId || !normalized?.externalConversationId) {
+    throw new Error(
+      `Adapter '${providerKey}' returned a normalized message missing required fields (externalMessageId, externalConversationId) for worker job ${job.id}`
+    );
+  }
+  const commandBus = ctx.resolve("commandBus");
+  const containerProxy = { resolve: ctx.resolve.bind(ctx) };
+  const commandCtx = {
+    container: containerProxy,
+    auth: null,
+    organizationScope: null,
+    selectedOrganizationId: scope.organizationId ?? null,
+    organizationIds: scope.organizationId ? [scope.organizationId] : null
+  };
+  const input = {
+    channelId,
+    providerKey,
+    channelType,
+    scope,
+    message: normalized
+  };
+  const { result } = await commandBus.execute(
+    COMMUNICATION_CHANNELS_INGEST_INBOUND_COMMAND_ID,
+    {
+      input,
+      ctx: commandCtx
+    }
+  );
+  if (result.status === "duplicate") {
+    return;
+  }
+}
+export {
+  handle as default,
+  metadata
+};
+//# sourceMappingURL=inbound-processor.js.map

package/dist/modules/communication_channels/workers/inbound-processor.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/communication_channels/workers/inbound-processor.ts"],
+  "sourcesContent": ["import type { JobContext, QueuedJob, WorkerMeta } from '@open-mercato/queue'\nimport type { CommandBus } from '@open-mercato/shared/lib/commands'\nimport type { ChannelAdapterRegistry } from '../lib/registry'\nimport type { InboundMessage, NormalizedInboundMessage } from '../lib/adapter'\nimport {\n  COMMUNICATION_CHANNELS_INGEST_INBOUND_COMMAND_ID,\n  type IngestInboundMessageInput,\n  type IngestInboundMessageResult,\n} from '../commands/ingest-inbound-message'\nimport { COMMUNICATION_CHANNELS_QUEUES } from '../lib/queue'\n\n/**\n * Job payload enqueued by the webhook route after successful signature verification.\n *\n * The route does the cheap signature-verification step synchronously and immediately\n * returns 200. Normalization (`adapter.normalizeInbound`) + DB writes run here, in\n * the worker, so a slow database or a long contact-resolution path can't time-out\n * the provider's webhook.\n */\nexport type InboundProcessorPayload = {\n  providerKey: string\n  channelId: string\n  channelType: string\n  raw: InboundMessage\n  scope: {\n    tenantId: string\n    organizationId: string | null\n  }\n}\n\nexport const metadata: WorkerMeta = {\n  queue: COMMUNICATION_CHANNELS_QUEUES.inbound,\n  id: 'communication_channels:inbound-processor',\n  concurrency: 10,\n}\n\ntype HandlerContext = JobContext & {\n  resolve: <T = unknown>(name: string) => T\n}\n\n/**\n * Inbound channel message processor.\n *\n * Per SPEC-045d \u00A76:\n *   - Resolves the channel adapter for the inbound providerKey.\n *   - Calls `adapter.normalizeInbound(raw)` to produce a `NormalizedInboundMessage`.\n *   - Hands off to the `communication_channels.message.ingest_inbound` command,\n *     which idempotently creates ExternalConversation, ChannelThreadMapping,\n *     ExternalMessage, MessageChannelLink, and composes the platform Message.\n *\n * Idempotency: handled by the command (dedup on `(channel_id, external_message_id)`).\n * The worker can safely retry on transient failures.\n */\nexport default async function handle(\n  job: QueuedJob<InboundProcessorPayload>,\n  ctx: HandlerContext,\n): Promise<void> {\n  const { providerKey, channelId, channelType, raw, scope } = job.payload\n\n  const adapterRegistry = ctx.resolve<ChannelAdapterRegistry>('channelAdapterRegistry')\n  const adapter = adapterRegistry?.get(providerKey)\n  if (!adapter) {\n    throw new Error(\n      `No ChannelAdapter registered for providerKey '${providerKey}' (worker job ${job.id}). ` +\n        'Check that the provider package is enabled in modules.ts.',\n    )\n  }\n\n  // Normalize the raw inbound payload into the hub's canonical shape.\n  const normalized: NormalizedInboundMessage = await adapter.normalizeInbound(raw)\n  if (!normalized?.externalMessageId || !normalized?.externalConversationId) {\n    throw new Error(\n      `Adapter '${providerKey}' returned a normalized message missing required fields ` +\n        `(externalMessageId, externalConversationId) for worker job ${job.id}`,\n    )\n  }\n\n  const commandBus = ctx.resolve<CommandBus>('commandBus')\n\n  // The worker's JobContext exposes `.resolve(name)` \u2014 duck-type-compatible with the\n  // shape CommandBus uses (`container.resolve(...)`). We cast to AwilixContainer because\n  // CommandRuntimeContext requires that exact type; in practice CommandBus only touches\n  // `.resolve`, mirroring the pattern in `inbox_ops/lib/messagesIntegration.ts:148`.\n  const containerProxy = { resolve: ctx.resolve.bind(ctx) }\n  const commandCtx = {\n    container: containerProxy as never,\n    auth: null,\n    organizationScope: null,\n    selectedOrganizationId: scope.organizationId ?? null,\n    organizationIds: scope.organizationId ? [scope.organizationId] : null,\n  }\n\n  const input: IngestInboundMessageInput = {\n    channelId,\n    providerKey,\n    channelType,\n    scope,\n    message: normalized,\n  }\n\n  const { result } = await commandBus.execute<IngestInboundMessageInput, IngestInboundMessageResult>(\n    COMMUNICATION_CHANNELS_INGEST_INBOUND_COMMAND_ID,\n    {\n      input,\n      ctx: commandCtx as never,\n    },\n  )\n\n  if (result.status === 'duplicate') {\n    // Idempotent skip \u2014 provider sent the same webhook twice (common with at-least-once\n    // delivery semantics). Nothing to do; we already ingested this message earlier.\n    return\n  }\n}\n"],
+  "mappings": "AAIA;AAAA,EACE;AAAA,OAGK;AACP,SAAS,qCAAqC;AAqBvC,MAAM,WAAuB;AAAA,EAClC,OAAO,8BAA8B;AAAA,EACrC,IAAI;AAAA,EACJ,aAAa;AACf;AAmBA,eAAO,OACL,KACA,KACe;AACf,QAAM,EAAE,aAAa,WAAW,aAAa,KAAK,MAAM,IAAI,IAAI;AAEhE,QAAM,kBAAkB,IAAI,QAAgC,wBAAwB;AACpF,QAAM,UAAU,iBAAiB,IAAI,WAAW;AAChD,MAAI,CAAC,SAAS;AACZ,UAAM,IAAI;AAAA,MACR,iDAAiD,WAAW,iBAAiB,IAAI,EAAE;AAAA,IAErF;AAAA,EACF;AAGA,QAAM,aAAuC,MAAM,QAAQ,iBAAiB,GAAG;AAC/E,MAAI,CAAC,YAAY,qBAAqB,CAAC,YAAY,wBAAwB;AACzE,UAAM,IAAI;AAAA,MACR,YAAY,WAAW,sHACyC,IAAI,EAAE;AAAA,IACxE;AAAA,EACF;AAEA,QAAM,aAAa,IAAI,QAAoB,YAAY;AAMvD,QAAM,iBAAiB,EAAE,SAAS,IAAI,QAAQ,KAAK,GAAG,EAAE;AACxD,QAAM,aAAa;AAAA,IACjB,WAAW;AAAA,IACX,MAAM;AAAA,IACN,mBAAmB;AAAA,IACnB,wBAAwB,MAAM,kBAAkB;AAAA,IAChD,iBAAiB,MAAM,iBAAiB,CAAC,MAAM,cAAc,IAAI;AAAA,EACnE;AAEA,QAAM,QAAmC;AAAA,IACvC;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,SAAS;AAAA,EACX;AAEA,QAAM,EAAE,OAAO,IAAI,MAAM,WAAW;AAAA,IAClC;AAAA,IACA;AAAA,MACE;AAAA,MACA,KAAK;AAAA,IACP;AAAA,EACF;AAEA,MAAI,OAAO,WAAW,aAAa;AAGjC;AAAA,EACF;AACF;",
+  "names": []
+}

package/dist/modules/communication_channels/workers/outbound-delivery.js

@@ -0,0 +1,85 @@
+import {
+  COMMUNICATION_CHANNELS_DELIVER_OUTBOUND_COMMAND_ID
+} from "../commands/deliver-outbound-message.js";
+import { computeBackoffMs } from "../lib/error-classification.js";
+import { COMMUNICATION_CHANNELS_QUEUES, getCommunicationChannelsQueue } from "../lib/queue.js";
+const OUTBOUND_DELIVERY_MAX_ATTEMPTS = 3;
+const metadata = {
+  queue: COMMUNICATION_CHANNELS_QUEUES.outbound,
+  id: "communication_channels:outbound-delivery",
+  concurrency: 10
+};
+async function handle(job, ctx) {
+  const { messageId, scope, attempt = 1, forceCredentialRefresh } = job.payload;
+  const commandBus = ctx.resolve("commandBus");
+  const containerProxy = { resolve: ctx.resolve.bind(ctx) };
+  const commandCtx = {
+    container: containerProxy,
+    auth: null,
+    organizationScope: null,
+    selectedOrganizationId: scope.organizationId ?? null,
+    organizationIds: scope.organizationId ? [scope.organizationId] : null
+  };
+  let outcome;
+  try {
+    const { result } = await commandBus.execute(
+      COMMUNICATION_CHANNELS_DELIVER_OUTBOUND_COMMAND_ID,
+      {
+        input: { messageId, scope, forceCredentialRefresh },
+        ctx: commandCtx
+      }
+    );
+    outcome = result;
+  } catch (err) {
+    const errorMessage = err instanceof Error ? err.message : String(err);
+    console.warn(
+      `[communication_channels:outbound-delivery] command threw on attempt ${attempt} for message ${messageId}: ${errorMessage}`
+    );
+    if (attempt < OUTBOUND_DELIVERY_MAX_ATTEMPTS) {
+      await reenqueue(job.payload, attempt);
+      return;
+    }
+    throw err;
+  }
+  switch (outcome.status) {
+    case "delivered":
+    case "already_delivered":
+    case "no_channel_link":
+      return;
+    case "failed": {
+      if (outcome.requiresReauth && !forceCredentialRefresh && attempt < OUTBOUND_DELIVERY_MAX_ATTEMPTS) {
+        console.warn(
+          `[communication_channels:outbound-delivery] reauth failure on attempt ${attempt} for message ${messageId} (${outcome.providerKey}): ${outcome.error}. Retrying once with a forced credential refresh.`
+        );
+        await reenqueue({ ...job.payload, forceCredentialRefresh: true }, attempt);
+        return;
+      }
+      if (outcome.transient && attempt < OUTBOUND_DELIVERY_MAX_ATTEMPTS) {
+        console.warn(
+          `[communication_channels:outbound-delivery] transient failure on attempt ${attempt} for message ${messageId} (${outcome.providerKey}): ${outcome.error}. Re-enqueueing.`
+        );
+        await reenqueue(job.payload, attempt);
+        return;
+      }
+      console.error(
+        `[communication_channels:outbound-delivery] giving up on message ${messageId} after attempt ${attempt} (${outcome.providerKey}): ${outcome.error}`
+      );
+      return;
+    }
+  }
+}
+async function reenqueue(payload, attempt) {
+  const next = {
+    ...payload,
+    attempt: attempt + 1
+  };
+  const delayMs = computeBackoffMs(attempt);
+  const queue = getCommunicationChannelsQueue(COMMUNICATION_CHANNELS_QUEUES.outbound);
+  await queue.enqueue(next, { delayMs });
+}
+export {
+  OUTBOUND_DELIVERY_MAX_ATTEMPTS,
+  handle as default,
+  metadata
+};
+//# sourceMappingURL=outbound-delivery.js.map

package/dist/modules/communication_channels/workers/outbound-delivery.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/communication_channels/workers/outbound-delivery.ts"],
+  "sourcesContent": ["import type { JobContext, QueuedJob, WorkerMeta } from '@open-mercato/queue'\nimport type { CommandBus } from '@open-mercato/shared/lib/commands'\nimport {\n  COMMUNICATION_CHANNELS_DELIVER_OUTBOUND_COMMAND_ID,\n  type DeliverOutboundMessageInput,\n  type DeliverOutboundMessageResult,\n} from '../commands/deliver-outbound-message'\nimport { computeBackoffMs } from '../lib/error-classification'\nimport { COMMUNICATION_CHANNELS_QUEUES, getCommunicationChannelsQueue } from '../lib/queue'\n\n/**\n * Worker payload \u2014 the subscriber enqueues `{ messageId, scope, attempt? }`.\n *\n * `attempt` starts at 1 on first enqueue. The worker increments it when\n * re-enqueueing for retry, until `MAX_ATTEMPTS` is reached.\n */\nexport type OutboundDeliveryPayload = {\n  messageId: string\n  scope: {\n    tenantId: string\n    organizationId: string | null\n  }\n  /** Attempt number, 1-based. Set by the subscriber for the first try; the worker increments on retry. */\n  attempt?: number\n  /** Force credential refresh on this attempt \u2014 used after a 401 from the provider. */\n  forceCredentialRefresh?: boolean\n}\n\nexport const OUTBOUND_DELIVERY_MAX_ATTEMPTS = 3\n\nexport const metadata: WorkerMeta = {\n  queue: COMMUNICATION_CHANNELS_QUEUES.outbound,\n  id: 'communication_channels:outbound-delivery',\n  concurrency: 10,\n}\n\ntype HandlerContext = JobContext & {\n  resolve: <T = unknown>(name: string) => T\n}\n\n/**\n * Outbound delivery worker.\n *\n * Dispatches the `deliver_outbound_message` command which performs the actual\n * send. The command returns a classified result:\n *   - `delivered` / `already_delivered` / `no_channel_link` \u2192 success, return.\n *   - `failed` with `transient: true` \u2192 re-enqueue with exponential backoff,\n *      incremented attempt, up to `OUTBOUND_DELIVERY_MAX_ATTEMPTS`.\n *   - `failed` with `transient: false` \u2192 permanent failure, no retry.\n *\n * The command already wrote the failure record + emitted `.delivery_failed`,\n * so the worker just decides whether to schedule another attempt.\n *\n * We DO NOT throw on a recorded delivery-failure outcome \u2014 that would let the\n * queue apply its own retry policy on top of ours, double-retrying. Explicit\n * re-enqueue with delayMs is the portable, controllable pattern. The one\n * exception is an *unexpected* exception from the command itself (e.g. a DB blip\n * that stopped it from recording anything): we re-enqueue up to our max and then\n * rethrow so the infrastructure failure surfaces to the queue's dead-letter\n * instead of vanishing. The command's idempotency prevents a double-send.\n */\nexport default async function handle(\n  job: QueuedJob<OutboundDeliveryPayload>,\n  ctx: HandlerContext,\n): Promise<void> {\n  const { messageId, scope, attempt = 1, forceCredentialRefresh } = job.payload\n\n  const commandBus = ctx.resolve<CommandBus>('commandBus')\n  const containerProxy = { resolve: ctx.resolve.bind(ctx) }\n  const commandCtx = {\n    container: containerProxy as never,\n    auth: null,\n    organizationScope: null,\n    selectedOrganizationId: scope.organizationId ?? null,\n    organizationIds: scope.organizationId ? [scope.organizationId] : null,\n  }\n\n  let outcome: DeliverOutboundMessageResult\n  try {\n    const { result } = await commandBus.execute<\n      DeliverOutboundMessageInput,\n      DeliverOutboundMessageResult\n    >(\n      COMMUNICATION_CHANNELS_DELIVER_OUTBOUND_COMMAND_ID,\n      {\n        input: { messageId, scope, forceCredentialRefresh },\n        ctx: commandCtx as never,\n      },\n    )\n    outcome = result\n  } catch (err) {\n    // Unexpected error inside the command itself (e.g. DB blip). Re-enqueue\n    // up to MAX_ATTEMPTS so we don't lose deliveries due to infrastructure flakes.\n    const errorMessage = err instanceof Error ? err.message : String(err)\n    console.warn(\n      `[communication_channels:outbound-delivery] command threw on attempt ${attempt} for message ${messageId}: ${errorMessage}`,\n    )\n    if (attempt < OUTBOUND_DELIVERY_MAX_ATTEMPTS) {\n      await reenqueue(job.payload, attempt)\n      return\n    }\n    // Attempts exhausted on an unexpected command exception \u2014 rethrow so the\n    // failure reaches the queue's dead-letter / observability (see header note).\n    throw err\n  }\n\n  switch (outcome.status) {\n    case 'delivered':\n    case 'already_delivered':\n    case 'no_channel_link':\n      return\n    case 'failed': {\n      // Reauth (401 / invalid_grant): the command already flipped the channel to\n      // `requires_reauth`. Give the credentials exactly one forced-refresh retry\n      // before giving up \u2014 a near-expiry access token whose proactive refresh\n      // was skipped can still recover here. If we already forced a refresh and\n      // still got a reauth error, the token is unrecoverable: stop (the operator\n      // must reconnect).\n      if (\n        outcome.requiresReauth &&\n        !forceCredentialRefresh &&\n        attempt < OUTBOUND_DELIVERY_MAX_ATTEMPTS\n      ) {\n        console.warn(\n          `[communication_channels:outbound-delivery] reauth failure on attempt ${attempt} for message ${messageId} (${outcome.providerKey}): ${outcome.error}. Retrying once with a forced credential refresh.`,\n        )\n        await reenqueue({ ...job.payload, forceCredentialRefresh: true }, attempt)\n        return\n      }\n      if (outcome.transient && attempt < OUTBOUND_DELIVERY_MAX_ATTEMPTS) {\n        console.warn(\n          `[communication_channels:outbound-delivery] transient failure on attempt ${attempt} for message ${messageId} (${outcome.providerKey}): ${outcome.error}. Re-enqueueing.`,\n        )\n        await reenqueue(job.payload, attempt)\n        return\n      }\n      // Permanent or attempts exhausted \u2014 `.delivery_failed` was already emitted\n      // by the command, so we stop here.\n      console.error(\n        `[communication_channels:outbound-delivery] giving up on message ${messageId} after attempt ${attempt} (${outcome.providerKey}): ${outcome.error}`,\n      )\n      return\n    }\n  }\n}\n\nasync function reenqueue(payload: OutboundDeliveryPayload, attempt: number): Promise<void> {\n  const next: OutboundDeliveryPayload = {\n    ...payload,\n    attempt: attempt + 1,\n  }\n  const delayMs = computeBackoffMs(attempt)\n  const queue = getCommunicationChannelsQueue(COMMUNICATION_CHANNELS_QUEUES.outbound)\n  await queue.enqueue(next as unknown as Record<string, unknown>, { delayMs })\n}\n"],
+  "mappings": "AAEA;AAAA,EACE;AAAA,OAGK;AACP,SAAS,wBAAwB;AACjC,SAAS,+BAA+B,qCAAqC;AAoBtE,MAAM,iCAAiC;AAEvC,MAAM,WAAuB;AAAA,EAClC,OAAO,8BAA8B;AAAA,EACrC,IAAI;AAAA,EACJ,aAAa;AACf;AA2BA,eAAO,OACL,KACA,KACe;AACf,QAAM,EAAE,WAAW,OAAO,UAAU,GAAG,uBAAuB,IAAI,IAAI;AAEtE,QAAM,aAAa,IAAI,QAAoB,YAAY;AACvD,QAAM,iBAAiB,EAAE,SAAS,IAAI,QAAQ,KAAK,GAAG,EAAE;AACxD,QAAM,aAAa;AAAA,IACjB,WAAW;AAAA,IACX,MAAM;AAAA,IACN,mBAAmB;AAAA,IACnB,wBAAwB,MAAM,kBAAkB;AAAA,IAChD,iBAAiB,MAAM,iBAAiB,CAAC,MAAM,cAAc,IAAI;AAAA,EACnE;AAEA,MAAI;AACJ,MAAI;AACF,UAAM,EAAE,OAAO,IAAI,MAAM,WAAW;AAAA,MAIlC;AAAA,MACA;AAAA,QACE,OAAO,EAAE,WAAW,OAAO,uBAAuB;AAAA,QAClD,KAAK;AAAA,MACP;AAAA,IACF;AACA,cAAU;AAAA,EACZ,SAAS,KAAK;AAGZ,UAAM,eAAe,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AACpE,YAAQ;AAAA,MACN,uEAAuE,OAAO,gBAAgB,SAAS,KAAK,YAAY;AAAA,IAC1H;AACA,QAAI,UAAU,gCAAgC;AAC5C,YAAM,UAAU,IAAI,SAAS,OAAO;AACpC;AAAA,IACF;AAGA,UAAM;AAAA,EACR;AAEA,UAAQ,QAAQ,QAAQ;AAAA,IACtB,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AACH;AAAA,IACF,KAAK,UAAU;AAOb,UACE,QAAQ,kBACR,CAAC,0BACD,UAAU,gCACV;AACA,gBAAQ;AAAA,UACN,wEAAwE,OAAO,gBAAgB,SAAS,KAAK,QAAQ,WAAW,MAAM,QAAQ,KAAK;AAAA,QACrJ;AACA,cAAM,UAAU,EAAE,GAAG,IAAI,SAAS,wBAAwB,KAAK,GAAG,OAAO;AACzE;AAAA,MACF;AACA,UAAI,QAAQ,aAAa,UAAU,gCAAgC;AACjE,gBAAQ;AAAA,UACN,2EAA2E,OAAO,gBAAgB,SAAS,KAAK,QAAQ,WAAW,MAAM,QAAQ,KAAK;AAAA,QACxJ;AACA,cAAM,UAAU,IAAI,SAAS,OAAO;AACpC;AAAA,MACF;AAGA,cAAQ;AAAA,QACN,mEAAmE,SAAS,kBAAkB,OAAO,KAAK,QAAQ,WAAW,MAAM,QAAQ,KAAK;AAAA,MAClJ;AACA;AAAA,IACF;AAAA,EACF;AACF;AAEA,eAAe,UAAU,SAAkC,SAAgC;AACzF,QAAM,OAAgC;AAAA,IACpC,GAAG;AAAA,IACH,SAAS,UAAU;AAAA,EACrB;AACA,QAAM,UAAU,iBAAiB,OAAO;AACxC,QAAM,QAAQ,8BAA8B,8BAA8B,QAAQ;AAClF,QAAM,MAAM,QAAQ,MAA4C,EAAE,QAAQ,CAAC;AAC7E;",
+  "names": []
+}