@open-mercato/core 0.6.6-develop.6205.1.109e4b6a84 → 0.6.6-develop.6227.1.2695efff30

package/dist/modules/feature_toggles/api/overrides/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../src/modules/feature_toggles/api/overrides/route.ts"],
-  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { Tenant } from '@open-mercato/core/modules/directory/data/entities'\nimport type { CommandBus } from '@open-mercato/shared/lib/commands'\nimport { serializeOperationMetadata } from '@open-mercato/shared/lib/commands/operationMetadata'\nimport { getOverrides } from '../../lib/queries'\nimport { isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { enforceCommandOptimisticLock } from '@open-mercato/shared/lib/crud/optimistic-lock-command'\nimport { logCrudAccess } from '@open-mercato/shared/lib/crud/factory'\nimport { FeatureToggleOverride } from '../../data/entities'\nimport { buildContext } from '../../lib/utils'\nimport { resolveFeatureCheckContext } from \"@open-mercato/core/modules/directory/utils/organizationScope\"\nimport { ProcessedChangeOverrideStateInput } from '../../data/validators'\nimport {\n  changeOverrideStateBaseSchema,\n  overrideListQuerySchema,\n  featureTogglesTag,\n  featureToggleOverrideListResponseSchema,\n  featureToggleErrorSchema,\n  changeOverrideStateResponseSchema,\n} from '../openapi'\nimport type { OpenApiRouteDoc, OpenApiMethodDoc } from '@open-mercato/shared/lib/openapi'\n\nexport async function GET(req: Request) {\n  const { auth, ctx, scope } = await buildContext(req)\n\n  const url = new URL(req.url)\n  const parsed = overrideListQuerySchema.safeParse(Object.fromEntries(url.searchParams.entries()))\n  if (!parsed.success) {\n    return NextResponse.json({ error: 'Invalid query parameters' }, { status: 400 })\n  }\n  const em = ctx.container.resolve('em') as EntityManager\n\n  const tenant = await em.findOne(Tenant, {\n    id: scope.tenantId,\n  })\n\n  if (!tenant) {\n    return NextResponse.json({\n      error: 'Tenant context required. Please select a tenant.'\n    }, { status: 400 })\n  }\n\n  const result = await getOverrides(em, tenant, parsed.data)\n\n  await logCrudAccess({\n    container: ctx.container,\n    auth,\n    request: req,\n    items: [...result.raw.toggles, ...result.raw.overrides],\n    idField: 'id',\n    resourceKind: 'feature_toggles.override_list',\n    tenantId: scope.tenantId ?? null,\n    query: parsed.data,\n    accessType: 'read:list',\n    fields: ['id', 'toggleId', 'tenantId', 'identifier', 'name', 'category']\n  })\n\n  return NextResponse.json({\n    items: result.items,\n    total: result.total,\n    totalPages: result.totalPages,\n    page: result.page,\n    pageSize: result.pageSize,\n    isSuperAdmin: auth.isSuperAdmin ?? false\n  })\n}\n\nexport async function PUT(req: Request) {\n  try {\n    const { ctx } = await buildContext(req)\n\n    const parsed = changeOverrideStateBaseSchema.safeParse(await req.json())\n    if (!parsed.success) {\n      return NextResponse.json({ error: 'Invalid payload', details: parsed.error.flatten() }, { status: 400 })\n    }\n\n    const { scope } = await resolveFeatureCheckContext({\n      container: ctx.container,\n      auth: ctx.auth,\n      request: req\n    })\n\n    if (!scope.tenantId) {\n      return NextResponse.json({\n        error: 'Tenant context required. Please select a tenant.'\n      }, { status: 400 })\n    }\n\n    // Optimistic lock: refuse a stale override overwrite when two admins edit the\n    // same global toggle override in parallel. Only enforced when an override row\n    // already exists (first set has no prior version). Strictly additive.\n    const em = ctx.container.resolve('em') as EntityManager\n    const existingOverride = await em.findOne(FeatureToggleOverride, {\n      tenantId: scope.tenantId,\n      toggle: { id: parsed.data.toggleId },\n    })\n    if (existingOverride) {\n      enforceCommandOptimisticLock({\n        resourceKind: 'feature_toggles.feature_toggle_override',\n        resourceId: existingOverride.id,\n        current: existingOverride.updatedAt ?? null,\n        request: req,\n      })\n    }\n\n    const commandBus = ctx.container.resolve('commandBus') as CommandBus\n    const { result, logEntry } = await commandBus.execute<ProcessedChangeOverrideStateInput, { overrideToggleId: string | null }>('feature_toggles.overrides.changeState', {\n      input: {\n        toggleId: parsed.data.toggleId,\n        tenantId: scope.tenantId,\n        isOverride: parsed.data.isOverride,\n        overrideValue: parsed.data.overrideValue,\n      },\n      ctx,\n    })\n\n    const response = NextResponse.json({\n      ok: true,\n      overrideToggleId: result?.overrideToggleId ?? null,\n    })\n\n    if (logEntry?.undoToken && logEntry?.id && logEntry?.commandId) {\n      response.headers.set(\n        'x-om-operation',\n        serializeOperationMetadata({\n          id: logEntry.id,\n          undoToken: logEntry.undoToken,\n          commandId: logEntry.commandId,\n          actionLabel: logEntry.actionLabel ?? null,\n          resourceKind: logEntry.resourceKind ?? 'feature_toggles.override',\n          resourceId: logEntry.resourceId ?? result?.overrideToggleId ?? null,\n          executedAt: logEntry.createdAt instanceof Date ? logEntry.createdAt.toISOString() : undefined,\n        })\n      )\n    }\n\n    return response\n  } catch (error) {\n    if (isCrudHttpError(error)) {\n      return NextResponse.json(error.body, { status: error.status })\n    }\n    const message = error instanceof Error ? error.message : 'Unknown error'\n    if (message === 'NOT_FOUND') return NextResponse.json({ error: 'Not found' }, { status: 404 })\n    if (message === 'INVALID_STATE' || message === 'INVALID_TOGGLE_ID' || message === 'INVALID_TENANT_ID') {\n      return NextResponse.json({ error: message }, { status: 400 })\n    }\n    console.error('feature_toggles.overrides.changeState failed', error)\n    return NextResponse.json({ error: 'Failed to update override' }, { status: 500 })\n  }\n}\n\nconst routeMetadata = {\n  GET: { requireAuth: true, requireFeatures: ['feature_toggles.view'] },\n  PUT: { requireAuth: true, requireFeatures: ['feature_toggles.manage'] },\n}\n\nexport const metadata = routeMetadata\n\nconst overrideGetDoc: OpenApiMethodDoc = {\n  summary: 'List overrides',\n  description: 'Returns list of feature toggle overrides.',\n  tags: [featureTogglesTag],\n  query: overrideListQuerySchema,\n  responses: [\n    { status: 200, description: 'List of overrides', schema: featureToggleOverrideListResponseSchema },\n  ],\n  errors: [\n    { status: 400, description: 'Invalid query parameters', schema: featureToggleErrorSchema },\n    { status: 401, description: 'Authentication required', schema: featureToggleErrorSchema },\n  ],\n}\n\nconst overridePutDoc: OpenApiMethodDoc = {\n  summary: 'Change override state',\n  description: 'Enable, disable or inherit a feature toggle for a specific tenant.',\n  tags: [featureTogglesTag],\n  requestBody: {\n    contentType: 'application/json',\n    schema: changeOverrideStateBaseSchema,\n    description: 'Override details.',\n  },\n  responses: [\n    { status: 200, description: 'Override updated', schema: changeOverrideStateResponseSchema },\n  ],\n  errors: [\n    { status: 400, description: 'Validation failed', schema: featureToggleErrorSchema },\n    { status: 401, description: 'Authentication required', schema: featureToggleErrorSchema },\n    { status: 404, description: 'Not found', schema: featureToggleErrorSchema },\n    { status: 500, description: 'Internal server error', schema: featureToggleErrorSchema },\n  ],\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: featureTogglesTag,\n  summary: 'Manage feature toggle overrides',\n  methods: {\n    GET: overrideGetDoc,\n    PUT: overridePutDoc,\n  },\n}\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAE7B,SAAS,cAAc;AAEvB,SAAS,kCAAkC;AAC3C,SAAS,oBAAoB;AAC7B,SAAS,uBAAuB;AAChC,SAAS,oCAAoC;AAC7C,SAAS,qBAAqB;AAC9B,SAAS,6BAA6B;AACtC,SAAS,oBAAoB;AAC7B,SAAS,kCAAkC;AAE3C;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAGP,eAAsB,IAAI,KAAc;AACtC,QAAM,EAAE,MAAM,KAAK,MAAM,IAAI,MAAM,aAAa,GAAG;AAEnD,QAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAC3B,QAAM,SAAS,wBAAwB,UAAU,OAAO,YAAY,IAAI,aAAa,QAAQ,CAAC,CAAC;AAC/F,MAAI,CAAC,OAAO,SAAS;AACnB,WAAO,aAAa,KAAK,EAAE,OAAO,2BAA2B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACjF;AACA,QAAM,KAAK,IAAI,UAAU,QAAQ,IAAI;AAErC,QAAM,SAAS,MAAM,GAAG,QAAQ,QAAQ;AAAA,IACtC,IAAI,MAAM;AAAA,EACZ,CAAC;AAED,MAAI,CAAC,QAAQ;AACX,WAAO,aAAa,KAAK;AAAA,MACvB,OAAO;AAAA,IACT,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACpB;AAEA,QAAM,SAAS,MAAM,aAAa,IAAI,QAAQ,OAAO,IAAI;AAEzD,QAAM,cAAc;AAAA,IAClB,WAAW,IAAI;AAAA,IACf;AAAA,IACA,SAAS;AAAA,IACT,OAAO,CAAC,GAAG,OAAO,IAAI,SAAS,GAAG,OAAO,IAAI,SAAS;AAAA,IACtD,SAAS;AAAA,IACT,cAAc;AAAA,IACd,UAAU,MAAM,YAAY;AAAA,IAC5B,OAAO,OAAO;AAAA,IACd,YAAY;AAAA,IACZ,QAAQ,CAAC,MAAM,YAAY,YAAY,cAAc,QAAQ,UAAU;AAAA,EACzE,CAAC;AAED,SAAO,aAAa,KAAK;AAAA,IACvB,OAAO,OAAO;AAAA,IACd,OAAO,OAAO;AAAA,IACd,YAAY,OAAO;AAAA,IACnB,MAAM,OAAO;AAAA,IACb,UAAU,OAAO;AAAA,IACjB,cAAc,KAAK,gBAAgB;AAAA,EACrC,CAAC;AACH;AAEA,eAAsB,IAAI,KAAc;AACtC,MAAI;AACF,UAAM,EAAE,IAAI,IAAI,MAAM,aAAa,GAAG;AAEtC,UAAM,SAAS,8BAA8B,UAAU,MAAM,IAAI,KAAK,CAAC;AACvE,QAAI,CAAC,OAAO,SAAS;AACnB,aAAO,aAAa,KAAK,EAAE,OAAO,mBAAmB,SAAS,OAAO,MAAM,QAAQ,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACzG;AAEA,UAAM,EAAE,MAAM,IAAI,MAAM,2BAA2B;AAAA,MACjD,WAAW,IAAI;AAAA,MACf,MAAM,IAAI;AAAA,MACV,SAAS;AAAA,IACX,CAAC;AAED,QAAI,CAAC,MAAM,UAAU;AACnB,aAAO,aAAa,KAAK;AAAA,QACvB,OAAO;AAAA,MACT,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACpB;AAKA,UAAM,KAAK,IAAI,UAAU,QAAQ,IAAI;AACrC,UAAM,mBAAmB,MAAM,GAAG,QAAQ,uBAAuB;AAAA,MAC/D,UAAU,MAAM;AAAA,MAChB,QAAQ,EAAE,IAAI,OAAO,KAAK,SAAS;AAAA,IACrC,CAAC;AACD,QAAI,kBAAkB;AACpB,mCAA6B;AAAA,QAC3B,cAAc;AAAA,QACd,YAAY,iBAAiB;AAAA,QAC7B,SAAS,iBAAiB,aAAa;AAAA,QACvC,SAAS;AAAA,MACX,CAAC;AAAA,IACH;AAEA,UAAM,aAAa,IAAI,UAAU,QAAQ,YAAY;AACrD,UAAM,EAAE,QAAQ,SAAS,IAAI,MAAM,WAAW,QAAgF,yCAAyC;AAAA,MACrK,OAAO;AAAA,QACL,UAAU,OAAO,KAAK;AAAA,QACtB,UAAU,MAAM;AAAA,QAChB,YAAY,OAAO,KAAK;AAAA,QACxB,eAAe,OAAO,KAAK;AAAA,MAC7B;AAAA,MACA;AAAA,IACF,CAAC;AAED,UAAM,WAAW,aAAa,KAAK;AAAA,MACjC,IAAI;AAAA,MACJ,kBAAkB,QAAQ,oBAAoB;AAAA,IAChD,CAAC;AAED,QAAI,UAAU,aAAa,UAAU,MAAM,UAAU,WAAW;AAC9D,eAAS,QAAQ;AAAA,QACf;AAAA,QACA,2BAA2B;AAAA,UACzB,IAAI,SAAS;AAAA,UACb,WAAW,SAAS;AAAA,UACpB,WAAW,SAAS;AAAA,UACpB,aAAa,SAAS,eAAe;AAAA,UACrC,cAAc,SAAS,gBAAgB;AAAA,UACvC,YAAY,SAAS,cAAc,QAAQ,oBAAoB;AAAA,UAC/D,YAAY,SAAS,qBAAqB,OAAO,SAAS,UAAU,YAAY,IAAI;AAAA,QACtF,CAAC;AAAA,MACH;AAAA,IACF;AAEA,WAAO;AAAA,EACT,SAAS,OAAO;AACd,QAAI,gBAAgB,KAAK,GAAG;AAC1B,aAAO,aAAa,KAAK,MAAM,MAAM,EAAE,QAAQ,MAAM,OAAO,CAAC;AAAA,IAC/D;AACA,UAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU;AACzD,QAAI,YAAY,YAAa,QAAO,aAAa,KAAK,EAAE,OAAO,YAAY,GAAG,EAAE,QAAQ,IAAI,CAAC;AAC7F,QAAI,YAAY,mBAAmB,YAAY,uBAAuB,YAAY,qBAAqB;AACrG,aAAO,aAAa,KAAK,EAAE,OAAO,QAAQ,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC9D;AACA,YAAQ,MAAM,gDAAgD,KAAK;AACnE,WAAO,aAAa,KAAK,EAAE,OAAO,4BAA4B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAClF;AACF;AAEA,MAAM,gBAAgB;AAAA,EACpB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,sBAAsB,EAAE;AAAA,EACpE,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,wBAAwB,EAAE;AACxE;AAEO,MAAM,WAAW;AAExB,MAAM,iBAAmC;AAAA,EACvC,SAAS;AAAA,EACT,aAAa;AAAA,EACb,MAAM,CAAC,iBAAiB;AAAA,EACxB,OAAO;AAAA,EACP,WAAW;AAAA,IACT,EAAE,QAAQ,KAAK,aAAa,qBAAqB,QAAQ,wCAAwC;AAAA,EACnG;AAAA,EACA,QAAQ;AAAA,IACN,EAAE,QAAQ,KAAK,aAAa,4BAA4B,QAAQ,yBAAyB;AAAA,IACzF,EAAE,QAAQ,KAAK,aAAa,2BAA2B,QAAQ,yBAAyB;AAAA,EAC1F;AACF;AAEA,MAAM,iBAAmC;AAAA,EACvC,SAAS;AAAA,EACT,aAAa;AAAA,EACb,MAAM,CAAC,iBAAiB;AAAA,EACxB,aAAa;AAAA,IACX,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,aAAa;AAAA,EACf;AAAA,EACA,WAAW;AAAA,IACT,EAAE,QAAQ,KAAK,aAAa,oBAAoB,QAAQ,kCAAkC;AAAA,EAC5F;AAAA,EACA,QAAQ;AAAA,IACN,EAAE,QAAQ,KAAK,aAAa,qBAAqB,QAAQ,yBAAyB;AAAA,IAClF,EAAE,QAAQ,KAAK,aAAa,2BAA2B,QAAQ,yBAAyB;AAAA,IACxF,EAAE,QAAQ,KAAK,aAAa,aAAa,QAAQ,yBAAyB;AAAA,IAC1E,EAAE,QAAQ,KAAK,aAAa,yBAAyB,QAAQ,yBAAyB;AAAA,EACxF;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,KAAK;AAAA,IACL,KAAK;AAAA,EACP;AACF;",
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { Tenant } from '@open-mercato/core/modules/directory/data/entities'\nimport type { CommandBus } from '@open-mercato/shared/lib/commands'\nimport { serializeOperationMetadata } from '@open-mercato/shared/lib/commands/operationMetadata'\nimport { getOverrides } from '../../lib/queries'\nimport { isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { enforceCommandOptimisticLock } from '@open-mercato/shared/lib/crud/optimistic-lock-command'\nimport {\n  runCrudMutationGuardAfterSuccess,\n  validateCrudMutationGuard,\n} from '@open-mercato/shared/lib/crud/mutation-guard'\nimport { logCrudAccess } from '@open-mercato/shared/lib/crud/factory'\nimport { FeatureToggleOverride } from '../../data/entities'\nimport { buildContext } from '../../lib/utils'\nimport { resolveFeatureCheckContext } from \"@open-mercato/core/modules/directory/utils/organizationScope\"\nimport { ProcessedChangeOverrideStateInput } from '../../data/validators'\nimport {\n  changeOverrideStateBaseSchema,\n  overrideListQuerySchema,\n  featureTogglesTag,\n  featureToggleOverrideListResponseSchema,\n  featureToggleErrorSchema,\n  changeOverrideStateResponseSchema,\n} from '../openapi'\nimport type { OpenApiRouteDoc, OpenApiMethodDoc } from '@open-mercato/shared/lib/openapi'\n\nexport async function GET(req: Request) {\n  const { auth, ctx, scope } = await buildContext(req)\n\n  const url = new URL(req.url)\n  const parsed = overrideListQuerySchema.safeParse(Object.fromEntries(url.searchParams.entries()))\n  if (!parsed.success) {\n    return NextResponse.json({ error: 'Invalid query parameters' }, { status: 400 })\n  }\n  const em = ctx.container.resolve('em') as EntityManager\n\n  const tenant = await em.findOne(Tenant, {\n    id: scope.tenantId,\n  })\n\n  if (!tenant) {\n    return NextResponse.json({\n      error: 'Tenant context required. Please select a tenant.'\n    }, { status: 400 })\n  }\n\n  const result = await getOverrides(em, tenant, parsed.data)\n\n  await logCrudAccess({\n    container: ctx.container,\n    auth,\n    request: req,\n    items: [...result.raw.toggles, ...result.raw.overrides],\n    idField: 'id',\n    resourceKind: 'feature_toggles.override_list',\n    tenantId: scope.tenantId ?? null,\n    query: parsed.data,\n    accessType: 'read:list',\n    fields: ['id', 'toggleId', 'tenantId', 'identifier', 'name', 'category']\n  })\n\n  return NextResponse.json({\n    items: result.items,\n    total: result.total,\n    totalPages: result.totalPages,\n    page: result.page,\n    pageSize: result.pageSize,\n    isSuperAdmin: auth.isSuperAdmin ?? false\n  })\n}\n\nexport async function PUT(req: Request) {\n  try {\n    const { ctx } = await buildContext(req)\n\n    const parsed = changeOverrideStateBaseSchema.safeParse(await req.json())\n    if (!parsed.success) {\n      return NextResponse.json({ error: 'Invalid payload', details: parsed.error.flatten() }, { status: 400 })\n    }\n\n    const { scope, organizationId } = await resolveFeatureCheckContext({\n      container: ctx.container,\n      auth: ctx.auth,\n      request: req\n    })\n\n    if (!scope.tenantId) {\n      return NextResponse.json({\n        error: 'Tenant context required. Please select a tenant.'\n      }, { status: 400 })\n    }\n\n    // Optimistic lock: refuse a stale override overwrite when two admins edit the\n    // same global toggle override in parallel. Only enforced when an override row\n    // already exists (first set has no prior version). Strictly additive.\n    const em = ctx.container.resolve('em') as EntityManager\n    const existingOverride = await em.findOne(FeatureToggleOverride, {\n      tenantId: scope.tenantId,\n      toggle: { id: parsed.data.toggleId },\n    })\n    if (existingOverride) {\n      enforceCommandOptimisticLock({\n        resourceKind: 'feature_toggles.feature_toggle_override',\n        resourceId: existingOverride.id,\n        current: existingOverride.updatedAt ?? null,\n        request: req,\n      })\n    }\n\n    // Run the CRUD mutation guard lifecycle so this custom write route honors\n    // module-level guard injections (and after-success hooks) like every other\n    // mutating endpoint. The override either updates an existing row or creates a\n    // new one, so the resource id falls back to the toggle id when no row exists.\n    const guardUserId = ctx.auth?.userId ?? ctx.auth?.sub ?? null\n    if (!guardUserId) {\n      return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n    }\n    const guardResourceKind = 'feature_toggles.feature_toggle_override'\n    const guardResourceId = existingOverride?.id ?? parsed.data.toggleId\n    const guardResult = await validateCrudMutationGuard(ctx.container, {\n      tenantId: scope.tenantId,\n      organizationId: organizationId ?? null,\n      userId: guardUserId,\n      resourceKind: guardResourceKind,\n      resourceId: guardResourceId,\n      operation: 'update',\n      requestMethod: req.method,\n      requestHeaders: req.headers,\n      mutationPayload: parsed.data,\n    })\n    if (guardResult && !guardResult.ok) {\n      return NextResponse.json(guardResult.body, { status: guardResult.status })\n    }\n\n    const commandBus = ctx.container.resolve('commandBus') as CommandBus\n    const { result, logEntry } = await commandBus.execute<ProcessedChangeOverrideStateInput, { overrideToggleId: string | null }>('feature_toggles.overrides.changeState', {\n      input: {\n        toggleId: parsed.data.toggleId,\n        tenantId: scope.tenantId,\n        isOverride: parsed.data.isOverride,\n        overrideValue: parsed.data.overrideValue,\n      },\n      ctx,\n    })\n\n    if (guardResult?.ok && guardResult.shouldRunAfterSuccess) {\n      await runCrudMutationGuardAfterSuccess(ctx.container, {\n        tenantId: scope.tenantId,\n        organizationId: organizationId ?? null,\n        userId: guardUserId,\n        resourceKind: guardResourceKind,\n        resourceId: result?.overrideToggleId ?? guardResourceId,\n        operation: 'update',\n        requestMethod: req.method,\n        requestHeaders: req.headers,\n        metadata: guardResult.metadata ?? null,\n      })\n    }\n\n    const response = NextResponse.json({\n      ok: true,\n      overrideToggleId: result?.overrideToggleId ?? null,\n    })\n\n    if (logEntry?.undoToken && logEntry?.id && logEntry?.commandId) {\n      response.headers.set(\n        'x-om-operation',\n        serializeOperationMetadata({\n          id: logEntry.id,\n          undoToken: logEntry.undoToken,\n          commandId: logEntry.commandId,\n          actionLabel: logEntry.actionLabel ?? null,\n          resourceKind: logEntry.resourceKind ?? 'feature_toggles.override',\n          resourceId: logEntry.resourceId ?? result?.overrideToggleId ?? null,\n          executedAt: logEntry.createdAt instanceof Date ? logEntry.createdAt.toISOString() : undefined,\n        })\n      )\n    }\n\n    return response\n  } catch (error) {\n    if (isCrudHttpError(error)) {\n      return NextResponse.json(error.body, { status: error.status })\n    }\n    const message = error instanceof Error ? error.message : 'Unknown error'\n    if (message === 'NOT_FOUND') return NextResponse.json({ error: 'Not found' }, { status: 404 })\n    if (message === 'INVALID_STATE' || message === 'INVALID_TOGGLE_ID' || message === 'INVALID_TENANT_ID') {\n      return NextResponse.json({ error: message }, { status: 400 })\n    }\n    console.error('feature_toggles.overrides.changeState failed', error)\n    return NextResponse.json({ error: 'Failed to update override' }, { status: 500 })\n  }\n}\n\nconst routeMetadata = {\n  GET: { requireAuth: true, requireFeatures: ['feature_toggles.view'] },\n  PUT: { requireAuth: true, requireFeatures: ['feature_toggles.manage'] },\n}\n\nexport const metadata = routeMetadata\n\nconst overrideGetDoc: OpenApiMethodDoc = {\n  summary: 'List overrides',\n  description: 'Returns list of feature toggle overrides.',\n  tags: [featureTogglesTag],\n  query: overrideListQuerySchema,\n  responses: [\n    { status: 200, description: 'List of overrides', schema: featureToggleOverrideListResponseSchema },\n  ],\n  errors: [\n    { status: 400, description: 'Invalid query parameters', schema: featureToggleErrorSchema },\n    { status: 401, description: 'Authentication required', schema: featureToggleErrorSchema },\n  ],\n}\n\nconst overridePutDoc: OpenApiMethodDoc = {\n  summary: 'Change override state',\n  description: 'Enable, disable or inherit a feature toggle for a specific tenant.',\n  tags: [featureTogglesTag],\n  requestBody: {\n    contentType: 'application/json',\n    schema: changeOverrideStateBaseSchema,\n    description: 'Override details.',\n  },\n  responses: [\n    { status: 200, description: 'Override updated', schema: changeOverrideStateResponseSchema },\n  ],\n  errors: [\n    { status: 400, description: 'Validation failed', schema: featureToggleErrorSchema },\n    { status: 401, description: 'Authentication required', schema: featureToggleErrorSchema },\n    { status: 404, description: 'Not found', schema: featureToggleErrorSchema },\n    { status: 500, description: 'Internal server error', schema: featureToggleErrorSchema },\n  ],\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: featureTogglesTag,\n  summary: 'Manage feature toggle overrides',\n  methods: {\n    GET: overrideGetDoc,\n    PUT: overridePutDoc,\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAE7B,SAAS,cAAc;AAEvB,SAAS,kCAAkC;AAC3C,SAAS,oBAAoB;AAC7B,SAAS,uBAAuB;AAChC,SAAS,oCAAoC;AAC7C;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAS,qBAAqB;AAC9B,SAAS,6BAA6B;AACtC,SAAS,oBAAoB;AAC7B,SAAS,kCAAkC;AAE3C;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAGP,eAAsB,IAAI,KAAc;AACtC,QAAM,EAAE,MAAM,KAAK,MAAM,IAAI,MAAM,aAAa,GAAG;AAEnD,QAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAC3B,QAAM,SAAS,wBAAwB,UAAU,OAAO,YAAY,IAAI,aAAa,QAAQ,CAAC,CAAC;AAC/F,MAAI,CAAC,OAAO,SAAS;AACnB,WAAO,aAAa,KAAK,EAAE,OAAO,2BAA2B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACjF;AACA,QAAM,KAAK,IAAI,UAAU,QAAQ,IAAI;AAErC,QAAM,SAAS,MAAM,GAAG,QAAQ,QAAQ;AAAA,IACtC,IAAI,MAAM;AAAA,EACZ,CAAC;AAED,MAAI,CAAC,QAAQ;AACX,WAAO,aAAa,KAAK;AAAA,MACvB,OAAO;AAAA,IACT,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACpB;AAEA,QAAM,SAAS,MAAM,aAAa,IAAI,QAAQ,OAAO,IAAI;AAEzD,QAAM,cAAc;AAAA,IAClB,WAAW,IAAI;AAAA,IACf;AAAA,IACA,SAAS;AAAA,IACT,OAAO,CAAC,GAAG,OAAO,IAAI,SAAS,GAAG,OAAO,IAAI,SAAS;AAAA,IACtD,SAAS;AAAA,IACT,cAAc;AAAA,IACd,UAAU,MAAM,YAAY;AAAA,IAC5B,OAAO,OAAO;AAAA,IACd,YAAY;AAAA,IACZ,QAAQ,CAAC,MAAM,YAAY,YAAY,cAAc,QAAQ,UAAU;AAAA,EACzE,CAAC;AAED,SAAO,aAAa,KAAK;AAAA,IACvB,OAAO,OAAO;AAAA,IACd,OAAO,OAAO;AAAA,IACd,YAAY,OAAO;AAAA,IACnB,MAAM,OAAO;AAAA,IACb,UAAU,OAAO;AAAA,IACjB,cAAc,KAAK,gBAAgB;AAAA,EACrC,CAAC;AACH;AAEA,eAAsB,IAAI,KAAc;AACtC,MAAI;AACF,UAAM,EAAE,IAAI,IAAI,MAAM,aAAa,GAAG;AAEtC,UAAM,SAAS,8BAA8B,UAAU,MAAM,IAAI,KAAK,CAAC;AACvE,QAAI,CAAC,OAAO,SAAS;AACnB,aAAO,aAAa,KAAK,EAAE,OAAO,mBAAmB,SAAS,OAAO,MAAM,QAAQ,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACzG;AAEA,UAAM,EAAE,OAAO,eAAe,IAAI,MAAM,2BAA2B;AAAA,MACjE,WAAW,IAAI;AAAA,MACf,MAAM,IAAI;AAAA,MACV,SAAS;AAAA,IACX,CAAC;AAED,QAAI,CAAC,MAAM,UAAU;AACnB,aAAO,aAAa,KAAK;AAAA,QACvB,OAAO;AAAA,MACT,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACpB;AAKA,UAAM,KAAK,IAAI,UAAU,QAAQ,IAAI;AACrC,UAAM,mBAAmB,MAAM,GAAG,QAAQ,uBAAuB;AAAA,MAC/D,UAAU,MAAM;AAAA,MAChB,QAAQ,EAAE,IAAI,OAAO,KAAK,SAAS;AAAA,IACrC,CAAC;AACD,QAAI,kBAAkB;AACpB,mCAA6B;AAAA,QAC3B,cAAc;AAAA,QACd,YAAY,iBAAiB;AAAA,QAC7B,SAAS,iBAAiB,aAAa;AAAA,QACvC,SAAS;AAAA,MACX,CAAC;AAAA,IACH;AAMA,UAAM,cAAc,IAAI,MAAM,UAAU,IAAI,MAAM,OAAO;AACzD,QAAI,CAAC,aAAa;AAChB,aAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACrE;AACA,UAAM,oBAAoB;AAC1B,UAAM,kBAAkB,kBAAkB,MAAM,OAAO,KAAK;AAC5D,UAAM,cAAc,MAAM,0BAA0B,IAAI,WAAW;AAAA,MACjE,UAAU,MAAM;AAAA,MAChB,gBAAgB,kBAAkB;AAAA,MAClC,QAAQ;AAAA,MACR,cAAc;AAAA,MACd,YAAY;AAAA,MACZ,WAAW;AAAA,MACX,eAAe,IAAI;AAAA,MACnB,gBAAgB,IAAI;AAAA,MACpB,iBAAiB,OAAO;AAAA,IAC1B,CAAC;AACD,QAAI,eAAe,CAAC,YAAY,IAAI;AAClC,aAAO,aAAa,KAAK,YAAY,MAAM,EAAE,QAAQ,YAAY,OAAO,CAAC;AAAA,IAC3E;AAEA,UAAM,aAAa,IAAI,UAAU,QAAQ,YAAY;AACrD,UAAM,EAAE,QAAQ,SAAS,IAAI,MAAM,WAAW,QAAgF,yCAAyC;AAAA,MACrK,OAAO;AAAA,QACL,UAAU,OAAO,KAAK;AAAA,QACtB,UAAU,MAAM;AAAA,QAChB,YAAY,OAAO,KAAK;AAAA,QACxB,eAAe,OAAO,KAAK;AAAA,MAC7B;AAAA,MACA;AAAA,IACF,CAAC;AAED,QAAI,aAAa,MAAM,YAAY,uBAAuB;AACxD,YAAM,iCAAiC,IAAI,WAAW;AAAA,QACpD,UAAU,MAAM;AAAA,QAChB,gBAAgB,kBAAkB;AAAA,QAClC,QAAQ;AAAA,QACR,cAAc;AAAA,QACd,YAAY,QAAQ,oBAAoB;AAAA,QACxC,WAAW;AAAA,QACX,eAAe,IAAI;AAAA,QACnB,gBAAgB,IAAI;AAAA,QACpB,UAAU,YAAY,YAAY;AAAA,MACpC,CAAC;AAAA,IACH;AAEA,UAAM,WAAW,aAAa,KAAK;AAAA,MACjC,IAAI;AAAA,MACJ,kBAAkB,QAAQ,oBAAoB;AAAA,IAChD,CAAC;AAED,QAAI,UAAU,aAAa,UAAU,MAAM,UAAU,WAAW;AAC9D,eAAS,QAAQ;AAAA,QACf;AAAA,QACA,2BAA2B;AAAA,UACzB,IAAI,SAAS;AAAA,UACb,WAAW,SAAS;AAAA,UACpB,WAAW,SAAS;AAAA,UACpB,aAAa,SAAS,eAAe;AAAA,UACrC,cAAc,SAAS,gBAAgB;AAAA,UACvC,YAAY,SAAS,cAAc,QAAQ,oBAAoB;AAAA,UAC/D,YAAY,SAAS,qBAAqB,OAAO,SAAS,UAAU,YAAY,IAAI;AAAA,QACtF,CAAC;AAAA,MACH;AAAA,IACF;AAEA,WAAO;AAAA,EACT,SAAS,OAAO;AACd,QAAI,gBAAgB,KAAK,GAAG;AAC1B,aAAO,aAAa,KAAK,MAAM,MAAM,EAAE,QAAQ,MAAM,OAAO,CAAC;AAAA,IAC/D;AACA,UAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU;AACzD,QAAI,YAAY,YAAa,QAAO,aAAa,KAAK,EAAE,OAAO,YAAY,GAAG,EAAE,QAAQ,IAAI,CAAC;AAC7F,QAAI,YAAY,mBAAmB,YAAY,uBAAuB,YAAY,qBAAqB;AACrG,aAAO,aAAa,KAAK,EAAE,OAAO,QAAQ,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC9D;AACA,YAAQ,MAAM,gDAAgD,KAAK;AACnE,WAAO,aAAa,KAAK,EAAE,OAAO,4BAA4B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAClF;AACF;AAEA,MAAM,gBAAgB;AAAA,EACpB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,sBAAsB,EAAE;AAAA,EACpE,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,wBAAwB,EAAE;AACxE;AAEO,MAAM,WAAW;AAExB,MAAM,iBAAmC;AAAA,EACvC,SAAS;AAAA,EACT,aAAa;AAAA,EACb,MAAM,CAAC,iBAAiB;AAAA,EACxB,OAAO;AAAA,EACP,WAAW;AAAA,IACT,EAAE,QAAQ,KAAK,aAAa,qBAAqB,QAAQ,wCAAwC;AAAA,EACnG;AAAA,EACA,QAAQ;AAAA,IACN,EAAE,QAAQ,KAAK,aAAa,4BAA4B,QAAQ,yBAAyB;AAAA,IACzF,EAAE,QAAQ,KAAK,aAAa,2BAA2B,QAAQ,yBAAyB;AAAA,EAC1F;AACF;AAEA,MAAM,iBAAmC;AAAA,EACvC,SAAS;AAAA,EACT,aAAa;AAAA,EACb,MAAM,CAAC,iBAAiB;AAAA,EACxB,aAAa;AAAA,IACX,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,aAAa;AAAA,EACf;AAAA,EACA,WAAW;AAAA,IACT,EAAE,QAAQ,KAAK,aAAa,oBAAoB,QAAQ,kCAAkC;AAAA,EAC5F;AAAA,EACA,QAAQ;AAAA,IACN,EAAE,QAAQ,KAAK,aAAa,qBAAqB,QAAQ,yBAAyB;AAAA,IAClF,EAAE,QAAQ,KAAK,aAAa,2BAA2B,QAAQ,yBAAyB;AAAA,IACxF,EAAE,QAAQ,KAAK,aAAa,aAAa,QAAQ,yBAAyB;AAAA,IAC1E,EAAE,QAAQ,KAAK,aAAa,yBAAyB,QAAQ,yBAAyB;AAAA,EACxF;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,KAAK;AAAA,IACL,KAAK;AAAA,EACP;AACF;",
   "names": []
 }

package/dist/modules/inbox_ops/api/emails/[id]/route.js

@@ -1,5 +1,9 @@
 import { NextResponse } from "next/server";
 import { findOneWithDecryption } from "@open-mercato/shared/lib/encryption/find";
+import {
+  runCrudMutationGuardAfterSuccess,
+  validateCrudMutationGuard
+} from "@open-mercato/shared/lib/crud/mutation-guard";
 import { InboxEmail } from "../../../data/entities.js";
 import {
   resolveRequestContext,
@@ -50,6 +54,19 @@ async function DELETE(req) {
       return NextResponse.json({ error: "Missing email ID" }, { status: 400 });
     }
     const ctx = await resolveRequestContext(req);
+    const guardResult = await validateCrudMutationGuard(ctx.container, {
+      tenantId: ctx.tenantId,
+      organizationId: ctx.organizationId,
+      userId: ctx.userId,
+      resourceKind: "inbox_ops:inbox_email",
+      resourceId: id,
+      operation: "delete",
+      requestMethod: req.method,
+      requestHeaders: req.headers
+    });
+    if (guardResult && !guardResult.ok) {
+      return NextResponse.json(guardResult.body, { status: guardResult.status });
+    }
     const updated = await ctx.em.nativeUpdate(
       InboxEmail,
       {
@@ -63,6 +80,19 @@ async function DELETE(req) {
     if (updated === 0) {
       return NextResponse.json({ error: "Email not found" }, { status: 404 });
     }
+    if (guardResult?.ok && guardResult.shouldRunAfterSuccess) {
+      await runCrudMutationGuardAfterSuccess(ctx.container, {
+        tenantId: ctx.tenantId,
+        organizationId: ctx.organizationId,
+        userId: ctx.userId,
+        resourceKind: "inbox_ops:inbox_email",
+        resourceId: id,
+        operation: "delete",
+        requestMethod: req.method,
+        requestHeaders: req.headers,
+        metadata: guardResult.metadata ?? null
+      });
+    }
     return NextResponse.json({ ok: true });
   } catch (err) {
     if (err instanceof UnauthorizedError) {

package/dist/modules/inbox_ops/api/emails/[id]/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../src/modules/inbox_ops/api/emails/%5Bid%5D/route.ts"],
-  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { InboxEmail } from '../../../data/entities'\nimport {\n  resolveRequestContext,\n  extractPathSegment,\n  UnauthorizedError,\n} from '../../routeHelpers'\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['inbox_ops.log.view'] },\n  DELETE: { requireAuth: true, requireFeatures: ['inbox_ops.proposals.manage'] },\n}\n\nexport async function GET(req: Request) {\n  try {\n    const url = new URL(req.url)\n    const id = extractPathSegment(url, 'emails')\n\n    if (!id) {\n      return NextResponse.json({ error: 'Missing email ID' }, { status: 400 })\n    }\n\n    const ctx = await resolveRequestContext(req)\n\n    const email = await findOneWithDecryption(\n      ctx.em,\n      InboxEmail,\n      {\n        id,\n        organizationId: ctx.organizationId,\n        tenantId: ctx.tenantId,\n        deletedAt: null,\n      },\n      undefined,\n      ctx.scope,\n    )\n\n    if (!email) {\n      return NextResponse.json({ error: 'Email not found' }, { status: 404 })\n    }\n\n    return NextResponse.json({ email })\n  } catch (err) {\n    if (err instanceof UnauthorizedError) {\n      return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n    }\n    console.error('[inbox_ops:emails:detail] Error:', err)\n    return NextResponse.json({ error: 'Failed to load email' }, { status: 500 })\n  }\n}\n\nexport async function DELETE(req: Request) {\n  try {\n    const url = new URL(req.url)\n    const id = extractPathSegment(url, 'emails')\n\n    if (!id) {\n      return NextResponse.json({ error: 'Missing email ID' }, { status: 400 })\n    }\n\n    const ctx = await resolveRequestContext(req)\n\n    const updated = await ctx.em.nativeUpdate(\n      InboxEmail,\n      {\n        id,\n        organizationId: ctx.organizationId,\n        tenantId: ctx.tenantId,\n        deletedAt: null,\n      },\n      { deletedAt: new Date() },\n    )\n\n    if (updated === 0) {\n      return NextResponse.json({ error: 'Email not found' }, { status: 404 })\n    }\n\n    return NextResponse.json({ ok: true })\n  } catch (err) {\n    if (err instanceof UnauthorizedError) {\n      return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n    }\n    console.error('[inbox_ops:emails:delete] Error:', err)\n    return NextResponse.json({ error: 'Failed to delete email' }, { status: 500 })\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'InboxOps',\n  summary: 'Email detail',\n  methods: {\n    GET: {\n      summary: 'Get email detail with parsed thread',\n      responses: [\n        { status: 200, description: 'Email detail' },\n        { status: 404, description: 'Email not found' },\n      ],\n    },\n    DELETE: {\n      summary: 'Soft-delete an inbox email',\n      responses: [\n        { status: 200, description: 'Email deleted' },\n        { status: 404, description: 'Email not found' },\n      ],\n    },\n  },\n}\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAE7B,SAAS,6BAA6B;AACtC,SAAS,kBAAkB;AAC3B;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEA,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,oBAAoB,EAAE;AAAA,EAClE,QAAQ,EAAE,aAAa,MAAM,iBAAiB,CAAC,4BAA4B,EAAE;AAC/E;AAEA,eAAsB,IAAI,KAAc;AACtC,MAAI;AACF,UAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAC3B,UAAM,KAAK,mBAAmB,KAAK,QAAQ;AAE3C,QAAI,CAAC,IAAI;AACP,aAAO,aAAa,KAAK,EAAE,OAAO,mBAAmB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACzE;AAEA,UAAM,MAAM,MAAM,sBAAsB,GAAG;AAE3C,UAAM,QAAQ,MAAM;AAAA,MAClB,IAAI;AAAA,MACJ;AAAA,MACA;AAAA,QACE;AAAA,QACA,gBAAgB,IAAI;AAAA,QACpB,UAAU,IAAI;AAAA,QACd,WAAW;AAAA,MACb;AAAA,MACA;AAAA,MACA,IAAI;AAAA,IACN;AAEA,QAAI,CAAC,OAAO;AACV,aAAO,aAAa,KAAK,EAAE,OAAO,kBAAkB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACxE;AAEA,WAAO,aAAa,KAAK,EAAE,MAAM,CAAC;AAAA,EACpC,SAAS,KAAK;AACZ,QAAI,eAAe,mBAAmB;AACpC,aAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACrE;AACA,YAAQ,MAAM,oCAAoC,GAAG;AACrD,WAAO,aAAa,KAAK,EAAE,OAAO,uBAAuB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC7E;AACF;AAEA,eAAsB,OAAO,KAAc;AACzC,MAAI;AACF,UAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAC3B,UAAM,KAAK,mBAAmB,KAAK,QAAQ;AAE3C,QAAI,CAAC,IAAI;AACP,aAAO,aAAa,KAAK,EAAE,OAAO,mBAAmB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACzE;AAEA,UAAM,MAAM,MAAM,sBAAsB,GAAG;AAE3C,UAAM,UAAU,MAAM,IAAI,GAAG;AAAA,MAC3B;AAAA,MACA;AAAA,QACE;AAAA,QACA,gBAAgB,IAAI;AAAA,QACpB,UAAU,IAAI;AAAA,QACd,WAAW;AAAA,MACb;AAAA,MACA,EAAE,WAAW,oBAAI,KAAK,EAAE;AAAA,IAC1B;AAEA,QAAI,YAAY,GAAG;AACjB,aAAO,aAAa,KAAK,EAAE,OAAO,kBAAkB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACxE;AAEA,WAAO,aAAa,KAAK,EAAE,IAAI,KAAK,CAAC;AAAA,EACvC,SAAS,KAAK;AACZ,QAAI,eAAe,mBAAmB;AACpC,aAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACrE;AACA,YAAQ,MAAM,oCAAoC,GAAG;AACrD,WAAO,aAAa,KAAK,EAAE,OAAO,yBAAyB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC/E;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,eAAe;AAAA,QAC3C,EAAE,QAAQ,KAAK,aAAa,kBAAkB;AAAA,MAChD;AAAA,IACF;AAAA,IACA,QAAQ;AAAA,MACN,SAAS;AAAA,MACT,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,gBAAgB;AAAA,QAC5C,EAAE,QAAQ,KAAK,aAAa,kBAAkB;AAAA,MAChD;AAAA,IACF;AAAA,EACF;AACF;",
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport {\n  runCrudMutationGuardAfterSuccess,\n  validateCrudMutationGuard,\n} from '@open-mercato/shared/lib/crud/mutation-guard'\nimport { InboxEmail } from '../../../data/entities'\nimport {\n  resolveRequestContext,\n  extractPathSegment,\n  UnauthorizedError,\n} from '../../routeHelpers'\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['inbox_ops.log.view'] },\n  DELETE: { requireAuth: true, requireFeatures: ['inbox_ops.proposals.manage'] },\n}\n\nexport async function GET(req: Request) {\n  try {\n    const url = new URL(req.url)\n    const id = extractPathSegment(url, 'emails')\n\n    if (!id) {\n      return NextResponse.json({ error: 'Missing email ID' }, { status: 400 })\n    }\n\n    const ctx = await resolveRequestContext(req)\n\n    const email = await findOneWithDecryption(\n      ctx.em,\n      InboxEmail,\n      {\n        id,\n        organizationId: ctx.organizationId,\n        tenantId: ctx.tenantId,\n        deletedAt: null,\n      },\n      undefined,\n      ctx.scope,\n    )\n\n    if (!email) {\n      return NextResponse.json({ error: 'Email not found' }, { status: 404 })\n    }\n\n    return NextResponse.json({ email })\n  } catch (err) {\n    if (err instanceof UnauthorizedError) {\n      return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n    }\n    console.error('[inbox_ops:emails:detail] Error:', err)\n    return NextResponse.json({ error: 'Failed to load email' }, { status: 500 })\n  }\n}\n\nexport async function DELETE(req: Request) {\n  try {\n    const url = new URL(req.url)\n    const id = extractPathSegment(url, 'emails')\n\n    if (!id) {\n      return NextResponse.json({ error: 'Missing email ID' }, { status: 400 })\n    }\n\n    const ctx = await resolveRequestContext(req)\n\n    const guardResult = await validateCrudMutationGuard(ctx.container, {\n      tenantId: ctx.tenantId,\n      organizationId: ctx.organizationId,\n      userId: ctx.userId,\n      resourceKind: 'inbox_ops:inbox_email',\n      resourceId: id,\n      operation: 'delete',\n      requestMethod: req.method,\n      requestHeaders: req.headers,\n    })\n    if (guardResult && !guardResult.ok) {\n      return NextResponse.json(guardResult.body, { status: guardResult.status })\n    }\n\n    const updated = await ctx.em.nativeUpdate(\n      InboxEmail,\n      {\n        id,\n        organizationId: ctx.organizationId,\n        tenantId: ctx.tenantId,\n        deletedAt: null,\n      },\n      { deletedAt: new Date() },\n    )\n\n    if (updated === 0) {\n      return NextResponse.json({ error: 'Email not found' }, { status: 404 })\n    }\n\n    if (guardResult?.ok && guardResult.shouldRunAfterSuccess) {\n      await runCrudMutationGuardAfterSuccess(ctx.container, {\n        tenantId: ctx.tenantId,\n        organizationId: ctx.organizationId,\n        userId: ctx.userId,\n        resourceKind: 'inbox_ops:inbox_email',\n        resourceId: id,\n        operation: 'delete',\n        requestMethod: req.method,\n        requestHeaders: req.headers,\n        metadata: guardResult.metadata ?? null,\n      })\n    }\n\n    return NextResponse.json({ ok: true })\n  } catch (err) {\n    if (err instanceof UnauthorizedError) {\n      return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n    }\n    console.error('[inbox_ops:emails:delete] Error:', err)\n    return NextResponse.json({ error: 'Failed to delete email' }, { status: 500 })\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'InboxOps',\n  summary: 'Email detail',\n  methods: {\n    GET: {\n      summary: 'Get email detail with parsed thread',\n      responses: [\n        { status: 200, description: 'Email detail' },\n        { status: 404, description: 'Email not found' },\n      ],\n    },\n    DELETE: {\n      summary: 'Soft-delete an inbox email',\n      responses: [\n        { status: 200, description: 'Email deleted' },\n        { status: 404, description: 'Email not found' },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAE7B,SAAS,6BAA6B;AACtC;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAS,kBAAkB;AAC3B;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEA,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,oBAAoB,EAAE;AAAA,EAClE,QAAQ,EAAE,aAAa,MAAM,iBAAiB,CAAC,4BAA4B,EAAE;AAC/E;AAEA,eAAsB,IAAI,KAAc;AACtC,MAAI;AACF,UAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAC3B,UAAM,KAAK,mBAAmB,KAAK,QAAQ;AAE3C,QAAI,CAAC,IAAI;AACP,aAAO,aAAa,KAAK,EAAE,OAAO,mBAAmB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACzE;AAEA,UAAM,MAAM,MAAM,sBAAsB,GAAG;AAE3C,UAAM,QAAQ,MAAM;AAAA,MAClB,IAAI;AAAA,MACJ;AAAA,MACA;AAAA,QACE;AAAA,QACA,gBAAgB,IAAI;AAAA,QACpB,UAAU,IAAI;AAAA,QACd,WAAW;AAAA,MACb;AAAA,MACA;AAAA,MACA,IAAI;AAAA,IACN;AAEA,QAAI,CAAC,OAAO;AACV,aAAO,aAAa,KAAK,EAAE,OAAO,kBAAkB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACxE;AAEA,WAAO,aAAa,KAAK,EAAE,MAAM,CAAC;AAAA,EACpC,SAAS,KAAK;AACZ,QAAI,eAAe,mBAAmB;AACpC,aAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACrE;AACA,YAAQ,MAAM,oCAAoC,GAAG;AACrD,WAAO,aAAa,KAAK,EAAE,OAAO,uBAAuB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC7E;AACF;AAEA,eAAsB,OAAO,KAAc;AACzC,MAAI;AACF,UAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAC3B,UAAM,KAAK,mBAAmB,KAAK,QAAQ;AAE3C,QAAI,CAAC,IAAI;AACP,aAAO,aAAa,KAAK,EAAE,OAAO,mBAAmB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACzE;AAEA,UAAM,MAAM,MAAM,sBAAsB,GAAG;AAE3C,UAAM,cAAc,MAAM,0BAA0B,IAAI,WAAW;AAAA,MACjE,UAAU,IAAI;AAAA,MACd,gBAAgB,IAAI;AAAA,MACpB,QAAQ,IAAI;AAAA,MACZ,cAAc;AAAA,MACd,YAAY;AAAA,MACZ,WAAW;AAAA,MACX,eAAe,IAAI;AAAA,MACnB,gBAAgB,IAAI;AAAA,IACtB,CAAC;AACD,QAAI,eAAe,CAAC,YAAY,IAAI;AAClC,aAAO,aAAa,KAAK,YAAY,MAAM,EAAE,QAAQ,YAAY,OAAO,CAAC;AAAA,IAC3E;AAEA,UAAM,UAAU,MAAM,IAAI,GAAG;AAAA,MAC3B;AAAA,MACA;AAAA,QACE;AAAA,QACA,gBAAgB,IAAI;AAAA,QACpB,UAAU,IAAI;AAAA,QACd,WAAW;AAAA,MACb;AAAA,MACA,EAAE,WAAW,oBAAI,KAAK,EAAE;AAAA,IAC1B;AAEA,QAAI,YAAY,GAAG;AACjB,aAAO,aAAa,KAAK,EAAE,OAAO,kBAAkB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACxE;AAEA,QAAI,aAAa,MAAM,YAAY,uBAAuB;AACxD,YAAM,iCAAiC,IAAI,WAAW;AAAA,QACpD,UAAU,IAAI;AAAA,QACd,gBAAgB,IAAI;AAAA,QACpB,QAAQ,IAAI;AAAA,QACZ,cAAc;AAAA,QACd,YAAY;AAAA,QACZ,WAAW;AAAA,QACX,eAAe,IAAI;AAAA,QACnB,gBAAgB,IAAI;AAAA,QACpB,UAAU,YAAY,YAAY;AAAA,MACpC,CAAC;AAAA,IACH;AAEA,WAAO,aAAa,KAAK,EAAE,IAAI,KAAK,CAAC;AAAA,EACvC,SAAS,KAAK;AACZ,QAAI,eAAe,mBAAmB;AACpC,aAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACrE;AACA,YAAQ,MAAM,oCAAoC,GAAG;AACrD,WAAO,aAAa,KAAK,EAAE,OAAO,yBAAyB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC/E;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,eAAe;AAAA,QAC3C,EAAE,QAAQ,KAAK,aAAa,kBAAkB;AAAA,MAChD;AAAA,IACF;AAAA,IACA,QAAQ;AAAA,MACN,SAAS;AAAA,MACT,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,gBAAgB;AAAA,QAC5C,EAAE,QAAQ,KAAK,aAAa,kBAAkB;AAAA,MAChD;AAAA,IACF;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/modules/inbox_ops/api/proposals/[id]/accept-all/route.js

@@ -1,5 +1,9 @@
 import { NextResponse } from "next/server";
 import { runWithCacheTenant } from "@open-mercato/cache";
+import {
+  runCrudMutationGuardAfterSuccess,
+  validateCrudMutationGuard
+} from "@open-mercato/shared/lib/crud/mutation-guard";
 import { acceptAllActions } from "../../../../lib/executionEngine.js";
 import { resolveCache, invalidateCountsCache } from "../../../../lib/cache.js";
 import {
@@ -18,6 +22,19 @@ async function POST(req) {
     const ctx = await resolveRequestContext(req);
     const proposal = await resolveProposal(new URL(req.url), ctx);
     if (isErrorResponse(proposal)) return proposal;
+    const guardResult = await validateCrudMutationGuard(ctx.container, {
+      tenantId: ctx.tenantId,
+      organizationId: ctx.organizationId,
+      userId: ctx.userId,
+      resourceKind: "inbox_ops:inbox_proposal",
+      resourceId: proposal.id,
+      operation: "custom",
+      requestMethod: req.method,
+      requestHeaders: req.headers
+    });
+    if (guardResult && !guardResult.ok) {
+      return NextResponse.json(guardResult.body, { status: guardResult.status });
+    }
     const entities = resolveCrossModuleEntities(ctx.container);
     const { results, stoppedOnFailure } = await acceptAllActions(
       proposal.id,
@@ -25,6 +42,19 @@ async function POST(req) {
     );
     const succeeded = results.filter((r) => r.success).length;
     const failed = results.filter((r) => !r.success).length;
+    if (guardResult?.ok && guardResult.shouldRunAfterSuccess) {
+      await runCrudMutationGuardAfterSuccess(ctx.container, {
+        tenantId: ctx.tenantId,
+        organizationId: ctx.organizationId,
+        userId: ctx.userId,
+        resourceKind: "inbox_ops:inbox_proposal",
+        resourceId: proposal.id,
+        operation: "custom",
+        requestMethod: req.method,
+        requestHeaders: req.headers,
+        metadata: guardResult.metadata ?? null
+      });
+    }
     const cache = resolveCache(ctx.container);
     await runWithCacheTenant(ctx.tenantId, () => invalidateCountsCache(cache, ctx.tenantId));
     return NextResponse.json({ ok: !stoppedOnFailure, succeeded, failed, stoppedOnFailure, results });

package/dist/modules/inbox_ops/api/proposals/[id]/accept-all/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../../src/modules/inbox_ops/api/proposals/%5Bid%5D/accept-all/route.ts"],
-  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { runWithCacheTenant } from '@open-mercato/cache'\nimport { acceptAllActions } from '../../../../lib/executionEngine'\nimport { resolveCache, invalidateCountsCache } from '../../../../lib/cache'\nimport {\n  resolveRequestContext,\n  resolveProposal,\n  resolveCrossModuleEntities,\n  toExecutionContext,\n  handleRouteError,\n  isErrorResponse,\n} from '../../../routeHelpers'\n\nexport const metadata = {\n  POST: { requireAuth: true, requireFeatures: ['inbox_ops.proposals.manage'] },\n}\n\nexport async function POST(req: Request) {\n  try {\n    const ctx = await resolveRequestContext(req)\n    const proposal = await resolveProposal(new URL(req.url), ctx)\n    if (isErrorResponse(proposal)) return proposal\n\n    const entities = resolveCrossModuleEntities(ctx.container)\n    const { results, stoppedOnFailure } = await acceptAllActions(\n      proposal.id,\n      toExecutionContext(ctx, entities),\n    )\n\n    const succeeded = results.filter((r) => r.success).length\n    const failed = results.filter((r) => !r.success).length\n\n    const cache = resolveCache(ctx.container)\n    await runWithCacheTenant(ctx.tenantId, () => invalidateCountsCache(cache, ctx.tenantId))\n\n    return NextResponse.json({ ok: !stoppedOnFailure, succeeded, failed, stoppedOnFailure, results })\n  } catch (err) {\n    return handleRouteError(err, 'accept all actions')\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'InboxOps',\n  summary: 'Accept all actions',\n  methods: {\n    POST: {\n      summary: 'Accept and execute all pending actions in a proposal',\n      responses: [\n        { status: 200, description: 'All actions processed' },\n        { status: 404, description: 'Proposal not found' },\n      ],\n    },\n  },\n}\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAE7B,SAAS,0BAA0B;AACnC,SAAS,wBAAwB;AACjC,SAAS,cAAc,6BAA6B;AACpD;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEA,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,4BAA4B,EAAE;AAC7E;AAEA,eAAsB,KAAK,KAAc;AACvC,MAAI;AACF,UAAM,MAAM,MAAM,sBAAsB,GAAG;AAC3C,UAAM,WAAW,MAAM,gBAAgB,IAAI,IAAI,IAAI,GAAG,GAAG,GAAG;AAC5D,QAAI,gBAAgB,QAAQ,EAAG,QAAO;AAEtC,UAAM,WAAW,2BAA2B,IAAI,SAAS;AACzD,UAAM,EAAE,SAAS,iBAAiB,IAAI,MAAM;AAAA,MAC1C,SAAS;AAAA,MACT,mBAAmB,KAAK,QAAQ;AAAA,IAClC;AAEA,UAAM,YAAY,QAAQ,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE;AACnD,UAAM,SAAS,QAAQ,OAAO,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE;AAEjD,UAAM,QAAQ,aAAa,IAAI,SAAS;AACxC,UAAM,mBAAmB,IAAI,UAAU,MAAM,sBAAsB,OAAO,IAAI,QAAQ,CAAC;AAEvF,WAAO,aAAa,KAAK,EAAE,IAAI,CAAC,kBAAkB,WAAW,QAAQ,kBAAkB,QAAQ,CAAC;AAAA,EAClG,SAAS,KAAK;AACZ,WAAO,iBAAiB,KAAK,oBAAoB;AAAA,EACnD;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,wBAAwB;AAAA,QACpD,EAAE,QAAQ,KAAK,aAAa,qBAAqB;AAAA,MACnD;AAAA,IACF;AAAA,EACF;AACF;",
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { runWithCacheTenant } from '@open-mercato/cache'\nimport {\n  runCrudMutationGuardAfterSuccess,\n  validateCrudMutationGuard,\n} from '@open-mercato/shared/lib/crud/mutation-guard'\nimport { acceptAllActions } from '../../../../lib/executionEngine'\nimport { resolveCache, invalidateCountsCache } from '../../../../lib/cache'\nimport {\n  resolveRequestContext,\n  resolveProposal,\n  resolveCrossModuleEntities,\n  toExecutionContext,\n  handleRouteError,\n  isErrorResponse,\n} from '../../../routeHelpers'\n\nexport const metadata = {\n  POST: { requireAuth: true, requireFeatures: ['inbox_ops.proposals.manage'] },\n}\n\nexport async function POST(req: Request) {\n  try {\n    const ctx = await resolveRequestContext(req)\n    const proposal = await resolveProposal(new URL(req.url), ctx)\n    if (isErrorResponse(proposal)) return proposal\n\n    const guardResult = await validateCrudMutationGuard(ctx.container, {\n      tenantId: ctx.tenantId,\n      organizationId: ctx.organizationId,\n      userId: ctx.userId,\n      resourceKind: 'inbox_ops:inbox_proposal',\n      resourceId: proposal.id,\n      operation: 'custom',\n      requestMethod: req.method,\n      requestHeaders: req.headers,\n    })\n    if (guardResult && !guardResult.ok) {\n      return NextResponse.json(guardResult.body, { status: guardResult.status })\n    }\n\n    const entities = resolveCrossModuleEntities(ctx.container)\n    const { results, stoppedOnFailure } = await acceptAllActions(\n      proposal.id,\n      toExecutionContext(ctx, entities),\n    )\n\n    const succeeded = results.filter((r) => r.success).length\n    const failed = results.filter((r) => !r.success).length\n\n    if (guardResult?.ok && guardResult.shouldRunAfterSuccess) {\n      await runCrudMutationGuardAfterSuccess(ctx.container, {\n        tenantId: ctx.tenantId,\n        organizationId: ctx.organizationId,\n        userId: ctx.userId,\n        resourceKind: 'inbox_ops:inbox_proposal',\n        resourceId: proposal.id,\n        operation: 'custom',\n        requestMethod: req.method,\n        requestHeaders: req.headers,\n        metadata: guardResult.metadata ?? null,\n      })\n    }\n\n    const cache = resolveCache(ctx.container)\n    await runWithCacheTenant(ctx.tenantId, () => invalidateCountsCache(cache, ctx.tenantId))\n\n    return NextResponse.json({ ok: !stoppedOnFailure, succeeded, failed, stoppedOnFailure, results })\n  } catch (err) {\n    return handleRouteError(err, 'accept all actions')\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'InboxOps',\n  summary: 'Accept all actions',\n  methods: {\n    POST: {\n      summary: 'Accept and execute all pending actions in a proposal',\n      responses: [\n        { status: 200, description: 'All actions processed' },\n        { status: 404, description: 'Proposal not found' },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAE7B,SAAS,0BAA0B;AACnC;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAS,wBAAwB;AACjC,SAAS,cAAc,6BAA6B;AACpD;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEA,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,4BAA4B,EAAE;AAC7E;AAEA,eAAsB,KAAK,KAAc;AACvC,MAAI;AACF,UAAM,MAAM,MAAM,sBAAsB,GAAG;AAC3C,UAAM,WAAW,MAAM,gBAAgB,IAAI,IAAI,IAAI,GAAG,GAAG,GAAG;AAC5D,QAAI,gBAAgB,QAAQ,EAAG,QAAO;AAEtC,UAAM,cAAc,MAAM,0BAA0B,IAAI,WAAW;AAAA,MACjE,UAAU,IAAI;AAAA,MACd,gBAAgB,IAAI;AAAA,MACpB,QAAQ,IAAI;AAAA,MACZ,cAAc;AAAA,MACd,YAAY,SAAS;AAAA,MACrB,WAAW;AAAA,MACX,eAAe,IAAI;AAAA,MACnB,gBAAgB,IAAI;AAAA,IACtB,CAAC;AACD,QAAI,eAAe,CAAC,YAAY,IAAI;AAClC,aAAO,aAAa,KAAK,YAAY,MAAM,EAAE,QAAQ,YAAY,OAAO,CAAC;AAAA,IAC3E;AAEA,UAAM,WAAW,2BAA2B,IAAI,SAAS;AACzD,UAAM,EAAE,SAAS,iBAAiB,IAAI,MAAM;AAAA,MAC1C,SAAS;AAAA,MACT,mBAAmB,KAAK,QAAQ;AAAA,IAClC;AAEA,UAAM,YAAY,QAAQ,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE;AACnD,UAAM,SAAS,QAAQ,OAAO,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE;AAEjD,QAAI,aAAa,MAAM,YAAY,uBAAuB;AACxD,YAAM,iCAAiC,IAAI,WAAW;AAAA,QACpD,UAAU,IAAI;AAAA,QACd,gBAAgB,IAAI;AAAA,QACpB,QAAQ,IAAI;AAAA,QACZ,cAAc;AAAA,QACd,YAAY,SAAS;AAAA,QACrB,WAAW;AAAA,QACX,eAAe,IAAI;AAAA,QACnB,gBAAgB,IAAI;AAAA,QACpB,UAAU,YAAY,YAAY;AAAA,MACpC,CAAC;AAAA,IACH;AAEA,UAAM,QAAQ,aAAa,IAAI,SAAS;AACxC,UAAM,mBAAmB,IAAI,UAAU,MAAM,sBAAsB,OAAO,IAAI,QAAQ,CAAC;AAEvF,WAAO,aAAa,KAAK,EAAE,IAAI,CAAC,kBAAkB,WAAW,QAAQ,kBAAkB,QAAQ,CAAC;AAAA,EAClG,SAAS,KAAK;AACZ,WAAO,iBAAiB,KAAK,oBAAoB;AAAA,EACnD;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,wBAAwB;AAAA,QACpD,EAAE,QAAQ,KAAK,aAAa,qBAAqB;AAAA,MACnD;AAAA,IACF;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/modules/inbox_ops/api/proposals/[id]/actions/[actionId]/route.js

@@ -1,5 +1,9 @@
 import { NextResponse } from "next/server";
 import { runWithCacheTenant } from "@open-mercato/cache";
+import {
+  runCrudMutationGuardAfterSuccess,
+  validateCrudMutationGuard
+} from "@open-mercato/shared/lib/crud/mutation-guard";
 import { actionEditSchema, validateActionPayloadForType } from "../../../../../data/validators.js";
 import { emitInboxOpsEvent } from "../../../../../events.js";
 import { resolveCache, invalidateCountsCache } from "../../../../../lib/cache.js";
@@ -31,8 +35,35 @@ async function PATCH(req) {
     if (!payloadValidation.success) {
       return NextResponse.json({ error: payloadValidation.error }, { status: 400 });
     }
+    const guardResult = await validateCrudMutationGuard(ctx.container, {
+      tenantId: ctx.tenantId,
+      organizationId: ctx.organizationId,
+      userId: ctx.userId,
+      resourceKind: "inbox_ops:inbox_proposal_action",
+      resourceId: action.id,
+      operation: "update",
+      requestMethod: req.method,
+      requestHeaders: req.headers,
+      mutationPayload: parsed.data
+    });
+    if (guardResult && !guardResult.ok) {
+      return NextResponse.json(guardResult.body, { status: guardResult.status });
+    }
     action.payload = mergedPayload;
     await ctx.em.flush();
+    if (guardResult?.ok && guardResult.shouldRunAfterSuccess) {
+      await runCrudMutationGuardAfterSuccess(ctx.container, {
+        tenantId: ctx.tenantId,
+        organizationId: ctx.organizationId,
+        userId: ctx.userId,
+        resourceKind: "inbox_ops:inbox_proposal_action",
+        resourceId: action.id,
+        operation: "update",
+        requestMethod: req.method,
+        requestHeaders: req.headers,
+        metadata: guardResult.metadata ?? null
+      });
+    }
     const cache = resolveCache(ctx.container);
     await runWithCacheTenant(ctx.tenantId, () => invalidateCountsCache(cache, ctx.tenantId));
     try {

package/dist/modules/inbox_ops/api/proposals/[id]/actions/[actionId]/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../../../src/modules/inbox_ops/api/proposals/%5Bid%5D/actions/%5BactionId%5D/route.ts"],
-  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { runWithCacheTenant } from '@open-mercato/cache'\nimport { actionEditSchema, validateActionPayloadForType } from '../../../../../data/validators'\nimport { emitInboxOpsEvent } from '../../../../../events'\nimport { resolveCache, invalidateCountsCache } from '../../../../../lib/cache'\nimport {\n  resolveRequestContext,\n  resolveActionAndProposal,\n  handleRouteError,\n  isErrorResponse,\n} from '../../../../routeHelpers'\n\nexport const metadata = {\n  PATCH: { requireAuth: true, requireFeatures: ['inbox_ops.proposals.manage'] },\n}\n\nexport async function PATCH(req: Request) {\n  try {\n    const body = await req.json()\n    const parsed = actionEditSchema.safeParse(body)\n    if (!parsed.success) {\n      return NextResponse.json({ error: 'Invalid payload', details: parsed.error.issues }, { status: 400 })\n    }\n\n    const ctx = await resolveRequestContext(req)\n    const resolved = await resolveActionAndProposal(new URL(req.url), ctx)\n    if (isErrorResponse(resolved)) return resolved\n\n    const { action } = resolved\n\n    if (action.status !== 'pending' && action.status !== 'failed') {\n      return NextResponse.json({ error: 'Action already processed' }, { status: 409 })\n    }\n\n    const mergedPayload = { ...action.payload as Record<string, unknown>, ...parsed.data.payload }\n    const payloadValidation = validateActionPayloadForType(action.actionType, mergedPayload)\n    if (!payloadValidation.success) {\n      return NextResponse.json({ error: payloadValidation.error }, { status: 400 })\n    }\n\n    action.payload = mergedPayload\n    await ctx.em.flush()\n\n    const cache = resolveCache(ctx.container)\n    await runWithCacheTenant(ctx.tenantId, () => invalidateCountsCache(cache, ctx.tenantId))\n\n    try {\n      await emitInboxOpsEvent('inbox_ops.action.edited', {\n        actionId: action.id,\n        proposalId: action.proposalId,\n        actionType: action.actionType,\n        tenantId: ctx.tenantId,\n        organizationId: ctx.organizationId,\n      })\n    } catch (eventError) {\n      console.error('[inbox_ops:action:edit] Failed to emit event:', eventError)\n    }\n\n    return NextResponse.json({ ok: true, action })\n  } catch (err) {\n    return handleRouteError(err, 'edit action')\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'InboxOps',\n  summary: 'Edit action',\n  methods: {\n    PATCH: {\n      summary: 'Edit action payload before accepting',\n      responses: [\n        { status: 200, description: 'Action updated' },\n        { status: 404, description: 'Action not found' },\n        { status: 409, description: 'Action already processed' },\n      ],\n    },\n  },\n}\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAE7B,SAAS,0BAA0B;AACnC,SAAS,kBAAkB,oCAAoC;AAC/D,SAAS,yBAAyB;AAClC,SAAS,cAAc,6BAA6B;AACpD;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEA,MAAM,WAAW;AAAA,EACtB,OAAO,EAAE,aAAa,MAAM,iBAAiB,CAAC,4BAA4B,EAAE;AAC9E;AAEA,eAAsB,MAAM,KAAc;AACxC,MAAI;AACF,UAAM,OAAO,MAAM,IAAI,KAAK;AAC5B,UAAM,SAAS,iBAAiB,UAAU,IAAI;AAC9C,QAAI,CAAC,OAAO,SAAS;AACnB,aAAO,aAAa,KAAK,EAAE,OAAO,mBAAmB,SAAS,OAAO,MAAM,OAAO,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACtG;AAEA,UAAM,MAAM,MAAM,sBAAsB,GAAG;AAC3C,UAAM,WAAW,MAAM,yBAAyB,IAAI,IAAI,IAAI,GAAG,GAAG,GAAG;AACrE,QAAI,gBAAgB,QAAQ,EAAG,QAAO;AAEtC,UAAM,EAAE,OAAO,IAAI;AAEnB,QAAI,OAAO,WAAW,aAAa,OAAO,WAAW,UAAU;AAC7D,aAAO,aAAa,KAAK,EAAE,OAAO,2BAA2B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACjF;AAEA,UAAM,gBAAgB,EAAE,GAAG,OAAO,SAAoC,GAAG,OAAO,KAAK,QAAQ;AAC7F,UAAM,oBAAoB,6BAA6B,OAAO,YAAY,aAAa;AACvF,QAAI,CAAC,kBAAkB,SAAS;AAC9B,aAAO,aAAa,KAAK,EAAE,OAAO,kBAAkB,MAAM,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC9E;AAEA,WAAO,UAAU;AACjB,UAAM,IAAI,GAAG,MAAM;AAEnB,UAAM,QAAQ,aAAa,IAAI,SAAS;AACxC,UAAM,mBAAmB,IAAI,UAAU,MAAM,sBAAsB,OAAO,IAAI,QAAQ,CAAC;AAEvF,QAAI;AACF,YAAM,kBAAkB,2BAA2B;AAAA,QACjD,UAAU,OAAO;AAAA,QACjB,YAAY,OAAO;AAAA,QACnB,YAAY,OAAO;AAAA,QACnB,UAAU,IAAI;AAAA,QACd,gBAAgB,IAAI;AAAA,MACtB,CAAC;AAAA,IACH,SAAS,YAAY;AACnB,cAAQ,MAAM,iDAAiD,UAAU;AAAA,IAC3E;AAEA,WAAO,aAAa,KAAK,EAAE,IAAI,MAAM,OAAO,CAAC;AAAA,EAC/C,SAAS,KAAK;AACZ,WAAO,iBAAiB,KAAK,aAAa;AAAA,EAC5C;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,OAAO;AAAA,MACL,SAAS;AAAA,MACT,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,iBAAiB;AAAA,QAC7C,EAAE,QAAQ,KAAK,aAAa,mBAAmB;AAAA,QAC/C,EAAE,QAAQ,KAAK,aAAa,2BAA2B;AAAA,MACzD;AAAA,IACF;AAAA,EACF;AACF;",
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { runWithCacheTenant } from '@open-mercato/cache'\nimport {\n  runCrudMutationGuardAfterSuccess,\n  validateCrudMutationGuard,\n} from '@open-mercato/shared/lib/crud/mutation-guard'\nimport { actionEditSchema, validateActionPayloadForType } from '../../../../../data/validators'\nimport { emitInboxOpsEvent } from '../../../../../events'\nimport { resolveCache, invalidateCountsCache } from '../../../../../lib/cache'\nimport {\n  resolveRequestContext,\n  resolveActionAndProposal,\n  handleRouteError,\n  isErrorResponse,\n} from '../../../../routeHelpers'\n\nexport const metadata = {\n  PATCH: { requireAuth: true, requireFeatures: ['inbox_ops.proposals.manage'] },\n}\n\nexport async function PATCH(req: Request) {\n  try {\n    const body = await req.json()\n    const parsed = actionEditSchema.safeParse(body)\n    if (!parsed.success) {\n      return NextResponse.json({ error: 'Invalid payload', details: parsed.error.issues }, { status: 400 })\n    }\n\n    const ctx = await resolveRequestContext(req)\n    const resolved = await resolveActionAndProposal(new URL(req.url), ctx)\n    if (isErrorResponse(resolved)) return resolved\n\n    const { action } = resolved\n\n    if (action.status !== 'pending' && action.status !== 'failed') {\n      return NextResponse.json({ error: 'Action already processed' }, { status: 409 })\n    }\n\n    const mergedPayload = { ...action.payload as Record<string, unknown>, ...parsed.data.payload }\n    const payloadValidation = validateActionPayloadForType(action.actionType, mergedPayload)\n    if (!payloadValidation.success) {\n      return NextResponse.json({ error: payloadValidation.error }, { status: 400 })\n    }\n\n    const guardResult = await validateCrudMutationGuard(ctx.container, {\n      tenantId: ctx.tenantId,\n      organizationId: ctx.organizationId,\n      userId: ctx.userId,\n      resourceKind: 'inbox_ops:inbox_proposal_action',\n      resourceId: action.id,\n      operation: 'update',\n      requestMethod: req.method,\n      requestHeaders: req.headers,\n      mutationPayload: parsed.data,\n    })\n    if (guardResult && !guardResult.ok) {\n      return NextResponse.json(guardResult.body, { status: guardResult.status })\n    }\n\n    action.payload = mergedPayload\n    await ctx.em.flush()\n\n    if (guardResult?.ok && guardResult.shouldRunAfterSuccess) {\n      await runCrudMutationGuardAfterSuccess(ctx.container, {\n        tenantId: ctx.tenantId,\n        organizationId: ctx.organizationId,\n        userId: ctx.userId,\n        resourceKind: 'inbox_ops:inbox_proposal_action',\n        resourceId: action.id,\n        operation: 'update',\n        requestMethod: req.method,\n        requestHeaders: req.headers,\n        metadata: guardResult.metadata ?? null,\n      })\n    }\n\n    const cache = resolveCache(ctx.container)\n    await runWithCacheTenant(ctx.tenantId, () => invalidateCountsCache(cache, ctx.tenantId))\n\n    try {\n      await emitInboxOpsEvent('inbox_ops.action.edited', {\n        actionId: action.id,\n        proposalId: action.proposalId,\n        actionType: action.actionType,\n        tenantId: ctx.tenantId,\n        organizationId: ctx.organizationId,\n      })\n    } catch (eventError) {\n      console.error('[inbox_ops:action:edit] Failed to emit event:', eventError)\n    }\n\n    return NextResponse.json({ ok: true, action })\n  } catch (err) {\n    return handleRouteError(err, 'edit action')\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'InboxOps',\n  summary: 'Edit action',\n  methods: {\n    PATCH: {\n      summary: 'Edit action payload before accepting',\n      responses: [\n        { status: 200, description: 'Action updated' },\n        { status: 404, description: 'Action not found' },\n        { status: 409, description: 'Action already processed' },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAE7B,SAAS,0BAA0B;AACnC;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAS,kBAAkB,oCAAoC;AAC/D,SAAS,yBAAyB;AAClC,SAAS,cAAc,6BAA6B;AACpD;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEA,MAAM,WAAW;AAAA,EACtB,OAAO,EAAE,aAAa,MAAM,iBAAiB,CAAC,4BAA4B,EAAE;AAC9E;AAEA,eAAsB,MAAM,KAAc;AACxC,MAAI;AACF,UAAM,OAAO,MAAM,IAAI,KAAK;AAC5B,UAAM,SAAS,iBAAiB,UAAU,IAAI;AAC9C,QAAI,CAAC,OAAO,SAAS;AACnB,aAAO,aAAa,KAAK,EAAE,OAAO,mBAAmB,SAAS,OAAO,MAAM,OAAO,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACtG;AAEA,UAAM,MAAM,MAAM,sBAAsB,GAAG;AAC3C,UAAM,WAAW,MAAM,yBAAyB,IAAI,IAAI,IAAI,GAAG,GAAG,GAAG;AACrE,QAAI,gBAAgB,QAAQ,EAAG,QAAO;AAEtC,UAAM,EAAE,OAAO,IAAI;AAEnB,QAAI,OAAO,WAAW,aAAa,OAAO,WAAW,UAAU;AAC7D,aAAO,aAAa,KAAK,EAAE,OAAO,2BAA2B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACjF;AAEA,UAAM,gBAAgB,EAAE,GAAG,OAAO,SAAoC,GAAG,OAAO,KAAK,QAAQ;AAC7F,UAAM,oBAAoB,6BAA6B,OAAO,YAAY,aAAa;AACvF,QAAI,CAAC,kBAAkB,SAAS;AAC9B,aAAO,aAAa,KAAK,EAAE,OAAO,kBAAkB,MAAM,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC9E;AAEA,UAAM,cAAc,MAAM,0BAA0B,IAAI,WAAW;AAAA,MACjE,UAAU,IAAI;AAAA,MACd,gBAAgB,IAAI;AAAA,MACpB,QAAQ,IAAI;AAAA,MACZ,cAAc;AAAA,MACd,YAAY,OAAO;AAAA,MACnB,WAAW;AAAA,MACX,eAAe,IAAI;AAAA,MACnB,gBAAgB,IAAI;AAAA,MACpB,iBAAiB,OAAO;AAAA,IAC1B,CAAC;AACD,QAAI,eAAe,CAAC,YAAY,IAAI;AAClC,aAAO,aAAa,KAAK,YAAY,MAAM,EAAE,QAAQ,YAAY,OAAO,CAAC;AAAA,IAC3E;AAEA,WAAO,UAAU;AACjB,UAAM,IAAI,GAAG,MAAM;AAEnB,QAAI,aAAa,MAAM,YAAY,uBAAuB;AACxD,YAAM,iCAAiC,IAAI,WAAW;AAAA,QACpD,UAAU,IAAI;AAAA,QACd,gBAAgB,IAAI;AAAA,QACpB,QAAQ,IAAI;AAAA,QACZ,cAAc;AAAA,QACd,YAAY,OAAO;AAAA,QACnB,WAAW;AAAA,QACX,eAAe,IAAI;AAAA,QACnB,gBAAgB,IAAI;AAAA,QACpB,UAAU,YAAY,YAAY;AAAA,MACpC,CAAC;AAAA,IACH;AAEA,UAAM,QAAQ,aAAa,IAAI,SAAS;AACxC,UAAM,mBAAmB,IAAI,UAAU,MAAM,sBAAsB,OAAO,IAAI,QAAQ,CAAC;AAEvF,QAAI;AACF,YAAM,kBAAkB,2BAA2B;AAAA,QACjD,UAAU,OAAO;AAAA,QACjB,YAAY,OAAO;AAAA,QACnB,YAAY,OAAO;AAAA,QACnB,UAAU,IAAI;AAAA,QACd,gBAAgB,IAAI;AAAA,MACtB,CAAC;AAAA,IACH,SAAS,YAAY;AACnB,cAAQ,MAAM,iDAAiD,UAAU;AAAA,IAC3E;AAEA,WAAO,aAAa,KAAK,EAAE,IAAI,MAAM,OAAO,CAAC;AAAA,EAC/C,SAAS,KAAK;AACZ,WAAO,iBAAiB,KAAK,aAAa;AAAA,EAC5C;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,OAAO;AAAA,MACL,SAAS;AAAA,MACT,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,iBAAiB;AAAA,QAC7C,EAAE,QAAQ,KAAK,aAAa,mBAAmB;AAAA,QAC/C,EAAE,QAAQ,KAAK,aAAa,2BAA2B;AAAA,MACzD;AAAA,IACF;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/modules/inbox_ops/api/proposals/[id]/categorize/route.js

@@ -1,5 +1,9 @@
 import { NextResponse } from "next/server";
 import { runWithCacheTenant } from "@open-mercato/cache";
+import {
+  runCrudMutationGuardAfterSuccess,
+  validateCrudMutationGuard
+} from "@open-mercato/shared/lib/crud/mutation-guard";
 import { categorizeProposalSchema } from "../../../../data/validators.js";
 import { resolveCache, invalidateCountsCache } from "../../../../lib/cache.js";
 import {
@@ -22,9 +26,36 @@ async function POST(req) {
       const issues = parsed.error.issues.map((i) => `${i.path.join(".")}: ${i.message}`).join("; ");
       return NextResponse.json({ error: `Invalid category: ${issues}` }, { status: 400 });
     }
+    const guardResult = await validateCrudMutationGuard(ctx.container, {
+      tenantId: ctx.tenantId,
+      organizationId: ctx.organizationId,
+      userId: ctx.userId,
+      resourceKind: "inbox_ops:inbox_proposal",
+      resourceId: proposal.id,
+      operation: "update",
+      requestMethod: req.method,
+      requestHeaders: req.headers,
+      mutationPayload: parsed.data
+    });
+    if (guardResult && !guardResult.ok) {
+      return NextResponse.json(guardResult.body, { status: guardResult.status });
+    }
     const previousCategory = proposal.category || null;
     proposal.category = parsed.data.category;
     await ctx.em.flush();
+    if (guardResult?.ok && guardResult.shouldRunAfterSuccess) {
+      await runCrudMutationGuardAfterSuccess(ctx.container, {
+        tenantId: ctx.tenantId,
+        organizationId: ctx.organizationId,
+        userId: ctx.userId,
+        resourceKind: "inbox_ops:inbox_proposal",
+        resourceId: proposal.id,
+        operation: "update",
+        requestMethod: req.method,
+        requestHeaders: req.headers,
+        metadata: guardResult.metadata ?? null
+      });
+    }
     const cache = resolveCache(ctx.container);
     await runWithCacheTenant(ctx.tenantId, () => invalidateCountsCache(cache, ctx.tenantId));
     return NextResponse.json({

package/dist/modules/inbox_ops/api/proposals/[id]/categorize/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../../src/modules/inbox_ops/api/proposals/%5Bid%5D/categorize/route.ts"],
-  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { runWithCacheTenant } from '@open-mercato/cache'\nimport { categorizeProposalSchema } from '../../../../data/validators'\nimport { resolveCache, invalidateCountsCache } from '../../../../lib/cache'\nimport {\n  resolveRequestContext,\n  resolveProposal,\n  handleRouteError,\n  isErrorResponse,\n} from '../../../routeHelpers'\n\nexport const metadata = {\n  POST: { requireAuth: true, requireFeatures: ['inbox_ops.proposals.manage'] },\n}\n\nexport async function POST(req: Request) {\n  try {\n    const ctx = await resolveRequestContext(req)\n    const proposal = await resolveProposal(new URL(req.url), ctx)\n    if (isErrorResponse(proposal)) return proposal\n\n    const body = await req.json()\n    const parsed = categorizeProposalSchema.safeParse(body)\n    if (!parsed.success) {\n      const issues = parsed.error.issues.map((i) => `${i.path.join('.')}: ${i.message}`).join('; ')\n      return NextResponse.json({ error: `Invalid category: ${issues}` }, { status: 400 })\n    }\n\n    const previousCategory = proposal.category || null\n    proposal.category = parsed.data.category\n    await ctx.em.flush()\n\n    const cache = resolveCache(ctx.container)\n    await runWithCacheTenant(ctx.tenantId, () => invalidateCountsCache(cache, ctx.tenantId))\n\n    return NextResponse.json({\n      ok: true,\n      category: parsed.data.category,\n      previousCategory,\n    })\n  } catch (err) {\n    return handleRouteError(err, 'categorize proposal')\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'InboxOps',\n  summary: 'Categorize proposal',\n  methods: {\n    POST: {\n      summary: 'Set or change the category of a proposal',\n      description: 'Assigns a category to a proposal. Returns the new and previous category for undo support.',\n      responses: [\n        { status: 200, description: 'Category updated' },\n        { status: 400, description: 'Invalid category value' },\n        { status: 404, description: 'Proposal not found' },\n      ],\n    },\n  },\n}\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAE7B,SAAS,0BAA0B;AACnC,SAAS,gCAAgC;AACzC,SAAS,cAAc,6BAA6B;AACpD;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEA,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,4BAA4B,EAAE;AAC7E;AAEA,eAAsB,KAAK,KAAc;AACvC,MAAI;AACF,UAAM,MAAM,MAAM,sBAAsB,GAAG;AAC3C,UAAM,WAAW,MAAM,gBAAgB,IAAI,IAAI,IAAI,GAAG,GAAG,GAAG;AAC5D,QAAI,gBAAgB,QAAQ,EAAG,QAAO;AAEtC,UAAM,OAAO,MAAM,IAAI,KAAK;AAC5B,UAAM,SAAS,yBAAyB,UAAU,IAAI;AACtD,QAAI,CAAC,OAAO,SAAS;AACnB,YAAM,SAAS,OAAO,MAAM,OAAO,IAAI,CAAC,MAAM,GAAG,EAAE,KAAK,KAAK,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,KAAK,IAAI;AAC5F,aAAO,aAAa,KAAK,EAAE,OAAO,qBAAqB,MAAM,GAAG,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACpF;AAEA,UAAM,mBAAmB,SAAS,YAAY;AAC9C,aAAS,WAAW,OAAO,KAAK;AAChC,UAAM,IAAI,GAAG,MAAM;AAEnB,UAAM,QAAQ,aAAa,IAAI,SAAS;AACxC,UAAM,mBAAmB,IAAI,UAAU,MAAM,sBAAsB,OAAO,IAAI,QAAQ,CAAC;AAEvF,WAAO,aAAa,KAAK;AAAA,MACvB,IAAI;AAAA,MACJ,UAAU,OAAO,KAAK;AAAA,MACtB;AAAA,IACF,CAAC;AAAA,EACH,SAAS,KAAK;AACZ,WAAO,iBAAiB,KAAK,qBAAqB;AAAA,EACpD;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aAAa;AAAA,MACb,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,mBAAmB;AAAA,QAC/C,EAAE,QAAQ,KAAK,aAAa,yBAAyB;AAAA,QACrD,EAAE,QAAQ,KAAK,aAAa,qBAAqB;AAAA,MACnD;AAAA,IACF;AAAA,EACF;AACF;",
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { runWithCacheTenant } from '@open-mercato/cache'\nimport {\n  runCrudMutationGuardAfterSuccess,\n  validateCrudMutationGuard,\n} from '@open-mercato/shared/lib/crud/mutation-guard'\nimport { categorizeProposalSchema } from '../../../../data/validators'\nimport { resolveCache, invalidateCountsCache } from '../../../../lib/cache'\nimport {\n  resolveRequestContext,\n  resolveProposal,\n  handleRouteError,\n  isErrorResponse,\n} from '../../../routeHelpers'\n\nexport const metadata = {\n  POST: { requireAuth: true, requireFeatures: ['inbox_ops.proposals.manage'] },\n}\n\nexport async function POST(req: Request) {\n  try {\n    const ctx = await resolveRequestContext(req)\n    const proposal = await resolveProposal(new URL(req.url), ctx)\n    if (isErrorResponse(proposal)) return proposal\n\n    const body = await req.json()\n    const parsed = categorizeProposalSchema.safeParse(body)\n    if (!parsed.success) {\n      const issues = parsed.error.issues.map((i) => `${i.path.join('.')}: ${i.message}`).join('; ')\n      return NextResponse.json({ error: `Invalid category: ${issues}` }, { status: 400 })\n    }\n\n    const guardResult = await validateCrudMutationGuard(ctx.container, {\n      tenantId: ctx.tenantId,\n      organizationId: ctx.organizationId,\n      userId: ctx.userId,\n      resourceKind: 'inbox_ops:inbox_proposal',\n      resourceId: proposal.id,\n      operation: 'update',\n      requestMethod: req.method,\n      requestHeaders: req.headers,\n      mutationPayload: parsed.data,\n    })\n    if (guardResult && !guardResult.ok) {\n      return NextResponse.json(guardResult.body, { status: guardResult.status })\n    }\n\n    const previousCategory = proposal.category || null\n    proposal.category = parsed.data.category\n    await ctx.em.flush()\n\n    if (guardResult?.ok && guardResult.shouldRunAfterSuccess) {\n      await runCrudMutationGuardAfterSuccess(ctx.container, {\n        tenantId: ctx.tenantId,\n        organizationId: ctx.organizationId,\n        userId: ctx.userId,\n        resourceKind: 'inbox_ops:inbox_proposal',\n        resourceId: proposal.id,\n        operation: 'update',\n        requestMethod: req.method,\n        requestHeaders: req.headers,\n        metadata: guardResult.metadata ?? null,\n      })\n    }\n\n    const cache = resolveCache(ctx.container)\n    await runWithCacheTenant(ctx.tenantId, () => invalidateCountsCache(cache, ctx.tenantId))\n\n    return NextResponse.json({\n      ok: true,\n      category: parsed.data.category,\n      previousCategory,\n    })\n  } catch (err) {\n    return handleRouteError(err, 'categorize proposal')\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'InboxOps',\n  summary: 'Categorize proposal',\n  methods: {\n    POST: {\n      summary: 'Set or change the category of a proposal',\n      description: 'Assigns a category to a proposal. Returns the new and previous category for undo support.',\n      responses: [\n        { status: 200, description: 'Category updated' },\n        { status: 400, description: 'Invalid category value' },\n        { status: 404, description: 'Proposal not found' },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAE7B,SAAS,0BAA0B;AACnC;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAS,gCAAgC;AACzC,SAAS,cAAc,6BAA6B;AACpD;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEA,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,4BAA4B,EAAE;AAC7E;AAEA,eAAsB,KAAK,KAAc;AACvC,MAAI;AACF,UAAM,MAAM,MAAM,sBAAsB,GAAG;AAC3C,UAAM,WAAW,MAAM,gBAAgB,IAAI,IAAI,IAAI,GAAG,GAAG,GAAG;AAC5D,QAAI,gBAAgB,QAAQ,EAAG,QAAO;AAEtC,UAAM,OAAO,MAAM,IAAI,KAAK;AAC5B,UAAM,SAAS,yBAAyB,UAAU,IAAI;AACtD,QAAI,CAAC,OAAO,SAAS;AACnB,YAAM,SAAS,OAAO,MAAM,OAAO,IAAI,CAAC,MAAM,GAAG,EAAE,KAAK,KAAK,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,KAAK,IAAI;AAC5F,aAAO,aAAa,KAAK,EAAE,OAAO,qBAAqB,MAAM,GAAG,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACpF;AAEA,UAAM,cAAc,MAAM,0BAA0B,IAAI,WAAW;AAAA,MACjE,UAAU,IAAI;AAAA,MACd,gBAAgB,IAAI;AAAA,MACpB,QAAQ,IAAI;AAAA,MACZ,cAAc;AAAA,MACd,YAAY,SAAS;AAAA,MACrB,WAAW;AAAA,MACX,eAAe,IAAI;AAAA,MACnB,gBAAgB,IAAI;AAAA,MACpB,iBAAiB,OAAO;AAAA,IAC1B,CAAC;AACD,QAAI,eAAe,CAAC,YAAY,IAAI;AAClC,aAAO,aAAa,KAAK,YAAY,MAAM,EAAE,QAAQ,YAAY,OAAO,CAAC;AAAA,IAC3E;AAEA,UAAM,mBAAmB,SAAS,YAAY;AAC9C,aAAS,WAAW,OAAO,KAAK;AAChC,UAAM,IAAI,GAAG,MAAM;AAEnB,QAAI,aAAa,MAAM,YAAY,uBAAuB;AACxD,YAAM,iCAAiC,IAAI,WAAW;AAAA,QACpD,UAAU,IAAI;AAAA,QACd,gBAAgB,IAAI;AAAA,QACpB,QAAQ,IAAI;AAAA,QACZ,cAAc;AAAA,QACd,YAAY,SAAS;AAAA,QACrB,WAAW;AAAA,QACX,eAAe,IAAI;AAAA,QACnB,gBAAgB,IAAI;AAAA,QACpB,UAAU,YAAY,YAAY;AAAA,MACpC,CAAC;AAAA,IACH;AAEA,UAAM,QAAQ,aAAa,IAAI,SAAS;AACxC,UAAM,mBAAmB,IAAI,UAAU,MAAM,sBAAsB,OAAO,IAAI,QAAQ,CAAC;AAEvF,WAAO,aAAa,KAAK;AAAA,MACvB,IAAI;AAAA,MACJ,UAAU,OAAO,KAAK;AAAA,MACtB;AAAA,IACF,CAAC;AAAA,EACH,SAAS,KAAK;AACZ,WAAO,iBAAiB,KAAK,qBAAqB;AAAA,EACpD;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aAAa;AAAA,MACb,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,mBAAmB;AAAA,QAC/C,EAAE,QAAQ,KAAK,aAAa,yBAAyB;AAAA,QACrD,EAAE,QAAQ,KAAK,aAAa,qBAAqB;AAAA,MACnD;AAAA,IACF;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/modules/messages/components/message-detail/hooks/useMessageDetailsActions.js

@@ -1,6 +1,7 @@
 "use client";
 import * as React from "react";
 import { flash } from "@open-mercato/ui/backend/FlashMessages";
+import { useGuardedMutation } from "@open-mercato/ui/backend/injection/useGuardedMutation";
 import { apiCall } from "@open-mercato/ui/backend/utils/apiCall";
 import { isSafeNavigationHref, parseObjectActionId, toErrorMessage } from "../utils.js";
 function useMessageDetailsActions({
@@ -21,20 +22,29 @@ function useMessageDetailsActions({
   const [pendingActionConfirmation, setPendingActionConfirmation] = React.useState(null);
   const [deleteConfirmationOpen, setDeleteConfirmationOpen] = React.useState(false);
   const [activeConversationAction, setActiveConversationAction] = React.useState(null);
+  const { runMutation, retryLastMutation } = useGuardedMutation({
+    contextId: "messages-detail-actions"
+  });
   const requestAndRefresh = React.useCallback(async (url, method, options) => {
     setUpdatingState(true);
     try {
-      const call = await apiCall(url, { method });
-      if (!call.ok) {
-        throw new Error(
-          toErrorMessage(call.result) ?? t("messages.errors.stateChangeFailed", "Failed to update message state.")
-        );
-      }
-      if (options?.skipDetailAutoMarkRead) {
-        await refreshDetailWithoutAutoMarkRead();
-      } else {
-        await detailQuery.refetch();
-      }
+      await runMutation({
+        operation: async () => {
+          const call = await apiCall(url, { method });
+          if (!call.ok) {
+            throw new Error(
+              toErrorMessage(call.result) ?? t("messages.errors.stateChangeFailed", "Failed to update message state.")
+            );
+          }
+          if (options?.skipDetailAutoMarkRead) {
+            await refreshDetailWithoutAutoMarkRead();
+          } else {
+            await detailQuery.refetch();
+          }
+        },
+        context: { resourceKind: "message", messageId: id, action: "state-change", retryLastMutation },
+        mutationPayload: { messageId: id, action: "state-change", url, method }
+      });
     } catch (err) {
       flash(
         err instanceof Error ? err.message : t("messages.errors.stateChangeFailed", "Failed to update message state."),
@@ -43,16 +53,22 @@ function useMessageDetailsActions({
     } finally {
       setUpdatingState(false);
     }
-  }, [detailQuery, refreshDetailWithoutAutoMarkRead, t]);
+  }, [detailQuery, id, refreshDetailWithoutAutoMarkRead, retryLastMutation, runMutation, t]);
   const handleDelete = React.useCallback(async () => {
     setUpdatingState(true);
     try {
-      const call = await apiCall(`/api/messages/${encodeURIComponent(id)}`, {
-        method: "DELETE"
+      await runMutation({
+        operation: async () => {
+          const call = await apiCall(`/api/messages/${encodeURIComponent(id)}`, {
+            method: "DELETE"
+          });
+          if (!call.ok) {
+            throw new Error(toErrorMessage(call.result) ?? t("messages.errors.deleteFailed", "Failed to delete message."));
+          }
+        },
+        context: { resourceKind: "message", messageId: id, action: "delete", retryLastMutation },
+        mutationPayload: { messageId: id, action: "delete" }
       });
-      if (!call.ok) {
-        throw new Error(toErrorMessage(call.result) ?? t("messages.errors.deleteFailed", "Failed to delete message."));
-      }
       flash(t("messages.flash.deleted", "Message deleted."), "success");
       onDeleted();
     } catch (err) {
@@ -63,16 +79,22 @@ function useMessageDetailsActions({
     } finally {
       setUpdatingState(false);
     }
-  }, [id, onDeleted, t]);
+  }, [id, onDeleted, retryLastMutation, runMutation, t]);
   const runConversationAction = React.useCallback(async (action, options) => {
     setActiveConversationAction(action);
     try {
-      const call = await apiCall(options.url, { method: options.method });
-      if (!call.ok) {
-        throw new Error(
-          toErrorMessage(call.result) ?? t("messages.errors.conversationActionFailed", "Failed to update conversation.")
-        );
-      }
+      await runMutation({
+        operation: async () => {
+          const call = await apiCall(options.url, { method: options.method });
+          if (!call.ok) {
+            throw new Error(
+              toErrorMessage(call.result) ?? t("messages.errors.conversationActionFailed", "Failed to update conversation.")
+            );
+          }
+        },
+        context: { resourceKind: "conversation", messageId: id, action, retryLastMutation },
+        mutationPayload: { messageId: id, action, url: options.url, method: options.method }
+      });
       flash(options.successMessage, "success");
       if (options.onSuccess) {
         options.onSuccess();
@@ -91,7 +113,7 @@ function useMessageDetailsActions({
     } finally {
       setActiveConversationAction(null);
     }
-  }, [detailQuery, refreshDetailWithoutAutoMarkRead, t]);
+  }, [detailQuery, id, refreshDetailWithoutAutoMarkRead, retryLastMutation, runMutation, t]);
   const archiveConversation = React.useCallback(async (messageId) => {
     const targetMessageId = messageId ?? id;
     await runConversationAction("archiveConversation", {
@@ -132,19 +154,26 @@ function useMessageDetailsActions({
   const executeAction = React.useCallback(async (action, payload) => {
     setExecutingActionId(action.id);
     try {
-      const call = await apiCall(
-        `/api/messages/${encodeURIComponent(id)}/actions/${encodeURIComponent(action.id)}`,
-        {
-          method: "POST",
-          headers: { "Content-Type": "application/json" },
-          body: JSON.stringify(payload ?? {})
-        }
-      );
-      if (!call.ok) {
-        throw new Error(
-          toErrorMessage(call.result) ?? t("messages.errors.actionFailed", "Failed to execute action.")
-        );
-      }
+      const call = await runMutation({
+        operation: async () => {
+          const result = await apiCall(
+            `/api/messages/${encodeURIComponent(id)}/actions/${encodeURIComponent(action.id)}`,
+            {
+              method: "POST",
+              headers: { "Content-Type": "application/json" },
+              body: JSON.stringify(payload ?? {})
+            }
+          );
+          if (!result.ok) {
+            throw new Error(
+              toErrorMessage(result.result) ?? t("messages.errors.actionFailed", "Failed to execute action.")
+            );
+          }
+          return result;
+        },
+        context: { resourceKind: "message", messageId: id, action: "execute-action", retryLastMutation },
+        mutationPayload: { messageId: id, action: "execute-action", actionId: action.id }
+      });
       flash(t("messages.flash.actionSuccess", "Action completed."), "success");
       const redirectTarget = call.result?.result?.redirect;
       if (typeof redirectTarget === "string" && redirectTarget.trim().length > 0 && isSafeNavigationHref(redirectTarget)) {
@@ -160,7 +189,7 @@ function useMessageDetailsActions({
     } finally {
       setExecutingActionId(null);
     }
-  }, [detailQuery, id, t]);
+  }, [detailQuery, id, retryLastMutation, runMutation, t]);
   const handleExecuteAction = React.useCallback(async (action, payload) => {
     if (executingActionId || detail?.actionTaken) return;
     if (action.confirmRequired) {