@open-mercato/core 0.6.6-develop.6465.1.019f0fb26f → 0.6.6-develop.6471.1.9ab5bdd79a

package/dist/modules/communication_channels/workers/poll-channel.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/communication_channels/workers/poll-channel.ts"],
-  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport type { JobContext, QueuedJob, WorkerMeta } from '@open-mercato/queue'\nimport type { CommandBus } from '@open-mercato/shared/lib/commands'\nimport { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { CommunicationChannel } from '../data/entities'\nimport {\n  COMMUNICATION_CHANNELS_INGEST_INBOUND_COMMAND_ID,\n  type IngestInboundMessageInput,\n} from '../commands/ingest-inbound-message'\nimport { COMMUNICATION_CHANNELS_QUEUES, getCommunicationChannelsQueue } from '../lib/queue'\nimport { preservePushState } from '../lib/push-state'\nimport { writeIngestDeadLetter } from '../lib/dead-letter'\nimport { classifyOutboundError, computeBackoffMs, isReauthError } from '../lib/error-classification'\nimport { refreshCredentialsIfNeeded } from '../lib/credential-refresh'\nimport { emitCommunicationChannelsEvent } from '../events'\nimport type { ChannelAdapterRegistry } from '../lib/registry'\nimport type { NormalizedInboundMessage } from '../lib/adapter'\n\n/**\n * Job payload for the `communication-channels-poll` queue.\n *\n * One job per channel per scheduler tick. The poll-tick worker (sibling file)\n * enumerates due channels and enqueues these jobs.\n */\nexport type PollChannelJobPayload = {\n  channelId: string\n  scope: {\n    tenantId: string\n    organizationId: string | null\n  }\n  /** Attempt count, 1-based; used for retry-backoff decisions. */\n  attempt?: number\n  /** Self-re-enqueue drain counter (bounds the multi-page `hasMore` drain loop). */\n  drainPage?: number\n}\n\nexport const POLL_CHANNEL_MAX_ATTEMPTS = 3\n\n/**\n * Hard cap on `hasMore` self-re-enqueue drain pages \u2014 guards against an adapter\n * that returns `hasMore: true` with a non-advancing (pinned) cursor, which would\n * otherwise spin a tight, unthrottled re-enqueue loop. Mirrors the same guard in\n * `gmail-history-sync`.\n */\nconst MAX_DRAIN_PAGES = 100\n\nexport const metadata: WorkerMeta = {\n  queue: COMMUNICATION_CHANNELS_QUEUES.poll,\n  id: 'communication_channels:poll-channel',\n  concurrency: 10,\n}\n\ntype HandlerContext = JobContext & {\n  resolve: <T = unknown>(name: string) => T\n}\n\ntype CredentialsServiceLike = {\n  resolve: (\n    integrationId: string,\n    scope: { organizationId: string; tenantId: string; userId?: string | null },\n  ) => Promise<Record<string, unknown> | null>\n  save?: (\n    integrationId: string,\n    credentials: Record<string, unknown>,\n    scope: { organizationId: string; tenantId: string; userId?: string | null },\n  ) => Promise<void>\n}\n\n/**\n * Poll a single channel for inbound messages.\n *\n * Per SPEC-045d \u00A7 6 (with email-spec \u00A7 Hub Deltas \u2192 Delta 6 polling extensions):\n *   1. Load the channel; skip when `is_active === false` or `status !== 'connected'`.\n *   2. Skip when the adapter declares `realtimePush !== false` (it doesn't want polling).\n *   3. Refresh credentials if OAuth and within the expiry window.\n *   4. Call `adapter.fetchHistory({ channelId, credentials, since: lastPolledAt })`.\n *   5. For each normalized message, dispatch `ingest_inbound_message` (idempotent on\n *      `(channel_id, external_message_id)`).\n *   6. Update `channel.lastPolledAt = NOW()` on success.\n *   7. On error: classify, set `channel.status` accordingly, set `last_error`, emit\n *      `channel.requires_reauth` on 401, retry transient failures up to MAX.\n *\n * The hub doesn't drain a remote mailbox indefinitely \u2014 `fetchHistory` returns a\n * single page (provider decides the size). If the provider has more, the next tick\n * picks it up after the configured `poll_interval_seconds`.\n */\nexport default async function handle(\n  job: QueuedJob<PollChannelJobPayload>,\n  ctx: HandlerContext,\n): Promise<void> {\n  const { channelId, scope, attempt = 1, drainPage = 0 } = job.payload\n  const em = (ctx.resolve('em') as EntityManager).fork()\n  const adapterRegistry = ctx.resolve<ChannelAdapterRegistry>('channelAdapterRegistry')\n\n  const channel = await findOneWithDecryption(\n    em,\n    CommunicationChannel,\n    {\n      id: channelId,\n      tenantId: scope.tenantId,\n      organizationId: scope.organizationId ?? null,\n      deletedAt: null,\n    },\n    undefined,\n    scope,\n  )\n  if (!channel) {\n    console.warn(\n      `[communication_channels:poll-channel] channel ${channelId} not found (skipping)`,\n    )\n    return\n  }\n  if (!channel.isActive) return\n  // Allow `connected` (normal poll) and `error` (Spec B \u00A7 B5 auto-recovery\n  // sweep enqueues these intentionally \u2014 on a successful poll below we\n  // flip them back to `connected`). `requires_reauth` and `disconnected`\n  // are owned by the credential-refresh and disconnect flows.\n  if (channel.status !== 'connected' && channel.status !== 'error') return\n\n  const adapter = adapterRegistry?.get(channel.providerKey)\n  if (!adapter) {\n    console.warn(\n      `[communication_channels:poll-channel] no adapter for provider '${channel.providerKey}' (channel ${channelId})`,\n    )\n    return\n  }\n  // Adapter opted out of polling \u2014 webhook providers.\n  const capabilities = (channel.capabilities as { realtimePush?: boolean } | null) ?? null\n  if (capabilities?.realtimePush !== false) {\n    // realtimePush is `true` (default for back-compat) \u2014 don't poll push providers.\n    return\n  }\n  if (typeof adapter.fetchHistory !== 'function') {\n    // Adapter doesn't implement history fetching \u2014 nothing we can do.\n    return\n  }\n\n  // Credentials.\n  let credentialsService: CredentialsServiceLike | null = null\n  try {\n    credentialsService = ctx.resolve<CredentialsServiceLike>('integrationCredentialsService')\n  } catch {\n    credentialsService = null\n  }\n  // Per-user credentials scope: pass `channel.userId` so the credentials\n  // service returns this user's row, not whoever connected the provider last.\n  // See review R2-C1 / N1 (2026-05-26).\n  const credentialsScope = {\n    tenantId: scope.tenantId,\n    organizationId: scope.organizationId ?? scope.tenantId,\n    userId: channel.userId ?? null,\n  }\n  let credentials: Record<string, unknown> = {}\n  if (channel.credentialsRef && credentialsService) {\n    try {\n      credentials =\n        (await credentialsService.resolve(`channel_${channel.providerKey}`, credentialsScope)) ?? {}\n    } catch {\n      credentials = {}\n    }\n  }\n  const refreshed = await refreshCredentialsIfNeeded(\n    {\n      adapter,\n      channelId: channel.id,\n      credentials,\n      scope: credentialsScope,\n    },\n    { credentialsService },\n  )\n  credentials = refreshed.credentials\n\n  // Fetch a single page of history.\n  // `channelState` is the provider-specific resumption cursor \u2014 Gmail historyId,\n  // IMAP UIDVALIDITY+UIDNEXT, etc. We persist it across\n  // ticks on `channel.channelState` so each poll resumes from the prior one\n  // instead of running a full mailbox resync. Empty / NULL = \"first poll;\n  // bootstrap the cursor from the provider\".\n  let normalized: NormalizedInboundMessage[] = []\n  let nextCursor: string | undefined\n  let hasMore = false\n  try {\n    const result = await adapter.fetchHistory({\n      conversationId: channel.externalIdentifier ?? channel.id,\n      credentials,\n      cursor: channel.lastPolledAt ? channel.lastPolledAt.toISOString() : undefined,\n      channelState: (channel.channelState as Record<string, unknown> | null) ?? undefined,\n      scope: {\n        tenantId: scope.tenantId,\n        organizationId: scope.organizationId ?? scope.tenantId,\n      },\n      // `contactFilter.sinceDays` is a hint to provider adapters about how far\n      // back to look on first-poll bootstrap. For UID-incremental polls (every\n      // tick after the first), adapters ignore this and just fetch new mail\n      // since the persisted cursor.\n      contactFilter: { addresses: [], sinceDays: 7 },\n    })\n    normalized = Array.isArray(result?.messages) ? result.messages : []\n    nextCursor = result?.nextCursor\n    hasMore = result?.hasMore === true\n  } catch (err) {\n    await handlePollError(err, em, channel, scope, attempt, job.payload)\n    return\n  }\n\n  // Dispatch ingest commands for each message.\n  const commandBus = ctx.resolve<CommandBus>('commandBus')\n  const containerProxy = { resolve: ctx.resolve.bind(ctx) }\n  const commandCtx = {\n    container: containerProxy as never,\n    auth: null,\n    organizationScope: null,\n    selectedOrganizationId: scope.organizationId ?? null,\n    organizationIds: scope.organizationId ? [scope.organizationId] : null,\n  }\n  // Spec B \u00A7 Per-message commit + dead-letter:\n  //   - Permanent failure (malformed MIME, schema, contract violation):\n  //     write to channel_ingest_dead_letter, log, advance cursor anyway so\n  //     the bad blob never stalls the channel again.\n  //   - Transient failure (DB drop, network blip): abort the loop without\n  //     advancing the cursor. The next tick re-fetches the same page;\n  //     idempotency via the (channel_id, external_message_id) unique\n  //     constraint means already-ingested messages no-op on the retry.\n  let transientIngestAbort = false\n  for (const message of normalized) {\n    try {\n      const input: IngestInboundMessageInput = {\n        channelId: channel.id,\n        providerKey: channel.providerKey,\n        channelType: channel.channelType,\n        scope: {\n          tenantId: scope.tenantId,\n          organizationId: scope.organizationId ?? null,\n        },\n        message,\n      }\n      await commandBus.execute(COMMUNICATION_CHANNELS_INGEST_INBOUND_COMMAND_ID, {\n        input,\n        ctx: commandCtx as never,\n      })\n    } catch (err) {\n      const classification = classifyOutboundError(err)\n      if (classification.transient) {\n        console.warn(\n          `[communication_channels:poll-channel] transient ingest failure for channel ${channel.id}; aborting page so cursor is NOT advanced. Reason: ${classification.message}`,\n        )\n        transientIngestAbort = true\n        break\n      }\n      // Permanent \u2014 write to dead-letter so an operator can replay later.\n      // The shared helper is best-effort (never throws) and idempotent on\n      // `(channelId, externalMessageId)`, so a replayed page that fails the\n      // same message again does not insert a duplicate row.\n      await writeIngestDeadLetter({\n        em,\n        scope,\n        channel,\n        message,\n        err,\n        errorMessage: classification.message,\n      })\n      console.warn(\n        `[communication_channels:poll-channel] permanent ingest failure for channel ${channel.id}; recorded in dead-letter and advancing cursor past message ${message.externalMessageId}. Reason: ${classification.message}`,\n      )\n    }\n  }\n\n  // Transient abort: keep prior cursor + lastPolledAt so the next tick\n  // re-fetches the same page (idempotent at the DB layer).\n  if (transientIngestAbort) {\n    channel.lastError = 'transient_ingest_failure'\n    await em.flush()\n    return\n  }\n\n  // Update poll cursor + clear any stale error state.\n  channel.lastPolledAt = new Date()\n  if (channel.lastError) channel.lastError = null\n  // Recover the channel from any prior non-fatal error state. The previous\n  // poll(s) may have set status='error' after exhausting transient-retry\n  // attempts, but a fresh successful poll means the upstream is healthy\n  // again \u2014 flip it back to 'connected' so the scheduler keeps it in\n  // rotation and the user doesn't have to manually reconnect.\n  // We DON'T touch 'requires_reauth' here (that lifecycle state is owned\n  // by the credential-refresh / OAuth flow) or 'disconnected' (owned by\n  // the cascade-on-user-delete subscriber).\n  if (channel.status === 'error') {\n    channel.status = 'connected'\n  }\n  // Providers encode their cursor as base64-encoded JSON in `nextCursor`; we\n  // decode it back to an object so the next tick can pass it straight into\n  // `fetchHistory` as `channelState`. Decode failures fall back to the prior\n  // state (next tick bootstraps from there).\n  //\n  // Push-delivery state (Spec C) \u2014 watch/subscription identifiers and expiry \u2014 is\n  // owned by the push register/renew commands, not the sync cursor. A provider's\n  // `fetchHistory` returns only sync-cursor fields, so persisting the decoded\n  // cursor as a full replace would silently wipe push state and stop\n  // `gmail-renew-watch` from renewing it. Carry\n  // the hub-owned push keys forward whenever the new cursor omits them.\n  if (typeof nextCursor === 'string' && nextCursor.length > 0) {\n    const decoded = decodeChannelStateCursor(nextCursor)\n    if (decoded) {\n      channel.channelState = preservePushState(channel.channelState, decoded)\n    }\n  }\n  await em.flush()\n\n  // Drain contract (review H1, 2026-05-26): adapters that have additional\n  // pages beyond this tick's batch (large mailboxes, mid-deltaLink walks,\n  // UID overflows) signal `hasMore: true`. The persisted `channelState`\n  // already encodes the mid-drain resumption token (Gmail `pendingHistoryPageToken`,\n  // IMAP non-terminal `uidNext`). Re-enqueue with\n  // a small delay so we keep draining without overrunning rate limits.\n  if (hasMore) {\n    // Bound the drain: an adapter that returns `hasMore: true` with a\n    // non-advancing cursor (e.g. a persistently-failing message that pins the\n    // Gmail cursor via `hardFailed`) must not spin an unthrottled loop. Stop\n    // at MAX_DRAIN_PAGES; the next scheduled poll tick re-checks the channel.\n    if (drainPage < MAX_DRAIN_PAGES) {\n      const queue = getCommunicationChannelsQueue(COMMUNICATION_CHANNELS_QUEUES.poll)\n      await queue.enqueue(\n        { channelId: channel.id, scope, attempt: 1, drainPage: drainPage + 1 } as unknown as Record<string, unknown>,\n        { delayMs: 250 },\n      )\n    } else {\n      console.warn(\n        `[communication_channels:poll-channel] drain page cap (${MAX_DRAIN_PAGES}) reached for channel ${channel.id}; stopping re-enqueue until the next scheduled tick`,\n      )\n    }\n  }\n}\n\nfunction decodeChannelStateCursor(cursor: string): Record<string, unknown> | null {\n  try {\n    const decoded = Buffer.from(cursor, 'base64').toString('utf8')\n    const parsed = JSON.parse(decoded) as unknown\n    if (parsed && typeof parsed === 'object' && !Array.isArray(parsed)) {\n      return parsed as Record<string, unknown>\n    }\n    return null\n  } catch {\n    return null\n  }\n}\n\nasync function handlePollError(\n  err: unknown,\n  em: EntityManager,\n  channel: CommunicationChannel,\n  scope: PollChannelJobPayload['scope'],\n  attempt: number,\n  payload: PollChannelJobPayload,\n): Promise<void> {\n  const classification = classifyOutboundError(err)\n  channel.lastError = classification.message\n\n  if (isReauthError(classification)) {\n    channel.status = 'requires_reauth'\n    await em.flush()\n    await emitCommunicationChannelsEvent(\n      'communication_channels.channel.requires_reauth',\n      {\n        channelId: channel.id,\n        providerKey: channel.providerKey,\n        channelType: channel.channelType,\n        reason: classification.message,\n        tenantId: scope.tenantId,\n        organizationId: scope.organizationId ?? null,\n      },\n      { persistent: true },\n    )\n    return\n  }\n\n  if (classification.transient && attempt < POLL_CHANNEL_MAX_ATTEMPTS) {\n    // Transient error \u2014 re-enqueue with backoff. Channel status stays\n    // `connected` so the scheduler keeps it in rotation.\n    await em.flush()\n    const next: PollChannelJobPayload = { ...payload, attempt: attempt + 1 }\n    const queue = getCommunicationChannelsQueue(COMMUNICATION_CHANNELS_QUEUES.poll)\n    await queue.enqueue(next as unknown as Record<string, unknown>, {\n      delayMs: computeBackoffMs(attempt),\n    })\n    return\n  }\n\n  // Permanent or attempts exhausted \u2014 mark channel as error and stop the loop.\n  channel.status = 'error'\n  await em.flush()\n}\n"],
-  "mappings": "AAGA,SAAS,6BAA6B;AACtC,SAAS,4BAA4B;AACrC;AAAA,EACE;AAAA,OAEK;AACP,SAAS,+BAA+B,qCAAqC;AAC7E,SAAS,yBAAyB;AAClC,SAAS,6BAA6B;AACtC,SAAS,uBAAuB,kBAAkB,qBAAqB;AACvE,SAAS,kCAAkC;AAC3C,SAAS,sCAAsC;AAsBxC,MAAM,4BAA4B;AAQzC,MAAM,kBAAkB;AAEjB,MAAM,WAAuB;AAAA,EAClC,OAAO,8BAA8B;AAAA,EACrC,IAAI;AAAA,EACJ,aAAa;AACf;AAoCA,eAAO,OACL,KACA,KACe;AACf,QAAM,EAAE,WAAW,OAAO,UAAU,GAAG,YAAY,EAAE,IAAI,IAAI;AAC7D,QAAM,KAAM,IAAI,QAAQ,IAAI,EAAoB,KAAK;AACrD,QAAM,kBAAkB,IAAI,QAAgC,wBAAwB;AAEpF,QAAM,UAAU,MAAM;AAAA,IACpB;AAAA,IACA;AAAA,IACA;AAAA,MACE,IAAI;AAAA,MACJ,UAAU,MAAM;AAAA,MAChB,gBAAgB,MAAM,kBAAkB;AAAA,MACxC,WAAW;AAAA,IACb;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACA,MAAI,CAAC,SAAS;AACZ,YAAQ;AAAA,MACN,iDAAiD,SAAS;AAAA,IAC5D;AACA;AAAA,EACF;AACA,MAAI,CAAC,QAAQ,SAAU;AAKvB,MAAI,QAAQ,WAAW,eAAe,QAAQ,WAAW,QAAS;AAElE,QAAM,UAAU,iBAAiB,IAAI,QAAQ,WAAW;AACxD,MAAI,CAAC,SAAS;AACZ,YAAQ;AAAA,MACN,kEAAkE,QAAQ,WAAW,cAAc,SAAS;AAAA,IAC9G;AACA;AAAA,EACF;AAEA,QAAM,eAAgB,QAAQ,gBAAsD;AACpF,MAAI,cAAc,iBAAiB,OAAO;AAExC;AAAA,EACF;AACA,MAAI,OAAO,QAAQ,iBAAiB,YAAY;AAE9C;AAAA,EACF;AAGA,MAAI,qBAAoD;AACxD,MAAI;AACF,yBAAqB,IAAI,QAAgC,+BAA+B;AAAA,EAC1F,QAAQ;AACN,yBAAqB;AAAA,EACvB;AAIA,QAAM,mBAAmB;AAAA,IACvB,UAAU,MAAM;AAAA,IAChB,gBAAgB,MAAM,kBAAkB,MAAM;AAAA,IAC9C,QAAQ,QAAQ,UAAU;AAAA,EAC5B;AACA,MAAI,cAAuC,CAAC;AAC5C,MAAI,QAAQ,kBAAkB,oBAAoB;AAChD,QAAI;AACF,oBACG,MAAM,mBAAmB,QAAQ,WAAW,QAAQ,WAAW,IAAI,gBAAgB,KAAM,CAAC;AAAA,IAC/F,QAAQ;AACN,oBAAc,CAAC;AAAA,IACjB;AAAA,EACF;AACA,QAAM,YAAY,MAAM;AAAA,IACtB;AAAA,MACE;AAAA,MACA,WAAW,QAAQ;AAAA,MACnB;AAAA,MACA,OAAO;AAAA,IACT;AAAA,IACA,EAAE,mBAAmB;AAAA,EACvB;AACA,gBAAc,UAAU;AAQxB,MAAI,aAAyC,CAAC;AAC9C,MAAI;AACJ,MAAI,UAAU;AACd,MAAI;AACF,UAAM,SAAS,MAAM,QAAQ,aAAa;AAAA,MACxC,gBAAgB,QAAQ,sBAAsB,QAAQ;AAAA,MACtD;AAAA,MACA,QAAQ,QAAQ,eAAe,QAAQ,aAAa,YAAY,IAAI;AAAA,MACpE,cAAe,QAAQ,gBAAmD;AAAA,MAC1E,OAAO;AAAA,QACL,UAAU,MAAM;AAAA,QAChB,gBAAgB,MAAM,kBAAkB,MAAM;AAAA,MAChD;AAAA;AAAA;AAAA;AAAA;AAAA,MAKA,eAAe,EAAE,WAAW,CAAC,GAAG,WAAW,EAAE;AAAA,IAC/C,CAAC;AACD,iBAAa,MAAM,QAAQ,QAAQ,QAAQ,IAAI,OAAO,WAAW,CAAC;AAClE,iBAAa,QAAQ;AACrB,cAAU,QAAQ,YAAY;AAAA,EAChC,SAAS,KAAK;AACZ,UAAM,gBAAgB,KAAK,IAAI,SAAS,OAAO,SAAS,IAAI,OAAO;AACnE;AAAA,EACF;AAGA,QAAM,aAAa,IAAI,QAAoB,YAAY;AACvD,QAAM,iBAAiB,EAAE,SAAS,IAAI,QAAQ,KAAK,GAAG,EAAE;AACxD,QAAM,aAAa;AAAA,IACjB,WAAW;AAAA,IACX,MAAM;AAAA,IACN,mBAAmB;AAAA,IACnB,wBAAwB,MAAM,kBAAkB;AAAA,IAChD,iBAAiB,MAAM,iBAAiB,CAAC,MAAM,cAAc,IAAI;AAAA,EACnE;AASA,MAAI,uBAAuB;AAC3B,aAAW,WAAW,YAAY;AAChC,QAAI;AACF,YAAM,QAAmC;AAAA,QACvC,WAAW,QAAQ;AAAA,QACnB,aAAa,QAAQ;AAAA,QACrB,aAAa,QAAQ;AAAA,QACrB,OAAO;AAAA,UACL,UAAU,MAAM;AAAA,UAChB,gBAAgB,MAAM,kBAAkB;AAAA,QAC1C;AAAA,QACA;AAAA,MACF;AACA,YAAM,WAAW,QAAQ,kDAAkD;AAAA,QACzE;AAAA,QACA,KAAK;AAAA,MACP,CAAC;AAAA,IACH,SAAS,KAAK;AACZ,YAAM,iBAAiB,sBAAsB,GAAG;AAChD,UAAI,eAAe,WAAW;AAC5B,gBAAQ;AAAA,UACN,8EAA8E,QAAQ,EAAE,sDAAsD,eAAe,OAAO;AAAA,QACtK;AACA,+BAAuB;AACvB;AAAA,MACF;AAKA,YAAM,sBAAsB;AAAA,QAC1B;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA,cAAc,eAAe;AAAA,MAC/B,CAAC;AACD,cAAQ;AAAA,QACN,8EAA8E,QAAQ,EAAE,+DAA+D,QAAQ,iBAAiB,aAAa,eAAe,OAAO;AAAA,MACrN;AAAA,IACF;AAAA,EACF;AAIA,MAAI,sBAAsB;AACxB,YAAQ,YAAY;AACpB,UAAM,GAAG,MAAM;AACf;AAAA,EACF;AAGA,UAAQ,eAAe,oBAAI,KAAK;AAChC,MAAI,QAAQ,UAAW,SAAQ,YAAY;AAS3C,MAAI,QAAQ,WAAW,SAAS;AAC9B,YAAQ,SAAS;AAAA,EACnB;AAYA,MAAI,OAAO,eAAe,YAAY,WAAW,SAAS,GAAG;AAC3D,UAAM,UAAU,yBAAyB,UAAU;AACnD,QAAI,SAAS;AACX,cAAQ,eAAe,kBAAkB,QAAQ,cAAc,OAAO;AAAA,IACxE;AAAA,EACF;AACA,QAAM,GAAG,MAAM;AAQf,MAAI,SAAS;AAKX,QAAI,YAAY,iBAAiB;AAC/B,YAAM,QAAQ,8BAA8B,8BAA8B,IAAI;AAC9E,YAAM,MAAM;AAAA,QACV,EAAE,WAAW,QAAQ,IAAI,OAAO,SAAS,GAAG,WAAW,YAAY,EAAE;AAAA,QACrE,EAAE,SAAS,IAAI;AAAA,MACjB;AAAA,IACF,OAAO;AACL,cAAQ;AAAA,QACN,yDAAyD,eAAe,yBAAyB,QAAQ,EAAE;AAAA,MAC7G;AAAA,IACF;AAAA,EACF;AACF;AAEA,SAAS,yBAAyB,QAAgD;AAChF,MAAI;AACF,UAAM,UAAU,OAAO,KAAK,QAAQ,QAAQ,EAAE,SAAS,MAAM;AAC7D,UAAM,SAAS,KAAK,MAAM,OAAO;AACjC,QAAI,UAAU,OAAO,WAAW,YAAY,CAAC,MAAM,QAAQ,MAAM,GAAG;AAClE,aAAO;AAAA,IACT;AACA,WAAO;AAAA,EACT,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,eAAe,gBACb,KACA,IACA,SACA,OACA,SACA,SACe;AACf,QAAM,iBAAiB,sBAAsB,GAAG;AAChD,UAAQ,YAAY,eAAe;AAEnC,MAAI,cAAc,cAAc,GAAG;AACjC,YAAQ,SAAS;AACjB,UAAM,GAAG,MAAM;AACf,UAAM;AAAA,MACJ;AAAA,MACA;AAAA,QACE,WAAW,QAAQ;AAAA,QACnB,aAAa,QAAQ;AAAA,QACrB,aAAa,QAAQ;AAAA,QACrB,QAAQ,eAAe;AAAA,QACvB,UAAU,MAAM;AAAA,QAChB,gBAAgB,MAAM,kBAAkB;AAAA,MAC1C;AAAA,MACA,EAAE,YAAY,KAAK;AAAA,IACrB;AACA;AAAA,EACF;AAEA,MAAI,eAAe,aAAa,UAAU,2BAA2B;AAGnE,UAAM,GAAG,MAAM;AACf,UAAM,OAA8B,EAAE,GAAG,SAAS,SAAS,UAAU,EAAE;AACvE,UAAM,QAAQ,8BAA8B,8BAA8B,IAAI;AAC9E,UAAM,MAAM,QAAQ,MAA4C;AAAA,MAC9D,SAAS,iBAAiB,OAAO;AAAA,IACnC,CAAC;AACD;AAAA,EACF;AAGA,UAAQ,SAAS;AACjB,QAAM,GAAG,MAAM;AACjB;",
+  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport type { JobContext, QueuedJob, WorkerMeta } from '@open-mercato/queue'\nimport type { CommandBus } from '@open-mercato/shared/lib/commands'\nimport { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { CommunicationChannel } from '../data/entities'\nimport {\n  COMMUNICATION_CHANNELS_INGEST_INBOUND_COMMAND_ID,\n  type IngestInboundMessageInput,\n} from '../commands/ingest-inbound-message'\nimport { COMMUNICATION_CHANNELS_QUEUES, getCommunicationChannelsQueue } from '../lib/queue'\nimport { preservePushState } from '../lib/push-state'\nimport { writeIngestDeadLetter } from '../lib/dead-letter'\nimport { classifyOutboundError, computeBackoffMs, isReauthError } from '../lib/error-classification'\nimport { refreshCredentialsIfNeeded } from '../lib/credential-refresh'\nimport { emitCommunicationChannelsEvent } from '../events'\nimport type { ChannelAdapterRegistry } from '../lib/registry'\nimport type { NormalizedInboundMessage } from '../lib/adapter'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('communication_channels').child({ component: 'poll-channel' })\n\n/**\n * Job payload for the `communication-channels-poll` queue.\n *\n * One job per channel per scheduler tick. The poll-tick worker (sibling file)\n * enumerates due channels and enqueues these jobs.\n */\nexport type PollChannelJobPayload = {\n  channelId: string\n  scope: {\n    tenantId: string\n    organizationId: string | null\n  }\n  /** Attempt count, 1-based; used for retry-backoff decisions. */\n  attempt?: number\n  /** Self-re-enqueue drain counter (bounds the multi-page `hasMore` drain loop). */\n  drainPage?: number\n}\n\nexport const POLL_CHANNEL_MAX_ATTEMPTS = 3\n\n/**\n * Hard cap on `hasMore` self-re-enqueue drain pages \u2014 guards against an adapter\n * that returns `hasMore: true` with a non-advancing (pinned) cursor, which would\n * otherwise spin a tight, unthrottled re-enqueue loop. Mirrors the same guard in\n * `gmail-history-sync`.\n */\nconst MAX_DRAIN_PAGES = 100\n\nexport const metadata: WorkerMeta = {\n  queue: COMMUNICATION_CHANNELS_QUEUES.poll,\n  id: 'communication_channels:poll-channel',\n  concurrency: 10,\n}\n\ntype HandlerContext = JobContext & {\n  resolve: <T = unknown>(name: string) => T\n}\n\ntype CredentialsServiceLike = {\n  resolve: (\n    integrationId: string,\n    scope: { organizationId: string; tenantId: string; userId?: string | null },\n  ) => Promise<Record<string, unknown> | null>\n  save?: (\n    integrationId: string,\n    credentials: Record<string, unknown>,\n    scope: { organizationId: string; tenantId: string; userId?: string | null },\n  ) => Promise<void>\n}\n\n/**\n * Poll a single channel for inbound messages.\n *\n * Per SPEC-045d \u00A7 6 (with email-spec \u00A7 Hub Deltas \u2192 Delta 6 polling extensions):\n *   1. Load the channel; skip when `is_active === false` or `status !== 'connected'`.\n *   2. Skip when the adapter declares `realtimePush !== false` (it doesn't want polling).\n *   3. Refresh credentials if OAuth and within the expiry window.\n *   4. Call `adapter.fetchHistory({ channelId, credentials, since: lastPolledAt })`.\n *   5. For each normalized message, dispatch `ingest_inbound_message` (idempotent on\n *      `(channel_id, external_message_id)`).\n *   6. Update `channel.lastPolledAt = NOW()` on success.\n *   7. On error: classify, set `channel.status` accordingly, set `last_error`, emit\n *      `channel.requires_reauth` on 401, retry transient failures up to MAX.\n *\n * The hub doesn't drain a remote mailbox indefinitely \u2014 `fetchHistory` returns a\n * single page (provider decides the size). If the provider has more, the next tick\n * picks it up after the configured `poll_interval_seconds`.\n */\nexport default async function handle(\n  job: QueuedJob<PollChannelJobPayload>,\n  ctx: HandlerContext,\n): Promise<void> {\n  const { channelId, scope, attempt = 1, drainPage = 0 } = job.payload\n  const em = (ctx.resolve('em') as EntityManager).fork()\n  const adapterRegistry = ctx.resolve<ChannelAdapterRegistry>('channelAdapterRegistry')\n\n  const channel = await findOneWithDecryption(\n    em,\n    CommunicationChannel,\n    {\n      id: channelId,\n      tenantId: scope.tenantId,\n      organizationId: scope.organizationId ?? null,\n      deletedAt: null,\n    },\n    undefined,\n    scope,\n  )\n  if (!channel) {\n    logger.warn('channel not found (skipping)', { channelId })\n    return\n  }\n  if (!channel.isActive) return\n  // Allow `connected` (normal poll) and `error` (Spec B \u00A7 B5 auto-recovery\n  // sweep enqueues these intentionally \u2014 on a successful poll below we\n  // flip them back to `connected`). `requires_reauth` and `disconnected`\n  // are owned by the credential-refresh and disconnect flows.\n  if (channel.status !== 'connected' && channel.status !== 'error') return\n\n  const adapter = adapterRegistry?.get(channel.providerKey)\n  if (!adapter) {\n    logger.warn('no adapter for provider', { providerKey: channel.providerKey, channelId })\n    return\n  }\n  // Adapter opted out of polling \u2014 webhook providers.\n  const capabilities = (channel.capabilities as { realtimePush?: boolean } | null) ?? null\n  if (capabilities?.realtimePush !== false) {\n    // realtimePush is `true` (default for back-compat) \u2014 don't poll push providers.\n    return\n  }\n  if (typeof adapter.fetchHistory !== 'function') {\n    // Adapter doesn't implement history fetching \u2014 nothing we can do.\n    return\n  }\n\n  // Credentials.\n  let credentialsService: CredentialsServiceLike | null = null\n  try {\n    credentialsService = ctx.resolve<CredentialsServiceLike>('integrationCredentialsService')\n  } catch {\n    credentialsService = null\n  }\n  // Per-user credentials scope: pass `channel.userId` so the credentials\n  // service returns this user's row, not whoever connected the provider last.\n  // See review R2-C1 / N1 (2026-05-26).\n  const credentialsScope = {\n    tenantId: scope.tenantId,\n    organizationId: scope.organizationId ?? scope.tenantId,\n    userId: channel.userId ?? null,\n  }\n  let credentials: Record<string, unknown> = {}\n  if (channel.credentialsRef && credentialsService) {\n    try {\n      credentials =\n        (await credentialsService.resolve(`channel_${channel.providerKey}`, credentialsScope)) ?? {}\n    } catch {\n      credentials = {}\n    }\n  }\n  const refreshed = await refreshCredentialsIfNeeded(\n    {\n      adapter,\n      channelId: channel.id,\n      credentials,\n      scope: credentialsScope,\n    },\n    { credentialsService },\n  )\n  credentials = refreshed.credentials\n\n  // Fetch a single page of history.\n  // `channelState` is the provider-specific resumption cursor \u2014 Gmail historyId,\n  // IMAP UIDVALIDITY+UIDNEXT, etc. We persist it across\n  // ticks on `channel.channelState` so each poll resumes from the prior one\n  // instead of running a full mailbox resync. Empty / NULL = \"first poll;\n  // bootstrap the cursor from the provider\".\n  let normalized: NormalizedInboundMessage[] = []\n  let nextCursor: string | undefined\n  let hasMore = false\n  try {\n    const result = await adapter.fetchHistory({\n      conversationId: channel.externalIdentifier ?? channel.id,\n      credentials,\n      cursor: channel.lastPolledAt ? channel.lastPolledAt.toISOString() : undefined,\n      channelState: (channel.channelState as Record<string, unknown> | null) ?? undefined,\n      scope: {\n        tenantId: scope.tenantId,\n        organizationId: scope.organizationId ?? scope.tenantId,\n      },\n      // `contactFilter.sinceDays` is a hint to provider adapters about how far\n      // back to look on first-poll bootstrap. For UID-incremental polls (every\n      // tick after the first), adapters ignore this and just fetch new mail\n      // since the persisted cursor.\n      contactFilter: { addresses: [], sinceDays: 7 },\n    })\n    normalized = Array.isArray(result?.messages) ? result.messages : []\n    nextCursor = result?.nextCursor\n    hasMore = result?.hasMore === true\n  } catch (err) {\n    await handlePollError(err, em, channel, scope, attempt, job.payload)\n    return\n  }\n\n  // Dispatch ingest commands for each message.\n  const commandBus = ctx.resolve<CommandBus>('commandBus')\n  const containerProxy = { resolve: ctx.resolve.bind(ctx) }\n  const commandCtx = {\n    container: containerProxy as never,\n    auth: null,\n    organizationScope: null,\n    selectedOrganizationId: scope.organizationId ?? null,\n    organizationIds: scope.organizationId ? [scope.organizationId] : null,\n  }\n  // Spec B \u00A7 Per-message commit + dead-letter:\n  //   - Permanent failure (malformed MIME, schema, contract violation):\n  //     write to channel_ingest_dead_letter, log, advance cursor anyway so\n  //     the bad blob never stalls the channel again.\n  //   - Transient failure (DB drop, network blip): abort the loop without\n  //     advancing the cursor. The next tick re-fetches the same page;\n  //     idempotency via the (channel_id, external_message_id) unique\n  //     constraint means already-ingested messages no-op on the retry.\n  let transientIngestAbort = false\n  for (const message of normalized) {\n    try {\n      const input: IngestInboundMessageInput = {\n        channelId: channel.id,\n        providerKey: channel.providerKey,\n        channelType: channel.channelType,\n        scope: {\n          tenantId: scope.tenantId,\n          organizationId: scope.organizationId ?? null,\n        },\n        message,\n      }\n      await commandBus.execute(COMMUNICATION_CHANNELS_INGEST_INBOUND_COMMAND_ID, {\n        input,\n        ctx: commandCtx as never,\n      })\n    } catch (err) {\n      const classification = classifyOutboundError(err)\n      if (classification.transient) {\n        logger.warn('transient ingest failure; aborting page so cursor is not advanced', { channelId: channel.id, reason: classification.message })\n        transientIngestAbort = true\n        break\n      }\n      // Permanent \u2014 write to dead-letter so an operator can replay later.\n      // The shared helper is best-effort (never throws) and idempotent on\n      // `(channelId, externalMessageId)`, so a replayed page that fails the\n      // same message again does not insert a duplicate row.\n      await writeIngestDeadLetter({\n        em,\n        scope,\n        channel,\n        message,\n        err,\n        errorMessage: classification.message,\n      })\n      logger.warn('permanent ingest failure; recorded in dead-letter and advancing cursor', { channelId: channel.id, externalMessageId: message.externalMessageId, reason: classification.message })\n    }\n  }\n\n  // Transient abort: keep prior cursor + lastPolledAt so the next tick\n  // re-fetches the same page (idempotent at the DB layer).\n  if (transientIngestAbort) {\n    channel.lastError = 'transient_ingest_failure'\n    await em.flush()\n    return\n  }\n\n  // Update poll cursor + clear any stale error state.\n  channel.lastPolledAt = new Date()\n  if (channel.lastError) channel.lastError = null\n  // Recover the channel from any prior non-fatal error state. The previous\n  // poll(s) may have set status='error' after exhausting transient-retry\n  // attempts, but a fresh successful poll means the upstream is healthy\n  // again \u2014 flip it back to 'connected' so the scheduler keeps it in\n  // rotation and the user doesn't have to manually reconnect.\n  // We DON'T touch 'requires_reauth' here (that lifecycle state is owned\n  // by the credential-refresh / OAuth flow) or 'disconnected' (owned by\n  // the cascade-on-user-delete subscriber).\n  if (channel.status === 'error') {\n    channel.status = 'connected'\n  }\n  // Providers encode their cursor as base64-encoded JSON in `nextCursor`; we\n  // decode it back to an object so the next tick can pass it straight into\n  // `fetchHistory` as `channelState`. Decode failures fall back to the prior\n  // state (next tick bootstraps from there).\n  //\n  // Push-delivery state (Spec C) \u2014 watch/subscription identifiers and expiry \u2014 is\n  // owned by the push register/renew commands, not the sync cursor. A provider's\n  // `fetchHistory` returns only sync-cursor fields, so persisting the decoded\n  // cursor as a full replace would silently wipe push state and stop\n  // `gmail-renew-watch` from renewing it. Carry\n  // the hub-owned push keys forward whenever the new cursor omits them.\n  if (typeof nextCursor === 'string' && nextCursor.length > 0) {\n    const decoded = decodeChannelStateCursor(nextCursor)\n    if (decoded) {\n      channel.channelState = preservePushState(channel.channelState, decoded)\n    }\n  }\n  await em.flush()\n\n  // Drain contract (review H1, 2026-05-26): adapters that have additional\n  // pages beyond this tick's batch (large mailboxes, mid-deltaLink walks,\n  // UID overflows) signal `hasMore: true`. The persisted `channelState`\n  // already encodes the mid-drain resumption token (Gmail `pendingHistoryPageToken`,\n  // IMAP non-terminal `uidNext`). Re-enqueue with\n  // a small delay so we keep draining without overrunning rate limits.\n  if (hasMore) {\n    // Bound the drain: an adapter that returns `hasMore: true` with a\n    // non-advancing cursor (e.g. a persistently-failing message that pins the\n    // Gmail cursor via `hardFailed`) must not spin an unthrottled loop. Stop\n    // at MAX_DRAIN_PAGES; the next scheduled poll tick re-checks the channel.\n    if (drainPage < MAX_DRAIN_PAGES) {\n      const queue = getCommunicationChannelsQueue(COMMUNICATION_CHANNELS_QUEUES.poll)\n      await queue.enqueue(\n        { channelId: channel.id, scope, attempt: 1, drainPage: drainPage + 1 } as unknown as Record<string, unknown>,\n        { delayMs: 250 },\n      )\n    } else {\n      logger.warn('drain page cap reached; stopping re-enqueue until the next scheduled tick', { maxDrainPages: MAX_DRAIN_PAGES, channelId: channel.id })\n    }\n  }\n}\n\nfunction decodeChannelStateCursor(cursor: string): Record<string, unknown> | null {\n  try {\n    const decoded = Buffer.from(cursor, 'base64').toString('utf8')\n    const parsed = JSON.parse(decoded) as unknown\n    if (parsed && typeof parsed === 'object' && !Array.isArray(parsed)) {\n      return parsed as Record<string, unknown>\n    }\n    return null\n  } catch {\n    return null\n  }\n}\n\nasync function handlePollError(\n  err: unknown,\n  em: EntityManager,\n  channel: CommunicationChannel,\n  scope: PollChannelJobPayload['scope'],\n  attempt: number,\n  payload: PollChannelJobPayload,\n): Promise<void> {\n  const classification = classifyOutboundError(err)\n  channel.lastError = classification.message\n\n  if (isReauthError(classification)) {\n    channel.status = 'requires_reauth'\n    await em.flush()\n    await emitCommunicationChannelsEvent(\n      'communication_channels.channel.requires_reauth',\n      {\n        channelId: channel.id,\n        providerKey: channel.providerKey,\n        channelType: channel.channelType,\n        reason: classification.message,\n        tenantId: scope.tenantId,\n        organizationId: scope.organizationId ?? null,\n      },\n      { persistent: true },\n    )\n    return\n  }\n\n  if (classification.transient && attempt < POLL_CHANNEL_MAX_ATTEMPTS) {\n    // Transient error \u2014 re-enqueue with backoff. Channel status stays\n    // `connected` so the scheduler keeps it in rotation.\n    await em.flush()\n    const next: PollChannelJobPayload = { ...payload, attempt: attempt + 1 }\n    const queue = getCommunicationChannelsQueue(COMMUNICATION_CHANNELS_QUEUES.poll)\n    await queue.enqueue(next as unknown as Record<string, unknown>, {\n      delayMs: computeBackoffMs(attempt),\n    })\n    return\n  }\n\n  // Permanent or attempts exhausted \u2014 mark channel as error and stop the loop.\n  channel.status = 'error'\n  await em.flush()\n}\n"],
+  "mappings": "AAGA,SAAS,6BAA6B;AACtC,SAAS,4BAA4B;AACrC;AAAA,EACE;AAAA,OAEK;AACP,SAAS,+BAA+B,qCAAqC;AAC7E,SAAS,yBAAyB;AAClC,SAAS,6BAA6B;AACtC,SAAS,uBAAuB,kBAAkB,qBAAqB;AACvE,SAAS,kCAAkC;AAC3C,SAAS,sCAAsC;AAG/C,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,wBAAwB,EAAE,MAAM,EAAE,WAAW,eAAe,CAAC;AAoBlF,MAAM,4BAA4B;AAQzC,MAAM,kBAAkB;AAEjB,MAAM,WAAuB;AAAA,EAClC,OAAO,8BAA8B;AAAA,EACrC,IAAI;AAAA,EACJ,aAAa;AACf;AAoCA,eAAO,OACL,KACA,KACe;AACf,QAAM,EAAE,WAAW,OAAO,UAAU,GAAG,YAAY,EAAE,IAAI,IAAI;AAC7D,QAAM,KAAM,IAAI,QAAQ,IAAI,EAAoB,KAAK;AACrD,QAAM,kBAAkB,IAAI,QAAgC,wBAAwB;AAEpF,QAAM,UAAU,MAAM;AAAA,IACpB;AAAA,IACA;AAAA,IACA;AAAA,MACE,IAAI;AAAA,MACJ,UAAU,MAAM;AAAA,MAChB,gBAAgB,MAAM,kBAAkB;AAAA,MACxC,WAAW;AAAA,IACb;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACA,MAAI,CAAC,SAAS;AACZ,WAAO,KAAK,gCAAgC,EAAE,UAAU,CAAC;AACzD;AAAA,EACF;AACA,MAAI,CAAC,QAAQ,SAAU;AAKvB,MAAI,QAAQ,WAAW,eAAe,QAAQ,WAAW,QAAS;AAElE,QAAM,UAAU,iBAAiB,IAAI,QAAQ,WAAW;AACxD,MAAI,CAAC,SAAS;AACZ,WAAO,KAAK,2BAA2B,EAAE,aAAa,QAAQ,aAAa,UAAU,CAAC;AACtF;AAAA,EACF;AAEA,QAAM,eAAgB,QAAQ,gBAAsD;AACpF,MAAI,cAAc,iBAAiB,OAAO;AAExC;AAAA,EACF;AACA,MAAI,OAAO,QAAQ,iBAAiB,YAAY;AAE9C;AAAA,EACF;AAGA,MAAI,qBAAoD;AACxD,MAAI;AACF,yBAAqB,IAAI,QAAgC,+BAA+B;AAAA,EAC1F,QAAQ;AACN,yBAAqB;AAAA,EACvB;AAIA,QAAM,mBAAmB;AAAA,IACvB,UAAU,MAAM;AAAA,IAChB,gBAAgB,MAAM,kBAAkB,MAAM;AAAA,IAC9C,QAAQ,QAAQ,UAAU;AAAA,EAC5B;AACA,MAAI,cAAuC,CAAC;AAC5C,MAAI,QAAQ,kBAAkB,oBAAoB;AAChD,QAAI;AACF,oBACG,MAAM,mBAAmB,QAAQ,WAAW,QAAQ,WAAW,IAAI,gBAAgB,KAAM,CAAC;AAAA,IAC/F,QAAQ;AACN,oBAAc,CAAC;AAAA,IACjB;AAAA,EACF;AACA,QAAM,YAAY,MAAM;AAAA,IACtB;AAAA,MACE;AAAA,MACA,WAAW,QAAQ;AAAA,MACnB;AAAA,MACA,OAAO;AAAA,IACT;AAAA,IACA,EAAE,mBAAmB;AAAA,EACvB;AACA,gBAAc,UAAU;AAQxB,MAAI,aAAyC,CAAC;AAC9C,MAAI;AACJ,MAAI,UAAU;AACd,MAAI;AACF,UAAM,SAAS,MAAM,QAAQ,aAAa;AAAA,MACxC,gBAAgB,QAAQ,sBAAsB,QAAQ;AAAA,MACtD;AAAA,MACA,QAAQ,QAAQ,eAAe,QAAQ,aAAa,YAAY,IAAI;AAAA,MACpE,cAAe,QAAQ,gBAAmD;AAAA,MAC1E,OAAO;AAAA,QACL,UAAU,MAAM;AAAA,QAChB,gBAAgB,MAAM,kBAAkB,MAAM;AAAA,MAChD;AAAA;AAAA;AAAA;AAAA;AAAA,MAKA,eAAe,EAAE,WAAW,CAAC,GAAG,WAAW,EAAE;AAAA,IAC/C,CAAC;AACD,iBAAa,MAAM,QAAQ,QAAQ,QAAQ,IAAI,OAAO,WAAW,CAAC;AAClE,iBAAa,QAAQ;AACrB,cAAU,QAAQ,YAAY;AAAA,EAChC,SAAS,KAAK;AACZ,UAAM,gBAAgB,KAAK,IAAI,SAAS,OAAO,SAAS,IAAI,OAAO;AACnE;AAAA,EACF;AAGA,QAAM,aAAa,IAAI,QAAoB,YAAY;AACvD,QAAM,iBAAiB,EAAE,SAAS,IAAI,QAAQ,KAAK,GAAG,EAAE;AACxD,QAAM,aAAa;AAAA,IACjB,WAAW;AAAA,IACX,MAAM;AAAA,IACN,mBAAmB;AAAA,IACnB,wBAAwB,MAAM,kBAAkB;AAAA,IAChD,iBAAiB,MAAM,iBAAiB,CAAC,MAAM,cAAc,IAAI;AAAA,EACnE;AASA,MAAI,uBAAuB;AAC3B,aAAW,WAAW,YAAY;AAChC,QAAI;AACF,YAAM,QAAmC;AAAA,QACvC,WAAW,QAAQ;AAAA,QACnB,aAAa,QAAQ;AAAA,QACrB,aAAa,QAAQ;AAAA,QACrB,OAAO;AAAA,UACL,UAAU,MAAM;AAAA,UAChB,gBAAgB,MAAM,kBAAkB;AAAA,QAC1C;AAAA,QACA;AAAA,MACF;AACA,YAAM,WAAW,QAAQ,kDAAkD;AAAA,QACzE;AAAA,QACA,KAAK;AAAA,MACP,CAAC;AAAA,IACH,SAAS,KAAK;AACZ,YAAM,iBAAiB,sBAAsB,GAAG;AAChD,UAAI,eAAe,WAAW;AAC5B,eAAO,KAAK,qEAAqE,EAAE,WAAW,QAAQ,IAAI,QAAQ,eAAe,QAAQ,CAAC;AAC1I,+BAAuB;AACvB;AAAA,MACF;AAKA,YAAM,sBAAsB;AAAA,QAC1B;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA,cAAc,eAAe;AAAA,MAC/B,CAAC;AACD,aAAO,KAAK,0EAA0E,EAAE,WAAW,QAAQ,IAAI,mBAAmB,QAAQ,mBAAmB,QAAQ,eAAe,QAAQ,CAAC;AAAA,IAC/L;AAAA,EACF;AAIA,MAAI,sBAAsB;AACxB,YAAQ,YAAY;AACpB,UAAM,GAAG,MAAM;AACf;AAAA,EACF;AAGA,UAAQ,eAAe,oBAAI,KAAK;AAChC,MAAI,QAAQ,UAAW,SAAQ,YAAY;AAS3C,MAAI,QAAQ,WAAW,SAAS;AAC9B,YAAQ,SAAS;AAAA,EACnB;AAYA,MAAI,OAAO,eAAe,YAAY,WAAW,SAAS,GAAG;AAC3D,UAAM,UAAU,yBAAyB,UAAU;AACnD,QAAI,SAAS;AACX,cAAQ,eAAe,kBAAkB,QAAQ,cAAc,OAAO;AAAA,IACxE;AAAA,EACF;AACA,QAAM,GAAG,MAAM;AAQf,MAAI,SAAS;AAKX,QAAI,YAAY,iBAAiB;AAC/B,YAAM,QAAQ,8BAA8B,8BAA8B,IAAI;AAC9E,YAAM,MAAM;AAAA,QACV,EAAE,WAAW,QAAQ,IAAI,OAAO,SAAS,GAAG,WAAW,YAAY,EAAE;AAAA,QACrE,EAAE,SAAS,IAAI;AAAA,MACjB;AAAA,IACF,OAAO;AACL,aAAO,KAAK,6EAA6E,EAAE,eAAe,iBAAiB,WAAW,QAAQ,GAAG,CAAC;AAAA,IACpJ;AAAA,EACF;AACF;AAEA,SAAS,yBAAyB,QAAgD;AAChF,MAAI;AACF,UAAM,UAAU,OAAO,KAAK,QAAQ,QAAQ,EAAE,SAAS,MAAM;AAC7D,UAAM,SAAS,KAAK,MAAM,OAAO;AACjC,QAAI,UAAU,OAAO,WAAW,YAAY,CAAC,MAAM,QAAQ,MAAM,GAAG;AAClE,aAAO;AAAA,IACT;AACA,WAAO;AAAA,EACT,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,eAAe,gBACb,KACA,IACA,SACA,OACA,SACA,SACe;AACf,QAAM,iBAAiB,sBAAsB,GAAG;AAChD,UAAQ,YAAY,eAAe;AAEnC,MAAI,cAAc,cAAc,GAAG;AACjC,YAAQ,SAAS;AACjB,UAAM,GAAG,MAAM;AACf,UAAM;AAAA,MACJ;AAAA,MACA;AAAA,QACE,WAAW,QAAQ;AAAA,QACnB,aAAa,QAAQ;AAAA,QACrB,aAAa,QAAQ;AAAA,QACrB,QAAQ,eAAe;AAAA,QACvB,UAAU,MAAM;AAAA,QAChB,gBAAgB,MAAM,kBAAkB;AAAA,MAC1C;AAAA,MACA,EAAE,YAAY,KAAK;AAAA,IACrB;AACA;AAAA,EACF;AAEA,MAAI,eAAe,aAAa,UAAU,2BAA2B;AAGnE,UAAM,GAAG,MAAM;AACf,UAAM,OAA8B,EAAE,GAAG,SAAS,SAAS,UAAU,EAAE;AACvE,UAAM,QAAQ,8BAA8B,8BAA8B,IAAI;AAC9E,UAAM,MAAM,QAAQ,MAA4C;AAAA,MAC9D,SAAS,iBAAiB,OAAO;AAAA,IACnC,CAAC;AACD;AAAA,EACF;AAGA,UAAQ,SAAS;AACjB,QAAM,GAAG,MAAM;AACjB;",
   "names": []
 }

package/dist/modules/communication_channels/workers/poll-tick.js

@@ -1,6 +1,8 @@
 import { findWithDecryption } from "@open-mercato/shared/lib/encryption/find";
 import { CommunicationChannel } from "../data/entities.js";
 import { COMMUNICATION_CHANNELS_QUEUES, getCommunicationChannelsQueue } from "../lib/queue.js";
+import { createLogger } from "@open-mercato/shared/lib/logger";
+const logger = createLogger("communication_channels").child({ component: "poll-tick" });
 const POLL_ENUMERATION_CAP = Math.max(
   1,
   Number.parseInt(process.env.COMMUNICATION_CHANNELS_POLL_ENUMERATION_CAP ?? "500", 10) || 500
@@ -16,9 +18,8 @@ async function handle(job, ctx) {
   const tenantId = raw.scope?.tenantId ?? raw.tenantId ?? null;
   const organizationId = raw.scope?.organizationId ?? raw.organizationId ?? null;
   if (!tenantId) {
-    console.warn(
-      "[communication_channels:poll-tick] skipping tick \u2014 payload has no tenantId",
-      { payload: raw }
+    logger.warn(
+      "skipping tick \u2014 payload has no tenantId"
     );
     return;
   }
@@ -115,9 +116,7 @@ async function handle(job, ctx) {
   }
   if (recovered > 0) await em.flush();
   if (enqueued > 0 || recovered > 0) {
-    console.log(
-      `[communication_channels:poll-tick] enqueued ${enqueued} normal + ${recovered} auto-recover poll job(s) for tenant ${scope.tenantId}`
-    );
+    logger.info("enqueued poll jobs for tenant", { enqueued, recovered, tenantId: scope.tenantId });
   }
 }
 function isDue(lastPolledAt, intervalSeconds, now) {

package/dist/modules/communication_channels/workers/poll-tick.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/communication_channels/workers/poll-tick.ts"],
-  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport type { JobContext, QueuedJob, WorkerMeta } from '@open-mercato/queue'\nimport { findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { CommunicationChannel } from '../data/entities'\nimport { COMMUNICATION_CHANNELS_QUEUES, getCommunicationChannelsQueue } from '../lib/queue'\nimport type { PollChannelJobPayload } from './poll-channel'\n\n/**\n * Scheduler tick payload. Fired by the `@open-mercato/scheduler` cron entry\n * registered in the hub's `setup.ts` (`communication_channels:poll-tick` schedule).\n */\nexport type PollTickPayload = {\n  scope: {\n    tenantId: string\n    organizationId: string | null\n  }\n}\n\nconst POLL_ENUMERATION_CAP = Math.max(\n  1,\n  Number.parseInt(process.env.COMMUNICATION_CHANNELS_POLL_ENUMERATION_CAP ?? '500', 10) || 500,\n)\n\nexport const metadata: WorkerMeta = {\n  queue: COMMUNICATION_CHANNELS_QUEUES.pollTick,\n  id: 'communication_channels:poll-tick',\n  concurrency: 1, // single-flight per tenant \u2014 one tick at a time\n}\n\ntype HandlerContext = JobContext & {\n  resolve: <T = unknown>(name: string) => T\n}\n\n/**\n * Enumerate channels due for polling and enqueue per-channel jobs.\n *\n * Per email integration spec \u00A7 Hub Deltas \u2192 Delta 6:\n *   SELECT id FROM communication_channels\n *   WHERE is_active = true\n *     AND deleted_at IS NULL\n *     AND status = 'connected'\n *     AND poll_interval_seconds IS NOT NULL\n *     AND (last_polled_at IS NULL\n *          OR last_polled_at + poll_interval_seconds * '1 sec' <= NOW())\n *   ORDER BY last_polled_at NULLS FIRST\n *   LIMIT 500\n *\n * Implementation note: MikroORM's QueryBuilder is the canonical entry point;\n * the raw SQL above is the conceptual query. We use the entity-level filter to\n * keep things portable and let MikroORM compile it.\n */\nexport default async function handle(\n  job: QueuedJob<PollTickPayload>,\n  ctx: HandlerContext,\n): Promise<void> {\n  // The scheduler module (`@open-mercato/scheduler`) spreads the configured\n  // `targetPayload` and then adds `tenantId` / `organizationId` at the TOP\n  // level of the enqueued payload (see\n  // packages/scheduler/.../execute-schedule.worker.ts). Our setup.ts originally\n  // stored `{ scope: { tenantId, organizationId } }` under targetPayload, so\n  // at runtime the payload looks like:\n  //   { scope: { tenantId, organizationId }, tenantId, organizationId, _idempotencyKey }\n  // Accept either path so the handler is robust to both how operators originally\n  // configured the schedule (nested `scope`) and how the scheduler flattens it.\n  const raw = (job?.payload ?? {}) as Partial<PollTickPayload> & {\n    tenantId?: string | null\n    organizationId?: string | null\n  }\n  const tenantId = raw.scope?.tenantId ?? raw.tenantId ?? null\n  const organizationId =\n    raw.scope?.organizationId ?? raw.organizationId ?? null\n  if (!tenantId) {\n    console.warn(\n      '[communication_channels:poll-tick] skipping tick \u2014 payload has no tenantId',\n      { payload: raw },\n    )\n    return\n  }\n  const scope = { tenantId, organizationId }\n  const em = (ctx.resolve('em') as EntityManager).fork()\n\n  const now = new Date()\n  // Find candidate channels \u2014 we enumerate two pools:\n  //   (1) status='connected' channels due for their normal poll cycle.\n  //   (2) Spec B \u00A7 Auto-recovery sweep: status='error' channels whose\n  //       `lastPolledAt` is older than OM_CHANNEL_AUTO_RECOVER_MINUTES\n  //       (default 30 min). At most one retry per recovery window per\n  //       channel \u2014 when we enqueue a recovery job below we bump that\n  //       channel's `lastPolledAt` to `now` so it falls back under the\n  //       cutoff and is NOT re-selected on the immediately-following ticks\n  //       (poll-channel only advances `lastPolledAt` on a SUCCESSFUL poll,\n  //       so without this a persistently-failing channel would re-enqueue\n  //       every tick). On success `poll-channel` flips the status back to\n  //       'connected' so the channel rejoins the normal pool.\n  //\n  // Due-ness for (1) is computed in JS to avoid cross-DB interval\n  // arithmetic; the (2) cutoff is a single timestamp compare.\n  const connectedCandidates = await findWithDecryption(\n    em,\n    CommunicationChannel,\n    {\n      tenantId: scope.tenantId,\n      organizationId: scope.organizationId ?? null,\n      isActive: true,\n      deletedAt: null,\n      status: 'connected',\n      pollIntervalSeconds: { $ne: null },\n    },\n    {\n      limit: POLL_ENUMERATION_CAP,\n      orderBy: { lastPolledAt: 'asc' },\n    },\n    scope,\n  )\n\n  const recoverMinutesRaw = Number.parseInt(\n    process.env.OM_CHANNEL_AUTO_RECOVER_MINUTES ?? '',\n    10,\n  )\n  // `0` is a valid override meaning \"recover on the very next tick\" (used by\n  // TC-CHANNEL-EMAIL-027 and operators who want aggressive recovery). Only a\n  // negative or non-numeric value falls back to the 30-minute default.\n  const recoverMinutes =\n    Number.isFinite(recoverMinutesRaw) && recoverMinutesRaw >= 0 ? recoverMinutesRaw : 30\n  const recoverCutoff = new Date(now.getTime() - recoverMinutes * 60 * 1000)\n  const errorCandidates = await findWithDecryption(\n    em,\n    CommunicationChannel,\n    {\n      tenantId: scope.tenantId,\n      organizationId: scope.organizationId ?? null,\n      isActive: true,\n      deletedAt: null,\n      status: 'error',\n      // Polling channels only. Push-only channels (Gmail) have\n      // `pollIntervalSeconds = null` and are intentionally excluded: poll-channel\n      // returns early for push providers, so their recovery is owner-driven\n      // (re-register push / reconnect), not this poll-recovery sweep.\n      pollIntervalSeconds: { $ne: null },\n      // `lastPolledAt` advances only on a SUCCESSFUL poll (poll-channel does\n      // not touch it in `handlePollError`). To keep recovery to one retry per\n      // window \u2014 rather than re-enqueuing a persistently-failing channel every\n      // tick \u2014 the recovery-enqueue loop below bumps `lastPolledAt` to `now`\n      // when it schedules a recovery job, so the channel only re-enters this\n      // pool after another `recoverMinutes` have elapsed.\n      //\n      // A channel that fails its FIRST poll (before any success) still has\n      // `lastPolledAt = null`; a bare `$lt` would exclude it forever (SQL\n      // `NULL < ts` is NULL, not true), stranding it in `error`. Include the\n      // null case so never-polled error channels get their first recovery\n      // attempt on the next tick (the enqueue bump below then throttles it).\n      $or: [{ lastPolledAt: null }, { lastPolledAt: { $lt: recoverCutoff } }],\n    },\n    {\n      limit: POLL_ENUMERATION_CAP,\n      orderBy: { lastPolledAt: 'asc' },\n    },\n    scope,\n  )\n\n  const queue = getCommunicationChannelsQueue(COMMUNICATION_CHANNELS_QUEUES.poll)\n  let enqueued = 0\n  let recovered = 0\n  for (const channel of connectedCandidates as CommunicationChannel[]) {\n    const intervalSeconds = channel.pollIntervalSeconds\n    if (!intervalSeconds || intervalSeconds <= 0) continue\n    if (!isDue(channel.lastPolledAt ?? null, intervalSeconds, now)) continue\n    const payload: PollChannelJobPayload = {\n      channelId: channel.id,\n      scope: {\n        tenantId: channel.tenantId,\n        organizationId: channel.organizationId ?? scope.organizationId ?? null,\n      },\n      attempt: 1,\n    }\n    await queue.enqueue(payload as unknown as Record<string, unknown>)\n    enqueued += 1\n  }\n  // Auto-recovery: at most one retry per recovery window per error-state\n  // channel. We bump `lastPolledAt` to `now` as we enqueue so the same channel\n  // drops back under `recoverCutoff` and is NOT re-selected on the next ticks\n  // (poll-channel leaves `lastPolledAt` untouched on failure, so without this a\n  // persistently-failing channel would be re-enqueued every tick).\n  for (const channel of errorCandidates as CommunicationChannel[]) {\n    const payload: PollChannelJobPayload = {\n      channelId: channel.id,\n      scope: {\n        tenantId: channel.tenantId,\n        organizationId: channel.organizationId ?? scope.organizationId ?? null,\n      },\n      attempt: 1,\n    }\n    await queue.enqueue(payload as unknown as Record<string, unknown>)\n    channel.lastPolledAt = now\n    recovered += 1\n  }\n  if (recovered > 0) await em.flush()\n\n  if (enqueued > 0 || recovered > 0) {\n    console.log(\n      `[communication_channels:poll-tick] enqueued ${enqueued} normal + ${recovered} auto-recover poll job(s) for tenant ${scope.tenantId}`,\n    )\n  }\n}\n\nfunction isDue(lastPolledAt: Date | null, intervalSeconds: number, now: Date): boolean {\n  if (!lastPolledAt) return true\n  const dueAt = new Date(lastPolledAt.getTime() + intervalSeconds * 1000)\n  return now >= dueAt\n}\n"],
-  "mappings": "AAEA,SAAS,0BAA0B;AACnC,SAAS,4BAA4B;AACrC,SAAS,+BAA+B,qCAAqC;AAc7E,MAAM,uBAAuB,KAAK;AAAA,EAChC;AAAA,EACA,OAAO,SAAS,QAAQ,IAAI,+CAA+C,OAAO,EAAE,KAAK;AAC3F;AAEO,MAAM,WAAuB;AAAA,EAClC,OAAO,8BAA8B;AAAA,EACrC,IAAI;AAAA,EACJ,aAAa;AAAA;AACf;AAwBA,eAAO,OACL,KACA,KACe;AAUf,QAAM,MAAO,KAAK,WAAW,CAAC;AAI9B,QAAM,WAAW,IAAI,OAAO,YAAY,IAAI,YAAY;AACxD,QAAM,iBACJ,IAAI,OAAO,kBAAkB,IAAI,kBAAkB;AACrD,MAAI,CAAC,UAAU;AACb,YAAQ;AAAA,MACN;AAAA,MACA,EAAE,SAAS,IAAI;AAAA,IACjB;AACA;AAAA,EACF;AACA,QAAM,QAAQ,EAAE,UAAU,eAAe;AACzC,QAAM,KAAM,IAAI,QAAQ,IAAI,EAAoB,KAAK;AAErD,QAAM,MAAM,oBAAI,KAAK;AAgBrB,QAAM,sBAAsB,MAAM;AAAA,IAChC;AAAA,IACA;AAAA,IACA;AAAA,MACE,UAAU,MAAM;AAAA,MAChB,gBAAgB,MAAM,kBAAkB;AAAA,MACxC,UAAU;AAAA,MACV,WAAW;AAAA,MACX,QAAQ;AAAA,MACR,qBAAqB,EAAE,KAAK,KAAK;AAAA,IACnC;AAAA,IACA;AAAA,MACE,OAAO;AAAA,MACP,SAAS,EAAE,cAAc,MAAM;AAAA,IACjC;AAAA,IACA;AAAA,EACF;AAEA,QAAM,oBAAoB,OAAO;AAAA,IAC/B,QAAQ,IAAI,mCAAmC;AAAA,IAC/C;AAAA,EACF;AAIA,QAAM,iBACJ,OAAO,SAAS,iBAAiB,KAAK,qBAAqB,IAAI,oBAAoB;AACrF,QAAM,gBAAgB,IAAI,KAAK,IAAI,QAAQ,IAAI,iBAAiB,KAAK,GAAI;AACzE,QAAM,kBAAkB,MAAM;AAAA,IAC5B;AAAA,IACA;AAAA,IACA;AAAA,MACE,UAAU,MAAM;AAAA,MAChB,gBAAgB,MAAM,kBAAkB;AAAA,MACxC,UAAU;AAAA,MACV,WAAW;AAAA,MACX,QAAQ;AAAA;AAAA;AAAA;AAAA;AAAA,MAKR,qBAAqB,EAAE,KAAK,KAAK;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAajC,KAAK,CAAC,EAAE,cAAc,KAAK,GAAG,EAAE,cAAc,EAAE,KAAK,cAAc,EAAE,CAAC;AAAA,IACxE;AAAA,IACA;AAAA,MACE,OAAO;AAAA,MACP,SAAS,EAAE,cAAc,MAAM;AAAA,IACjC;AAAA,IACA;AAAA,EACF;AAEA,QAAM,QAAQ,8BAA8B,8BAA8B,IAAI;AAC9E,MAAI,WAAW;AACf,MAAI,YAAY;AAChB,aAAW,WAAW,qBAA+C;AACnE,UAAM,kBAAkB,QAAQ;AAChC,QAAI,CAAC,mBAAmB,mBAAmB,EAAG;AAC9C,QAAI,CAAC,MAAM,QAAQ,gBAAgB,MAAM,iBAAiB,GAAG,EAAG;AAChE,UAAM,UAAiC;AAAA,MACrC,WAAW,QAAQ;AAAA,MACnB,OAAO;AAAA,QACL,UAAU,QAAQ;AAAA,QAClB,gBAAgB,QAAQ,kBAAkB,MAAM,kBAAkB;AAAA,MACpE;AAAA,MACA,SAAS;AAAA,IACX;AACA,UAAM,MAAM,QAAQ,OAA6C;AACjE,gBAAY;AAAA,EACd;AAMA,aAAW,WAAW,iBAA2C;AAC/D,UAAM,UAAiC;AAAA,MACrC,WAAW,QAAQ;AAAA,MACnB,OAAO;AAAA,QACL,UAAU,QAAQ;AAAA,QAClB,gBAAgB,QAAQ,kBAAkB,MAAM,kBAAkB;AAAA,MACpE;AAAA,MACA,SAAS;AAAA,IACX;AACA,UAAM,MAAM,QAAQ,OAA6C;AACjE,YAAQ,eAAe;AACvB,iBAAa;AAAA,EACf;AACA,MAAI,YAAY,EAAG,OAAM,GAAG,MAAM;AAElC,MAAI,WAAW,KAAK,YAAY,GAAG;AACjC,YAAQ;AAAA,MACN,+CAA+C,QAAQ,aAAa,SAAS,wCAAwC,MAAM,QAAQ;AAAA,IACrI;AAAA,EACF;AACF;AAEA,SAAS,MAAM,cAA2B,iBAAyB,KAAoB;AACrF,MAAI,CAAC,aAAc,QAAO;AAC1B,QAAM,QAAQ,IAAI,KAAK,aAAa,QAAQ,IAAI,kBAAkB,GAAI;AACtE,SAAO,OAAO;AAChB;",
+  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport type { JobContext, QueuedJob, WorkerMeta } from '@open-mercato/queue'\nimport { findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { CommunicationChannel } from '../data/entities'\nimport { COMMUNICATION_CHANNELS_QUEUES, getCommunicationChannelsQueue } from '../lib/queue'\nimport type { PollChannelJobPayload } from './poll-channel'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('communication_channels').child({ component: 'poll-tick' })\n\n/**\n * Scheduler tick payload. Fired by the `@open-mercato/scheduler` cron entry\n * registered in the hub's `setup.ts` (`communication_channels:poll-tick` schedule).\n */\nexport type PollTickPayload = {\n  scope: {\n    tenantId: string\n    organizationId: string | null\n  }\n}\n\nconst POLL_ENUMERATION_CAP = Math.max(\n  1,\n  Number.parseInt(process.env.COMMUNICATION_CHANNELS_POLL_ENUMERATION_CAP ?? '500', 10) || 500,\n)\n\nexport const metadata: WorkerMeta = {\n  queue: COMMUNICATION_CHANNELS_QUEUES.pollTick,\n  id: 'communication_channels:poll-tick',\n  concurrency: 1, // single-flight per tenant \u2014 one tick at a time\n}\n\ntype HandlerContext = JobContext & {\n  resolve: <T = unknown>(name: string) => T\n}\n\n/**\n * Enumerate channels due for polling and enqueue per-channel jobs.\n *\n * Per email integration spec \u00A7 Hub Deltas \u2192 Delta 6:\n *   SELECT id FROM communication_channels\n *   WHERE is_active = true\n *     AND deleted_at IS NULL\n *     AND status = 'connected'\n *     AND poll_interval_seconds IS NOT NULL\n *     AND (last_polled_at IS NULL\n *          OR last_polled_at + poll_interval_seconds * '1 sec' <= NOW())\n *   ORDER BY last_polled_at NULLS FIRST\n *   LIMIT 500\n *\n * Implementation note: MikroORM's QueryBuilder is the canonical entry point;\n * the raw SQL above is the conceptual query. We use the entity-level filter to\n * keep things portable and let MikroORM compile it.\n */\nexport default async function handle(\n  job: QueuedJob<PollTickPayload>,\n  ctx: HandlerContext,\n): Promise<void> {\n  // The scheduler module (`@open-mercato/scheduler`) spreads the configured\n  // `targetPayload` and then adds `tenantId` / `organizationId` at the TOP\n  // level of the enqueued payload (see\n  // packages/scheduler/.../execute-schedule.worker.ts). Our setup.ts originally\n  // stored `{ scope: { tenantId, organizationId } }` under targetPayload, so\n  // at runtime the payload looks like:\n  //   { scope: { tenantId, organizationId }, tenantId, organizationId, _idempotencyKey }\n  // Accept either path so the handler is robust to both how operators originally\n  // configured the schedule (nested `scope`) and how the scheduler flattens it.\n  const raw = (job?.payload ?? {}) as Partial<PollTickPayload> & {\n    tenantId?: string | null\n    organizationId?: string | null\n  }\n  const tenantId = raw.scope?.tenantId ?? raw.tenantId ?? null\n  const organizationId =\n    raw.scope?.organizationId ?? raw.organizationId ?? null\n  if (!tenantId) {\n    logger.warn(\n      'skipping tick \u2014 payload has no tenantId',\n    )\n    return\n  }\n  const scope = { tenantId, organizationId }\n  const em = (ctx.resolve('em') as EntityManager).fork()\n\n  const now = new Date()\n  // Find candidate channels \u2014 we enumerate two pools:\n  //   (1) status='connected' channels due for their normal poll cycle.\n  //   (2) Spec B \u00A7 Auto-recovery sweep: status='error' channels whose\n  //       `lastPolledAt` is older than OM_CHANNEL_AUTO_RECOVER_MINUTES\n  //       (default 30 min). At most one retry per recovery window per\n  //       channel \u2014 when we enqueue a recovery job below we bump that\n  //       channel's `lastPolledAt` to `now` so it falls back under the\n  //       cutoff and is NOT re-selected on the immediately-following ticks\n  //       (poll-channel only advances `lastPolledAt` on a SUCCESSFUL poll,\n  //       so without this a persistently-failing channel would re-enqueue\n  //       every tick). On success `poll-channel` flips the status back to\n  //       'connected' so the channel rejoins the normal pool.\n  //\n  // Due-ness for (1) is computed in JS to avoid cross-DB interval\n  // arithmetic; the (2) cutoff is a single timestamp compare.\n  const connectedCandidates = await findWithDecryption(\n    em,\n    CommunicationChannel,\n    {\n      tenantId: scope.tenantId,\n      organizationId: scope.organizationId ?? null,\n      isActive: true,\n      deletedAt: null,\n      status: 'connected',\n      pollIntervalSeconds: { $ne: null },\n    },\n    {\n      limit: POLL_ENUMERATION_CAP,\n      orderBy: { lastPolledAt: 'asc' },\n    },\n    scope,\n  )\n\n  const recoverMinutesRaw = Number.parseInt(\n    process.env.OM_CHANNEL_AUTO_RECOVER_MINUTES ?? '',\n    10,\n  )\n  // `0` is a valid override meaning \"recover on the very next tick\" (used by\n  // TC-CHANNEL-EMAIL-027 and operators who want aggressive recovery). Only a\n  // negative or non-numeric value falls back to the 30-minute default.\n  const recoverMinutes =\n    Number.isFinite(recoverMinutesRaw) && recoverMinutesRaw >= 0 ? recoverMinutesRaw : 30\n  const recoverCutoff = new Date(now.getTime() - recoverMinutes * 60 * 1000)\n  const errorCandidates = await findWithDecryption(\n    em,\n    CommunicationChannel,\n    {\n      tenantId: scope.tenantId,\n      organizationId: scope.organizationId ?? null,\n      isActive: true,\n      deletedAt: null,\n      status: 'error',\n      // Polling channels only. Push-only channels (Gmail) have\n      // `pollIntervalSeconds = null` and are intentionally excluded: poll-channel\n      // returns early for push providers, so their recovery is owner-driven\n      // (re-register push / reconnect), not this poll-recovery sweep.\n      pollIntervalSeconds: { $ne: null },\n      // `lastPolledAt` advances only on a SUCCESSFUL poll (poll-channel does\n      // not touch it in `handlePollError`). To keep recovery to one retry per\n      // window \u2014 rather than re-enqueuing a persistently-failing channel every\n      // tick \u2014 the recovery-enqueue loop below bumps `lastPolledAt` to `now`\n      // when it schedules a recovery job, so the channel only re-enters this\n      // pool after another `recoverMinutes` have elapsed.\n      //\n      // A channel that fails its FIRST poll (before any success) still has\n      // `lastPolledAt = null`; a bare `$lt` would exclude it forever (SQL\n      // `NULL < ts` is NULL, not true), stranding it in `error`. Include the\n      // null case so never-polled error channels get their first recovery\n      // attempt on the next tick (the enqueue bump below then throttles it).\n      $or: [{ lastPolledAt: null }, { lastPolledAt: { $lt: recoverCutoff } }],\n    },\n    {\n      limit: POLL_ENUMERATION_CAP,\n      orderBy: { lastPolledAt: 'asc' },\n    },\n    scope,\n  )\n\n  const queue = getCommunicationChannelsQueue(COMMUNICATION_CHANNELS_QUEUES.poll)\n  let enqueued = 0\n  let recovered = 0\n  for (const channel of connectedCandidates as CommunicationChannel[]) {\n    const intervalSeconds = channel.pollIntervalSeconds\n    if (!intervalSeconds || intervalSeconds <= 0) continue\n    if (!isDue(channel.lastPolledAt ?? null, intervalSeconds, now)) continue\n    const payload: PollChannelJobPayload = {\n      channelId: channel.id,\n      scope: {\n        tenantId: channel.tenantId,\n        organizationId: channel.organizationId ?? scope.organizationId ?? null,\n      },\n      attempt: 1,\n    }\n    await queue.enqueue(payload as unknown as Record<string, unknown>)\n    enqueued += 1\n  }\n  // Auto-recovery: at most one retry per recovery window per error-state\n  // channel. We bump `lastPolledAt` to `now` as we enqueue so the same channel\n  // drops back under `recoverCutoff` and is NOT re-selected on the next ticks\n  // (poll-channel leaves `lastPolledAt` untouched on failure, so without this a\n  // persistently-failing channel would be re-enqueued every tick).\n  for (const channel of errorCandidates as CommunicationChannel[]) {\n    const payload: PollChannelJobPayload = {\n      channelId: channel.id,\n      scope: {\n        tenantId: channel.tenantId,\n        organizationId: channel.organizationId ?? scope.organizationId ?? null,\n      },\n      attempt: 1,\n    }\n    await queue.enqueue(payload as unknown as Record<string, unknown>)\n    channel.lastPolledAt = now\n    recovered += 1\n  }\n  if (recovered > 0) await em.flush()\n\n  if (enqueued > 0 || recovered > 0) {\n    logger.info('enqueued poll jobs for tenant', { enqueued, recovered, tenantId: scope.tenantId })\n  }\n}\n\nfunction isDue(lastPolledAt: Date | null, intervalSeconds: number, now: Date): boolean {\n  if (!lastPolledAt) return true\n  const dueAt = new Date(lastPolledAt.getTime() + intervalSeconds * 1000)\n  return now >= dueAt\n}\n"],
+  "mappings": "AAEA,SAAS,0BAA0B;AACnC,SAAS,4BAA4B;AACrC,SAAS,+BAA+B,qCAAqC;AAE7E,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,wBAAwB,EAAE,MAAM,EAAE,WAAW,YAAY,CAAC;AAatF,MAAM,uBAAuB,KAAK;AAAA,EAChC;AAAA,EACA,OAAO,SAAS,QAAQ,IAAI,+CAA+C,OAAO,EAAE,KAAK;AAC3F;AAEO,MAAM,WAAuB;AAAA,EAClC,OAAO,8BAA8B;AAAA,EACrC,IAAI;AAAA,EACJ,aAAa;AAAA;AACf;AAwBA,eAAO,OACL,KACA,KACe;AAUf,QAAM,MAAO,KAAK,WAAW,CAAC;AAI9B,QAAM,WAAW,IAAI,OAAO,YAAY,IAAI,YAAY;AACxD,QAAM,iBACJ,IAAI,OAAO,kBAAkB,IAAI,kBAAkB;AACrD,MAAI,CAAC,UAAU;AACb,WAAO;AAAA,MACL;AAAA,IACF;AACA;AAAA,EACF;AACA,QAAM,QAAQ,EAAE,UAAU,eAAe;AACzC,QAAM,KAAM,IAAI,QAAQ,IAAI,EAAoB,KAAK;AAErD,QAAM,MAAM,oBAAI,KAAK;AAgBrB,QAAM,sBAAsB,MAAM;AAAA,IAChC;AAAA,IACA;AAAA,IACA;AAAA,MACE,UAAU,MAAM;AAAA,MAChB,gBAAgB,MAAM,kBAAkB;AAAA,MACxC,UAAU;AAAA,MACV,WAAW;AAAA,MACX,QAAQ;AAAA,MACR,qBAAqB,EAAE,KAAK,KAAK;AAAA,IACnC;AAAA,IACA;AAAA,MACE,OAAO;AAAA,MACP,SAAS,EAAE,cAAc,MAAM;AAAA,IACjC;AAAA,IACA;AAAA,EACF;AAEA,QAAM,oBAAoB,OAAO;AAAA,IAC/B,QAAQ,IAAI,mCAAmC;AAAA,IAC/C;AAAA,EACF;AAIA,QAAM,iBACJ,OAAO,SAAS,iBAAiB,KAAK,qBAAqB,IAAI,oBAAoB;AACrF,QAAM,gBAAgB,IAAI,KAAK,IAAI,QAAQ,IAAI,iBAAiB,KAAK,GAAI;AACzE,QAAM,kBAAkB,MAAM;AAAA,IAC5B;AAAA,IACA;AAAA,IACA;AAAA,MACE,UAAU,MAAM;AAAA,MAChB,gBAAgB,MAAM,kBAAkB;AAAA,MACxC,UAAU;AAAA,MACV,WAAW;AAAA,MACX,QAAQ;AAAA;AAAA;AAAA;AAAA;AAAA,MAKR,qBAAqB,EAAE,KAAK,KAAK;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAajC,KAAK,CAAC,EAAE,cAAc,KAAK,GAAG,EAAE,cAAc,EAAE,KAAK,cAAc,EAAE,CAAC;AAAA,IACxE;AAAA,IACA;AAAA,MACE,OAAO;AAAA,MACP,SAAS,EAAE,cAAc,MAAM;AAAA,IACjC;AAAA,IACA;AAAA,EACF;AAEA,QAAM,QAAQ,8BAA8B,8BAA8B,IAAI;AAC9E,MAAI,WAAW;AACf,MAAI,YAAY;AAChB,aAAW,WAAW,qBAA+C;AACnE,UAAM,kBAAkB,QAAQ;AAChC,QAAI,CAAC,mBAAmB,mBAAmB,EAAG;AAC9C,QAAI,CAAC,MAAM,QAAQ,gBAAgB,MAAM,iBAAiB,GAAG,EAAG;AAChE,UAAM,UAAiC;AAAA,MACrC,WAAW,QAAQ;AAAA,MACnB,OAAO;AAAA,QACL,UAAU,QAAQ;AAAA,QAClB,gBAAgB,QAAQ,kBAAkB,MAAM,kBAAkB;AAAA,MACpE;AAAA,MACA,SAAS;AAAA,IACX;AACA,UAAM,MAAM,QAAQ,OAA6C;AACjE,gBAAY;AAAA,EACd;AAMA,aAAW,WAAW,iBAA2C;AAC/D,UAAM,UAAiC;AAAA,MACrC,WAAW,QAAQ;AAAA,MACnB,OAAO;AAAA,QACL,UAAU,QAAQ;AAAA,QAClB,gBAAgB,QAAQ,kBAAkB,MAAM,kBAAkB;AAAA,MACpE;AAAA,MACA,SAAS;AAAA,IACX;AACA,UAAM,MAAM,QAAQ,OAA6C;AACjE,YAAQ,eAAe;AACvB,iBAAa;AAAA,EACf;AACA,MAAI,YAAY,EAAG,OAAM,GAAG,MAAM;AAElC,MAAI,WAAW,KAAK,YAAY,GAAG;AACjC,WAAO,KAAK,iCAAiC,EAAE,UAAU,WAAW,UAAU,MAAM,SAAS,CAAC;AAAA,EAChG;AACF;AAEA,SAAS,MAAM,cAA2B,iBAAyB,KAAoB;AACrF,MAAI,CAAC,aAAc,QAAO;AAC1B,QAAM,QAAQ,IAAI,KAAK,aAAa,QAAQ,IAAI,kBAAkB,GAAI;AACtE,SAAO,OAAO;AAChB;",
   "names": []
 }

package/dist/modules/communication_channels/workers/reaction-processor.js

@@ -9,6 +9,8 @@ import {
   REACTION_PROCESSOR_MAX_ATTEMPTS
 } from "../lib/reaction-processor-types.js";
 import { refreshCredentialsIfNeeded } from "../lib/credential-refresh.js";
+import { createLogger } from "@open-mercato/shared/lib/logger";
+const logger = createLogger("communication_channels").child({ component: "reaction-processor" });
 const metadata = {
   queue: COMMUNICATION_CHANNELS_QUEUES.reactions,
   id: "communication_channels:reaction-processor",
@@ -161,22 +163,16 @@ async function callAdapterOutbound(payload, ctx, action) {
 async function maybeRetry(result, payload, ctx) {
   if (result.status === "ok") return;
   if (result.status === "no_adapter" || result.status === "channel_inactive") {
-    console.error(
-      `[communication_channels:reaction-processor] ${result.status}: ${result.message}`
-    );
+    logger.error("reaction processing failed", { status: result.status, reason: result.message });
     return;
   }
   if (!result.transient) {
-    console.error(
-      `[communication_channels:reaction-processor] permanent failure: ${result.message}`
-    );
+    logger.error("permanent reaction processing failure", { reason: result.message });
     return;
   }
   const attempt = payload.attempt ?? 1;
   if (attempt >= REACTION_PROCESSOR_MAX_ATTEMPTS) {
-    console.error(
-      `[communication_channels:reaction-processor] giving up after attempt ${attempt}: ${result.message}`
-    );
+    logger.error("giving up on reaction processing", { attempt, reason: result.message });
     return;
   }
   const next = { ...payload, attempt: attempt + 1 };

package/dist/modules/communication_channels/workers/reaction-processor.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/communication_channels/workers/reaction-processor.ts"],
-  "sourcesContent": ["import type { JobContext, QueuedJob, WorkerMeta } from '@open-mercato/queue'\nimport type { CommandBus } from '@open-mercato/shared/lib/commands'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport {\n  COMMUNICATION_CHANNELS_PROCESS_INBOUND_REACTION_COMMAND_ID,\n  type ProcessInboundReactionInput,\n  type ProcessInboundReactionResult,\n} from '../commands/process-inbound-reaction'\nimport { COMMUNICATION_CHANNELS_QUEUES, getCommunicationChannelsQueue } from '../lib/queue'\nimport { classifyOutboundError, computeBackoffMs } from '../lib/error-classification'\nimport { CommunicationChannel } from '../data/entities'\nimport {\n  REACTION_PROCESSOR_MAX_ATTEMPTS,\n  type ReactionInboundJob,\n  type ReactionOutboundRemoveJob,\n  type ReactionOutboundSendJob,\n  type ReactionProcessorPayload,\n} from '../lib/reaction-processor-types'\nimport { refreshCredentialsIfNeeded } from '../lib/credential-refresh'\nimport type { ChannelAdapterRegistry } from '../lib/registry'\n\nexport type { ReactionProcessorPayload }\n\nexport const metadata: WorkerMeta = {\n  queue: COMMUNICATION_CHANNELS_QUEUES.reactions,\n  id: 'communication_channels:reaction-processor',\n  concurrency: 10,\n}\n\ntype HandlerContext = JobContext & {\n  resolve: <T = unknown>(name: string) => T\n}\n\n/**\n * Unified reaction worker \u2014 handles inbound, outbound-send, and outbound-remove\n * jobs from the `communication-channels-reactions` queue via a discriminated payload.\n *\n *   - `inbound` \u2014 dispatches the `process_inbound_reaction` command which\n *     applies provider semantics and emits `.reaction.added/.removed`.\n *   - `outbound_send` \u2014 calls `adapter.sendReaction?(...)`. The local\n *     `MessageReaction` row was already created by the API/command layer\n *     for UX responsiveness; this worker just notifies the provider.\n *   - `outbound_remove` \u2014 calls `adapter.removeReaction?(...)`. The local\n *     row was already deleted by the API/command layer.\n *\n * Retry: transient failures re-enqueue with exponential backoff up to\n * `REACTION_PROCESSOR_MAX_ATTEMPTS = 3`. Permanent failures stop. Reactions\n * are inherently low-stakes (a missed reaction is annoying, not data loss),\n * so we do not surface failures via a dedicated event; provider errors are\n * logged through `integrationLogService` when available.\n */\nexport default async function handle(\n  job: QueuedJob<ReactionProcessorPayload>,\n  ctx: HandlerContext,\n): Promise<void> {\n  switch (job.payload.kind) {\n    case 'inbound':\n      await handleInbound(job.payload, ctx)\n      return\n    case 'outbound_send':\n      await handleOutboundSend(job.payload, ctx)\n      return\n    case 'outbound_remove':\n      await handleOutboundRemove(job.payload, ctx)\n      return\n    default: {\n      // exhaustiveness check\n      const exhaustive: never = job.payload\n      throw new Error(`Unknown reaction job kind: ${JSON.stringify(exhaustive)}`)\n    }\n  }\n}\n\nasync function handleInbound(payload: ReactionInboundJob, ctx: HandlerContext): Promise<void> {\n  const commandBus = ctx.resolve<CommandBus>('commandBus')\n  const containerProxy = { resolve: ctx.resolve.bind(ctx) }\n  const commandCtx = {\n    container: containerProxy as never,\n    auth: null,\n    organizationScope: null,\n    selectedOrganizationId: payload.scope.organizationId ?? null,\n    organizationIds: payload.scope.organizationId ? [payload.scope.organizationId] : null,\n  }\n  const input: ProcessInboundReactionInput = {\n    channelId: payload.channelId,\n    providerKey: payload.providerKey,\n    channelType: payload.channelType,\n    scope: payload.scope,\n    event: payload.event,\n  }\n  await commandBus.execute<ProcessInboundReactionInput, ProcessInboundReactionResult>(\n    COMMUNICATION_CHANNELS_PROCESS_INBOUND_REACTION_COMMAND_ID,\n    { input, ctx: commandCtx as never },\n  )\n}\n\nasync function handleOutboundSend(payload: ReactionOutboundSendJob, ctx: HandlerContext): Promise<void> {\n  const result = await callAdapterOutbound(payload, ctx, 'send')\n  await maybeRetry(result, payload, ctx)\n}\n\nasync function handleOutboundRemove(\n  payload: ReactionOutboundRemoveJob,\n  ctx: HandlerContext,\n): Promise<void> {\n  const result = await callAdapterOutbound(payload, ctx, 'remove')\n  await maybeRetry(result, payload, ctx)\n}\n\ntype AdapterCallResult =\n  | { status: 'ok' }\n  | { status: 'no_adapter'; message: string }\n  | { status: 'channel_inactive'; message: string }\n  | { status: 'failed'; transient: boolean; message: string }\n\nasync function callAdapterOutbound(\n  payload: ReactionOutboundSendJob | ReactionOutboundRemoveJob,\n  ctx: HandlerContext,\n  action: 'send' | 'remove',\n): Promise<AdapterCallResult> {\n  const adapterRegistry = ctx.resolve<ChannelAdapterRegistry>('channelAdapterRegistry')\n  const adapter = adapterRegistry?.get(payload.providerKey)\n  if (!adapter) {\n    return { status: 'no_adapter', message: `No adapter for provider '${payload.providerKey}'` }\n  }\n  const em = (ctx.resolve('em') as EntityManager).fork()\n  const channel = await findOneWithDecryption(\n    em,\n    CommunicationChannel,\n    {\n      id: payload.channelId,\n      tenantId: payload.scope.tenantId,\n      organizationId: payload.scope.organizationId ?? null,\n      deletedAt: null,\n    },\n    undefined,\n    payload.scope,\n  )\n  if (!channel) {\n    return { status: 'no_adapter', message: `Channel ${payload.channelId} not found` }\n  }\n  if (!channel.isActive) {\n    return { status: 'channel_inactive', message: `Channel ${payload.channelId} is inactive` }\n  }\n\n  // Credentials. Per-user scoping via `channel.userId` (review R2-C1 / N1).\n  type CredentialsServiceLike = {\n    resolve: (\n      integrationId: string,\n      scope: { organizationId: string; tenantId: string; userId?: string | null },\n    ) => Promise<Record<string, unknown> | null>\n    save?: (\n      integrationId: string,\n      credentials: Record<string, unknown>,\n      scope: { organizationId: string; tenantId: string; userId?: string | null },\n    ) => Promise<void>\n  }\n  let credentials: Record<string, unknown> = {}\n  let credentialsService: CredentialsServiceLike | null = null\n  try {\n    credentialsService = ctx.resolve<CredentialsServiceLike>('integrationCredentialsService')\n  } catch {\n    credentialsService = null\n  }\n  const credentialsScope = {\n    tenantId: payload.scope.tenantId,\n    organizationId: payload.scope.organizationId ?? payload.scope.tenantId,\n    userId: channel.userId ?? null,\n  }\n  if (channel.credentialsRef && credentialsService) {\n    try {\n      credentials =\n        (await credentialsService.resolve(`channel_${channel.providerKey}`, credentialsScope)) ?? {}\n    } catch {\n      credentials = {}\n    }\n  }\n  const refreshed = await refreshCredentialsIfNeeded(\n    {\n      adapter,\n      channelId: channel.id,\n      credentials,\n      scope: credentialsScope,\n    },\n    { credentialsService },\n  )\n  credentials = refreshed.credentials\n\n  try {\n    if (action === 'send') {\n      if (typeof adapter.sendReaction !== 'function') {\n        return { status: 'no_adapter', message: `Adapter '${adapter.providerKey}' has no sendReaction` }\n      }\n      const sendPayload = payload as ReactionOutboundSendJob\n      await adapter.sendReaction({\n        externalMessageId: sendPayload.messageId, // platform message id; the adapter maps to provider id via its own channel-link lookup if needed\n        conversationId: sendPayload.conversationId ?? '',\n        emoji: sendPayload.emoji,\n        credentials,\n        scope: {\n          tenantId: payload.scope.tenantId,\n          organizationId: payload.scope.organizationId ?? payload.scope.tenantId,\n        },\n      })\n    } else {\n      if (typeof adapter.removeReaction !== 'function') {\n        return { status: 'no_adapter', message: `Adapter '${adapter.providerKey}' has no removeReaction` }\n      }\n      const removePayload = payload as ReactionOutboundRemoveJob\n      await adapter.removeReaction({\n        externalMessageId: removePayload.externalReactionId ?? removePayload.messageId,\n        conversationId: removePayload.conversationId ?? '',\n        emoji: removePayload.emoji,\n        credentials,\n        scope: {\n          tenantId: payload.scope.tenantId,\n          organizationId: payload.scope.organizationId ?? payload.scope.tenantId,\n        },\n      })\n    }\n    return { status: 'ok' }\n  } catch (err) {\n    const classification = classifyOutboundError(err)\n    return {\n      status: 'failed',\n      transient: classification.transient,\n      message: classification.message,\n    }\n  }\n}\n\nasync function maybeRetry(\n  result: AdapterCallResult,\n  payload: ReactionProcessorPayload,\n  ctx: HandlerContext,\n): Promise<void> {\n  if (result.status === 'ok') return\n  if (result.status === 'no_adapter' || result.status === 'channel_inactive') {\n    // Permanent \u2014 log and stop.\n    console.error(\n      `[communication_channels:reaction-processor] ${result.status}: ${result.message}`,\n    )\n    return\n  }\n  if (!result.transient) {\n    console.error(\n      `[communication_channels:reaction-processor] permanent failure: ${result.message}`,\n    )\n    return\n  }\n  const attempt = payload.attempt ?? 1\n  if (attempt >= REACTION_PROCESSOR_MAX_ATTEMPTS) {\n    console.error(\n      `[communication_channels:reaction-processor] giving up after attempt ${attempt}: ${result.message}`,\n    )\n    return\n  }\n  const next: ReactionProcessorPayload = { ...payload, attempt: attempt + 1 }\n  const queue = getCommunicationChannelsQueue(COMMUNICATION_CHANNELS_QUEUES.reactions)\n  await queue.enqueue(next as unknown as Record<string, unknown>, {\n    delayMs: computeBackoffMs(attempt),\n  })\n}\n"],
-  "mappings": "AAGA,SAAS,6BAA6B;AACtC;AAAA,EACE;AAAA,OAGK;AACP,SAAS,+BAA+B,qCAAqC;AAC7E,SAAS,uBAAuB,wBAAwB;AACxD,SAAS,4BAA4B;AACrC;AAAA,EACE;AAAA,OAKK;AACP,SAAS,kCAAkC;AAKpC,MAAM,WAAuB;AAAA,EAClC,OAAO,8BAA8B;AAAA,EACrC,IAAI;AAAA,EACJ,aAAa;AACf;AAwBA,eAAO,OACL,KACA,KACe;AACf,UAAQ,IAAI,QAAQ,MAAM;AAAA,IACxB,KAAK;AACH,YAAM,cAAc,IAAI,SAAS,GAAG;AACpC;AAAA,IACF,KAAK;AACH,YAAM,mBAAmB,IAAI,SAAS,GAAG;AACzC;AAAA,IACF,KAAK;AACH,YAAM,qBAAqB,IAAI,SAAS,GAAG;AAC3C;AAAA,IACF,SAAS;AAEP,YAAM,aAAoB,IAAI;AAC9B,YAAM,IAAI,MAAM,8BAA8B,KAAK,UAAU,UAAU,CAAC,EAAE;AAAA,IAC5E;AAAA,EACF;AACF;AAEA,eAAe,cAAc,SAA6B,KAAoC;AAC5F,QAAM,aAAa,IAAI,QAAoB,YAAY;AACvD,QAAM,iBAAiB,EAAE,SAAS,IAAI,QAAQ,KAAK,GAAG,EAAE;AACxD,QAAM,aAAa;AAAA,IACjB,WAAW;AAAA,IACX,MAAM;AAAA,IACN,mBAAmB;AAAA,IACnB,wBAAwB,QAAQ,MAAM,kBAAkB;AAAA,IACxD,iBAAiB,QAAQ,MAAM,iBAAiB,CAAC,QAAQ,MAAM,cAAc,IAAI;AAAA,EACnF;AACA,QAAM,QAAqC;AAAA,IACzC,WAAW,QAAQ;AAAA,IACnB,aAAa,QAAQ;AAAA,IACrB,aAAa,QAAQ;AAAA,IACrB,OAAO,QAAQ;AAAA,IACf,OAAO,QAAQ;AAAA,EACjB;AACA,QAAM,WAAW;AAAA,IACf;AAAA,IACA,EAAE,OAAO,KAAK,WAAoB;AAAA,EACpC;AACF;AAEA,eAAe,mBAAmB,SAAkC,KAAoC;AACtG,QAAM,SAAS,MAAM,oBAAoB,SAAS,KAAK,MAAM;AAC7D,QAAM,WAAW,QAAQ,SAAS,GAAG;AACvC;AAEA,eAAe,qBACb,SACA,KACe;AACf,QAAM,SAAS,MAAM,oBAAoB,SAAS,KAAK,QAAQ;AAC/D,QAAM,WAAW,QAAQ,SAAS,GAAG;AACvC;AAQA,eAAe,oBACb,SACA,KACA,QAC4B;AAC5B,QAAM,kBAAkB,IAAI,QAAgC,wBAAwB;AACpF,QAAM,UAAU,iBAAiB,IAAI,QAAQ,WAAW;AACxD,MAAI,CAAC,SAAS;AACZ,WAAO,EAAE,QAAQ,cAAc,SAAS,4BAA4B,QAAQ,WAAW,IAAI;AAAA,EAC7F;AACA,QAAM,KAAM,IAAI,QAAQ,IAAI,EAAoB,KAAK;AACrD,QAAM,UAAU,MAAM;AAAA,IACpB;AAAA,IACA;AAAA,IACA;AAAA,MACE,IAAI,QAAQ;AAAA,MACZ,UAAU,QAAQ,MAAM;AAAA,MACxB,gBAAgB,QAAQ,MAAM,kBAAkB;AAAA,MAChD,WAAW;AAAA,IACb;AAAA,IACA;AAAA,IACA,QAAQ;AAAA,EACV;AACA,MAAI,CAAC,SAAS;AACZ,WAAO,EAAE,QAAQ,cAAc,SAAS,WAAW,QAAQ,SAAS,aAAa;AAAA,EACnF;AACA,MAAI,CAAC,QAAQ,UAAU;AACrB,WAAO,EAAE,QAAQ,oBAAoB,SAAS,WAAW,QAAQ,SAAS,eAAe;AAAA,EAC3F;AAcA,MAAI,cAAuC,CAAC;AAC5C,MAAI,qBAAoD;AACxD,MAAI;AACF,yBAAqB,IAAI,QAAgC,+BAA+B;AAAA,EAC1F,QAAQ;AACN,yBAAqB;AAAA,EACvB;AACA,QAAM,mBAAmB;AAAA,IACvB,UAAU,QAAQ,MAAM;AAAA,IACxB,gBAAgB,QAAQ,MAAM,kBAAkB,QAAQ,MAAM;AAAA,IAC9D,QAAQ,QAAQ,UAAU;AAAA,EAC5B;AACA,MAAI,QAAQ,kBAAkB,oBAAoB;AAChD,QAAI;AACF,oBACG,MAAM,mBAAmB,QAAQ,WAAW,QAAQ,WAAW,IAAI,gBAAgB,KAAM,CAAC;AAAA,IAC/F,QAAQ;AACN,oBAAc,CAAC;AAAA,IACjB;AAAA,EACF;AACA,QAAM,YAAY,MAAM;AAAA,IACtB;AAAA,MACE;AAAA,MACA,WAAW,QAAQ;AAAA,MACnB;AAAA,MACA,OAAO;AAAA,IACT;AAAA,IACA,EAAE,mBAAmB;AAAA,EACvB;AACA,gBAAc,UAAU;AAExB,MAAI;AACF,QAAI,WAAW,QAAQ;AACrB,UAAI,OAAO,QAAQ,iBAAiB,YAAY;AAC9C,eAAO,EAAE,QAAQ,cAAc,SAAS,YAAY,QAAQ,WAAW,wBAAwB;AAAA,MACjG;AACA,YAAM,cAAc;AACpB,YAAM,QAAQ,aAAa;AAAA,QACzB,mBAAmB,YAAY;AAAA;AAAA,QAC/B,gBAAgB,YAAY,kBAAkB;AAAA,QAC9C,OAAO,YAAY;AAAA,QACnB;AAAA,QACA,OAAO;AAAA,UACL,UAAU,QAAQ,MAAM;AAAA,UACxB,gBAAgB,QAAQ,MAAM,kBAAkB,QAAQ,MAAM;AAAA,QAChE;AAAA,MACF,CAAC;AAAA,IACH,OAAO;AACL,UAAI,OAAO,QAAQ,mBAAmB,YAAY;AAChD,eAAO,EAAE,QAAQ,cAAc,SAAS,YAAY,QAAQ,WAAW,0BAA0B;AAAA,MACnG;AACA,YAAM,gBAAgB;AACtB,YAAM,QAAQ,eAAe;AAAA,QAC3B,mBAAmB,cAAc,sBAAsB,cAAc;AAAA,QACrE,gBAAgB,cAAc,kBAAkB;AAAA,QAChD,OAAO,cAAc;AAAA,QACrB;AAAA,QACA,OAAO;AAAA,UACL,UAAU,QAAQ,MAAM;AAAA,UACxB,gBAAgB,QAAQ,MAAM,kBAAkB,QAAQ,MAAM;AAAA,QAChE;AAAA,MACF,CAAC;AAAA,IACH;AACA,WAAO,EAAE,QAAQ,KAAK;AAAA,EACxB,SAAS,KAAK;AACZ,UAAM,iBAAiB,sBAAsB,GAAG;AAChD,WAAO;AAAA,MACL,QAAQ;AAAA,MACR,WAAW,eAAe;AAAA,MAC1B,SAAS,eAAe;AAAA,IAC1B;AAAA,EACF;AACF;AAEA,eAAe,WACb,QACA,SACA,KACe;AACf,MAAI,OAAO,WAAW,KAAM;AAC5B,MAAI,OAAO,WAAW,gBAAgB,OAAO,WAAW,oBAAoB;AAE1E,YAAQ;AAAA,MACN,+CAA+C,OAAO,MAAM,KAAK,OAAO,OAAO;AAAA,IACjF;AACA;AAAA,EACF;AACA,MAAI,CAAC,OAAO,WAAW;AACrB,YAAQ;AAAA,MACN,kEAAkE,OAAO,OAAO;AAAA,IAClF;AACA;AAAA,EACF;AACA,QAAM,UAAU,QAAQ,WAAW;AACnC,MAAI,WAAW,iCAAiC;AAC9C,YAAQ;AAAA,MACN,uEAAuE,OAAO,KAAK,OAAO,OAAO;AAAA,IACnG;AACA;AAAA,EACF;AACA,QAAM,OAAiC,EAAE,GAAG,SAAS,SAAS,UAAU,EAAE;AAC1E,QAAM,QAAQ,8BAA8B,8BAA8B,SAAS;AACnF,QAAM,MAAM,QAAQ,MAA4C;AAAA,IAC9D,SAAS,iBAAiB,OAAO;AAAA,EACnC,CAAC;AACH;",
+  "sourcesContent": ["import type { JobContext, QueuedJob, WorkerMeta } from '@open-mercato/queue'\nimport type { CommandBus } from '@open-mercato/shared/lib/commands'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport {\n  COMMUNICATION_CHANNELS_PROCESS_INBOUND_REACTION_COMMAND_ID,\n  type ProcessInboundReactionInput,\n  type ProcessInboundReactionResult,\n} from '../commands/process-inbound-reaction'\nimport { COMMUNICATION_CHANNELS_QUEUES, getCommunicationChannelsQueue } from '../lib/queue'\nimport { classifyOutboundError, computeBackoffMs } from '../lib/error-classification'\nimport { CommunicationChannel } from '../data/entities'\nimport {\n  REACTION_PROCESSOR_MAX_ATTEMPTS,\n  type ReactionInboundJob,\n  type ReactionOutboundRemoveJob,\n  type ReactionOutboundSendJob,\n  type ReactionProcessorPayload,\n} from '../lib/reaction-processor-types'\nimport { refreshCredentialsIfNeeded } from '../lib/credential-refresh'\nimport type { ChannelAdapterRegistry } from '../lib/registry'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('communication_channels').child({ component: 'reaction-processor' })\n\nexport type { ReactionProcessorPayload }\n\nexport const metadata: WorkerMeta = {\n  queue: COMMUNICATION_CHANNELS_QUEUES.reactions,\n  id: 'communication_channels:reaction-processor',\n  concurrency: 10,\n}\n\ntype HandlerContext = JobContext & {\n  resolve: <T = unknown>(name: string) => T\n}\n\n/**\n * Unified reaction worker \u2014 handles inbound, outbound-send, and outbound-remove\n * jobs from the `communication-channels-reactions` queue via a discriminated payload.\n *\n *   - `inbound` \u2014 dispatches the `process_inbound_reaction` command which\n *     applies provider semantics and emits `.reaction.added/.removed`.\n *   - `outbound_send` \u2014 calls `adapter.sendReaction?(...)`. The local\n *     `MessageReaction` row was already created by the API/command layer\n *     for UX responsiveness; this worker just notifies the provider.\n *   - `outbound_remove` \u2014 calls `adapter.removeReaction?(...)`. The local\n *     row was already deleted by the API/command layer.\n *\n * Retry: transient failures re-enqueue with exponential backoff up to\n * `REACTION_PROCESSOR_MAX_ATTEMPTS = 3`. Permanent failures stop. Reactions\n * are inherently low-stakes (a missed reaction is annoying, not data loss),\n * so we do not surface failures via a dedicated event; provider errors are\n * logged through `integrationLogService` when available.\n */\nexport default async function handle(\n  job: QueuedJob<ReactionProcessorPayload>,\n  ctx: HandlerContext,\n): Promise<void> {\n  switch (job.payload.kind) {\n    case 'inbound':\n      await handleInbound(job.payload, ctx)\n      return\n    case 'outbound_send':\n      await handleOutboundSend(job.payload, ctx)\n      return\n    case 'outbound_remove':\n      await handleOutboundRemove(job.payload, ctx)\n      return\n    default: {\n      // exhaustiveness check\n      const exhaustive: never = job.payload\n      throw new Error(`Unknown reaction job kind: ${JSON.stringify(exhaustive)}`)\n    }\n  }\n}\n\nasync function handleInbound(payload: ReactionInboundJob, ctx: HandlerContext): Promise<void> {\n  const commandBus = ctx.resolve<CommandBus>('commandBus')\n  const containerProxy = { resolve: ctx.resolve.bind(ctx) }\n  const commandCtx = {\n    container: containerProxy as never,\n    auth: null,\n    organizationScope: null,\n    selectedOrganizationId: payload.scope.organizationId ?? null,\n    organizationIds: payload.scope.organizationId ? [payload.scope.organizationId] : null,\n  }\n  const input: ProcessInboundReactionInput = {\n    channelId: payload.channelId,\n    providerKey: payload.providerKey,\n    channelType: payload.channelType,\n    scope: payload.scope,\n    event: payload.event,\n  }\n  await commandBus.execute<ProcessInboundReactionInput, ProcessInboundReactionResult>(\n    COMMUNICATION_CHANNELS_PROCESS_INBOUND_REACTION_COMMAND_ID,\n    { input, ctx: commandCtx as never },\n  )\n}\n\nasync function handleOutboundSend(payload: ReactionOutboundSendJob, ctx: HandlerContext): Promise<void> {\n  const result = await callAdapterOutbound(payload, ctx, 'send')\n  await maybeRetry(result, payload, ctx)\n}\n\nasync function handleOutboundRemove(\n  payload: ReactionOutboundRemoveJob,\n  ctx: HandlerContext,\n): Promise<void> {\n  const result = await callAdapterOutbound(payload, ctx, 'remove')\n  await maybeRetry(result, payload, ctx)\n}\n\ntype AdapterCallResult =\n  | { status: 'ok' }\n  | { status: 'no_adapter'; message: string }\n  | { status: 'channel_inactive'; message: string }\n  | { status: 'failed'; transient: boolean; message: string }\n\nasync function callAdapterOutbound(\n  payload: ReactionOutboundSendJob | ReactionOutboundRemoveJob,\n  ctx: HandlerContext,\n  action: 'send' | 'remove',\n): Promise<AdapterCallResult> {\n  const adapterRegistry = ctx.resolve<ChannelAdapterRegistry>('channelAdapterRegistry')\n  const adapter = adapterRegistry?.get(payload.providerKey)\n  if (!adapter) {\n    return { status: 'no_adapter', message: `No adapter for provider '${payload.providerKey}'` }\n  }\n  const em = (ctx.resolve('em') as EntityManager).fork()\n  const channel = await findOneWithDecryption(\n    em,\n    CommunicationChannel,\n    {\n      id: payload.channelId,\n      tenantId: payload.scope.tenantId,\n      organizationId: payload.scope.organizationId ?? null,\n      deletedAt: null,\n    },\n    undefined,\n    payload.scope,\n  )\n  if (!channel) {\n    return { status: 'no_adapter', message: `Channel ${payload.channelId} not found` }\n  }\n  if (!channel.isActive) {\n    return { status: 'channel_inactive', message: `Channel ${payload.channelId} is inactive` }\n  }\n\n  // Credentials. Per-user scoping via `channel.userId` (review R2-C1 / N1).\n  type CredentialsServiceLike = {\n    resolve: (\n      integrationId: string,\n      scope: { organizationId: string; tenantId: string; userId?: string | null },\n    ) => Promise<Record<string, unknown> | null>\n    save?: (\n      integrationId: string,\n      credentials: Record<string, unknown>,\n      scope: { organizationId: string; tenantId: string; userId?: string | null },\n    ) => Promise<void>\n  }\n  let credentials: Record<string, unknown> = {}\n  let credentialsService: CredentialsServiceLike | null = null\n  try {\n    credentialsService = ctx.resolve<CredentialsServiceLike>('integrationCredentialsService')\n  } catch {\n    credentialsService = null\n  }\n  const credentialsScope = {\n    tenantId: payload.scope.tenantId,\n    organizationId: payload.scope.organizationId ?? payload.scope.tenantId,\n    userId: channel.userId ?? null,\n  }\n  if (channel.credentialsRef && credentialsService) {\n    try {\n      credentials =\n        (await credentialsService.resolve(`channel_${channel.providerKey}`, credentialsScope)) ?? {}\n    } catch {\n      credentials = {}\n    }\n  }\n  const refreshed = await refreshCredentialsIfNeeded(\n    {\n      adapter,\n      channelId: channel.id,\n      credentials,\n      scope: credentialsScope,\n    },\n    { credentialsService },\n  )\n  credentials = refreshed.credentials\n\n  try {\n    if (action === 'send') {\n      if (typeof adapter.sendReaction !== 'function') {\n        return { status: 'no_adapter', message: `Adapter '${adapter.providerKey}' has no sendReaction` }\n      }\n      const sendPayload = payload as ReactionOutboundSendJob\n      await adapter.sendReaction({\n        externalMessageId: sendPayload.messageId, // platform message id; the adapter maps to provider id via its own channel-link lookup if needed\n        conversationId: sendPayload.conversationId ?? '',\n        emoji: sendPayload.emoji,\n        credentials,\n        scope: {\n          tenantId: payload.scope.tenantId,\n          organizationId: payload.scope.organizationId ?? payload.scope.tenantId,\n        },\n      })\n    } else {\n      if (typeof adapter.removeReaction !== 'function') {\n        return { status: 'no_adapter', message: `Adapter '${adapter.providerKey}' has no removeReaction` }\n      }\n      const removePayload = payload as ReactionOutboundRemoveJob\n      await adapter.removeReaction({\n        externalMessageId: removePayload.externalReactionId ?? removePayload.messageId,\n        conversationId: removePayload.conversationId ?? '',\n        emoji: removePayload.emoji,\n        credentials,\n        scope: {\n          tenantId: payload.scope.tenantId,\n          organizationId: payload.scope.organizationId ?? payload.scope.tenantId,\n        },\n      })\n    }\n    return { status: 'ok' }\n  } catch (err) {\n    const classification = classifyOutboundError(err)\n    return {\n      status: 'failed',\n      transient: classification.transient,\n      message: classification.message,\n    }\n  }\n}\n\nasync function maybeRetry(\n  result: AdapterCallResult,\n  payload: ReactionProcessorPayload,\n  ctx: HandlerContext,\n): Promise<void> {\n  if (result.status === 'ok') return\n  if (result.status === 'no_adapter' || result.status === 'channel_inactive') {\n    // Permanent \u2014 log and stop.\n    logger.error('reaction processing failed', { status: result.status, reason: result.message })\n    return\n  }\n  if (!result.transient) {\n    logger.error('permanent reaction processing failure', { reason: result.message })\n    return\n  }\n  const attempt = payload.attempt ?? 1\n  if (attempt >= REACTION_PROCESSOR_MAX_ATTEMPTS) {\n    logger.error('giving up on reaction processing', { attempt, reason: result.message })\n    return\n  }\n  const next: ReactionProcessorPayload = { ...payload, attempt: attempt + 1 }\n  const queue = getCommunicationChannelsQueue(COMMUNICATION_CHANNELS_QUEUES.reactions)\n  await queue.enqueue(next as unknown as Record<string, unknown>, {\n    delayMs: computeBackoffMs(attempt),\n  })\n}\n"],
+  "mappings": "AAGA,SAAS,6BAA6B;AACtC;AAAA,EACE;AAAA,OAGK;AACP,SAAS,+BAA+B,qCAAqC;AAC7E,SAAS,uBAAuB,wBAAwB;AACxD,SAAS,4BAA4B;AACrC;AAAA,EACE;AAAA,OAKK;AACP,SAAS,kCAAkC;AAE3C,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,wBAAwB,EAAE,MAAM,EAAE,WAAW,qBAAqB,CAAC;AAIxF,MAAM,WAAuB;AAAA,EAClC,OAAO,8BAA8B;AAAA,EACrC,IAAI;AAAA,EACJ,aAAa;AACf;AAwBA,eAAO,OACL,KACA,KACe;AACf,UAAQ,IAAI,QAAQ,MAAM;AAAA,IACxB,KAAK;AACH,YAAM,cAAc,IAAI,SAAS,GAAG;AACpC;AAAA,IACF,KAAK;AACH,YAAM,mBAAmB,IAAI,SAAS,GAAG;AACzC;AAAA,IACF,KAAK;AACH,YAAM,qBAAqB,IAAI,SAAS,GAAG;AAC3C;AAAA,IACF,SAAS;AAEP,YAAM,aAAoB,IAAI;AAC9B,YAAM,IAAI,MAAM,8BAA8B,KAAK,UAAU,UAAU,CAAC,EAAE;AAAA,IAC5E;AAAA,EACF;AACF;AAEA,eAAe,cAAc,SAA6B,KAAoC;AAC5F,QAAM,aAAa,IAAI,QAAoB,YAAY;AACvD,QAAM,iBAAiB,EAAE,SAAS,IAAI,QAAQ,KAAK,GAAG,EAAE;AACxD,QAAM,aAAa;AAAA,IACjB,WAAW;AAAA,IACX,MAAM;AAAA,IACN,mBAAmB;AAAA,IACnB,wBAAwB,QAAQ,MAAM,kBAAkB;AAAA,IACxD,iBAAiB,QAAQ,MAAM,iBAAiB,CAAC,QAAQ,MAAM,cAAc,IAAI;AAAA,EACnF;AACA,QAAM,QAAqC;AAAA,IACzC,WAAW,QAAQ;AAAA,IACnB,aAAa,QAAQ;AAAA,IACrB,aAAa,QAAQ;AAAA,IACrB,OAAO,QAAQ;AAAA,IACf,OAAO,QAAQ;AAAA,EACjB;AACA,QAAM,WAAW;AAAA,IACf;AAAA,IACA,EAAE,OAAO,KAAK,WAAoB;AAAA,EACpC;AACF;AAEA,eAAe,mBAAmB,SAAkC,KAAoC;AACtG,QAAM,SAAS,MAAM,oBAAoB,SAAS,KAAK,MAAM;AAC7D,QAAM,WAAW,QAAQ,SAAS,GAAG;AACvC;AAEA,eAAe,qBACb,SACA,KACe;AACf,QAAM,SAAS,MAAM,oBAAoB,SAAS,KAAK,QAAQ;AAC/D,QAAM,WAAW,QAAQ,SAAS,GAAG;AACvC;AAQA,eAAe,oBACb,SACA,KACA,QAC4B;AAC5B,QAAM,kBAAkB,IAAI,QAAgC,wBAAwB;AACpF,QAAM,UAAU,iBAAiB,IAAI,QAAQ,WAAW;AACxD,MAAI,CAAC,SAAS;AACZ,WAAO,EAAE,QAAQ,cAAc,SAAS,4BAA4B,QAAQ,WAAW,IAAI;AAAA,EAC7F;AACA,QAAM,KAAM,IAAI,QAAQ,IAAI,EAAoB,KAAK;AACrD,QAAM,UAAU,MAAM;AAAA,IACpB;AAAA,IACA;AAAA,IACA;AAAA,MACE,IAAI,QAAQ;AAAA,MACZ,UAAU,QAAQ,MAAM;AAAA,MACxB,gBAAgB,QAAQ,MAAM,kBAAkB;AAAA,MAChD,WAAW;AAAA,IACb;AAAA,IACA;AAAA,IACA,QAAQ;AAAA,EACV;AACA,MAAI,CAAC,SAAS;AACZ,WAAO,EAAE,QAAQ,cAAc,SAAS,WAAW,QAAQ,SAAS,aAAa;AAAA,EACnF;AACA,MAAI,CAAC,QAAQ,UAAU;AACrB,WAAO,EAAE,QAAQ,oBAAoB,SAAS,WAAW,QAAQ,SAAS,eAAe;AAAA,EAC3F;AAcA,MAAI,cAAuC,CAAC;AAC5C,MAAI,qBAAoD;AACxD,MAAI;AACF,yBAAqB,IAAI,QAAgC,+BAA+B;AAAA,EAC1F,QAAQ;AACN,yBAAqB;AAAA,EACvB;AACA,QAAM,mBAAmB;AAAA,IACvB,UAAU,QAAQ,MAAM;AAAA,IACxB,gBAAgB,QAAQ,MAAM,kBAAkB,QAAQ,MAAM;AAAA,IAC9D,QAAQ,QAAQ,UAAU;AAAA,EAC5B;AACA,MAAI,QAAQ,kBAAkB,oBAAoB;AAChD,QAAI;AACF,oBACG,MAAM,mBAAmB,QAAQ,WAAW,QAAQ,WAAW,IAAI,gBAAgB,KAAM,CAAC;AAAA,IAC/F,QAAQ;AACN,oBAAc,CAAC;AAAA,IACjB;AAAA,EACF;AACA,QAAM,YAAY,MAAM;AAAA,IACtB;AAAA,MACE;AAAA,MACA,WAAW,QAAQ;AAAA,MACnB;AAAA,MACA,OAAO;AAAA,IACT;AAAA,IACA,EAAE,mBAAmB;AAAA,EACvB;AACA,gBAAc,UAAU;AAExB,MAAI;AACF,QAAI,WAAW,QAAQ;AACrB,UAAI,OAAO,QAAQ,iBAAiB,YAAY;AAC9C,eAAO,EAAE,QAAQ,cAAc,SAAS,YAAY,QAAQ,WAAW,wBAAwB;AAAA,MACjG;AACA,YAAM,cAAc;AACpB,YAAM,QAAQ,aAAa;AAAA,QACzB,mBAAmB,YAAY;AAAA;AAAA,QAC/B,gBAAgB,YAAY,kBAAkB;AAAA,QAC9C,OAAO,YAAY;AAAA,QACnB;AAAA,QACA,OAAO;AAAA,UACL,UAAU,QAAQ,MAAM;AAAA,UACxB,gBAAgB,QAAQ,MAAM,kBAAkB,QAAQ,MAAM;AAAA,QAChE;AAAA,MACF,CAAC;AAAA,IACH,OAAO;AACL,UAAI,OAAO,QAAQ,mBAAmB,YAAY;AAChD,eAAO,EAAE,QAAQ,cAAc,SAAS,YAAY,QAAQ,WAAW,0BAA0B;AAAA,MACnG;AACA,YAAM,gBAAgB;AACtB,YAAM,QAAQ,eAAe;AAAA,QAC3B,mBAAmB,cAAc,sBAAsB,cAAc;AAAA,QACrE,gBAAgB,cAAc,kBAAkB;AAAA,QAChD,OAAO,cAAc;AAAA,QACrB;AAAA,QACA,OAAO;AAAA,UACL,UAAU,QAAQ,MAAM;AAAA,UACxB,gBAAgB,QAAQ,MAAM,kBAAkB,QAAQ,MAAM;AAAA,QAChE;AAAA,MACF,CAAC;AAAA,IACH;AACA,WAAO,EAAE,QAAQ,KAAK;AAAA,EACxB,SAAS,KAAK;AACZ,UAAM,iBAAiB,sBAAsB,GAAG;AAChD,WAAO;AAAA,MACL,QAAQ;AAAA,MACR,WAAW,eAAe;AAAA,MAC1B,SAAS,eAAe;AAAA,IAC1B;AAAA,EACF;AACF;AAEA,eAAe,WACb,QACA,SACA,KACe;AACf,MAAI,OAAO,WAAW,KAAM;AAC5B,MAAI,OAAO,WAAW,gBAAgB,OAAO,WAAW,oBAAoB;AAE1E,WAAO,MAAM,8BAA8B,EAAE,QAAQ,OAAO,QAAQ,QAAQ,OAAO,QAAQ,CAAC;AAC5F;AAAA,EACF;AACA,MAAI,CAAC,OAAO,WAAW;AACrB,WAAO,MAAM,yCAAyC,EAAE,QAAQ,OAAO,QAAQ,CAAC;AAChF;AAAA,EACF;AACA,QAAM,UAAU,QAAQ,WAAW;AACnC,MAAI,WAAW,iCAAiC;AAC9C,WAAO,MAAM,oCAAoC,EAAE,SAAS,QAAQ,OAAO,QAAQ,CAAC;AACpF;AAAA,EACF;AACA,QAAM,OAAiC,EAAE,GAAG,SAAS,SAAS,UAAU,EAAE;AAC1E,QAAM,QAAQ,8BAA8B,8BAA8B,SAAS;AACnF,QAAM,MAAM,QAAQ,MAA4C;AAAA,IAC9D,SAAS,iBAAiB,OAAO;AAAA,EACnC,CAAC;AACH;",
   "names": []
 }

package/dist/modules/configs/api/cache/route.js

@@ -16,6 +16,8 @@ import {
   cachePurgeSegmentResponseSchema,
   configErrorSchema
 } from "../openapi.js";
+import { createLogger } from "@open-mercato/shared/lib/logger";
+const logger = createLogger("configs");
 const metadata = {
   GET: { requireAuth: true, requireFeatures: ["configs.cache.view"] },
   POST: { requireAuth: true, requireFeatures: ["configs.cache.manage"] }
@@ -44,7 +46,7 @@ async function GET(req) {
     const stats = await runWithCacheTenant(auth.tenantId ?? null, () => collectCrudCacheStats(cache));
     return NextResponse.json(stats);
   } catch (error) {
-    console.error("[configs.cache] failed to resolve cache stats", error);
+    logger.error("failed to resolve cache stats", { component: "cache", err: error });
     return NextResponse.json(
       { error: translate("configs.cache.unavailable", "Cache service is unavailable.") },
       { status: 500 }
@@ -134,7 +136,7 @@ async function POST(req) {
     }
     return NextResponse.json(responseBody);
   } catch (error) {
-    console.error("[configs.cache] failed to purge cache", error);
+    logger.error("failed to purge cache", { component: "cache", err: error });
     return NextResponse.json(
       { error: translate("configs.cache.purgeError", "Failed to purge cache segment.") },
       { status: 500 }

package/dist/modules/configs/api/cache/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../src/modules/configs/api/cache/route.ts"],
-  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { runWithCacheTenant, type CacheStrategy } from '@open-mercato/cache'\nimport { collectCrudCacheStats, purgeCrudCacheSegment } from '@open-mercato/shared/lib/crud/cache-stats'\nimport {\n  bridgeLegacyGuard,\n  runMutationGuards,\n  type MutationGuardInput,\n} from '@open-mercato/shared/lib/crud/mutation-guard-registry'\nimport {\n  configsTag,\n  cacheStatsResponseSchema,\n  cachePurgeRequestSchema,\n  cachePurgeAllResponseSchema,\n  cachePurgeSegmentResponseSchema,\n  configErrorSchema,\n} from '../openapi'\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['configs.cache.view'] },\n  POST: { requireAuth: true, requireFeatures: ['configs.cache.manage'] },\n} as const\n\nfunction resolveUserFeatures(auth: unknown): string[] {\n  const features = (auth as { features?: unknown } | null)?.features\n  return Array.isArray(features) ? features.filter((value): value is string => typeof value === 'string') : []\n}\n\nexport async function GET(req: Request) {\n  const auth = await getAuthFromRequest(req)\n  if (!auth?.sub) {\n    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n  }\n\n  const { translate } = await resolveTranslations()\n\n  try {\n    const container = await createRequestContainer()\n    let cache: CacheStrategy\n    try {\n      cache = (container.resolve('cache') as CacheStrategy)\n    } catch {\n      return NextResponse.json(\n        { error: translate('configs.cache.unavailable', 'Cache service is unavailable.') },\n        { status: 503 },\n      )\n    }\n    const stats = await runWithCacheTenant(auth.tenantId ?? null, () => collectCrudCacheStats(cache))\n    return NextResponse.json(stats)\n  } catch (error) {\n    console.error('[configs.cache] failed to resolve cache stats', error)\n    return NextResponse.json(\n      { error: translate('configs.cache.unavailable', 'Cache service is unavailable.') },\n      { status: 500 },\n    )\n  }\n}\n\nexport async function POST(req: Request) {\n  const auth = await getAuthFromRequest(req)\n  if (!auth?.sub) {\n    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n  }\n\n  const { translate } = await resolveTranslations()\n\n  let body: any = null\n  try {\n    body = await req.json()\n  } catch {\n    body = null\n  }\n\n  const action = typeof body?.action === 'string' ? body.action : 'purgeAll'\n\n  try {\n    const container = await createRequestContainer()\n    let cache: CacheStrategy\n    try {\n      cache = (container.resolve('cache') as CacheStrategy)\n    } catch {\n      return NextResponse.json(\n        { error: translate('configs.cache.unavailable', 'Cache service is unavailable.') },\n        { status: 503 },\n      )\n    }\n    const tenantScope = auth.tenantId ?? null\n\n    const segment =\n      action === 'purgeSegment'\n        ? (typeof body?.segment === 'string' ? body.segment.trim() : '')\n        : null\n    if (action === 'purgeSegment' && !segment) {\n      return NextResponse.json(\n        { error: translate('configs.cache.purgeError', 'Failed to purge cache segment.') },\n        { status: 400 },\n      )\n    }\n\n    // Mutation-guard contract for this custom write route (packages/core/AGENTS.md\n    // \u2192 API Routes). A cache purge carries no per-record optimistic-lock version, so\n    // the default OSS guard short-circuits; wiring it keeps the route on the shared\n    // write-guard interception path for any tenant-registered guard.\n    const guardInput: MutationGuardInput = {\n      tenantId: tenantScope ?? '',\n      organizationId: auth.orgId ?? null,\n      userId: auth.sub,\n      resourceKind: 'configs.cache',\n      resourceId: segment ?? tenantScope ?? 'all',\n      operation: 'delete',\n      requestMethod: req.method,\n      requestHeaders: req.headers,\n      mutationPayload: { action, ...(segment ? { segment } : {}) },\n    }\n    const guard = bridgeLegacyGuard(container)\n    let afterSuccessCallbacks: Awaited<ReturnType<typeof runMutationGuards>>['afterSuccessCallbacks'] = []\n    if (guard) {\n      const guardResult = await runMutationGuards([guard], guardInput, {\n        userFeatures: resolveUserFeatures(auth),\n      })\n      if (!guardResult.ok) {\n        return NextResponse.json(\n          guardResult.errorBody ?? { error: translate('configs.cache.purgeError', 'Failed to purge cache segment.') },\n          { status: guardResult.errorStatus ?? 422 },\n        )\n      }\n      afterSuccessCallbacks = guardResult.afterSuccessCallbacks\n    }\n\n    let responseBody: Record<string, unknown>\n    if (action === 'purgeSegment') {\n      const result = await runWithCacheTenant(tenantScope, () => purgeCrudCacheSegment(cache, segment!))\n      const stats = await runWithCacheTenant(tenantScope, () => collectCrudCacheStats(cache))\n      responseBody = { action: 'purgeSegment', segment, deleted: result.deleted, stats }\n    } else {\n      await runWithCacheTenant(tenantScope, () => cache.clear())\n      const stats = await runWithCacheTenant(tenantScope, () => collectCrudCacheStats(cache))\n      responseBody = { action: 'purgeAll', stats }\n    }\n\n    for (const callback of afterSuccessCallbacks) {\n      if (!callback.guard.afterSuccess) continue\n      await callback.guard.afterSuccess({\n        tenantId: tenantScope ?? '',\n        organizationId: auth.orgId ?? null,\n        userId: auth.sub,\n        resourceKind: 'configs.cache',\n        resourceId: segment ?? tenantScope ?? 'all',\n        operation: 'delete',\n        requestMethod: req.method,\n        requestHeaders: req.headers,\n        metadata: callback.metadata ?? null,\n      })\n    }\n\n    return NextResponse.json(responseBody)\n  } catch (error) {\n    console.error('[configs.cache] failed to purge cache', error)\n    return NextResponse.json(\n      { error: translate('configs.cache.purgeError', 'Failed to purge cache segment.') },\n      { status: 500 },\n    )\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: configsTag,\n  summary: 'Cache management',\n  methods: {\n    GET: {\n      summary: 'Get cache statistics',\n      description: 'Returns detailed cache statistics including total entries and breakdown by cache segments. Requires cache service to be available.',\n      responses: [\n        { status: 200, description: 'Cache statistics', schema: cacheStatsResponseSchema },\n      ],\n      errors: [\n        { status: 401, description: 'Unauthorized', schema: configErrorSchema },\n        { status: 500, description: 'Failed to resolve cache stats', schema: configErrorSchema },\n        { status: 503, description: 'Cache service unavailable', schema: configErrorSchema },\n      ],\n    },\n    POST: {\n      summary: 'Purge cache',\n      description: 'Purges cache entries. Supports two actions: purgeAll (clears entire cache) or purgeSegment (clears specific segment). Returns updated cache statistics after purge.',\n      requestBody: {\n        contentType: 'application/json',\n        schema: cachePurgeRequestSchema,\n      },\n      responses: [\n        { status: 200, description: 'All cache cleared successfully', schema: cachePurgeAllResponseSchema },\n        { status: 200, description: 'Cache segment cleared successfully', schema: cachePurgeSegmentResponseSchema },\n      ],\n      errors: [\n        { status: 400, description: 'Invalid request - missing segment identifier for purgeSegment action', schema: configErrorSchema },\n        { status: 401, description: 'Unauthorized', schema: configErrorSchema },\n        { status: 500, description: 'Failed to purge cache', schema: configErrorSchema },\n        { status: 503, description: 'Cache service unavailable', schema: configErrorSchema },\n      ],\n    },\n  },\n}\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAE7B,SAAS,0BAA0B;AACnC,SAAS,8BAA8B;AACvC,SAAS,2BAA2B;AACpC,SAAS,0BAA8C;AACvD,SAAS,uBAAuB,6BAA6B;AAC7D;AAAA,EACE;AAAA,EACA;AAAA,OAEK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEA,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,oBAAoB,EAAE;AAAA,EAClE,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,sBAAsB,EAAE;AACvE;AAEA,SAAS,oBAAoB,MAAyB;AACpD,QAAM,WAAY,MAAwC;AAC1D,SAAO,MAAM,QAAQ,QAAQ,IAAI,SAAS,OAAO,CAAC,UAA2B,OAAO,UAAU,QAAQ,IAAI,CAAC;AAC7G;AAEA,eAAsB,IAAI,KAAc;AACtC,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM,KAAK;AACd,WAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrE;AAEA,QAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAEhD,MAAI;AACF,UAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAI;AACJ,QAAI;AACF,cAAS,UAAU,QAAQ,OAAO;AAAA,IACpC,QAAQ;AACN,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,UAAU,6BAA6B,+BAA+B,EAAE;AAAA,QACjF,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AACA,UAAM,QAAQ,MAAM,mBAAmB,KAAK,YAAY,MAAM,MAAM,sBAAsB,KAAK,CAAC;AAChG,WAAO,aAAa,KAAK,KAAK;AAAA,EAChC,SAAS,OAAO;AACd,YAAQ,MAAM,iDAAiD,KAAK;AACpE,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,UAAU,6BAA6B,+BAA+B,EAAE;AAAA,MACjF,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACF;AAEA,eAAsB,KAAK,KAAc;AACvC,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM,KAAK;AACd,WAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrE;AAEA,QAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAEhD,MAAI,OAAY;AAChB,MAAI;AACF,WAAO,MAAM,IAAI,KAAK;AAAA,EACxB,QAAQ;AACN,WAAO;AAAA,EACT;AAEA,QAAM,SAAS,OAAO,MAAM,WAAW,WAAW,KAAK,SAAS;AAEhE,MAAI;AACF,UAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAI;AACJ,QAAI;AACF,cAAS,UAAU,QAAQ,OAAO;AAAA,IACpC,QAAQ;AACN,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,UAAU,6BAA6B,+BAA+B,EAAE;AAAA,QACjF,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AACA,UAAM,cAAc,KAAK,YAAY;AAErC,UAAM,UACJ,WAAW,iBACN,OAAO,MAAM,YAAY,WAAW,KAAK,QAAQ,KAAK,IAAI,KAC3D;AACN,QAAI,WAAW,kBAAkB,CAAC,SAAS;AACzC,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,UAAU,4BAA4B,gCAAgC,EAAE;AAAA,QACjF,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAMA,UAAM,aAAiC;AAAA,MACrC,UAAU,eAAe;AAAA,MACzB,gBAAgB,KAAK,SAAS;AAAA,MAC9B,QAAQ,KAAK;AAAA,MACb,cAAc;AAAA,MACd,YAAY,WAAW,eAAe;AAAA,MACtC,WAAW;AAAA,MACX,eAAe,IAAI;AAAA,MACnB,gBAAgB,IAAI;AAAA,MACpB,iBAAiB,EAAE,QAAQ,GAAI,UAAU,EAAE,QAAQ,IAAI,CAAC,EAAG;AAAA,IAC7D;AACA,UAAM,QAAQ,kBAAkB,SAAS;AACzC,QAAI,wBAAgG,CAAC;AACrG,QAAI,OAAO;AACT,YAAM,cAAc,MAAM,kBAAkB,CAAC,KAAK,GAAG,YAAY;AAAA,QAC/D,cAAc,oBAAoB,IAAI;AAAA,MACxC,CAAC;AACD,UAAI,CAAC,YAAY,IAAI;AACnB,eAAO,aAAa;AAAA,UAClB,YAAY,aAAa,EAAE,OAAO,UAAU,4BAA4B,gCAAgC,EAAE;AAAA,UAC1G,EAAE,QAAQ,YAAY,eAAe,IAAI;AAAA,QAC3C;AAAA,MACF;AACA,8BAAwB,YAAY;AAAA,IACtC;AAEA,QAAI;AACJ,QAAI,WAAW,gBAAgB;AAC7B,YAAM,SAAS,MAAM,mBAAmB,aAAa,MAAM,sBAAsB,OAAO,OAAQ,CAAC;AACjG,YAAM,QAAQ,MAAM,mBAAmB,aAAa,MAAM,sBAAsB,KAAK,CAAC;AACtF,qBAAe,EAAE,QAAQ,gBAAgB,SAAS,SAAS,OAAO,SAAS,MAAM;AAAA,IACnF,OAAO;AACL,YAAM,mBAAmB,aAAa,MAAM,MAAM,MAAM,CAAC;AACzD,YAAM,QAAQ,MAAM,mBAAmB,aAAa,MAAM,sBAAsB,KAAK,CAAC;AACtF,qBAAe,EAAE,QAAQ,YAAY,MAAM;AAAA,IAC7C;AAEA,eAAW,YAAY,uBAAuB;AAC5C,UAAI,CAAC,SAAS,MAAM,aAAc;AAClC,YAAM,SAAS,MAAM,aAAa;AAAA,QAChC,UAAU,eAAe;AAAA,QACzB,gBAAgB,KAAK,SAAS;AAAA,QAC9B,QAAQ,KAAK;AAAA,QACb,cAAc;AAAA,QACd,YAAY,WAAW,eAAe;AAAA,QACtC,WAAW;AAAA,QACX,eAAe,IAAI;AAAA,QACnB,gBAAgB,IAAI;AAAA,QACpB,UAAU,SAAS,YAAY;AAAA,MACjC,CAAC;AAAA,IACH;AAEA,WAAO,aAAa,KAAK,YAAY;AAAA,EACvC,SAAS,OAAO;AACd,YAAQ,MAAM,yCAAyC,KAAK;AAC5D,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,UAAU,4BAA4B,gCAAgC,EAAE;AAAA,MACjF,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,aAAa;AAAA,MACb,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,oBAAoB,QAAQ,yBAAyB;AAAA,MACnF;AAAA,MACA,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,kBAAkB;AAAA,QACtE,EAAE,QAAQ,KAAK,aAAa,iCAAiC,QAAQ,kBAAkB;AAAA,QACvF,EAAE,QAAQ,KAAK,aAAa,6BAA6B,QAAQ,kBAAkB;AAAA,MACrF;AAAA,IACF;AAAA,IACA,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aAAa;AAAA,MACb,aAAa;AAAA,QACX,aAAa;AAAA,QACb,QAAQ;AAAA,MACV;AAAA,MACA,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,kCAAkC,QAAQ,4BAA4B;AAAA,QAClG,EAAE,QAAQ,KAAK,aAAa,sCAAsC,QAAQ,gCAAgC;AAAA,MAC5G;AAAA,MACA,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,wEAAwE,QAAQ,kBAAkB;AAAA,QAC9H,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,kBAAkB;AAAA,QACtE,EAAE,QAAQ,KAAK,aAAa,yBAAyB,QAAQ,kBAAkB;AAAA,QAC/E,EAAE,QAAQ,KAAK,aAAa,6BAA6B,QAAQ,kBAAkB;AAAA,MACrF;AAAA,IACF;AAAA,EACF;AACF;",
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { runWithCacheTenant, type CacheStrategy } from '@open-mercato/cache'\nimport { collectCrudCacheStats, purgeCrudCacheSegment } from '@open-mercato/shared/lib/crud/cache-stats'\nimport {\n  bridgeLegacyGuard,\n  runMutationGuards,\n  type MutationGuardInput,\n} from '@open-mercato/shared/lib/crud/mutation-guard-registry'\nimport {\n  configsTag,\n  cacheStatsResponseSchema,\n  cachePurgeRequestSchema,\n  cachePurgeAllResponseSchema,\n  cachePurgeSegmentResponseSchema,\n  configErrorSchema,\n} from '../openapi'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('configs')\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['configs.cache.view'] },\n  POST: { requireAuth: true, requireFeatures: ['configs.cache.manage'] },\n} as const\n\nfunction resolveUserFeatures(auth: unknown): string[] {\n  const features = (auth as { features?: unknown } | null)?.features\n  return Array.isArray(features) ? features.filter((value): value is string => typeof value === 'string') : []\n}\n\nexport async function GET(req: Request) {\n  const auth = await getAuthFromRequest(req)\n  if (!auth?.sub) {\n    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n  }\n\n  const { translate } = await resolveTranslations()\n\n  try {\n    const container = await createRequestContainer()\n    let cache: CacheStrategy\n    try {\n      cache = (container.resolve('cache') as CacheStrategy)\n    } catch {\n      return NextResponse.json(\n        { error: translate('configs.cache.unavailable', 'Cache service is unavailable.') },\n        { status: 503 },\n      )\n    }\n    const stats = await runWithCacheTenant(auth.tenantId ?? null, () => collectCrudCacheStats(cache))\n    return NextResponse.json(stats)\n  } catch (error) {\n    logger.error('failed to resolve cache stats', { component: 'cache', err: error })\n    return NextResponse.json(\n      { error: translate('configs.cache.unavailable', 'Cache service is unavailable.') },\n      { status: 500 },\n    )\n  }\n}\n\nexport async function POST(req: Request) {\n  const auth = await getAuthFromRequest(req)\n  if (!auth?.sub) {\n    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n  }\n\n  const { translate } = await resolveTranslations()\n\n  let body: any = null\n  try {\n    body = await req.json()\n  } catch {\n    body = null\n  }\n\n  const action = typeof body?.action === 'string' ? body.action : 'purgeAll'\n\n  try {\n    const container = await createRequestContainer()\n    let cache: CacheStrategy\n    try {\n      cache = (container.resolve('cache') as CacheStrategy)\n    } catch {\n      return NextResponse.json(\n        { error: translate('configs.cache.unavailable', 'Cache service is unavailable.') },\n        { status: 503 },\n      )\n    }\n    const tenantScope = auth.tenantId ?? null\n\n    const segment =\n      action === 'purgeSegment'\n        ? (typeof body?.segment === 'string' ? body.segment.trim() : '')\n        : null\n    if (action === 'purgeSegment' && !segment) {\n      return NextResponse.json(\n        { error: translate('configs.cache.purgeError', 'Failed to purge cache segment.') },\n        { status: 400 },\n      )\n    }\n\n    // Mutation-guard contract for this custom write route (packages/core/AGENTS.md\n    // \u2192 API Routes). A cache purge carries no per-record optimistic-lock version, so\n    // the default OSS guard short-circuits; wiring it keeps the route on the shared\n    // write-guard interception path for any tenant-registered guard.\n    const guardInput: MutationGuardInput = {\n      tenantId: tenantScope ?? '',\n      organizationId: auth.orgId ?? null,\n      userId: auth.sub,\n      resourceKind: 'configs.cache',\n      resourceId: segment ?? tenantScope ?? 'all',\n      operation: 'delete',\n      requestMethod: req.method,\n      requestHeaders: req.headers,\n      mutationPayload: { action, ...(segment ? { segment } : {}) },\n    }\n    const guard = bridgeLegacyGuard(container)\n    let afterSuccessCallbacks: Awaited<ReturnType<typeof runMutationGuards>>['afterSuccessCallbacks'] = []\n    if (guard) {\n      const guardResult = await runMutationGuards([guard], guardInput, {\n        userFeatures: resolveUserFeatures(auth),\n      })\n      if (!guardResult.ok) {\n        return NextResponse.json(\n          guardResult.errorBody ?? { error: translate('configs.cache.purgeError', 'Failed to purge cache segment.') },\n          { status: guardResult.errorStatus ?? 422 },\n        )\n      }\n      afterSuccessCallbacks = guardResult.afterSuccessCallbacks\n    }\n\n    let responseBody: Record<string, unknown>\n    if (action === 'purgeSegment') {\n      const result = await runWithCacheTenant(tenantScope, () => purgeCrudCacheSegment(cache, segment!))\n      const stats = await runWithCacheTenant(tenantScope, () => collectCrudCacheStats(cache))\n      responseBody = { action: 'purgeSegment', segment, deleted: result.deleted, stats }\n    } else {\n      await runWithCacheTenant(tenantScope, () => cache.clear())\n      const stats = await runWithCacheTenant(tenantScope, () => collectCrudCacheStats(cache))\n      responseBody = { action: 'purgeAll', stats }\n    }\n\n    for (const callback of afterSuccessCallbacks) {\n      if (!callback.guard.afterSuccess) continue\n      await callback.guard.afterSuccess({\n        tenantId: tenantScope ?? '',\n        organizationId: auth.orgId ?? null,\n        userId: auth.sub,\n        resourceKind: 'configs.cache',\n        resourceId: segment ?? tenantScope ?? 'all',\n        operation: 'delete',\n        requestMethod: req.method,\n        requestHeaders: req.headers,\n        metadata: callback.metadata ?? null,\n      })\n    }\n\n    return NextResponse.json(responseBody)\n  } catch (error) {\n    logger.error('failed to purge cache', { component: 'cache', err: error })\n    return NextResponse.json(\n      { error: translate('configs.cache.purgeError', 'Failed to purge cache segment.') },\n      { status: 500 },\n    )\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: configsTag,\n  summary: 'Cache management',\n  methods: {\n    GET: {\n      summary: 'Get cache statistics',\n      description: 'Returns detailed cache statistics including total entries and breakdown by cache segments. Requires cache service to be available.',\n      responses: [\n        { status: 200, description: 'Cache statistics', schema: cacheStatsResponseSchema },\n      ],\n      errors: [\n        { status: 401, description: 'Unauthorized', schema: configErrorSchema },\n        { status: 500, description: 'Failed to resolve cache stats', schema: configErrorSchema },\n        { status: 503, description: 'Cache service unavailable', schema: configErrorSchema },\n      ],\n    },\n    POST: {\n      summary: 'Purge cache',\n      description: 'Purges cache entries. Supports two actions: purgeAll (clears entire cache) or purgeSegment (clears specific segment). Returns updated cache statistics after purge.',\n      requestBody: {\n        contentType: 'application/json',\n        schema: cachePurgeRequestSchema,\n      },\n      responses: [\n        { status: 200, description: 'All cache cleared successfully', schema: cachePurgeAllResponseSchema },\n        { status: 200, description: 'Cache segment cleared successfully', schema: cachePurgeSegmentResponseSchema },\n      ],\n      errors: [\n        { status: 400, description: 'Invalid request - missing segment identifier for purgeSegment action', schema: configErrorSchema },\n        { status: 401, description: 'Unauthorized', schema: configErrorSchema },\n        { status: 500, description: 'Failed to purge cache', schema: configErrorSchema },\n        { status: 503, description: 'Cache service unavailable', schema: configErrorSchema },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAE7B,SAAS,0BAA0B;AACnC,SAAS,8BAA8B;AACvC,SAAS,2BAA2B;AACpC,SAAS,0BAA8C;AACvD,SAAS,uBAAuB,6BAA6B;AAC7D;AAAA,EACE;AAAA,EACA;AAAA,OAEK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,SAAS;AAE9B,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,oBAAoB,EAAE;AAAA,EAClE,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,sBAAsB,EAAE;AACvE;AAEA,SAAS,oBAAoB,MAAyB;AACpD,QAAM,WAAY,MAAwC;AAC1D,SAAO,MAAM,QAAQ,QAAQ,IAAI,SAAS,OAAO,CAAC,UAA2B,OAAO,UAAU,QAAQ,IAAI,CAAC;AAC7G;AAEA,eAAsB,IAAI,KAAc;AACtC,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM,KAAK;AACd,WAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrE;AAEA,QAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAEhD,MAAI;AACF,UAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAI;AACJ,QAAI;AACF,cAAS,UAAU,QAAQ,OAAO;AAAA,IACpC,QAAQ;AACN,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,UAAU,6BAA6B,+BAA+B,EAAE;AAAA,QACjF,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AACA,UAAM,QAAQ,MAAM,mBAAmB,KAAK,YAAY,MAAM,MAAM,sBAAsB,KAAK,CAAC;AAChG,WAAO,aAAa,KAAK,KAAK;AAAA,EAChC,SAAS,OAAO;AACd,WAAO,MAAM,iCAAiC,EAAE,WAAW,SAAS,KAAK,MAAM,CAAC;AAChF,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,UAAU,6BAA6B,+BAA+B,EAAE;AAAA,MACjF,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACF;AAEA,eAAsB,KAAK,KAAc;AACvC,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM,KAAK;AACd,WAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrE;AAEA,QAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAEhD,MAAI,OAAY;AAChB,MAAI;AACF,WAAO,MAAM,IAAI,KAAK;AAAA,EACxB,QAAQ;AACN,WAAO;AAAA,EACT;AAEA,QAAM,SAAS,OAAO,MAAM,WAAW,WAAW,KAAK,SAAS;AAEhE,MAAI;AACF,UAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAI;AACJ,QAAI;AACF,cAAS,UAAU,QAAQ,OAAO;AAAA,IACpC,QAAQ;AACN,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,UAAU,6BAA6B,+BAA+B,EAAE;AAAA,QACjF,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AACA,UAAM,cAAc,KAAK,YAAY;AAErC,UAAM,UACJ,WAAW,iBACN,OAAO,MAAM,YAAY,WAAW,KAAK,QAAQ,KAAK,IAAI,KAC3D;AACN,QAAI,WAAW,kBAAkB,CAAC,SAAS;AACzC,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,UAAU,4BAA4B,gCAAgC,EAAE;AAAA,QACjF,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAMA,UAAM,aAAiC;AAAA,MACrC,UAAU,eAAe;AAAA,MACzB,gBAAgB,KAAK,SAAS;AAAA,MAC9B,QAAQ,KAAK;AAAA,MACb,cAAc;AAAA,MACd,YAAY,WAAW,eAAe;AAAA,MACtC,WAAW;AAAA,MACX,eAAe,IAAI;AAAA,MACnB,gBAAgB,IAAI;AAAA,MACpB,iBAAiB,EAAE,QAAQ,GAAI,UAAU,EAAE,QAAQ,IAAI,CAAC,EAAG;AAAA,IAC7D;AACA,UAAM,QAAQ,kBAAkB,SAAS;AACzC,QAAI,wBAAgG,CAAC;AACrG,QAAI,OAAO;AACT,YAAM,cAAc,MAAM,kBAAkB,CAAC,KAAK,GAAG,YAAY;AAAA,QAC/D,cAAc,oBAAoB,IAAI;AAAA,MACxC,CAAC;AACD,UAAI,CAAC,YAAY,IAAI;AACnB,eAAO,aAAa;AAAA,UAClB,YAAY,aAAa,EAAE,OAAO,UAAU,4BAA4B,gCAAgC,EAAE;AAAA,UAC1G,EAAE,QAAQ,YAAY,eAAe,IAAI;AAAA,QAC3C;AAAA,MACF;AACA,8BAAwB,YAAY;AAAA,IACtC;AAEA,QAAI;AACJ,QAAI,WAAW,gBAAgB;AAC7B,YAAM,SAAS,MAAM,mBAAmB,aAAa,MAAM,sBAAsB,OAAO,OAAQ,CAAC;AACjG,YAAM,QAAQ,MAAM,mBAAmB,aAAa,MAAM,sBAAsB,KAAK,CAAC;AACtF,qBAAe,EAAE,QAAQ,gBAAgB,SAAS,SAAS,OAAO,SAAS,MAAM;AAAA,IACnF,OAAO;AACL,YAAM,mBAAmB,aAAa,MAAM,MAAM,MAAM,CAAC;AACzD,YAAM,QAAQ,MAAM,mBAAmB,aAAa,MAAM,sBAAsB,KAAK,CAAC;AACtF,qBAAe,EAAE,QAAQ,YAAY,MAAM;AAAA,IAC7C;AAEA,eAAW,YAAY,uBAAuB;AAC5C,UAAI,CAAC,SAAS,MAAM,aAAc;AAClC,YAAM,SAAS,MAAM,aAAa;AAAA,QAChC,UAAU,eAAe;AAAA,QACzB,gBAAgB,KAAK,SAAS;AAAA,QAC9B,QAAQ,KAAK;AAAA,QACb,cAAc;AAAA,QACd,YAAY,WAAW,eAAe;AAAA,QACtC,WAAW;AAAA,QACX,eAAe,IAAI;AAAA,QACnB,gBAAgB,IAAI;AAAA,QACpB,UAAU,SAAS,YAAY;AAAA,MACjC,CAAC;AAAA,IACH;AAEA,WAAO,aAAa,KAAK,YAAY;AAAA,EACvC,SAAS,OAAO;AACd,WAAO,MAAM,yBAAyB,EAAE,WAAW,SAAS,KAAK,MAAM,CAAC;AACxE,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,UAAU,4BAA4B,gCAAgC,EAAE;AAAA,MACjF,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,aAAa;AAAA,MACb,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,oBAAoB,QAAQ,yBAAyB;AAAA,MACnF;AAAA,MACA,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,kBAAkB;AAAA,QACtE,EAAE,QAAQ,KAAK,aAAa,iCAAiC,QAAQ,kBAAkB;AAAA,QACvF,EAAE,QAAQ,KAAK,aAAa,6BAA6B,QAAQ,kBAAkB;AAAA,MACrF;AAAA,IACF;AAAA,IACA,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aAAa;AAAA,MACb,aAAa;AAAA,QACX,aAAa;AAAA,QACb,QAAQ;AAAA,MACV;AAAA,MACA,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,kCAAkC,QAAQ,4BAA4B;AAAA,QAClG,EAAE,QAAQ,KAAK,aAAa,sCAAsC,QAAQ,gCAAgC;AAAA,MAC5G;AAAA,MACA,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,wEAAwE,QAAQ,kBAAkB;AAAA,QAC9H,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,kBAAkB;AAAA,QACtE,EAAE,QAAQ,KAAK,aAAa,yBAAyB,QAAQ,kBAAkB;AAAA,QAC/E,EAAE,QAAQ,KAAK,aAAa,6BAA6B,QAAQ,kBAAkB;AAAA,MACrF;AAAA,IACF;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/modules/configs/api/system-status/route.js

@@ -10,6 +10,8 @@ import {
   purgeCacheResponseSchema,
   configErrorSchema
 } from "../openapi.js";
+import { createLogger } from "@open-mercato/shared/lib/logger";
+const logger = createLogger("configs");
 const metadata = {
   GET: { requireAuth: true, requireFeatures: ["configs.system_status.view"] },
   POST: { requireAuth: true, requireFeatures: ["configs.manage"] }
@@ -23,7 +25,7 @@ async function GET(req) {
     const snapshot = buildSystemStatusSnapshot();
     return NextResponse.json(snapshot);
   } catch (error) {
-    console.error("[configs.system-status] failed to build environment snapshot", error);
+    logger.error("failed to build environment snapshot", { component: "system-status", err: error });
     const { translate } = await resolveTranslations();
     return NextResponse.json(
       { error: translate("configs.systemStatus.error", "Failed to load system status") },
@@ -55,7 +57,7 @@ async function POST(req) {
     const cleared = await runWithCacheTenant(tenantScope, () => cache.clear());
     return NextResponse.json({ cleared });
   } catch (error) {
-    console.error("[configs.system-status] failed to purge cache", error);
+    logger.error("failed to purge cache", { component: "system-status", err: error });
     return NextResponse.json(
       { error: translate("configs.systemStatus.actions.purgeCacheError", "Failed to purge cache.") },
       { status: 500 }

package/dist/modules/configs/api/system-status/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../src/modules/configs/api/system-status/route.ts"],
-  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { buildSystemStatusSnapshot } from '../../lib/system-status'\nimport type { SystemStatusSnapshot } from '../../lib/system-status.types'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { runWithCacheTenant, type CacheStrategy } from '@open-mercato/cache'\nimport {\n  configsTag,\n  systemStatusResponseSchema,\n  purgeCacheResponseSchema,\n  configErrorSchema,\n} from '../openapi'\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['configs.system_status.view'] },\n  POST: { requireAuth: true, requireFeatures: ['configs.manage'] },\n} as const\n\nexport async function GET(req: Request) {\n  const auth = await getAuthFromRequest(req)\n  if (!auth?.sub) {\n    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n  }\n\n  try {\n    const snapshot: SystemStatusSnapshot = buildSystemStatusSnapshot()\n    return NextResponse.json(snapshot)\n  } catch (error) {\n    console.error('[configs.system-status] failed to build environment snapshot', error)\n    const { translate } = await resolveTranslations()\n    return NextResponse.json(\n      { error: translate('configs.systemStatus.error', 'Failed to load system status') },\n      { status: 500 }\n    )\n  }\n}\n\nexport async function POST(req: Request) {\n  const auth = await getAuthFromRequest(req)\n  if (!auth?.sub) {\n    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n  }\n\n  const { translate } = await resolveTranslations()\n\n  try {\n    const container = await createRequestContainer()\n    let cache: CacheStrategy | null = null\n    try {\n      cache = (container.resolve('cache') as CacheStrategy)\n    } catch {\n      cache = null\n    }\n\n    if (!cache || typeof cache.clear !== 'function') {\n      return NextResponse.json(\n        { error: translate('configs.systemStatus.actions.purgeCacheUnavailable', 'Cache service is unavailable.') },\n        { status: 503 }\n      )\n    }\n\n    const tenantScope = auth.tenantId ?? null\n    const cleared = await runWithCacheTenant(tenantScope, () => cache.clear())\n    return NextResponse.json({ cleared })\n  } catch (error) {\n    console.error('[configs.system-status] failed to purge cache', error)\n    return NextResponse.json(\n      { error: translate('configs.systemStatus.actions.purgeCacheError', 'Failed to purge cache.') },\n      { status: 500 }\n    )\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: configsTag,\n  summary: 'System status and health',\n  methods: {\n    GET: {\n      summary: 'Get system health status',\n      description: 'Returns comprehensive system health information including environment details, version, resource usage, and service connectivity status.',\n      responses: [\n        { status: 200, description: 'System status snapshot', schema: systemStatusResponseSchema },\n      ],\n      errors: [\n        { status: 401, description: 'Unauthorized', schema: configErrorSchema },\n        { status: 500, description: 'Failed to load system status', schema: configErrorSchema },\n      ],\n    },\n    POST: {\n      summary: 'Clear system cache',\n      description: 'Purges the entire cache for the current tenant. Useful for troubleshooting or forcing fresh data loading.',\n      responses: [\n        { status: 200, description: 'Cache cleared successfully', schema: purgeCacheResponseSchema },\n      ],\n      errors: [\n        { status: 401, description: 'Unauthorized', schema: configErrorSchema },\n        { status: 503, description: 'Cache service unavailable', schema: configErrorSchema },\n        { status: 500, description: 'Failed to purge cache', schema: configErrorSchema },\n      ],\n    },\n  },\n}\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAE7B,SAAS,0BAA0B;AACnC,SAAS,2BAA2B;AACpC,SAAS,iCAAiC;AAE1C,SAAS,8BAA8B;AACvC,SAAS,0BAA8C;AACvD;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEA,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,4BAA4B,EAAE;AAAA,EAC1E,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,gBAAgB,EAAE;AACjE;AAEA,eAAsB,IAAI,KAAc;AACtC,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM,KAAK;AACd,WAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrE;AAEA,MAAI;AACF,UAAM,WAAiC,0BAA0B;AACjE,WAAO,aAAa,KAAK,QAAQ;AAAA,EACnC,SAAS,OAAO;AACd,YAAQ,MAAM,gEAAgE,KAAK;AACnF,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,UAAU,8BAA8B,8BAA8B,EAAE;AAAA,MACjF,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACF;AAEA,eAAsB,KAAK,KAAc;AACvC,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM,KAAK;AACd,WAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrE;AAEA,QAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAEhD,MAAI;AACF,UAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAI,QAA8B;AAClC,QAAI;AACF,cAAS,UAAU,QAAQ,OAAO;AAAA,IACpC,QAAQ;AACN,cAAQ;AAAA,IACV;AAEA,QAAI,CAAC,SAAS,OAAO,MAAM,UAAU,YAAY;AAC/C,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,UAAU,sDAAsD,+BAA+B,EAAE;AAAA,QAC1G,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAEA,UAAM,cAAc,KAAK,YAAY;AACrC,UAAM,UAAU,MAAM,mBAAmB,aAAa,MAAM,MAAM,MAAM,CAAC;AACzE,WAAO,aAAa,KAAK,EAAE,QAAQ,CAAC;AAAA,EACtC,SAAS,OAAO;AACd,YAAQ,MAAM,iDAAiD,KAAK;AACpE,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,UAAU,gDAAgD,wBAAwB,EAAE;AAAA,MAC7F,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,aAAa;AAAA,MACb,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,0BAA0B,QAAQ,2BAA2B;AAAA,MAC3F;AAAA,MACA,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,kBAAkB;AAAA,QACtE,EAAE,QAAQ,KAAK,aAAa,gCAAgC,QAAQ,kBAAkB;AAAA,MACxF;AAAA,IACF;AAAA,IACA,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aAAa;AAAA,MACb,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,8BAA8B,QAAQ,yBAAyB;AAAA,MAC7F;AAAA,MACA,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,kBAAkB;AAAA,QACtE,EAAE,QAAQ,KAAK,aAAa,6BAA6B,QAAQ,kBAAkB;AAAA,QACnF,EAAE,QAAQ,KAAK,aAAa,yBAAyB,QAAQ,kBAAkB;AAAA,MACjF;AAAA,IACF;AAAA,EACF;AACF;",
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { buildSystemStatusSnapshot } from '../../lib/system-status'\nimport type { SystemStatusSnapshot } from '../../lib/system-status.types'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { runWithCacheTenant, type CacheStrategy } from '@open-mercato/cache'\nimport {\n  configsTag,\n  systemStatusResponseSchema,\n  purgeCacheResponseSchema,\n  configErrorSchema,\n} from '../openapi'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('configs')\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['configs.system_status.view'] },\n  POST: { requireAuth: true, requireFeatures: ['configs.manage'] },\n} as const\n\nexport async function GET(req: Request) {\n  const auth = await getAuthFromRequest(req)\n  if (!auth?.sub) {\n    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n  }\n\n  try {\n    const snapshot: SystemStatusSnapshot = buildSystemStatusSnapshot()\n    return NextResponse.json(snapshot)\n  } catch (error) {\n    logger.error('failed to build environment snapshot', { component: 'system-status', err: error })\n    const { translate } = await resolveTranslations()\n    return NextResponse.json(\n      { error: translate('configs.systemStatus.error', 'Failed to load system status') },\n      { status: 500 }\n    )\n  }\n}\n\nexport async function POST(req: Request) {\n  const auth = await getAuthFromRequest(req)\n  if (!auth?.sub) {\n    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n  }\n\n  const { translate } = await resolveTranslations()\n\n  try {\n    const container = await createRequestContainer()\n    let cache: CacheStrategy | null = null\n    try {\n      cache = (container.resolve('cache') as CacheStrategy)\n    } catch {\n      cache = null\n    }\n\n    if (!cache || typeof cache.clear !== 'function') {\n      return NextResponse.json(\n        { error: translate('configs.systemStatus.actions.purgeCacheUnavailable', 'Cache service is unavailable.') },\n        { status: 503 }\n      )\n    }\n\n    const tenantScope = auth.tenantId ?? null\n    const cleared = await runWithCacheTenant(tenantScope, () => cache.clear())\n    return NextResponse.json({ cleared })\n  } catch (error) {\n    logger.error('failed to purge cache', { component: 'system-status', err: error })\n    return NextResponse.json(\n      { error: translate('configs.systemStatus.actions.purgeCacheError', 'Failed to purge cache.') },\n      { status: 500 }\n    )\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: configsTag,\n  summary: 'System status and health',\n  methods: {\n    GET: {\n      summary: 'Get system health status',\n      description: 'Returns comprehensive system health information including environment details, version, resource usage, and service connectivity status.',\n      responses: [\n        { status: 200, description: 'System status snapshot', schema: systemStatusResponseSchema },\n      ],\n      errors: [\n        { status: 401, description: 'Unauthorized', schema: configErrorSchema },\n        { status: 500, description: 'Failed to load system status', schema: configErrorSchema },\n      ],\n    },\n    POST: {\n      summary: 'Clear system cache',\n      description: 'Purges the entire cache for the current tenant. Useful for troubleshooting or forcing fresh data loading.',\n      responses: [\n        { status: 200, description: 'Cache cleared successfully', schema: purgeCacheResponseSchema },\n      ],\n      errors: [\n        { status: 401, description: 'Unauthorized', schema: configErrorSchema },\n        { status: 503, description: 'Cache service unavailable', schema: configErrorSchema },\n        { status: 500, description: 'Failed to purge cache', schema: configErrorSchema },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAE7B,SAAS,0BAA0B;AACnC,SAAS,2BAA2B;AACpC,SAAS,iCAAiC;AAE1C,SAAS,8BAA8B;AACvC,SAAS,0BAA8C;AACvD;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,SAAS;AAE9B,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,4BAA4B,EAAE;AAAA,EAC1E,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,gBAAgB,EAAE;AACjE;AAEA,eAAsB,IAAI,KAAc;AACtC,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM,KAAK;AACd,WAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrE;AAEA,MAAI;AACF,UAAM,WAAiC,0BAA0B;AACjE,WAAO,aAAa,KAAK,QAAQ;AAAA,EACnC,SAAS,OAAO;AACd,WAAO,MAAM,wCAAwC,EAAE,WAAW,iBAAiB,KAAK,MAAM,CAAC;AAC/F,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,UAAU,8BAA8B,8BAA8B,EAAE;AAAA,MACjF,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACF;AAEA,eAAsB,KAAK,KAAc;AACvC,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM,KAAK;AACd,WAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrE;AAEA,QAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAEhD,MAAI;AACF,UAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAI,QAA8B;AAClC,QAAI;AACF,cAAS,UAAU,QAAQ,OAAO;AAAA,IACpC,QAAQ;AACN,cAAQ;AAAA,IACV;AAEA,QAAI,CAAC,SAAS,OAAO,MAAM,UAAU,YAAY;AAC/C,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,UAAU,sDAAsD,+BAA+B,EAAE;AAAA,QAC1G,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAEA,UAAM,cAAc,KAAK,YAAY;AACrC,UAAM,UAAU,MAAM,mBAAmB,aAAa,MAAM,MAAM,MAAM,CAAC;AACzE,WAAO,aAAa,KAAK,EAAE,QAAQ,CAAC;AAAA,EACtC,SAAS,OAAO;AACd,WAAO,MAAM,yBAAyB,EAAE,WAAW,iBAAiB,KAAK,MAAM,CAAC;AAChF,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,UAAU,gDAAgD,wBAAwB,EAAE;AAAA,MAC7F,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,aAAa;AAAA,MACb,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,0BAA0B,QAAQ,2BAA2B;AAAA,MAC3F;AAAA,MACA,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,kBAAkB;AAAA,QACtE,EAAE,QAAQ,KAAK,aAAa,gCAAgC,QAAQ,kBAAkB;AAAA,MACxF;AAAA,IACF;AAAA,IACA,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aAAa;AAAA,MACb,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,8BAA8B,QAAQ,yBAAyB;AAAA,MAC7F;AAAA,MACA,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,kBAAkB;AAAA,QACtE,EAAE,QAAQ,KAAK,aAAa,6BAA6B,QAAQ,kBAAkB;AAAA,QACnF,EAAE,QAAQ,KAAK,aAAa,yBAAyB,QAAQ,kBAAkB;AAAA,MACjF;AAAA,IACF;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/modules/configs/api/upgrade-actions/route.js

@@ -12,6 +12,8 @@ import {
   executeUpgradeActionResponseSchema,
   configErrorSchema
 } from "../openapi.js";
+import { createLogger } from "@open-mercato/shared/lib/logger";
+const logger = createLogger("configs");
 const metadata = {
   GET: { requireAuth: true, requireFeatures: ["configs.manage"] },
   POST: { requireAuth: true, requireFeatures: ["configs.manage"] }
@@ -74,7 +76,7 @@ async function GET(req) {
     }] : [];
     return NextResponse.json({ version, actions: payload });
   } catch (error) {
-    console.error("[configs.upgrade-actions] failed to load upgrade actions", error);
+    logger.error("failed to load upgrade actions", { component: "upgrade-actions", err: error });
     return NextResponse.json({ error: "Failed to load upgrade actions" }, { status: 500 });
   }
 }
@@ -115,7 +117,7 @@ async function POST(req) {
       version
     });
   } catch (error) {
-    console.error("[configs.upgrade-actions] failed to execute upgrade action", error);
+    logger.error("failed to execute upgrade action", { component: "upgrade-actions", err: error });
     const message = translate("upgrades.runFailed", "We could not run this upgrade action.");
     const details = error instanceof Error ? error.message : null;
     return NextResponse.json({ error: message, details }, { status: 500 });

package/dist/modules/configs/api/upgrade-actions/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../src/modules/configs/api/upgrade-actions/route.ts"],
-  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { resolveFeatureCheckContext } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport { executeUpgradeAction, getCurrentVersion, isUpgradeActionsEnabled, listPendingUpgradeActions } from '../../services/upgradeActionsService'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport {\n  configsTag,\n  upgradeActionsListResponseSchema,\n  executeUpgradeActionRequestSchema,\n  executeUpgradeActionResponseSchema,\n  configErrorSchema,\n} from '../openapi'\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['configs.manage'] },\n  POST: { requireAuth: true, requireFeatures: ['configs.manage'] },\n} as const\n\nconst runSchema = z.object({\n  actionId: z.string().trim().min(1, 'action id required'),\n})\n\ntype Scope = { tenantId: string; organizationId: string }\n\nasync function resolveScope(\n  req: Request,\n  translate: (key: string, fallback?: string, params?: Record<string, unknown>) => string,\n): Promise<{ scope: Scope | null; container: Awaited<ReturnType<typeof createRequestContainer>> | null; error?: Response }> {\n  const auth = await getAuthFromRequest(req)\n  if (!auth?.sub) {\n    return { scope: null, container: null, error: NextResponse.json({ error: 'Unauthorized' }, { status: 401 }) }\n  }\n  const container = await createRequestContainer()\n  const featureContext = await resolveFeatureCheckContext({ container, auth, request: req })\n  const tenantId = featureContext.scope.tenantId ?? auth.tenantId ?? null\n  const organizationId = featureContext.organizationId ?? featureContext.scope.selectedId ?? auth.orgId ?? null\n  if (!tenantId || !organizationId) {\n    const message = translate(\n      'upgrades.scopeRequired',\n      'Select an organization and tenant to apply this upgrade.'\n    )\n    return { scope: null, container, error: NextResponse.json({ error: message }, { status: 400 }) }\n  }\n  return {\n    scope: { tenantId, organizationId },\n    container,\n  }\n}\n\nexport async function GET(req: Request) {\n  if (!isUpgradeActionsEnabled()) {\n    return NextResponse.json({ version: getCurrentVersion(), actions: [] })\n  }\n  const { translate } = await resolveTranslations()\n  const scopedTranslate = (key: string, fallback?: string, params?: Record<string, unknown>) =>\n    translate(key, fallback, params as any)\n  const scopeResult = await resolveScope(req, scopedTranslate)\n  if (!scopeResult.scope) return scopeResult.error!\n\n  const container = scopeResult.container ?? (await createRequestContainer())\n  const em = container.resolve<EntityManager>('em')\n  const version = getCurrentVersion()\n  try {\n    const actions = await listPendingUpgradeActions(em, { ...scopeResult.scope, version })\n    const nextAction = actions[0]\n    const payload = nextAction\n      ? [{\n        id: nextAction.id,\n        version: nextAction.version,\n        message: translate(\n          nextAction.messageKey,\n          'The version {{version}} has been installed. To fully use all the features from this edition please do \"Install example catalog products and categories\".',\n          { version: nextAction.version }\n        ),\n        ctaLabel: translate(\n          nextAction.ctaKey,\n          'Install example catalog products and categories'\n        ),\n        successMessage: translate(\n          nextAction.successKey,\n          'Example catalog products and categories installed.'\n        ),\n        loadingLabel: nextAction.loadingKey\n          ? translate(nextAction.loadingKey, 'Installing\u2026')\n          : translate('upgrades.loading', 'Installing\u2026'),\n      }]\n      : []\n    return NextResponse.json({ version, actions: payload })\n  } catch (error) {\n    console.error('[configs.upgrade-actions] failed to load upgrade actions', error)\n    return NextResponse.json({ error: 'Failed to load upgrade actions' }, { status: 500 })\n  }\n}\n\nexport async function POST(req: Request) {\n  if (!isUpgradeActionsEnabled()) {\n    return NextResponse.json({ error: 'Upgrade actions are disabled' }, { status: 403 })\n  }\n  const { translate } = await resolveTranslations()\n  const scopedTranslate = (key: string, fallback?: string, params?: Record<string, unknown>) =>\n    translate(key, fallback, params as any)\n  const scopeResult = await resolveScope(req, scopedTranslate)\n  if (!scopeResult.scope) return scopeResult.error!\n\n  let parsedBody: unknown\n  try {\n    parsedBody = await req.json()\n  } catch {\n    parsedBody = null\n  }\n  const parsed = runSchema.safeParse(parsedBody || {})\n  if (!parsed.success) {\n    return NextResponse.json({ error: 'Invalid request body' }, { status: 400 })\n  }\n\n  const container = scopeResult.container ?? (await createRequestContainer())\n  const version = getCurrentVersion()\n\n  try {\n    const result = await executeUpgradeAction(container, {\n      actionId: parsed.data.actionId,\n      tenantId: scopeResult.scope.tenantId,\n      organizationId: scopeResult.scope.organizationId,\n      version,\n    })\n    const successMessage = translate(\n      result.action.successKey,\n      'Example catalog products and categories installed.'\n    )\n    return NextResponse.json({\n      status: result.status,\n      message: successMessage,\n      version,\n    })\n  } catch (error) {\n    console.error('[configs.upgrade-actions] failed to execute upgrade action', error)\n    const message = translate('upgrades.runFailed', 'We could not run this upgrade action.')\n    const details = error instanceof Error ? error.message : null\n    return NextResponse.json({ error: message, details }, { status: 500 })\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: configsTag,\n  summary: 'Upgrade actions management',\n  methods: {\n    GET: {\n      summary: 'List pending upgrade actions',\n      description: 'Returns a list of pending upgrade actions for the current version. These are one-time setup tasks that need to be executed after upgrading to a new version. Requires organization and tenant context.',\n      responses: [\n        { status: 200, description: 'List of pending upgrade actions', schema: upgradeActionsListResponseSchema },\n      ],\n      errors: [\n        { status: 400, description: 'Missing organization or tenant context', schema: configErrorSchema },\n        { status: 401, description: 'Unauthorized', schema: configErrorSchema },\n        { status: 500, description: 'Failed to load upgrade actions', schema: configErrorSchema },\n      ],\n    },\n    POST: {\n      summary: 'Execute upgrade action',\n      description: 'Executes a specific upgrade action by ID. Typically used for one-time setup tasks like seeding example data after version upgrade. Returns execution status and localized success message.',\n      requestBody: {\n        contentType: 'application/json',\n        schema: executeUpgradeActionRequestSchema,\n      },\n      responses: [\n        { status: 200, description: 'Upgrade action executed successfully', schema: executeUpgradeActionResponseSchema },\n      ],\n      errors: [\n        { status: 400, description: 'Invalid request body or missing context', schema: configErrorSchema },\n        { status: 401, description: 'Unauthorized', schema: configErrorSchema },\n        { status: 403, description: 'Upgrade actions are disabled', schema: configErrorSchema },\n        { status: 500, description: 'Failed to execute upgrade action', schema: configErrorSchema },\n      ],\n    },\n  },\n}\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAElB,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,2BAA2B;AACpC,SAAS,kCAAkC;AAC3C,SAAS,sBAAsB,mBAAmB,yBAAyB,iCAAiC;AAE5G;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEA,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,gBAAgB,EAAE;AAAA,EAC9D,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,gBAAgB,EAAE;AACjE;AAEA,MAAM,YAAY,EAAE,OAAO;AAAA,EACzB,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,GAAG,oBAAoB;AACzD,CAAC;AAID,eAAe,aACb,KACA,WAC0H;AAC1H,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM,KAAK;AACd,WAAO,EAAE,OAAO,MAAM,WAAW,MAAM,OAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC,EAAE;AAAA,EAC9G;AACA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,iBAAiB,MAAM,2BAA2B,EAAE,WAAW,MAAM,SAAS,IAAI,CAAC;AACzF,QAAM,WAAW,eAAe,MAAM,YAAY,KAAK,YAAY;AACnE,QAAM,iBAAiB,eAAe,kBAAkB,eAAe,MAAM,cAAc,KAAK,SAAS;AACzG,MAAI,CAAC,YAAY,CAAC,gBAAgB;AAChC,UAAM,UAAU;AAAA,MACd;AAAA,MACA;AAAA,IACF;AACA,WAAO,EAAE,OAAO,MAAM,WAAW,OAAO,aAAa,KAAK,EAAE,OAAO,QAAQ,GAAG,EAAE,QAAQ,IAAI,CAAC,EAAE;AAAA,EACjG;AACA,SAAO;AAAA,IACL,OAAO,EAAE,UAAU,eAAe;AAAA,IAClC;AAAA,EACF;AACF;AAEA,eAAsB,IAAI,KAAc;AACtC,MAAI,CAAC,wBAAwB,GAAG;AAC9B,WAAO,aAAa,KAAK,EAAE,SAAS,kBAAkB,GAAG,SAAS,CAAC,EAAE,CAAC;AAAA,EACxE;AACA,QAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,QAAM,kBAAkB,CAAC,KAAa,UAAmB,WACvD,UAAU,KAAK,UAAU,MAAa;AACxC,QAAM,cAAc,MAAM,aAAa,KAAK,eAAe;AAC3D,MAAI,CAAC,YAAY,MAAO,QAAO,YAAY;AAE3C,QAAM,YAAY,YAAY,aAAc,MAAM,uBAAuB;AACzE,QAAM,KAAK,UAAU,QAAuB,IAAI;AAChD,QAAM,UAAU,kBAAkB;AAClC,MAAI;AACF,UAAM,UAAU,MAAM,0BAA0B,IAAI,EAAE,GAAG,YAAY,OAAO,QAAQ,CAAC;AACrF,UAAM,aAAa,QAAQ,CAAC;AAC5B,UAAM,UAAU,aACZ,CAAC;AAAA,MACD,IAAI,WAAW;AAAA,MACf,SAAS,WAAW;AAAA,MACpB,SAAS;AAAA,QACP,WAAW;AAAA,QACX;AAAA,QACA,EAAE,SAAS,WAAW,QAAQ;AAAA,MAChC;AAAA,MACA,UAAU;AAAA,QACR,WAAW;AAAA,QACX;AAAA,MACF;AAAA,MACA,gBAAgB;AAAA,QACd,WAAW;AAAA,QACX;AAAA,MACF;AAAA,MACA,cAAc,WAAW,aACrB,UAAU,WAAW,YAAY,kBAAa,IAC9C,UAAU,oBAAoB,kBAAa;AAAA,IACjD,CAAC,IACC,CAAC;AACL,WAAO,aAAa,KAAK,EAAE,SAAS,SAAS,QAAQ,CAAC;AAAA,EACxD,SAAS,OAAO;AACd,YAAQ,MAAM,4DAA4D,KAAK;AAC/E,WAAO,aAAa,KAAK,EAAE,OAAO,iCAAiC,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACvF;AACF;AAEA,eAAsB,KAAK,KAAc;AACvC,MAAI,CAAC,wBAAwB,GAAG;AAC9B,WAAO,aAAa,KAAK,EAAE,OAAO,+BAA+B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrF;AACA,QAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,QAAM,kBAAkB,CAAC,KAAa,UAAmB,WACvD,UAAU,KAAK,UAAU,MAAa;AACxC,QAAM,cAAc,MAAM,aAAa,KAAK,eAAe;AAC3D,MAAI,CAAC,YAAY,MAAO,QAAO,YAAY;AAE3C,MAAI;AACJ,MAAI;AACF,iBAAa,MAAM,IAAI,KAAK;AAAA,EAC9B,QAAQ;AACN,iBAAa;AAAA,EACf;AACA,QAAM,SAAS,UAAU,UAAU,cAAc,CAAC,CAAC;AACnD,MAAI,CAAC,OAAO,SAAS;AACnB,WAAO,aAAa,KAAK,EAAE,OAAO,uBAAuB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC7E;AAEA,QAAM,YAAY,YAAY,aAAc,MAAM,uBAAuB;AACzE,QAAM,UAAU,kBAAkB;AAElC,MAAI;AACF,UAAM,SAAS,MAAM,qBAAqB,WAAW;AAAA,MACnD,UAAU,OAAO,KAAK;AAAA,MACtB,UAAU,YAAY,MAAM;AAAA,MAC5B,gBAAgB,YAAY,MAAM;AAAA,MAClC;AAAA,IACF,CAAC;AACD,UAAM,iBAAiB;AAAA,MACrB,OAAO,OAAO;AAAA,MACd;AAAA,IACF;AACA,WAAO,aAAa,KAAK;AAAA,MACvB,QAAQ,OAAO;AAAA,MACf,SAAS;AAAA,MACT;AAAA,IACF,CAAC;AAAA,EACH,SAAS,OAAO;AACd,YAAQ,MAAM,8DAA8D,KAAK;AACjF,UAAM,UAAU,UAAU,sBAAsB,uCAAuC;AACvF,UAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU;AACzD,WAAO,aAAa,KAAK,EAAE,OAAO,SAAS,QAAQ,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACvE;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,aAAa;AAAA,MACb,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,mCAAmC,QAAQ,iCAAiC;AAAA,MAC1G;AAAA,MACA,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,0CAA0C,QAAQ,kBAAkB;AAAA,QAChG,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,kBAAkB;AAAA,QACtE,EAAE,QAAQ,KAAK,aAAa,kCAAkC,QAAQ,kBAAkB;AAAA,MAC1F;AAAA,IACF;AAAA,IACA,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aAAa;AAAA,MACb,aAAa;AAAA,QACX,aAAa;AAAA,QACb,QAAQ;AAAA,MACV;AAAA,MACA,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,wCAAwC,QAAQ,mCAAmC;AAAA,MACjH;AAAA,MACA,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,2CAA2C,QAAQ,kBAAkB;AAAA,QACjG,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,kBAAkB;AAAA,QACtE,EAAE,QAAQ,KAAK,aAAa,gCAAgC,QAAQ,kBAAkB;AAAA,QACtF,EAAE,QAAQ,KAAK,aAAa,oCAAoC,QAAQ,kBAAkB;AAAA,MAC5F;AAAA,IACF;AAAA,EACF;AACF;",
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { resolveFeatureCheckContext } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport { executeUpgradeAction, getCurrentVersion, isUpgradeActionsEnabled, listPendingUpgradeActions } from '../../services/upgradeActionsService'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport {\n  configsTag,\n  upgradeActionsListResponseSchema,\n  executeUpgradeActionRequestSchema,\n  executeUpgradeActionResponseSchema,\n  configErrorSchema,\n} from '../openapi'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('configs')\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['configs.manage'] },\n  POST: { requireAuth: true, requireFeatures: ['configs.manage'] },\n} as const\n\nconst runSchema = z.object({\n  actionId: z.string().trim().min(1, 'action id required'),\n})\n\ntype Scope = { tenantId: string; organizationId: string }\n\nasync function resolveScope(\n  req: Request,\n  translate: (key: string, fallback?: string, params?: Record<string, unknown>) => string,\n): Promise<{ scope: Scope | null; container: Awaited<ReturnType<typeof createRequestContainer>> | null; error?: Response }> {\n  const auth = await getAuthFromRequest(req)\n  if (!auth?.sub) {\n    return { scope: null, container: null, error: NextResponse.json({ error: 'Unauthorized' }, { status: 401 }) }\n  }\n  const container = await createRequestContainer()\n  const featureContext = await resolveFeatureCheckContext({ container, auth, request: req })\n  const tenantId = featureContext.scope.tenantId ?? auth.tenantId ?? null\n  const organizationId = featureContext.organizationId ?? featureContext.scope.selectedId ?? auth.orgId ?? null\n  if (!tenantId || !organizationId) {\n    const message = translate(\n      'upgrades.scopeRequired',\n      'Select an organization and tenant to apply this upgrade.'\n    )\n    return { scope: null, container, error: NextResponse.json({ error: message }, { status: 400 }) }\n  }\n  return {\n    scope: { tenantId, organizationId },\n    container,\n  }\n}\n\nexport async function GET(req: Request) {\n  if (!isUpgradeActionsEnabled()) {\n    return NextResponse.json({ version: getCurrentVersion(), actions: [] })\n  }\n  const { translate } = await resolveTranslations()\n  const scopedTranslate = (key: string, fallback?: string, params?: Record<string, unknown>) =>\n    translate(key, fallback, params as any)\n  const scopeResult = await resolveScope(req, scopedTranslate)\n  if (!scopeResult.scope) return scopeResult.error!\n\n  const container = scopeResult.container ?? (await createRequestContainer())\n  const em = container.resolve<EntityManager>('em')\n  const version = getCurrentVersion()\n  try {\n    const actions = await listPendingUpgradeActions(em, { ...scopeResult.scope, version })\n    const nextAction = actions[0]\n    const payload = nextAction\n      ? [{\n        id: nextAction.id,\n        version: nextAction.version,\n        message: translate(\n          nextAction.messageKey,\n          'The version {{version}} has been installed. To fully use all the features from this edition please do \"Install example catalog products and categories\".',\n          { version: nextAction.version }\n        ),\n        ctaLabel: translate(\n          nextAction.ctaKey,\n          'Install example catalog products and categories'\n        ),\n        successMessage: translate(\n          nextAction.successKey,\n          'Example catalog products and categories installed.'\n        ),\n        loadingLabel: nextAction.loadingKey\n          ? translate(nextAction.loadingKey, 'Installing\u2026')\n          : translate('upgrades.loading', 'Installing\u2026'),\n      }]\n      : []\n    return NextResponse.json({ version, actions: payload })\n  } catch (error) {\n    logger.error('failed to load upgrade actions', { component: 'upgrade-actions', err: error })\n    return NextResponse.json({ error: 'Failed to load upgrade actions' }, { status: 500 })\n  }\n}\n\nexport async function POST(req: Request) {\n  if (!isUpgradeActionsEnabled()) {\n    return NextResponse.json({ error: 'Upgrade actions are disabled' }, { status: 403 })\n  }\n  const { translate } = await resolveTranslations()\n  const scopedTranslate = (key: string, fallback?: string, params?: Record<string, unknown>) =>\n    translate(key, fallback, params as any)\n  const scopeResult = await resolveScope(req, scopedTranslate)\n  if (!scopeResult.scope) return scopeResult.error!\n\n  let parsedBody: unknown\n  try {\n    parsedBody = await req.json()\n  } catch {\n    parsedBody = null\n  }\n  const parsed = runSchema.safeParse(parsedBody || {})\n  if (!parsed.success) {\n    return NextResponse.json({ error: 'Invalid request body' }, { status: 400 })\n  }\n\n  const container = scopeResult.container ?? (await createRequestContainer())\n  const version = getCurrentVersion()\n\n  try {\n    const result = await executeUpgradeAction(container, {\n      actionId: parsed.data.actionId,\n      tenantId: scopeResult.scope.tenantId,\n      organizationId: scopeResult.scope.organizationId,\n      version,\n    })\n    const successMessage = translate(\n      result.action.successKey,\n      'Example catalog products and categories installed.'\n    )\n    return NextResponse.json({\n      status: result.status,\n      message: successMessage,\n      version,\n    })\n  } catch (error) {\n    logger.error('failed to execute upgrade action', { component: 'upgrade-actions', err: error })\n    const message = translate('upgrades.runFailed', 'We could not run this upgrade action.')\n    const details = error instanceof Error ? error.message : null\n    return NextResponse.json({ error: message, details }, { status: 500 })\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: configsTag,\n  summary: 'Upgrade actions management',\n  methods: {\n    GET: {\n      summary: 'List pending upgrade actions',\n      description: 'Returns a list of pending upgrade actions for the current version. These are one-time setup tasks that need to be executed after upgrading to a new version. Requires organization and tenant context.',\n      responses: [\n        { status: 200, description: 'List of pending upgrade actions', schema: upgradeActionsListResponseSchema },\n      ],\n      errors: [\n        { status: 400, description: 'Missing organization or tenant context', schema: configErrorSchema },\n        { status: 401, description: 'Unauthorized', schema: configErrorSchema },\n        { status: 500, description: 'Failed to load upgrade actions', schema: configErrorSchema },\n      ],\n    },\n    POST: {\n      summary: 'Execute upgrade action',\n      description: 'Executes a specific upgrade action by ID. Typically used for one-time setup tasks like seeding example data after version upgrade. Returns execution status and localized success message.',\n      requestBody: {\n        contentType: 'application/json',\n        schema: executeUpgradeActionRequestSchema,\n      },\n      responses: [\n        { status: 200, description: 'Upgrade action executed successfully', schema: executeUpgradeActionResponseSchema },\n      ],\n      errors: [\n        { status: 400, description: 'Invalid request body or missing context', schema: configErrorSchema },\n        { status: 401, description: 'Unauthorized', schema: configErrorSchema },\n        { status: 403, description: 'Upgrade actions are disabled', schema: configErrorSchema },\n        { status: 500, description: 'Failed to execute upgrade action', schema: configErrorSchema },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAElB,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,2BAA2B;AACpC,SAAS,kCAAkC;AAC3C,SAAS,sBAAsB,mBAAmB,yBAAyB,iCAAiC;AAE5G;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,SAAS;AAE9B,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,gBAAgB,EAAE;AAAA,EAC9D,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,gBAAgB,EAAE;AACjE;AAEA,MAAM,YAAY,EAAE,OAAO;AAAA,EACzB,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,GAAG,oBAAoB;AACzD,CAAC;AAID,eAAe,aACb,KACA,WAC0H;AAC1H,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM,KAAK;AACd,WAAO,EAAE,OAAO,MAAM,WAAW,MAAM,OAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC,EAAE;AAAA,EAC9G;AACA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,iBAAiB,MAAM,2BAA2B,EAAE,WAAW,MAAM,SAAS,IAAI,CAAC;AACzF,QAAM,WAAW,eAAe,MAAM,YAAY,KAAK,YAAY;AACnE,QAAM,iBAAiB,eAAe,kBAAkB,eAAe,MAAM,cAAc,KAAK,SAAS;AACzG,MAAI,CAAC,YAAY,CAAC,gBAAgB;AAChC,UAAM,UAAU;AAAA,MACd;AAAA,MACA;AAAA,IACF;AACA,WAAO,EAAE,OAAO,MAAM,WAAW,OAAO,aAAa,KAAK,EAAE,OAAO,QAAQ,GAAG,EAAE,QAAQ,IAAI,CAAC,EAAE;AAAA,EACjG;AACA,SAAO;AAAA,IACL,OAAO,EAAE,UAAU,eAAe;AAAA,IAClC;AAAA,EACF;AACF;AAEA,eAAsB,IAAI,KAAc;AACtC,MAAI,CAAC,wBAAwB,GAAG;AAC9B,WAAO,aAAa,KAAK,EAAE,SAAS,kBAAkB,GAAG,SAAS,CAAC,EAAE,CAAC;AAAA,EACxE;AACA,QAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,QAAM,kBAAkB,CAAC,KAAa,UAAmB,WACvD,UAAU,KAAK,UAAU,MAAa;AACxC,QAAM,cAAc,MAAM,aAAa,KAAK,eAAe;AAC3D,MAAI,CAAC,YAAY,MAAO,QAAO,YAAY;AAE3C,QAAM,YAAY,YAAY,aAAc,MAAM,uBAAuB;AACzE,QAAM,KAAK,UAAU,QAAuB,IAAI;AAChD,QAAM,UAAU,kBAAkB;AAClC,MAAI;AACF,UAAM,UAAU,MAAM,0BAA0B,IAAI,EAAE,GAAG,YAAY,OAAO,QAAQ,CAAC;AACrF,UAAM,aAAa,QAAQ,CAAC;AAC5B,UAAM,UAAU,aACZ,CAAC;AAAA,MACD,IAAI,WAAW;AAAA,MACf,SAAS,WAAW;AAAA,MACpB,SAAS;AAAA,QACP,WAAW;AAAA,QACX;AAAA,QACA,EAAE,SAAS,WAAW,QAAQ;AAAA,MAChC;AAAA,MACA,UAAU;AAAA,QACR,WAAW;AAAA,QACX;AAAA,MACF;AAAA,MACA,gBAAgB;AAAA,QACd,WAAW;AAAA,QACX;AAAA,MACF;AAAA,MACA,cAAc,WAAW,aACrB,UAAU,WAAW,YAAY,kBAAa,IAC9C,UAAU,oBAAoB,kBAAa;AAAA,IACjD,CAAC,IACC,CAAC;AACL,WAAO,aAAa,KAAK,EAAE,SAAS,SAAS,QAAQ,CAAC;AAAA,EACxD,SAAS,OAAO;AACd,WAAO,MAAM,kCAAkC,EAAE,WAAW,mBAAmB,KAAK,MAAM,CAAC;AAC3F,WAAO,aAAa,KAAK,EAAE,OAAO,iCAAiC,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACvF;AACF;AAEA,eAAsB,KAAK,KAAc;AACvC,MAAI,CAAC,wBAAwB,GAAG;AAC9B,WAAO,aAAa,KAAK,EAAE,OAAO,+BAA+B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrF;AACA,QAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,QAAM,kBAAkB,CAAC,KAAa,UAAmB,WACvD,UAAU,KAAK,UAAU,MAAa;AACxC,QAAM,cAAc,MAAM,aAAa,KAAK,eAAe;AAC3D,MAAI,CAAC,YAAY,MAAO,QAAO,YAAY;AAE3C,MAAI;AACJ,MAAI;AACF,iBAAa,MAAM,IAAI,KAAK;AAAA,EAC9B,QAAQ;AACN,iBAAa;AAAA,EACf;AACA,QAAM,SAAS,UAAU,UAAU,cAAc,CAAC,CAAC;AACnD,MAAI,CAAC,OAAO,SAAS;AACnB,WAAO,aAAa,KAAK,EAAE,OAAO,uBAAuB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC7E;AAEA,QAAM,YAAY,YAAY,aAAc,MAAM,uBAAuB;AACzE,QAAM,UAAU,kBAAkB;AAElC,MAAI;AACF,UAAM,SAAS,MAAM,qBAAqB,WAAW;AAAA,MACnD,UAAU,OAAO,KAAK;AAAA,MACtB,UAAU,YAAY,MAAM;AAAA,MAC5B,gBAAgB,YAAY,MAAM;AAAA,MAClC;AAAA,IACF,CAAC;AACD,UAAM,iBAAiB;AAAA,MACrB,OAAO,OAAO;AAAA,MACd;AAAA,IACF;AACA,WAAO,aAAa,KAAK;AAAA,MACvB,QAAQ,OAAO;AAAA,MACf,SAAS;AAAA,MACT;AAAA,IACF,CAAC;AAAA,EACH,SAAS,OAAO;AACd,WAAO,MAAM,oCAAoC,EAAE,WAAW,mBAAmB,KAAK,MAAM,CAAC;AAC7F,UAAM,UAAU,UAAU,sBAAsB,uCAAuC;AACvF,UAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU;AACzD,WAAO,aAAa,KAAK,EAAE,OAAO,SAAS,QAAQ,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACvE;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,aAAa;AAAA,MACb,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,mCAAmC,QAAQ,iCAAiC;AAAA,MAC1G;AAAA,MACA,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,0CAA0C,QAAQ,kBAAkB;AAAA,QAChG,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,kBAAkB;AAAA,QACtE,EAAE,QAAQ,KAAK,aAAa,kCAAkC,QAAQ,kBAAkB;AAAA,MAC1F;AAAA,IACF;AAAA,IACA,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aAAa;AAAA,MACb,aAAa;AAAA,QACX,aAAa;AAAA,QACb,QAAQ;AAAA,MACV;AAAA,MACA,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,wCAAwC,QAAQ,mCAAmC;AAAA,MACjH;AAAA,MACA,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,2CAA2C,QAAQ,kBAAkB;AAAA,QACjG,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,kBAAkB;AAAA,QACtE,EAAE,QAAQ,KAAK,aAAa,gCAAgC,QAAQ,kBAAkB;AAAA,QACtF,EAAE,QAAQ,KAAK,aAAa,oCAAoC,QAAQ,kBAAkB;AAAA,MAC5F;AAAA,IACF;AAAA,EACF;AACF;",
   "names": []
 }