@open-mercato/core 0.6.6-develop.6257.1.6d0af84d26 → 0.6.6-develop.6286.1.d985c5c374

package/dist/modules/messages/components/message-detail/hooks/useMessageDetailsActions.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../src/modules/messages/components/message-detail/hooks/useMessageDetailsActions.ts"],
-  "sourcesContent": ["\"use client\"\n\nimport * as React from 'react'\nimport type { UseQueryResult } from '@tanstack/react-query'\nimport type { TranslateFn } from '@open-mercato/shared/lib/i18n/context'\nimport type { MessageActionsProps, MessageContentProps } from '@open-mercato/shared/modules/messages/types'\nimport { flash } from '@open-mercato/ui/backend/FlashMessages'\nimport { useGuardedMutation } from '@open-mercato/ui/backend/injection/useGuardedMutation'\nimport { apiCall } from '@open-mercato/ui/backend/utils/apiCall'\nimport type {\n  ActionResult,\n  MessageAction,\n  MessageAttachment,\n  MessageDetail,\n  PendingActionConfirmation,\n} from '../types'\nimport { isSafeNavigationHref, parseObjectActionId, toErrorMessage } from '../utils'\n\ntype RequestAndRefreshOptions = {\n  skipDetailAutoMarkRead?: boolean\n}\n\ntype ConversationActionKind =\n  | 'archiveConversation'\n  | 'unarchiveConversation'\n  | 'deleteConversation'\n  | 'markAllUnread'\n  | 'markAllRead'\n\ntype MessageDetailMutationContext = {\n  resourceKind: 'message' | 'conversation'\n  messageId: string\n  action: string\n  retryLastMutation: () => Promise<boolean>\n}\n\ntype UseMessageDetailsActionsInput = {\n  id: string\n  t: TranslateFn\n  detail: MessageDetail | null\n  detailQuery: UseQueryResult<MessageDetail | null, Error>\n  attachments: MessageAttachment[] | undefined\n  isArchived: boolean\n  onDeleted: () => void\n  refreshDetailWithoutAutoMarkRead: () => Promise<MessageDetail | null>\n}\n\nexport function useMessageDetailsActions({\n  id,\n  t,\n  detail,\n  detailQuery,\n  attachments,\n  isArchived,\n  onDeleted,\n  refreshDetailWithoutAutoMarkRead,\n}: UseMessageDetailsActionsInput) {\n  const [replyOpen, setReplyOpen] = React.useState(false)\n  const [forwardOpen, setForwardOpen] = React.useState(false)\n  const [editOpen, setEditOpen] = React.useState(false)\n  const [updatingState, setUpdatingState] = React.useState(false)\n  const [executingActionId, setExecutingActionId] = React.useState<string | null>(null)\n  const [pendingActionConfirmation, setPendingActionConfirmation] = React.useState<PendingActionConfirmation | null>(null)\n  const [deleteConfirmationOpen, setDeleteConfirmationOpen] = React.useState(false)\n  const [activeConversationAction, setActiveConversationAction] = React.useState<ConversationActionKind | null>(null)\n\n  const { runMutation, retryLastMutation } = useGuardedMutation<MessageDetailMutationContext>({\n    contextId: 'messages-detail-actions',\n  })\n\n  const requestAndRefresh = React.useCallback(async (\n    url: string,\n    method: 'PUT' | 'DELETE',\n    options?: RequestAndRefreshOptions,\n  ) => {\n    setUpdatingState(true)\n    try {\n      await runMutation({\n        operation: async () => {\n          const call = await apiCall<{ ok?: boolean }>(url, { method })\n          if (!call.ok) {\n            throw new Error(\n              toErrorMessage(call.result)\n              ?? t('messages.errors.stateChangeFailed', 'Failed to update message state.'),\n            )\n          }\n          if (options?.skipDetailAutoMarkRead) {\n            await refreshDetailWithoutAutoMarkRead()\n          } else {\n            await detailQuery.refetch()\n          }\n        },\n        context: { resourceKind: 'message', messageId: id, action: 'state-change', retryLastMutation },\n        mutationPayload: { messageId: id, action: 'state-change', url, method },\n      })\n    } catch (err) {\n      flash(\n        err instanceof Error\n          ? err.message\n          : t('messages.errors.stateChangeFailed', 'Failed to update message state.'),\n        'error',\n      )\n    } finally {\n      setUpdatingState(false)\n    }\n  }, [detailQuery, id, refreshDetailWithoutAutoMarkRead, retryLastMutation, runMutation, t])\n\n  const handleDelete = React.useCallback(async () => {\n    setUpdatingState(true)\n    try {\n      await runMutation({\n        operation: async () => {\n          const call = await apiCall<{ ok?: boolean }>(`/api/messages/${encodeURIComponent(id)}`, {\n            method: 'DELETE',\n          })\n          if (!call.ok) {\n            throw new Error(toErrorMessage(call.result) ?? t('messages.errors.deleteFailed', 'Failed to delete message.'))\n          }\n        },\n        context: { resourceKind: 'message', messageId: id, action: 'delete', retryLastMutation },\n        mutationPayload: { messageId: id, action: 'delete' },\n      })\n      flash(t('messages.flash.deleted', 'Message deleted.'), 'success')\n      onDeleted()\n    } catch (err) {\n      flash(\n        err instanceof Error\n          ? err.message\n          : t('messages.errors.deleteFailed', 'Failed to delete message.'),\n        'error',\n      )\n    } finally {\n      setUpdatingState(false)\n    }\n  }, [id, onDeleted, retryLastMutation, runMutation, t])\n\n  const runConversationAction = React.useCallback(async (\n    action: ConversationActionKind,\n    options: {\n      url: string\n      method: 'PUT' | 'DELETE'\n      successMessage: string\n      skipDetailAutoMarkRead?: boolean\n      onSuccess?: () => void\n    },\n  ) => {\n    setActiveConversationAction(action)\n    try {\n      await runMutation({\n        operation: async () => {\n          const call = await apiCall<{ ok?: boolean; affectedCount?: number }>(options.url, { method: options.method })\n          if (!call.ok) {\n            throw new Error(\n              toErrorMessage(call.result)\n              ?? t('messages.errors.conversationActionFailed', 'Failed to update conversation.'),\n            )\n          }\n        },\n        context: { resourceKind: 'conversation', messageId: id, action, retryLastMutation },\n        mutationPayload: { messageId: id, action, url: options.url, method: options.method },\n      })\n\n      flash(options.successMessage, 'success')\n\n      if (options.onSuccess) {\n        options.onSuccess()\n        return\n      }\n\n      if (options.skipDetailAutoMarkRead) {\n        await refreshDetailWithoutAutoMarkRead()\n      } else {\n        await detailQuery.refetch()\n      }\n    } catch (err) {\n      flash(\n        err instanceof Error\n          ? err.message\n          : t('messages.errors.conversationActionFailed', 'Failed to update conversation.'),\n        'error',\n      )\n    } finally {\n      setActiveConversationAction(null)\n    }\n  }, [detailQuery, id, refreshDetailWithoutAutoMarkRead, retryLastMutation, runMutation, t])\n\n  const archiveConversation = React.useCallback(async (messageId?: string) => {\n    const targetMessageId = messageId ?? id\n    await runConversationAction('archiveConversation', {\n      url: `/api/messages/${encodeURIComponent(targetMessageId)}/conversation/archive`,\n      method: 'PUT',\n      successMessage: t('messages.flash.conversationArchived', 'Conversation archived.'),\n    })\n  }, [id, runConversationAction, t])\n\n  const unarchiveConversation = React.useCallback(async (messageId?: string) => {\n    const targetMessageId = messageId ?? id\n    await runConversationAction('unarchiveConversation', {\n      url: `/api/messages/${encodeURIComponent(targetMessageId)}/conversation/archive`,\n      method: 'DELETE',\n      successMessage: t('messages.flash.conversationUnarchived', 'Conversation restored from archive.'),\n    })\n  }, [id, runConversationAction, t])\n\n  const markConversationUnread = React.useCallback(async (messageId?: string) => {\n    const targetMessageId = messageId ?? id\n    await runConversationAction('markAllUnread', {\n      url: `/api/messages/${encodeURIComponent(targetMessageId)}/conversation/read`,\n      method: 'DELETE',\n      successMessage: t('messages.flash.conversationMarkedUnread', 'Conversation marked unread.'),\n      skipDetailAutoMarkRead: true,\n    })\n  }, [id, runConversationAction, t])\n\n  const markConversationRead = React.useCallback(async (messageId?: string) => {\n    const targetMessageId = messageId ?? id\n    await runConversationAction('markAllRead', {\n      url: `/api/messages/${encodeURIComponent(targetMessageId)}/conversation/read`,\n      method: 'PUT',\n      successMessage: t('messages.flash.conversationMarkedRead', 'Conversation marked read.'),\n    })\n  }, [id, runConversationAction, t])\n\n  const deleteConversation = React.useCallback(async (messageId?: string) => {\n    const targetMessageId = messageId ?? id\n    await runConversationAction('deleteConversation', {\n      url: `/api/messages/${encodeURIComponent(targetMessageId)}/conversation`,\n      method: 'DELETE',\n      successMessage: t('messages.flash.conversationDeleted', 'Conversation deleted.'),\n      onSuccess: onDeleted,\n    })\n  }, [id, onDeleted, runConversationAction, t])\n\n  const handleDeleteDialogKeyDown = React.useCallback((event: React.KeyboardEvent<HTMLDivElement>) => {\n    if ((event.metaKey || event.ctrlKey) && event.key === 'Enter') {\n      event.preventDefault()\n      void handleDelete()\n      return\n    }\n\n    if (event.key === 'Escape') {\n      event.preventDefault()\n      setDeleteConfirmationOpen(false)\n    }\n  }, [handleDelete])\n\n  const executeAction = React.useCallback(async (action: MessageAction, payload?: Record<string, unknown>) => {\n    setExecutingActionId(action.id)\n    try {\n      const call = await runMutation({\n        operation: async () => {\n          const result = await apiCall<ActionResult>(\n            `/api/messages/${encodeURIComponent(id)}/actions/${encodeURIComponent(action.id)}`,\n            {\n              method: 'POST',\n              headers: { 'Content-Type': 'application/json' },\n              body: JSON.stringify(payload ?? {}),\n            },\n          )\n\n          if (!result.ok) {\n            throw new Error(\n              toErrorMessage(result.result)\n              ?? t('messages.errors.actionFailed', 'Failed to execute action.'),\n            )\n          }\n\n          return result\n        },\n        context: { resourceKind: 'message', messageId: id, action: 'execute-action', retryLastMutation },\n        mutationPayload: { messageId: id, action: 'execute-action', actionId: action.id },\n      })\n\n      flash(t('messages.flash.actionSuccess', 'Action completed.'), 'success')\n\n      const redirectTarget = call.result?.result?.redirect\n      if (\n        typeof redirectTarget === 'string'\n        && redirectTarget.trim().length > 0\n        && isSafeNavigationHref(redirectTarget)\n      ) {\n        window.location.href = redirectTarget\n        return\n      }\n\n      await detailQuery.refetch()\n    } catch (err) {\n      flash(\n        err instanceof Error\n          ? err.message\n          : t('messages.errors.actionFailed', 'Failed to execute action.'),\n        'error',\n      )\n    } finally {\n      setExecutingActionId(null)\n    }\n  }, [detailQuery, id, retryLastMutation, runMutation, t])\n\n  const handleExecuteAction = React.useCallback(async (action: MessageAction, payload?: Record<string, unknown>) => {\n    if (executingActionId || detail?.actionTaken) return\n\n    if (action.confirmRequired) {\n      setPendingActionConfirmation({ action, payload })\n      return\n    }\n\n    await executeAction(action, payload)\n  }, [detail?.actionTaken, executeAction, executingActionId])\n\n  const handleConfirmPendingAction = React.useCallback(async () => {\n    if (!pendingActionConfirmation || executingActionId || detail?.actionTaken) return\n    const { action, payload } = pendingActionConfirmation\n    setPendingActionConfirmation(null)\n    await executeAction(action, payload)\n  }, [detail?.actionTaken, executeAction, executingActionId, pendingActionConfirmation])\n\n  const handleActionConfirmDialogKeyDown = React.useCallback((event: React.KeyboardEvent<HTMLDivElement>) => {\n    if ((event.metaKey || event.ctrlKey) && event.key === 'Enter') {\n      event.preventDefault()\n      void handleConfirmPendingAction()\n      return\n    }\n\n    if (event.key === 'Escape') {\n      event.preventDefault()\n      setPendingActionConfirmation(null)\n    }\n  }, [handleConfirmPendingAction])\n\n  const contentProps = React.useMemo<MessageContentProps>(() => ({\n    message: {\n      id: detail?.id ?? '',\n      type: detail?.type ?? 'default',\n      subject: detail?.subject ?? '',\n      body: detail?.body ?? '',\n      bodyFormat: detail?.bodyFormat ?? 'text',\n      priority: (detail?.priority ?? 'normal') as 'low' | 'normal' | 'high' | 'urgent',\n      sentAt: detail?.sentAt ? new Date(detail.sentAt) : null,\n      senderName: detail?.senderName ?? undefined,\n      senderUserId: detail?.senderUserId ?? '',\n      actionData: detail?.actionData ?? null,\n      actionTaken: detail?.actionTaken ?? null,\n      actionTakenAt: detail?.actionTakenAt ? new Date(detail.actionTakenAt) : null,\n    },\n    objects: (detail?.objects ?? []).map((item) => ({\n      id: item.id,\n      entityModule: item.entityModule,\n      entityType: item.entityType,\n      entityId: item.entityId,\n      actionRequired: item.actionRequired,\n      snapshot: item.snapshot ?? undefined,\n    })),\n    attachments: (attachments ?? []).map((item) => ({\n      id: item.id,\n      fileName: item.fileName,\n      fileSize: item.fileSize,\n      mimeType: item.mimeType,\n      url: item.url,\n    })),\n  }), [attachments, detail])\n\n  const handleExecuteActionById = React.useCallback<MessageActionsProps['onExecuteAction']>(async (actionId, payload) => {\n    const action = detail?.actionData?.actions?.find((entry) => {\n      if (parseObjectActionId(entry.id)) return false\n      return entry.id === actionId\n    })\n    if (!action) return\n    await handleExecuteAction(action, payload)\n  }, [detail?.actionData?.actions, handleExecuteAction])\n\n  const messageActions = React.useMemo(() => {\n    return (detail?.actionData?.actions ?? []).filter((action) => !parseObjectActionId(action.id))\n  }, [detail?.actionData?.actions])\n\n  const objectActionsByObjectId = React.useMemo(() => {\n    const byObjectId = new Map<string, Map<string, MessageAction>>()\n    for (const action of detail?.actionData?.actions ?? []) {\n      const parsed = parseObjectActionId(action.id)\n      if (!parsed) continue\n      const current = byObjectId.get(parsed.objectId) ?? new Map<string, MessageAction>()\n      current.set(parsed.actionId, action)\n      byObjectId.set(parsed.objectId, current)\n    }\n    return byObjectId\n  }, [detail?.actionData?.actions])\n\n  const toggleRead = React.useCallback(async () => {\n    await requestAndRefresh(\n      `/api/messages/${encodeURIComponent(id)}/read`,\n      detail?.isRead ? 'DELETE' : 'PUT',\n      detail?.isRead ? { skipDetailAutoMarkRead: true } : undefined,\n    )\n  }, [detail?.isRead, id, requestAndRefresh])\n\n  const toggleArchive = React.useCallback(async () => {\n    await requestAndRefresh(\n      `/api/messages/${encodeURIComponent(id)}/archive`,\n      isArchived ? 'DELETE' : 'PUT',\n    )\n  }, [id, isArchived, requestAndRefresh])\n\n  return {\n    replyOpen,\n    setReplyOpen,\n    forwardOpen,\n    setForwardOpen,\n    editOpen,\n    setEditOpen,\n    updatingState,\n    executingActionId,\n    pendingActionConfirmation,\n    setPendingActionConfirmation,\n    deleteConfirmationOpen,\n    setDeleteConfirmationOpen,\n    activeConversationAction,\n    toggleRead,\n    toggleArchive,\n    archiveConversation,\n    unarchiveConversation,\n    deleteConversation,\n    markConversationUnread,\n    markConversationRead,\n    requestAndRefresh,\n    handleDelete,\n    handleDeleteDialogKeyDown,\n    handleExecuteAction,\n    handleConfirmPendingAction,\n    handleActionConfirmDialogKeyDown,\n    contentProps,\n    handleExecuteActionById,\n    messageActions,\n    objectActionsByObjectId,\n  }\n}\n"],
-  "mappings": ";AAEA,YAAY,WAAW;AAIvB,SAAS,aAAa;AACtB,SAAS,0BAA0B;AACnC,SAAS,eAAe;AAQxB,SAAS,sBAAsB,qBAAqB,sBAAsB;AA+BnE,SAAS,yBAAyB;AAAA,EACvC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,GAAkC;AAChC,QAAM,CAAC,WAAW,YAAY,IAAI,MAAM,SAAS,KAAK;AACtD,QAAM,CAAC,aAAa,cAAc,IAAI,MAAM,SAAS,KAAK;AAC1D,QAAM,CAAC,UAAU,WAAW,IAAI,MAAM,SAAS,KAAK;AACpD,QAAM,CAAC,eAAe,gBAAgB,IAAI,MAAM,SAAS,KAAK;AAC9D,QAAM,CAAC,mBAAmB,oBAAoB,IAAI,MAAM,SAAwB,IAAI;AACpF,QAAM,CAAC,2BAA2B,4BAA4B,IAAI,MAAM,SAA2C,IAAI;AACvH,QAAM,CAAC,wBAAwB,yBAAyB,IAAI,MAAM,SAAS,KAAK;AAChF,QAAM,CAAC,0BAA0B,2BAA2B,IAAI,MAAM,SAAwC,IAAI;AAElH,QAAM,EAAE,aAAa,kBAAkB,IAAI,mBAAiD;AAAA,IAC1F,WAAW;AAAA,EACb,CAAC;AAED,QAAM,oBAAoB,MAAM,YAAY,OAC1C,KACA,QACA,YACG;AACH,qBAAiB,IAAI;AACrB,QAAI;AACF,YAAM,YAAY;AAAA,QAChB,WAAW,YAAY;AACrB,gBAAM,OAAO,MAAM,QAA0B,KAAK,EAAE,OAAO,CAAC;AAC5D,cAAI,CAAC,KAAK,IAAI;AACZ,kBAAM,IAAI;AAAA,cACR,eAAe,KAAK,MAAM,KACvB,EAAE,qCAAqC,iCAAiC;AAAA,YAC7E;AAAA,UACF;AACA,cAAI,SAAS,wBAAwB;AACnC,kBAAM,iCAAiC;AAAA,UACzC,OAAO;AACL,kBAAM,YAAY,QAAQ;AAAA,UAC5B;AAAA,QACF;AAAA,QACA,SAAS,EAAE,cAAc,WAAW,WAAW,IAAI,QAAQ,gBAAgB,kBAAkB;AAAA,QAC7F,iBAAiB,EAAE,WAAW,IAAI,QAAQ,gBAAgB,KAAK,OAAO;AAAA,MACxE,CAAC;AAAA,IACH,SAAS,KAAK;AACZ;AAAA,QACE,eAAe,QACX,IAAI,UACJ,EAAE,qCAAqC,iCAAiC;AAAA,QAC5E;AAAA,MACF;AAAA,IACF,UAAE;AACA,uBAAiB,KAAK;AAAA,IACxB;AAAA,EACF,GAAG,CAAC,aAAa,IAAI,kCAAkC,mBAAmB,aAAa,CAAC,CAAC;AAEzF,QAAM,eAAe,MAAM,YAAY,YAAY;AACjD,qBAAiB,IAAI;AACrB,QAAI;AACF,YAAM,YAAY;AAAA,QAChB,WAAW,YAAY;AACrB,gBAAM,OAAO,MAAM,QAA0B,iBAAiB,mBAAmB,EAAE,CAAC,IAAI;AAAA,YACtF,QAAQ;AAAA,UACV,CAAC;AACD,cAAI,CAAC,KAAK,IAAI;AACZ,kBAAM,IAAI,MAAM,eAAe,KAAK,MAAM,KAAK,EAAE,gCAAgC,2BAA2B,CAAC;AAAA,UAC/G;AAAA,QACF;AAAA,QACA,SAAS,EAAE,cAAc,WAAW,WAAW,IAAI,QAAQ,UAAU,kBAAkB;AAAA,QACvF,iBAAiB,EAAE,WAAW,IAAI,QAAQ,SAAS;AAAA,MACrD,CAAC;AACD,YAAM,EAAE,0BAA0B,kBAAkB,GAAG,SAAS;AAChE,gBAAU;AAAA,IACZ,SAAS,KAAK;AACZ;AAAA,QACE,eAAe,QACX,IAAI,UACJ,EAAE,gCAAgC,2BAA2B;AAAA,QACjE;AAAA,MACF;AAAA,IACF,UAAE;AACA,uBAAiB,KAAK;AAAA,IACxB;AAAA,EACF,GAAG,CAAC,IAAI,WAAW,mBAAmB,aAAa,CAAC,CAAC;AAErD,QAAM,wBAAwB,MAAM,YAAY,OAC9C,QACA,YAOG;AACH,gCAA4B,MAAM;AAClC,QAAI;AACF,YAAM,YAAY;AAAA,QAChB,WAAW,YAAY;AACrB,gBAAM,OAAO,MAAM,QAAkD,QAAQ,KAAK,EAAE,QAAQ,QAAQ,OAAO,CAAC;AAC5G,cAAI,CAAC,KAAK,IAAI;AACZ,kBAAM,IAAI;AAAA,cACR,eAAe,KAAK,MAAM,KACvB,EAAE,4CAA4C,gCAAgC;AAAA,YACnF;AAAA,UACF;AAAA,QACF;AAAA,QACA,SAAS,EAAE,cAAc,gBAAgB,WAAW,IAAI,QAAQ,kBAAkB;AAAA,QAClF,iBAAiB,EAAE,WAAW,IAAI,QAAQ,KAAK,QAAQ,KAAK,QAAQ,QAAQ,OAAO;AAAA,MACrF,CAAC;AAED,YAAM,QAAQ,gBAAgB,SAAS;AAEvC,UAAI,QAAQ,WAAW;AACrB,gBAAQ,UAAU;AAClB;AAAA,MACF;AAEA,UAAI,QAAQ,wBAAwB;AAClC,cAAM,iCAAiC;AAAA,MACzC,OAAO;AACL,cAAM,YAAY,QAAQ;AAAA,MAC5B;AAAA,IACF,SAAS,KAAK;AACZ;AAAA,QACE,eAAe,QACX,IAAI,UACJ,EAAE,4CAA4C,gCAAgC;AAAA,QAClF;AAAA,MACF;AAAA,IACF,UAAE;AACA,kCAA4B,IAAI;AAAA,IAClC;AAAA,EACF,GAAG,CAAC,aAAa,IAAI,kCAAkC,mBAAmB,aAAa,CAAC,CAAC;AAEzF,QAAM,sBAAsB,MAAM,YAAY,OAAO,cAAuB;AAC1E,UAAM,kBAAkB,aAAa;AACrC,UAAM,sBAAsB,uBAAuB;AAAA,MACjD,KAAK,iBAAiB,mBAAmB,eAAe,CAAC;AAAA,MACzD,QAAQ;AAAA,MACR,gBAAgB,EAAE,uCAAuC,wBAAwB;AAAA,IACnF,CAAC;AAAA,EACH,GAAG,CAAC,IAAI,uBAAuB,CAAC,CAAC;AAEjC,QAAM,wBAAwB,MAAM,YAAY,OAAO,cAAuB;AAC5E,UAAM,kBAAkB,aAAa;AACrC,UAAM,sBAAsB,yBAAyB;AAAA,MACnD,KAAK,iBAAiB,mBAAmB,eAAe,CAAC;AAAA,MACzD,QAAQ;AAAA,MACR,gBAAgB,EAAE,yCAAyC,qCAAqC;AAAA,IAClG,CAAC;AAAA,EACH,GAAG,CAAC,IAAI,uBAAuB,CAAC,CAAC;AAEjC,QAAM,yBAAyB,MAAM,YAAY,OAAO,cAAuB;AAC7E,UAAM,kBAAkB,aAAa;AACrC,UAAM,sBAAsB,iBAAiB;AAAA,MAC3C,KAAK,iBAAiB,mBAAmB,eAAe,CAAC;AAAA,MACzD,QAAQ;AAAA,MACR,gBAAgB,EAAE,2CAA2C,6BAA6B;AAAA,MAC1F,wBAAwB;AAAA,IAC1B,CAAC;AAAA,EACH,GAAG,CAAC,IAAI,uBAAuB,CAAC,CAAC;AAEjC,QAAM,uBAAuB,MAAM,YAAY,OAAO,cAAuB;AAC3E,UAAM,kBAAkB,aAAa;AACrC,UAAM,sBAAsB,eAAe;AAAA,MACzC,KAAK,iBAAiB,mBAAmB,eAAe,CAAC;AAAA,MACzD,QAAQ;AAAA,MACR,gBAAgB,EAAE,yCAAyC,2BAA2B;AAAA,IACxF,CAAC;AAAA,EACH,GAAG,CAAC,IAAI,uBAAuB,CAAC,CAAC;AAEjC,QAAM,qBAAqB,MAAM,YAAY,OAAO,cAAuB;AACzE,UAAM,kBAAkB,aAAa;AACrC,UAAM,sBAAsB,sBAAsB;AAAA,MAChD,KAAK,iBAAiB,mBAAmB,eAAe,CAAC;AAAA,MACzD,QAAQ;AAAA,MACR,gBAAgB,EAAE,sCAAsC,uBAAuB;AAAA,MAC/E,WAAW;AAAA,IACb,CAAC;AAAA,EACH,GAAG,CAAC,IAAI,WAAW,uBAAuB,CAAC,CAAC;AAE5C,QAAM,4BAA4B,MAAM,YAAY,CAAC,UAA+C;AAClG,SAAK,MAAM,WAAW,MAAM,YAAY,MAAM,QAAQ,SAAS;AAC7D,YAAM,eAAe;AACrB,WAAK,aAAa;AAClB;AAAA,IACF;AAEA,QAAI,MAAM,QAAQ,UAAU;AAC1B,YAAM,eAAe;AACrB,gCAA0B,KAAK;AAAA,IACjC;AAAA,EACF,GAAG,CAAC,YAAY,CAAC;AAEjB,QAAM,gBAAgB,MAAM,YAAY,OAAO,QAAuB,YAAsC;AAC1G,yBAAqB,OAAO,EAAE;AAC9B,QAAI;AACF,YAAM,OAAO,MAAM,YAAY;AAAA,QAC7B,WAAW,YAAY;AACrB,gBAAM,SAAS,MAAM;AAAA,YACnB,iBAAiB,mBAAmB,EAAE,CAAC,YAAY,mBAAmB,OAAO,EAAE,CAAC;AAAA,YAChF;AAAA,cACE,QAAQ;AAAA,cACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,cAC9C,MAAM,KAAK,UAAU,WAAW,CAAC,CAAC;AAAA,YACpC;AAAA,UACF;AAEA,cAAI,CAAC,OAAO,IAAI;AACd,kBAAM,IAAI;AAAA,cACR,eAAe,OAAO,MAAM,KACzB,EAAE,gCAAgC,2BAA2B;AAAA,YAClE;AAAA,UACF;AAEA,iBAAO;AAAA,QACT;AAAA,QACA,SAAS,EAAE,cAAc,WAAW,WAAW,IAAI,QAAQ,kBAAkB,kBAAkB;AAAA,QAC/F,iBAAiB,EAAE,WAAW,IAAI,QAAQ,kBAAkB,UAAU,OAAO,GAAG;AAAA,MAClF,CAAC;AAED,YAAM,EAAE,gCAAgC,mBAAmB,GAAG,SAAS;AAEvE,YAAM,iBAAiB,KAAK,QAAQ,QAAQ;AAC5C,UACE,OAAO,mBAAmB,YACvB,eAAe,KAAK,EAAE,SAAS,KAC/B,qBAAqB,cAAc,GACtC;AACA,eAAO,SAAS,OAAO;AACvB;AAAA,MACF;AAEA,YAAM,YAAY,QAAQ;AAAA,IAC5B,SAAS,KAAK;AACZ;AAAA,QACE,eAAe,QACX,IAAI,UACJ,EAAE,gCAAgC,2BAA2B;AAAA,QACjE;AAAA,MACF;AAAA,IACF,UAAE;AACA,2BAAqB,IAAI;AAAA,IAC3B;AAAA,EACF,GAAG,CAAC,aAAa,IAAI,mBAAmB,aAAa,CAAC,CAAC;AAEvD,QAAM,sBAAsB,MAAM,YAAY,OAAO,QAAuB,YAAsC;AAChH,QAAI,qBAAqB,QAAQ,YAAa;AAE9C,QAAI,OAAO,iBAAiB;AAC1B,mCAA6B,EAAE,QAAQ,QAAQ,CAAC;AAChD;AAAA,IACF;AAEA,UAAM,cAAc,QAAQ,OAAO;AAAA,EACrC,GAAG,CAAC,QAAQ,aAAa,eAAe,iBAAiB,CAAC;AAE1D,QAAM,6BAA6B,MAAM,YAAY,YAAY;AAC/D,QAAI,CAAC,6BAA6B,qBAAqB,QAAQ,YAAa;AAC5E,UAAM,EAAE,QAAQ,QAAQ,IAAI;AAC5B,iCAA6B,IAAI;AACjC,UAAM,cAAc,QAAQ,OAAO;AAAA,EACrC,GAAG,CAAC,QAAQ,aAAa,eAAe,mBAAmB,yBAAyB,CAAC;AAErF,QAAM,mCAAmC,MAAM,YAAY,CAAC,UAA+C;AACzG,SAAK,MAAM,WAAW,MAAM,YAAY,MAAM,QAAQ,SAAS;AAC7D,YAAM,eAAe;AACrB,WAAK,2BAA2B;AAChC;AAAA,IACF;AAEA,QAAI,MAAM,QAAQ,UAAU;AAC1B,YAAM,eAAe;AACrB,mCAA6B,IAAI;AAAA,IACnC;AAAA,EACF,GAAG,CAAC,0BAA0B,CAAC;AAE/B,QAAM,eAAe,MAAM,QAA6B,OAAO;AAAA,IAC7D,SAAS;AAAA,MACP,IAAI,QAAQ,MAAM;AAAA,MAClB,MAAM,QAAQ,QAAQ;AAAA,MACtB,SAAS,QAAQ,WAAW;AAAA,MAC5B,MAAM,QAAQ,QAAQ;AAAA,MACtB,YAAY,QAAQ,cAAc;AAAA,MAClC,UAAW,QAAQ,YAAY;AAAA,MAC/B,QAAQ,QAAQ,SAAS,IAAI,KAAK,OAAO,MAAM,IAAI;AAAA,MACnD,YAAY,QAAQ,cAAc;AAAA,MAClC,cAAc,QAAQ,gBAAgB;AAAA,MACtC,YAAY,QAAQ,cAAc;AAAA,MAClC,aAAa,QAAQ,eAAe;AAAA,MACpC,eAAe,QAAQ,gBAAgB,IAAI,KAAK,OAAO,aAAa,IAAI;AAAA,IAC1E;AAAA,IACA,UAAU,QAAQ,WAAW,CAAC,GAAG,IAAI,CAAC,UAAU;AAAA,MAC9C,IAAI,KAAK;AAAA,MACT,cAAc,KAAK;AAAA,MACnB,YAAY,KAAK;AAAA,MACjB,UAAU,KAAK;AAAA,MACf,gBAAgB,KAAK;AAAA,MACrB,UAAU,KAAK,YAAY;AAAA,IAC7B,EAAE;AAAA,IACF,cAAc,eAAe,CAAC,GAAG,IAAI,CAAC,UAAU;AAAA,MAC9C,IAAI,KAAK;AAAA,MACT,UAAU,KAAK;AAAA,MACf,UAAU,KAAK;AAAA,MACf,UAAU,KAAK;AAAA,MACf,KAAK,KAAK;AAAA,IACZ,EAAE;AAAA,EACJ,IAAI,CAAC,aAAa,MAAM,CAAC;AAEzB,QAAM,0BAA0B,MAAM,YAAoD,OAAO,UAAU,YAAY;AACrH,UAAM,SAAS,QAAQ,YAAY,SAAS,KAAK,CAAC,UAAU;AAC1D,UAAI,oBAAoB,MAAM,EAAE,EAAG,QAAO;AAC1C,aAAO,MAAM,OAAO;AAAA,IACtB,CAAC;AACD,QAAI,CAAC,OAAQ;AACb,UAAM,oBAAoB,QAAQ,OAAO;AAAA,EAC3C,GAAG,CAAC,QAAQ,YAAY,SAAS,mBAAmB,CAAC;AAErD,QAAM,iBAAiB,MAAM,QAAQ,MAAM;AACzC,YAAQ,QAAQ,YAAY,WAAW,CAAC,GAAG,OAAO,CAAC,WAAW,CAAC,oBAAoB,OAAO,EAAE,CAAC;AAAA,EAC/F,GAAG,CAAC,QAAQ,YAAY,OAAO,CAAC;AAEhC,QAAM,0BAA0B,MAAM,QAAQ,MAAM;AAClD,UAAM,aAAa,oBAAI,IAAwC;AAC/D,eAAW,UAAU,QAAQ,YAAY,WAAW,CAAC,GAAG;AACtD,YAAM,SAAS,oBAAoB,OAAO,EAAE;AAC5C,UAAI,CAAC,OAAQ;AACb,YAAM,UAAU,WAAW,IAAI,OAAO,QAAQ,KAAK,oBAAI,IAA2B;AAClF,cAAQ,IAAI,OAAO,UAAU,MAAM;AACnC,iBAAW,IAAI,OAAO,UAAU,OAAO;AAAA,IACzC;AACA,WAAO;AAAA,EACT,GAAG,CAAC,QAAQ,YAAY,OAAO,CAAC;AAEhC,QAAM,aAAa,MAAM,YAAY,YAAY;AAC/C,UAAM;AAAA,MACJ,iBAAiB,mBAAmB,EAAE,CAAC;AAAA,MACvC,QAAQ,SAAS,WAAW;AAAA,MAC5B,QAAQ,SAAS,EAAE,wBAAwB,KAAK,IAAI;AAAA,IACtD;AAAA,EACF,GAAG,CAAC,QAAQ,QAAQ,IAAI,iBAAiB,CAAC;AAE1C,QAAM,gBAAgB,MAAM,YAAY,YAAY;AAClD,UAAM;AAAA,MACJ,iBAAiB,mBAAmB,EAAE,CAAC;AAAA,MACvC,aAAa,WAAW;AAAA,IAC1B;AAAA,EACF,GAAG,CAAC,IAAI,YAAY,iBAAiB,CAAC;AAEtC,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;",
+  "sourcesContent": ["\"use client\"\n\nimport * as React from 'react'\nimport type { UseQueryResult } from '@tanstack/react-query'\nimport type { TranslateFn } from '@open-mercato/shared/lib/i18n/context'\nimport type { MessageActionsProps, MessageContentProps } from '@open-mercato/shared/modules/messages/types'\nimport { flash } from '@open-mercato/ui/backend/FlashMessages'\nimport { useGuardedMutation } from '@open-mercato/ui/backend/injection/useGuardedMutation'\nimport { apiCall } from '@open-mercato/ui/backend/utils/apiCall'\nimport type {\n  ActionResult,\n  MessageAction,\n  MessageAttachment,\n  MessageDetail,\n  PendingActionConfirmation,\n} from '../types'\nimport { isSafeNavigationHref, parseObjectActionId, toErrorMessage } from '../utils'\n\ntype RequestAndRefreshOptions = {\n  skipDetailAutoMarkRead?: boolean\n  onSuccess?: () => void\n}\n\ntype ConversationActionKind =\n  | 'archiveConversation'\n  | 'unarchiveConversation'\n  | 'deleteConversation'\n  | 'markAllUnread'\n  | 'markAllRead'\n\ntype MessageDetailMutationContext = {\n  resourceKind: 'message' | 'conversation'\n  messageId: string\n  action: string\n  retryLastMutation: () => Promise<boolean>\n}\n\ntype UseMessageDetailsActionsInput = {\n  id: string\n  t: TranslateFn\n  detail: MessageDetail | null\n  detailQuery: UseQueryResult<MessageDetail | null, Error>\n  attachments: MessageAttachment[] | undefined\n  isArchived: boolean\n  onDeleted: () => void\n  onMarkedUnread: () => void\n  refreshDetailWithoutAutoMarkRead: () => Promise<MessageDetail | null>\n  suppressAutoMarkRead: () => void\n}\n\nexport function useMessageDetailsActions({\n  id,\n  t,\n  detail,\n  detailQuery,\n  attachments,\n  isArchived,\n  onDeleted,\n  onMarkedUnread,\n  refreshDetailWithoutAutoMarkRead,\n  suppressAutoMarkRead,\n}: UseMessageDetailsActionsInput) {\n  const [replyOpen, setReplyOpen] = React.useState(false)\n  const [forwardOpen, setForwardOpen] = React.useState(false)\n  const [editOpen, setEditOpen] = React.useState(false)\n  const [updatingState, setUpdatingState] = React.useState(false)\n  const [executingActionId, setExecutingActionId] = React.useState<string | null>(null)\n  const [pendingActionConfirmation, setPendingActionConfirmation] = React.useState<PendingActionConfirmation | null>(null)\n  const [deleteConfirmationOpen, setDeleteConfirmationOpen] = React.useState(false)\n  const [activeConversationAction, setActiveConversationAction] = React.useState<ConversationActionKind | null>(null)\n\n  const { runMutation, retryLastMutation } = useGuardedMutation<MessageDetailMutationContext>({\n    contextId: 'messages-detail-actions',\n  })\n\n  const requestAndRefresh = React.useCallback(async (\n    url: string,\n    method: 'PUT' | 'DELETE',\n    options?: RequestAndRefreshOptions,\n  ) => {\n    setUpdatingState(true)\n    try {\n      await runMutation({\n        operation: async () => {\n          const call = await apiCall<{ ok?: boolean }>(url, { method })\n          if (!call.ok) {\n            throw new Error(\n              toErrorMessage(call.result)\n              ?? t('messages.errors.stateChangeFailed', 'Failed to update message state.'),\n            )\n          }\n          if (options?.skipDetailAutoMarkRead) {\n            await refreshDetailWithoutAutoMarkRead()\n          } else {\n            await detailQuery.refetch()\n          }\n        },\n        context: { resourceKind: 'message', messageId: id, action: 'state-change', retryLastMutation },\n        mutationPayload: { messageId: id, action: 'state-change', url, method },\n      })\n      options?.onSuccess?.()\n    } catch (err) {\n      flash(\n        err instanceof Error\n          ? err.message\n          : t('messages.errors.stateChangeFailed', 'Failed to update message state.'),\n        'error',\n      )\n    } finally {\n      setUpdatingState(false)\n    }\n  }, [detailQuery, id, refreshDetailWithoutAutoMarkRead, retryLastMutation, runMutation, t])\n\n  const handleDelete = React.useCallback(async () => {\n    setUpdatingState(true)\n    try {\n      await runMutation({\n        operation: async () => {\n          const call = await apiCall<{ ok?: boolean }>(`/api/messages/${encodeURIComponent(id)}`, {\n            method: 'DELETE',\n          })\n          if (!call.ok) {\n            throw new Error(toErrorMessage(call.result) ?? t('messages.errors.deleteFailed', 'Failed to delete message.'))\n          }\n        },\n        context: { resourceKind: 'message', messageId: id, action: 'delete', retryLastMutation },\n        mutationPayload: { messageId: id, action: 'delete' },\n      })\n      flash(t('messages.flash.deleted', 'Message deleted.'), 'success')\n      onDeleted()\n    } catch (err) {\n      flash(\n        err instanceof Error\n          ? err.message\n          : t('messages.errors.deleteFailed', 'Failed to delete message.'),\n        'error',\n      )\n    } finally {\n      setUpdatingState(false)\n    }\n  }, [id, onDeleted, retryLastMutation, runMutation, t])\n\n  const runConversationAction = React.useCallback(async (\n    action: ConversationActionKind,\n    options: {\n      url: string\n      method: 'PUT' | 'DELETE'\n      successMessage: string\n      skipDetailAutoMarkRead?: boolean\n      onSuccess?: () => void\n    },\n  ) => {\n    setActiveConversationAction(action)\n    try {\n      await runMutation({\n        operation: async () => {\n          const call = await apiCall<{ ok?: boolean; affectedCount?: number }>(options.url, { method: options.method })\n          if (!call.ok) {\n            throw new Error(\n              toErrorMessage(call.result)\n              ?? t('messages.errors.conversationActionFailed', 'Failed to update conversation.'),\n            )\n          }\n        },\n        context: { resourceKind: 'conversation', messageId: id, action, retryLastMutation },\n        mutationPayload: { messageId: id, action, url: options.url, method: options.method },\n      })\n\n      flash(options.successMessage, 'success')\n\n      if (options.onSuccess) {\n        options.onSuccess()\n        return\n      }\n\n      if (options.skipDetailAutoMarkRead) {\n        await refreshDetailWithoutAutoMarkRead()\n      } else {\n        await detailQuery.refetch()\n      }\n    } catch (err) {\n      flash(\n        err instanceof Error\n          ? err.message\n          : t('messages.errors.conversationActionFailed', 'Failed to update conversation.'),\n        'error',\n      )\n    } finally {\n      setActiveConversationAction(null)\n    }\n  }, [detailQuery, id, refreshDetailWithoutAutoMarkRead, retryLastMutation, runMutation, t])\n\n  const archiveConversation = React.useCallback(async (messageId?: string) => {\n    const targetMessageId = messageId ?? id\n    await runConversationAction('archiveConversation', {\n      url: `/api/messages/${encodeURIComponent(targetMessageId)}/conversation/archive`,\n      method: 'PUT',\n      successMessage: t('messages.flash.conversationArchived', 'Conversation archived.'),\n    })\n  }, [id, runConversationAction, t])\n\n  const unarchiveConversation = React.useCallback(async (messageId?: string) => {\n    const targetMessageId = messageId ?? id\n    await runConversationAction('unarchiveConversation', {\n      url: `/api/messages/${encodeURIComponent(targetMessageId)}/conversation/archive`,\n      method: 'DELETE',\n      successMessage: t('messages.flash.conversationUnarchived', 'Conversation restored from archive.'),\n    })\n  }, [id, runConversationAction, t])\n\n  const markConversationUnread = React.useCallback(async (messageId?: string) => {\n    suppressAutoMarkRead()\n    const targetMessageId = messageId ?? id\n    await runConversationAction('markAllUnread', {\n      url: `/api/messages/${encodeURIComponent(targetMessageId)}/conversation/read`,\n      method: 'DELETE',\n      successMessage: t('messages.flash.conversationMarkedUnread', 'Conversation marked unread.'),\n      onSuccess: onMarkedUnread,\n    })\n  }, [id, onMarkedUnread, runConversationAction, suppressAutoMarkRead, t])\n\n  const markConversationRead = React.useCallback(async (messageId?: string) => {\n    const targetMessageId = messageId ?? id\n    await runConversationAction('markAllRead', {\n      url: `/api/messages/${encodeURIComponent(targetMessageId)}/conversation/read`,\n      method: 'PUT',\n      successMessage: t('messages.flash.conversationMarkedRead', 'Conversation marked read.'),\n    })\n  }, [id, runConversationAction, t])\n\n  const deleteConversation = React.useCallback(async (messageId?: string) => {\n    const targetMessageId = messageId ?? id\n    await runConversationAction('deleteConversation', {\n      url: `/api/messages/${encodeURIComponent(targetMessageId)}/conversation`,\n      method: 'DELETE',\n      successMessage: t('messages.flash.conversationDeleted', 'Conversation deleted.'),\n      onSuccess: onDeleted,\n    })\n  }, [id, onDeleted, runConversationAction, t])\n\n  const handleDeleteDialogKeyDown = React.useCallback((event: React.KeyboardEvent<HTMLDivElement>) => {\n    if ((event.metaKey || event.ctrlKey) && event.key === 'Enter') {\n      event.preventDefault()\n      void handleDelete()\n      return\n    }\n\n    if (event.key === 'Escape') {\n      event.preventDefault()\n      setDeleteConfirmationOpen(false)\n    }\n  }, [handleDelete])\n\n  const executeAction = React.useCallback(async (action: MessageAction, payload?: Record<string, unknown>) => {\n    setExecutingActionId(action.id)\n    try {\n      const call = await runMutation({\n        operation: async () => {\n          const result = await apiCall<ActionResult>(\n            `/api/messages/${encodeURIComponent(id)}/actions/${encodeURIComponent(action.id)}`,\n            {\n              method: 'POST',\n              headers: { 'Content-Type': 'application/json' },\n              body: JSON.stringify(payload ?? {}),\n            },\n          )\n\n          if (!result.ok) {\n            throw new Error(\n              toErrorMessage(result.result)\n              ?? t('messages.errors.actionFailed', 'Failed to execute action.'),\n            )\n          }\n\n          return result\n        },\n        context: { resourceKind: 'message', messageId: id, action: 'execute-action', retryLastMutation },\n        mutationPayload: { messageId: id, action: 'execute-action', actionId: action.id },\n      })\n\n      flash(t('messages.flash.actionSuccess', 'Action completed.'), 'success')\n\n      const redirectTarget = call.result?.result?.redirect\n      if (\n        typeof redirectTarget === 'string'\n        && redirectTarget.trim().length > 0\n        && isSafeNavigationHref(redirectTarget)\n      ) {\n        window.location.href = redirectTarget\n        return\n      }\n\n      await detailQuery.refetch()\n    } catch (err) {\n      flash(\n        err instanceof Error\n          ? err.message\n          : t('messages.errors.actionFailed', 'Failed to execute action.'),\n        'error',\n      )\n    } finally {\n      setExecutingActionId(null)\n    }\n  }, [detailQuery, id, retryLastMutation, runMutation, t])\n\n  const handleExecuteAction = React.useCallback(async (action: MessageAction, payload?: Record<string, unknown>) => {\n    if (executingActionId || detail?.actionTaken) return\n\n    if (action.confirmRequired) {\n      setPendingActionConfirmation({ action, payload })\n      return\n    }\n\n    await executeAction(action, payload)\n  }, [detail?.actionTaken, executeAction, executingActionId])\n\n  const handleConfirmPendingAction = React.useCallback(async () => {\n    if (!pendingActionConfirmation || executingActionId || detail?.actionTaken) return\n    const { action, payload } = pendingActionConfirmation\n    setPendingActionConfirmation(null)\n    await executeAction(action, payload)\n  }, [detail?.actionTaken, executeAction, executingActionId, pendingActionConfirmation])\n\n  const handleActionConfirmDialogKeyDown = React.useCallback((event: React.KeyboardEvent<HTMLDivElement>) => {\n    if ((event.metaKey || event.ctrlKey) && event.key === 'Enter') {\n      event.preventDefault()\n      void handleConfirmPendingAction()\n      return\n    }\n\n    if (event.key === 'Escape') {\n      event.preventDefault()\n      setPendingActionConfirmation(null)\n    }\n  }, [handleConfirmPendingAction])\n\n  const contentProps = React.useMemo<MessageContentProps>(() => ({\n    message: {\n      id: detail?.id ?? '',\n      type: detail?.type ?? 'default',\n      subject: detail?.subject ?? '',\n      body: detail?.body ?? '',\n      bodyFormat: detail?.bodyFormat ?? 'text',\n      priority: (detail?.priority ?? 'normal') as 'low' | 'normal' | 'high' | 'urgent',\n      sentAt: detail?.sentAt ? new Date(detail.sentAt) : null,\n      senderName: detail?.senderName ?? undefined,\n      senderUserId: detail?.senderUserId ?? '',\n      actionData: detail?.actionData ?? null,\n      actionTaken: detail?.actionTaken ?? null,\n      actionTakenAt: detail?.actionTakenAt ? new Date(detail.actionTakenAt) : null,\n    },\n    objects: (detail?.objects ?? []).map((item) => ({\n      id: item.id,\n      entityModule: item.entityModule,\n      entityType: item.entityType,\n      entityId: item.entityId,\n      actionRequired: item.actionRequired,\n      snapshot: item.snapshot ?? undefined,\n    })),\n    attachments: (attachments ?? []).map((item) => ({\n      id: item.id,\n      fileName: item.fileName,\n      fileSize: item.fileSize,\n      mimeType: item.mimeType,\n      url: item.url,\n    })),\n  }), [attachments, detail])\n\n  const handleExecuteActionById = React.useCallback<MessageActionsProps['onExecuteAction']>(async (actionId, payload) => {\n    const action = detail?.actionData?.actions?.find((entry) => {\n      if (parseObjectActionId(entry.id)) return false\n      return entry.id === actionId\n    })\n    if (!action) return\n    await handleExecuteAction(action, payload)\n  }, [detail?.actionData?.actions, handleExecuteAction])\n\n  const messageActions = React.useMemo(() => {\n    return (detail?.actionData?.actions ?? []).filter((action) => !parseObjectActionId(action.id))\n  }, [detail?.actionData?.actions])\n\n  const objectActionsByObjectId = React.useMemo(() => {\n    const byObjectId = new Map<string, Map<string, MessageAction>>()\n    for (const action of detail?.actionData?.actions ?? []) {\n      const parsed = parseObjectActionId(action.id)\n      if (!parsed) continue\n      const current = byObjectId.get(parsed.objectId) ?? new Map<string, MessageAction>()\n      current.set(parsed.actionId, action)\n      byObjectId.set(parsed.objectId, current)\n    }\n    return byObjectId\n  }, [detail?.actionData?.actions])\n\n  const toggleRead = React.useCallback(async () => {\n    if (detail?.isRead) {\n      suppressAutoMarkRead()\n    }\n    await requestAndRefresh(\n      `/api/messages/${encodeURIComponent(id)}/read`,\n      detail?.isRead ? 'DELETE' : 'PUT',\n      detail?.isRead ? { skipDetailAutoMarkRead: true, onSuccess: onMarkedUnread } : undefined,\n    )\n  }, [detail?.isRead, id, onMarkedUnread, requestAndRefresh, suppressAutoMarkRead])\n\n  const toggleArchive = React.useCallback(async () => {\n    await requestAndRefresh(\n      `/api/messages/${encodeURIComponent(id)}/archive`,\n      isArchived ? 'DELETE' : 'PUT',\n    )\n  }, [id, isArchived, requestAndRefresh])\n\n  return {\n    replyOpen,\n    setReplyOpen,\n    forwardOpen,\n    setForwardOpen,\n    editOpen,\n    setEditOpen,\n    updatingState,\n    executingActionId,\n    pendingActionConfirmation,\n    setPendingActionConfirmation,\n    deleteConfirmationOpen,\n    setDeleteConfirmationOpen,\n    activeConversationAction,\n    toggleRead,\n    toggleArchive,\n    archiveConversation,\n    unarchiveConversation,\n    deleteConversation,\n    markConversationUnread,\n    markConversationRead,\n    requestAndRefresh,\n    handleDelete,\n    handleDeleteDialogKeyDown,\n    handleExecuteAction,\n    handleConfirmPendingAction,\n    handleActionConfirmDialogKeyDown,\n    contentProps,\n    handleExecuteActionById,\n    messageActions,\n    objectActionsByObjectId,\n  }\n}\n"],
+  "mappings": ";AAEA,YAAY,WAAW;AAIvB,SAAS,aAAa;AACtB,SAAS,0BAA0B;AACnC,SAAS,eAAe;AAQxB,SAAS,sBAAsB,qBAAqB,sBAAsB;AAkCnE,SAAS,yBAAyB;AAAA,EACvC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,GAAkC;AAChC,QAAM,CAAC,WAAW,YAAY,IAAI,MAAM,SAAS,KAAK;AACtD,QAAM,CAAC,aAAa,cAAc,IAAI,MAAM,SAAS,KAAK;AAC1D,QAAM,CAAC,UAAU,WAAW,IAAI,MAAM,SAAS,KAAK;AACpD,QAAM,CAAC,eAAe,gBAAgB,IAAI,MAAM,SAAS,KAAK;AAC9D,QAAM,CAAC,mBAAmB,oBAAoB,IAAI,MAAM,SAAwB,IAAI;AACpF,QAAM,CAAC,2BAA2B,4BAA4B,IAAI,MAAM,SAA2C,IAAI;AACvH,QAAM,CAAC,wBAAwB,yBAAyB,IAAI,MAAM,SAAS,KAAK;AAChF,QAAM,CAAC,0BAA0B,2BAA2B,IAAI,MAAM,SAAwC,IAAI;AAElH,QAAM,EAAE,aAAa,kBAAkB,IAAI,mBAAiD;AAAA,IAC1F,WAAW;AAAA,EACb,CAAC;AAED,QAAM,oBAAoB,MAAM,YAAY,OAC1C,KACA,QACA,YACG;AACH,qBAAiB,IAAI;AACrB,QAAI;AACF,YAAM,YAAY;AAAA,QAChB,WAAW,YAAY;AACrB,gBAAM,OAAO,MAAM,QAA0B,KAAK,EAAE,OAAO,CAAC;AAC5D,cAAI,CAAC,KAAK,IAAI;AACZ,kBAAM,IAAI;AAAA,cACR,eAAe,KAAK,MAAM,KACvB,EAAE,qCAAqC,iCAAiC;AAAA,YAC7E;AAAA,UACF;AACA,cAAI,SAAS,wBAAwB;AACnC,kBAAM,iCAAiC;AAAA,UACzC,OAAO;AACL,kBAAM,YAAY,QAAQ;AAAA,UAC5B;AAAA,QACF;AAAA,QACA,SAAS,EAAE,cAAc,WAAW,WAAW,IAAI,QAAQ,gBAAgB,kBAAkB;AAAA,QAC7F,iBAAiB,EAAE,WAAW,IAAI,QAAQ,gBAAgB,KAAK,OAAO;AAAA,MACxE,CAAC;AACD,eAAS,YAAY;AAAA,IACvB,SAAS,KAAK;AACZ;AAAA,QACE,eAAe,QACX,IAAI,UACJ,EAAE,qCAAqC,iCAAiC;AAAA,QAC5E;AAAA,MACF;AAAA,IACF,UAAE;AACA,uBAAiB,KAAK;AAAA,IACxB;AAAA,EACF,GAAG,CAAC,aAAa,IAAI,kCAAkC,mBAAmB,aAAa,CAAC,CAAC;AAEzF,QAAM,eAAe,MAAM,YAAY,YAAY;AACjD,qBAAiB,IAAI;AACrB,QAAI;AACF,YAAM,YAAY;AAAA,QAChB,WAAW,YAAY;AACrB,gBAAM,OAAO,MAAM,QAA0B,iBAAiB,mBAAmB,EAAE,CAAC,IAAI;AAAA,YACtF,QAAQ;AAAA,UACV,CAAC;AACD,cAAI,CAAC,KAAK,IAAI;AACZ,kBAAM,IAAI,MAAM,eAAe,KAAK,MAAM,KAAK,EAAE,gCAAgC,2BAA2B,CAAC;AAAA,UAC/G;AAAA,QACF;AAAA,QACA,SAAS,EAAE,cAAc,WAAW,WAAW,IAAI,QAAQ,UAAU,kBAAkB;AAAA,QACvF,iBAAiB,EAAE,WAAW,IAAI,QAAQ,SAAS;AAAA,MACrD,CAAC;AACD,YAAM,EAAE,0BAA0B,kBAAkB,GAAG,SAAS;AAChE,gBAAU;AAAA,IACZ,SAAS,KAAK;AACZ;AAAA,QACE,eAAe,QACX,IAAI,UACJ,EAAE,gCAAgC,2BAA2B;AAAA,QACjE;AAAA,MACF;AAAA,IACF,UAAE;AACA,uBAAiB,KAAK;AAAA,IACxB;AAAA,EACF,GAAG,CAAC,IAAI,WAAW,mBAAmB,aAAa,CAAC,CAAC;AAErD,QAAM,wBAAwB,MAAM,YAAY,OAC9C,QACA,YAOG;AACH,gCAA4B,MAAM;AAClC,QAAI;AACF,YAAM,YAAY;AAAA,QAChB,WAAW,YAAY;AACrB,gBAAM,OAAO,MAAM,QAAkD,QAAQ,KAAK,EAAE,QAAQ,QAAQ,OAAO,CAAC;AAC5G,cAAI,CAAC,KAAK,IAAI;AACZ,kBAAM,IAAI;AAAA,cACR,eAAe,KAAK,MAAM,KACvB,EAAE,4CAA4C,gCAAgC;AAAA,YACnF;AAAA,UACF;AAAA,QACF;AAAA,QACA,SAAS,EAAE,cAAc,gBAAgB,WAAW,IAAI,QAAQ,kBAAkB;AAAA,QAClF,iBAAiB,EAAE,WAAW,IAAI,QAAQ,KAAK,QAAQ,KAAK,QAAQ,QAAQ,OAAO;AAAA,MACrF,CAAC;AAED,YAAM,QAAQ,gBAAgB,SAAS;AAEvC,UAAI,QAAQ,WAAW;AACrB,gBAAQ,UAAU;AAClB;AAAA,MACF;AAEA,UAAI,QAAQ,wBAAwB;AAClC,cAAM,iCAAiC;AAAA,MACzC,OAAO;AACL,cAAM,YAAY,QAAQ;AAAA,MAC5B;AAAA,IACF,SAAS,KAAK;AACZ;AAAA,QACE,eAAe,QACX,IAAI,UACJ,EAAE,4CAA4C,gCAAgC;AAAA,QAClF;AAAA,MACF;AAAA,IACF,UAAE;AACA,kCAA4B,IAAI;AAAA,IAClC;AAAA,EACF,GAAG,CAAC,aAAa,IAAI,kCAAkC,mBAAmB,aAAa,CAAC,CAAC;AAEzF,QAAM,sBAAsB,MAAM,YAAY,OAAO,cAAuB;AAC1E,UAAM,kBAAkB,aAAa;AACrC,UAAM,sBAAsB,uBAAuB;AAAA,MACjD,KAAK,iBAAiB,mBAAmB,eAAe,CAAC;AAAA,MACzD,QAAQ;AAAA,MACR,gBAAgB,EAAE,uCAAuC,wBAAwB;AAAA,IACnF,CAAC;AAAA,EACH,GAAG,CAAC,IAAI,uBAAuB,CAAC,CAAC;AAEjC,QAAM,wBAAwB,MAAM,YAAY,OAAO,cAAuB;AAC5E,UAAM,kBAAkB,aAAa;AACrC,UAAM,sBAAsB,yBAAyB;AAAA,MACnD,KAAK,iBAAiB,mBAAmB,eAAe,CAAC;AAAA,MACzD,QAAQ;AAAA,MACR,gBAAgB,EAAE,yCAAyC,qCAAqC;AAAA,IAClG,CAAC;AAAA,EACH,GAAG,CAAC,IAAI,uBAAuB,CAAC,CAAC;AAEjC,QAAM,yBAAyB,MAAM,YAAY,OAAO,cAAuB;AAC7E,yBAAqB;AACrB,UAAM,kBAAkB,aAAa;AACrC,UAAM,sBAAsB,iBAAiB;AAAA,MAC3C,KAAK,iBAAiB,mBAAmB,eAAe,CAAC;AAAA,MACzD,QAAQ;AAAA,MACR,gBAAgB,EAAE,2CAA2C,6BAA6B;AAAA,MAC1F,WAAW;AAAA,IACb,CAAC;AAAA,EACH,GAAG,CAAC,IAAI,gBAAgB,uBAAuB,sBAAsB,CAAC,CAAC;AAEvE,QAAM,uBAAuB,MAAM,YAAY,OAAO,cAAuB;AAC3E,UAAM,kBAAkB,aAAa;AACrC,UAAM,sBAAsB,eAAe;AAAA,MACzC,KAAK,iBAAiB,mBAAmB,eAAe,CAAC;AAAA,MACzD,QAAQ;AAAA,MACR,gBAAgB,EAAE,yCAAyC,2BAA2B;AAAA,IACxF,CAAC;AAAA,EACH,GAAG,CAAC,IAAI,uBAAuB,CAAC,CAAC;AAEjC,QAAM,qBAAqB,MAAM,YAAY,OAAO,cAAuB;AACzE,UAAM,kBAAkB,aAAa;AACrC,UAAM,sBAAsB,sBAAsB;AAAA,MAChD,KAAK,iBAAiB,mBAAmB,eAAe,CAAC;AAAA,MACzD,QAAQ;AAAA,MACR,gBAAgB,EAAE,sCAAsC,uBAAuB;AAAA,MAC/E,WAAW;AAAA,IACb,CAAC;AAAA,EACH,GAAG,CAAC,IAAI,WAAW,uBAAuB,CAAC,CAAC;AAE5C,QAAM,4BAA4B,MAAM,YAAY,CAAC,UAA+C;AAClG,SAAK,MAAM,WAAW,MAAM,YAAY,MAAM,QAAQ,SAAS;AAC7D,YAAM,eAAe;AACrB,WAAK,aAAa;AAClB;AAAA,IACF;AAEA,QAAI,MAAM,QAAQ,UAAU;AAC1B,YAAM,eAAe;AACrB,gCAA0B,KAAK;AAAA,IACjC;AAAA,EACF,GAAG,CAAC,YAAY,CAAC;AAEjB,QAAM,gBAAgB,MAAM,YAAY,OAAO,QAAuB,YAAsC;AAC1G,yBAAqB,OAAO,EAAE;AAC9B,QAAI;AACF,YAAM,OAAO,MAAM,YAAY;AAAA,QAC7B,WAAW,YAAY;AACrB,gBAAM,SAAS,MAAM;AAAA,YACnB,iBAAiB,mBAAmB,EAAE,CAAC,YAAY,mBAAmB,OAAO,EAAE,CAAC;AAAA,YAChF;AAAA,cACE,QAAQ;AAAA,cACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,cAC9C,MAAM,KAAK,UAAU,WAAW,CAAC,CAAC;AAAA,YACpC;AAAA,UACF;AAEA,cAAI,CAAC,OAAO,IAAI;AACd,kBAAM,IAAI;AAAA,cACR,eAAe,OAAO,MAAM,KACzB,EAAE,gCAAgC,2BAA2B;AAAA,YAClE;AAAA,UACF;AAEA,iBAAO;AAAA,QACT;AAAA,QACA,SAAS,EAAE,cAAc,WAAW,WAAW,IAAI,QAAQ,kBAAkB,kBAAkB;AAAA,QAC/F,iBAAiB,EAAE,WAAW,IAAI,QAAQ,kBAAkB,UAAU,OAAO,GAAG;AAAA,MAClF,CAAC;AAED,YAAM,EAAE,gCAAgC,mBAAmB,GAAG,SAAS;AAEvE,YAAM,iBAAiB,KAAK,QAAQ,QAAQ;AAC5C,UACE,OAAO,mBAAmB,YACvB,eAAe,KAAK,EAAE,SAAS,KAC/B,qBAAqB,cAAc,GACtC;AACA,eAAO,SAAS,OAAO;AACvB;AAAA,MACF;AAEA,YAAM,YAAY,QAAQ;AAAA,IAC5B,SAAS,KAAK;AACZ;AAAA,QACE,eAAe,QACX,IAAI,UACJ,EAAE,gCAAgC,2BAA2B;AAAA,QACjE;AAAA,MACF;AAAA,IACF,UAAE;AACA,2BAAqB,IAAI;AAAA,IAC3B;AAAA,EACF,GAAG,CAAC,aAAa,IAAI,mBAAmB,aAAa,CAAC,CAAC;AAEvD,QAAM,sBAAsB,MAAM,YAAY,OAAO,QAAuB,YAAsC;AAChH,QAAI,qBAAqB,QAAQ,YAAa;AAE9C,QAAI,OAAO,iBAAiB;AAC1B,mCAA6B,EAAE,QAAQ,QAAQ,CAAC;AAChD;AAAA,IACF;AAEA,UAAM,cAAc,QAAQ,OAAO;AAAA,EACrC,GAAG,CAAC,QAAQ,aAAa,eAAe,iBAAiB,CAAC;AAE1D,QAAM,6BAA6B,MAAM,YAAY,YAAY;AAC/D,QAAI,CAAC,6BAA6B,qBAAqB,QAAQ,YAAa;AAC5E,UAAM,EAAE,QAAQ,QAAQ,IAAI;AAC5B,iCAA6B,IAAI;AACjC,UAAM,cAAc,QAAQ,OAAO;AAAA,EACrC,GAAG,CAAC,QAAQ,aAAa,eAAe,mBAAmB,yBAAyB,CAAC;AAErF,QAAM,mCAAmC,MAAM,YAAY,CAAC,UAA+C;AACzG,SAAK,MAAM,WAAW,MAAM,YAAY,MAAM,QAAQ,SAAS;AAC7D,YAAM,eAAe;AACrB,WAAK,2BAA2B;AAChC;AAAA,IACF;AAEA,QAAI,MAAM,QAAQ,UAAU;AAC1B,YAAM,eAAe;AACrB,mCAA6B,IAAI;AAAA,IACnC;AAAA,EACF,GAAG,CAAC,0BAA0B,CAAC;AAE/B,QAAM,eAAe,MAAM,QAA6B,OAAO;AAAA,IAC7D,SAAS;AAAA,MACP,IAAI,QAAQ,MAAM;AAAA,MAClB,MAAM,QAAQ,QAAQ;AAAA,MACtB,SAAS,QAAQ,WAAW;AAAA,MAC5B,MAAM,QAAQ,QAAQ;AAAA,MACtB,YAAY,QAAQ,cAAc;AAAA,MAClC,UAAW,QAAQ,YAAY;AAAA,MAC/B,QAAQ,QAAQ,SAAS,IAAI,KAAK,OAAO,MAAM,IAAI;AAAA,MACnD,YAAY,QAAQ,cAAc;AAAA,MAClC,cAAc,QAAQ,gBAAgB;AAAA,MACtC,YAAY,QAAQ,cAAc;AAAA,MAClC,aAAa,QAAQ,eAAe;AAAA,MACpC,eAAe,QAAQ,gBAAgB,IAAI,KAAK,OAAO,aAAa,IAAI;AAAA,IAC1E;AAAA,IACA,UAAU,QAAQ,WAAW,CAAC,GAAG,IAAI,CAAC,UAAU;AAAA,MAC9C,IAAI,KAAK;AAAA,MACT,cAAc,KAAK;AAAA,MACnB,YAAY,KAAK;AAAA,MACjB,UAAU,KAAK;AAAA,MACf,gBAAgB,KAAK;AAAA,MACrB,UAAU,KAAK,YAAY;AAAA,IAC7B,EAAE;AAAA,IACF,cAAc,eAAe,CAAC,GAAG,IAAI,CAAC,UAAU;AAAA,MAC9C,IAAI,KAAK;AAAA,MACT,UAAU,KAAK;AAAA,MACf,UAAU,KAAK;AAAA,MACf,UAAU,KAAK;AAAA,MACf,KAAK,KAAK;AAAA,IACZ,EAAE;AAAA,EACJ,IAAI,CAAC,aAAa,MAAM,CAAC;AAEzB,QAAM,0BAA0B,MAAM,YAAoD,OAAO,UAAU,YAAY;AACrH,UAAM,SAAS,QAAQ,YAAY,SAAS,KAAK,CAAC,UAAU;AAC1D,UAAI,oBAAoB,MAAM,EAAE,EAAG,QAAO;AAC1C,aAAO,MAAM,OAAO;AAAA,IACtB,CAAC;AACD,QAAI,CAAC,OAAQ;AACb,UAAM,oBAAoB,QAAQ,OAAO;AAAA,EAC3C,GAAG,CAAC,QAAQ,YAAY,SAAS,mBAAmB,CAAC;AAErD,QAAM,iBAAiB,MAAM,QAAQ,MAAM;AACzC,YAAQ,QAAQ,YAAY,WAAW,CAAC,GAAG,OAAO,CAAC,WAAW,CAAC,oBAAoB,OAAO,EAAE,CAAC;AAAA,EAC/F,GAAG,CAAC,QAAQ,YAAY,OAAO,CAAC;AAEhC,QAAM,0BAA0B,MAAM,QAAQ,MAAM;AAClD,UAAM,aAAa,oBAAI,IAAwC;AAC/D,eAAW,UAAU,QAAQ,YAAY,WAAW,CAAC,GAAG;AACtD,YAAM,SAAS,oBAAoB,OAAO,EAAE;AAC5C,UAAI,CAAC,OAAQ;AACb,YAAM,UAAU,WAAW,IAAI,OAAO,QAAQ,KAAK,oBAAI,IAA2B;AAClF,cAAQ,IAAI,OAAO,UAAU,MAAM;AACnC,iBAAW,IAAI,OAAO,UAAU,OAAO;AAAA,IACzC;AACA,WAAO;AAAA,EACT,GAAG,CAAC,QAAQ,YAAY,OAAO,CAAC;AAEhC,QAAM,aAAa,MAAM,YAAY,YAAY;AAC/C,QAAI,QAAQ,QAAQ;AAClB,2BAAqB;AAAA,IACvB;AACA,UAAM;AAAA,MACJ,iBAAiB,mBAAmB,EAAE,CAAC;AAAA,MACvC,QAAQ,SAAS,WAAW;AAAA,MAC5B,QAAQ,SAAS,EAAE,wBAAwB,MAAM,WAAW,eAAe,IAAI;AAAA,IACjF;AAAA,EACF,GAAG,CAAC,QAAQ,QAAQ,IAAI,gBAAgB,mBAAmB,oBAAoB,CAAC;AAEhF,QAAM,gBAAgB,MAAM,YAAY,YAAY;AAClD,UAAM;AAAA,MACJ,iBAAiB,mBAAmB,EAAE,CAAC;AAAA,MACvC,aAAa,WAAW;AAAA,IAC1B;AAAA,EACF,GAAG,CAAC,IAAI,YAAY,iBAAiB,CAAC;AAEtC,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/modules/messages/components/message-detail/hooks/useMessageDetailsQueries.js

@@ -13,10 +13,15 @@ function useMessageDetailsQueries({
     () => ["messages", "detail", id, scopeVersion],
     [id, scopeVersion]
   );
+  const suppressAutoMarkReadRef = React.useRef(false);
+  React.useEffect(() => {
+    suppressAutoMarkReadRef.current = false;
+  }, [id]);
   const detailQuery = useQuery({
     queryKey: detailQueryKey,
     queryFn: async () => {
-      const call = await apiCall(`/api/messages/${encodeURIComponent(id)}`);
+      const detailUrl = suppressAutoMarkReadRef.current ? `/api/messages/${encodeURIComponent(id)}?skipMarkRead=1` : `/api/messages/${encodeURIComponent(id)}`;
+      const call = await apiCall(detailUrl);
       if (call.status === 404) {
         return null;
       }
@@ -66,6 +71,9 @@ function useMessageDetailsQueries({
     queryClient.setQueryData(detailQueryKey, call.result);
     return call.result;
   }, [detailQueryKey, id, queryClient, t]);
+  const suppressAutoMarkRead = React.useCallback(() => {
+    suppressAutoMarkReadRef.current = true;
+  }, []);
   const listItemComponentKey = detail?.typeDefinition.ui?.listItemComponent ?? null;
   const contentComponentKey = detail?.typeDefinition.ui?.contentComponent ?? null;
   const actionsComponentKey = detail?.typeDefinition.ui?.actionsComponent ?? null;
@@ -79,6 +87,7 @@ function useMessageDetailsQueries({
     attachmentsQuery,
     attachments,
     refreshDetailWithoutAutoMarkRead,
+    suppressAutoMarkRead,
     listItemComponentKey,
     contentComponentKey,
     actionsComponentKey

package/dist/modules/messages/components/message-detail/hooks/useMessageDetailsQueries.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../src/modules/messages/components/message-detail/hooks/useMessageDetailsQueries.ts"],
-  "sourcesContent": ["\"use client\"\n\nimport * as React from 'react'\nimport { useQuery } from '@tanstack/react-query'\nimport type { QueryClient } from '@tanstack/react-query'\nimport type { TranslateFn } from '@open-mercato/shared/lib/i18n/context'\nimport { apiCall } from '@open-mercato/ui/backend/utils/apiCall'\nimport type { MessageAttachment, MessageDetail } from '../types'\nimport { toErrorMessage } from '../utils'\n\ntype UseMessageDetailsQueriesInput = {\n  id: string\n  t: TranslateFn\n  scopeVersion: unknown\n  queryClient: QueryClient\n}\n\nexport function useMessageDetailsQueries({\n  id,\n  t,\n  scopeVersion,\n  queryClient,\n}: UseMessageDetailsQueriesInput) {\n  const detailQueryKey = React.useMemo(\n    () => ['messages', 'detail', id, scopeVersion],\n    [id, scopeVersion],\n  )\n\n  const detailQuery = useQuery<MessageDetail | null>({\n    queryKey: detailQueryKey,\n    queryFn: async () => {\n      const call = await apiCall<MessageDetail>(`/api/messages/${encodeURIComponent(id)}`)\n      if (call.status === 404) {\n        return null\n      }\n      if (!call.ok || !call.result) {\n        throw new Error(\n          toErrorMessage(call.result)\n          ?? t('messages.errors.loadDetailFailed', 'Failed to load message details.'),\n        )\n      }\n      return call.result\n    },\n  })\n\n  const detail = detailQuery.data ?? null\n  const isLoadingDetail = detailQuery.isLoading\n  const isDetailMissing = detailQuery.isSuccess && detailQuery.data === null\n  const loadErrorMessage = isDetailMissing\n    ? t('messages.errors.messageDeleted', 'This message is no longer available.')\n    : detailQuery.error instanceof Error\n      ? detailQuery.error.message\n      : t('messages.errors.loadDetailFailed', 'Failed to load message details.')\n\n  const attachmentsQuery = useQuery<MessageAttachment[]>({\n    queryKey: ['messages', 'detail', id, 'attachments', scopeVersion],\n    queryFn: async () => {\n      const call = await apiCall<{ attachments?: MessageAttachment[] }>(\n        `/api/messages/${encodeURIComponent(id)}/attachments`,\n      )\n\n      if (call.status === 404) {\n        return []\n      }\n\n      if (!call.ok) {\n        throw new Error(\n          toErrorMessage(call.result)\n          ?? t('messages.errors.loadDetailFailed', 'Failed to load message details.'),\n        )\n      }\n\n      return call.result?.attachments ?? []\n    },\n  })\n\n  const attachments = attachmentsQuery.data\n\n  const refreshDetailWithoutAutoMarkRead = React.useCallback(async () => {\n    const call = await apiCall<MessageDetail>(\n      `/api/messages/${encodeURIComponent(id)}?skipMarkRead=1`,\n    )\n\n    if (call.status === 404) {\n      queryClient.setQueryData(detailQueryKey, null)\n      return null\n    }\n\n    if (!call.ok || !call.result) {\n      throw new Error(\n        toErrorMessage(call.result)\n        ?? t('messages.errors.stateChangeFailed', 'Failed to update message state.'),\n      )\n    }\n\n    queryClient.setQueryData(detailQueryKey, call.result)\n    return call.result\n  }, [detailQueryKey, id, queryClient, t])\n\n  const listItemComponentKey = detail?.typeDefinition.ui?.listItemComponent ?? null\n  const contentComponentKey = detail?.typeDefinition.ui?.contentComponent ?? null\n  const actionsComponentKey = detail?.typeDefinition.ui?.actionsComponent ?? null\n\n  return {\n    detailQueryKey,\n    detailQuery,\n    detail,\n    isLoadingDetail,\n    isDetailMissing,\n    loadErrorMessage,\n    attachmentsQuery,\n    attachments,\n    refreshDetailWithoutAutoMarkRead,\n    listItemComponentKey,\n    contentComponentKey,\n    actionsComponentKey,\n  }\n}\n"],
-  "mappings": ";AAEA,YAAY,WAAW;AACvB,SAAS,gBAAgB;AAGzB,SAAS,eAAe;AAExB,SAAS,sBAAsB;AASxB,SAAS,yBAAyB;AAAA,EACvC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,GAAkC;AAChC,QAAM,iBAAiB,MAAM;AAAA,IAC3B,MAAM,CAAC,YAAY,UAAU,IAAI,YAAY;AAAA,IAC7C,CAAC,IAAI,YAAY;AAAA,EACnB;AAEA,QAAM,cAAc,SAA+B;AAAA,IACjD,UAAU;AAAA,IACV,SAAS,YAAY;AACnB,YAAM,OAAO,MAAM,QAAuB,iBAAiB,mBAAmB,EAAE,CAAC,EAAE;AACnF,UAAI,KAAK,WAAW,KAAK;AACvB,eAAO;AAAA,MACT;AACA,UAAI,CAAC,KAAK,MAAM,CAAC,KAAK,QAAQ;AAC5B,cAAM,IAAI;AAAA,UACR,eAAe,KAAK,MAAM,KACvB,EAAE,oCAAoC,iCAAiC;AAAA,QAC5E;AAAA,MACF;AACA,aAAO,KAAK;AAAA,IACd;AAAA,EACF,CAAC;AAED,QAAM,SAAS,YAAY,QAAQ;AACnC,QAAM,kBAAkB,YAAY;AACpC,QAAM,kBAAkB,YAAY,aAAa,YAAY,SAAS;AACtE,QAAM,mBAAmB,kBACrB,EAAE,kCAAkC,sCAAsC,IAC1E,YAAY,iBAAiB,QAC3B,YAAY,MAAM,UAClB,EAAE,oCAAoC,iCAAiC;AAE7E,QAAM,mBAAmB,SAA8B;AAAA,IACrD,UAAU,CAAC,YAAY,UAAU,IAAI,eAAe,YAAY;AAAA,IAChE,SAAS,YAAY;AACnB,YAAM,OAAO,MAAM;AAAA,QACjB,iBAAiB,mBAAmB,EAAE,CAAC;AAAA,MACzC;AAEA,UAAI,KAAK,WAAW,KAAK;AACvB,eAAO,CAAC;AAAA,MACV;AAEA,UAAI,CAAC,KAAK,IAAI;AACZ,cAAM,IAAI;AAAA,UACR,eAAe,KAAK,MAAM,KACvB,EAAE,oCAAoC,iCAAiC;AAAA,QAC5E;AAAA,MACF;AAEA,aAAO,KAAK,QAAQ,eAAe,CAAC;AAAA,IACtC;AAAA,EACF,CAAC;AAED,QAAM,cAAc,iBAAiB;AAErC,QAAM,mCAAmC,MAAM,YAAY,YAAY;AACrE,UAAM,OAAO,MAAM;AAAA,MACjB,iBAAiB,mBAAmB,EAAE,CAAC;AAAA,IACzC;AAEA,QAAI,KAAK,WAAW,KAAK;AACvB,kBAAY,aAAa,gBAAgB,IAAI;AAC7C,aAAO;AAAA,IACT;AAEA,QAAI,CAAC,KAAK,MAAM,CAAC,KAAK,QAAQ;AAC5B,YAAM,IAAI;AAAA,QACR,eAAe,KAAK,MAAM,KACvB,EAAE,qCAAqC,iCAAiC;AAAA,MAC7E;AAAA,IACF;AAEA,gBAAY,aAAa,gBAAgB,KAAK,MAAM;AACpD,WAAO,KAAK;AAAA,EACd,GAAG,CAAC,gBAAgB,IAAI,aAAa,CAAC,CAAC;AAEvC,QAAM,uBAAuB,QAAQ,eAAe,IAAI,qBAAqB;AAC7E,QAAM,sBAAsB,QAAQ,eAAe,IAAI,oBAAoB;AAC3E,QAAM,sBAAsB,QAAQ,eAAe,IAAI,oBAAoB;AAE3E,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;",
+  "sourcesContent": ["\"use client\"\n\nimport * as React from 'react'\nimport { useQuery } from '@tanstack/react-query'\nimport type { QueryClient } from '@tanstack/react-query'\nimport type { TranslateFn } from '@open-mercato/shared/lib/i18n/context'\nimport { apiCall } from '@open-mercato/ui/backend/utils/apiCall'\nimport type { MessageAttachment, MessageDetail } from '../types'\nimport { toErrorMessage } from '../utils'\n\ntype UseMessageDetailsQueriesInput = {\n  id: string\n  t: TranslateFn\n  scopeVersion: unknown\n  queryClient: QueryClient\n}\n\nexport function useMessageDetailsQueries({\n  id,\n  t,\n  scopeVersion,\n  queryClient,\n}: UseMessageDetailsQueriesInput) {\n  const detailQueryKey = React.useMemo(\n    () => ['messages', 'detail', id, scopeVersion],\n    [id, scopeVersion],\n  )\n\n  const suppressAutoMarkReadRef = React.useRef(false)\n\n  React.useEffect(() => {\n    suppressAutoMarkReadRef.current = false\n  }, [id])\n\n  const detailQuery = useQuery<MessageDetail | null>({\n    queryKey: detailQueryKey,\n    queryFn: async () => {\n      const detailUrl = suppressAutoMarkReadRef.current\n        ? `/api/messages/${encodeURIComponent(id)}?skipMarkRead=1`\n        : `/api/messages/${encodeURIComponent(id)}`\n      const call = await apiCall<MessageDetail>(detailUrl)\n      if (call.status === 404) {\n        return null\n      }\n      if (!call.ok || !call.result) {\n        throw new Error(\n          toErrorMessage(call.result)\n          ?? t('messages.errors.loadDetailFailed', 'Failed to load message details.'),\n        )\n      }\n      return call.result\n    },\n  })\n\n  const detail = detailQuery.data ?? null\n  const isLoadingDetail = detailQuery.isLoading\n  const isDetailMissing = detailQuery.isSuccess && detailQuery.data === null\n  const loadErrorMessage = isDetailMissing\n    ? t('messages.errors.messageDeleted', 'This message is no longer available.')\n    : detailQuery.error instanceof Error\n      ? detailQuery.error.message\n      : t('messages.errors.loadDetailFailed', 'Failed to load message details.')\n\n  const attachmentsQuery = useQuery<MessageAttachment[]>({\n    queryKey: ['messages', 'detail', id, 'attachments', scopeVersion],\n    queryFn: async () => {\n      const call = await apiCall<{ attachments?: MessageAttachment[] }>(\n        `/api/messages/${encodeURIComponent(id)}/attachments`,\n      )\n\n      if (call.status === 404) {\n        return []\n      }\n\n      if (!call.ok) {\n        throw new Error(\n          toErrorMessage(call.result)\n          ?? t('messages.errors.loadDetailFailed', 'Failed to load message details.'),\n        )\n      }\n\n      return call.result?.attachments ?? []\n    },\n  })\n\n  const attachments = attachmentsQuery.data\n\n  const refreshDetailWithoutAutoMarkRead = React.useCallback(async () => {\n    const call = await apiCall<MessageDetail>(\n      `/api/messages/${encodeURIComponent(id)}?skipMarkRead=1`,\n    )\n\n    if (call.status === 404) {\n      queryClient.setQueryData(detailQueryKey, null)\n      return null\n    }\n\n    if (!call.ok || !call.result) {\n      throw new Error(\n        toErrorMessage(call.result)\n        ?? t('messages.errors.stateChangeFailed', 'Failed to update message state.'),\n      )\n    }\n\n    queryClient.setQueryData(detailQueryKey, call.result)\n    return call.result\n  }, [detailQueryKey, id, queryClient, t])\n\n  const suppressAutoMarkRead = React.useCallback(() => {\n    suppressAutoMarkReadRef.current = true\n  }, [])\n\n  const listItemComponentKey = detail?.typeDefinition.ui?.listItemComponent ?? null\n  const contentComponentKey = detail?.typeDefinition.ui?.contentComponent ?? null\n  const actionsComponentKey = detail?.typeDefinition.ui?.actionsComponent ?? null\n\n  return {\n    detailQueryKey,\n    detailQuery,\n    detail,\n    isLoadingDetail,\n    isDetailMissing,\n    loadErrorMessage,\n    attachmentsQuery,\n    attachments,\n    refreshDetailWithoutAutoMarkRead,\n    suppressAutoMarkRead,\n    listItemComponentKey,\n    contentComponentKey,\n    actionsComponentKey,\n  }\n}\n"],
+  "mappings": ";AAEA,YAAY,WAAW;AACvB,SAAS,gBAAgB;AAGzB,SAAS,eAAe;AAExB,SAAS,sBAAsB;AASxB,SAAS,yBAAyB;AAAA,EACvC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,GAAkC;AAChC,QAAM,iBAAiB,MAAM;AAAA,IAC3B,MAAM,CAAC,YAAY,UAAU,IAAI,YAAY;AAAA,IAC7C,CAAC,IAAI,YAAY;AAAA,EACnB;AAEA,QAAM,0BAA0B,MAAM,OAAO,KAAK;AAElD,QAAM,UAAU,MAAM;AACpB,4BAAwB,UAAU;AAAA,EACpC,GAAG,CAAC,EAAE,CAAC;AAEP,QAAM,cAAc,SAA+B;AAAA,IACjD,UAAU;AAAA,IACV,SAAS,YAAY;AACnB,YAAM,YAAY,wBAAwB,UACtC,iBAAiB,mBAAmB,EAAE,CAAC,oBACvC,iBAAiB,mBAAmB,EAAE,CAAC;AAC3C,YAAM,OAAO,MAAM,QAAuB,SAAS;AACnD,UAAI,KAAK,WAAW,KAAK;AACvB,eAAO;AAAA,MACT;AACA,UAAI,CAAC,KAAK,MAAM,CAAC,KAAK,QAAQ;AAC5B,cAAM,IAAI;AAAA,UACR,eAAe,KAAK,MAAM,KACvB,EAAE,oCAAoC,iCAAiC;AAAA,QAC5E;AAAA,MACF;AACA,aAAO,KAAK;AAAA,IACd;AAAA,EACF,CAAC;AAED,QAAM,SAAS,YAAY,QAAQ;AACnC,QAAM,kBAAkB,YAAY;AACpC,QAAM,kBAAkB,YAAY,aAAa,YAAY,SAAS;AACtE,QAAM,mBAAmB,kBACrB,EAAE,kCAAkC,sCAAsC,IAC1E,YAAY,iBAAiB,QAC3B,YAAY,MAAM,UAClB,EAAE,oCAAoC,iCAAiC;AAE7E,QAAM,mBAAmB,SAA8B;AAAA,IACrD,UAAU,CAAC,YAAY,UAAU,IAAI,eAAe,YAAY;AAAA,IAChE,SAAS,YAAY;AACnB,YAAM,OAAO,MAAM;AAAA,QACjB,iBAAiB,mBAAmB,EAAE,CAAC;AAAA,MACzC;AAEA,UAAI,KAAK,WAAW,KAAK;AACvB,eAAO,CAAC;AAAA,MACV;AAEA,UAAI,CAAC,KAAK,IAAI;AACZ,cAAM,IAAI;AAAA,UACR,eAAe,KAAK,MAAM,KACvB,EAAE,oCAAoC,iCAAiC;AAAA,QAC5E;AAAA,MACF;AAEA,aAAO,KAAK,QAAQ,eAAe,CAAC;AAAA,IACtC;AAAA,EACF,CAAC;AAED,QAAM,cAAc,iBAAiB;AAErC,QAAM,mCAAmC,MAAM,YAAY,YAAY;AACrE,UAAM,OAAO,MAAM;AAAA,MACjB,iBAAiB,mBAAmB,EAAE,CAAC;AAAA,IACzC;AAEA,QAAI,KAAK,WAAW,KAAK;AACvB,kBAAY,aAAa,gBAAgB,IAAI;AAC7C,aAAO;AAAA,IACT;AAEA,QAAI,CAAC,KAAK,MAAM,CAAC,KAAK,QAAQ;AAC5B,YAAM,IAAI;AAAA,QACR,eAAe,KAAK,MAAM,KACvB,EAAE,qCAAqC,iCAAiC;AAAA,MAC7E;AAAA,IACF;AAEA,gBAAY,aAAa,gBAAgB,KAAK,MAAM;AACpD,WAAO,KAAK;AAAA,EACd,GAAG,CAAC,gBAAgB,IAAI,aAAa,CAAC,CAAC;AAEvC,QAAM,uBAAuB,MAAM,YAAY,MAAM;AACnD,4BAAwB,UAAU;AAAA,EACpC,GAAG,CAAC,CAAC;AAEL,QAAM,uBAAuB,QAAQ,eAAe,IAAI,qBAAqB;AAC7E,QAAM,sBAAsB,QAAQ,eAAe,IAAI,oBAAoB;AAC3E,QAAM,sBAAsB,QAAQ,eAAe,IAAI,oBAAoB;AAE3E,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/modules/payment_gateways/api/cancel/route.js

@@ -2,6 +2,7 @@ import { NextResponse } from "next/server";
 import { getAuthFromRequest } from "@open-mercato/shared/lib/auth/server";
 import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
 import { readJsonSafe } from "@open-mercato/shared/lib/http/readJsonSafe";
+import { isCrudHttpError } from "@open-mercato/shared/lib/crud/errors";
 import { cancelSchema } from "../../data/validators.js";
 import { paymentGatewaysTag } from "../openapi.js";
 import {
@@ -65,6 +66,9 @@ async function POST(req) {
     });
     return NextResponse.json(result);
   } catch (err) {
+    if (isCrudHttpError(err)) {
+      return NextResponse.json(err.body, { status: err.status });
+    }
     const message = err instanceof Error ? err.message : "Cancel failed";
     return NextResponse.json({ error: message }, { status: 502 });
   }
@@ -78,6 +82,7 @@ const openApi = {
       tags: [paymentGatewaysTag],
       responses: [
         { status: 200, description: "Payment cancelled" },
+        { status: 409, description: "Invalid payment status transition" },
         { status: 422, description: "Invalid payload" },
         { status: 502, description: "Gateway provider error" }
       ]

package/dist/modules/payment_gateways/api/cancel/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../src/modules/payment_gateways/api/cancel/route.ts"],
-  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { readJsonSafe } from '@open-mercato/shared/lib/http/readJsonSafe'\nimport { cancelSchema } from '../../data/validators'\nimport type { PaymentGatewayService } from '../../lib/gateway-service'\nimport { paymentGatewaysTag } from '../openapi'\nimport {\n  resolveUserFeatures,\n  runPaymentGatewayMutationGuardAfterSuccess,\n  runPaymentGatewayMutationGuards,\n} from '../guards'\n\nconst gatewayTransactionResourceKind = 'payment_gateways.gateway_transaction'\n\nexport const metadata = {\n  path: '/payment_gateways/cancel',\n  POST: { requireAuth: true, requireFeatures: ['payment_gateways.manage'] },\n}\n\nexport async function POST(req: Request) {\n  const auth = await getAuthFromRequest(req)\n  if (!auth?.tenantId || !auth.orgId) {\n    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n  }\n\n  const payload = await readJsonSafe<unknown>(req)\n  const parsed = cancelSchema.safeParse(payload)\n  if (!parsed.success) {\n    return NextResponse.json({ error: 'Invalid payload', details: parsed.error.flatten() }, { status: 422 })\n  }\n\n  const container = await createRequestContainer()\n  const guardResult = await runPaymentGatewayMutationGuards(\n    container,\n    {\n      tenantId: auth.tenantId,\n      organizationId: auth.orgId,\n      userId: auth.sub ?? '',\n      resourceKind: gatewayTransactionResourceKind,\n      resourceId: parsed.data.transactionId,\n      operation: 'update',\n      requestMethod: req.method,\n      requestHeaders: req.headers,\n      mutationPayload: parsed.data as Record<string, unknown>,\n    },\n    resolveUserFeatures(auth),\n  )\n  if (!guardResult.ok) {\n    return NextResponse.json(\n      guardResult.errorBody ?? { error: 'Operation blocked by guard' },\n      { status: guardResult.errorStatus ?? 422 },\n    )\n  }\n\n  const service = container.resolve('paymentGatewayService') as PaymentGatewayService\n\n  try {\n    const result = await service.cancelPayment(\n      parsed.data.transactionId,\n      parsed.data.reason,\n      { organizationId: auth.orgId as string, tenantId: auth.tenantId },\n    )\n    await runPaymentGatewayMutationGuardAfterSuccess(guardResult.afterSuccessCallbacks, {\n      tenantId: auth.tenantId,\n      organizationId: auth.orgId,\n      userId: auth.sub ?? '',\n      resourceKind: gatewayTransactionResourceKind,\n      resourceId: parsed.data.transactionId,\n      operation: 'update',\n      requestMethod: req.method,\n      requestHeaders: req.headers,\n    })\n    return NextResponse.json(result)\n  } catch (err: unknown) {\n    const message = err instanceof Error ? err.message : 'Cancel failed'\n    return NextResponse.json({ error: message }, { status: 502 })\n  }\n}\n\nexport const openApi = {\n  tags: [paymentGatewaysTag],\n  summary: 'Cancel/void an authorized payment',\n  methods: {\n    POST: {\n      summary: 'Cancel payment',\n      tags: [paymentGatewaysTag],\n      responses: [\n        { status: 200, description: 'Payment cancelled' },\n        { status: 422, description: 'Invalid payload' },\n        { status: 502, description: 'Gateway provider error' },\n      ],\n    },\n  },\n}\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,0BAA0B;AACnC,SAAS,8BAA8B;AACvC,SAAS,oBAAoB;AAC7B,SAAS,oBAAoB;AAE7B,SAAS,0BAA0B;AACnC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEP,MAAM,iCAAiC;AAEhC,MAAM,WAAW;AAAA,EACtB,MAAM;AAAA,EACN,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,yBAAyB,EAAE;AAC1E;AAEA,eAAsB,KAAK,KAAc;AACvC,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM,YAAY,CAAC,KAAK,OAAO;AAClC,WAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrE;AAEA,QAAM,UAAU,MAAM,aAAsB,GAAG;AAC/C,QAAM,SAAS,aAAa,UAAU,OAAO;AAC7C,MAAI,CAAC,OAAO,SAAS;AACnB,WAAO,aAAa,KAAK,EAAE,OAAO,mBAAmB,SAAS,OAAO,MAAM,QAAQ,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACzG;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,cAAc,MAAM;AAAA,IACxB;AAAA,IACA;AAAA,MACE,UAAU,KAAK;AAAA,MACf,gBAAgB,KAAK;AAAA,MACrB,QAAQ,KAAK,OAAO;AAAA,MACpB,cAAc;AAAA,MACd,YAAY,OAAO,KAAK;AAAA,MACxB,WAAW;AAAA,MACX,eAAe,IAAI;AAAA,MACnB,gBAAgB,IAAI;AAAA,MACpB,iBAAiB,OAAO;AAAA,IAC1B;AAAA,IACA,oBAAoB,IAAI;AAAA,EAC1B;AACA,MAAI,CAAC,YAAY,IAAI;AACnB,WAAO,aAAa;AAAA,MAClB,YAAY,aAAa,EAAE,OAAO,6BAA6B;AAAA,MAC/D,EAAE,QAAQ,YAAY,eAAe,IAAI;AAAA,IAC3C;AAAA,EACF;AAEA,QAAM,UAAU,UAAU,QAAQ,uBAAuB;AAEzD,MAAI;AACF,UAAM,SAAS,MAAM,QAAQ;AAAA,MAC3B,OAAO,KAAK;AAAA,MACZ,OAAO,KAAK;AAAA,MACZ,EAAE,gBAAgB,KAAK,OAAiB,UAAU,KAAK,SAAS;AAAA,IAClE;AACA,UAAM,2CAA2C,YAAY,uBAAuB;AAAA,MAClF,UAAU,KAAK;AAAA,MACf,gBAAgB,KAAK;AAAA,MACrB,QAAQ,KAAK,OAAO;AAAA,MACpB,cAAc;AAAA,MACd,YAAY,OAAO,KAAK;AAAA,MACxB,WAAW;AAAA,MACX,eAAe,IAAI;AAAA,MACnB,gBAAgB,IAAI;AAAA,IACtB,CAAC;AACD,WAAO,aAAa,KAAK,MAAM;AAAA,EACjC,SAAS,KAAc;AACrB,UAAM,UAAU,eAAe,QAAQ,IAAI,UAAU;AACrD,WAAO,aAAa,KAAK,EAAE,OAAO,QAAQ,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC9D;AACF;AAEO,MAAM,UAAU;AAAA,EACrB,MAAM,CAAC,kBAAkB;AAAA,EACzB,SAAS;AAAA,EACT,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,MAAM,CAAC,kBAAkB;AAAA,MACzB,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,oBAAoB;AAAA,QAChD,EAAE,QAAQ,KAAK,aAAa,kBAAkB;AAAA,QAC9C,EAAE,QAAQ,KAAK,aAAa,yBAAyB;AAAA,MACvD;AAAA,IACF;AAAA,EACF;AACF;",
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { readJsonSafe } from '@open-mercato/shared/lib/http/readJsonSafe'\nimport { isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { cancelSchema } from '../../data/validators'\nimport type { PaymentGatewayService } from '../../lib/gateway-service'\nimport { paymentGatewaysTag } from '../openapi'\nimport {\n  resolveUserFeatures,\n  runPaymentGatewayMutationGuardAfterSuccess,\n  runPaymentGatewayMutationGuards,\n} from '../guards'\n\nconst gatewayTransactionResourceKind = 'payment_gateways.gateway_transaction'\n\nexport const metadata = {\n  path: '/payment_gateways/cancel',\n  POST: { requireAuth: true, requireFeatures: ['payment_gateways.manage'] },\n}\n\nexport async function POST(req: Request) {\n  const auth = await getAuthFromRequest(req)\n  if (!auth?.tenantId || !auth.orgId) {\n    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n  }\n\n  const payload = await readJsonSafe<unknown>(req)\n  const parsed = cancelSchema.safeParse(payload)\n  if (!parsed.success) {\n    return NextResponse.json({ error: 'Invalid payload', details: parsed.error.flatten() }, { status: 422 })\n  }\n\n  const container = await createRequestContainer()\n  const guardResult = await runPaymentGatewayMutationGuards(\n    container,\n    {\n      tenantId: auth.tenantId,\n      organizationId: auth.orgId,\n      userId: auth.sub ?? '',\n      resourceKind: gatewayTransactionResourceKind,\n      resourceId: parsed.data.transactionId,\n      operation: 'update',\n      requestMethod: req.method,\n      requestHeaders: req.headers,\n      mutationPayload: parsed.data as Record<string, unknown>,\n    },\n    resolveUserFeatures(auth),\n  )\n  if (!guardResult.ok) {\n    return NextResponse.json(\n      guardResult.errorBody ?? { error: 'Operation blocked by guard' },\n      { status: guardResult.errorStatus ?? 422 },\n    )\n  }\n\n  const service = container.resolve('paymentGatewayService') as PaymentGatewayService\n\n  try {\n    const result = await service.cancelPayment(\n      parsed.data.transactionId,\n      parsed.data.reason,\n      { organizationId: auth.orgId as string, tenantId: auth.tenantId },\n    )\n    await runPaymentGatewayMutationGuardAfterSuccess(guardResult.afterSuccessCallbacks, {\n      tenantId: auth.tenantId,\n      organizationId: auth.orgId,\n      userId: auth.sub ?? '',\n      resourceKind: gatewayTransactionResourceKind,\n      resourceId: parsed.data.transactionId,\n      operation: 'update',\n      requestMethod: req.method,\n      requestHeaders: req.headers,\n    })\n    return NextResponse.json(result)\n  } catch (err: unknown) {\n    if (isCrudHttpError(err)) {\n      return NextResponse.json(err.body, { status: err.status })\n    }\n    const message = err instanceof Error ? err.message : 'Cancel failed'\n    return NextResponse.json({ error: message }, { status: 502 })\n  }\n}\n\nexport const openApi = {\n  tags: [paymentGatewaysTag],\n  summary: 'Cancel/void an authorized payment',\n  methods: {\n    POST: {\n      summary: 'Cancel payment',\n      tags: [paymentGatewaysTag],\n      responses: [\n        { status: 200, description: 'Payment cancelled' },\n        { status: 409, description: 'Invalid payment status transition' },\n        { status: 422, description: 'Invalid payload' },\n        { status: 502, description: 'Gateway provider error' },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,0BAA0B;AACnC,SAAS,8BAA8B;AACvC,SAAS,oBAAoB;AAC7B,SAAS,uBAAuB;AAChC,SAAS,oBAAoB;AAE7B,SAAS,0BAA0B;AACnC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEP,MAAM,iCAAiC;AAEhC,MAAM,WAAW;AAAA,EACtB,MAAM;AAAA,EACN,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,yBAAyB,EAAE;AAC1E;AAEA,eAAsB,KAAK,KAAc;AACvC,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM,YAAY,CAAC,KAAK,OAAO;AAClC,WAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrE;AAEA,QAAM,UAAU,MAAM,aAAsB,GAAG;AAC/C,QAAM,SAAS,aAAa,UAAU,OAAO;AAC7C,MAAI,CAAC,OAAO,SAAS;AACnB,WAAO,aAAa,KAAK,EAAE,OAAO,mBAAmB,SAAS,OAAO,MAAM,QAAQ,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACzG;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,cAAc,MAAM;AAAA,IACxB;AAAA,IACA;AAAA,MACE,UAAU,KAAK;AAAA,MACf,gBAAgB,KAAK;AAAA,MACrB,QAAQ,KAAK,OAAO;AAAA,MACpB,cAAc;AAAA,MACd,YAAY,OAAO,KAAK;AAAA,MACxB,WAAW;AAAA,MACX,eAAe,IAAI;AAAA,MACnB,gBAAgB,IAAI;AAAA,MACpB,iBAAiB,OAAO;AAAA,IAC1B;AAAA,IACA,oBAAoB,IAAI;AAAA,EAC1B;AACA,MAAI,CAAC,YAAY,IAAI;AACnB,WAAO,aAAa;AAAA,MAClB,YAAY,aAAa,EAAE,OAAO,6BAA6B;AAAA,MAC/D,EAAE,QAAQ,YAAY,eAAe,IAAI;AAAA,IAC3C;AAAA,EACF;AAEA,QAAM,UAAU,UAAU,QAAQ,uBAAuB;AAEzD,MAAI;AACF,UAAM,SAAS,MAAM,QAAQ;AAAA,MAC3B,OAAO,KAAK;AAAA,MACZ,OAAO,KAAK;AAAA,MACZ,EAAE,gBAAgB,KAAK,OAAiB,UAAU,KAAK,SAAS;AAAA,IAClE;AACA,UAAM,2CAA2C,YAAY,uBAAuB;AAAA,MAClF,UAAU,KAAK;AAAA,MACf,gBAAgB,KAAK;AAAA,MACrB,QAAQ,KAAK,OAAO;AAAA,MACpB,cAAc;AAAA,MACd,YAAY,OAAO,KAAK;AAAA,MACxB,WAAW;AAAA,MACX,eAAe,IAAI;AAAA,MACnB,gBAAgB,IAAI;AAAA,IACtB,CAAC;AACD,WAAO,aAAa,KAAK,MAAM;AAAA,EACjC,SAAS,KAAc;AACrB,QAAI,gBAAgB,GAAG,GAAG;AACxB,aAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AAAA,IAC3D;AACA,UAAM,UAAU,eAAe,QAAQ,IAAI,UAAU;AACrD,WAAO,aAAa,KAAK,EAAE,OAAO,QAAQ,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC9D;AACF;AAEO,MAAM,UAAU;AAAA,EACrB,MAAM,CAAC,kBAAkB;AAAA,EACzB,SAAS;AAAA,EACT,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,MAAM,CAAC,kBAAkB;AAAA,MACzB,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,oBAAoB;AAAA,QAChD,EAAE,QAAQ,KAAK,aAAa,oCAAoC;AAAA,QAChE,EAAE,QAAQ,KAAK,aAAa,kBAAkB;AAAA,QAC9C,EAAE,QAAQ,KAAK,aAAa,yBAAyB;AAAA,MACvD;AAAA,IACF;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/modules/payment_gateways/api/capture/route.js

@@ -2,6 +2,7 @@ import { NextResponse } from "next/server";
 import { getAuthFromRequest } from "@open-mercato/shared/lib/auth/server";
 import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
 import { readJsonSafe } from "@open-mercato/shared/lib/http/readJsonSafe";
+import { isCrudHttpError } from "@open-mercato/shared/lib/crud/errors";
 import { captureSchema } from "../../data/validators.js";
 import { paymentGatewaysTag } from "../openapi.js";
 import {
@@ -65,6 +66,9 @@ async function POST(req) {
     });
     return NextResponse.json(result);
   } catch (err) {
+    if (isCrudHttpError(err)) {
+      return NextResponse.json(err.body, { status: err.status });
+    }
     const message = err instanceof Error ? err.message : "Capture failed";
     return NextResponse.json({ error: message }, { status: 502 });
   }
@@ -78,6 +82,7 @@ const openApi = {
       tags: [paymentGatewaysTag],
       responses: [
         { status: 200, description: "Payment captured" },
+        { status: 409, description: "Invalid payment status transition" },
         { status: 422, description: "Invalid payload" },
         { status: 502, description: "Gateway provider error" }
       ]

package/dist/modules/payment_gateways/api/capture/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../src/modules/payment_gateways/api/capture/route.ts"],
-  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { readJsonSafe } from '@open-mercato/shared/lib/http/readJsonSafe'\nimport { captureSchema } from '../../data/validators'\nimport type { PaymentGatewayService } from '../../lib/gateway-service'\nimport { paymentGatewaysTag } from '../openapi'\nimport {\n  resolveUserFeatures,\n  runPaymentGatewayMutationGuardAfterSuccess,\n  runPaymentGatewayMutationGuards,\n} from '../guards'\n\nconst gatewayTransactionResourceKind = 'payment_gateways.gateway_transaction'\n\nexport const metadata = {\n  path: '/payment_gateways/capture',\n  POST: { requireAuth: true, requireFeatures: ['payment_gateways.capture'] },\n}\n\nexport async function POST(req: Request) {\n  const auth = await getAuthFromRequest(req)\n  if (!auth?.tenantId || !auth.orgId) {\n    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n  }\n\n  const payload = await readJsonSafe<unknown>(req)\n  const parsed = captureSchema.safeParse(payload)\n  if (!parsed.success) {\n    return NextResponse.json({ error: 'Invalid payload', details: parsed.error.flatten() }, { status: 422 })\n  }\n\n  const container = await createRequestContainer()\n  const guardResult = await runPaymentGatewayMutationGuards(\n    container,\n    {\n      tenantId: auth.tenantId,\n      organizationId: auth.orgId,\n      userId: auth.sub ?? '',\n      resourceKind: gatewayTransactionResourceKind,\n      resourceId: parsed.data.transactionId,\n      operation: 'update',\n      requestMethod: req.method,\n      requestHeaders: req.headers,\n      mutationPayload: parsed.data as Record<string, unknown>,\n    },\n    resolveUserFeatures(auth),\n  )\n  if (!guardResult.ok) {\n    return NextResponse.json(\n      guardResult.errorBody ?? { error: 'Operation blocked by guard' },\n      { status: guardResult.errorStatus ?? 422 },\n    )\n  }\n\n  const service = container.resolve('paymentGatewayService') as PaymentGatewayService\n\n  try {\n    const result = await service.capturePayment(\n      parsed.data.transactionId,\n      parsed.data.amount,\n      { organizationId: auth.orgId as string, tenantId: auth.tenantId },\n    )\n    await runPaymentGatewayMutationGuardAfterSuccess(guardResult.afterSuccessCallbacks, {\n      tenantId: auth.tenantId,\n      organizationId: auth.orgId,\n      userId: auth.sub ?? '',\n      resourceKind: gatewayTransactionResourceKind,\n      resourceId: parsed.data.transactionId,\n      operation: 'update',\n      requestMethod: req.method,\n      requestHeaders: req.headers,\n    })\n    return NextResponse.json(result)\n  } catch (err: unknown) {\n    const message = err instanceof Error ? err.message : 'Capture failed'\n    return NextResponse.json({ error: message }, { status: 502 })\n  }\n}\n\nexport const openApi = {\n  tags: [paymentGatewaysTag],\n  summary: 'Capture an authorized payment',\n  methods: {\n    POST: {\n      summary: 'Capture payment',\n      tags: [paymentGatewaysTag],\n      responses: [\n        { status: 200, description: 'Payment captured' },\n        { status: 422, description: 'Invalid payload' },\n        { status: 502, description: 'Gateway provider error' },\n      ],\n    },\n  },\n}\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,0BAA0B;AACnC,SAAS,8BAA8B;AACvC,SAAS,oBAAoB;AAC7B,SAAS,qBAAqB;AAE9B,SAAS,0BAA0B;AACnC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEP,MAAM,iCAAiC;AAEhC,MAAM,WAAW;AAAA,EACtB,MAAM;AAAA,EACN,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,0BAA0B,EAAE;AAC3E;AAEA,eAAsB,KAAK,KAAc;AACvC,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM,YAAY,CAAC,KAAK,OAAO;AAClC,WAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrE;AAEA,QAAM,UAAU,MAAM,aAAsB,GAAG;AAC/C,QAAM,SAAS,cAAc,UAAU,OAAO;AAC9C,MAAI,CAAC,OAAO,SAAS;AACnB,WAAO,aAAa,KAAK,EAAE,OAAO,mBAAmB,SAAS,OAAO,MAAM,QAAQ,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACzG;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,cAAc,MAAM;AAAA,IACxB;AAAA,IACA;AAAA,MACE,UAAU,KAAK;AAAA,MACf,gBAAgB,KAAK;AAAA,MACrB,QAAQ,KAAK,OAAO;AAAA,MACpB,cAAc;AAAA,MACd,YAAY,OAAO,KAAK;AAAA,MACxB,WAAW;AAAA,MACX,eAAe,IAAI;AAAA,MACnB,gBAAgB,IAAI;AAAA,MACpB,iBAAiB,OAAO;AAAA,IAC1B;AAAA,IACA,oBAAoB,IAAI;AAAA,EAC1B;AACA,MAAI,CAAC,YAAY,IAAI;AACnB,WAAO,aAAa;AAAA,MAClB,YAAY,aAAa,EAAE,OAAO,6BAA6B;AAAA,MAC/D,EAAE,QAAQ,YAAY,eAAe,IAAI;AAAA,IAC3C;AAAA,EACF;AAEA,QAAM,UAAU,UAAU,QAAQ,uBAAuB;AAEzD,MAAI;AACF,UAAM,SAAS,MAAM,QAAQ;AAAA,MAC3B,OAAO,KAAK;AAAA,MACZ,OAAO,KAAK;AAAA,MACZ,EAAE,gBAAgB,KAAK,OAAiB,UAAU,KAAK,SAAS;AAAA,IAClE;AACA,UAAM,2CAA2C,YAAY,uBAAuB;AAAA,MAClF,UAAU,KAAK;AAAA,MACf,gBAAgB,KAAK;AAAA,MACrB,QAAQ,KAAK,OAAO;AAAA,MACpB,cAAc;AAAA,MACd,YAAY,OAAO,KAAK;AAAA,MACxB,WAAW;AAAA,MACX,eAAe,IAAI;AAAA,MACnB,gBAAgB,IAAI;AAAA,IACtB,CAAC;AACD,WAAO,aAAa,KAAK,MAAM;AAAA,EACjC,SAAS,KAAc;AACrB,UAAM,UAAU,eAAe,QAAQ,IAAI,UAAU;AACrD,WAAO,aAAa,KAAK,EAAE,OAAO,QAAQ,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC9D;AACF;AAEO,MAAM,UAAU;AAAA,EACrB,MAAM,CAAC,kBAAkB;AAAA,EACzB,SAAS;AAAA,EACT,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,MAAM,CAAC,kBAAkB;AAAA,MACzB,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,mBAAmB;AAAA,QAC/C,EAAE,QAAQ,KAAK,aAAa,kBAAkB;AAAA,QAC9C,EAAE,QAAQ,KAAK,aAAa,yBAAyB;AAAA,MACvD;AAAA,IACF;AAAA,EACF;AACF;",
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { readJsonSafe } from '@open-mercato/shared/lib/http/readJsonSafe'\nimport { isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { captureSchema } from '../../data/validators'\nimport type { PaymentGatewayService } from '../../lib/gateway-service'\nimport { paymentGatewaysTag } from '../openapi'\nimport {\n  resolveUserFeatures,\n  runPaymentGatewayMutationGuardAfterSuccess,\n  runPaymentGatewayMutationGuards,\n} from '../guards'\n\nconst gatewayTransactionResourceKind = 'payment_gateways.gateway_transaction'\n\nexport const metadata = {\n  path: '/payment_gateways/capture',\n  POST: { requireAuth: true, requireFeatures: ['payment_gateways.capture'] },\n}\n\nexport async function POST(req: Request) {\n  const auth = await getAuthFromRequest(req)\n  if (!auth?.tenantId || !auth.orgId) {\n    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n  }\n\n  const payload = await readJsonSafe<unknown>(req)\n  const parsed = captureSchema.safeParse(payload)\n  if (!parsed.success) {\n    return NextResponse.json({ error: 'Invalid payload', details: parsed.error.flatten() }, { status: 422 })\n  }\n\n  const container = await createRequestContainer()\n  const guardResult = await runPaymentGatewayMutationGuards(\n    container,\n    {\n      tenantId: auth.tenantId,\n      organizationId: auth.orgId,\n      userId: auth.sub ?? '',\n      resourceKind: gatewayTransactionResourceKind,\n      resourceId: parsed.data.transactionId,\n      operation: 'update',\n      requestMethod: req.method,\n      requestHeaders: req.headers,\n      mutationPayload: parsed.data as Record<string, unknown>,\n    },\n    resolveUserFeatures(auth),\n  )\n  if (!guardResult.ok) {\n    return NextResponse.json(\n      guardResult.errorBody ?? { error: 'Operation blocked by guard' },\n      { status: guardResult.errorStatus ?? 422 },\n    )\n  }\n\n  const service = container.resolve('paymentGatewayService') as PaymentGatewayService\n\n  try {\n    const result = await service.capturePayment(\n      parsed.data.transactionId,\n      parsed.data.amount,\n      { organizationId: auth.orgId as string, tenantId: auth.tenantId },\n    )\n    await runPaymentGatewayMutationGuardAfterSuccess(guardResult.afterSuccessCallbacks, {\n      tenantId: auth.tenantId,\n      organizationId: auth.orgId,\n      userId: auth.sub ?? '',\n      resourceKind: gatewayTransactionResourceKind,\n      resourceId: parsed.data.transactionId,\n      operation: 'update',\n      requestMethod: req.method,\n      requestHeaders: req.headers,\n    })\n    return NextResponse.json(result)\n  } catch (err: unknown) {\n    if (isCrudHttpError(err)) {\n      return NextResponse.json(err.body, { status: err.status })\n    }\n    const message = err instanceof Error ? err.message : 'Capture failed'\n    return NextResponse.json({ error: message }, { status: 502 })\n  }\n}\n\nexport const openApi = {\n  tags: [paymentGatewaysTag],\n  summary: 'Capture an authorized payment',\n  methods: {\n    POST: {\n      summary: 'Capture payment',\n      tags: [paymentGatewaysTag],\n      responses: [\n        { status: 200, description: 'Payment captured' },\n        { status: 409, description: 'Invalid payment status transition' },\n        { status: 422, description: 'Invalid payload' },\n        { status: 502, description: 'Gateway provider error' },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,0BAA0B;AACnC,SAAS,8BAA8B;AACvC,SAAS,oBAAoB;AAC7B,SAAS,uBAAuB;AAChC,SAAS,qBAAqB;AAE9B,SAAS,0BAA0B;AACnC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEP,MAAM,iCAAiC;AAEhC,MAAM,WAAW;AAAA,EACtB,MAAM;AAAA,EACN,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,0BAA0B,EAAE;AAC3E;AAEA,eAAsB,KAAK,KAAc;AACvC,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM,YAAY,CAAC,KAAK,OAAO;AAClC,WAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrE;AAEA,QAAM,UAAU,MAAM,aAAsB,GAAG;AAC/C,QAAM,SAAS,cAAc,UAAU,OAAO;AAC9C,MAAI,CAAC,OAAO,SAAS;AACnB,WAAO,aAAa,KAAK,EAAE,OAAO,mBAAmB,SAAS,OAAO,MAAM,QAAQ,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACzG;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,cAAc,MAAM;AAAA,IACxB;AAAA,IACA;AAAA,MACE,UAAU,KAAK;AAAA,MACf,gBAAgB,KAAK;AAAA,MACrB,QAAQ,KAAK,OAAO;AAAA,MACpB,cAAc;AAAA,MACd,YAAY,OAAO,KAAK;AAAA,MACxB,WAAW;AAAA,MACX,eAAe,IAAI;AAAA,MACnB,gBAAgB,IAAI;AAAA,MACpB,iBAAiB,OAAO;AAAA,IAC1B;AAAA,IACA,oBAAoB,IAAI;AAAA,EAC1B;AACA,MAAI,CAAC,YAAY,IAAI;AACnB,WAAO,aAAa;AAAA,MAClB,YAAY,aAAa,EAAE,OAAO,6BAA6B;AAAA,MAC/D,EAAE,QAAQ,YAAY,eAAe,IAAI;AAAA,IAC3C;AAAA,EACF;AAEA,QAAM,UAAU,UAAU,QAAQ,uBAAuB;AAEzD,MAAI;AACF,UAAM,SAAS,MAAM,QAAQ;AAAA,MAC3B,OAAO,KAAK;AAAA,MACZ,OAAO,KAAK;AAAA,MACZ,EAAE,gBAAgB,KAAK,OAAiB,UAAU,KAAK,SAAS;AAAA,IAClE;AACA,UAAM,2CAA2C,YAAY,uBAAuB;AAAA,MAClF,UAAU,KAAK;AAAA,MACf,gBAAgB,KAAK;AAAA,MACrB,QAAQ,KAAK,OAAO;AAAA,MACpB,cAAc;AAAA,MACd,YAAY,OAAO,KAAK;AAAA,MACxB,WAAW;AAAA,MACX,eAAe,IAAI;AAAA,MACnB,gBAAgB,IAAI;AAAA,IACtB,CAAC;AACD,WAAO,aAAa,KAAK,MAAM;AAAA,EACjC,SAAS,KAAc;AACrB,QAAI,gBAAgB,GAAG,GAAG;AACxB,aAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AAAA,IAC3D;AACA,UAAM,UAAU,eAAe,QAAQ,IAAI,UAAU;AACrD,WAAO,aAAa,KAAK,EAAE,OAAO,QAAQ,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC9D;AACF;AAEO,MAAM,UAAU;AAAA,EACrB,MAAM,CAAC,kBAAkB;AAAA,EACzB,SAAS;AAAA,EACT,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,MAAM,CAAC,kBAAkB;AAAA,MACzB,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,mBAAmB;AAAA,QAC/C,EAAE,QAAQ,KAAK,aAAa,oCAAoC;AAAA,QAChE,EAAE,QAAQ,KAAK,aAAa,kBAAkB;AAAA,QAC9C,EAAE,QAAQ,KAAK,aAAa,yBAAyB;AAAA,MACvD;AAAA,IACF;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/modules/payment_gateways/api/refund/route.js

@@ -2,6 +2,7 @@ import { NextResponse } from "next/server";
 import { getAuthFromRequest } from "@open-mercato/shared/lib/auth/server";
 import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
 import { readJsonSafe } from "@open-mercato/shared/lib/http/readJsonSafe";
+import { isCrudHttpError } from "@open-mercato/shared/lib/crud/errors";
 import { refundSchema } from "../../data/validators.js";
 import { paymentGatewaysTag } from "../openapi.js";
 import {
@@ -66,6 +67,9 @@ async function POST(req) {
     });
     return NextResponse.json(result);
   } catch (err) {
+    if (isCrudHttpError(err)) {
+      return NextResponse.json(err.body, { status: err.status });
+    }
     const message = err instanceof Error ? err.message : "Refund failed";
     return NextResponse.json({ error: message }, { status: 502 });
   }
@@ -79,6 +83,7 @@ const openApi = {
       tags: [paymentGatewaysTag],
       responses: [
         { status: 200, description: "Payment refunded" },
+        { status: 409, description: "Invalid payment status transition" },
         { status: 422, description: "Invalid payload" },
         { status: 502, description: "Gateway provider error" }
       ]

package/dist/modules/payment_gateways/api/refund/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../src/modules/payment_gateways/api/refund/route.ts"],
-  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { readJsonSafe } from '@open-mercato/shared/lib/http/readJsonSafe'\nimport { refundSchema } from '../../data/validators'\nimport type { PaymentGatewayService } from '../../lib/gateway-service'\nimport { paymentGatewaysTag } from '../openapi'\nimport {\n  resolveUserFeatures,\n  runPaymentGatewayMutationGuardAfterSuccess,\n  runPaymentGatewayMutationGuards,\n} from '../guards'\n\nconst gatewayTransactionResourceKind = 'payment_gateways.gateway_transaction'\n\nexport const metadata = {\n  path: '/payment_gateways/refund',\n  POST: { requireAuth: true, requireFeatures: ['payment_gateways.refund'] },\n}\n\nexport async function POST(req: Request) {\n  const auth = await getAuthFromRequest(req)\n  if (!auth?.tenantId || !auth.orgId) {\n    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n  }\n\n  const payload = await readJsonSafe<unknown>(req)\n  const parsed = refundSchema.safeParse(payload)\n  if (!parsed.success) {\n    return NextResponse.json({ error: 'Invalid payload', details: parsed.error.flatten() }, { status: 422 })\n  }\n\n  const container = await createRequestContainer()\n  const guardResult = await runPaymentGatewayMutationGuards(\n    container,\n    {\n      tenantId: auth.tenantId,\n      organizationId: auth.orgId,\n      userId: auth.sub ?? '',\n      resourceKind: gatewayTransactionResourceKind,\n      resourceId: parsed.data.transactionId,\n      operation: 'update',\n      requestMethod: req.method,\n      requestHeaders: req.headers,\n      mutationPayload: parsed.data as Record<string, unknown>,\n    },\n    resolveUserFeatures(auth),\n  )\n  if (!guardResult.ok) {\n    return NextResponse.json(\n      guardResult.errorBody ?? { error: 'Operation blocked by guard' },\n      { status: guardResult.errorStatus ?? 422 },\n    )\n  }\n\n  const service = container.resolve('paymentGatewayService') as PaymentGatewayService\n\n  try {\n    const result = await service.refundPayment(\n      parsed.data.transactionId,\n      parsed.data.amount,\n      parsed.data.reason,\n      { organizationId: auth.orgId as string, tenantId: auth.tenantId },\n    )\n    await runPaymentGatewayMutationGuardAfterSuccess(guardResult.afterSuccessCallbacks, {\n      tenantId: auth.tenantId,\n      organizationId: auth.orgId,\n      userId: auth.sub ?? '',\n      resourceKind: gatewayTransactionResourceKind,\n      resourceId: parsed.data.transactionId,\n      operation: 'update',\n      requestMethod: req.method,\n      requestHeaders: req.headers,\n    })\n    return NextResponse.json(result)\n  } catch (err: unknown) {\n    const message = err instanceof Error ? err.message : 'Refund failed'\n    return NextResponse.json({ error: message }, { status: 502 })\n  }\n}\n\nexport const openApi = {\n  tags: [paymentGatewaysTag],\n  summary: 'Refund a captured payment',\n  methods: {\n    POST: {\n      summary: 'Refund payment',\n      tags: [paymentGatewaysTag],\n      responses: [\n        { status: 200, description: 'Payment refunded' },\n        { status: 422, description: 'Invalid payload' },\n        { status: 502, description: 'Gateway provider error' },\n      ],\n    },\n  },\n}\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,0BAA0B;AACnC,SAAS,8BAA8B;AACvC,SAAS,oBAAoB;AAC7B,SAAS,oBAAoB;AAE7B,SAAS,0BAA0B;AACnC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEP,MAAM,iCAAiC;AAEhC,MAAM,WAAW;AAAA,EACtB,MAAM;AAAA,EACN,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,yBAAyB,EAAE;AAC1E;AAEA,eAAsB,KAAK,KAAc;AACvC,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM,YAAY,CAAC,KAAK,OAAO;AAClC,WAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrE;AAEA,QAAM,UAAU,MAAM,aAAsB,GAAG;AAC/C,QAAM,SAAS,aAAa,UAAU,OAAO;AAC7C,MAAI,CAAC,OAAO,SAAS;AACnB,WAAO,aAAa,KAAK,EAAE,OAAO,mBAAmB,SAAS,OAAO,MAAM,QAAQ,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACzG;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,cAAc,MAAM;AAAA,IACxB;AAAA,IACA;AAAA,MACE,UAAU,KAAK;AAAA,MACf,gBAAgB,KAAK;AAAA,MACrB,QAAQ,KAAK,OAAO;AAAA,MACpB,cAAc;AAAA,MACd,YAAY,OAAO,KAAK;AAAA,MACxB,WAAW;AAAA,MACX,eAAe,IAAI;AAAA,MACnB,gBAAgB,IAAI;AAAA,MACpB,iBAAiB,OAAO;AAAA,IAC1B;AAAA,IACA,oBAAoB,IAAI;AAAA,EAC1B;AACA,MAAI,CAAC,YAAY,IAAI;AACnB,WAAO,aAAa;AAAA,MAClB,YAAY,aAAa,EAAE,OAAO,6BAA6B;AAAA,MAC/D,EAAE,QAAQ,YAAY,eAAe,IAAI;AAAA,IAC3C;AAAA,EACF;AAEA,QAAM,UAAU,UAAU,QAAQ,uBAAuB;AAEzD,MAAI;AACF,UAAM,SAAS,MAAM,QAAQ;AAAA,MAC3B,OAAO,KAAK;AAAA,MACZ,OAAO,KAAK;AAAA,MACZ,OAAO,KAAK;AAAA,MACZ,EAAE,gBAAgB,KAAK,OAAiB,UAAU,KAAK,SAAS;AAAA,IAClE;AACA,UAAM,2CAA2C,YAAY,uBAAuB;AAAA,MAClF,UAAU,KAAK;AAAA,MACf,gBAAgB,KAAK;AAAA,MACrB,QAAQ,KAAK,OAAO;AAAA,MACpB,cAAc;AAAA,MACd,YAAY,OAAO,KAAK;AAAA,MACxB,WAAW;AAAA,MACX,eAAe,IAAI;AAAA,MACnB,gBAAgB,IAAI;AAAA,IACtB,CAAC;AACD,WAAO,aAAa,KAAK,MAAM;AAAA,EACjC,SAAS,KAAc;AACrB,UAAM,UAAU,eAAe,QAAQ,IAAI,UAAU;AACrD,WAAO,aAAa,KAAK,EAAE,OAAO,QAAQ,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC9D;AACF;AAEO,MAAM,UAAU;AAAA,EACrB,MAAM,CAAC,kBAAkB;AAAA,EACzB,SAAS;AAAA,EACT,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,MAAM,CAAC,kBAAkB;AAAA,MACzB,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,mBAAmB;AAAA,QAC/C,EAAE,QAAQ,KAAK,aAAa,kBAAkB;AAAA,QAC9C,EAAE,QAAQ,KAAK,aAAa,yBAAyB;AAAA,MACvD;AAAA,IACF;AAAA,EACF;AACF;",
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { readJsonSafe } from '@open-mercato/shared/lib/http/readJsonSafe'\nimport { isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { refundSchema } from '../../data/validators'\nimport type { PaymentGatewayService } from '../../lib/gateway-service'\nimport { paymentGatewaysTag } from '../openapi'\nimport {\n  resolveUserFeatures,\n  runPaymentGatewayMutationGuardAfterSuccess,\n  runPaymentGatewayMutationGuards,\n} from '../guards'\n\nconst gatewayTransactionResourceKind = 'payment_gateways.gateway_transaction'\n\nexport const metadata = {\n  path: '/payment_gateways/refund',\n  POST: { requireAuth: true, requireFeatures: ['payment_gateways.refund'] },\n}\n\nexport async function POST(req: Request) {\n  const auth = await getAuthFromRequest(req)\n  if (!auth?.tenantId || !auth.orgId) {\n    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n  }\n\n  const payload = await readJsonSafe<unknown>(req)\n  const parsed = refundSchema.safeParse(payload)\n  if (!parsed.success) {\n    return NextResponse.json({ error: 'Invalid payload', details: parsed.error.flatten() }, { status: 422 })\n  }\n\n  const container = await createRequestContainer()\n  const guardResult = await runPaymentGatewayMutationGuards(\n    container,\n    {\n      tenantId: auth.tenantId,\n      organizationId: auth.orgId,\n      userId: auth.sub ?? '',\n      resourceKind: gatewayTransactionResourceKind,\n      resourceId: parsed.data.transactionId,\n      operation: 'update',\n      requestMethod: req.method,\n      requestHeaders: req.headers,\n      mutationPayload: parsed.data as Record<string, unknown>,\n    },\n    resolveUserFeatures(auth),\n  )\n  if (!guardResult.ok) {\n    return NextResponse.json(\n      guardResult.errorBody ?? { error: 'Operation blocked by guard' },\n      { status: guardResult.errorStatus ?? 422 },\n    )\n  }\n\n  const service = container.resolve('paymentGatewayService') as PaymentGatewayService\n\n  try {\n    const result = await service.refundPayment(\n      parsed.data.transactionId,\n      parsed.data.amount,\n      parsed.data.reason,\n      { organizationId: auth.orgId as string, tenantId: auth.tenantId },\n    )\n    await runPaymentGatewayMutationGuardAfterSuccess(guardResult.afterSuccessCallbacks, {\n      tenantId: auth.tenantId,\n      organizationId: auth.orgId,\n      userId: auth.sub ?? '',\n      resourceKind: gatewayTransactionResourceKind,\n      resourceId: parsed.data.transactionId,\n      operation: 'update',\n      requestMethod: req.method,\n      requestHeaders: req.headers,\n    })\n    return NextResponse.json(result)\n  } catch (err: unknown) {\n    if (isCrudHttpError(err)) {\n      return NextResponse.json(err.body, { status: err.status })\n    }\n    const message = err instanceof Error ? err.message : 'Refund failed'\n    return NextResponse.json({ error: message }, { status: 502 })\n  }\n}\n\nexport const openApi = {\n  tags: [paymentGatewaysTag],\n  summary: 'Refund a captured payment',\n  methods: {\n    POST: {\n      summary: 'Refund payment',\n      tags: [paymentGatewaysTag],\n      responses: [\n        { status: 200, description: 'Payment refunded' },\n        { status: 409, description: 'Invalid payment status transition' },\n        { status: 422, description: 'Invalid payload' },\n        { status: 502, description: 'Gateway provider error' },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,0BAA0B;AACnC,SAAS,8BAA8B;AACvC,SAAS,oBAAoB;AAC7B,SAAS,uBAAuB;AAChC,SAAS,oBAAoB;AAE7B,SAAS,0BAA0B;AACnC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEP,MAAM,iCAAiC;AAEhC,MAAM,WAAW;AAAA,EACtB,MAAM;AAAA,EACN,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,yBAAyB,EAAE;AAC1E;AAEA,eAAsB,KAAK,KAAc;AACvC,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM,YAAY,CAAC,KAAK,OAAO;AAClC,WAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrE;AAEA,QAAM,UAAU,MAAM,aAAsB,GAAG;AAC/C,QAAM,SAAS,aAAa,UAAU,OAAO;AAC7C,MAAI,CAAC,OAAO,SAAS;AACnB,WAAO,aAAa,KAAK,EAAE,OAAO,mBAAmB,SAAS,OAAO,MAAM,QAAQ,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACzG;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,cAAc,MAAM;AAAA,IACxB;AAAA,IACA;AAAA,MACE,UAAU,KAAK;AAAA,MACf,gBAAgB,KAAK;AAAA,MACrB,QAAQ,KAAK,OAAO;AAAA,MACpB,cAAc;AAAA,MACd,YAAY,OAAO,KAAK;AAAA,MACxB,WAAW;AAAA,MACX,eAAe,IAAI;AAAA,MACnB,gBAAgB,IAAI;AAAA,MACpB,iBAAiB,OAAO;AAAA,IAC1B;AAAA,IACA,oBAAoB,IAAI;AAAA,EAC1B;AACA,MAAI,CAAC,YAAY,IAAI;AACnB,WAAO,aAAa;AAAA,MAClB,YAAY,aAAa,EAAE,OAAO,6BAA6B;AAAA,MAC/D,EAAE,QAAQ,YAAY,eAAe,IAAI;AAAA,IAC3C;AAAA,EACF;AAEA,QAAM,UAAU,UAAU,QAAQ,uBAAuB;AAEzD,MAAI;AACF,UAAM,SAAS,MAAM,QAAQ;AAAA,MAC3B,OAAO,KAAK;AAAA,MACZ,OAAO,KAAK;AAAA,MACZ,OAAO,KAAK;AAAA,MACZ,EAAE,gBAAgB,KAAK,OAAiB,UAAU,KAAK,SAAS;AAAA,IAClE;AACA,UAAM,2CAA2C,YAAY,uBAAuB;AAAA,MAClF,UAAU,KAAK;AAAA,MACf,gBAAgB,KAAK;AAAA,MACrB,QAAQ,KAAK,OAAO;AAAA,MACpB,cAAc;AAAA,MACd,YAAY,OAAO,KAAK;AAAA,MACxB,WAAW;AAAA,MACX,eAAe,IAAI;AAAA,MACnB,gBAAgB,IAAI;AAAA,IACtB,CAAC;AACD,WAAO,aAAa,KAAK,MAAM;AAAA,EACjC,SAAS,KAAc;AACrB,QAAI,gBAAgB,GAAG,GAAG;AACxB,aAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AAAA,IAC3D;AACA,UAAM,UAAU,eAAe,QAAQ,IAAI,UAAU;AACrD,WAAO,aAAa,KAAK,EAAE,OAAO,QAAQ,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC9D;AACF;AAEO,MAAM,UAAU;AAAA,EACrB,MAAM,CAAC,kBAAkB;AAAA,EACzB,SAAS;AAAA,EACT,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,MAAM,CAAC,kBAAkB;AAAA,MACzB,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,mBAAmB;AAAA,QAC/C,EAAE,QAAQ,KAAK,aAAa,oCAAoC;AAAA,QAChE,EAAE,QAAQ,KAAK,aAAa,kBAAkB;AAAA,QAC9C,EAAE,QAAQ,KAAK,aAAa,yBAAyB;AAAA,MACvD;AAAA,IACF;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/modules/payment_gateways/lib/gateway-service.js

@@ -2,9 +2,27 @@ import { findOneWithDecryption, findWithDecryption } from "@open-mercato/shared/
 import {
   getGatewayAdapter
 } from "@open-mercato/shared/modules/payment_gateways/types";
+import { conflict } from "@open-mercato/shared/lib/crud/errors";
 import { GatewayTransaction } from "../data/entities.js";
-import { isValidTransition } from "./status-machine.js";
+import { canApplyManualAction, isValidTransition } from "./status-machine.js";
 import { emitPaymentGatewayEvent } from "../events.js";
+function assertManualActionAllowed(action, transaction) {
+  const current = transaction.unifiedStatus;
+  if (!canApplyManualAction(action, current)) {
+    throw conflict(`Cannot ${action} a payment in status "${current}"`);
+  }
+}
+function applyAdapterResultStatus(action, transaction, resultStatus) {
+  const current = transaction.unifiedStatus;
+  if (resultStatus === current) return false;
+  if (!isValidTransition(current, resultStatus)) {
+    throw conflict(
+      `Gateway returned status "${resultStatus}" which is not a valid transition from "${current}" for ${action}`
+    );
+  }
+  transaction.unifiedStatus = resultStatus;
+  return true;
+}
 function createPaymentGatewayService(deps) {
   const { em, integrationCredentialsService, integrationLogService } = deps;
   async function findTransactionOrThrow(transactionId, scope) {
@@ -131,6 +149,7 @@ function createPaymentGatewayService(deps) {
     },
     async capturePayment(transactionId, amount, scope) {
       const transaction = await findTransactionOrThrow(transactionId, scope);
+      assertManualActionAllowed("capture", transaction);
       const { adapter, credentials } = await resolveAdapterAndCredentials(
         transaction.providerKey,
         { organizationId: transaction.organizationId, tenantId: transaction.tenantId }
@@ -140,16 +159,18 @@ function createPaymentGatewayService(deps) {
         amount,
         credentials
       });
-      transaction.unifiedStatus = result.status;
+      const statusChanged = applyAdapterResultStatus("capture", transaction, result.status);
       transaction.gatewayMetadata = { ...transaction.gatewayMetadata, captureResult: result.providerData };
       await em.flush();
-      await emitStatusEvent(result.status, {
-        transactionId: transaction.id,
-        paymentId: transaction.paymentId,
-        providerKey: transaction.providerKey,
-        organizationId: transaction.organizationId,
-        tenantId: transaction.tenantId
-      });
+      if (statusChanged) {
+        await emitStatusEvent(result.status, {
+          transactionId: transaction.id,
+          paymentId: transaction.paymentId,
+          providerKey: transaction.providerKey,
+          organizationId: transaction.organizationId,
+          tenantId: transaction.tenantId
+        });
+      }
       await writeTransactionLog(
         transaction.providerKey,
         { organizationId: transaction.organizationId, tenantId: transaction.tenantId },
@@ -166,6 +187,7 @@ function createPaymentGatewayService(deps) {
     },
     async refundPayment(transactionId, amount, reason, scope) {
       const transaction = await findTransactionOrThrow(transactionId, scope);
+      assertManualActionAllowed("refund", transaction);
       const { adapter, credentials } = await resolveAdapterAndCredentials(
         transaction.providerKey,
         { organizationId: transaction.organizationId, tenantId: transaction.tenantId }
@@ -176,17 +198,19 @@ function createPaymentGatewayService(deps) {
         reason,
         credentials
       });
-      transaction.unifiedStatus = result.status;
+      const statusChanged = applyAdapterResultStatus("refund", transaction, result.status);
       transaction.gatewayRefundId = result.refundId;
       transaction.gatewayMetadata = { ...transaction.gatewayMetadata, refundResult: result.providerData };
       await em.flush();
-      await emitStatusEvent(result.status, {
-        transactionId: transaction.id,
-        paymentId: transaction.paymentId,
-        providerKey: transaction.providerKey,
-        organizationId: transaction.organizationId,
-        tenantId: transaction.tenantId
-      });
+      if (statusChanged) {
+        await emitStatusEvent(result.status, {
+          transactionId: transaction.id,
+          paymentId: transaction.paymentId,
+          providerKey: transaction.providerKey,
+          organizationId: transaction.organizationId,
+          tenantId: transaction.tenantId
+        });
+      }
       await writeTransactionLog(
         transaction.providerKey,
         { organizationId: transaction.organizationId, tenantId: transaction.tenantId },
@@ -204,6 +228,7 @@ function createPaymentGatewayService(deps) {
     },
     async cancelPayment(transactionId, reason, scope) {
       const transaction = await findTransactionOrThrow(transactionId, scope);
+      assertManualActionAllowed("cancel", transaction);
       const { adapter, credentials } = await resolveAdapterAndCredentials(
         transaction.providerKey,
         { organizationId: transaction.organizationId, tenantId: transaction.tenantId }
@@ -213,15 +238,17 @@ function createPaymentGatewayService(deps) {
         reason,
         credentials
       });
-      transaction.unifiedStatus = result.status;
+      const statusChanged = applyAdapterResultStatus("cancel", transaction, result.status);
       await em.flush();
-      await emitStatusEvent(result.status, {
-        transactionId: transaction.id,
-        paymentId: transaction.paymentId,
-        providerKey: transaction.providerKey,
-        organizationId: transaction.organizationId,
-        tenantId: transaction.tenantId
-      });
+      if (statusChanged) {
+        await emitStatusEvent(result.status, {
+          transactionId: transaction.id,
+          paymentId: transaction.paymentId,
+          providerKey: transaction.providerKey,
+          organizationId: transaction.organizationId,
+          tenantId: transaction.tenantId
+        });
+      }
       await writeTransactionLog(
         transaction.providerKey,
         { organizationId: transaction.organizationId, tenantId: transaction.tenantId },