@open-mercato/core 0.6.6-develop.6460.1.f94c74174c → 0.6.6-develop.6471.1.9ab5bdd79a

package/dist/modules/currencies/components/CurrencyFetchingConfig.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/currencies/components/CurrencyFetchingConfig.tsx"],
-  "sourcesContent": ["'use client'\n\nimport { useState, useEffect, useCallback, useMemo } from 'react'\nimport { flash } from '@open-mercato/ui/backend/FlashMessages'\nimport { apiCall, withScopedApiRequestHeaders } from '@open-mercato/ui/backend/utils/apiCall'\nimport { buildOptimisticLockHeader, extractOptimisticLockConflict } from '@open-mercato/ui/backend/utils/optimisticLock'\nimport { useGuardedMutation } from '@open-mercato/ui/backend/injection/useGuardedMutation'\nimport { Button } from '@open-mercato/ui/primitives/button'\nimport { Spinner } from '@open-mercato/ui/primitives/spinner'\nimport { Switch } from '@open-mercato/ui/primitives/switch'\nimport { StatusBadge, type StatusBadgeVariant } from '@open-mercato/ui/primitives/status-badge'\nimport { Alert } from '@open-mercato/ui/primitives/alert'\nimport { TimeInput } from '@open-mercato/ui/backend/inputs/TimeInput'\nimport { useT } from '@open-mercato/shared/lib/i18n/context'\n\ninterface FetchConfig {\n  id: string\n  provider: string\n  isEnabled: boolean\n  syncTime: string | null\n  lastSyncAt: string | null\n  lastSyncStatus: string | null\n  lastSyncMessage: string | null\n  lastSyncCount: number | null\n  updatedAt?: string | null\n}\n\nconst STATUS_BADGE_VARIANT: Record<string, StatusBadgeVariant> = {\n  success: 'success',\n  error: 'error',\n  partial: 'warning',\n}\n\nexport default function CurrencyFetchingConfig() {\n  const t = useT()\n  const [configs, setConfigs] = useState<FetchConfig[]>([])\n  const [loading, setLoading] = useState(true)\n  const [fetching, setFetching] = useState<string | null>(null)\n  const [initializing, setInitializing] = useState(false)\n\n  // Available providers that should be configured\n  const availableProviders = useMemo(() => ['NBP', 'Raiffeisen Bank Polska'], [])\n\n  const mutationContextId = 'currencies-fetch-configs:mutation'\n  const { runMutation, retryLastMutation } = useGuardedMutation<{\n    formId: string\n    resourceKind: string\n    resourceId?: string\n    retryLastMutation: () => Promise<boolean>\n  }>({\n    contextId: mutationContextId,\n    blockedMessage: t('ui.forms.flash.saveBlocked', 'Save blocked by validation'),\n  })\n\n  const createProviderConfig = useCallback(async (provider: string) => {\n    try {\n      await runMutation({\n        operation: () => apiCall('/api/currencies/fetch-configs', {\n          method: 'POST',\n          headers: { 'Content-Type': 'application/json' },\n          body: JSON.stringify({\n            provider,\n            isEnabled: false,\n            syncTime: '09:00',\n          }),\n        }),\n        context: {\n          formId: mutationContextId,\n          resourceKind: 'currencies.fetch_config',\n          retryLastMutation,\n        },\n        mutationPayload: { provider, isEnabled: false, syncTime: '09:00' },\n      })\n    } catch (err: any) {\n      // Ignore errors for duplicate providers\n      if (!err.message?.includes('already configured')) {\n        throw err\n      }\n    }\n  }, [mutationContextId, retryLastMutation, runMutation])\n\n  const initializeMissingProviders = useCallback(async (providers: string[]) => {\n    setInitializing(true)\n    try {\n      for (const provider of providers) {\n        await createProviderConfig(provider)\n      }\n      // Reload configs after initialization\n      const { result } = await apiCall('/api/currencies/fetch-configs')\n      if (result?.configs) {\n        setConfigs(result.configs as FetchConfig[])\n      }\n    } catch (err: any) {\n      console.error('Failed to initialize providers:', err)\n    } finally {\n      setInitializing(false)\n    }\n  }, [createProviderConfig])\n\n  const loadConfigs = useCallback(async () => {\n    try {\n      const { result } = await apiCall('/api/currencies/fetch-configs')\n\n      if (result?.configs) {\n        const existingConfigs = result.configs as FetchConfig[]\n        setConfigs(existingConfigs)\n\n        // Check if we need to initialize any missing providers\n        const existingProviders = existingConfigs.map((c) => c.provider)\n        const missingProviders = availableProviders.filter(\n          (p) => !existingProviders.includes(p)\n        )\n\n        // Auto-initialize missing providers\n        if (missingProviders.length > 0) {\n          await initializeMissingProviders(missingProviders)\n        }\n      }\n    } catch (err: any) {\n      flash(err.message || t('currencies.fetch.error_load_configs'), 'error')\n    } finally {\n      setLoading(false)\n    }\n  }, [availableProviders, initializeMissingProviders, t])\n\n  const toggleEnabled = useCallback(async (configId: string, currentValue: boolean, updatedAt?: string | null) => {\n    try {\n      const call = await runMutation({\n        operation: async () => {\n          const response = await withScopedApiRequestHeaders(\n            buildOptimisticLockHeader(updatedAt),\n            () =>\n              apiCall('/api/currencies/fetch-configs', {\n                method: 'PUT',\n                headers: { 'Content-Type': 'application/json' },\n                body: JSON.stringify({\n                  id: configId,\n                  isEnabled: !currentValue,\n                }),\n              }),\n          )\n          if (!response.ok) {\n            throw Object.assign(new Error('[internal] currencies.fetchConfig.toggle failed'), {\n              status: response.status,\n              ...((response.result as Record<string, unknown> | null) ?? {}),\n            })\n          }\n          return response\n        },\n        context: {\n          formId: mutationContextId,\n          resourceKind: 'currencies.fetch_config',\n          resourceId: configId,\n          retryLastMutation,\n        },\n        mutationPayload: { id: configId, isEnabled: !currentValue },\n      })\n\n      const result = call.result as { config?: FetchConfig } | null\n      if (result?.config) {\n        setConfigs((prev) =>\n          prev.map((c) => (c.id === configId ? (result.config as FetchConfig) : c))\n        )\n        flash(\n          currentValue\n            ? t('currencies.fetch.provider_disabled')\n            : t('currencies.fetch.provider_enabled'),\n          'success'\n        )\n      }\n    } catch (err: any) {\n      if (extractOptimisticLockConflict(err)) return\n      flash(err.message || t('currencies.fetch.error_update_config'), 'error')\n    }\n  }, [mutationContextId, retryLastMutation, runMutation, t])\n\n  const updateSyncTime = useCallback(async (configId: string, syncTime: string, updatedAt?: string | null) => {\n    try {\n      const call = await runMutation({\n        operation: async () => {\n          const response = await withScopedApiRequestHeaders(\n            buildOptimisticLockHeader(updatedAt),\n            () =>\n              apiCall('/api/currencies/fetch-configs', {\n                method: 'PUT',\n                headers: { 'Content-Type': 'application/json' },\n                body: JSON.stringify({\n                  id: configId,\n                  syncTime: syncTime || null,\n                }),\n              }),\n          )\n          if (!response.ok) {\n            throw Object.assign(new Error('[internal] currencies.fetchConfig.updateSyncTime failed'), {\n              status: response.status,\n              ...((response.result as Record<string, unknown> | null) ?? {}),\n            })\n          }\n          return response\n        },\n        context: {\n          formId: mutationContextId,\n          resourceKind: 'currencies.fetch_config',\n          resourceId: configId,\n          retryLastMutation,\n        },\n        mutationPayload: { id: configId, syncTime: syncTime || null },\n      })\n\n      const result = call.result as { config?: FetchConfig } | null\n      if (result?.config) {\n        setConfigs((prev) =>\n          prev.map((c) => (c.id === configId ? (result.config as FetchConfig) : c))\n        )\n      }\n    } catch (err: any) {\n      if (extractOptimisticLockConflict(err)) return\n      flash(err.message || t('currencies.fetch.error_update_sync_time'), 'error')\n    }\n  }, [mutationContextId, retryLastMutation, runMutation, t])\n\n  const fetchNow = useCallback(async (provider: string) => {\n    setFetching(provider)\n\n    try {\n      const call = await runMutation({\n        operation: () => apiCall('/api/currencies/fetch-rates', {\n          method: 'POST',\n          headers: { 'Content-Type': 'application/json' },\n          body: JSON.stringify({\n            providers: [provider],\n          }),\n        }),\n        context: {\n          formId: mutationContextId,\n          resourceKind: 'currencies.fetch_rates',\n          retryLastMutation,\n        },\n        mutationPayload: { providers: [provider] },\n      })\n\n      const result = call.result as { byProvider?: Record<string, { count: number; errors?: string[] }> } | null\n      if (result) {\n        const byProvider = result.byProvider as Record<string, { count: number; errors?: string[] }>\n        const count = byProvider?.[provider]?.count || 0\n\n        if (count === 0) {\n          flash(t('currencies.fetch.sync_no_rates'), 'warning')\n        } else {\n          flash(t('currencies.fetch.sync_success', { count }), 'success')\n        }\n        await loadConfigs()\n      }\n    } catch (err: any) {\n      flash(err.message || t('currencies.fetch.sync_error'), 'error')\n    } finally {\n      setFetching(null)\n    }\n  }, [mutationContextId, retryLastMutation, runMutation, t, loadConfigs])\n\n  useEffect(() => {\n    loadConfigs()\n  }, [loadConfigs])\n\n  function formatLastSync(date: string | null): string {\n    if (!date) return t('currencies.fetch.last_sync_never')\n    return new Date(date).toLocaleString()\n  }\n\n  function getStatusBadge(status: string | null) {\n    if (!status) return null\n\n    return (\n      <StatusBadge variant={STATUS_BADGE_VARIANT[status] ?? 'neutral'}>\n        {status}\n      </StatusBadge>\n    )\n  }\n\n  function getProviderName(provider: string): string {\n    if (provider === 'NBP') return t('currencies.fetch.provider_nbp')\n    if (provider === 'Raiffeisen Bank Polska') return t('currencies.fetch.provider_raiffeisen')\n    return provider\n  }\n\n  function getProviderDescription(provider: string): string {\n    if (provider === 'NBP') {\n      return t('currencies.fetch.provider_nbp_description')\n    }\n    if (provider === 'Raiffeisen Bank Polska') {\n      return t('currencies.fetch.provider_raiffeisen_description')\n    }\n    return ''\n  }\n\n  if (loading || initializing) {\n    return (\n      <section className=\"space-y-3 rounded-lg border bg-background p-4\">\n        <header className=\"space-y-2\">\n          <h2 className=\"text-xl font-semibold\">{t('currencies.fetch.title')}</h2>\n          <p className=\"text-sm text-muted-foreground\">\n            {t('currencies.fetch.description')}\n          </p>\n        </header>\n        <div className=\"flex items-center gap-2 text-sm text-muted-foreground\">\n          <Spinner className=\"h-4 w-4\" />\n          {initializing ? t('currencies.fetch.initializing_providers') : t('currencies.fetch.loading')}\n        </div>\n      </section>\n    )\n  }\n\n  return (\n    <section className=\"space-y-6 rounded-lg border bg-background p-4\">\n      <header className=\"space-y-2\">\n        <h2 className=\"text-xl font-semibold\">{t('currencies.fetch.title')}</h2>\n        <p className=\"text-sm text-muted-foreground\">\n          {t('currencies.fetch.description')}\n        </p>\n      </header>\n\n      <div className=\"space-y-3\">\n        {configs.map((config) => (\n          <div\n            key={config.id}\n            className=\"rounded-lg border bg-card p-4\"\n          >\n            <div className=\"flex items-start justify-between gap-4\">\n              <div className=\"flex-1\">\n                <h3 className=\"text-sm font-medium\">\n                  {getProviderName(config.provider)}\n                </h3>\n                <p className=\"text-xs text-muted-foreground mt-0.5\">\n                  {getProviderDescription(config.provider)}\n                </p>\n              </div>\n\n              <Switch\n                checked={config.isEnabled}\n                onCheckedChange={() => toggleEnabled(config.id, config.isEnabled, config.updatedAt)}\n              />\n            </div>\n\n            {config.isEnabled && (\n              <>\n                <div className=\"flex items-baseline gap-3 flex-wrap mt-3\">\n                  <div className=\"flex items-baseline gap-2\">\n                    <label className=\"text-xs text-muted-foreground whitespace-nowrap\">\n                      {t('currencies.fetch.sync_time')}:\n                    </label>\n                    <TimeInput\n                      value={config.syncTime || '09:00'}\n                      onChange={(time) => updateSyncTime(config.id, time, config.updatedAt)}\n                    />\n                  </div>\n\n                  <div className=\"flex items-baseline gap-2\">\n                    <label className=\"text-xs text-muted-foreground whitespace-nowrap\">\n                      {t('currencies.fetch.last_sync')}:\n                    </label>\n                    <span className=\"text-xs text-muted-foreground\">\n                      {formatLastSync(config.lastSyncAt)}\n                    </span>\n                    {getStatusBadge(config.lastSyncStatus)}\n                  </div>\n\n                  <Button\n                    type=\"button\"\n                    onClick={() => fetchNow(config.provider)}\n                    disabled={fetching === config.provider}\n                    size=\"default\"\n                    className=\"ml-auto min-w-32\"\n                  >\n                    {fetching === config.provider ? (\n                      <div>\n                        <Spinner className=\"mr-1.5\" size='sm' />\n                        {t('currencies.fetch.fetching')}\n                      </div>\n                    ) : (\n                      t('currencies.fetch.fetch_now')\n                    )}\n                  </Button>\n                </div>\n\n                {config.lastSyncCount !== null && (\n                  <div className=\"text-xs text-muted-foreground mt-2\">\n                    {t('currencies.fetch.last_sync_count')}: <span className=\"font-medium\">{config.lastSyncCount}</span>\n                  </div>\n                )}\n\n                {config.lastSyncMessage && config.lastSyncStatus === 'error' && (\n                  <Alert status=\"error\" style=\"lighter\" size=\"xs\" className=\"mt-2\">\n                    {config.lastSyncMessage}\n                  </Alert>\n                )}\n              </>\n            )}\n          </div>\n        ))}\n\n        {configs.length === 0 && (\n          <div className=\"rounded border bg-background/80 p-6 text-center\">\n            <p className=\"text-sm text-muted-foreground\">\n              {t('currencies.fetch.no_providers')}\n            </p>\n            <Button\n              type=\"button\"\n              onClick={() => initializeMissingProviders(availableProviders)}\n            >\n              {t('currencies.fetch.initialize_providers')}\n            </Button>\n          </div>\n        )}\n      </div>\n    </section>\n  )\n}\n"],
-  "mappings": ";AAiRM,SAuEQ,UAvER,KAyBE,YAzBF;AA/QN,SAAS,UAAU,WAAW,aAAa,eAAe;AAC1D,SAAS,aAAa;AACtB,SAAS,SAAS,mCAAmC;AACrD,SAAS,2BAA2B,qCAAqC;AACzE,SAAS,0BAA0B;AACnC,SAAS,cAAc;AACvB,SAAS,eAAe;AACxB,SAAS,cAAc;AACvB,SAAS,mBAA4C;AACrD,SAAS,aAAa;AACtB,SAAS,iBAAiB;AAC1B,SAAS,YAAY;AAcrB,MAAM,uBAA2D;AAAA,EAC/D,SAAS;AAAA,EACT,OAAO;AAAA,EACP,SAAS;AACX;AAEe,SAAR,yBAA0C;AAC/C,QAAM,IAAI,KAAK;AACf,QAAM,CAAC,SAAS,UAAU,IAAI,SAAwB,CAAC,CAAC;AACxD,QAAM,CAAC,SAAS,UAAU,IAAI,SAAS,IAAI;AAC3C,QAAM,CAAC,UAAU,WAAW,IAAI,SAAwB,IAAI;AAC5D,QAAM,CAAC,cAAc,eAAe,IAAI,SAAS,KAAK;AAGtD,QAAM,qBAAqB,QAAQ,MAAM,CAAC,OAAO,wBAAwB,GAAG,CAAC,CAAC;AAE9E,QAAM,oBAAoB;AAC1B,QAAM,EAAE,aAAa,kBAAkB,IAAI,mBAKxC;AAAA,IACD,WAAW;AAAA,IACX,gBAAgB,EAAE,8BAA8B,4BAA4B;AAAA,EAC9E,CAAC;AAED,QAAM,uBAAuB,YAAY,OAAO,aAAqB;AACnE,QAAI;AACF,YAAM,YAAY;AAAA,QAChB,WAAW,MAAM,QAAQ,iCAAiC;AAAA,UACxD,QAAQ;AAAA,UACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,UAC9C,MAAM,KAAK,UAAU;AAAA,YACnB;AAAA,YACA,WAAW;AAAA,YACX,UAAU;AAAA,UACZ,CAAC;AAAA,QACH,CAAC;AAAA,QACD,SAAS;AAAA,UACP,QAAQ;AAAA,UACR,cAAc;AAAA,UACd;AAAA,QACF;AAAA,QACA,iBAAiB,EAAE,UAAU,WAAW,OAAO,UAAU,QAAQ;AAAA,MACnE,CAAC;AAAA,IACH,SAAS,KAAU;AAEjB,UAAI,CAAC,IAAI,SAAS,SAAS,oBAAoB,GAAG;AAChD,cAAM;AAAA,MACR;AAAA,IACF;AAAA,EACF,GAAG,CAAC,mBAAmB,mBAAmB,WAAW,CAAC;AAEtD,QAAM,6BAA6B,YAAY,OAAO,cAAwB;AAC5E,oBAAgB,IAAI;AACpB,QAAI;AACF,iBAAW,YAAY,WAAW;AAChC,cAAM,qBAAqB,QAAQ;AAAA,MACrC;AAEA,YAAM,EAAE,OAAO,IAAI,MAAM,QAAQ,+BAA+B;AAChE,UAAI,QAAQ,SAAS;AACnB,mBAAW,OAAO,OAAwB;AAAA,MAC5C;AAAA,IACF,SAAS,KAAU;AACjB,cAAQ,MAAM,mCAAmC,GAAG;AAAA,IACtD,UAAE;AACA,sBAAgB,KAAK;AAAA,IACvB;AAAA,EACF,GAAG,CAAC,oBAAoB,CAAC;AAEzB,QAAM,cAAc,YAAY,YAAY;AAC1C,QAAI;AACF,YAAM,EAAE,OAAO,IAAI,MAAM,QAAQ,+BAA+B;AAEhE,UAAI,QAAQ,SAAS;AACnB,cAAM,kBAAkB,OAAO;AAC/B,mBAAW,eAAe;AAG1B,cAAM,oBAAoB,gBAAgB,IAAI,CAAC,MAAM,EAAE,QAAQ;AAC/D,cAAM,mBAAmB,mBAAmB;AAAA,UAC1C,CAAC,MAAM,CAAC,kBAAkB,SAAS,CAAC;AAAA,QACtC;AAGA,YAAI,iBAAiB,SAAS,GAAG;AAC/B,gBAAM,2BAA2B,gBAAgB;AAAA,QACnD;AAAA,MACF;AAAA,IACF,SAAS,KAAU;AACjB,YAAM,IAAI,WAAW,EAAE,qCAAqC,GAAG,OAAO;AAAA,IACxE,UAAE;AACA,iBAAW,KAAK;AAAA,IAClB;AAAA,EACF,GAAG,CAAC,oBAAoB,4BAA4B,CAAC,CAAC;AAEtD,QAAM,gBAAgB,YAAY,OAAO,UAAkB,cAAuB,cAA8B;AAC9G,QAAI;AACF,YAAM,OAAO,MAAM,YAAY;AAAA,QAC7B,WAAW,YAAY;AACrB,gBAAM,WAAW,MAAM;AAAA,YACrB,0BAA0B,SAAS;AAAA,YACnC,MACE,QAAQ,iCAAiC;AAAA,cACvC,QAAQ;AAAA,cACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,cAC9C,MAAM,KAAK,UAAU;AAAA,gBACnB,IAAI;AAAA,gBACJ,WAAW,CAAC;AAAA,cACd,CAAC;AAAA,YACH,CAAC;AAAA,UACL;AACA,cAAI,CAAC,SAAS,IAAI;AAChB,kBAAM,OAAO,OAAO,IAAI,MAAM,iDAAiD,GAAG;AAAA,cAChF,QAAQ,SAAS;AAAA,cACjB,GAAK,SAAS,UAA6C,CAAC;AAAA,YAC9D,CAAC;AAAA,UACH;AACA,iBAAO;AAAA,QACT;AAAA,QACA,SAAS;AAAA,UACP,QAAQ;AAAA,UACR,cAAc;AAAA,UACd,YAAY;AAAA,UACZ;AAAA,QACF;AAAA,QACA,iBAAiB,EAAE,IAAI,UAAU,WAAW,CAAC,aAAa;AAAA,MAC5D,CAAC;AAED,YAAM,SAAS,KAAK;AACpB,UAAI,QAAQ,QAAQ;AAClB;AAAA,UAAW,CAAC,SACV,KAAK,IAAI,CAAC,MAAO,EAAE,OAAO,WAAY,OAAO,SAAyB,CAAE;AAAA,QAC1E;AACA;AAAA,UACE,eACI,EAAE,oCAAoC,IACtC,EAAE,mCAAmC;AAAA,UACzC;AAAA,QACF;AAAA,MACF;AAAA,IACF,SAAS,KAAU;AACjB,UAAI,8BAA8B,GAAG,EAAG;AACxC,YAAM,IAAI,WAAW,EAAE,sCAAsC,GAAG,OAAO;AAAA,IACzE;AAAA,EACF,GAAG,CAAC,mBAAmB,mBAAmB,aAAa,CAAC,CAAC;AAEzD,QAAM,iBAAiB,YAAY,OAAO,UAAkB,UAAkB,cAA8B;AAC1G,QAAI;AACF,YAAM,OAAO,MAAM,YAAY;AAAA,QAC7B,WAAW,YAAY;AACrB,gBAAM,WAAW,MAAM;AAAA,YACrB,0BAA0B,SAAS;AAAA,YACnC,MACE,QAAQ,iCAAiC;AAAA,cACvC,QAAQ;AAAA,cACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,cAC9C,MAAM,KAAK,UAAU;AAAA,gBACnB,IAAI;AAAA,gBACJ,UAAU,YAAY;AAAA,cACxB,CAAC;AAAA,YACH,CAAC;AAAA,UACL;AACA,cAAI,CAAC,SAAS,IAAI;AAChB,kBAAM,OAAO,OAAO,IAAI,MAAM,yDAAyD,GAAG;AAAA,cACxF,QAAQ,SAAS;AAAA,cACjB,GAAK,SAAS,UAA6C,CAAC;AAAA,YAC9D,CAAC;AAAA,UACH;AACA,iBAAO;AAAA,QACT;AAAA,QACA,SAAS;AAAA,UACP,QAAQ;AAAA,UACR,cAAc;AAAA,UACd,YAAY;AAAA,UACZ;AAAA,QACF;AAAA,QACA,iBAAiB,EAAE,IAAI,UAAU,UAAU,YAAY,KAAK;AAAA,MAC9D,CAAC;AAED,YAAM,SAAS,KAAK;AACpB,UAAI,QAAQ,QAAQ;AAClB;AAAA,UAAW,CAAC,SACV,KAAK,IAAI,CAAC,MAAO,EAAE,OAAO,WAAY,OAAO,SAAyB,CAAE;AAAA,QAC1E;AAAA,MACF;AAAA,IACF,SAAS,KAAU;AACjB,UAAI,8BAA8B,GAAG,EAAG;AACxC,YAAM,IAAI,WAAW,EAAE,yCAAyC,GAAG,OAAO;AAAA,IAC5E;AAAA,EACF,GAAG,CAAC,mBAAmB,mBAAmB,aAAa,CAAC,CAAC;AAEzD,QAAM,WAAW,YAAY,OAAO,aAAqB;AACvD,gBAAY,QAAQ;AAEpB,QAAI;AACF,YAAM,OAAO,MAAM,YAAY;AAAA,QAC7B,WAAW,MAAM,QAAQ,+BAA+B;AAAA,UACtD,QAAQ;AAAA,UACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,UAC9C,MAAM,KAAK,UAAU;AAAA,YACnB,WAAW,CAAC,QAAQ;AAAA,UACtB,CAAC;AAAA,QACH,CAAC;AAAA,QACD,SAAS;AAAA,UACP,QAAQ;AAAA,UACR,cAAc;AAAA,UACd;AAAA,QACF;AAAA,QACA,iBAAiB,EAAE,WAAW,CAAC,QAAQ,EAAE;AAAA,MAC3C,CAAC;AAED,YAAM,SAAS,KAAK;AACpB,UAAI,QAAQ;AACV,cAAM,aAAa,OAAO;AAC1B,cAAM,QAAQ,aAAa,QAAQ,GAAG,SAAS;AAE/C,YAAI,UAAU,GAAG;AACf,gBAAM,EAAE,gCAAgC,GAAG,SAAS;AAAA,QACtD,OAAO;AACL,gBAAM,EAAE,iCAAiC,EAAE,MAAM,CAAC,GAAG,SAAS;AAAA,QAChE;AACA,cAAM,YAAY;AAAA,MACpB;AAAA,IACF,SAAS,KAAU;AACjB,YAAM,IAAI,WAAW,EAAE,6BAA6B,GAAG,OAAO;AAAA,IAChE,UAAE;AACA,kBAAY,IAAI;AAAA,IAClB;AAAA,EACF,GAAG,CAAC,mBAAmB,mBAAmB,aAAa,GAAG,WAAW,CAAC;AAEtE,YAAU,MAAM;AACd,gBAAY;AAAA,EACd,GAAG,CAAC,WAAW,CAAC;AAEhB,WAAS,eAAe,MAA6B;AACnD,QAAI,CAAC,KAAM,QAAO,EAAE,kCAAkC;AACtD,WAAO,IAAI,KAAK,IAAI,EAAE,eAAe;AAAA,EACvC;AAEA,WAAS,eAAe,QAAuB;AAC7C,QAAI,CAAC,OAAQ,QAAO;AAEpB,WACE,oBAAC,eAAY,SAAS,qBAAqB,MAAM,KAAK,WACnD,kBACH;AAAA,EAEJ;AAEA,WAAS,gBAAgB,UAA0B;AACjD,QAAI,aAAa,MAAO,QAAO,EAAE,+BAA+B;AAChE,QAAI,aAAa,yBAA0B,QAAO,EAAE,sCAAsC;AAC1F,WAAO;AAAA,EACT;AAEA,WAAS,uBAAuB,UAA0B;AACxD,QAAI,aAAa,OAAO;AACtB,aAAO,EAAE,2CAA2C;AAAA,IACtD;AACA,QAAI,aAAa,0BAA0B;AACzC,aAAO,EAAE,kDAAkD;AAAA,IAC7D;AACA,WAAO;AAAA,EACT;AAEA,MAAI,WAAW,cAAc;AAC3B,WACE,qBAAC,aAAQ,WAAU,iDACjB;AAAA,2BAAC,YAAO,WAAU,aAChB;AAAA,4BAAC,QAAG,WAAU,yBAAyB,YAAE,wBAAwB,GAAE;AAAA,QACnE,oBAAC,OAAE,WAAU,iCACV,YAAE,8BAA8B,GACnC;AAAA,SACF;AAAA,MACA,qBAAC,SAAI,WAAU,yDACb;AAAA,4BAAC,WAAQ,WAAU,WAAU;AAAA,QAC5B,eAAe,EAAE,yCAAyC,IAAI,EAAE,0BAA0B;AAAA,SAC7F;AAAA,OACF;AAAA,EAEJ;AAEA,SACE,qBAAC,aAAQ,WAAU,iDACjB;AAAA,yBAAC,YAAO,WAAU,aAChB;AAAA,0BAAC,QAAG,WAAU,yBAAyB,YAAE,wBAAwB,GAAE;AAAA,MACnE,oBAAC,OAAE,WAAU,iCACV,YAAE,8BAA8B,GACnC;AAAA,OACF;AAAA,IAEA,qBAAC,SAAI,WAAU,aACZ;AAAA,cAAQ,IAAI,CAAC,WACZ;AAAA,QAAC;AAAA;AAAA,UAEC,WAAU;AAAA,UAEV;AAAA,iCAAC,SAAI,WAAU,0CACb;AAAA,mCAAC,SAAI,WAAU,UACb;AAAA,oCAAC,QAAG,WAAU,uBACX,0BAAgB,OAAO,QAAQ,GAClC;AAAA,gBACA,oBAAC,OAAE,WAAU,wCACV,iCAAuB,OAAO,QAAQ,GACzC;AAAA,iBACF;AAAA,cAEA;AAAA,gBAAC;AAAA;AAAA,kBACC,SAAS,OAAO;AAAA,kBAChB,iBAAiB,MAAM,cAAc,OAAO,IAAI,OAAO,WAAW,OAAO,SAAS;AAAA;AAAA,cACpF;AAAA,eACF;AAAA,YAEC,OAAO,aACN,iCACE;AAAA,mCAAC,SAAI,WAAU,4CACb;AAAA,qCAAC,SAAI,WAAU,6BACb;AAAA,uCAAC,WAAM,WAAU,mDACd;AAAA,sBAAE,4BAA4B;AAAA,oBAAE;AAAA,qBACnC;AAAA,kBACA;AAAA,oBAAC;AAAA;AAAA,sBACC,OAAO,OAAO,YAAY;AAAA,sBAC1B,UAAU,CAAC,SAAS,eAAe,OAAO,IAAI,MAAM,OAAO,SAAS;AAAA;AAAA,kBACtE;AAAA,mBACF;AAAA,gBAEA,qBAAC,SAAI,WAAU,6BACb;AAAA,uCAAC,WAAM,WAAU,mDACd;AAAA,sBAAE,4BAA4B;AAAA,oBAAE;AAAA,qBACnC;AAAA,kBACA,oBAAC,UAAK,WAAU,iCACb,yBAAe,OAAO,UAAU,GACnC;AAAA,kBACC,eAAe,OAAO,cAAc;AAAA,mBACvC;AAAA,gBAEA;AAAA,kBAAC;AAAA;AAAA,oBACC,MAAK;AAAA,oBACL,SAAS,MAAM,SAAS,OAAO,QAAQ;AAAA,oBACvC,UAAU,aAAa,OAAO;AAAA,oBAC9B,MAAK;AAAA,oBACL,WAAU;AAAA,oBAET,uBAAa,OAAO,WACnB,qBAAC,SACC;AAAA,0CAAC,WAAQ,WAAU,UAAS,MAAK,MAAK;AAAA,sBACrC,EAAE,2BAA2B;AAAA,uBAChC,IAEA,EAAE,4BAA4B;AAAA;AAAA,gBAElC;AAAA,iBACF;AAAA,cAEC,OAAO,kBAAkB,QACxB,qBAAC,SAAI,WAAU,sCACZ;AAAA,kBAAE,kCAAkC;AAAA,gBAAE;AAAA,gBAAE,oBAAC,UAAK,WAAU,eAAe,iBAAO,eAAc;AAAA,iBAC/F;AAAA,cAGD,OAAO,mBAAmB,OAAO,mBAAmB,WACnD,oBAAC,SAAM,QAAO,SAAQ,OAAM,WAAU,MAAK,MAAK,WAAU,QACvD,iBAAO,iBACV;AAAA,eAEJ;AAAA;AAAA;AAAA,QAvEG,OAAO;AAAA,MAyEd,CACD;AAAA,MAEA,QAAQ,WAAW,KAClB,qBAAC,SAAI,WAAU,mDACb;AAAA,4BAAC,OAAE,WAAU,iCACV,YAAE,+BAA+B,GACpC;AAAA,QACA;AAAA,UAAC;AAAA;AAAA,YACC,MAAK;AAAA,YACL,SAAS,MAAM,2BAA2B,kBAAkB;AAAA,YAE3D,YAAE,uCAAuC;AAAA;AAAA,QAC5C;AAAA,SACF;AAAA,OAEJ;AAAA,KACF;AAEJ;",
+  "sourcesContent": ["'use client'\n\nimport { useState, useEffect, useCallback, useMemo } from 'react'\nimport { flash } from '@open-mercato/ui/backend/FlashMessages'\nimport { apiCall, withScopedApiRequestHeaders } from '@open-mercato/ui/backend/utils/apiCall'\nimport { buildOptimisticLockHeader, extractOptimisticLockConflict } from '@open-mercato/ui/backend/utils/optimisticLock'\nimport { useGuardedMutation } from '@open-mercato/ui/backend/injection/useGuardedMutation'\nimport { Button } from '@open-mercato/ui/primitives/button'\nimport { Spinner } from '@open-mercato/ui/primitives/spinner'\nimport { Switch } from '@open-mercato/ui/primitives/switch'\nimport { StatusBadge, type StatusBadgeVariant } from '@open-mercato/ui/primitives/status-badge'\nimport { Alert } from '@open-mercato/ui/primitives/alert'\nimport { TimeInput } from '@open-mercato/ui/backend/inputs/TimeInput'\nimport { useT } from '@open-mercato/shared/lib/i18n/context'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('currencies').child({ component: 'CurrencyFetchingConfig' })\n\ninterface FetchConfig {\n  id: string\n  provider: string\n  isEnabled: boolean\n  syncTime: string | null\n  lastSyncAt: string | null\n  lastSyncStatus: string | null\n  lastSyncMessage: string | null\n  lastSyncCount: number | null\n  updatedAt?: string | null\n}\n\nconst STATUS_BADGE_VARIANT: Record<string, StatusBadgeVariant> = {\n  success: 'success',\n  error: 'error',\n  partial: 'warning',\n}\n\nexport default function CurrencyFetchingConfig() {\n  const t = useT()\n  const [configs, setConfigs] = useState<FetchConfig[]>([])\n  const [loading, setLoading] = useState(true)\n  const [fetching, setFetching] = useState<string | null>(null)\n  const [initializing, setInitializing] = useState(false)\n\n  // Available providers that should be configured\n  const availableProviders = useMemo(() => ['NBP', 'Raiffeisen Bank Polska'], [])\n\n  const mutationContextId = 'currencies-fetch-configs:mutation'\n  const { runMutation, retryLastMutation } = useGuardedMutation<{\n    formId: string\n    resourceKind: string\n    resourceId?: string\n    retryLastMutation: () => Promise<boolean>\n  }>({\n    contextId: mutationContextId,\n    blockedMessage: t('ui.forms.flash.saveBlocked', 'Save blocked by validation'),\n  })\n\n  const createProviderConfig = useCallback(async (provider: string) => {\n    try {\n      await runMutation({\n        operation: () => apiCall('/api/currencies/fetch-configs', {\n          method: 'POST',\n          headers: { 'Content-Type': 'application/json' },\n          body: JSON.stringify({\n            provider,\n            isEnabled: false,\n            syncTime: '09:00',\n          }),\n        }),\n        context: {\n          formId: mutationContextId,\n          resourceKind: 'currencies.fetch_config',\n          retryLastMutation,\n        },\n        mutationPayload: { provider, isEnabled: false, syncTime: '09:00' },\n      })\n    } catch (err: any) {\n      // Ignore errors for duplicate providers\n      if (!err.message?.includes('already configured')) {\n        throw err\n      }\n    }\n  }, [mutationContextId, retryLastMutation, runMutation])\n\n  const initializeMissingProviders = useCallback(async (providers: string[]) => {\n    setInitializing(true)\n    try {\n      for (const provider of providers) {\n        await createProviderConfig(provider)\n      }\n      // Reload configs after initialization\n      const { result } = await apiCall('/api/currencies/fetch-configs')\n      if (result?.configs) {\n        setConfigs(result.configs as FetchConfig[])\n      }\n    } catch (err: any) {\n      logger.error('Failed to initialize providers', { err })\n    } finally {\n      setInitializing(false)\n    }\n  }, [createProviderConfig])\n\n  const loadConfigs = useCallback(async () => {\n    try {\n      const { result } = await apiCall('/api/currencies/fetch-configs')\n\n      if (result?.configs) {\n        const existingConfigs = result.configs as FetchConfig[]\n        setConfigs(existingConfigs)\n\n        // Check if we need to initialize any missing providers\n        const existingProviders = existingConfigs.map((c) => c.provider)\n        const missingProviders = availableProviders.filter(\n          (p) => !existingProviders.includes(p)\n        )\n\n        // Auto-initialize missing providers\n        if (missingProviders.length > 0) {\n          await initializeMissingProviders(missingProviders)\n        }\n      }\n    } catch (err: any) {\n      flash(err.message || t('currencies.fetch.error_load_configs'), 'error')\n    } finally {\n      setLoading(false)\n    }\n  }, [availableProviders, initializeMissingProviders, t])\n\n  const toggleEnabled = useCallback(async (configId: string, currentValue: boolean, updatedAt?: string | null) => {\n    try {\n      const call = await runMutation({\n        operation: async () => {\n          const response = await withScopedApiRequestHeaders(\n            buildOptimisticLockHeader(updatedAt),\n            () =>\n              apiCall('/api/currencies/fetch-configs', {\n                method: 'PUT',\n                headers: { 'Content-Type': 'application/json' },\n                body: JSON.stringify({\n                  id: configId,\n                  isEnabled: !currentValue,\n                }),\n              }),\n          )\n          if (!response.ok) {\n            throw Object.assign(new Error('[internal] currencies.fetchConfig.toggle failed'), {\n              status: response.status,\n              ...((response.result as Record<string, unknown> | null) ?? {}),\n            })\n          }\n          return response\n        },\n        context: {\n          formId: mutationContextId,\n          resourceKind: 'currencies.fetch_config',\n          resourceId: configId,\n          retryLastMutation,\n        },\n        mutationPayload: { id: configId, isEnabled: !currentValue },\n      })\n\n      const result = call.result as { config?: FetchConfig } | null\n      if (result?.config) {\n        setConfigs((prev) =>\n          prev.map((c) => (c.id === configId ? (result.config as FetchConfig) : c))\n        )\n        flash(\n          currentValue\n            ? t('currencies.fetch.provider_disabled')\n            : t('currencies.fetch.provider_enabled'),\n          'success'\n        )\n      }\n    } catch (err: any) {\n      if (extractOptimisticLockConflict(err)) return\n      flash(err.message || t('currencies.fetch.error_update_config'), 'error')\n    }\n  }, [mutationContextId, retryLastMutation, runMutation, t])\n\n  const updateSyncTime = useCallback(async (configId: string, syncTime: string, updatedAt?: string | null) => {\n    try {\n      const call = await runMutation({\n        operation: async () => {\n          const response = await withScopedApiRequestHeaders(\n            buildOptimisticLockHeader(updatedAt),\n            () =>\n              apiCall('/api/currencies/fetch-configs', {\n                method: 'PUT',\n                headers: { 'Content-Type': 'application/json' },\n                body: JSON.stringify({\n                  id: configId,\n                  syncTime: syncTime || null,\n                }),\n              }),\n          )\n          if (!response.ok) {\n            throw Object.assign(new Error('[internal] currencies.fetchConfig.updateSyncTime failed'), {\n              status: response.status,\n              ...((response.result as Record<string, unknown> | null) ?? {}),\n            })\n          }\n          return response\n        },\n        context: {\n          formId: mutationContextId,\n          resourceKind: 'currencies.fetch_config',\n          resourceId: configId,\n          retryLastMutation,\n        },\n        mutationPayload: { id: configId, syncTime: syncTime || null },\n      })\n\n      const result = call.result as { config?: FetchConfig } | null\n      if (result?.config) {\n        setConfigs((prev) =>\n          prev.map((c) => (c.id === configId ? (result.config as FetchConfig) : c))\n        )\n      }\n    } catch (err: any) {\n      if (extractOptimisticLockConflict(err)) return\n      flash(err.message || t('currencies.fetch.error_update_sync_time'), 'error')\n    }\n  }, [mutationContextId, retryLastMutation, runMutation, t])\n\n  const fetchNow = useCallback(async (provider: string) => {\n    setFetching(provider)\n\n    try {\n      const call = await runMutation({\n        operation: () => apiCall('/api/currencies/fetch-rates', {\n          method: 'POST',\n          headers: { 'Content-Type': 'application/json' },\n          body: JSON.stringify({\n            providers: [provider],\n          }),\n        }),\n        context: {\n          formId: mutationContextId,\n          resourceKind: 'currencies.fetch_rates',\n          retryLastMutation,\n        },\n        mutationPayload: { providers: [provider] },\n      })\n\n      const result = call.result as { byProvider?: Record<string, { count: number; errors?: string[] }> } | null\n      if (result) {\n        const byProvider = result.byProvider as Record<string, { count: number; errors?: string[] }>\n        const count = byProvider?.[provider]?.count || 0\n\n        if (count === 0) {\n          flash(t('currencies.fetch.sync_no_rates'), 'warning')\n        } else {\n          flash(t('currencies.fetch.sync_success', { count }), 'success')\n        }\n        await loadConfigs()\n      }\n    } catch (err: any) {\n      flash(err.message || t('currencies.fetch.sync_error'), 'error')\n    } finally {\n      setFetching(null)\n    }\n  }, [mutationContextId, retryLastMutation, runMutation, t, loadConfigs])\n\n  useEffect(() => {\n    loadConfigs()\n  }, [loadConfigs])\n\n  function formatLastSync(date: string | null): string {\n    if (!date) return t('currencies.fetch.last_sync_never')\n    return new Date(date).toLocaleString()\n  }\n\n  function getStatusBadge(status: string | null) {\n    if (!status) return null\n\n    return (\n      <StatusBadge variant={STATUS_BADGE_VARIANT[status] ?? 'neutral'}>\n        {status}\n      </StatusBadge>\n    )\n  }\n\n  function getProviderName(provider: string): string {\n    if (provider === 'NBP') return t('currencies.fetch.provider_nbp')\n    if (provider === 'Raiffeisen Bank Polska') return t('currencies.fetch.provider_raiffeisen')\n    return provider\n  }\n\n  function getProviderDescription(provider: string): string {\n    if (provider === 'NBP') {\n      return t('currencies.fetch.provider_nbp_description')\n    }\n    if (provider === 'Raiffeisen Bank Polska') {\n      return t('currencies.fetch.provider_raiffeisen_description')\n    }\n    return ''\n  }\n\n  if (loading || initializing) {\n    return (\n      <section className=\"space-y-3 rounded-lg border bg-background p-4\">\n        <header className=\"space-y-2\">\n          <h2 className=\"text-xl font-semibold\">{t('currencies.fetch.title')}</h2>\n          <p className=\"text-sm text-muted-foreground\">\n            {t('currencies.fetch.description')}\n          </p>\n        </header>\n        <div className=\"flex items-center gap-2 text-sm text-muted-foreground\">\n          <Spinner className=\"h-4 w-4\" />\n          {initializing ? t('currencies.fetch.initializing_providers') : t('currencies.fetch.loading')}\n        </div>\n      </section>\n    )\n  }\n\n  return (\n    <section className=\"space-y-6 rounded-lg border bg-background p-4\">\n      <header className=\"space-y-2\">\n        <h2 className=\"text-xl font-semibold\">{t('currencies.fetch.title')}</h2>\n        <p className=\"text-sm text-muted-foreground\">\n          {t('currencies.fetch.description')}\n        </p>\n      </header>\n\n      <div className=\"space-y-3\">\n        {configs.map((config) => (\n          <div\n            key={config.id}\n            className=\"rounded-lg border bg-card p-4\"\n          >\n            <div className=\"flex items-start justify-between gap-4\">\n              <div className=\"flex-1\">\n                <h3 className=\"text-sm font-medium\">\n                  {getProviderName(config.provider)}\n                </h3>\n                <p className=\"text-xs text-muted-foreground mt-0.5\">\n                  {getProviderDescription(config.provider)}\n                </p>\n              </div>\n\n              <Switch\n                checked={config.isEnabled}\n                onCheckedChange={() => toggleEnabled(config.id, config.isEnabled, config.updatedAt)}\n              />\n            </div>\n\n            {config.isEnabled && (\n              <>\n                <div className=\"flex items-baseline gap-3 flex-wrap mt-3\">\n                  <div className=\"flex items-baseline gap-2\">\n                    <label className=\"text-xs text-muted-foreground whitespace-nowrap\">\n                      {t('currencies.fetch.sync_time')}:\n                    </label>\n                    <TimeInput\n                      value={config.syncTime || '09:00'}\n                      onChange={(time) => updateSyncTime(config.id, time, config.updatedAt)}\n                    />\n                  </div>\n\n                  <div className=\"flex items-baseline gap-2\">\n                    <label className=\"text-xs text-muted-foreground whitespace-nowrap\">\n                      {t('currencies.fetch.last_sync')}:\n                    </label>\n                    <span className=\"text-xs text-muted-foreground\">\n                      {formatLastSync(config.lastSyncAt)}\n                    </span>\n                    {getStatusBadge(config.lastSyncStatus)}\n                  </div>\n\n                  <Button\n                    type=\"button\"\n                    onClick={() => fetchNow(config.provider)}\n                    disabled={fetching === config.provider}\n                    size=\"default\"\n                    className=\"ml-auto min-w-32\"\n                  >\n                    {fetching === config.provider ? (\n                      <div>\n                        <Spinner className=\"mr-1.5\" size='sm' />\n                        {t('currencies.fetch.fetching')}\n                      </div>\n                    ) : (\n                      t('currencies.fetch.fetch_now')\n                    )}\n                  </Button>\n                </div>\n\n                {config.lastSyncCount !== null && (\n                  <div className=\"text-xs text-muted-foreground mt-2\">\n                    {t('currencies.fetch.last_sync_count')}: <span className=\"font-medium\">{config.lastSyncCount}</span>\n                  </div>\n                )}\n\n                {config.lastSyncMessage && config.lastSyncStatus === 'error' && (\n                  <Alert status=\"error\" style=\"lighter\" size=\"xs\" className=\"mt-2\">\n                    {config.lastSyncMessage}\n                  </Alert>\n                )}\n              </>\n            )}\n          </div>\n        ))}\n\n        {configs.length === 0 && (\n          <div className=\"rounded border bg-background/80 p-6 text-center\">\n            <p className=\"text-sm text-muted-foreground\">\n              {t('currencies.fetch.no_providers')}\n            </p>\n            <Button\n              type=\"button\"\n              onClick={() => initializeMissingProviders(availableProviders)}\n            >\n              {t('currencies.fetch.initialize_providers')}\n            </Button>\n          </div>\n        )}\n      </div>\n    </section>\n  )\n}\n"],
+  "mappings": ";AAoRM,SAuEQ,UAvER,KAyBE,YAzBF;AAlRN,SAAS,UAAU,WAAW,aAAa,eAAe;AAC1D,SAAS,aAAa;AACtB,SAAS,SAAS,mCAAmC;AACrD,SAAS,2BAA2B,qCAAqC;AACzE,SAAS,0BAA0B;AACnC,SAAS,cAAc;AACvB,SAAS,eAAe;AACxB,SAAS,cAAc;AACvB,SAAS,mBAA4C;AACrD,SAAS,aAAa;AACtB,SAAS,iBAAiB;AAC1B,SAAS,YAAY;AACrB,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,YAAY,EAAE,MAAM,EAAE,WAAW,yBAAyB,CAAC;AAcvF,MAAM,uBAA2D;AAAA,EAC/D,SAAS;AAAA,EACT,OAAO;AAAA,EACP,SAAS;AACX;AAEe,SAAR,yBAA0C;AAC/C,QAAM,IAAI,KAAK;AACf,QAAM,CAAC,SAAS,UAAU,IAAI,SAAwB,CAAC,CAAC;AACxD,QAAM,CAAC,SAAS,UAAU,IAAI,SAAS,IAAI;AAC3C,QAAM,CAAC,UAAU,WAAW,IAAI,SAAwB,IAAI;AAC5D,QAAM,CAAC,cAAc,eAAe,IAAI,SAAS,KAAK;AAGtD,QAAM,qBAAqB,QAAQ,MAAM,CAAC,OAAO,wBAAwB,GAAG,CAAC,CAAC;AAE9E,QAAM,oBAAoB;AAC1B,QAAM,EAAE,aAAa,kBAAkB,IAAI,mBAKxC;AAAA,IACD,WAAW;AAAA,IACX,gBAAgB,EAAE,8BAA8B,4BAA4B;AAAA,EAC9E,CAAC;AAED,QAAM,uBAAuB,YAAY,OAAO,aAAqB;AACnE,QAAI;AACF,YAAM,YAAY;AAAA,QAChB,WAAW,MAAM,QAAQ,iCAAiC;AAAA,UACxD,QAAQ;AAAA,UACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,UAC9C,MAAM,KAAK,UAAU;AAAA,YACnB;AAAA,YACA,WAAW;AAAA,YACX,UAAU;AAAA,UACZ,CAAC;AAAA,QACH,CAAC;AAAA,QACD,SAAS;AAAA,UACP,QAAQ;AAAA,UACR,cAAc;AAAA,UACd;AAAA,QACF;AAAA,QACA,iBAAiB,EAAE,UAAU,WAAW,OAAO,UAAU,QAAQ;AAAA,MACnE,CAAC;AAAA,IACH,SAAS,KAAU;AAEjB,UAAI,CAAC,IAAI,SAAS,SAAS,oBAAoB,GAAG;AAChD,cAAM;AAAA,MACR;AAAA,IACF;AAAA,EACF,GAAG,CAAC,mBAAmB,mBAAmB,WAAW,CAAC;AAEtD,QAAM,6BAA6B,YAAY,OAAO,cAAwB;AAC5E,oBAAgB,IAAI;AACpB,QAAI;AACF,iBAAW,YAAY,WAAW;AAChC,cAAM,qBAAqB,QAAQ;AAAA,MACrC;AAEA,YAAM,EAAE,OAAO,IAAI,MAAM,QAAQ,+BAA+B;AAChE,UAAI,QAAQ,SAAS;AACnB,mBAAW,OAAO,OAAwB;AAAA,MAC5C;AAAA,IACF,SAAS,KAAU;AACjB,aAAO,MAAM,kCAAkC,EAAE,IAAI,CAAC;AAAA,IACxD,UAAE;AACA,sBAAgB,KAAK;AAAA,IACvB;AAAA,EACF,GAAG,CAAC,oBAAoB,CAAC;AAEzB,QAAM,cAAc,YAAY,YAAY;AAC1C,QAAI;AACF,YAAM,EAAE,OAAO,IAAI,MAAM,QAAQ,+BAA+B;AAEhE,UAAI,QAAQ,SAAS;AACnB,cAAM,kBAAkB,OAAO;AAC/B,mBAAW,eAAe;AAG1B,cAAM,oBAAoB,gBAAgB,IAAI,CAAC,MAAM,EAAE,QAAQ;AAC/D,cAAM,mBAAmB,mBAAmB;AAAA,UAC1C,CAAC,MAAM,CAAC,kBAAkB,SAAS,CAAC;AAAA,QACtC;AAGA,YAAI,iBAAiB,SAAS,GAAG;AAC/B,gBAAM,2BAA2B,gBAAgB;AAAA,QACnD;AAAA,MACF;AAAA,IACF,SAAS,KAAU;AACjB,YAAM,IAAI,WAAW,EAAE,qCAAqC,GAAG,OAAO;AAAA,IACxE,UAAE;AACA,iBAAW,KAAK;AAAA,IAClB;AAAA,EACF,GAAG,CAAC,oBAAoB,4BAA4B,CAAC,CAAC;AAEtD,QAAM,gBAAgB,YAAY,OAAO,UAAkB,cAAuB,cAA8B;AAC9G,QAAI;AACF,YAAM,OAAO,MAAM,YAAY;AAAA,QAC7B,WAAW,YAAY;AACrB,gBAAM,WAAW,MAAM;AAAA,YACrB,0BAA0B,SAAS;AAAA,YACnC,MACE,QAAQ,iCAAiC;AAAA,cACvC,QAAQ;AAAA,cACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,cAC9C,MAAM,KAAK,UAAU;AAAA,gBACnB,IAAI;AAAA,gBACJ,WAAW,CAAC;AAAA,cACd,CAAC;AAAA,YACH,CAAC;AAAA,UACL;AACA,cAAI,CAAC,SAAS,IAAI;AAChB,kBAAM,OAAO,OAAO,IAAI,MAAM,iDAAiD,GAAG;AAAA,cAChF,QAAQ,SAAS;AAAA,cACjB,GAAK,SAAS,UAA6C,CAAC;AAAA,YAC9D,CAAC;AAAA,UACH;AACA,iBAAO;AAAA,QACT;AAAA,QACA,SAAS;AAAA,UACP,QAAQ;AAAA,UACR,cAAc;AAAA,UACd,YAAY;AAAA,UACZ;AAAA,QACF;AAAA,QACA,iBAAiB,EAAE,IAAI,UAAU,WAAW,CAAC,aAAa;AAAA,MAC5D,CAAC;AAED,YAAM,SAAS,KAAK;AACpB,UAAI,QAAQ,QAAQ;AAClB;AAAA,UAAW,CAAC,SACV,KAAK,IAAI,CAAC,MAAO,EAAE,OAAO,WAAY,OAAO,SAAyB,CAAE;AAAA,QAC1E;AACA;AAAA,UACE,eACI,EAAE,oCAAoC,IACtC,EAAE,mCAAmC;AAAA,UACzC;AAAA,QACF;AAAA,MACF;AAAA,IACF,SAAS,KAAU;AACjB,UAAI,8BAA8B,GAAG,EAAG;AACxC,YAAM,IAAI,WAAW,EAAE,sCAAsC,GAAG,OAAO;AAAA,IACzE;AAAA,EACF,GAAG,CAAC,mBAAmB,mBAAmB,aAAa,CAAC,CAAC;AAEzD,QAAM,iBAAiB,YAAY,OAAO,UAAkB,UAAkB,cAA8B;AAC1G,QAAI;AACF,YAAM,OAAO,MAAM,YAAY;AAAA,QAC7B,WAAW,YAAY;AACrB,gBAAM,WAAW,MAAM;AAAA,YACrB,0BAA0B,SAAS;AAAA,YACnC,MACE,QAAQ,iCAAiC;AAAA,cACvC,QAAQ;AAAA,cACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,cAC9C,MAAM,KAAK,UAAU;AAAA,gBACnB,IAAI;AAAA,gBACJ,UAAU,YAAY;AAAA,cACxB,CAAC;AAAA,YACH,CAAC;AAAA,UACL;AACA,cAAI,CAAC,SAAS,IAAI;AAChB,kBAAM,OAAO,OAAO,IAAI,MAAM,yDAAyD,GAAG;AAAA,cACxF,QAAQ,SAAS;AAAA,cACjB,GAAK,SAAS,UAA6C,CAAC;AAAA,YAC9D,CAAC;AAAA,UACH;AACA,iBAAO;AAAA,QACT;AAAA,QACA,SAAS;AAAA,UACP,QAAQ;AAAA,UACR,cAAc;AAAA,UACd,YAAY;AAAA,UACZ;AAAA,QACF;AAAA,QACA,iBAAiB,EAAE,IAAI,UAAU,UAAU,YAAY,KAAK;AAAA,MAC9D,CAAC;AAED,YAAM,SAAS,KAAK;AACpB,UAAI,QAAQ,QAAQ;AAClB;AAAA,UAAW,CAAC,SACV,KAAK,IAAI,CAAC,MAAO,EAAE,OAAO,WAAY,OAAO,SAAyB,CAAE;AAAA,QAC1E;AAAA,MACF;AAAA,IACF,SAAS,KAAU;AACjB,UAAI,8BAA8B,GAAG,EAAG;AACxC,YAAM,IAAI,WAAW,EAAE,yCAAyC,GAAG,OAAO;AAAA,IAC5E;AAAA,EACF,GAAG,CAAC,mBAAmB,mBAAmB,aAAa,CAAC,CAAC;AAEzD,QAAM,WAAW,YAAY,OAAO,aAAqB;AACvD,gBAAY,QAAQ;AAEpB,QAAI;AACF,YAAM,OAAO,MAAM,YAAY;AAAA,QAC7B,WAAW,MAAM,QAAQ,+BAA+B;AAAA,UACtD,QAAQ;AAAA,UACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,UAC9C,MAAM,KAAK,UAAU;AAAA,YACnB,WAAW,CAAC,QAAQ;AAAA,UACtB,CAAC;AAAA,QACH,CAAC;AAAA,QACD,SAAS;AAAA,UACP,QAAQ;AAAA,UACR,cAAc;AAAA,UACd;AAAA,QACF;AAAA,QACA,iBAAiB,EAAE,WAAW,CAAC,QAAQ,EAAE;AAAA,MAC3C,CAAC;AAED,YAAM,SAAS,KAAK;AACpB,UAAI,QAAQ;AACV,cAAM,aAAa,OAAO;AAC1B,cAAM,QAAQ,aAAa,QAAQ,GAAG,SAAS;AAE/C,YAAI,UAAU,GAAG;AACf,gBAAM,EAAE,gCAAgC,GAAG,SAAS;AAAA,QACtD,OAAO;AACL,gBAAM,EAAE,iCAAiC,EAAE,MAAM,CAAC,GAAG,SAAS;AAAA,QAChE;AACA,cAAM,YAAY;AAAA,MACpB;AAAA,IACF,SAAS,KAAU;AACjB,YAAM,IAAI,WAAW,EAAE,6BAA6B,GAAG,OAAO;AAAA,IAChE,UAAE;AACA,kBAAY,IAAI;AAAA,IAClB;AAAA,EACF,GAAG,CAAC,mBAAmB,mBAAmB,aAAa,GAAG,WAAW,CAAC;AAEtE,YAAU,MAAM;AACd,gBAAY;AAAA,EACd,GAAG,CAAC,WAAW,CAAC;AAEhB,WAAS,eAAe,MAA6B;AACnD,QAAI,CAAC,KAAM,QAAO,EAAE,kCAAkC;AACtD,WAAO,IAAI,KAAK,IAAI,EAAE,eAAe;AAAA,EACvC;AAEA,WAAS,eAAe,QAAuB;AAC7C,QAAI,CAAC,OAAQ,QAAO;AAEpB,WACE,oBAAC,eAAY,SAAS,qBAAqB,MAAM,KAAK,WACnD,kBACH;AAAA,EAEJ;AAEA,WAAS,gBAAgB,UAA0B;AACjD,QAAI,aAAa,MAAO,QAAO,EAAE,+BAA+B;AAChE,QAAI,aAAa,yBAA0B,QAAO,EAAE,sCAAsC;AAC1F,WAAO;AAAA,EACT;AAEA,WAAS,uBAAuB,UAA0B;AACxD,QAAI,aAAa,OAAO;AACtB,aAAO,EAAE,2CAA2C;AAAA,IACtD;AACA,QAAI,aAAa,0BAA0B;AACzC,aAAO,EAAE,kDAAkD;AAAA,IAC7D;AACA,WAAO;AAAA,EACT;AAEA,MAAI,WAAW,cAAc;AAC3B,WACE,qBAAC,aAAQ,WAAU,iDACjB;AAAA,2BAAC,YAAO,WAAU,aAChB;AAAA,4BAAC,QAAG,WAAU,yBAAyB,YAAE,wBAAwB,GAAE;AAAA,QACnE,oBAAC,OAAE,WAAU,iCACV,YAAE,8BAA8B,GACnC;AAAA,SACF;AAAA,MACA,qBAAC,SAAI,WAAU,yDACb;AAAA,4BAAC,WAAQ,WAAU,WAAU;AAAA,QAC5B,eAAe,EAAE,yCAAyC,IAAI,EAAE,0BAA0B;AAAA,SAC7F;AAAA,OACF;AAAA,EAEJ;AAEA,SACE,qBAAC,aAAQ,WAAU,iDACjB;AAAA,yBAAC,YAAO,WAAU,aAChB;AAAA,0BAAC,QAAG,WAAU,yBAAyB,YAAE,wBAAwB,GAAE;AAAA,MACnE,oBAAC,OAAE,WAAU,iCACV,YAAE,8BAA8B,GACnC;AAAA,OACF;AAAA,IAEA,qBAAC,SAAI,WAAU,aACZ;AAAA,cAAQ,IAAI,CAAC,WACZ;AAAA,QAAC;AAAA;AAAA,UAEC,WAAU;AAAA,UAEV;AAAA,iCAAC,SAAI,WAAU,0CACb;AAAA,mCAAC,SAAI,WAAU,UACb;AAAA,oCAAC,QAAG,WAAU,uBACX,0BAAgB,OAAO,QAAQ,GAClC;AAAA,gBACA,oBAAC,OAAE,WAAU,wCACV,iCAAuB,OAAO,QAAQ,GACzC;AAAA,iBACF;AAAA,cAEA;AAAA,gBAAC;AAAA;AAAA,kBACC,SAAS,OAAO;AAAA,kBAChB,iBAAiB,MAAM,cAAc,OAAO,IAAI,OAAO,WAAW,OAAO,SAAS;AAAA;AAAA,cACpF;AAAA,eACF;AAAA,YAEC,OAAO,aACN,iCACE;AAAA,mCAAC,SAAI,WAAU,4CACb;AAAA,qCAAC,SAAI,WAAU,6BACb;AAAA,uCAAC,WAAM,WAAU,mDACd;AAAA,sBAAE,4BAA4B;AAAA,oBAAE;AAAA,qBACnC;AAAA,kBACA;AAAA,oBAAC;AAAA;AAAA,sBACC,OAAO,OAAO,YAAY;AAAA,sBAC1B,UAAU,CAAC,SAAS,eAAe,OAAO,IAAI,MAAM,OAAO,SAAS;AAAA;AAAA,kBACtE;AAAA,mBACF;AAAA,gBAEA,qBAAC,SAAI,WAAU,6BACb;AAAA,uCAAC,WAAM,WAAU,mDACd;AAAA,sBAAE,4BAA4B;AAAA,oBAAE;AAAA,qBACnC;AAAA,kBACA,oBAAC,UAAK,WAAU,iCACb,yBAAe,OAAO,UAAU,GACnC;AAAA,kBACC,eAAe,OAAO,cAAc;AAAA,mBACvC;AAAA,gBAEA;AAAA,kBAAC;AAAA;AAAA,oBACC,MAAK;AAAA,oBACL,SAAS,MAAM,SAAS,OAAO,QAAQ;AAAA,oBACvC,UAAU,aAAa,OAAO;AAAA,oBAC9B,MAAK;AAAA,oBACL,WAAU;AAAA,oBAET,uBAAa,OAAO,WACnB,qBAAC,SACC;AAAA,0CAAC,WAAQ,WAAU,UAAS,MAAK,MAAK;AAAA,sBACrC,EAAE,2BAA2B;AAAA,uBAChC,IAEA,EAAE,4BAA4B;AAAA;AAAA,gBAElC;AAAA,iBACF;AAAA,cAEC,OAAO,kBAAkB,QACxB,qBAAC,SAAI,WAAU,sCACZ;AAAA,kBAAE,kCAAkC;AAAA,gBAAE;AAAA,gBAAE,oBAAC,UAAK,WAAU,eAAe,iBAAO,eAAc;AAAA,iBAC/F;AAAA,cAGD,OAAO,mBAAmB,OAAO,mBAAmB,WACnD,oBAAC,SAAM,QAAO,SAAQ,OAAM,WAAU,MAAK,MAAK,WAAU,QACvD,iBAAO,iBACV;AAAA,eAEJ;AAAA;AAAA;AAAA,QAvEG,OAAO;AAAA,MAyEd,CACD;AAAA,MAEA,QAAQ,WAAW,KAClB,qBAAC,SAAI,WAAU,mDACb;AAAA,4BAAC,OAAE,WAAU,iCACV,YAAE,+BAA+B,GACpC;AAAA,QACA;AAAA,UAAC;AAAA;AAAA,YACC,MAAK;AAAA,YACL,SAAS,MAAM,2BAA2B,kBAAkB;AAAA,YAE3D,YAAE,uCAAuC;AAAA;AAAA,QAC5C;AAAA,SACF;AAAA,OAEJ;AAAA,KACF;AAEJ;",
   "names": []
 }

package/dist/modules/currencies/lib/exchangeRateFormConfig.js

@@ -1,4 +1,6 @@
 import { createCrudFormError } from "@open-mercato/ui/backend/utils/serverErrors";
+import { createLogger } from "@open-mercato/shared/lib/logger";
+const logger = createLogger("currencies").child({ component: "exchange-rate-form" });
 async function loadCurrencyOptions(apiCallFn, query) {
   try {
     const params = new URLSearchParams();
@@ -17,7 +19,7 @@ async function loadCurrencyOptions(apiCallFn, query) {
       }));
     }
   } catch (error) {
-    console.error("Failed to load currencies:", error);
+    logger.error("Failed to load currencies", { err: error });
   }
   return [];
 }

package/dist/modules/currencies/lib/exchangeRateFormConfig.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/currencies/lib/exchangeRateFormConfig.ts"],
-  "sourcesContent": ["import type { CrudFormGroup, CrudFieldOption } from '@open-mercato/ui/backend/CrudForm'\nimport type { ApiCallResult } from '@open-mercato/ui/backend/utils/apiCall'\nimport { createCrudFormError } from '@open-mercato/ui/backend/utils/serverErrors'\n\nexport type CurrencyOption = {\n  id: string\n  code: string\n  name: string\n  isActive: boolean\n}\n\ntype ApiCallFn = <T>(input: RequestInfo | URL, init?: RequestInit) => Promise<ApiCallResult<T>>\n\nexport async function loadCurrencyOptions(\n  apiCallFn: ApiCallFn,\n  query?: string,\n): Promise<CrudFieldOption[]> {\n  try {\n    const params = new URLSearchParams()\n    if (query) {\n      params.set('search', query)\n    }\n    params.set('isActive', 'true')\n    params.set('pageSize', '100')\n\n    const call = await apiCallFn<{ items: CurrencyOption[] }>(\n      `/api/currencies/currencies?${params.toString()}`\n    )\n\n    if (call.ok && call.result?.items) {\n      return call.result.items.map((c) => ({\n        value: c.code,\n        label: c.code,\n      }))\n    }\n  } catch (error) {\n    console.error('Failed to load currencies:', error)\n  }\n  return []\n}\n\nexport function exchangeRateGroups(\n  t: (key: string) => string,\n  loadOptions: (query?: string) => Promise<CrudFieldOption[]>,\n): CrudFormGroup[] {\n  return [\n    {\n      id: 'rate-details',\n      column: 1,\n      fields: [\n        {\n          id: 'fromCurrencyCode',\n          type: 'combobox',\n          label: t('exchangeRates.form.field.fromCurrency'),\n          placeholder: t('exchangeRates.form.field.fromCurrencyPlaceholder'),\n          required: true,\n          loadOptions,\n          allowCustomValues: false,\n          description: t('exchangeRates.form.field.fromCurrencyHelp'),\n        },\n        {\n          id: 'toCurrencyCode',\n          type: 'combobox',\n          label: t('exchangeRates.form.field.toCurrency'),\n          placeholder: t('exchangeRates.form.field.toCurrencyPlaceholder'),\n          required: true,\n          loadOptions,\n          allowCustomValues: false,\n          description: t('exchangeRates.form.field.toCurrencyHelp'),\n        },\n        {\n          id: 'rate',\n          type: 'number',\n          label: t('exchangeRates.form.field.rate'),\n          placeholder: '1.00000000',\n          required: true,\n          description: t('exchangeRates.form.field.rateHelp'),\n        },\n        {\n          id: 'date',\n          type: 'datetime-local',\n          label: t('exchangeRates.form.field.date'),\n          required: true,\n          description: t('exchangeRates.form.field.dateHelp'),\n        },\n      ],\n    },\n    {\n      id: 'metadata',\n      column: 2,\n      title: t('exchangeRates.form.group.metadata'),\n      fields: [\n        {\n          id: 'source',\n          type: 'text',\n          label: t('exchangeRates.form.field.source'),\n          placeholder: t('exchangeRates.form.field.sourcePlaceholder'),\n          required: true,\n          description: t('exchangeRates.form.field.sourceHelp'),\n        },\n        {\n          id: 'type',\n          type: 'select',\n          label: t('exchangeRates.form.field.type'),\n          placeholder: t('exchangeRates.form.field.typePlaceholder'),\n          required: false,\n          description: t('exchangeRates.form.field.typeHelp'),\n          options: [\n            { value: 'buy', label: t('exchangeRates.form.field.typeBuy') },\n            { value: 'sell', label: t('exchangeRates.form.field.typeSell') },\n          ],\n        },\n        {\n          id: 'isActive',\n          type: 'checkbox',\n          label: t('exchangeRates.form.field.isActive'),\n        },\n      ],\n    },\n  ]\n}\n\nexport function validateExchangeRateForm(\n  values: Record<string, unknown>,\n  t: (key: string) => string,\n): { fromCode: string; toCode: string; rate: number; date: Date; source: string } {\n  const fromCode = String(values.fromCurrencyCode || '').trim().toUpperCase()\n  const toCode = String(values.toCurrencyCode || '').trim().toUpperCase()\n\n  if (!/^[A-Z]{3}$/.test(fromCode)) {\n    throw createCrudFormError(t('exchangeRates.form.errors.fromCurrencyFormat'), {\n      fromCurrencyCode: t('exchangeRates.form.errors.currencyCodeFormat'),\n    })\n  }\n\n  if (!/^[A-Z]{3}$/.test(toCode)) {\n    throw createCrudFormError(t('exchangeRates.form.errors.toCurrencyFormat'), {\n      toCurrencyCode: t('exchangeRates.form.errors.currencyCodeFormat'),\n    })\n  }\n\n  if (fromCode === toCode) {\n    throw createCrudFormError(t('exchangeRates.form.errors.sameCurrency'), {\n      toCurrencyCode: t('exchangeRates.form.errors.sameCurrency'),\n    })\n  }\n\n  const rate = parseFloat(String(values.rate || '0'))\n  if (isNaN(rate) || rate <= 0) {\n    throw createCrudFormError(t('exchangeRates.form.errors.invalidRate'), {\n      rate: t('exchangeRates.form.errors.invalidRate'),\n    })\n  }\n\n  const date = values.date ? new Date(String(values.date)) : null\n\n  if (!date || isNaN(date.getTime())) {\n    throw createCrudFormError(t('exchangeRates.form.errors.invalidDate'), {\n      date: t('exchangeRates.form.errors.invalidDate'),\n    })\n  }\n\n  const source = String(values.source || '').trim()\n  if (!source || source.length < 2) {\n    throw createCrudFormError(t('exchangeRates.form.errors.sourceTooShort'), {\n      source: t('exchangeRates.form.errors.sourceTooShort'),\n    })\n  }\n  if (source.length > 50) {\n    throw createCrudFormError(t('exchangeRates.form.errors.sourceTooLong'), {\n      source: t('exchangeRates.form.errors.sourceTooLong'),\n    })\n  }\n  if (!/^[a-zA-Z0-9\\s\\-_]+$/.test(source)) {\n    throw createCrudFormError(t('exchangeRates.form.errors.sourceInvalidFormat'), {\n      source: t('exchangeRates.form.errors.sourceInvalidFormat'),\n    })\n  }\n\n  return { fromCode, toCode, rate, date, source }\n}\n\nexport function buildExchangeRatePayload(values: Record<string, unknown>, validated: {\n  fromCode: string\n  toCode: string\n  rate: number\n  date: Date\n  source: string\n}) {\n  return {\n    fromCurrencyCode: validated.fromCode,\n    toCurrencyCode: validated.toCode,\n    rate: validated.rate.toFixed(8),\n    date: validated.date.toISOString(),\n    source: validated.source,\n    type: values.type && values.type !== '' ? values.type : null,\n    isActive: values.isActive !== false,\n  }\n}\n"],
-  "mappings": "AAEA,SAAS,2BAA2B;AAWpC,eAAsB,oBACpB,WACA,OAC4B;AAC5B,MAAI;AACF,UAAM,SAAS,IAAI,gBAAgB;AACnC,QAAI,OAAO;AACT,aAAO,IAAI,UAAU,KAAK;AAAA,IAC5B;AACA,WAAO,IAAI,YAAY,MAAM;AAC7B,WAAO,IAAI,YAAY,KAAK;AAE5B,UAAM,OAAO,MAAM;AAAA,MACjB,8BAA8B,OAAO,SAAS,CAAC;AAAA,IACjD;AAEA,QAAI,KAAK,MAAM,KAAK,QAAQ,OAAO;AACjC,aAAO,KAAK,OAAO,MAAM,IAAI,CAAC,OAAO;AAAA,QACnC,OAAO,EAAE;AAAA,QACT,OAAO,EAAE;AAAA,MACX,EAAE;AAAA,IACJ;AAAA,EACF,SAAS,OAAO;AACd,YAAQ,MAAM,8BAA8B,KAAK;AAAA,EACnD;AACA,SAAO,CAAC;AACV;AAEO,SAAS,mBACd,GACA,aACiB;AACjB,SAAO;AAAA,IACL;AAAA,MACE,IAAI;AAAA,MACJ,QAAQ;AAAA,MACR,QAAQ;AAAA,QACN;AAAA,UACE,IAAI;AAAA,UACJ,MAAM;AAAA,UACN,OAAO,EAAE,uCAAuC;AAAA,UAChD,aAAa,EAAE,kDAAkD;AAAA,UACjE,UAAU;AAAA,UACV;AAAA,UACA,mBAAmB;AAAA,UACnB,aAAa,EAAE,2CAA2C;AAAA,QAC5D;AAAA,QACA;AAAA,UACE,IAAI;AAAA,UACJ,MAAM;AAAA,UACN,OAAO,EAAE,qCAAqC;AAAA,UAC9C,aAAa,EAAE,gDAAgD;AAAA,UAC/D,UAAU;AAAA,UACV;AAAA,UACA,mBAAmB;AAAA,UACnB,aAAa,EAAE,yCAAyC;AAAA,QAC1D;AAAA,QACA;AAAA,UACE,IAAI;AAAA,UACJ,MAAM;AAAA,UACN,OAAO,EAAE,+BAA+B;AAAA,UACxC,aAAa;AAAA,UACb,UAAU;AAAA,UACV,aAAa,EAAE,mCAAmC;AAAA,QACpD;AAAA,QACA;AAAA,UACE,IAAI;AAAA,UACJ,MAAM;AAAA,UACN,OAAO,EAAE,+BAA+B;AAAA,UACxC,UAAU;AAAA,UACV,aAAa,EAAE,mCAAmC;AAAA,QACpD;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAI;AAAA,MACJ,QAAQ;AAAA,MACR,OAAO,EAAE,mCAAmC;AAAA,MAC5C,QAAQ;AAAA,QACN;AAAA,UACE,IAAI;AAAA,UACJ,MAAM;AAAA,UACN,OAAO,EAAE,iCAAiC;AAAA,UAC1C,aAAa,EAAE,4CAA4C;AAAA,UAC3D,UAAU;AAAA,UACV,aAAa,EAAE,qCAAqC;AAAA,QACtD;AAAA,QACA;AAAA,UACE,IAAI;AAAA,UACJ,MAAM;AAAA,UACN,OAAO,EAAE,+BAA+B;AAAA,UACxC,aAAa,EAAE,0CAA0C;AAAA,UACzD,UAAU;AAAA,UACV,aAAa,EAAE,mCAAmC;AAAA,UAClD,SAAS;AAAA,YACP,EAAE,OAAO,OAAO,OAAO,EAAE,kCAAkC,EAAE;AAAA,YAC7D,EAAE,OAAO,QAAQ,OAAO,EAAE,mCAAmC,EAAE;AAAA,UACjE;AAAA,QACF;AAAA,QACA;AAAA,UACE,IAAI;AAAA,UACJ,MAAM;AAAA,UACN,OAAO,EAAE,mCAAmC;AAAA,QAC9C;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;AAEO,SAAS,yBACd,QACA,GACgF;AAChF,QAAM,WAAW,OAAO,OAAO,oBAAoB,EAAE,EAAE,KAAK,EAAE,YAAY;AAC1E,QAAM,SAAS,OAAO,OAAO,kBAAkB,EAAE,EAAE,KAAK,EAAE,YAAY;AAEtE,MAAI,CAAC,aAAa,KAAK,QAAQ,GAAG;AAChC,UAAM,oBAAoB,EAAE,8CAA8C,GAAG;AAAA,MAC3E,kBAAkB,EAAE,8CAA8C;AAAA,IACpE,CAAC;AAAA,EACH;AAEA,MAAI,CAAC,aAAa,KAAK,MAAM,GAAG;AAC9B,UAAM,oBAAoB,EAAE,4CAA4C,GAAG;AAAA,MACzE,gBAAgB,EAAE,8CAA8C;AAAA,IAClE,CAAC;AAAA,EACH;AAEA,MAAI,aAAa,QAAQ;AACvB,UAAM,oBAAoB,EAAE,wCAAwC,GAAG;AAAA,MACrE,gBAAgB,EAAE,wCAAwC;AAAA,IAC5D,CAAC;AAAA,EACH;AAEA,QAAM,OAAO,WAAW,OAAO,OAAO,QAAQ,GAAG,CAAC;AAClD,MAAI,MAAM,IAAI,KAAK,QAAQ,GAAG;AAC5B,UAAM,oBAAoB,EAAE,uCAAuC,GAAG;AAAA,MACpE,MAAM,EAAE,uCAAuC;AAAA,IACjD,CAAC;AAAA,EACH;AAEA,QAAM,OAAO,OAAO,OAAO,IAAI,KAAK,OAAO,OAAO,IAAI,CAAC,IAAI;AAE3D,MAAI,CAAC,QAAQ,MAAM,KAAK,QAAQ,CAAC,GAAG;AAClC,UAAM,oBAAoB,EAAE,uCAAuC,GAAG;AAAA,MACpE,MAAM,EAAE,uCAAuC;AAAA,IACjD,CAAC;AAAA,EACH;AAEA,QAAM,SAAS,OAAO,OAAO,UAAU,EAAE,EAAE,KAAK;AAChD,MAAI,CAAC,UAAU,OAAO,SAAS,GAAG;AAChC,UAAM,oBAAoB,EAAE,0CAA0C,GAAG;AAAA,MACvE,QAAQ,EAAE,0CAA0C;AAAA,IACtD,CAAC;AAAA,EACH;AACA,MAAI,OAAO,SAAS,IAAI;AACtB,UAAM,oBAAoB,EAAE,yCAAyC,GAAG;AAAA,MACtE,QAAQ,EAAE,yCAAyC;AAAA,IACrD,CAAC;AAAA,EACH;AACA,MAAI,CAAC,sBAAsB,KAAK,MAAM,GAAG;AACvC,UAAM,oBAAoB,EAAE,+CAA+C,GAAG;AAAA,MAC5E,QAAQ,EAAE,+CAA+C;AAAA,IAC3D,CAAC;AAAA,EACH;AAEA,SAAO,EAAE,UAAU,QAAQ,MAAM,MAAM,OAAO;AAChD;AAEO,SAAS,yBAAyB,QAAiC,WAMvE;AACD,SAAO;AAAA,IACL,kBAAkB,UAAU;AAAA,IAC5B,gBAAgB,UAAU;AAAA,IAC1B,MAAM,UAAU,KAAK,QAAQ,CAAC;AAAA,IAC9B,MAAM,UAAU,KAAK,YAAY;AAAA,IACjC,QAAQ,UAAU;AAAA,IAClB,MAAM,OAAO,QAAQ,OAAO,SAAS,KAAK,OAAO,OAAO;AAAA,IACxD,UAAU,OAAO,aAAa;AAAA,EAChC;AACF;",
+  "sourcesContent": ["import type { CrudFormGroup, CrudFieldOption } from '@open-mercato/ui/backend/CrudForm'\nimport type { ApiCallResult } from '@open-mercato/ui/backend/utils/apiCall'\nimport { createCrudFormError } from '@open-mercato/ui/backend/utils/serverErrors'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('currencies').child({ component: 'exchange-rate-form' })\n\nexport type CurrencyOption = {\n  id: string\n  code: string\n  name: string\n  isActive: boolean\n}\n\ntype ApiCallFn = <T>(input: RequestInfo | URL, init?: RequestInit) => Promise<ApiCallResult<T>>\n\nexport async function loadCurrencyOptions(\n  apiCallFn: ApiCallFn,\n  query?: string,\n): Promise<CrudFieldOption[]> {\n  try {\n    const params = new URLSearchParams()\n    if (query) {\n      params.set('search', query)\n    }\n    params.set('isActive', 'true')\n    params.set('pageSize', '100')\n\n    const call = await apiCallFn<{ items: CurrencyOption[] }>(\n      `/api/currencies/currencies?${params.toString()}`\n    )\n\n    if (call.ok && call.result?.items) {\n      return call.result.items.map((c) => ({\n        value: c.code,\n        label: c.code,\n      }))\n    }\n  } catch (error) {\n    logger.error('Failed to load currencies', { err: error })\n  }\n  return []\n}\n\nexport function exchangeRateGroups(\n  t: (key: string) => string,\n  loadOptions: (query?: string) => Promise<CrudFieldOption[]>,\n): CrudFormGroup[] {\n  return [\n    {\n      id: 'rate-details',\n      column: 1,\n      fields: [\n        {\n          id: 'fromCurrencyCode',\n          type: 'combobox',\n          label: t('exchangeRates.form.field.fromCurrency'),\n          placeholder: t('exchangeRates.form.field.fromCurrencyPlaceholder'),\n          required: true,\n          loadOptions,\n          allowCustomValues: false,\n          description: t('exchangeRates.form.field.fromCurrencyHelp'),\n        },\n        {\n          id: 'toCurrencyCode',\n          type: 'combobox',\n          label: t('exchangeRates.form.field.toCurrency'),\n          placeholder: t('exchangeRates.form.field.toCurrencyPlaceholder'),\n          required: true,\n          loadOptions,\n          allowCustomValues: false,\n          description: t('exchangeRates.form.field.toCurrencyHelp'),\n        },\n        {\n          id: 'rate',\n          type: 'number',\n          label: t('exchangeRates.form.field.rate'),\n          placeholder: '1.00000000',\n          required: true,\n          description: t('exchangeRates.form.field.rateHelp'),\n        },\n        {\n          id: 'date',\n          type: 'datetime-local',\n          label: t('exchangeRates.form.field.date'),\n          required: true,\n          description: t('exchangeRates.form.field.dateHelp'),\n        },\n      ],\n    },\n    {\n      id: 'metadata',\n      column: 2,\n      title: t('exchangeRates.form.group.metadata'),\n      fields: [\n        {\n          id: 'source',\n          type: 'text',\n          label: t('exchangeRates.form.field.source'),\n          placeholder: t('exchangeRates.form.field.sourcePlaceholder'),\n          required: true,\n          description: t('exchangeRates.form.field.sourceHelp'),\n        },\n        {\n          id: 'type',\n          type: 'select',\n          label: t('exchangeRates.form.field.type'),\n          placeholder: t('exchangeRates.form.field.typePlaceholder'),\n          required: false,\n          description: t('exchangeRates.form.field.typeHelp'),\n          options: [\n            { value: 'buy', label: t('exchangeRates.form.field.typeBuy') },\n            { value: 'sell', label: t('exchangeRates.form.field.typeSell') },\n          ],\n        },\n        {\n          id: 'isActive',\n          type: 'checkbox',\n          label: t('exchangeRates.form.field.isActive'),\n        },\n      ],\n    },\n  ]\n}\n\nexport function validateExchangeRateForm(\n  values: Record<string, unknown>,\n  t: (key: string) => string,\n): { fromCode: string; toCode: string; rate: number; date: Date; source: string } {\n  const fromCode = String(values.fromCurrencyCode || '').trim().toUpperCase()\n  const toCode = String(values.toCurrencyCode || '').trim().toUpperCase()\n\n  if (!/^[A-Z]{3}$/.test(fromCode)) {\n    throw createCrudFormError(t('exchangeRates.form.errors.fromCurrencyFormat'), {\n      fromCurrencyCode: t('exchangeRates.form.errors.currencyCodeFormat'),\n    })\n  }\n\n  if (!/^[A-Z]{3}$/.test(toCode)) {\n    throw createCrudFormError(t('exchangeRates.form.errors.toCurrencyFormat'), {\n      toCurrencyCode: t('exchangeRates.form.errors.currencyCodeFormat'),\n    })\n  }\n\n  if (fromCode === toCode) {\n    throw createCrudFormError(t('exchangeRates.form.errors.sameCurrency'), {\n      toCurrencyCode: t('exchangeRates.form.errors.sameCurrency'),\n    })\n  }\n\n  const rate = parseFloat(String(values.rate || '0'))\n  if (isNaN(rate) || rate <= 0) {\n    throw createCrudFormError(t('exchangeRates.form.errors.invalidRate'), {\n      rate: t('exchangeRates.form.errors.invalidRate'),\n    })\n  }\n\n  const date = values.date ? new Date(String(values.date)) : null\n\n  if (!date || isNaN(date.getTime())) {\n    throw createCrudFormError(t('exchangeRates.form.errors.invalidDate'), {\n      date: t('exchangeRates.form.errors.invalidDate'),\n    })\n  }\n\n  const source = String(values.source || '').trim()\n  if (!source || source.length < 2) {\n    throw createCrudFormError(t('exchangeRates.form.errors.sourceTooShort'), {\n      source: t('exchangeRates.form.errors.sourceTooShort'),\n    })\n  }\n  if (source.length > 50) {\n    throw createCrudFormError(t('exchangeRates.form.errors.sourceTooLong'), {\n      source: t('exchangeRates.form.errors.sourceTooLong'),\n    })\n  }\n  if (!/^[a-zA-Z0-9\\s\\-_]+$/.test(source)) {\n    throw createCrudFormError(t('exchangeRates.form.errors.sourceInvalidFormat'), {\n      source: t('exchangeRates.form.errors.sourceInvalidFormat'),\n    })\n  }\n\n  return { fromCode, toCode, rate, date, source }\n}\n\nexport function buildExchangeRatePayload(values: Record<string, unknown>, validated: {\n  fromCode: string\n  toCode: string\n  rate: number\n  date: Date\n  source: string\n}) {\n  return {\n    fromCurrencyCode: validated.fromCode,\n    toCurrencyCode: validated.toCode,\n    rate: validated.rate.toFixed(8),\n    date: validated.date.toISOString(),\n    source: validated.source,\n    type: values.type && values.type !== '' ? values.type : null,\n    isActive: values.isActive !== false,\n  }\n}\n"],
+  "mappings": "AAEA,SAAS,2BAA2B;AACpC,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,YAAY,EAAE,MAAM,EAAE,WAAW,qBAAqB,CAAC;AAWnF,eAAsB,oBACpB,WACA,OAC4B;AAC5B,MAAI;AACF,UAAM,SAAS,IAAI,gBAAgB;AACnC,QAAI,OAAO;AACT,aAAO,IAAI,UAAU,KAAK;AAAA,IAC5B;AACA,WAAO,IAAI,YAAY,MAAM;AAC7B,WAAO,IAAI,YAAY,KAAK;AAE5B,UAAM,OAAO,MAAM;AAAA,MACjB,8BAA8B,OAAO,SAAS,CAAC;AAAA,IACjD;AAEA,QAAI,KAAK,MAAM,KAAK,QAAQ,OAAO;AACjC,aAAO,KAAK,OAAO,MAAM,IAAI,CAAC,OAAO;AAAA,QACnC,OAAO,EAAE;AAAA,QACT,OAAO,EAAE;AAAA,MACX,EAAE;AAAA,IACJ;AAAA,EACF,SAAS,OAAO;AACd,WAAO,MAAM,6BAA6B,EAAE,KAAK,MAAM,CAAC;AAAA,EAC1D;AACA,SAAO,CAAC;AACV;AAEO,SAAS,mBACd,GACA,aACiB;AACjB,SAAO;AAAA,IACL;AAAA,MACE,IAAI;AAAA,MACJ,QAAQ;AAAA,MACR,QAAQ;AAAA,QACN;AAAA,UACE,IAAI;AAAA,UACJ,MAAM;AAAA,UACN,OAAO,EAAE,uCAAuC;AAAA,UAChD,aAAa,EAAE,kDAAkD;AAAA,UACjE,UAAU;AAAA,UACV;AAAA,UACA,mBAAmB;AAAA,UACnB,aAAa,EAAE,2CAA2C;AAAA,QAC5D;AAAA,QACA;AAAA,UACE,IAAI;AAAA,UACJ,MAAM;AAAA,UACN,OAAO,EAAE,qCAAqC;AAAA,UAC9C,aAAa,EAAE,gDAAgD;AAAA,UAC/D,UAAU;AAAA,UACV;AAAA,UACA,mBAAmB;AAAA,UACnB,aAAa,EAAE,yCAAyC;AAAA,QAC1D;AAAA,QACA;AAAA,UACE,IAAI;AAAA,UACJ,MAAM;AAAA,UACN,OAAO,EAAE,+BAA+B;AAAA,UACxC,aAAa;AAAA,UACb,UAAU;AAAA,UACV,aAAa,EAAE,mCAAmC;AAAA,QACpD;AAAA,QACA;AAAA,UACE,IAAI;AAAA,UACJ,MAAM;AAAA,UACN,OAAO,EAAE,+BAA+B;AAAA,UACxC,UAAU;AAAA,UACV,aAAa,EAAE,mCAAmC;AAAA,QACpD;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAI;AAAA,MACJ,QAAQ;AAAA,MACR,OAAO,EAAE,mCAAmC;AAAA,MAC5C,QAAQ;AAAA,QACN;AAAA,UACE,IAAI;AAAA,UACJ,MAAM;AAAA,UACN,OAAO,EAAE,iCAAiC;AAAA,UAC1C,aAAa,EAAE,4CAA4C;AAAA,UAC3D,UAAU;AAAA,UACV,aAAa,EAAE,qCAAqC;AAAA,QACtD;AAAA,QACA;AAAA,UACE,IAAI;AAAA,UACJ,MAAM;AAAA,UACN,OAAO,EAAE,+BAA+B;AAAA,UACxC,aAAa,EAAE,0CAA0C;AAAA,UACzD,UAAU;AAAA,UACV,aAAa,EAAE,mCAAmC;AAAA,UAClD,SAAS;AAAA,YACP,EAAE,OAAO,OAAO,OAAO,EAAE,kCAAkC,EAAE;AAAA,YAC7D,EAAE,OAAO,QAAQ,OAAO,EAAE,mCAAmC,EAAE;AAAA,UACjE;AAAA,QACF;AAAA,QACA;AAAA,UACE,IAAI;AAAA,UACJ,MAAM;AAAA,UACN,OAAO,EAAE,mCAAmC;AAAA,QAC9C;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;AAEO,SAAS,yBACd,QACA,GACgF;AAChF,QAAM,WAAW,OAAO,OAAO,oBAAoB,EAAE,EAAE,KAAK,EAAE,YAAY;AAC1E,QAAM,SAAS,OAAO,OAAO,kBAAkB,EAAE,EAAE,KAAK,EAAE,YAAY;AAEtE,MAAI,CAAC,aAAa,KAAK,QAAQ,GAAG;AAChC,UAAM,oBAAoB,EAAE,8CAA8C,GAAG;AAAA,MAC3E,kBAAkB,EAAE,8CAA8C;AAAA,IACpE,CAAC;AAAA,EACH;AAEA,MAAI,CAAC,aAAa,KAAK,MAAM,GAAG;AAC9B,UAAM,oBAAoB,EAAE,4CAA4C,GAAG;AAAA,MACzE,gBAAgB,EAAE,8CAA8C;AAAA,IAClE,CAAC;AAAA,EACH;AAEA,MAAI,aAAa,QAAQ;AACvB,UAAM,oBAAoB,EAAE,wCAAwC,GAAG;AAAA,MACrE,gBAAgB,EAAE,wCAAwC;AAAA,IAC5D,CAAC;AAAA,EACH;AAEA,QAAM,OAAO,WAAW,OAAO,OAAO,QAAQ,GAAG,CAAC;AAClD,MAAI,MAAM,IAAI,KAAK,QAAQ,GAAG;AAC5B,UAAM,oBAAoB,EAAE,uCAAuC,GAAG;AAAA,MACpE,MAAM,EAAE,uCAAuC;AAAA,IACjD,CAAC;AAAA,EACH;AAEA,QAAM,OAAO,OAAO,OAAO,IAAI,KAAK,OAAO,OAAO,IAAI,CAAC,IAAI;AAE3D,MAAI,CAAC,QAAQ,MAAM,KAAK,QAAQ,CAAC,GAAG;AAClC,UAAM,oBAAoB,EAAE,uCAAuC,GAAG;AAAA,MACpE,MAAM,EAAE,uCAAuC;AAAA,IACjD,CAAC;AAAA,EACH;AAEA,QAAM,SAAS,OAAO,OAAO,UAAU,EAAE,EAAE,KAAK;AAChD,MAAI,CAAC,UAAU,OAAO,SAAS,GAAG;AAChC,UAAM,oBAAoB,EAAE,0CAA0C,GAAG;AAAA,MACvE,QAAQ,EAAE,0CAA0C;AAAA,IACtD,CAAC;AAAA,EACH;AACA,MAAI,OAAO,SAAS,IAAI;AACtB,UAAM,oBAAoB,EAAE,yCAAyC,GAAG;AAAA,MACtE,QAAQ,EAAE,yCAAyC;AAAA,IACrD,CAAC;AAAA,EACH;AACA,MAAI,CAAC,sBAAsB,KAAK,MAAM,GAAG;AACvC,UAAM,oBAAoB,EAAE,+CAA+C,GAAG;AAAA,MAC5E,QAAQ,EAAE,+CAA+C;AAAA,IAC3D,CAAC;AAAA,EACH;AAEA,SAAO,EAAE,UAAU,QAAQ,MAAM,MAAM,OAAO;AAChD;AAEO,SAAS,yBAAyB,QAAiC,WAMvE;AACD,SAAO;AAAA,IACL,kBAAkB,UAAU;AAAA,IAC5B,gBAAgB,UAAU;AAAA,IAC1B,MAAM,UAAU,KAAK,QAAQ,CAAC;AAAA,IAC9B,MAAM,UAAU,KAAK,YAAY;AAAA,IACjC,QAAQ,UAAU;AAAA,IAClB,MAAM,OAAO,QAAQ,OAAO,SAAS,KAAK,OAAO,OAAO;AAAA,IACxD,UAAU,OAAO,aAAa;AAAA,EAChC;AACF;",
   "names": []
 }

package/dist/modules/currencies/services/providers/nbp.js

@@ -1,5 +1,7 @@
 import { fromZonedTime } from "date-fns-tz";
 import { fetchWithTimeout, resolveTimeoutMs } from "@open-mercato/shared/lib/http/fetchWithTimeout";
+import { createLogger } from "@open-mercato/shared/lib/logger";
+const logger = createLogger("currencies").child({ component: "nbp" });
 const DEFAULT_RATE_FETCH_TIMEOUT_MS = 15e3;
 function resolveRateFetchTimeoutMs() {
   const raw = process.env.CURRENCY_RATE_FETCH_TIMEOUT_MS;
@@ -18,7 +20,7 @@ class NBPProvider {
   }
   async fetchRates(date, scope, availableCurrencies) {
     if (!availableCurrencies.has(this.providerBaseCurrency)) {
-      console.debug("[NBP] Skipping: PLN not found in available currencies");
+      logger.debug("Skipping: PLN not found in available currencies");
       return [];
     }
     const dateStr = this.formatDate(date);
@@ -26,7 +28,7 @@ class NBPProvider {
     try {
       const response = await fetchWithTimeout(url, { timeoutMs: resolveRateFetchTimeoutMs() });
       if (response.status === 404) {
-        console.log(`[NBP] No data available for ${dateStr}`);
+        logger.debug("No data available", { date: dateStr });
         return [];
       }
       if (!response.ok) {
@@ -62,10 +64,10 @@ class NBPProvider {
           // Bank buys foreign currency (from their perspective)
         });
       }
-      console.log(`[NBP] Fetched ${results.length} rates for ${dateStr}`);
+      logger.info("Fetched rates", { count: results.length, date: dateStr });
       return results;
     } catch (err) {
-      console.error(`[NBP] Fetch error for ${dateStr}:`, err.message);
+      logger.error("Fetch error", { date: dateStr, err });
       throw new Error(`Failed to fetch NBP rates: ${err.message}`);
     }
   }

package/dist/modules/currencies/services/providers/nbp.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../src/modules/currencies/services/providers/nbp.ts"],
-  "sourcesContent": ["import { RateProvider, RateProviderResult } from './base'\nimport { fromZonedTime } from 'date-fns-tz'\nimport { fetchWithTimeout, resolveTimeoutMs } from '@open-mercato/shared/lib/http/fetchWithTimeout'\n\nconst DEFAULT_RATE_FETCH_TIMEOUT_MS = 15_000\n\nfunction resolveRateFetchTimeoutMs(): number {\n  const raw = process.env.CURRENCY_RATE_FETCH_TIMEOUT_MS\n  const parsed = raw ? Number.parseInt(raw, 10) : undefined\n  return resolveTimeoutMs(parsed, DEFAULT_RATE_FETCH_TIMEOUT_MS)\n}\n\ninterface NBPTableCResponse {\n  table: string\n  no: string\n  tradingDate: string\n  effectiveDate: string\n  rates: Array<{\n    currency: string\n    code: string\n    bid: number\n    ask: number\n  }>\n}\n\nexport class NBPProvider implements RateProvider {\n  readonly name = 'NBP (National Bank of Poland)'\n  readonly source = 'NBP'\n  readonly providerBaseCurrency = 'PLN'\n\n  private readonly baseUrl = 'https://api.nbp.pl/api'\n\n  isAvailable(): boolean {\n    return true // Public API, always available\n  }\n\n  async fetchRates(\n    date: Date,\n    scope: { tenantId: string; organizationId: string },\n    availableCurrencies: Set<string>\n  ): Promise<RateProviderResult[]> {\n    // Check if PLN is available (required as base currency for NBP)\n    if (!availableCurrencies.has(this.providerBaseCurrency)) {\n      console.debug('[NBP] Skipping: PLN not found in available currencies')\n      return []\n    }\n\n    const dateStr = this.formatDate(date)\n    const url = `${this.baseUrl}/exchangerates/tables/c/${dateStr}/?format=json`\n\n    try {\n      const response = await fetchWithTimeout(url, { timeoutMs: resolveRateFetchTimeoutMs() })\n\n      if (response.status === 404) {\n        // No data for this date (weekend/holiday)\n        console.log(`[NBP] No data available for ${dateStr}`)\n        return []\n      }\n\n      if (!response.ok) {\n        throw new Error(`NBP API error: ${response.status} ${response.statusText}`)\n      }\n\n      const data: NBPTableCResponse[] = await response.json()\n\n      if (!data || data.length === 0) {\n        return []\n      }\n\n      const table = data[0]\n      const results: RateProviderResult[] = []\n      \n      // Parse as midnight Europe/Warsaw, then convert to UTC for DB storage\n      const effectiveDate = fromZonedTime(\n        `${table.effectiveDate} 00:00:00`,\n        'Europe/Warsaw'\n      )\n\n      for (const rate of table.rates) {\n        // NBP rates are from bank's perspective:\n        // - ASK (sprzeda\u017C): bank sells XXX for PLN \u2192 1 XXX = ask PLN\n        // - BID (kupno): bank buys XXX for PLN \u2192 1 XXX = bid PLN\n        \n        // Rate 1: PLN \u2192 XXX (inverse of ASK) - this is when bank SELLS foreign currency\n        // If ask = 4.5 (1 EUR costs 4.5 PLN), then 1 PLN = 1/4.5 EUR\n        results.push({\n          fromCurrencyCode: this.providerBaseCurrency,\n          toCurrencyCode: rate.code,\n          rate: (1 / rate.ask).toString(),\n          source: this.source,\n          date: effectiveDate,\n          type: 'sell', // Bank sells foreign currency (from their perspective)\n        })\n\n        // Rate 2: XXX \u2192 PLN (using BID) - this is when bank BUYS foreign currency\n        // If bid = 4.3 (1 EUR gives 4.3 PLN), then 1 EUR = 4.3 PLN\n        results.push({\n          fromCurrencyCode: rate.code,\n          toCurrencyCode: this.providerBaseCurrency,\n          rate: rate.bid.toString(),\n          source: this.source,\n          date: effectiveDate,\n          type: 'buy', // Bank buys foreign currency (from their perspective)\n        })\n      }\n\n      console.log(`[NBP] Fetched ${results.length} rates for ${dateStr}`)\n      return results\n    } catch (err: any) {\n      console.error(`[NBP] Fetch error for ${dateStr}:`, err.message)\n      throw new Error(`Failed to fetch NBP rates: ${err.message}`)\n    }\n  }\n\n  private formatDate(date: Date): string {\n    return date.toISOString().split('T')[0] // YYYY-MM-DD\n  }\n}\n"],
-  "mappings": "AACA,SAAS,qBAAqB;AAC9B,SAAS,kBAAkB,wBAAwB;AAEnD,MAAM,gCAAgC;AAEtC,SAAS,4BAAoC;AAC3C,QAAM,MAAM,QAAQ,IAAI;AACxB,QAAM,SAAS,MAAM,OAAO,SAAS,KAAK,EAAE,IAAI;AAChD,SAAO,iBAAiB,QAAQ,6BAA6B;AAC/D;AAeO,MAAM,YAAoC;AAAA,EAA1C;AACL,SAAS,OAAO;AAChB,SAAS,SAAS;AAClB,SAAS,uBAAuB;AAEhC,SAAiB,UAAU;AAAA;AAAA,EAE3B,cAAuB;AACrB,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,WACJ,MACA,OACA,qBAC+B;AAE/B,QAAI,CAAC,oBAAoB,IAAI,KAAK,oBAAoB,GAAG;AACvD,cAAQ,MAAM,uDAAuD;AACrE,aAAO,CAAC;AAAA,IACV;AAEA,UAAM,UAAU,KAAK,WAAW,IAAI;AACpC,UAAM,MAAM,GAAG,KAAK,OAAO,2BAA2B,OAAO;AAE7D,QAAI;AACF,YAAM,WAAW,MAAM,iBAAiB,KAAK,EAAE,WAAW,0BAA0B,EAAE,CAAC;AAEvF,UAAI,SAAS,WAAW,KAAK;AAE3B,gBAAQ,IAAI,+BAA+B,OAAO,EAAE;AACpD,eAAO,CAAC;AAAA,MACV;AAEA,UAAI,CAAC,SAAS,IAAI;AAChB,cAAM,IAAI,MAAM,kBAAkB,SAAS,MAAM,IAAI,SAAS,UAAU,EAAE;AAAA,MAC5E;AAEA,YAAM,OAA4B,MAAM,SAAS,KAAK;AAEtD,UAAI,CAAC,QAAQ,KAAK,WAAW,GAAG;AAC9B,eAAO,CAAC;AAAA,MACV;AAEA,YAAM,QAAQ,KAAK,CAAC;AACpB,YAAM,UAAgC,CAAC;AAGvC,YAAM,gBAAgB;AAAA,QACpB,GAAG,MAAM,aAAa;AAAA,QACtB;AAAA,MACF;AAEA,iBAAW,QAAQ,MAAM,OAAO;AAO9B,gBAAQ,KAAK;AAAA,UACX,kBAAkB,KAAK;AAAA,UACvB,gBAAgB,KAAK;AAAA,UACrB,OAAO,IAAI,KAAK,KAAK,SAAS;AAAA,UAC9B,QAAQ,KAAK;AAAA,UACb,MAAM;AAAA,UACN,MAAM;AAAA;AAAA,QACR,CAAC;AAID,gBAAQ,KAAK;AAAA,UACX,kBAAkB,KAAK;AAAA,UACvB,gBAAgB,KAAK;AAAA,UACrB,MAAM,KAAK,IAAI,SAAS;AAAA,UACxB,QAAQ,KAAK;AAAA,UACb,MAAM;AAAA,UACN,MAAM;AAAA;AAAA,QACR,CAAC;AAAA,MACH;AAEA,cAAQ,IAAI,iBAAiB,QAAQ,MAAM,cAAc,OAAO,EAAE;AAClE,aAAO;AAAA,IACT,SAAS,KAAU;AACjB,cAAQ,MAAM,yBAAyB,OAAO,KAAK,IAAI,OAAO;AAC9D,YAAM,IAAI,MAAM,8BAA8B,IAAI,OAAO,EAAE;AAAA,IAC7D;AAAA,EACF;AAAA,EAEQ,WAAW,MAAoB;AACrC,WAAO,KAAK,YAAY,EAAE,MAAM,GAAG,EAAE,CAAC;AAAA,EACxC;AACF;",
+  "sourcesContent": ["import { RateProvider, RateProviderResult } from './base'\nimport { fromZonedTime } from 'date-fns-tz'\nimport { fetchWithTimeout, resolveTimeoutMs } from '@open-mercato/shared/lib/http/fetchWithTimeout'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('currencies').child({ component: 'nbp' })\n\nconst DEFAULT_RATE_FETCH_TIMEOUT_MS = 15_000\n\nfunction resolveRateFetchTimeoutMs(): number {\n  const raw = process.env.CURRENCY_RATE_FETCH_TIMEOUT_MS\n  const parsed = raw ? Number.parseInt(raw, 10) : undefined\n  return resolveTimeoutMs(parsed, DEFAULT_RATE_FETCH_TIMEOUT_MS)\n}\n\ninterface NBPTableCResponse {\n  table: string\n  no: string\n  tradingDate: string\n  effectiveDate: string\n  rates: Array<{\n    currency: string\n    code: string\n    bid: number\n    ask: number\n  }>\n}\n\nexport class NBPProvider implements RateProvider {\n  readonly name = 'NBP (National Bank of Poland)'\n  readonly source = 'NBP'\n  readonly providerBaseCurrency = 'PLN'\n\n  private readonly baseUrl = 'https://api.nbp.pl/api'\n\n  isAvailable(): boolean {\n    return true // Public API, always available\n  }\n\n  async fetchRates(\n    date: Date,\n    scope: { tenantId: string; organizationId: string },\n    availableCurrencies: Set<string>\n  ): Promise<RateProviderResult[]> {\n    // Check if PLN is available (required as base currency for NBP)\n    if (!availableCurrencies.has(this.providerBaseCurrency)) {\n      logger.debug('Skipping: PLN not found in available currencies')\n      return []\n    }\n\n    const dateStr = this.formatDate(date)\n    const url = `${this.baseUrl}/exchangerates/tables/c/${dateStr}/?format=json`\n\n    try {\n      const response = await fetchWithTimeout(url, { timeoutMs: resolveRateFetchTimeoutMs() })\n\n      if (response.status === 404) {\n        // No data for this date (weekend/holiday)\n        logger.debug('No data available', { date: dateStr })\n        return []\n      }\n\n      if (!response.ok) {\n        throw new Error(`NBP API error: ${response.status} ${response.statusText}`)\n      }\n\n      const data: NBPTableCResponse[] = await response.json()\n\n      if (!data || data.length === 0) {\n        return []\n      }\n\n      const table = data[0]\n      const results: RateProviderResult[] = []\n      \n      // Parse as midnight Europe/Warsaw, then convert to UTC for DB storage\n      const effectiveDate = fromZonedTime(\n        `${table.effectiveDate} 00:00:00`,\n        'Europe/Warsaw'\n      )\n\n      for (const rate of table.rates) {\n        // NBP rates are from bank's perspective:\n        // - ASK (sprzeda\u017C): bank sells XXX for PLN \u2192 1 XXX = ask PLN\n        // - BID (kupno): bank buys XXX for PLN \u2192 1 XXX = bid PLN\n        \n        // Rate 1: PLN \u2192 XXX (inverse of ASK) - this is when bank SELLS foreign currency\n        // If ask = 4.5 (1 EUR costs 4.5 PLN), then 1 PLN = 1/4.5 EUR\n        results.push({\n          fromCurrencyCode: this.providerBaseCurrency,\n          toCurrencyCode: rate.code,\n          rate: (1 / rate.ask).toString(),\n          source: this.source,\n          date: effectiveDate,\n          type: 'sell', // Bank sells foreign currency (from their perspective)\n        })\n\n        // Rate 2: XXX \u2192 PLN (using BID) - this is when bank BUYS foreign currency\n        // If bid = 4.3 (1 EUR gives 4.3 PLN), then 1 EUR = 4.3 PLN\n        results.push({\n          fromCurrencyCode: rate.code,\n          toCurrencyCode: this.providerBaseCurrency,\n          rate: rate.bid.toString(),\n          source: this.source,\n          date: effectiveDate,\n          type: 'buy', // Bank buys foreign currency (from their perspective)\n        })\n      }\n\n      logger.info('Fetched rates', { count: results.length, date: dateStr })\n      return results\n    } catch (err: any) {\n      logger.error('Fetch error', { date: dateStr, err })\n      throw new Error(`Failed to fetch NBP rates: ${err.message}`)\n    }\n  }\n\n  private formatDate(date: Date): string {\n    return date.toISOString().split('T')[0] // YYYY-MM-DD\n  }\n}\n"],
+  "mappings": "AACA,SAAS,qBAAqB;AAC9B,SAAS,kBAAkB,wBAAwB;AACnD,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,YAAY,EAAE,MAAM,EAAE,WAAW,MAAM,CAAC;AAEpE,MAAM,gCAAgC;AAEtC,SAAS,4BAAoC;AAC3C,QAAM,MAAM,QAAQ,IAAI;AACxB,QAAM,SAAS,MAAM,OAAO,SAAS,KAAK,EAAE,IAAI;AAChD,SAAO,iBAAiB,QAAQ,6BAA6B;AAC/D;AAeO,MAAM,YAAoC;AAAA,EAA1C;AACL,SAAS,OAAO;AAChB,SAAS,SAAS;AAClB,SAAS,uBAAuB;AAEhC,SAAiB,UAAU;AAAA;AAAA,EAE3B,cAAuB;AACrB,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,WACJ,MACA,OACA,qBAC+B;AAE/B,QAAI,CAAC,oBAAoB,IAAI,KAAK,oBAAoB,GAAG;AACvD,aAAO,MAAM,iDAAiD;AAC9D,aAAO,CAAC;AAAA,IACV;AAEA,UAAM,UAAU,KAAK,WAAW,IAAI;AACpC,UAAM,MAAM,GAAG,KAAK,OAAO,2BAA2B,OAAO;AAE7D,QAAI;AACF,YAAM,WAAW,MAAM,iBAAiB,KAAK,EAAE,WAAW,0BAA0B,EAAE,CAAC;AAEvF,UAAI,SAAS,WAAW,KAAK;AAE3B,eAAO,MAAM,qBAAqB,EAAE,MAAM,QAAQ,CAAC;AACnD,eAAO,CAAC;AAAA,MACV;AAEA,UAAI,CAAC,SAAS,IAAI;AAChB,cAAM,IAAI,MAAM,kBAAkB,SAAS,MAAM,IAAI,SAAS,UAAU,EAAE;AAAA,MAC5E;AAEA,YAAM,OAA4B,MAAM,SAAS,KAAK;AAEtD,UAAI,CAAC,QAAQ,KAAK,WAAW,GAAG;AAC9B,eAAO,CAAC;AAAA,MACV;AAEA,YAAM,QAAQ,KAAK,CAAC;AACpB,YAAM,UAAgC,CAAC;AAGvC,YAAM,gBAAgB;AAAA,QACpB,GAAG,MAAM,aAAa;AAAA,QACtB;AAAA,MACF;AAEA,iBAAW,QAAQ,MAAM,OAAO;AAO9B,gBAAQ,KAAK;AAAA,UACX,kBAAkB,KAAK;AAAA,UACvB,gBAAgB,KAAK;AAAA,UACrB,OAAO,IAAI,KAAK,KAAK,SAAS;AAAA,UAC9B,QAAQ,KAAK;AAAA,UACb,MAAM;AAAA,UACN,MAAM;AAAA;AAAA,QACR,CAAC;AAID,gBAAQ,KAAK;AAAA,UACX,kBAAkB,KAAK;AAAA,UACvB,gBAAgB,KAAK;AAAA,UACrB,MAAM,KAAK,IAAI,SAAS;AAAA,UACxB,QAAQ,KAAK;AAAA,UACb,MAAM;AAAA,UACN,MAAM;AAAA;AAAA,QACR,CAAC;AAAA,MACH;AAEA,aAAO,KAAK,iBAAiB,EAAE,OAAO,QAAQ,QAAQ,MAAM,QAAQ,CAAC;AACrE,aAAO;AAAA,IACT,SAAS,KAAU;AACjB,aAAO,MAAM,eAAe,EAAE,MAAM,SAAS,IAAI,CAAC;AAClD,YAAM,IAAI,MAAM,8BAA8B,IAAI,OAAO,EAAE;AAAA,IAC7D;AAAA,EACF;AAAA,EAEQ,WAAW,MAAoB;AACrC,WAAO,KAAK,YAAY,EAAE,MAAM,GAAG,EAAE,CAAC;AAAA,EACxC;AACF;",
   "names": []
 }

package/dist/modules/currencies/services/providers/raiffeisen.js

@@ -1,5 +1,7 @@
 import { fromZonedTime } from "date-fns-tz";
 import { fetchWithTimeout, resolveTimeoutMs } from "@open-mercato/shared/lib/http/fetchWithTimeout";
+import { createLogger } from "@open-mercato/shared/lib/logger";
+const logger = createLogger("currencies").child({ component: "raiffeisen" });
 const DEFAULT_RATE_FETCH_TIMEOUT_MS = 15e3;
 function resolveRateFetchTimeoutMs() {
   const raw = process.env.CURRENCY_RATE_FETCH_TIMEOUT_MS;
@@ -18,7 +20,7 @@ class RaiffeisenPolandProvider {
   }
   async fetchRates(date, scope, availableCurrencies) {
     if (!availableCurrencies.has(this.providerBaseCurrency)) {
-      console.debug("[Raiffeisen] Skipping: PLN not found in available currencies");
+      logger.debug("Skipping: PLN not found in available currencies");
       return [];
     }
     const dateStr = this.formatDate(date);
@@ -27,7 +29,7 @@ class RaiffeisenPolandProvider {
       const response = await fetchWithTimeout(url, { timeoutMs: resolveRateFetchTimeoutMs() });
       if (!response.ok) {
         if (response.status === 404) {
-          console.log(`[Raiffeisen] No data available for ${dateStr}`);
+          logger.debug("No data available", { date: dateStr });
           return [];
         }
         throw new Error(
@@ -44,7 +46,7 @@ class RaiffeisenPolandProvider {
       const results = [];
       const firstRate = rates[0];
       if (!firstRate) {
-        console.log(`[Raiffeisen] No rates available in time slot ${firstTime}`);
+        logger.debug("No rates available in time slot", { timeSlot: firstTime });
         return [];
       }
       const rateDate = fromZonedTime(
@@ -72,12 +74,10 @@ class RaiffeisenPolandProvider {
           // Bank buys foreign currency (from their perspective)
         });
       }
-      console.log(
-        `[Raiffeisen] Fetched ${results.length} rates for ${dateStr} at ${firstRate.time} Warsaw time (${rateDate.toISOString()})`
-      );
+      logger.info("Fetched rates", { count: results.length, date: dateStr, time: firstRate.time, rateDate: rateDate.toISOString() });
       return results;
     } catch (err) {
-      console.error(`[Raiffeisen] Fetch error for ${dateStr}:`, err);
+      logger.error("Fetch error", { date: dateStr, err });
       throw new Error(`Failed to fetch Raiffeisen rates: ${err.message}`);
     }
   }

package/dist/modules/currencies/services/providers/raiffeisen.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../src/modules/currencies/services/providers/raiffeisen.ts"],
-  "sourcesContent": ["import { RateProvider, RateProviderResult } from './base'\nimport { fromZonedTime } from 'date-fns-tz'\nimport { fetchWithTimeout, resolveTimeoutMs } from '@open-mercato/shared/lib/http/fetchWithTimeout'\n\nconst DEFAULT_RATE_FETCH_TIMEOUT_MS = 15_000\n\nfunction resolveRateFetchTimeoutMs(): number {\n  const raw = process.env.CURRENCY_RATE_FETCH_TIMEOUT_MS\n  const parsed = raw ? Number.parseInt(raw, 10) : undefined\n  return resolveTimeoutMs(parsed, DEFAULT_RATE_FETCH_TIMEOUT_MS)\n}\n\ninterface RaiffeisenResponse {\n  date: string\n  rates: Record<\n    string,\n    Array<{\n      code: string\n      units: number\n      buy: string\n      sell: string\n      spread: string\n      date: string\n      time: string\n    }>\n  >\n  range: {\n    minRateDate: string\n    maxRateDate: string\n  }\n}\n\n// \nexport class RaiffeisenPolandProvider implements RateProvider {\n  readonly name = 'Raiffeisen Bank Polska'\n  readonly source = 'Raiffeisen Bank Polska'\n  readonly providerBaseCurrency = 'PLN'\n\n  private readonly baseUrl = 'https://www.rbinternational.com.pl/rest/rates/'\n\n  isAvailable(): boolean {\n    return true\n  }\n\n  async fetchRates(\n    date: Date,\n    scope: { tenantId: string; organizationId: string },\n    availableCurrencies: Set<string>\n  ): Promise<RateProviderResult[]> {\n    // Check if PLN is available (required as base currency for Raiffeisen)\n    if (!availableCurrencies.has(this.providerBaseCurrency)) {\n      console.debug('[Raiffeisen] Skipping: PLN not found in available currencies')\n      return []\n    }\n\n    const dateStr = this.formatDate(date)\n    const url = `${this.baseUrl}?type=kursywalut&range=all&date=${dateStr}`\n\n    try {\n      const response = await fetchWithTimeout(url, { timeoutMs: resolveRateFetchTimeoutMs() })\n\n      if (!response.ok) {\n        if (response.status === 404) {\n          console.log(`[Raiffeisen] No data available for ${dateStr}`)\n          return []\n        }\n        throw new Error(\n          `Raiffeisen API error: ${response.status} ${response.statusText}`\n        )\n      }\n\n      const data: RaiffeisenResponse = await response.json()\n\n      if (!data.rates || Object.keys(data.rates).length === 0) {\n        return []\n      }\n\n      // Get FIRST time slot (opening rates)\n      const times = Object.keys(data.rates).sort((a, b) => (a < b ? -1 : a > b ? 1 : 0))\n      const firstTime = times[0]\n      const rates = data.rates[firstTime]\n\n      const results: RateProviderResult[] = []\n      \n      // Extract time from first rate entry (all rates in same time slot have same time)\n      const firstRate = rates[0]\n      if (!firstRate) {\n        console.log(`[Raiffeisen] No rates available in time slot ${firstTime}`)\n        return []\n      }\n\n      // Combine date + time and parse as Europe/Warsaw timezone\n      const rateDate = fromZonedTime(\n        `${data.date} ${firstRate.time}`,\n        'Europe/Warsaw'\n      )\n\n      for (const rateData of rates) {\n        // Raiffeisen rates are from bank's perspective:\n        // - SELL: bank sells XXX for PLN \u2192 1 XXX = sell PLN\n        // - BUY: bank buys XXX for PLN \u2192 1 XXX = buy PLN\n        \n        // Rate 1: PLN \u2192 XXX (inverse of SELL) - this is when bank SELLS foreign currency\n        // If sell = 4.5 (1 EUR costs 4.5 PLN), then 1 PLN = 1/4.5 EUR\n        const sellRate = parseFloat(rateData.sell)\n        results.push({\n          fromCurrencyCode: this.providerBaseCurrency,\n          toCurrencyCode: rateData.code,\n          rate: (1 / sellRate).toString(),\n          source: this.source,\n          date: rateDate,\n          type: 'sell', // Bank sells foreign currency (from their perspective)\n        })\n\n        // Rate 2: XXX \u2192 PLN (using BUY) - this is when bank BUYS foreign currency\n        // If buy = 4.3 (1 EUR gives 4.3 PLN), then 1 EUR = 4.3 PLN\n        results.push({\n          fromCurrencyCode: rateData.code,\n          toCurrencyCode: this.providerBaseCurrency,\n          rate: rateData.buy,\n          source: this.source,\n          date: rateDate,\n          type: 'buy', // Bank buys foreign currency (from their perspective)\n        })\n      }\n\n      console.log(\n        `[Raiffeisen] Fetched ${results.length} rates for ${dateStr} at ${firstRate.time} Warsaw time (${rateDate.toISOString()})`\n      )\n      return results\n    } catch (err: any) {\n      console.error(`[Raiffeisen] Fetch error for ${dateStr}:`, err)\n      throw new Error(`Failed to fetch Raiffeisen rates: ${err.message}`)\n    }\n  }\n\n  private formatDate(date: Date): string {\n    return date.toISOString().split('T')[0] // YYYY-MM-DD\n  }\n}\n"],
-  "mappings": "AACA,SAAS,qBAAqB;AAC9B,SAAS,kBAAkB,wBAAwB;AAEnD,MAAM,gCAAgC;AAEtC,SAAS,4BAAoC;AAC3C,QAAM,MAAM,QAAQ,IAAI;AACxB,QAAM,SAAS,MAAM,OAAO,SAAS,KAAK,EAAE,IAAI;AAChD,SAAO,iBAAiB,QAAQ,6BAA6B;AAC/D;AAuBO,MAAM,yBAAiD;AAAA,EAAvD;AACL,SAAS,OAAO;AAChB,SAAS,SAAS;AAClB,SAAS,uBAAuB;AAEhC,SAAiB,UAAU;AAAA;AAAA,EAE3B,cAAuB;AACrB,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,WACJ,MACA,OACA,qBAC+B;AAE/B,QAAI,CAAC,oBAAoB,IAAI,KAAK,oBAAoB,GAAG;AACvD,cAAQ,MAAM,8DAA8D;AAC5E,aAAO,CAAC;AAAA,IACV;AAEA,UAAM,UAAU,KAAK,WAAW,IAAI;AACpC,UAAM,MAAM,GAAG,KAAK,OAAO,mCAAmC,OAAO;AAErE,QAAI;AACF,YAAM,WAAW,MAAM,iBAAiB,KAAK,EAAE,WAAW,0BAA0B,EAAE,CAAC;AAEvF,UAAI,CAAC,SAAS,IAAI;AAChB,YAAI,SAAS,WAAW,KAAK;AAC3B,kBAAQ,IAAI,sCAAsC,OAAO,EAAE;AAC3D,iBAAO,CAAC;AAAA,QACV;AACA,cAAM,IAAI;AAAA,UACR,yBAAyB,SAAS,MAAM,IAAI,SAAS,UAAU;AAAA,QACjE;AAAA,MACF;AAEA,YAAM,OAA2B,MAAM,SAAS,KAAK;AAErD,UAAI,CAAC,KAAK,SAAS,OAAO,KAAK,KAAK,KAAK,EAAE,WAAW,GAAG;AACvD,eAAO,CAAC;AAAA,MACV;AAGA,YAAM,QAAQ,OAAO,KAAK,KAAK,KAAK,EAAE,KAAK,CAAC,GAAG,MAAO,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,CAAE;AACjF,YAAM,YAAY,MAAM,CAAC;AACzB,YAAM,QAAQ,KAAK,MAAM,SAAS;AAElC,YAAM,UAAgC,CAAC;AAGvC,YAAM,YAAY,MAAM,CAAC;AACzB,UAAI,CAAC,WAAW;AACd,gBAAQ,IAAI,gDAAgD,SAAS,EAAE;AACvE,eAAO,CAAC;AAAA,MACV;AAGA,YAAM,WAAW;AAAA,QACf,GAAG,KAAK,IAAI,IAAI,UAAU,IAAI;AAAA,QAC9B;AAAA,MACF;AAEA,iBAAW,YAAY,OAAO;AAO5B,cAAM,WAAW,WAAW,SAAS,IAAI;AACzC,gBAAQ,KAAK;AAAA,UACX,kBAAkB,KAAK;AAAA,UACvB,gBAAgB,SAAS;AAAA,UACzB,OAAO,IAAI,UAAU,SAAS;AAAA,UAC9B,QAAQ,KAAK;AAAA,UACb,MAAM;AAAA,UACN,MAAM;AAAA;AAAA,QACR,CAAC;AAID,gBAAQ,KAAK;AAAA,UACX,kBAAkB,SAAS;AAAA,UAC3B,gBAAgB,KAAK;AAAA,UACrB,MAAM,SAAS;AAAA,UACf,QAAQ,KAAK;AAAA,UACb,MAAM;AAAA,UACN,MAAM;AAAA;AAAA,QACR,CAAC;AAAA,MACH;AAEA,cAAQ;AAAA,QACN,wBAAwB,QAAQ,MAAM,cAAc,OAAO,OAAO,UAAU,IAAI,iBAAiB,SAAS,YAAY,CAAC;AAAA,MACzH;AACA,aAAO;AAAA,IACT,SAAS,KAAU;AACjB,cAAQ,MAAM,gCAAgC,OAAO,KAAK,GAAG;AAC7D,YAAM,IAAI,MAAM,qCAAqC,IAAI,OAAO,EAAE;AAAA,IACpE;AAAA,EACF;AAAA,EAEQ,WAAW,MAAoB;AACrC,WAAO,KAAK,YAAY,EAAE,MAAM,GAAG,EAAE,CAAC;AAAA,EACxC;AACF;",
+  "sourcesContent": ["import { RateProvider, RateProviderResult } from './base'\nimport { fromZonedTime } from 'date-fns-tz'\nimport { fetchWithTimeout, resolveTimeoutMs } from '@open-mercato/shared/lib/http/fetchWithTimeout'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('currencies').child({ component: 'raiffeisen' })\n\nconst DEFAULT_RATE_FETCH_TIMEOUT_MS = 15_000\n\nfunction resolveRateFetchTimeoutMs(): number {\n  const raw = process.env.CURRENCY_RATE_FETCH_TIMEOUT_MS\n  const parsed = raw ? Number.parseInt(raw, 10) : undefined\n  return resolveTimeoutMs(parsed, DEFAULT_RATE_FETCH_TIMEOUT_MS)\n}\n\ninterface RaiffeisenResponse {\n  date: string\n  rates: Record<\n    string,\n    Array<{\n      code: string\n      units: number\n      buy: string\n      sell: string\n      spread: string\n      date: string\n      time: string\n    }>\n  >\n  range: {\n    minRateDate: string\n    maxRateDate: string\n  }\n}\n\n// \nexport class RaiffeisenPolandProvider implements RateProvider {\n  readonly name = 'Raiffeisen Bank Polska'\n  readonly source = 'Raiffeisen Bank Polska'\n  readonly providerBaseCurrency = 'PLN'\n\n  private readonly baseUrl = 'https://www.rbinternational.com.pl/rest/rates/'\n\n  isAvailable(): boolean {\n    return true\n  }\n\n  async fetchRates(\n    date: Date,\n    scope: { tenantId: string; organizationId: string },\n    availableCurrencies: Set<string>\n  ): Promise<RateProviderResult[]> {\n    // Check if PLN is available (required as base currency for Raiffeisen)\n    if (!availableCurrencies.has(this.providerBaseCurrency)) {\n      logger.debug('Skipping: PLN not found in available currencies')\n      return []\n    }\n\n    const dateStr = this.formatDate(date)\n    const url = `${this.baseUrl}?type=kursywalut&range=all&date=${dateStr}`\n\n    try {\n      const response = await fetchWithTimeout(url, { timeoutMs: resolveRateFetchTimeoutMs() })\n\n      if (!response.ok) {\n        if (response.status === 404) {\n          logger.debug('No data available', { date: dateStr })\n          return []\n        }\n        throw new Error(\n          `Raiffeisen API error: ${response.status} ${response.statusText}`\n        )\n      }\n\n      const data: RaiffeisenResponse = await response.json()\n\n      if (!data.rates || Object.keys(data.rates).length === 0) {\n        return []\n      }\n\n      // Get FIRST time slot (opening rates)\n      const times = Object.keys(data.rates).sort((a, b) => (a < b ? -1 : a > b ? 1 : 0))\n      const firstTime = times[0]\n      const rates = data.rates[firstTime]\n\n      const results: RateProviderResult[] = []\n      \n      // Extract time from first rate entry (all rates in same time slot have same time)\n      const firstRate = rates[0]\n      if (!firstRate) {\n        logger.debug('No rates available in time slot', { timeSlot: firstTime })\n        return []\n      }\n\n      // Combine date + time and parse as Europe/Warsaw timezone\n      const rateDate = fromZonedTime(\n        `${data.date} ${firstRate.time}`,\n        'Europe/Warsaw'\n      )\n\n      for (const rateData of rates) {\n        // Raiffeisen rates are from bank's perspective:\n        // - SELL: bank sells XXX for PLN \u2192 1 XXX = sell PLN\n        // - BUY: bank buys XXX for PLN \u2192 1 XXX = buy PLN\n        \n        // Rate 1: PLN \u2192 XXX (inverse of SELL) - this is when bank SELLS foreign currency\n        // If sell = 4.5 (1 EUR costs 4.5 PLN), then 1 PLN = 1/4.5 EUR\n        const sellRate = parseFloat(rateData.sell)\n        results.push({\n          fromCurrencyCode: this.providerBaseCurrency,\n          toCurrencyCode: rateData.code,\n          rate: (1 / sellRate).toString(),\n          source: this.source,\n          date: rateDate,\n          type: 'sell', // Bank sells foreign currency (from their perspective)\n        })\n\n        // Rate 2: XXX \u2192 PLN (using BUY) - this is when bank BUYS foreign currency\n        // If buy = 4.3 (1 EUR gives 4.3 PLN), then 1 EUR = 4.3 PLN\n        results.push({\n          fromCurrencyCode: rateData.code,\n          toCurrencyCode: this.providerBaseCurrency,\n          rate: rateData.buy,\n          source: this.source,\n          date: rateDate,\n          type: 'buy', // Bank buys foreign currency (from their perspective)\n        })\n      }\n\n      logger.info('Fetched rates', { count: results.length, date: dateStr, time: firstRate.time, rateDate: rateDate.toISOString() })\n      return results\n    } catch (err: any) {\n      logger.error('Fetch error', { date: dateStr, err })\n      throw new Error(`Failed to fetch Raiffeisen rates: ${err.message}`)\n    }\n  }\n\n  private formatDate(date: Date): string {\n    return date.toISOString().split('T')[0] // YYYY-MM-DD\n  }\n}\n"],
+  "mappings": "AACA,SAAS,qBAAqB;AAC9B,SAAS,kBAAkB,wBAAwB;AACnD,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,YAAY,EAAE,MAAM,EAAE,WAAW,aAAa,CAAC;AAE3E,MAAM,gCAAgC;AAEtC,SAAS,4BAAoC;AAC3C,QAAM,MAAM,QAAQ,IAAI;AACxB,QAAM,SAAS,MAAM,OAAO,SAAS,KAAK,EAAE,IAAI;AAChD,SAAO,iBAAiB,QAAQ,6BAA6B;AAC/D;AAuBO,MAAM,yBAAiD;AAAA,EAAvD;AACL,SAAS,OAAO;AAChB,SAAS,SAAS;AAClB,SAAS,uBAAuB;AAEhC,SAAiB,UAAU;AAAA;AAAA,EAE3B,cAAuB;AACrB,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,WACJ,MACA,OACA,qBAC+B;AAE/B,QAAI,CAAC,oBAAoB,IAAI,KAAK,oBAAoB,GAAG;AACvD,aAAO,MAAM,iDAAiD;AAC9D,aAAO,CAAC;AAAA,IACV;AAEA,UAAM,UAAU,KAAK,WAAW,IAAI;AACpC,UAAM,MAAM,GAAG,KAAK,OAAO,mCAAmC,OAAO;AAErE,QAAI;AACF,YAAM,WAAW,MAAM,iBAAiB,KAAK,EAAE,WAAW,0BAA0B,EAAE,CAAC;AAEvF,UAAI,CAAC,SAAS,IAAI;AAChB,YAAI,SAAS,WAAW,KAAK;AAC3B,iBAAO,MAAM,qBAAqB,EAAE,MAAM,QAAQ,CAAC;AACnD,iBAAO,CAAC;AAAA,QACV;AACA,cAAM,IAAI;AAAA,UACR,yBAAyB,SAAS,MAAM,IAAI,SAAS,UAAU;AAAA,QACjE;AAAA,MACF;AAEA,YAAM,OAA2B,MAAM,SAAS,KAAK;AAErD,UAAI,CAAC,KAAK,SAAS,OAAO,KAAK,KAAK,KAAK,EAAE,WAAW,GAAG;AACvD,eAAO,CAAC;AAAA,MACV;AAGA,YAAM,QAAQ,OAAO,KAAK,KAAK,KAAK,EAAE,KAAK,CAAC,GAAG,MAAO,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,CAAE;AACjF,YAAM,YAAY,MAAM,CAAC;AACzB,YAAM,QAAQ,KAAK,MAAM,SAAS;AAElC,YAAM,UAAgC,CAAC;AAGvC,YAAM,YAAY,MAAM,CAAC;AACzB,UAAI,CAAC,WAAW;AACd,eAAO,MAAM,mCAAmC,EAAE,UAAU,UAAU,CAAC;AACvE,eAAO,CAAC;AAAA,MACV;AAGA,YAAM,WAAW;AAAA,QACf,GAAG,KAAK,IAAI,IAAI,UAAU,IAAI;AAAA,QAC9B;AAAA,MACF;AAEA,iBAAW,YAAY,OAAO;AAO5B,cAAM,WAAW,WAAW,SAAS,IAAI;AACzC,gBAAQ,KAAK;AAAA,UACX,kBAAkB,KAAK;AAAA,UACvB,gBAAgB,SAAS;AAAA,UACzB,OAAO,IAAI,UAAU,SAAS;AAAA,UAC9B,QAAQ,KAAK;AAAA,UACb,MAAM;AAAA,UACN,MAAM;AAAA;AAAA,QACR,CAAC;AAID,gBAAQ,KAAK;AAAA,UACX,kBAAkB,SAAS;AAAA,UAC3B,gBAAgB,KAAK;AAAA,UACrB,MAAM,SAAS;AAAA,UACf,QAAQ,KAAK;AAAA,UACb,MAAM;AAAA,UACN,MAAM;AAAA;AAAA,QACR,CAAC;AAAA,MACH;AAEA,aAAO,KAAK,iBAAiB,EAAE,OAAO,QAAQ,QAAQ,MAAM,SAAS,MAAM,UAAU,MAAM,UAAU,SAAS,YAAY,EAAE,CAAC;AAC7H,aAAO;AAAA,IACT,SAAS,KAAU;AACjB,aAAO,MAAM,eAAe,EAAE,MAAM,SAAS,IAAI,CAAC;AAClD,YAAM,IAAI,MAAM,qCAAqC,IAAI,OAAO,EAAE;AAAA,IACpE;AAAA,EACF;AAAA,EAEQ,WAAW,MAAoB;AACrC,WAAO,KAAK,YAAY,EAAE,MAAM,GAAG,EAAE,CAAC;AAAA,EACxC;AACF;",
   "names": []
 }

package/dist/modules/customer_accounts/api/domain-resolve/all.js

@@ -7,8 +7,9 @@ import {
   checkAuthRateLimit,
   domainResolveAllIpRateLimitConfig
 } from "@open-mercato/core/modules/customer_accounts/lib/rateLimiter";
+import { createLogger } from "@open-mercato/shared/lib/logger";
+const logger = createLogger("customer_accounts").child({ component: "domain-resolve-all" });
 const ORIGIN_HEADER_NAME = process.env.CUSTOMER_DOMAIN_ORIGIN_HEADER ?? "X-Open-Mercato-Origin";
-const LOG_PREFIX = "[domain-resolve/all]";
 const ENDPOINT_PATH = "/api/customer_accounts/domain-resolve/all";
 const metadata = {
   GET: { requireAuth: false }
@@ -31,7 +32,7 @@ async function GET(req) {
   const callerIp = readCallerIp(req);
   const expected = process.env.DOMAIN_RESOLVE_SECRET;
   if (!expected) {
-    console.warn(`${LOG_PREFIX} rejected request \u2014 secret not configured`, {
+    logger.warn("Rejected request \u2014 secret not configured", {
       endpoint: ENDPOINT_PATH,
       ip: callerIp,
       outcome: "misconfigured"
@@ -48,7 +49,7 @@ async function GET(req) {
     ipConfig: domainResolveAllIpRateLimitConfig
   });
   if (rateLimitError) {
-    console.warn(`${LOG_PREFIX} rate-limited`, {
+    logger.warn("Rate-limited", {
       endpoint: ENDPOINT_PATH,
       ip: callerIp,
       outcome: "rate_limited"
@@ -57,7 +58,7 @@ async function GET(req) {
   }
   const supplied = req.headers.get("x-domain-resolve-secret");
   if (!secretEqual(supplied, expected)) {
-    console.warn(`${LOG_PREFIX} rejected request \u2014 invalid secret`, {
+    logger.warn("Rejected request \u2014 invalid secret", {
       endpoint: ENDPOINT_PATH,
       ip: callerIp,
       outcome: "forbidden"
@@ -67,7 +68,7 @@ async function GET(req) {
   const container = await createRequestContainer();
   const service = container.resolve("domainMappingService");
   const records = await service.resolveAll();
-  console.info(`${LOG_PREFIX} authorized`, {
+  logger.info("Authorized", {
     endpoint: ENDPOINT_PATH,
     ip: callerIp,
     outcome: "ok",

package/dist/modules/customer_accounts/api/domain-resolve/all.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../src/modules/customer_accounts/api/domain-resolve/all.ts"],
-  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { secretEqual } from '@open-mercato/core/modules/customer_accounts/lib/secretCompare'\nimport { DomainMappingService } from '@open-mercato/core/modules/customer_accounts/services/domainMappingService'\nimport { rateLimitErrorSchema } from '@open-mercato/shared/lib/ratelimit/helpers'\nimport {\n  checkAuthRateLimit,\n  domainResolveAllIpRateLimitConfig,\n} from '@open-mercato/core/modules/customer_accounts/lib/rateLimiter'\n\nconst ORIGIN_HEADER_NAME = process.env.CUSTOMER_DOMAIN_ORIGIN_HEADER ?? 'X-Open-Mercato-Origin'\nconst LOG_PREFIX = '[domain-resolve/all]'\nconst ENDPOINT_PATH = '/api/customer_accounts/domain-resolve/all'\n\nexport const metadata = {\n  GET: { requireAuth: false },\n}\n\nfunction withOriginHeader(response: NextResponse): NextResponse {\n  response.headers.set(ORIGIN_HEADER_NAME, '1')\n  return response\n}\n\nfunction readCallerIp(req: Request): string {\n  const forwardedFor = req.headers.get('x-forwarded-for')\n  if (forwardedFor) {\n    const firstHop = forwardedFor.split(',')[0]?.trim()\n    if (firstHop) return firstHop\n  }\n  const realIp = req.headers.get('x-real-ip')\n  if (realIp && realIp.trim().length > 0) return realIp.trim()\n  return 'unknown'\n}\n\nexport async function GET(req: Request) {\n  const callerIp = readCallerIp(req)\n  const expected = process.env.DOMAIN_RESOLVE_SECRET\n  if (!expected) {\n    // Fail closed when the gating secret is not configured on the server.\n    console.warn(`${LOG_PREFIX} rejected request \u2014 secret not configured`, {\n      endpoint: ENDPOINT_PATH,\n      ip: callerIp,\n      outcome: 'misconfigured',\n    })\n    return withOriginHeader(\n      NextResponse.json(\n        { ok: false, error: 'DOMAIN_RESOLVE_SECRET is not configured on the server' },\n        { status: 503 },\n      ),\n    )\n  }\n\n  // Rate-limit by caller IP before the secret comparison to make leak-driven\n  // enumeration noisy and bounded. Fails closed (returns the helper's 429\n  // response) when the limit is exceeded.\n  const { error: rateLimitError } = await checkAuthRateLimit({\n    req,\n    ipConfig: domainResolveAllIpRateLimitConfig,\n  })\n  if (rateLimitError) {\n    console.warn(`${LOG_PREFIX} rate-limited`, {\n      endpoint: ENDPOINT_PATH,\n      ip: callerIp,\n      outcome: 'rate_limited',\n    })\n    return withOriginHeader(rateLimitError)\n  }\n\n  const supplied = req.headers.get('x-domain-resolve-secret')\n  if (!secretEqual(supplied, expected)) {\n    console.warn(`${LOG_PREFIX} rejected request \u2014 invalid secret`, {\n      endpoint: ENDPOINT_PATH,\n      ip: callerIp,\n      outcome: 'forbidden',\n    })\n    return withOriginHeader(NextResponse.json({ ok: false, error: 'Forbidden' }, { status: 403 }))\n  }\n\n  const container = await createRequestContainer()\n  const service = container.resolve('domainMappingService') as DomainMappingService\n  const records = await service.resolveAll()\n  console.info(`${LOG_PREFIX} authorized`, {\n    endpoint: ENDPOINT_PATH,\n    ip: callerIp,\n    outcome: 'ok',\n    domains: records.length,\n  })\n  return withOriginHeader(\n    NextResponse.json({\n      ok: true,\n      domains: records.map((r) => ({\n        hostname: r.hostname,\n        tenantId: r.tenantId,\n        organizationId: r.organizationId,\n        orgSlug: r.orgSlug,\n        status: r.status,\n      })),\n    }),\n  )\n}\n\nconst errorSchema = z.object({ ok: z.literal(false), error: z.string() })\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'CustomerAccounts',\n  summary: 'Batch resolve all active custom domains',\n  methods: {\n    GET: {\n      summary: 'Batch warm-up for the Node middleware',\n      description:\n        'Returns every active domain mapping in a single payload so the middleware can populate its cache on process start. Requires X-Domain-Resolve-Secret header.',\n      responses: [\n        {\n          status: 200,\n          description: 'OK',\n          schema: z.object({\n            ok: z.literal(true),\n            domains: z.array(\n              z.object({\n                hostname: z.string(),\n                tenantId: z.string().uuid(),\n                organizationId: z.string().uuid(),\n                orgSlug: z.string().nullable(),\n                status: z.literal('active'),\n              }),\n            ),\n          }),\n        },\n      ],\n      errors: [\n        { status: 403, description: 'Forbidden', schema: errorSchema },\n        { status: 429, description: 'Too many requests', schema: rateLimitErrorSchema },\n        { status: 503, description: 'Server misconfiguration', schema: errorSchema },\n      ],\n    },\n  },\n}\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAElB,SAAS,8BAA8B;AACvC,SAAS,mBAAmB;AAE5B,SAAS,4BAA4B;AACrC;AAAA,EACE;AAAA,EACA;AAAA,OACK;AAEP,MAAM,qBAAqB,QAAQ,IAAI,iCAAiC;AACxE,MAAM,aAAa;AACnB,MAAM,gBAAgB;AAEf,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM;AAC5B;AAEA,SAAS,iBAAiB,UAAsC;AAC9D,WAAS,QAAQ,IAAI,oBAAoB,GAAG;AAC5C,SAAO;AACT;AAEA,SAAS,aAAa,KAAsB;AAC1C,QAAM,eAAe,IAAI,QAAQ,IAAI,iBAAiB;AACtD,MAAI,cAAc;AAChB,UAAM,WAAW,aAAa,MAAM,GAAG,EAAE,CAAC,GAAG,KAAK;AAClD,QAAI,SAAU,QAAO;AAAA,EACvB;AACA,QAAM,SAAS,IAAI,QAAQ,IAAI,WAAW;AAC1C,MAAI,UAAU,OAAO,KAAK,EAAE,SAAS,EAAG,QAAO,OAAO,KAAK;AAC3D,SAAO;AACT;AAEA,eAAsB,IAAI,KAAc;AACtC,QAAM,WAAW,aAAa,GAAG;AACjC,QAAM,WAAW,QAAQ,IAAI;AAC7B,MAAI,CAAC,UAAU;AAEb,YAAQ,KAAK,GAAG,UAAU,kDAA6C;AAAA,MACrE,UAAU;AAAA,MACV,IAAI;AAAA,MACJ,SAAS;AAAA,IACX,CAAC;AACD,WAAO;AAAA,MACL,aAAa;AAAA,QACX,EAAE,IAAI,OAAO,OAAO,wDAAwD;AAAA,QAC5E,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAAA,EACF;AAKA,QAAM,EAAE,OAAO,eAAe,IAAI,MAAM,mBAAmB;AAAA,IACzD;AAAA,IACA,UAAU;AAAA,EACZ,CAAC;AACD,MAAI,gBAAgB;AAClB,YAAQ,KAAK,GAAG,UAAU,iBAAiB;AAAA,MACzC,UAAU;AAAA,MACV,IAAI;AAAA,MACJ,SAAS;AAAA,IACX,CAAC;AACD,WAAO,iBAAiB,cAAc;AAAA,EACxC;AAEA,QAAM,WAAW,IAAI,QAAQ,IAAI,yBAAyB;AAC1D,MAAI,CAAC,YAAY,UAAU,QAAQ,GAAG;AACpC,YAAQ,KAAK,GAAG,UAAU,2CAAsC;AAAA,MAC9D,UAAU;AAAA,MACV,IAAI;AAAA,MACJ,SAAS;AAAA,IACX,CAAC;AACD,WAAO,iBAAiB,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,YAAY,GAAG,EAAE,QAAQ,IAAI,CAAC,CAAC;AAAA,EAC/F;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,UAAU,UAAU,QAAQ,sBAAsB;AACxD,QAAM,UAAU,MAAM,QAAQ,WAAW;AACzC,UAAQ,KAAK,GAAG,UAAU,eAAe;AAAA,IACvC,UAAU;AAAA,IACV,IAAI;AAAA,IACJ,SAAS;AAAA,IACT,SAAS,QAAQ;AAAA,EACnB,CAAC;AACD,SAAO;AAAA,IACL,aAAa,KAAK;AAAA,MAChB,IAAI;AAAA,MACJ,SAAS,QAAQ,IAAI,CAAC,OAAO;AAAA,QAC3B,UAAU,EAAE;AAAA,QACZ,UAAU,EAAE;AAAA,QACZ,gBAAgB,EAAE;AAAA,QAClB,SAAS,EAAE;AAAA,QACX,QAAQ,EAAE;AAAA,MACZ,EAAE;AAAA,IACJ,CAAC;AAAA,EACH;AACF;AAEA,MAAM,cAAc,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,KAAK,GAAG,OAAO,EAAE,OAAO,EAAE,CAAC;AAEjE,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,aACE;AAAA,MACF,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO;AAAA,YACf,IAAI,EAAE,QAAQ,IAAI;AAAA,YAClB,SAAS,EAAE;AAAA,cACT,EAAE,OAAO;AAAA,gBACP,UAAU,EAAE,OAAO;AAAA,gBACnB,UAAU,EAAE,OAAO,EAAE,KAAK;AAAA,gBAC1B,gBAAgB,EAAE,OAAO,EAAE,KAAK;AAAA,gBAChC,SAAS,EAAE,OAAO,EAAE,SAAS;AAAA,gBAC7B,QAAQ,EAAE,QAAQ,QAAQ;AAAA,cAC5B,CAAC;AAAA,YACH;AAAA,UACF,CAAC;AAAA,QACH;AAAA,MACF;AAAA,MACA,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,aAAa,QAAQ,YAAY;AAAA,QAC7D,EAAE,QAAQ,KAAK,aAAa,qBAAqB,QAAQ,qBAAqB;AAAA,QAC9E,EAAE,QAAQ,KAAK,aAAa,2BAA2B,QAAQ,YAAY;AAAA,MAC7E;AAAA,IACF;AAAA,EACF;AACF;",
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { secretEqual } from '@open-mercato/core/modules/customer_accounts/lib/secretCompare'\nimport { DomainMappingService } from '@open-mercato/core/modules/customer_accounts/services/domainMappingService'\nimport { rateLimitErrorSchema } from '@open-mercato/shared/lib/ratelimit/helpers'\nimport {\n  checkAuthRateLimit,\n  domainResolveAllIpRateLimitConfig,\n} from '@open-mercato/core/modules/customer_accounts/lib/rateLimiter'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('customer_accounts').child({ component: 'domain-resolve-all' })\n\nconst ORIGIN_HEADER_NAME = process.env.CUSTOMER_DOMAIN_ORIGIN_HEADER ?? 'X-Open-Mercato-Origin'\nconst ENDPOINT_PATH = '/api/customer_accounts/domain-resolve/all'\n\nexport const metadata = {\n  GET: { requireAuth: false },\n}\n\nfunction withOriginHeader(response: NextResponse): NextResponse {\n  response.headers.set(ORIGIN_HEADER_NAME, '1')\n  return response\n}\n\nfunction readCallerIp(req: Request): string {\n  const forwardedFor = req.headers.get('x-forwarded-for')\n  if (forwardedFor) {\n    const firstHop = forwardedFor.split(',')[0]?.trim()\n    if (firstHop) return firstHop\n  }\n  const realIp = req.headers.get('x-real-ip')\n  if (realIp && realIp.trim().length > 0) return realIp.trim()\n  return 'unknown'\n}\n\nexport async function GET(req: Request) {\n  const callerIp = readCallerIp(req)\n  const expected = process.env.DOMAIN_RESOLVE_SECRET\n  if (!expected) {\n    // Fail closed when the gating secret is not configured on the server.\n    logger.warn('Rejected request \u2014 secret not configured', {\n      endpoint: ENDPOINT_PATH,\n      ip: callerIp,\n      outcome: 'misconfigured',\n    })\n    return withOriginHeader(\n      NextResponse.json(\n        { ok: false, error: 'DOMAIN_RESOLVE_SECRET is not configured on the server' },\n        { status: 503 },\n      ),\n    )\n  }\n\n  // Rate-limit by caller IP before the secret comparison to make leak-driven\n  // enumeration noisy and bounded. Fails closed (returns the helper's 429\n  // response) when the limit is exceeded.\n  const { error: rateLimitError } = await checkAuthRateLimit({\n    req,\n    ipConfig: domainResolveAllIpRateLimitConfig,\n  })\n  if (rateLimitError) {\n    logger.warn('Rate-limited', {\n      endpoint: ENDPOINT_PATH,\n      ip: callerIp,\n      outcome: 'rate_limited',\n    })\n    return withOriginHeader(rateLimitError)\n  }\n\n  const supplied = req.headers.get('x-domain-resolve-secret')\n  if (!secretEqual(supplied, expected)) {\n    logger.warn('Rejected request \u2014 invalid secret', {\n      endpoint: ENDPOINT_PATH,\n      ip: callerIp,\n      outcome: 'forbidden',\n    })\n    return withOriginHeader(NextResponse.json({ ok: false, error: 'Forbidden' }, { status: 403 }))\n  }\n\n  const container = await createRequestContainer()\n  const service = container.resolve('domainMappingService') as DomainMappingService\n  const records = await service.resolveAll()\n  logger.info('Authorized', {\n    endpoint: ENDPOINT_PATH,\n    ip: callerIp,\n    outcome: 'ok',\n    domains: records.length,\n  })\n  return withOriginHeader(\n    NextResponse.json({\n      ok: true,\n      domains: records.map((r) => ({\n        hostname: r.hostname,\n        tenantId: r.tenantId,\n        organizationId: r.organizationId,\n        orgSlug: r.orgSlug,\n        status: r.status,\n      })),\n    }),\n  )\n}\n\nconst errorSchema = z.object({ ok: z.literal(false), error: z.string() })\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'CustomerAccounts',\n  summary: 'Batch resolve all active custom domains',\n  methods: {\n    GET: {\n      summary: 'Batch warm-up for the Node middleware',\n      description:\n        'Returns every active domain mapping in a single payload so the middleware can populate its cache on process start. Requires X-Domain-Resolve-Secret header.',\n      responses: [\n        {\n          status: 200,\n          description: 'OK',\n          schema: z.object({\n            ok: z.literal(true),\n            domains: z.array(\n              z.object({\n                hostname: z.string(),\n                tenantId: z.string().uuid(),\n                organizationId: z.string().uuid(),\n                orgSlug: z.string().nullable(),\n                status: z.literal('active'),\n              }),\n            ),\n          }),\n        },\n      ],\n      errors: [\n        { status: 403, description: 'Forbidden', schema: errorSchema },\n        { status: 429, description: 'Too many requests', schema: rateLimitErrorSchema },\n        { status: 503, description: 'Server misconfiguration', schema: errorSchema },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAElB,SAAS,8BAA8B;AACvC,SAAS,mBAAmB;AAE5B,SAAS,4BAA4B;AACrC;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,mBAAmB,EAAE,MAAM,EAAE,WAAW,qBAAqB,CAAC;AAE1F,MAAM,qBAAqB,QAAQ,IAAI,iCAAiC;AACxE,MAAM,gBAAgB;AAEf,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM;AAC5B;AAEA,SAAS,iBAAiB,UAAsC;AAC9D,WAAS,QAAQ,IAAI,oBAAoB,GAAG;AAC5C,SAAO;AACT;AAEA,SAAS,aAAa,KAAsB;AAC1C,QAAM,eAAe,IAAI,QAAQ,IAAI,iBAAiB;AACtD,MAAI,cAAc;AAChB,UAAM,WAAW,aAAa,MAAM,GAAG,EAAE,CAAC,GAAG,KAAK;AAClD,QAAI,SAAU,QAAO;AAAA,EACvB;AACA,QAAM,SAAS,IAAI,QAAQ,IAAI,WAAW;AAC1C,MAAI,UAAU,OAAO,KAAK,EAAE,SAAS,EAAG,QAAO,OAAO,KAAK;AAC3D,SAAO;AACT;AAEA,eAAsB,IAAI,KAAc;AACtC,QAAM,WAAW,aAAa,GAAG;AACjC,QAAM,WAAW,QAAQ,IAAI;AAC7B,MAAI,CAAC,UAAU;AAEb,WAAO,KAAK,iDAA4C;AAAA,MACtD,UAAU;AAAA,MACV,IAAI;AAAA,MACJ,SAAS;AAAA,IACX,CAAC;AACD,WAAO;AAAA,MACL,aAAa;AAAA,QACX,EAAE,IAAI,OAAO,OAAO,wDAAwD;AAAA,QAC5E,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAAA,EACF;AAKA,QAAM,EAAE,OAAO,eAAe,IAAI,MAAM,mBAAmB;AAAA,IACzD;AAAA,IACA,UAAU;AAAA,EACZ,CAAC;AACD,MAAI,gBAAgB;AAClB,WAAO,KAAK,gBAAgB;AAAA,MAC1B,UAAU;AAAA,MACV,IAAI;AAAA,MACJ,SAAS;AAAA,IACX,CAAC;AACD,WAAO,iBAAiB,cAAc;AAAA,EACxC;AAEA,QAAM,WAAW,IAAI,QAAQ,IAAI,yBAAyB;AAC1D,MAAI,CAAC,YAAY,UAAU,QAAQ,GAAG;AACpC,WAAO,KAAK,0CAAqC;AAAA,MAC/C,UAAU;AAAA,MACV,IAAI;AAAA,MACJ,SAAS;AAAA,IACX,CAAC;AACD,WAAO,iBAAiB,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,YAAY,GAAG,EAAE,QAAQ,IAAI,CAAC,CAAC;AAAA,EAC/F;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,UAAU,UAAU,QAAQ,sBAAsB;AACxD,QAAM,UAAU,MAAM,QAAQ,WAAW;AACzC,SAAO,KAAK,cAAc;AAAA,IACxB,UAAU;AAAA,IACV,IAAI;AAAA,IACJ,SAAS;AAAA,IACT,SAAS,QAAQ;AAAA,EACnB,CAAC;AACD,SAAO;AAAA,IACL,aAAa,KAAK;AAAA,MAChB,IAAI;AAAA,MACJ,SAAS,QAAQ,IAAI,CAAC,OAAO;AAAA,QAC3B,UAAU,EAAE;AAAA,QACZ,UAAU,EAAE;AAAA,QACZ,gBAAgB,EAAE;AAAA,QAClB,SAAS,EAAE;AAAA,QACX,QAAQ,EAAE;AAAA,MACZ,EAAE;AAAA,IACJ,CAAC;AAAA,EACH;AACF;AAEA,MAAM,cAAc,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,KAAK,GAAG,OAAO,EAAE,OAAO,EAAE,CAAC;AAEjE,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,aACE;AAAA,MACF,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO;AAAA,YACf,IAAI,EAAE,QAAQ,IAAI;AAAA,YAClB,SAAS,EAAE;AAAA,cACT,EAAE,OAAO;AAAA,gBACP,UAAU,EAAE,OAAO;AAAA,gBACnB,UAAU,EAAE,OAAO,EAAE,KAAK;AAAA,gBAC1B,gBAAgB,EAAE,OAAO,EAAE,KAAK;AAAA,gBAChC,SAAS,EAAE,OAAO,EAAE,SAAS;AAAA,gBAC7B,QAAQ,EAAE,QAAQ,QAAQ;AAAA,cAC5B,CAAC;AAAA,YACH;AAAA,UACF,CAAC;AAAA,QACH;AAAA,MACF;AAAA,MACA,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,aAAa,QAAQ,YAAY;AAAA,QAC7D,EAAE,QAAQ,KAAK,aAAa,qBAAqB,QAAQ,qBAAqB;AAAA,QAC9E,EAAE,QAAQ,KAAK,aAAa,2BAA2B,QAAQ,YAAY;AAAA,MAC7E;AAAA,IACF;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/modules/customer_accounts/api/signup.js

@@ -23,6 +23,8 @@ import {
   TenantResolutionError
 } from "@open-mercato/core/modules/customer_accounts/lib/resolveTenantContext";
 import { urlForCustomerOrg } from "@open-mercato/core/modules/customer_accounts/lib/customerUrl";
+import { createLogger } from "@open-mercato/shared/lib/logger";
+const logger = createLogger("customer_accounts").child({ component: "signup" });
 const metadata = { requireAuth: false };
 const TIMING_EQUALIZATION_HASH = "$2b$10$.F2A6UHFzk.d8trNdfqt4OLz05Nf3IOuMmN6VJKflhD4.rz.prR8i";
 function resolvePortalLoginUrl(baseUrl, organizationSlug) {
@@ -117,7 +119,7 @@ async function POST(req) {
       subject: subject2,
       react: CustomerExistingAccountEmail({ loginUrl, copy: copy2 })
     }).catch((error) => {
-      console.error("[customer_accounts.signup] existing-account email failed", error);
+      logger.error("Existing-account email failed", { err: error });
     });
     return NextResponse.json({ ok: true }, { status: 202 });
   }
@@ -163,7 +165,7 @@ async function POST(req) {
     subject,
     react: CustomerSignupVerificationEmail({ verifyUrl, copy })
   }).catch((error) => {
-    console.error("[customer_accounts.signup] verification email failed", error);
+    logger.error("Verification email failed", { err: error });
   });
   void emitCustomerAccountsEvent("customer_accounts.user.created", {
     id: user.id,

package/dist/modules/customer_accounts/api/signup.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/customer_accounts/api/signup.ts"],
-  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { compare as bcryptCompare } from 'bcryptjs'\nimport { z } from 'zod'\nimport type { OpenApiRouteDoc, OpenApiMethodDoc } from '@open-mercato/shared/lib/openapi'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { sendEmail } from '@open-mercato/shared/lib/email/send'\nimport { signupSchema } from '@open-mercato/core/modules/customer_accounts/data/validators'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { CustomerUserService } from '@open-mercato/core/modules/customer_accounts/services/customerUserService'\nimport { CustomerTokenService } from '@open-mercato/core/modules/customer_accounts/services/customerTokenService'\nimport { CustomerRole, CustomerUserRole } from '@open-mercato/core/modules/customer_accounts/data/entities'\nimport { emitCustomerAccountsEvent } from '@open-mercato/core/modules/customer_accounts/events'\nimport CustomerSignupVerificationEmail from '@open-mercato/core/modules/customer_accounts/emails/CustomerSignupVerificationEmail'\nimport CustomerExistingAccountEmail from '@open-mercato/core/modules/customer_accounts/emails/CustomerExistingAccountEmail'\nimport { rateLimitErrorSchema } from '@open-mercato/shared/lib/ratelimit/helpers'\nimport {\n  checkAuthRateLimit,\n  customerSignupRateLimitConfig,\n  customerSignupIpRateLimitConfig,\n} from '@open-mercato/core/modules/customer_accounts/lib/rateLimiter'\nimport { readNormalizedEmailFromJsonRequest } from '@open-mercato/core/modules/customer_accounts/lib/rateLimitIdentifier'\nimport { findOrganizationInTenant } from '@open-mercato/core/modules/customer_accounts/lib/organizationLookup'\nimport { getSecurityEmailBaseUrl, mapSecurityEmailUrlError } from '@open-mercato/shared/lib/url'\nimport {\n  resolveTenantContext,\n  TenantResolutionError,\n} from '@open-mercato/core/modules/customer_accounts/lib/resolveTenantContext'\nimport { urlForCustomerOrg } from '@open-mercato/core/modules/customer_accounts/lib/customerUrl'\n\nexport const metadata: { path?: string; requireAuth?: boolean } = { requireAuth: false }\n\n// Precomputed bcrypt cost-10 hash of an unknowable random 32-byte input; used to equalize\n// response latency between the existing-user and new-user signup branches so the endpoint's\n// 202-for-both contract is not undone by a timing side channel.\nconst TIMING_EQUALIZATION_HASH = '$2b$10$.F2A6UHFzk.d8trNdfqt4OLz05Nf3IOuMmN6VJKflhD4.rz.prR8i'\nfunction resolvePortalLoginUrl(baseUrl: string, organizationSlug?: string | null): string {\n  return organizationSlug\n    ? `${baseUrl}/${organizationSlug}/portal/login`\n    : `${baseUrl}/portal/login`\n}\n\nfunction resolvePortalVerifyUrl(baseUrl: string, token: string, organizationSlug?: string | null): string {\n  const route = organizationSlug\n    ? `${baseUrl}/${organizationSlug}/portal/verify`\n    : `${baseUrl}/portal/verify`\n  return `${route}?token=${encodeURIComponent(token)}`\n}\n\nexport async function POST(req: Request) {\n  const rateLimitEmail = await readNormalizedEmailFromJsonRequest(req)\n  const { error: rateLimitError } = await checkAuthRateLimit({\n    req,\n    ipConfig: customerSignupIpRateLimitConfig,\n    compoundConfig: customerSignupRateLimitConfig,\n    compoundIdentifier: rateLimitEmail,\n  })\n  if (rateLimitError) return rateLimitError\n\n  let body: unknown\n  try {\n    body = await req.json()\n  } catch {\n    return NextResponse.json({ ok: false, error: 'Invalid request body' }, { status: 400 })\n  }\n\n  const parsed = signupSchema.safeParse(body)\n  if (!parsed.success) {\n    return NextResponse.json({ ok: false, error: 'Validation failed', details: parsed.error.flatten().fieldErrors }, { status: 400 })\n  }\n\n  const { email, password, displayName } = parsed.data\n  let tenantId: string\n  let organizationId: string | null\n  try {\n    const context = await resolveTenantContext(req, parsed.data.tenantId, {\n      organizationId: parsed.data.organizationId ?? null,\n    })\n    tenantId = context.tenantId\n    organizationId = context.organizationId ?? parsed.data.organizationId ?? null\n  } catch (err) {\n    if (err instanceof TenantResolutionError) {\n      return NextResponse.json({ ok: false, error: err.message }, { status: err.status })\n    }\n    throw err\n  }\n  if (!organizationId) {\n    return NextResponse.json({ ok: false, error: 'organizationId is required' }, { status: 400 })\n  }\n\n  let baseUrl: string\n  try {\n    baseUrl = getSecurityEmailBaseUrl(req)\n  } catch (error) {\n    const mapped = mapSecurityEmailUrlError(error, {\n      scope: 'customer_accounts.signup',\n      configMessage: 'Customer signup is not configured',\n    })\n    if (mapped) return NextResponse.json(mapped.body, { status: mapped.status })\n    throw error\n  }\n\n  const container = await createRequestContainer()\n  const customerUserService = container.resolve('customerUserService') as CustomerUserService\n  const customerTokenService = container.resolve('customerTokenService') as CustomerTokenService\n  const em = container.resolve('em') as import('@mikro-orm/postgresql').EntityManager\n  const { translate } = await resolveTranslations()\n\n  const orgRow = await findOrganizationInTenant(em, organizationId, tenantId)\n  if (!orgRow) {\n    return NextResponse.json({ ok: false, error: 'Registration could not be completed' }, { status: 400 })\n  }\n\n  const existing = await customerUserService.findByEmail(email, tenantId)\n  if (existing) {\n    await bcryptCompare(password, TIMING_EQUALIZATION_HASH)\n    const existingOrg = await findOrganizationInTenant(em, existing.organizationId, tenantId)\n    // Prefer the org's active custom domain when available; fall back to the\n    // platform login URL preserved by `resolvePortalLoginUrl`.\n    let loginUrl = resolvePortalLoginUrl(baseUrl, existingOrg?.slug ?? null)\n    try {\n      loginUrl = await urlForCustomerOrg(existing.organizationId, '/login', { container })\n    } catch {\n      // Fall back to platform URL on any resolution issue.\n    }\n    const subject = translate('customer_accounts.signup.existing.subject', 'You already have a portal account')\n    const copy = {\n      preview: translate('customer_accounts.signup.existing.preview', 'A sign-up attempt was made for an email that already has a portal account.'),\n      title: translate('customer_accounts.signup.existing.title', 'You already have a portal account'),\n      body: translate(\n        'customer_accounts.signup.existing.body',\n        'A sign-up request was made for this email address. You can sign in with your existing account. If you forgot your password, use the password reset option on the sign-in page.',\n      ),\n      cta: translate('customer_accounts.signup.existing.cta', 'Open sign-in page'),\n      hint: translate(\n        'customer_accounts.signup.existing.hint',\n        'If this was not you, you can ignore this message. No new portal account was created.',\n      ),\n    }\n\n    void sendEmail({\n      to: existing.email,\n      subject,\n      react: CustomerExistingAccountEmail({ loginUrl, copy }),\n    }).catch((error) => {\n      console.error('[customer_accounts.signup] existing-account email failed', error)\n    })\n\n    return NextResponse.json({ ok: true }, { status: 202 })\n  }\n\n  const user = await customerUserService.createUser(email, password, displayName, { tenantId, organizationId })\n\n  const defaultRole = await em.findOne(CustomerRole, {\n    tenantId,\n    isDefault: true,\n    deletedAt: null,\n  })\n  if (defaultRole) {\n    const userRole = em.create(CustomerUserRole, {\n      user,\n      role: defaultRole,\n      createdAt: new Date(),\n    } as any)\n    em.persist(userRole)\n  }\n\n  await em.persist(user).flush()\n\n  const verificationToken = await customerTokenService.createEmailVerification(user.id, tenantId)\n  let verifyUrl = resolvePortalVerifyUrl(baseUrl, verificationToken, orgRow.slug)\n  try {\n    verifyUrl = await urlForCustomerOrg(organizationId, `/verify?token=${encodeURIComponent(verificationToken)}`, {\n      container,\n    })\n  } catch {\n    // Fall back to the platform-derived URL on any resolution issue.\n  }\n  const subject = translate('customer_accounts.signup.created.subject', 'Verify your portal account')\n  const copy = {\n    preview: translate('customer_accounts.signup.created.preview', 'Verify your portal account to finish sign-up.'),\n    title: translate('customer_accounts.signup.created.title', 'Verify your portal account'),\n    body: translate(\n      'customer_accounts.signup.created.body',\n      'Your account request was accepted. Confirm your email address to finish setting up portal access.',\n    ),\n    cta: translate('customer_accounts.signup.created.cta', 'Verify email address'),\n    hint: translate(\n      'customer_accounts.signup.created.hint',\n      'This verification link expires in 24 hours. If you did not request this, you can ignore this email.',\n    ),\n  }\n\n  void sendEmail({\n    to: user.email,\n    subject,\n    react: CustomerSignupVerificationEmail({ verifyUrl, copy }),\n  }).catch((error) => {\n    console.error('[customer_accounts.signup] verification email failed', error)\n  })\n\n  void emitCustomerAccountsEvent('customer_accounts.user.created', {\n    id: user.id,\n    email: user.email,\n    tenantId,\n    organizationId,\n  }).catch(() => undefined)\n\n  return NextResponse.json({ ok: true }, { status: 202 })\n}\n\nconst signupAcceptedSchema = z.object({ ok: z.literal(true) })\n\nconst errorSchema = z.object({\n  ok: z.literal(false),\n  error: z.string(),\n})\n\nconst methodDoc: OpenApiMethodDoc = {\n  summary: 'Register a new customer account',\n  description: 'Accepts a signup request and always returns 202 to prevent account enumeration.',\n  tags: ['Customer Authentication'],\n  requestBody: {\n    schema: signupSchema,\n    description: 'Signup payload with email, password, and display name.',\n  },\n  responses: [\n    { status: 202, description: 'Signup accepted', schema: signupAcceptedSchema },\n  ],\n  errors: [\n    { status: 400, description: 'Validation failed or invalid request origin', schema: errorSchema },\n    { status: 429, description: 'Too many signup attempts', schema: rateLimitErrorSchema },\n    { status: 500, description: 'Signup email origin is not configured', schema: errorSchema },\n  ],\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  summary: 'Customer account registration',\n  description: 'Handles customer self-registration without revealing whether the email already exists.',\n  methods: { POST: methodDoc },\n}\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,WAAW,qBAAqB;AACzC,SAAS,SAAS;AAElB,SAAS,2BAA2B;AACpC,SAAS,iBAAiB;AAC1B,SAAS,oBAAoB;AAC7B,SAAS,8BAA8B;AAGvC,SAAS,cAAc,wBAAwB;AAC/C,SAAS,iCAAiC;AAC1C,OAAO,qCAAqC;AAC5C,OAAO,kCAAkC;AACzC,SAAS,4BAA4B;AACrC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,0CAA0C;AACnD,SAAS,gCAAgC;AACzC,SAAS,yBAAyB,gCAAgC;AAClE;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAS,yBAAyB;AAE3B,MAAM,WAAqD,EAAE,aAAa,MAAM;AAKvF,MAAM,2BAA2B;AACjC,SAAS,sBAAsB,SAAiB,kBAA0C;AACxF,SAAO,mBACH,GAAG,OAAO,IAAI,gBAAgB,kBAC9B,GAAG,OAAO;AAChB;AAEA,SAAS,uBAAuB,SAAiB,OAAe,kBAA0C;AACxG,QAAM,QAAQ,mBACV,GAAG,OAAO,IAAI,gBAAgB,mBAC9B,GAAG,OAAO;AACd,SAAO,GAAG,KAAK,UAAU,mBAAmB,KAAK,CAAC;AACpD;AAEA,eAAsB,KAAK,KAAc;AACvC,QAAM,iBAAiB,MAAM,mCAAmC,GAAG;AACnE,QAAM,EAAE,OAAO,eAAe,IAAI,MAAM,mBAAmB;AAAA,IACzD;AAAA,IACA,UAAU;AAAA,IACV,gBAAgB;AAAA,IAChB,oBAAoB;AAAA,EACtB,CAAC;AACD,MAAI,eAAgB,QAAO;AAE3B,MAAI;AACJ,MAAI;AACF,WAAO,MAAM,IAAI,KAAK;AAAA,EACxB,QAAQ;AACN,WAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,uBAAuB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACxF;AAEA,QAAM,SAAS,aAAa,UAAU,IAAI;AAC1C,MAAI,CAAC,OAAO,SAAS;AACnB,WAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,qBAAqB,SAAS,OAAO,MAAM,QAAQ,EAAE,YAAY,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAClI;AAEA,QAAM,EAAE,OAAO,UAAU,YAAY,IAAI,OAAO;AAChD,MAAI;AACJ,MAAI;AACJ,MAAI;AACF,UAAM,UAAU,MAAM,qBAAqB,KAAK,OAAO,KAAK,UAAU;AAAA,MACpE,gBAAgB,OAAO,KAAK,kBAAkB;AAAA,IAChD,CAAC;AACD,eAAW,QAAQ;AACnB,qBAAiB,QAAQ,kBAAkB,OAAO,KAAK,kBAAkB;AAAA,EAC3E,SAAS,KAAK;AACZ,QAAI,eAAe,uBAAuB;AACxC,aAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,IAAI,QAAQ,GAAG,EAAE,QAAQ,IAAI,OAAO,CAAC;AAAA,IACpF;AACA,UAAM;AAAA,EACR;AACA,MAAI,CAAC,gBAAgB;AACnB,WAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,6BAA6B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC9F;AAEA,MAAI;AACJ,MAAI;AACF,cAAU,wBAAwB,GAAG;AAAA,EACvC,SAAS,OAAO;AACd,UAAM,SAAS,yBAAyB,OAAO;AAAA,MAC7C,OAAO;AAAA,MACP,eAAe;AAAA,IACjB,CAAC;AACD,QAAI,OAAQ,QAAO,aAAa,KAAK,OAAO,MAAM,EAAE,QAAQ,OAAO,OAAO,CAAC;AAC3E,UAAM;AAAA,EACR;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,sBAAsB,UAAU,QAAQ,qBAAqB;AACnE,QAAM,uBAAuB,UAAU,QAAQ,sBAAsB;AACrE,QAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,QAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAEhD,QAAM,SAAS,MAAM,yBAAyB,IAAI,gBAAgB,QAAQ;AAC1E,MAAI,CAAC,QAAQ;AACX,WAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,sCAAsC,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACvG;AAEA,QAAM,WAAW,MAAM,oBAAoB,YAAY,OAAO,QAAQ;AACtE,MAAI,UAAU;AACZ,UAAM,cAAc,UAAU,wBAAwB;AACtD,UAAM,cAAc,MAAM,yBAAyB,IAAI,SAAS,gBAAgB,QAAQ;AAGxF,QAAI,WAAW,sBAAsB,SAAS,aAAa,QAAQ,IAAI;AACvE,QAAI;AACF,iBAAW,MAAM,kBAAkB,SAAS,gBAAgB,UAAU,EAAE,UAAU,CAAC;AAAA,IACrF,QAAQ;AAAA,IAER;AACA,UAAMA,WAAU,UAAU,6CAA6C,mCAAmC;AAC1G,UAAMC,QAAO;AAAA,MACX,SAAS,UAAU,6CAA6C,4EAA4E;AAAA,MAC5I,OAAO,UAAU,2CAA2C,mCAAmC;AAAA,MAC/F,MAAM;AAAA,QACJ;AAAA,QACA;AAAA,MACF;AAAA,MACA,KAAK,UAAU,yCAAyC,mBAAmB;AAAA,MAC3E,MAAM;AAAA,QACJ;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAEA,SAAK,UAAU;AAAA,MACb,IAAI,SAAS;AAAA,MACb,SAAAD;AAAA,MACA,OAAO,6BAA6B,EAAE,UAAU,MAAAC,MAAK,CAAC;AAAA,IACxD,CAAC,EAAE,MAAM,CAAC,UAAU;AAClB,cAAQ,MAAM,4DAA4D,KAAK;AAAA,IACjF,CAAC;AAED,WAAO,aAAa,KAAK,EAAE,IAAI,KAAK,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACxD;AAEA,QAAM,OAAO,MAAM,oBAAoB,WAAW,OAAO,UAAU,aAAa,EAAE,UAAU,eAAe,CAAC;AAE5G,QAAM,cAAc,MAAM,GAAG,QAAQ,cAAc;AAAA,IACjD;AAAA,IACA,WAAW;AAAA,IACX,WAAW;AAAA,EACb,CAAC;AACD,MAAI,aAAa;AACf,UAAM,WAAW,GAAG,OAAO,kBAAkB;AAAA,MAC3C;AAAA,MACA,MAAM;AAAA,MACN,WAAW,oBAAI,KAAK;AAAA,IACtB,CAAQ;AACR,OAAG,QAAQ,QAAQ;AAAA,EACrB;AAEA,QAAM,GAAG,QAAQ,IAAI,EAAE,MAAM;AAE7B,QAAM,oBAAoB,MAAM,qBAAqB,wBAAwB,KAAK,IAAI,QAAQ;AAC9F,MAAI,YAAY,uBAAuB,SAAS,mBAAmB,OAAO,IAAI;AAC9E,MAAI;AACF,gBAAY,MAAM,kBAAkB,gBAAgB,iBAAiB,mBAAmB,iBAAiB,CAAC,IAAI;AAAA,MAC5G;AAAA,IACF,CAAC;AAAA,EACH,QAAQ;AAAA,EAER;AACA,QAAM,UAAU,UAAU,4CAA4C,4BAA4B;AAClG,QAAM,OAAO;AAAA,IACX,SAAS,UAAU,4CAA4C,+CAA+C;AAAA,IAC9G,OAAO,UAAU,0CAA0C,4BAA4B;AAAA,IACvF,MAAM;AAAA,MACJ;AAAA,MACA;AAAA,IACF;AAAA,IACA,KAAK,UAAU,wCAAwC,sBAAsB;AAAA,IAC7E,MAAM;AAAA,MACJ;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAEA,OAAK,UAAU;AAAA,IACb,IAAI,KAAK;AAAA,IACT;AAAA,IACA,OAAO,gCAAgC,EAAE,WAAW,KAAK,CAAC;AAAA,EAC5D,CAAC,EAAE,MAAM,CAAC,UAAU;AAClB,YAAQ,MAAM,wDAAwD,KAAK;AAAA,EAC7E,CAAC;AAED,OAAK,0BAA0B,kCAAkC;AAAA,IAC/D,IAAI,KAAK;AAAA,IACT,OAAO,KAAK;AAAA,IACZ;AAAA,IACA;AAAA,EACF,CAAC,EAAE,MAAM,MAAM,MAAS;AAExB,SAAO,aAAa,KAAK,EAAE,IAAI,KAAK,GAAG,EAAE,QAAQ,IAAI,CAAC;AACxD;AAEA,MAAM,uBAAuB,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,IAAI,EAAE,CAAC;AAE7D,MAAM,cAAc,EAAE,OAAO;AAAA,EAC3B,IAAI,EAAE,QAAQ,KAAK;AAAA,EACnB,OAAO,EAAE,OAAO;AAClB,CAAC;AAED,MAAM,YAA8B;AAAA,EAClC,SAAS;AAAA,EACT,aAAa;AAAA,EACb,MAAM,CAAC,yBAAyB;AAAA,EAChC,aAAa;AAAA,IACX,QAAQ;AAAA,IACR,aAAa;AAAA,EACf;AAAA,EACA,WAAW;AAAA,IACT,EAAE,QAAQ,KAAK,aAAa,mBAAmB,QAAQ,qBAAqB;AAAA,EAC9E;AAAA,EACA,QAAQ;AAAA,IACN,EAAE,QAAQ,KAAK,aAAa,+CAA+C,QAAQ,YAAY;AAAA,IAC/F,EAAE,QAAQ,KAAK,aAAa,4BAA4B,QAAQ,qBAAqB;AAAA,IACrF,EAAE,QAAQ,KAAK,aAAa,yCAAyC,QAAQ,YAAY;AAAA,EAC3F;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,SAAS;AAAA,EACT,aAAa;AAAA,EACb,SAAS,EAAE,MAAM,UAAU;AAC7B;",
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { compare as bcryptCompare } from 'bcryptjs'\nimport { z } from 'zod'\nimport type { OpenApiRouteDoc, OpenApiMethodDoc } from '@open-mercato/shared/lib/openapi'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { sendEmail } from '@open-mercato/shared/lib/email/send'\nimport { signupSchema } from '@open-mercato/core/modules/customer_accounts/data/validators'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { CustomerUserService } from '@open-mercato/core/modules/customer_accounts/services/customerUserService'\nimport { CustomerTokenService } from '@open-mercato/core/modules/customer_accounts/services/customerTokenService'\nimport { CustomerRole, CustomerUserRole } from '@open-mercato/core/modules/customer_accounts/data/entities'\nimport { emitCustomerAccountsEvent } from '@open-mercato/core/modules/customer_accounts/events'\nimport CustomerSignupVerificationEmail from '@open-mercato/core/modules/customer_accounts/emails/CustomerSignupVerificationEmail'\nimport CustomerExistingAccountEmail from '@open-mercato/core/modules/customer_accounts/emails/CustomerExistingAccountEmail'\nimport { rateLimitErrorSchema } from '@open-mercato/shared/lib/ratelimit/helpers'\nimport {\n  checkAuthRateLimit,\n  customerSignupRateLimitConfig,\n  customerSignupIpRateLimitConfig,\n} from '@open-mercato/core/modules/customer_accounts/lib/rateLimiter'\nimport { readNormalizedEmailFromJsonRequest } from '@open-mercato/core/modules/customer_accounts/lib/rateLimitIdentifier'\nimport { findOrganizationInTenant } from '@open-mercato/core/modules/customer_accounts/lib/organizationLookup'\nimport { getSecurityEmailBaseUrl, mapSecurityEmailUrlError } from '@open-mercato/shared/lib/url'\nimport {\n  resolveTenantContext,\n  TenantResolutionError,\n} from '@open-mercato/core/modules/customer_accounts/lib/resolveTenantContext'\nimport { urlForCustomerOrg } from '@open-mercato/core/modules/customer_accounts/lib/customerUrl'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('customer_accounts').child({ component: 'signup' })\n\nexport const metadata: { path?: string; requireAuth?: boolean } = { requireAuth: false }\n\n// Precomputed bcrypt cost-10 hash of an unknowable random 32-byte input; used to equalize\n// response latency between the existing-user and new-user signup branches so the endpoint's\n// 202-for-both contract is not undone by a timing side channel.\nconst TIMING_EQUALIZATION_HASH = '$2b$10$.F2A6UHFzk.d8trNdfqt4OLz05Nf3IOuMmN6VJKflhD4.rz.prR8i'\nfunction resolvePortalLoginUrl(baseUrl: string, organizationSlug?: string | null): string {\n  return organizationSlug\n    ? `${baseUrl}/${organizationSlug}/portal/login`\n    : `${baseUrl}/portal/login`\n}\n\nfunction resolvePortalVerifyUrl(baseUrl: string, token: string, organizationSlug?: string | null): string {\n  const route = organizationSlug\n    ? `${baseUrl}/${organizationSlug}/portal/verify`\n    : `${baseUrl}/portal/verify`\n  return `${route}?token=${encodeURIComponent(token)}`\n}\n\nexport async function POST(req: Request) {\n  const rateLimitEmail = await readNormalizedEmailFromJsonRequest(req)\n  const { error: rateLimitError } = await checkAuthRateLimit({\n    req,\n    ipConfig: customerSignupIpRateLimitConfig,\n    compoundConfig: customerSignupRateLimitConfig,\n    compoundIdentifier: rateLimitEmail,\n  })\n  if (rateLimitError) return rateLimitError\n\n  let body: unknown\n  try {\n    body = await req.json()\n  } catch {\n    return NextResponse.json({ ok: false, error: 'Invalid request body' }, { status: 400 })\n  }\n\n  const parsed = signupSchema.safeParse(body)\n  if (!parsed.success) {\n    return NextResponse.json({ ok: false, error: 'Validation failed', details: parsed.error.flatten().fieldErrors }, { status: 400 })\n  }\n\n  const { email, password, displayName } = parsed.data\n  let tenantId: string\n  let organizationId: string | null\n  try {\n    const context = await resolveTenantContext(req, parsed.data.tenantId, {\n      organizationId: parsed.data.organizationId ?? null,\n    })\n    tenantId = context.tenantId\n    organizationId = context.organizationId ?? parsed.data.organizationId ?? null\n  } catch (err) {\n    if (err instanceof TenantResolutionError) {\n      return NextResponse.json({ ok: false, error: err.message }, { status: err.status })\n    }\n    throw err\n  }\n  if (!organizationId) {\n    return NextResponse.json({ ok: false, error: 'organizationId is required' }, { status: 400 })\n  }\n\n  let baseUrl: string\n  try {\n    baseUrl = getSecurityEmailBaseUrl(req)\n  } catch (error) {\n    const mapped = mapSecurityEmailUrlError(error, {\n      scope: 'customer_accounts.signup',\n      configMessage: 'Customer signup is not configured',\n    })\n    if (mapped) return NextResponse.json(mapped.body, { status: mapped.status })\n    throw error\n  }\n\n  const container = await createRequestContainer()\n  const customerUserService = container.resolve('customerUserService') as CustomerUserService\n  const customerTokenService = container.resolve('customerTokenService') as CustomerTokenService\n  const em = container.resolve('em') as import('@mikro-orm/postgresql').EntityManager\n  const { translate } = await resolveTranslations()\n\n  const orgRow = await findOrganizationInTenant(em, organizationId, tenantId)\n  if (!orgRow) {\n    return NextResponse.json({ ok: false, error: 'Registration could not be completed' }, { status: 400 })\n  }\n\n  const existing = await customerUserService.findByEmail(email, tenantId)\n  if (existing) {\n    await bcryptCompare(password, TIMING_EQUALIZATION_HASH)\n    const existingOrg = await findOrganizationInTenant(em, existing.organizationId, tenantId)\n    // Prefer the org's active custom domain when available; fall back to the\n    // platform login URL preserved by `resolvePortalLoginUrl`.\n    let loginUrl = resolvePortalLoginUrl(baseUrl, existingOrg?.slug ?? null)\n    try {\n      loginUrl = await urlForCustomerOrg(existing.organizationId, '/login', { container })\n    } catch {\n      // Fall back to platform URL on any resolution issue.\n    }\n    const subject = translate('customer_accounts.signup.existing.subject', 'You already have a portal account')\n    const copy = {\n      preview: translate('customer_accounts.signup.existing.preview', 'A sign-up attempt was made for an email that already has a portal account.'),\n      title: translate('customer_accounts.signup.existing.title', 'You already have a portal account'),\n      body: translate(\n        'customer_accounts.signup.existing.body',\n        'A sign-up request was made for this email address. You can sign in with your existing account. If you forgot your password, use the password reset option on the sign-in page.',\n      ),\n      cta: translate('customer_accounts.signup.existing.cta', 'Open sign-in page'),\n      hint: translate(\n        'customer_accounts.signup.existing.hint',\n        'If this was not you, you can ignore this message. No new portal account was created.',\n      ),\n    }\n\n    void sendEmail({\n      to: existing.email,\n      subject,\n      react: CustomerExistingAccountEmail({ loginUrl, copy }),\n    }).catch((error) => {\n      logger.error('Existing-account email failed', { err: error })\n    })\n\n    return NextResponse.json({ ok: true }, { status: 202 })\n  }\n\n  const user = await customerUserService.createUser(email, password, displayName, { tenantId, organizationId })\n\n  const defaultRole = await em.findOne(CustomerRole, {\n    tenantId,\n    isDefault: true,\n    deletedAt: null,\n  })\n  if (defaultRole) {\n    const userRole = em.create(CustomerUserRole, {\n      user,\n      role: defaultRole,\n      createdAt: new Date(),\n    } as any)\n    em.persist(userRole)\n  }\n\n  await em.persist(user).flush()\n\n  const verificationToken = await customerTokenService.createEmailVerification(user.id, tenantId)\n  let verifyUrl = resolvePortalVerifyUrl(baseUrl, verificationToken, orgRow.slug)\n  try {\n    verifyUrl = await urlForCustomerOrg(organizationId, `/verify?token=${encodeURIComponent(verificationToken)}`, {\n      container,\n    })\n  } catch {\n    // Fall back to the platform-derived URL on any resolution issue.\n  }\n  const subject = translate('customer_accounts.signup.created.subject', 'Verify your portal account')\n  const copy = {\n    preview: translate('customer_accounts.signup.created.preview', 'Verify your portal account to finish sign-up.'),\n    title: translate('customer_accounts.signup.created.title', 'Verify your portal account'),\n    body: translate(\n      'customer_accounts.signup.created.body',\n      'Your account request was accepted. Confirm your email address to finish setting up portal access.',\n    ),\n    cta: translate('customer_accounts.signup.created.cta', 'Verify email address'),\n    hint: translate(\n      'customer_accounts.signup.created.hint',\n      'This verification link expires in 24 hours. If you did not request this, you can ignore this email.',\n    ),\n  }\n\n  void sendEmail({\n    to: user.email,\n    subject,\n    react: CustomerSignupVerificationEmail({ verifyUrl, copy }),\n  }).catch((error) => {\n    logger.error('Verification email failed', { err: error })\n  })\n\n  void emitCustomerAccountsEvent('customer_accounts.user.created', {\n    id: user.id,\n    email: user.email,\n    tenantId,\n    organizationId,\n  }).catch(() => undefined)\n\n  return NextResponse.json({ ok: true }, { status: 202 })\n}\n\nconst signupAcceptedSchema = z.object({ ok: z.literal(true) })\n\nconst errorSchema = z.object({\n  ok: z.literal(false),\n  error: z.string(),\n})\n\nconst methodDoc: OpenApiMethodDoc = {\n  summary: 'Register a new customer account',\n  description: 'Accepts a signup request and always returns 202 to prevent account enumeration.',\n  tags: ['Customer Authentication'],\n  requestBody: {\n    schema: signupSchema,\n    description: 'Signup payload with email, password, and display name.',\n  },\n  responses: [\n    { status: 202, description: 'Signup accepted', schema: signupAcceptedSchema },\n  ],\n  errors: [\n    { status: 400, description: 'Validation failed or invalid request origin', schema: errorSchema },\n    { status: 429, description: 'Too many signup attempts', schema: rateLimitErrorSchema },\n    { status: 500, description: 'Signup email origin is not configured', schema: errorSchema },\n  ],\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  summary: 'Customer account registration',\n  description: 'Handles customer self-registration without revealing whether the email already exists.',\n  methods: { POST: methodDoc },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,WAAW,qBAAqB;AACzC,SAAS,SAAS;AAElB,SAAS,2BAA2B;AACpC,SAAS,iBAAiB;AAC1B,SAAS,oBAAoB;AAC7B,SAAS,8BAA8B;AAGvC,SAAS,cAAc,wBAAwB;AAC/C,SAAS,iCAAiC;AAC1C,OAAO,qCAAqC;AAC5C,OAAO,kCAAkC;AACzC,SAAS,4BAA4B;AACrC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,0CAA0C;AACnD,SAAS,gCAAgC;AACzC,SAAS,yBAAyB,gCAAgC;AAClE;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAS,yBAAyB;AAClC,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,mBAAmB,EAAE,MAAM,EAAE,WAAW,SAAS,CAAC;AAEvE,MAAM,WAAqD,EAAE,aAAa,MAAM;AAKvF,MAAM,2BAA2B;AACjC,SAAS,sBAAsB,SAAiB,kBAA0C;AACxF,SAAO,mBACH,GAAG,OAAO,IAAI,gBAAgB,kBAC9B,GAAG,OAAO;AAChB;AAEA,SAAS,uBAAuB,SAAiB,OAAe,kBAA0C;AACxG,QAAM,QAAQ,mBACV,GAAG,OAAO,IAAI,gBAAgB,mBAC9B,GAAG,OAAO;AACd,SAAO,GAAG,KAAK,UAAU,mBAAmB,KAAK,CAAC;AACpD;AAEA,eAAsB,KAAK,KAAc;AACvC,QAAM,iBAAiB,MAAM,mCAAmC,GAAG;AACnE,QAAM,EAAE,OAAO,eAAe,IAAI,MAAM,mBAAmB;AAAA,IACzD;AAAA,IACA,UAAU;AAAA,IACV,gBAAgB;AAAA,IAChB,oBAAoB;AAAA,EACtB,CAAC;AACD,MAAI,eAAgB,QAAO;AAE3B,MAAI;AACJ,MAAI;AACF,WAAO,MAAM,IAAI,KAAK;AAAA,EACxB,QAAQ;AACN,WAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,uBAAuB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACxF;AAEA,QAAM,SAAS,aAAa,UAAU,IAAI;AAC1C,MAAI,CAAC,OAAO,SAAS;AACnB,WAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,qBAAqB,SAAS,OAAO,MAAM,QAAQ,EAAE,YAAY,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAClI;AAEA,QAAM,EAAE,OAAO,UAAU,YAAY,IAAI,OAAO;AAChD,MAAI;AACJ,MAAI;AACJ,MAAI;AACF,UAAM,UAAU,MAAM,qBAAqB,KAAK,OAAO,KAAK,UAAU;AAAA,MACpE,gBAAgB,OAAO,KAAK,kBAAkB;AAAA,IAChD,CAAC;AACD,eAAW,QAAQ;AACnB,qBAAiB,QAAQ,kBAAkB,OAAO,KAAK,kBAAkB;AAAA,EAC3E,SAAS,KAAK;AACZ,QAAI,eAAe,uBAAuB;AACxC,aAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,IAAI,QAAQ,GAAG,EAAE,QAAQ,IAAI,OAAO,CAAC;AAAA,IACpF;AACA,UAAM;AAAA,EACR;AACA,MAAI,CAAC,gBAAgB;AACnB,WAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,6BAA6B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC9F;AAEA,MAAI;AACJ,MAAI;AACF,cAAU,wBAAwB,GAAG;AAAA,EACvC,SAAS,OAAO;AACd,UAAM,SAAS,yBAAyB,OAAO;AAAA,MAC7C,OAAO;AAAA,MACP,eAAe;AAAA,IACjB,CAAC;AACD,QAAI,OAAQ,QAAO,aAAa,KAAK,OAAO,MAAM,EAAE,QAAQ,OAAO,OAAO,CAAC;AAC3E,UAAM;AAAA,EACR;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,sBAAsB,UAAU,QAAQ,qBAAqB;AACnE,QAAM,uBAAuB,UAAU,QAAQ,sBAAsB;AACrE,QAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,QAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAEhD,QAAM,SAAS,MAAM,yBAAyB,IAAI,gBAAgB,QAAQ;AAC1E,MAAI,CAAC,QAAQ;AACX,WAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,sCAAsC,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACvG;AAEA,QAAM,WAAW,MAAM,oBAAoB,YAAY,OAAO,QAAQ;AACtE,MAAI,UAAU;AACZ,UAAM,cAAc,UAAU,wBAAwB;AACtD,UAAM,cAAc,MAAM,yBAAyB,IAAI,SAAS,gBAAgB,QAAQ;AAGxF,QAAI,WAAW,sBAAsB,SAAS,aAAa,QAAQ,IAAI;AACvE,QAAI;AACF,iBAAW,MAAM,kBAAkB,SAAS,gBAAgB,UAAU,EAAE,UAAU,CAAC;AAAA,IACrF,QAAQ;AAAA,IAER;AACA,UAAMA,WAAU,UAAU,6CAA6C,mCAAmC;AAC1G,UAAMC,QAAO;AAAA,MACX,SAAS,UAAU,6CAA6C,4EAA4E;AAAA,MAC5I,OAAO,UAAU,2CAA2C,mCAAmC;AAAA,MAC/F,MAAM;AAAA,QACJ;AAAA,QACA;AAAA,MACF;AAAA,MACA,KAAK,UAAU,yCAAyC,mBAAmB;AAAA,MAC3E,MAAM;AAAA,QACJ;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAEA,SAAK,UAAU;AAAA,MACb,IAAI,SAAS;AAAA,MACb,SAAAD;AAAA,MACA,OAAO,6BAA6B,EAAE,UAAU,MAAAC,MAAK,CAAC;AAAA,IACxD,CAAC,EAAE,MAAM,CAAC,UAAU;AAClB,aAAO,MAAM,iCAAiC,EAAE,KAAK,MAAM,CAAC;AAAA,IAC9D,CAAC;AAED,WAAO,aAAa,KAAK,EAAE,IAAI,KAAK,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACxD;AAEA,QAAM,OAAO,MAAM,oBAAoB,WAAW,OAAO,UAAU,aAAa,EAAE,UAAU,eAAe,CAAC;AAE5G,QAAM,cAAc,MAAM,GAAG,QAAQ,cAAc;AAAA,IACjD;AAAA,IACA,WAAW;AAAA,IACX,WAAW;AAAA,EACb,CAAC;AACD,MAAI,aAAa;AACf,UAAM,WAAW,GAAG,OAAO,kBAAkB;AAAA,MAC3C;AAAA,MACA,MAAM;AAAA,MACN,WAAW,oBAAI,KAAK;AAAA,IACtB,CAAQ;AACR,OAAG,QAAQ,QAAQ;AAAA,EACrB;AAEA,QAAM,GAAG,QAAQ,IAAI,EAAE,MAAM;AAE7B,QAAM,oBAAoB,MAAM,qBAAqB,wBAAwB,KAAK,IAAI,QAAQ;AAC9F,MAAI,YAAY,uBAAuB,SAAS,mBAAmB,OAAO,IAAI;AAC9E,MAAI;AACF,gBAAY,MAAM,kBAAkB,gBAAgB,iBAAiB,mBAAmB,iBAAiB,CAAC,IAAI;AAAA,MAC5G;AAAA,IACF,CAAC;AAAA,EACH,QAAQ;AAAA,EAER;AACA,QAAM,UAAU,UAAU,4CAA4C,4BAA4B;AAClG,QAAM,OAAO;AAAA,IACX,SAAS,UAAU,4CAA4C,+CAA+C;AAAA,IAC9G,OAAO,UAAU,0CAA0C,4BAA4B;AAAA,IACvF,MAAM;AAAA,MACJ;AAAA,MACA;AAAA,IACF;AAAA,IACA,KAAK,UAAU,wCAAwC,sBAAsB;AAAA,IAC7E,MAAM;AAAA,MACJ;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAEA,OAAK,UAAU;AAAA,IACb,IAAI,KAAK;AAAA,IACT;AAAA,IACA,OAAO,gCAAgC,EAAE,WAAW,KAAK,CAAC;AAAA,EAC5D,CAAC,EAAE,MAAM,CAAC,UAAU;AAClB,WAAO,MAAM,6BAA6B,EAAE,KAAK,MAAM,CAAC;AAAA,EAC1D,CAAC;AAED,OAAK,0BAA0B,kCAAkC;AAAA,IAC/D,IAAI,KAAK;AAAA,IACT,OAAO,KAAK;AAAA,IACZ;AAAA,IACA;AAAA,EACF,CAAC,EAAE,MAAM,MAAM,MAAS;AAExB,SAAO,aAAa,KAAK,EAAE,IAAI,KAAK,GAAG,EAAE,QAAQ,IAAI,CAAC;AACxD;AAEA,MAAM,uBAAuB,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,IAAI,EAAE,CAAC;AAE7D,MAAM,cAAc,EAAE,OAAO;AAAA,EAC3B,IAAI,EAAE,QAAQ,KAAK;AAAA,EACnB,OAAO,EAAE,OAAO;AAClB,CAAC;AAED,MAAM,YAA8B;AAAA,EAClC,SAAS;AAAA,EACT,aAAa;AAAA,EACb,MAAM,CAAC,yBAAyB;AAAA,EAChC,aAAa;AAAA,IACX,QAAQ;AAAA,IACR,aAAa;AAAA,EACf;AAAA,EACA,WAAW;AAAA,IACT,EAAE,QAAQ,KAAK,aAAa,mBAAmB,QAAQ,qBAAqB;AAAA,EAC9E;AAAA,EACA,QAAQ;AAAA,IACN,EAAE,QAAQ,KAAK,aAAa,+CAA+C,QAAQ,YAAY;AAAA,IAC/F,EAAE,QAAQ,KAAK,aAAa,4BAA4B,QAAQ,qBAAqB;AAAA,IACrF,EAAE,QAAQ,KAAK,aAAa,yCAAyC,QAAQ,YAAY;AAAA,EAC3F;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,SAAS;AAAA,EACT,aAAa;AAAA,EACb,SAAS,EAAE,MAAM,UAAU;AAC7B;",
   "names": ["subject", "copy"]
 }

package/dist/modules/customer_accounts/lib/customerAuthServer.js

@@ -5,6 +5,8 @@ import { CUSTOMER_JWT_AUDIENCE } from "@open-mercato/core/modules/customer_accou
 import { tryNormalizeHostname } from "@open-mercato/core/modules/customer_accounts/lib/hostname";
 import { platformDomains } from "@open-mercato/core/modules/customer_accounts/lib/platformDomains";
 import { validateUserState } from "./customerAuth.js";
+import { createLogger } from "@open-mercato/shared/lib/logger";
+const logger = createLogger("customer_accounts").child({ component: "customer-auth-server" });
 async function assertSessionStillActive(sessionId) {
   try {
     const container = await createRequestContainer();
@@ -66,7 +68,7 @@ async function getCustomerAuthForHost(host) {
     if (!resolved || resolved.status !== "active") return null;
     return getCustomerAuthFromCookies({ expectedTenantId: resolved.tenantId });
   } catch (err) {
-    console.warn("[customer_accounts] getCustomerAuthForHost: domain resolve failed; falling back to platform cookie", err);
+    logger.warn("Domain resolve failed; falling back to platform cookie", { err });
     return getCustomerAuthFromCookies();
   }
 }