@open-mercato/core 0.6.6-develop.6465.1.019f0fb26f → 0.6.6-develop.6471.1.9ab5bdd79a

package/dist/modules/inbox_ops/api/emails/[id]/route.js

@@ -10,6 +10,8 @@ import {
   extractPathSegment,
   UnauthorizedError
 } from "../../routeHelpers.js";
+import { createLogger } from "@open-mercato/shared/lib/logger";
+const logger = createLogger("inbox_ops").child({ component: "emails" });
 const metadata = {
   GET: { requireAuth: true, requireFeatures: ["inbox_ops.log.view"] },
   DELETE: { requireAuth: true, requireFeatures: ["inbox_ops.proposals.manage"] }
@@ -42,7 +44,7 @@ async function GET(req) {
     if (err instanceof UnauthorizedError) {
       return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
     }
-    console.error("[inbox_ops:emails:detail] Error:", err);
+    logger.error("Failed to load email detail", { err });
     return NextResponse.json({ error: "Failed to load email" }, { status: 500 });
   }
 }
@@ -98,7 +100,7 @@ async function DELETE(req) {
     if (err instanceof UnauthorizedError) {
       return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
     }
-    console.error("[inbox_ops:emails:delete] Error:", err);
+    logger.error("Failed to delete email", { err });
     return NextResponse.json({ error: "Failed to delete email" }, { status: 500 });
   }
 }

package/dist/modules/inbox_ops/api/emails/[id]/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../src/modules/inbox_ops/api/emails/%5Bid%5D/route.ts"],
-  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport {\n  runCrudMutationGuardAfterSuccess,\n  validateCrudMutationGuard,\n} from '@open-mercato/shared/lib/crud/mutation-guard'\nimport { InboxEmail } from '../../../data/entities'\nimport {\n  resolveRequestContext,\n  extractPathSegment,\n  UnauthorizedError,\n} from '../../routeHelpers'\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['inbox_ops.log.view'] },\n  DELETE: { requireAuth: true, requireFeatures: ['inbox_ops.proposals.manage'] },\n}\n\nexport async function GET(req: Request) {\n  try {\n    const url = new URL(req.url)\n    const id = extractPathSegment(url, 'emails')\n\n    if (!id) {\n      return NextResponse.json({ error: 'Missing email ID' }, { status: 400 })\n    }\n\n    const ctx = await resolveRequestContext(req)\n\n    const email = await findOneWithDecryption(\n      ctx.em,\n      InboxEmail,\n      {\n        id,\n        organizationId: ctx.organizationId,\n        tenantId: ctx.tenantId,\n        deletedAt: null,\n      },\n      undefined,\n      ctx.scope,\n    )\n\n    if (!email) {\n      return NextResponse.json({ error: 'Email not found' }, { status: 404 })\n    }\n\n    return NextResponse.json({ email })\n  } catch (err) {\n    if (err instanceof UnauthorizedError) {\n      return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n    }\n    console.error('[inbox_ops:emails:detail] Error:', err)\n    return NextResponse.json({ error: 'Failed to load email' }, { status: 500 })\n  }\n}\n\nexport async function DELETE(req: Request) {\n  try {\n    const url = new URL(req.url)\n    const id = extractPathSegment(url, 'emails')\n\n    if (!id) {\n      return NextResponse.json({ error: 'Missing email ID' }, { status: 400 })\n    }\n\n    const ctx = await resolveRequestContext(req)\n\n    const guardResult = await validateCrudMutationGuard(ctx.container, {\n      tenantId: ctx.tenantId,\n      organizationId: ctx.organizationId,\n      userId: ctx.userId,\n      resourceKind: 'inbox_ops:inbox_email',\n      resourceId: id,\n      operation: 'delete',\n      requestMethod: req.method,\n      requestHeaders: req.headers,\n    })\n    if (guardResult && !guardResult.ok) {\n      return NextResponse.json(guardResult.body, { status: guardResult.status })\n    }\n\n    const updated = await ctx.em.nativeUpdate(\n      InboxEmail,\n      {\n        id,\n        organizationId: ctx.organizationId,\n        tenantId: ctx.tenantId,\n        deletedAt: null,\n      },\n      { deletedAt: new Date() },\n    )\n\n    if (updated === 0) {\n      return NextResponse.json({ error: 'Email not found' }, { status: 404 })\n    }\n\n    if (guardResult?.ok && guardResult.shouldRunAfterSuccess) {\n      await runCrudMutationGuardAfterSuccess(ctx.container, {\n        tenantId: ctx.tenantId,\n        organizationId: ctx.organizationId,\n        userId: ctx.userId,\n        resourceKind: 'inbox_ops:inbox_email',\n        resourceId: id,\n        operation: 'delete',\n        requestMethod: req.method,\n        requestHeaders: req.headers,\n        metadata: guardResult.metadata ?? null,\n      })\n    }\n\n    return NextResponse.json({ ok: true })\n  } catch (err) {\n    if (err instanceof UnauthorizedError) {\n      return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n    }\n    console.error('[inbox_ops:emails:delete] Error:', err)\n    return NextResponse.json({ error: 'Failed to delete email' }, { status: 500 })\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'InboxOps',\n  summary: 'Email detail',\n  methods: {\n    GET: {\n      summary: 'Get email detail with parsed thread',\n      responses: [\n        { status: 200, description: 'Email detail' },\n        { status: 404, description: 'Email not found' },\n      ],\n    },\n    DELETE: {\n      summary: 'Soft-delete an inbox email',\n      responses: [\n        { status: 200, description: 'Email deleted' },\n        { status: 404, description: 'Email not found' },\n      ],\n    },\n  },\n}\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAE7B,SAAS,6BAA6B;AACtC;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAS,kBAAkB;AAC3B;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEA,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,oBAAoB,EAAE;AAAA,EAClE,QAAQ,EAAE,aAAa,MAAM,iBAAiB,CAAC,4BAA4B,EAAE;AAC/E;AAEA,eAAsB,IAAI,KAAc;AACtC,MAAI;AACF,UAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAC3B,UAAM,KAAK,mBAAmB,KAAK,QAAQ;AAE3C,QAAI,CAAC,IAAI;AACP,aAAO,aAAa,KAAK,EAAE,OAAO,mBAAmB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACzE;AAEA,UAAM,MAAM,MAAM,sBAAsB,GAAG;AAE3C,UAAM,QAAQ,MAAM;AAAA,MAClB,IAAI;AAAA,MACJ;AAAA,MACA;AAAA,QACE;AAAA,QACA,gBAAgB,IAAI;AAAA,QACpB,UAAU,IAAI;AAAA,QACd,WAAW;AAAA,MACb;AAAA,MACA;AAAA,MACA,IAAI;AAAA,IACN;AAEA,QAAI,CAAC,OAAO;AACV,aAAO,aAAa,KAAK,EAAE,OAAO,kBAAkB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACxE;AAEA,WAAO,aAAa,KAAK,EAAE,MAAM,CAAC;AAAA,EACpC,SAAS,KAAK;AACZ,QAAI,eAAe,mBAAmB;AACpC,aAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACrE;AACA,YAAQ,MAAM,oCAAoC,GAAG;AACrD,WAAO,aAAa,KAAK,EAAE,OAAO,uBAAuB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC7E;AACF;AAEA,eAAsB,OAAO,KAAc;AACzC,MAAI;AACF,UAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAC3B,UAAM,KAAK,mBAAmB,KAAK,QAAQ;AAE3C,QAAI,CAAC,IAAI;AACP,aAAO,aAAa,KAAK,EAAE,OAAO,mBAAmB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACzE;AAEA,UAAM,MAAM,MAAM,sBAAsB,GAAG;AAE3C,UAAM,cAAc,MAAM,0BAA0B,IAAI,WAAW;AAAA,MACjE,UAAU,IAAI;AAAA,MACd,gBAAgB,IAAI;AAAA,MACpB,QAAQ,IAAI;AAAA,MACZ,cAAc;AAAA,MACd,YAAY;AAAA,MACZ,WAAW;AAAA,MACX,eAAe,IAAI;AAAA,MACnB,gBAAgB,IAAI;AAAA,IACtB,CAAC;AACD,QAAI,eAAe,CAAC,YAAY,IAAI;AAClC,aAAO,aAAa,KAAK,YAAY,MAAM,EAAE,QAAQ,YAAY,OAAO,CAAC;AAAA,IAC3E;AAEA,UAAM,UAAU,MAAM,IAAI,GAAG;AAAA,MAC3B;AAAA,MACA;AAAA,QACE;AAAA,QACA,gBAAgB,IAAI;AAAA,QACpB,UAAU,IAAI;AAAA,QACd,WAAW;AAAA,MACb;AAAA,MACA,EAAE,WAAW,oBAAI,KAAK,EAAE;AAAA,IAC1B;AAEA,QAAI,YAAY,GAAG;AACjB,aAAO,aAAa,KAAK,EAAE,OAAO,kBAAkB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACxE;AAEA,QAAI,aAAa,MAAM,YAAY,uBAAuB;AACxD,YAAM,iCAAiC,IAAI,WAAW;AAAA,QACpD,UAAU,IAAI;AAAA,QACd,gBAAgB,IAAI;AAAA,QACpB,QAAQ,IAAI;AAAA,QACZ,cAAc;AAAA,QACd,YAAY;AAAA,QACZ,WAAW;AAAA,QACX,eAAe,IAAI;AAAA,QACnB,gBAAgB,IAAI;AAAA,QACpB,UAAU,YAAY,YAAY;AAAA,MACpC,CAAC;AAAA,IACH;AAEA,WAAO,aAAa,KAAK,EAAE,IAAI,KAAK,CAAC;AAAA,EACvC,SAAS,KAAK;AACZ,QAAI,eAAe,mBAAmB;AACpC,aAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACrE;AACA,YAAQ,MAAM,oCAAoC,GAAG;AACrD,WAAO,aAAa,KAAK,EAAE,OAAO,yBAAyB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC/E;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,eAAe;AAAA,QAC3C,EAAE,QAAQ,KAAK,aAAa,kBAAkB;AAAA,MAChD;AAAA,IACF;AAAA,IACA,QAAQ;AAAA,MACN,SAAS;AAAA,MACT,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,gBAAgB;AAAA,QAC5C,EAAE,QAAQ,KAAK,aAAa,kBAAkB;AAAA,MAChD;AAAA,IACF;AAAA,EACF;AACF;",
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport {\n  runCrudMutationGuardAfterSuccess,\n  validateCrudMutationGuard,\n} from '@open-mercato/shared/lib/crud/mutation-guard'\nimport { InboxEmail } from '../../../data/entities'\nimport {\n  resolveRequestContext,\n  extractPathSegment,\n  UnauthorizedError,\n} from '../../routeHelpers'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('inbox_ops').child({ component: 'emails' })\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['inbox_ops.log.view'] },\n  DELETE: { requireAuth: true, requireFeatures: ['inbox_ops.proposals.manage'] },\n}\n\nexport async function GET(req: Request) {\n  try {\n    const url = new URL(req.url)\n    const id = extractPathSegment(url, 'emails')\n\n    if (!id) {\n      return NextResponse.json({ error: 'Missing email ID' }, { status: 400 })\n    }\n\n    const ctx = await resolveRequestContext(req)\n\n    const email = await findOneWithDecryption(\n      ctx.em,\n      InboxEmail,\n      {\n        id,\n        organizationId: ctx.organizationId,\n        tenantId: ctx.tenantId,\n        deletedAt: null,\n      },\n      undefined,\n      ctx.scope,\n    )\n\n    if (!email) {\n      return NextResponse.json({ error: 'Email not found' }, { status: 404 })\n    }\n\n    return NextResponse.json({ email })\n  } catch (err) {\n    if (err instanceof UnauthorizedError) {\n      return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n    }\n    logger.error('Failed to load email detail', { err })\n    return NextResponse.json({ error: 'Failed to load email' }, { status: 500 })\n  }\n}\n\nexport async function DELETE(req: Request) {\n  try {\n    const url = new URL(req.url)\n    const id = extractPathSegment(url, 'emails')\n\n    if (!id) {\n      return NextResponse.json({ error: 'Missing email ID' }, { status: 400 })\n    }\n\n    const ctx = await resolveRequestContext(req)\n\n    const guardResult = await validateCrudMutationGuard(ctx.container, {\n      tenantId: ctx.tenantId,\n      organizationId: ctx.organizationId,\n      userId: ctx.userId,\n      resourceKind: 'inbox_ops:inbox_email',\n      resourceId: id,\n      operation: 'delete',\n      requestMethod: req.method,\n      requestHeaders: req.headers,\n    })\n    if (guardResult && !guardResult.ok) {\n      return NextResponse.json(guardResult.body, { status: guardResult.status })\n    }\n\n    const updated = await ctx.em.nativeUpdate(\n      InboxEmail,\n      {\n        id,\n        organizationId: ctx.organizationId,\n        tenantId: ctx.tenantId,\n        deletedAt: null,\n      },\n      { deletedAt: new Date() },\n    )\n\n    if (updated === 0) {\n      return NextResponse.json({ error: 'Email not found' }, { status: 404 })\n    }\n\n    if (guardResult?.ok && guardResult.shouldRunAfterSuccess) {\n      await runCrudMutationGuardAfterSuccess(ctx.container, {\n        tenantId: ctx.tenantId,\n        organizationId: ctx.organizationId,\n        userId: ctx.userId,\n        resourceKind: 'inbox_ops:inbox_email',\n        resourceId: id,\n        operation: 'delete',\n        requestMethod: req.method,\n        requestHeaders: req.headers,\n        metadata: guardResult.metadata ?? null,\n      })\n    }\n\n    return NextResponse.json({ ok: true })\n  } catch (err) {\n    if (err instanceof UnauthorizedError) {\n      return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n    }\n    logger.error('Failed to delete email', { err })\n    return NextResponse.json({ error: 'Failed to delete email' }, { status: 500 })\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'InboxOps',\n  summary: 'Email detail',\n  methods: {\n    GET: {\n      summary: 'Get email detail with parsed thread',\n      responses: [\n        { status: 200, description: 'Email detail' },\n        { status: 404, description: 'Email not found' },\n      ],\n    },\n    DELETE: {\n      summary: 'Soft-delete an inbox email',\n      responses: [\n        { status: 200, description: 'Email deleted' },\n        { status: 404, description: 'Email not found' },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAE7B,SAAS,6BAA6B;AACtC;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAS,kBAAkB;AAC3B;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,WAAW,EAAE,MAAM,EAAE,WAAW,SAAS,CAAC;AAE/D,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,oBAAoB,EAAE;AAAA,EAClE,QAAQ,EAAE,aAAa,MAAM,iBAAiB,CAAC,4BAA4B,EAAE;AAC/E;AAEA,eAAsB,IAAI,KAAc;AACtC,MAAI;AACF,UAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAC3B,UAAM,KAAK,mBAAmB,KAAK,QAAQ;AAE3C,QAAI,CAAC,IAAI;AACP,aAAO,aAAa,KAAK,EAAE,OAAO,mBAAmB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACzE;AAEA,UAAM,MAAM,MAAM,sBAAsB,GAAG;AAE3C,UAAM,QAAQ,MAAM;AAAA,MAClB,IAAI;AAAA,MACJ;AAAA,MACA;AAAA,QACE;AAAA,QACA,gBAAgB,IAAI;AAAA,QACpB,UAAU,IAAI;AAAA,QACd,WAAW;AAAA,MACb;AAAA,MACA;AAAA,MACA,IAAI;AAAA,IACN;AAEA,QAAI,CAAC,OAAO;AACV,aAAO,aAAa,KAAK,EAAE,OAAO,kBAAkB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACxE;AAEA,WAAO,aAAa,KAAK,EAAE,MAAM,CAAC;AAAA,EACpC,SAAS,KAAK;AACZ,QAAI,eAAe,mBAAmB;AACpC,aAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACrE;AACA,WAAO,MAAM,+BAA+B,EAAE,IAAI,CAAC;AACnD,WAAO,aAAa,KAAK,EAAE,OAAO,uBAAuB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC7E;AACF;AAEA,eAAsB,OAAO,KAAc;AACzC,MAAI;AACF,UAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAC3B,UAAM,KAAK,mBAAmB,KAAK,QAAQ;AAE3C,QAAI,CAAC,IAAI;AACP,aAAO,aAAa,KAAK,EAAE,OAAO,mBAAmB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACzE;AAEA,UAAM,MAAM,MAAM,sBAAsB,GAAG;AAE3C,UAAM,cAAc,MAAM,0BAA0B,IAAI,WAAW;AAAA,MACjE,UAAU,IAAI;AAAA,MACd,gBAAgB,IAAI;AAAA,MACpB,QAAQ,IAAI;AAAA,MACZ,cAAc;AAAA,MACd,YAAY;AAAA,MACZ,WAAW;AAAA,MACX,eAAe,IAAI;AAAA,MACnB,gBAAgB,IAAI;AAAA,IACtB,CAAC;AACD,QAAI,eAAe,CAAC,YAAY,IAAI;AAClC,aAAO,aAAa,KAAK,YAAY,MAAM,EAAE,QAAQ,YAAY,OAAO,CAAC;AAAA,IAC3E;AAEA,UAAM,UAAU,MAAM,IAAI,GAAG;AAAA,MAC3B;AAAA,MACA;AAAA,QACE;AAAA,QACA,gBAAgB,IAAI;AAAA,QACpB,UAAU,IAAI;AAAA,QACd,WAAW;AAAA,MACb;AAAA,MACA,EAAE,WAAW,oBAAI,KAAK,EAAE;AAAA,IAC1B;AAEA,QAAI,YAAY,GAAG;AACjB,aAAO,aAAa,KAAK,EAAE,OAAO,kBAAkB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACxE;AAEA,QAAI,aAAa,MAAM,YAAY,uBAAuB;AACxD,YAAM,iCAAiC,IAAI,WAAW;AAAA,QACpD,UAAU,IAAI;AAAA,QACd,gBAAgB,IAAI;AAAA,QACpB,QAAQ,IAAI;AAAA,QACZ,cAAc;AAAA,QACd,YAAY;AAAA,QACZ,WAAW;AAAA,QACX,eAAe,IAAI;AAAA,QACnB,gBAAgB,IAAI;AAAA,QACpB,UAAU,YAAY,YAAY;AAAA,MACpC,CAAC;AAAA,IACH;AAEA,WAAO,aAAa,KAAK,EAAE,IAAI,KAAK,CAAC;AAAA,EACvC,SAAS,KAAK;AACZ,QAAI,eAAe,mBAAmB;AACpC,aAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACrE;AACA,WAAO,MAAM,0BAA0B,EAAE,IAAI,CAAC;AAC9C,WAAO,aAAa,KAAK,EAAE,OAAO,yBAAyB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC/E;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,eAAe;AAAA,QAC3C,EAAE,QAAQ,KAAK,aAAa,kBAAkB;AAAA,MAChD;AAAA,IACF;AAAA,IACA,QAAQ;AAAA,MACN,SAAS;AAAA,MACT,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,gBAAgB;AAAA,QAC5C,EAAE,QAAQ,KAAK,aAAa,kBAAkB;AAAA,MAChD;AAAA,IACF;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/modules/inbox_ops/api/emails/route.js

@@ -3,6 +3,8 @@ import { findAndCountWithDecryption } from "@open-mercato/shared/lib/encryption/
 import { InboxEmail } from "../../data/entities.js";
 import { emailListQuerySchema } from "../../data/validators.js";
 import { resolveRequestContext, UnauthorizedError } from "../routeHelpers.js";
+import { createLogger } from "@open-mercato/shared/lib/logger";
+const logger = createLogger("inbox_ops").child({ component: "emails" });
 const metadata = {
   GET: { requireAuth: true, requireFeatures: ["inbox_ops.log.view"] }
 };
@@ -46,7 +48,7 @@ async function GET(req) {
     if (err instanceof UnauthorizedError) {
       return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
     }
-    console.error("[inbox_ops:emails] Error:", err);
+    logger.error("Failed to list emails", { err });
     return NextResponse.json({ error: "Failed to list emails" }, { status: 500 });
   }
 }

package/dist/modules/inbox_ops/api/emails/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../src/modules/inbox_ops/api/emails/route.ts"],
-  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { findAndCountWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { InboxEmail } from '../../data/entities'\nimport { emailListQuerySchema } from '../../data/validators'\nimport { resolveRequestContext, UnauthorizedError } from '../routeHelpers'\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['inbox_ops.log.view'] },\n}\n\nexport async function GET(req: Request) {\n  try {\n    const url = new URL(req.url)\n    const query = emailListQuerySchema.parse({\n      status: url.searchParams.get('status') || undefined,\n      page: url.searchParams.get('page') || undefined,\n      pageSize: url.searchParams.get('pageSize') || undefined,\n    })\n\n    const ctx = await resolveRequestContext(req)\n\n    const where: Record<string, unknown> = {\n      organizationId: ctx.organizationId,\n      tenantId: ctx.tenantId,\n      deletedAt: null,\n    }\n\n    if (query.status) {\n      where.status = query.status\n    }\n\n    const offset = (query.page - 1) * query.pageSize\n\n    const [items, total] = await findAndCountWithDecryption(\n      ctx.em,\n      InboxEmail,\n      where,\n      {\n        limit: query.pageSize,\n        offset,\n        orderBy: { receivedAt: 'DESC' },\n      },\n      ctx.scope,\n    )\n\n    return NextResponse.json({\n      items,\n      total,\n      page: query.page,\n      pageSize: query.pageSize,\n      totalPages: Math.ceil(total / query.pageSize),\n    })\n  } catch (err) {\n    if (err instanceof UnauthorizedError) {\n      return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n    }\n    console.error('[inbox_ops:emails] Error:', err)\n    return NextResponse.json({ error: 'Failed to list emails' }, { status: 500 })\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'InboxOps',\n  summary: 'Emails',\n  methods: {\n    GET: {\n      summary: 'List received emails',\n      description: 'Processing log of all received emails',\n      responses: [\n        { status: 200, description: 'Paginated list of emails' },\n      ],\n    },\n  },\n}\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAE7B,SAAS,kCAAkC;AAC3C,SAAS,kBAAkB;AAC3B,SAAS,4BAA4B;AACrC,SAAS,uBAAuB,yBAAyB;AAElD,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,oBAAoB,EAAE;AACpE;AAEA,eAAsB,IAAI,KAAc;AACtC,MAAI;AACF,UAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAC3B,UAAM,QAAQ,qBAAqB,MAAM;AAAA,MACvC,QAAQ,IAAI,aAAa,IAAI,QAAQ,KAAK;AAAA,MAC1C,MAAM,IAAI,aAAa,IAAI,MAAM,KAAK;AAAA,MACtC,UAAU,IAAI,aAAa,IAAI,UAAU,KAAK;AAAA,IAChD,CAAC;AAED,UAAM,MAAM,MAAM,sBAAsB,GAAG;AAE3C,UAAM,QAAiC;AAAA,MACrC,gBAAgB,IAAI;AAAA,MACpB,UAAU,IAAI;AAAA,MACd,WAAW;AAAA,IACb;AAEA,QAAI,MAAM,QAAQ;AAChB,YAAM,SAAS,MAAM;AAAA,IACvB;AAEA,UAAM,UAAU,MAAM,OAAO,KAAK,MAAM;AAExC,UAAM,CAAC,OAAO,KAAK,IAAI,MAAM;AAAA,MAC3B,IAAI;AAAA,MACJ;AAAA,MACA;AAAA,MACA;AAAA,QACE,OAAO,MAAM;AAAA,QACb;AAAA,QACA,SAAS,EAAE,YAAY,OAAO;AAAA,MAChC;AAAA,MACA,IAAI;AAAA,IACN;AAEA,WAAO,aAAa,KAAK;AAAA,MACvB;AAAA,MACA;AAAA,MACA,MAAM,MAAM;AAAA,MACZ,UAAU,MAAM;AAAA,MAChB,YAAY,KAAK,KAAK,QAAQ,MAAM,QAAQ;AAAA,IAC9C,CAAC;AAAA,EACH,SAAS,KAAK;AACZ,QAAI,eAAe,mBAAmB;AACpC,aAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACrE;AACA,YAAQ,MAAM,6BAA6B,GAAG;AAC9C,WAAO,aAAa,KAAK,EAAE,OAAO,wBAAwB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC9E;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,aAAa;AAAA,MACb,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,2BAA2B;AAAA,MACzD;AAAA,IACF;AAAA,EACF;AACF;",
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { findAndCountWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { InboxEmail } from '../../data/entities'\nimport { emailListQuerySchema } from '../../data/validators'\nimport { resolveRequestContext, UnauthorizedError } from '../routeHelpers'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('inbox_ops').child({ component: 'emails' })\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['inbox_ops.log.view'] },\n}\n\nexport async function GET(req: Request) {\n  try {\n    const url = new URL(req.url)\n    const query = emailListQuerySchema.parse({\n      status: url.searchParams.get('status') || undefined,\n      page: url.searchParams.get('page') || undefined,\n      pageSize: url.searchParams.get('pageSize') || undefined,\n    })\n\n    const ctx = await resolveRequestContext(req)\n\n    const where: Record<string, unknown> = {\n      organizationId: ctx.organizationId,\n      tenantId: ctx.tenantId,\n      deletedAt: null,\n    }\n\n    if (query.status) {\n      where.status = query.status\n    }\n\n    const offset = (query.page - 1) * query.pageSize\n\n    const [items, total] = await findAndCountWithDecryption(\n      ctx.em,\n      InboxEmail,\n      where,\n      {\n        limit: query.pageSize,\n        offset,\n        orderBy: { receivedAt: 'DESC' },\n      },\n      ctx.scope,\n    )\n\n    return NextResponse.json({\n      items,\n      total,\n      page: query.page,\n      pageSize: query.pageSize,\n      totalPages: Math.ceil(total / query.pageSize),\n    })\n  } catch (err) {\n    if (err instanceof UnauthorizedError) {\n      return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n    }\n    logger.error('Failed to list emails', { err })\n    return NextResponse.json({ error: 'Failed to list emails' }, { status: 500 })\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'InboxOps',\n  summary: 'Emails',\n  methods: {\n    GET: {\n      summary: 'List received emails',\n      description: 'Processing log of all received emails',\n      responses: [\n        { status: 200, description: 'Paginated list of emails' },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAE7B,SAAS,kCAAkC;AAC3C,SAAS,kBAAkB;AAC3B,SAAS,4BAA4B;AACrC,SAAS,uBAAuB,yBAAyB;AACzD,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,WAAW,EAAE,MAAM,EAAE,WAAW,SAAS,CAAC;AAE/D,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,oBAAoB,EAAE;AACpE;AAEA,eAAsB,IAAI,KAAc;AACtC,MAAI;AACF,UAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAC3B,UAAM,QAAQ,qBAAqB,MAAM;AAAA,MACvC,QAAQ,IAAI,aAAa,IAAI,QAAQ,KAAK;AAAA,MAC1C,MAAM,IAAI,aAAa,IAAI,MAAM,KAAK;AAAA,MACtC,UAAU,IAAI,aAAa,IAAI,UAAU,KAAK;AAAA,IAChD,CAAC;AAED,UAAM,MAAM,MAAM,sBAAsB,GAAG;AAE3C,UAAM,QAAiC;AAAA,MACrC,gBAAgB,IAAI;AAAA,MACpB,UAAU,IAAI;AAAA,MACd,WAAW;AAAA,IACb;AAEA,QAAI,MAAM,QAAQ;AAChB,YAAM,SAAS,MAAM;AAAA,IACvB;AAEA,UAAM,UAAU,MAAM,OAAO,KAAK,MAAM;AAExC,UAAM,CAAC,OAAO,KAAK,IAAI,MAAM;AAAA,MAC3B,IAAI;AAAA,MACJ;AAAA,MACA;AAAA,MACA;AAAA,QACE,OAAO,MAAM;AAAA,QACb;AAAA,QACA,SAAS,EAAE,YAAY,OAAO;AAAA,MAChC;AAAA,MACA,IAAI;AAAA,IACN;AAEA,WAAO,aAAa,KAAK;AAAA,MACvB;AAAA,MACA;AAAA,MACA,MAAM,MAAM;AAAA,MACZ,UAAU,MAAM;AAAA,MAChB,YAAY,KAAK,KAAK,QAAQ,MAAM,QAAQ;AAAA,IAC9C,CAAC;AAAA,EACH,SAAS,KAAK;AACZ,QAAI,eAAe,mBAAmB;AACpC,aAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACrE;AACA,WAAO,MAAM,yBAAyB,EAAE,IAAI,CAAC;AAC7C,WAAO,aAAa,KAAK,EAAE,OAAO,wBAAwB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC9E;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,aAAa;AAAA,MACb,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,2BAA2B;AAAA,MACzD;AAAA,IACF;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/modules/inbox_ops/api/extract/route.js

@@ -3,6 +3,8 @@ import { z } from "zod";
 import { InboxEmail } from "../../data/entities.js";
 import { emitInboxOpsEvent } from "../../events.js";
 import { resolveRequestContext, handleRouteError } from "../routeHelpers.js";
+import { createLogger } from "@open-mercato/shared/lib/logger";
+const logger = createLogger("inbox_ops").child({ component: "extract" });
 const metadata = {
   POST: { requireAuth: true, requireFeatures: ["inbox_ops.proposals.manage"] }
 };
@@ -58,7 +60,7 @@ async function POST(req) {
         subject: title || "Text extraction"
       });
     } catch (eventError) {
-      console.error("[inbox_ops:extract] Failed to emit email.received event:", eventError);
+      logger.error("Failed to emit email.received event", { err: eventError });
     }
     return NextResponse.json({ ok: true, emailId: email.id });
   } catch (err) {

package/dist/modules/inbox_ops/api/extract/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../src/modules/inbox_ops/api/extract/route.ts"],
-  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { InboxEmail } from '../../data/entities'\nimport { emitInboxOpsEvent } from '../../events'\nimport { resolveRequestContext, handleRouteError } from '../routeHelpers'\n\nexport const metadata = {\n  POST: { requireAuth: true, requireFeatures: ['inbox_ops.proposals.manage'] },\n}\n\nconst extractRequestSchema = z.object({\n  text: z.string().min(1, 'Text is required').max(100_000, 'Text exceeds maximum length'),\n  title: z.string().max(500).optional(),\n  metadata: z.record(z.string(), z.unknown()).optional(),\n})\n\nexport async function POST(req: Request) {\n  try {\n    const ctx = await resolveRequestContext(req)\n\n    let body: unknown\n    try {\n      body = await req.json()\n    } catch {\n      return NextResponse.json({ error: 'Invalid JSON body' }, { status: 400 })\n    }\n\n    const parsed = extractRequestSchema.safeParse(body)\n    if (!parsed.success) {\n      const errors = parsed.error.issues.map((i) => `${i.path.join('.')}: ${i.message}`).join('; ')\n      return NextResponse.json({ error: errors }, { status: 400 })\n    }\n\n    const { text, title, metadata: inputMetadata } = parsed.data\n\n    const maxTextSize = parseInt(process.env.INBOX_OPS_MAX_TEXT_SIZE || '204800', 10)\n    const truncatedText = text.slice(0, maxTextSize)\n\n    const submitterEmail = ctx.auth?.email || ctx.userId\n    const email = ctx.em.create(InboxEmail, {\n      forwardedByAddress: submitterEmail,\n      forwardedByName: null,\n      toAddress: 'text-extract',\n      subject: title || 'Text extraction',\n      cleanedText: truncatedText,\n      rawText: truncatedText,\n      receivedAt: new Date(),\n      status: 'received' as const,\n      isActive: true,\n      organizationId: ctx.organizationId,\n      tenantId: ctx.tenantId,\n      metadata: {\n        ...inputMetadata,\n        source: 'text_extract',\n        submittedByUserId: ctx.userId,\n      },\n    })\n\n    ctx.em.persist(email)\n    await ctx.em.flush()\n\n    try {\n      await emitInboxOpsEvent('inbox_ops.email.received', {\n        emailId: email.id,\n        tenantId: ctx.tenantId,\n        organizationId: ctx.organizationId,\n        forwardedByAddress: submitterEmail,\n        subject: title || 'Text extraction',\n      })\n    } catch (eventError) {\n      console.error('[inbox_ops:extract] Failed to emit email.received event:', eventError)\n    }\n\n    return NextResponse.json({ ok: true, emailId: email.id })\n  } catch (err) {\n    return handleRouteError(err, 'extract text')\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'InboxOps',\n  summary: 'Extract actions from raw text',\n  methods: {\n    POST: {\n      summary: 'Submit raw text for LLM extraction',\n      description: 'Creates an InboxEmail record from raw text and triggers the extraction pipeline. The extraction runs asynchronously.',\n      responses: [\n        { status: 200, description: 'Extraction queued successfully' },\n        { status: 400, description: 'Invalid request body' },\n        { status: 401, description: 'Unauthorized' },\n      ],\n    },\n  },\n}\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAElB,SAAS,kBAAkB;AAC3B,SAAS,yBAAyB;AAClC,SAAS,uBAAuB,wBAAwB;AAEjD,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,4BAA4B,EAAE;AAC7E;AAEA,MAAM,uBAAuB,EAAE,OAAO;AAAA,EACpC,MAAM,EAAE,OAAO,EAAE,IAAI,GAAG,kBAAkB,EAAE,IAAI,KAAS,6BAA6B;AAAA,EACtF,OAAO,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EACpC,UAAU,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,EAAE,SAAS;AACvD,CAAC;AAED,eAAsB,KAAK,KAAc;AACvC,MAAI;AACF,UAAM,MAAM,MAAM,sBAAsB,GAAG;AAE3C,QAAI;AACJ,QAAI;AACF,aAAO,MAAM,IAAI,KAAK;AAAA,IACxB,QAAQ;AACN,aAAO,aAAa,KAAK,EAAE,OAAO,oBAAoB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC1E;AAEA,UAAM,SAAS,qBAAqB,UAAU,IAAI;AAClD,QAAI,CAAC,OAAO,SAAS;AACnB,YAAM,SAAS,OAAO,MAAM,OAAO,IAAI,CAAC,MAAM,GAAG,EAAE,KAAK,KAAK,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,KAAK,IAAI;AAC5F,aAAO,aAAa,KAAK,EAAE,OAAO,OAAO,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC7D;AAEA,UAAM,EAAE,MAAM,OAAO,UAAU,cAAc,IAAI,OAAO;AAExD,UAAM,cAAc,SAAS,QAAQ,IAAI,2BAA2B,UAAU,EAAE;AAChF,UAAM,gBAAgB,KAAK,MAAM,GAAG,WAAW;AAE/C,UAAM,iBAAiB,IAAI,MAAM,SAAS,IAAI;AAC9C,UAAM,QAAQ,IAAI,GAAG,OAAO,YAAY;AAAA,MACtC,oBAAoB;AAAA,MACpB,iBAAiB;AAAA,MACjB,WAAW;AAAA,MACX,SAAS,SAAS;AAAA,MAClB,aAAa;AAAA,MACb,SAAS;AAAA,MACT,YAAY,oBAAI,KAAK;AAAA,MACrB,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,gBAAgB,IAAI;AAAA,MACpB,UAAU,IAAI;AAAA,MACd,UAAU;AAAA,QACR,GAAG;AAAA,QACH,QAAQ;AAAA,QACR,mBAAmB,IAAI;AAAA,MACzB;AAAA,IACF,CAAC;AAED,QAAI,GAAG,QAAQ,KAAK;AACpB,UAAM,IAAI,GAAG,MAAM;AAEnB,QAAI;AACF,YAAM,kBAAkB,4BAA4B;AAAA,QAClD,SAAS,MAAM;AAAA,QACf,UAAU,IAAI;AAAA,QACd,gBAAgB,IAAI;AAAA,QACpB,oBAAoB;AAAA,QACpB,SAAS,SAAS;AAAA,MACpB,CAAC;AAAA,IACH,SAAS,YAAY;AACnB,cAAQ,MAAM,4DAA4D,UAAU;AAAA,IACtF;AAEA,WAAO,aAAa,KAAK,EAAE,IAAI,MAAM,SAAS,MAAM,GAAG,CAAC;AAAA,EAC1D,SAAS,KAAK;AACZ,WAAO,iBAAiB,KAAK,cAAc;AAAA,EAC7C;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aAAa;AAAA,MACb,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,iCAAiC;AAAA,QAC7D,EAAE,QAAQ,KAAK,aAAa,uBAAuB;AAAA,QACnD,EAAE,QAAQ,KAAK,aAAa,eAAe;AAAA,MAC7C;AAAA,IACF;AAAA,EACF;AACF;",
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { InboxEmail } from '../../data/entities'\nimport { emitInboxOpsEvent } from '../../events'\nimport { resolveRequestContext, handleRouteError } from '../routeHelpers'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('inbox_ops').child({ component: 'extract' })\n\nexport const metadata = {\n  POST: { requireAuth: true, requireFeatures: ['inbox_ops.proposals.manage'] },\n}\n\nconst extractRequestSchema = z.object({\n  text: z.string().min(1, 'Text is required').max(100_000, 'Text exceeds maximum length'),\n  title: z.string().max(500).optional(),\n  metadata: z.record(z.string(), z.unknown()).optional(),\n})\n\nexport async function POST(req: Request) {\n  try {\n    const ctx = await resolveRequestContext(req)\n\n    let body: unknown\n    try {\n      body = await req.json()\n    } catch {\n      return NextResponse.json({ error: 'Invalid JSON body' }, { status: 400 })\n    }\n\n    const parsed = extractRequestSchema.safeParse(body)\n    if (!parsed.success) {\n      const errors = parsed.error.issues.map((i) => `${i.path.join('.')}: ${i.message}`).join('; ')\n      return NextResponse.json({ error: errors }, { status: 400 })\n    }\n\n    const { text, title, metadata: inputMetadata } = parsed.data\n\n    const maxTextSize = parseInt(process.env.INBOX_OPS_MAX_TEXT_SIZE || '204800', 10)\n    const truncatedText = text.slice(0, maxTextSize)\n\n    const submitterEmail = ctx.auth?.email || ctx.userId\n    const email = ctx.em.create(InboxEmail, {\n      forwardedByAddress: submitterEmail,\n      forwardedByName: null,\n      toAddress: 'text-extract',\n      subject: title || 'Text extraction',\n      cleanedText: truncatedText,\n      rawText: truncatedText,\n      receivedAt: new Date(),\n      status: 'received' as const,\n      isActive: true,\n      organizationId: ctx.organizationId,\n      tenantId: ctx.tenantId,\n      metadata: {\n        ...inputMetadata,\n        source: 'text_extract',\n        submittedByUserId: ctx.userId,\n      },\n    })\n\n    ctx.em.persist(email)\n    await ctx.em.flush()\n\n    try {\n      await emitInboxOpsEvent('inbox_ops.email.received', {\n        emailId: email.id,\n        tenantId: ctx.tenantId,\n        organizationId: ctx.organizationId,\n        forwardedByAddress: submitterEmail,\n        subject: title || 'Text extraction',\n      })\n    } catch (eventError) {\n      logger.error('Failed to emit email.received event', { err: eventError })\n    }\n\n    return NextResponse.json({ ok: true, emailId: email.id })\n  } catch (err) {\n    return handleRouteError(err, 'extract text')\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'InboxOps',\n  summary: 'Extract actions from raw text',\n  methods: {\n    POST: {\n      summary: 'Submit raw text for LLM extraction',\n      description: 'Creates an InboxEmail record from raw text and triggers the extraction pipeline. The extraction runs asynchronously.',\n      responses: [\n        { status: 200, description: 'Extraction queued successfully' },\n        { status: 400, description: 'Invalid request body' },\n        { status: 401, description: 'Unauthorized' },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAElB,SAAS,kBAAkB;AAC3B,SAAS,yBAAyB;AAClC,SAAS,uBAAuB,wBAAwB;AACxD,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,WAAW,EAAE,MAAM,EAAE,WAAW,UAAU,CAAC;AAEhE,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,4BAA4B,EAAE;AAC7E;AAEA,MAAM,uBAAuB,EAAE,OAAO;AAAA,EACpC,MAAM,EAAE,OAAO,EAAE,IAAI,GAAG,kBAAkB,EAAE,IAAI,KAAS,6BAA6B;AAAA,EACtF,OAAO,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EACpC,UAAU,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,EAAE,SAAS;AACvD,CAAC;AAED,eAAsB,KAAK,KAAc;AACvC,MAAI;AACF,UAAM,MAAM,MAAM,sBAAsB,GAAG;AAE3C,QAAI;AACJ,QAAI;AACF,aAAO,MAAM,IAAI,KAAK;AAAA,IACxB,QAAQ;AACN,aAAO,aAAa,KAAK,EAAE,OAAO,oBAAoB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC1E;AAEA,UAAM,SAAS,qBAAqB,UAAU,IAAI;AAClD,QAAI,CAAC,OAAO,SAAS;AACnB,YAAM,SAAS,OAAO,MAAM,OAAO,IAAI,CAAC,MAAM,GAAG,EAAE,KAAK,KAAK,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,KAAK,IAAI;AAC5F,aAAO,aAAa,KAAK,EAAE,OAAO,OAAO,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC7D;AAEA,UAAM,EAAE,MAAM,OAAO,UAAU,cAAc,IAAI,OAAO;AAExD,UAAM,cAAc,SAAS,QAAQ,IAAI,2BAA2B,UAAU,EAAE;AAChF,UAAM,gBAAgB,KAAK,MAAM,GAAG,WAAW;AAE/C,UAAM,iBAAiB,IAAI,MAAM,SAAS,IAAI;AAC9C,UAAM,QAAQ,IAAI,GAAG,OAAO,YAAY;AAAA,MACtC,oBAAoB;AAAA,MACpB,iBAAiB;AAAA,MACjB,WAAW;AAAA,MACX,SAAS,SAAS;AAAA,MAClB,aAAa;AAAA,MACb,SAAS;AAAA,MACT,YAAY,oBAAI,KAAK;AAAA,MACrB,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,gBAAgB,IAAI;AAAA,MACpB,UAAU,IAAI;AAAA,MACd,UAAU;AAAA,QACR,GAAG;AAAA,QACH,QAAQ;AAAA,QACR,mBAAmB,IAAI;AAAA,MACzB;AAAA,IACF,CAAC;AAED,QAAI,GAAG,QAAQ,KAAK;AACpB,UAAM,IAAI,GAAG,MAAM;AAEnB,QAAI;AACF,YAAM,kBAAkB,4BAA4B;AAAA,QAClD,SAAS,MAAM;AAAA,QACf,UAAU,IAAI;AAAA,QACd,gBAAgB,IAAI;AAAA,QACpB,oBAAoB;AAAA,QACpB,SAAS,SAAS;AAAA,MACpB,CAAC;AAAA,IACH,SAAS,YAAY;AACnB,aAAO,MAAM,uCAAuC,EAAE,KAAK,WAAW,CAAC;AAAA,IACzE;AAEA,WAAO,aAAa,KAAK,EAAE,IAAI,MAAM,SAAS,MAAM,GAAG,CAAC;AAAA,EAC1D,SAAS,KAAK;AACZ,WAAO,iBAAiB,KAAK,cAAc;AAAA,EAC7C;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aAAa;AAAA,MACb,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,iCAAiC;AAAA,QAC7D,EAAE,QAAQ,KAAK,aAAa,uBAAuB;AAAA,QACnD,EAAE,QAAQ,KAAK,aAAa,eAAe;AAAA,MAC7C;AAAA,IACF;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/modules/inbox_ops/api/proposals/[id]/actions/[actionId]/route.js

@@ -13,6 +13,8 @@ import {
   handleRouteError,
   isErrorResponse
 } from "../../../../routeHelpers.js";
+import { createLogger } from "@open-mercato/shared/lib/logger";
+const logger = createLogger("inbox_ops").child({ component: "action-edit" });
 const metadata = {
   PATCH: { requireAuth: true, requireFeatures: ["inbox_ops.proposals.manage"] }
 };
@@ -75,7 +77,7 @@ async function PATCH(req) {
         organizationId: ctx.organizationId
       });
     } catch (eventError) {
-      console.error("[inbox_ops:action:edit] Failed to emit event:", eventError);
+      logger.error("Failed to emit event", { err: eventError });
     }
     return NextResponse.json({ ok: true, action });
   } catch (err) {

package/dist/modules/inbox_ops/api/proposals/[id]/actions/[actionId]/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../../../src/modules/inbox_ops/api/proposals/%5Bid%5D/actions/%5BactionId%5D/route.ts"],
-  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { runWithCacheTenant } from '@open-mercato/cache'\nimport {\n  runCrudMutationGuardAfterSuccess,\n  validateCrudMutationGuard,\n} from '@open-mercato/shared/lib/crud/mutation-guard'\nimport { actionEditSchema, validateActionPayloadForType } from '../../../../../data/validators'\nimport { emitInboxOpsEvent } from '../../../../../events'\nimport { resolveCache, invalidateCountsCache } from '../../../../../lib/cache'\nimport {\n  resolveRequestContext,\n  resolveActionAndProposal,\n  handleRouteError,\n  isErrorResponse,\n} from '../../../../routeHelpers'\n\nexport const metadata = {\n  PATCH: { requireAuth: true, requireFeatures: ['inbox_ops.proposals.manage'] },\n}\n\nexport async function PATCH(req: Request) {\n  try {\n    const body = await req.json()\n    const parsed = actionEditSchema.safeParse(body)\n    if (!parsed.success) {\n      return NextResponse.json({ error: 'Invalid payload', details: parsed.error.issues }, { status: 400 })\n    }\n\n    const ctx = await resolveRequestContext(req)\n    const resolved = await resolveActionAndProposal(new URL(req.url), ctx)\n    if (isErrorResponse(resolved)) return resolved\n\n    const { action } = resolved\n\n    if (action.status !== 'pending' && action.status !== 'failed') {\n      return NextResponse.json({ error: 'Action already processed' }, { status: 409 })\n    }\n\n    const mergedPayload = { ...action.payload as Record<string, unknown>, ...parsed.data.payload }\n    const payloadValidation = validateActionPayloadForType(action.actionType, mergedPayload)\n    if (!payloadValidation.success) {\n      return NextResponse.json({ error: payloadValidation.error }, { status: 400 })\n    }\n\n    const guardResult = await validateCrudMutationGuard(ctx.container, {\n      tenantId: ctx.tenantId,\n      organizationId: ctx.organizationId,\n      userId: ctx.userId,\n      resourceKind: 'inbox_ops:inbox_proposal_action',\n      resourceId: action.id,\n      operation: 'update',\n      requestMethod: req.method,\n      requestHeaders: req.headers,\n      mutationPayload: parsed.data,\n    })\n    if (guardResult && !guardResult.ok) {\n      return NextResponse.json(guardResult.body, { status: guardResult.status })\n    }\n\n    action.payload = mergedPayload\n    await ctx.em.flush()\n\n    if (guardResult?.ok && guardResult.shouldRunAfterSuccess) {\n      await runCrudMutationGuardAfterSuccess(ctx.container, {\n        tenantId: ctx.tenantId,\n        organizationId: ctx.organizationId,\n        userId: ctx.userId,\n        resourceKind: 'inbox_ops:inbox_proposal_action',\n        resourceId: action.id,\n        operation: 'update',\n        requestMethod: req.method,\n        requestHeaders: req.headers,\n        metadata: guardResult.metadata ?? null,\n      })\n    }\n\n    const cache = resolveCache(ctx.container)\n    await runWithCacheTenant(ctx.tenantId, () => invalidateCountsCache(cache, ctx.tenantId))\n\n    try {\n      await emitInboxOpsEvent('inbox_ops.action.edited', {\n        actionId: action.id,\n        proposalId: action.proposalId,\n        actionType: action.actionType,\n        tenantId: ctx.tenantId,\n        organizationId: ctx.organizationId,\n      })\n    } catch (eventError) {\n      console.error('[inbox_ops:action:edit] Failed to emit event:', eventError)\n    }\n\n    return NextResponse.json({ ok: true, action })\n  } catch (err) {\n    return handleRouteError(err, 'edit action')\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'InboxOps',\n  summary: 'Edit action',\n  methods: {\n    PATCH: {\n      summary: 'Edit action payload before accepting',\n      responses: [\n        { status: 200, description: 'Action updated' },\n        { status: 404, description: 'Action not found' },\n        { status: 409, description: 'Action already processed' },\n      ],\n    },\n  },\n}\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAE7B,SAAS,0BAA0B;AACnC;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAS,kBAAkB,oCAAoC;AAC/D,SAAS,yBAAyB;AAClC,SAAS,cAAc,6BAA6B;AACpD;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEA,MAAM,WAAW;AAAA,EACtB,OAAO,EAAE,aAAa,MAAM,iBAAiB,CAAC,4BAA4B,EAAE;AAC9E;AAEA,eAAsB,MAAM,KAAc;AACxC,MAAI;AACF,UAAM,OAAO,MAAM,IAAI,KAAK;AAC5B,UAAM,SAAS,iBAAiB,UAAU,IAAI;AAC9C,QAAI,CAAC,OAAO,SAAS;AACnB,aAAO,aAAa,KAAK,EAAE,OAAO,mBAAmB,SAAS,OAAO,MAAM,OAAO,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACtG;AAEA,UAAM,MAAM,MAAM,sBAAsB,GAAG;AAC3C,UAAM,WAAW,MAAM,yBAAyB,IAAI,IAAI,IAAI,GAAG,GAAG,GAAG;AACrE,QAAI,gBAAgB,QAAQ,EAAG,QAAO;AAEtC,UAAM,EAAE,OAAO,IAAI;AAEnB,QAAI,OAAO,WAAW,aAAa,OAAO,WAAW,UAAU;AAC7D,aAAO,aAAa,KAAK,EAAE,OAAO,2BAA2B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACjF;AAEA,UAAM,gBAAgB,EAAE,GAAG,OAAO,SAAoC,GAAG,OAAO,KAAK,QAAQ;AAC7F,UAAM,oBAAoB,6BAA6B,OAAO,YAAY,aAAa;AACvF,QAAI,CAAC,kBAAkB,SAAS;AAC9B,aAAO,aAAa,KAAK,EAAE,OAAO,kBAAkB,MAAM,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC9E;AAEA,UAAM,cAAc,MAAM,0BAA0B,IAAI,WAAW;AAAA,MACjE,UAAU,IAAI;AAAA,MACd,gBAAgB,IAAI;AAAA,MACpB,QAAQ,IAAI;AAAA,MACZ,cAAc;AAAA,MACd,YAAY,OAAO;AAAA,MACnB,WAAW;AAAA,MACX,eAAe,IAAI;AAAA,MACnB,gBAAgB,IAAI;AAAA,MACpB,iBAAiB,OAAO;AAAA,IAC1B,CAAC;AACD,QAAI,eAAe,CAAC,YAAY,IAAI;AAClC,aAAO,aAAa,KAAK,YAAY,MAAM,EAAE,QAAQ,YAAY,OAAO,CAAC;AAAA,IAC3E;AAEA,WAAO,UAAU;AACjB,UAAM,IAAI,GAAG,MAAM;AAEnB,QAAI,aAAa,MAAM,YAAY,uBAAuB;AACxD,YAAM,iCAAiC,IAAI,WAAW;AAAA,QACpD,UAAU,IAAI;AAAA,QACd,gBAAgB,IAAI;AAAA,QACpB,QAAQ,IAAI;AAAA,QACZ,cAAc;AAAA,QACd,YAAY,OAAO;AAAA,QACnB,WAAW;AAAA,QACX,eAAe,IAAI;AAAA,QACnB,gBAAgB,IAAI;AAAA,QACpB,UAAU,YAAY,YAAY;AAAA,MACpC,CAAC;AAAA,IACH;AAEA,UAAM,QAAQ,aAAa,IAAI,SAAS;AACxC,UAAM,mBAAmB,IAAI,UAAU,MAAM,sBAAsB,OAAO,IAAI,QAAQ,CAAC;AAEvF,QAAI;AACF,YAAM,kBAAkB,2BAA2B;AAAA,QACjD,UAAU,OAAO;AAAA,QACjB,YAAY,OAAO;AAAA,QACnB,YAAY,OAAO;AAAA,QACnB,UAAU,IAAI;AAAA,QACd,gBAAgB,IAAI;AAAA,MACtB,CAAC;AAAA,IACH,SAAS,YAAY;AACnB,cAAQ,MAAM,iDAAiD,UAAU;AAAA,IAC3E;AAEA,WAAO,aAAa,KAAK,EAAE,IAAI,MAAM,OAAO,CAAC;AAAA,EAC/C,SAAS,KAAK;AACZ,WAAO,iBAAiB,KAAK,aAAa;AAAA,EAC5C;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,OAAO;AAAA,MACL,SAAS;AAAA,MACT,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,iBAAiB;AAAA,QAC7C,EAAE,QAAQ,KAAK,aAAa,mBAAmB;AAAA,QAC/C,EAAE,QAAQ,KAAK,aAAa,2BAA2B;AAAA,MACzD;AAAA,IACF;AAAA,EACF;AACF;",
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { runWithCacheTenant } from '@open-mercato/cache'\nimport {\n  runCrudMutationGuardAfterSuccess,\n  validateCrudMutationGuard,\n} from '@open-mercato/shared/lib/crud/mutation-guard'\nimport { actionEditSchema, validateActionPayloadForType } from '../../../../../data/validators'\nimport { emitInboxOpsEvent } from '../../../../../events'\nimport { resolveCache, invalidateCountsCache } from '../../../../../lib/cache'\nimport {\n  resolveRequestContext,\n  resolveActionAndProposal,\n  handleRouteError,\n  isErrorResponse,\n} from '../../../../routeHelpers'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('inbox_ops').child({ component: 'action-edit' })\n\nexport const metadata = {\n  PATCH: { requireAuth: true, requireFeatures: ['inbox_ops.proposals.manage'] },\n}\n\nexport async function PATCH(req: Request) {\n  try {\n    const body = await req.json()\n    const parsed = actionEditSchema.safeParse(body)\n    if (!parsed.success) {\n      return NextResponse.json({ error: 'Invalid payload', details: parsed.error.issues }, { status: 400 })\n    }\n\n    const ctx = await resolveRequestContext(req)\n    const resolved = await resolveActionAndProposal(new URL(req.url), ctx)\n    if (isErrorResponse(resolved)) return resolved\n\n    const { action } = resolved\n\n    if (action.status !== 'pending' && action.status !== 'failed') {\n      return NextResponse.json({ error: 'Action already processed' }, { status: 409 })\n    }\n\n    const mergedPayload = { ...action.payload as Record<string, unknown>, ...parsed.data.payload }\n    const payloadValidation = validateActionPayloadForType(action.actionType, mergedPayload)\n    if (!payloadValidation.success) {\n      return NextResponse.json({ error: payloadValidation.error }, { status: 400 })\n    }\n\n    const guardResult = await validateCrudMutationGuard(ctx.container, {\n      tenantId: ctx.tenantId,\n      organizationId: ctx.organizationId,\n      userId: ctx.userId,\n      resourceKind: 'inbox_ops:inbox_proposal_action',\n      resourceId: action.id,\n      operation: 'update',\n      requestMethod: req.method,\n      requestHeaders: req.headers,\n      mutationPayload: parsed.data,\n    })\n    if (guardResult && !guardResult.ok) {\n      return NextResponse.json(guardResult.body, { status: guardResult.status })\n    }\n\n    action.payload = mergedPayload\n    await ctx.em.flush()\n\n    if (guardResult?.ok && guardResult.shouldRunAfterSuccess) {\n      await runCrudMutationGuardAfterSuccess(ctx.container, {\n        tenantId: ctx.tenantId,\n        organizationId: ctx.organizationId,\n        userId: ctx.userId,\n        resourceKind: 'inbox_ops:inbox_proposal_action',\n        resourceId: action.id,\n        operation: 'update',\n        requestMethod: req.method,\n        requestHeaders: req.headers,\n        metadata: guardResult.metadata ?? null,\n      })\n    }\n\n    const cache = resolveCache(ctx.container)\n    await runWithCacheTenant(ctx.tenantId, () => invalidateCountsCache(cache, ctx.tenantId))\n\n    try {\n      await emitInboxOpsEvent('inbox_ops.action.edited', {\n        actionId: action.id,\n        proposalId: action.proposalId,\n        actionType: action.actionType,\n        tenantId: ctx.tenantId,\n        organizationId: ctx.organizationId,\n      })\n    } catch (eventError) {\n      logger.error('Failed to emit event', { err: eventError })\n    }\n\n    return NextResponse.json({ ok: true, action })\n  } catch (err) {\n    return handleRouteError(err, 'edit action')\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'InboxOps',\n  summary: 'Edit action',\n  methods: {\n    PATCH: {\n      summary: 'Edit action payload before accepting',\n      responses: [\n        { status: 200, description: 'Action updated' },\n        { status: 404, description: 'Action not found' },\n        { status: 409, description: 'Action already processed' },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAE7B,SAAS,0BAA0B;AACnC;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAS,kBAAkB,oCAAoC;AAC/D,SAAS,yBAAyB;AAClC,SAAS,cAAc,6BAA6B;AACpD;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,WAAW,EAAE,MAAM,EAAE,WAAW,cAAc,CAAC;AAEpE,MAAM,WAAW;AAAA,EACtB,OAAO,EAAE,aAAa,MAAM,iBAAiB,CAAC,4BAA4B,EAAE;AAC9E;AAEA,eAAsB,MAAM,KAAc;AACxC,MAAI;AACF,UAAM,OAAO,MAAM,IAAI,KAAK;AAC5B,UAAM,SAAS,iBAAiB,UAAU,IAAI;AAC9C,QAAI,CAAC,OAAO,SAAS;AACnB,aAAO,aAAa,KAAK,EAAE,OAAO,mBAAmB,SAAS,OAAO,MAAM,OAAO,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACtG;AAEA,UAAM,MAAM,MAAM,sBAAsB,GAAG;AAC3C,UAAM,WAAW,MAAM,yBAAyB,IAAI,IAAI,IAAI,GAAG,GAAG,GAAG;AACrE,QAAI,gBAAgB,QAAQ,EAAG,QAAO;AAEtC,UAAM,EAAE,OAAO,IAAI;AAEnB,QAAI,OAAO,WAAW,aAAa,OAAO,WAAW,UAAU;AAC7D,aAAO,aAAa,KAAK,EAAE,OAAO,2BAA2B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACjF;AAEA,UAAM,gBAAgB,EAAE,GAAG,OAAO,SAAoC,GAAG,OAAO,KAAK,QAAQ;AAC7F,UAAM,oBAAoB,6BAA6B,OAAO,YAAY,aAAa;AACvF,QAAI,CAAC,kBAAkB,SAAS;AAC9B,aAAO,aAAa,KAAK,EAAE,OAAO,kBAAkB,MAAM,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC9E;AAEA,UAAM,cAAc,MAAM,0BAA0B,IAAI,WAAW;AAAA,MACjE,UAAU,IAAI;AAAA,MACd,gBAAgB,IAAI;AAAA,MACpB,QAAQ,IAAI;AAAA,MACZ,cAAc;AAAA,MACd,YAAY,OAAO;AAAA,MACnB,WAAW;AAAA,MACX,eAAe,IAAI;AAAA,MACnB,gBAAgB,IAAI;AAAA,MACpB,iBAAiB,OAAO;AAAA,IAC1B,CAAC;AACD,QAAI,eAAe,CAAC,YAAY,IAAI;AAClC,aAAO,aAAa,KAAK,YAAY,MAAM,EAAE,QAAQ,YAAY,OAAO,CAAC;AAAA,IAC3E;AAEA,WAAO,UAAU;AACjB,UAAM,IAAI,GAAG,MAAM;AAEnB,QAAI,aAAa,MAAM,YAAY,uBAAuB;AACxD,YAAM,iCAAiC,IAAI,WAAW;AAAA,QACpD,UAAU,IAAI;AAAA,QACd,gBAAgB,IAAI;AAAA,QACpB,QAAQ,IAAI;AAAA,QACZ,cAAc;AAAA,QACd,YAAY,OAAO;AAAA,QACnB,WAAW;AAAA,QACX,eAAe,IAAI;AAAA,QACnB,gBAAgB,IAAI;AAAA,QACpB,UAAU,YAAY,YAAY;AAAA,MACpC,CAAC;AAAA,IACH;AAEA,UAAM,QAAQ,aAAa,IAAI,SAAS;AACxC,UAAM,mBAAmB,IAAI,UAAU,MAAM,sBAAsB,OAAO,IAAI,QAAQ,CAAC;AAEvF,QAAI;AACF,YAAM,kBAAkB,2BAA2B;AAAA,QACjD,UAAU,OAAO;AAAA,QACjB,YAAY,OAAO;AAAA,QACnB,YAAY,OAAO;AAAA,QACnB,UAAU,IAAI;AAAA,QACd,gBAAgB,IAAI;AAAA,MACtB,CAAC;AAAA,IACH,SAAS,YAAY;AACnB,aAAO,MAAM,wBAAwB,EAAE,KAAK,WAAW,CAAC;AAAA,IAC1D;AAEA,WAAO,aAAa,KAAK,EAAE,IAAI,MAAM,OAAO,CAAC;AAAA,EAC/C,SAAS,KAAK;AACZ,WAAO,iBAAiB,KAAK,aAAa;AAAA,EAC5C;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,OAAO;AAAA,MACL,SAAS;AAAA,MACT,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,iBAAiB;AAAA,QAC7C,EAAE,QAAQ,KAAK,aAAa,mBAAmB;AAAA,QAC/C,EAAE,QAAQ,KAAK,aAAa,2BAA2B;AAAA,MACzD;AAAA,IACF;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/modules/inbox_ops/api/proposals/[id]/replies/[replyId]/send/route.js

@@ -15,6 +15,8 @@ import {
   handleRouteError,
   isErrorResponse
 } from "../../../../../routeHelpers.js";
+import { createLogger } from "@open-mercato/shared/lib/logger";
+const logger = createLogger("inbox_ops").child({ component: "reply-send" });
 const metadata = {
   POST: { requireAuth: true, requireFeatures: ["inbox_ops.replies.send"] }
 };
@@ -135,7 +137,7 @@ async function POST(req) {
           { metadata: raw(`"metadata" - 'replySendClaimedAt'`) }
         );
       } catch (releaseError) {
-        console.error("[inbox_ops:reply:send] Failed to release send claim:", releaseError);
+        logger.error("Failed to release send claim", { err: releaseError });
       }
     };
     const resend = new Resend(apiKey);
@@ -182,7 +184,7 @@ async function POST(req) {
         messageRecordId: messagesResult?.messageId ?? null
       });
     } catch (eventError) {
-      console.error("[inbox_ops:reply:send] Failed to emit event:", eventError);
+      logger.error("Failed to emit event", { err: eventError });
     }
     return NextResponse.json({
       ok: true,

package/dist/modules/inbox_ops/api/proposals/[id]/replies/[replyId]/send/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../../../../src/modules/inbox_ops/api/proposals/%5Bid%5D/replies/%5BreplyId%5D/send/route.ts"],
-  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { raw } from '@mikro-orm/core'\nimport { Resend } from 'resend'\nimport { parseBooleanWithDefault } from '@open-mercato/shared/lib/boolean'\nimport { resolveDefaultEmailFromAddress } from '@open-mercato/shared/lib/email/config'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { InboxProposalAction, InboxEmail } from '../../../../../../data/entities'\nimport { draftReplyPayloadSchema } from '../../../../../../data/validators'\nimport { emitInboxOpsEvent } from '../../../../../../events'\nimport { createMessageRecordForReply } from '../../../../../../lib/messagesIntegration'\nimport {\n  resolveRequestContext,\n  resolveProposal,\n  extractPathSegment,\n  handleRouteError,\n  isErrorResponse,\n} from '../../../../../routeHelpers'\n\nexport const metadata = {\n  POST: { requireAuth: true, requireFeatures: ['inbox_ops.replies.send'] },\n}\n\nexport async function POST(req: Request) {\n  try {\n    const ctx = await resolveRequestContext(req)\n    const url = new URL(req.url)\n    const proposal = await resolveProposal(url, ctx)\n    if (isErrorResponse(proposal)) return proposal\n\n    const replyId = extractPathSegment(url, 'replies')\n    if (!replyId) {\n      return NextResponse.json({ error: 'Missing reply ID' }, { status: 400 })\n    }\n\n    const action = await findOneWithDecryption(\n      ctx.em,\n      InboxProposalAction,\n      {\n        id: replyId,\n        proposalId: proposal.id,\n        actionType: 'draft_reply',\n        organizationId: ctx.organizationId,\n        tenantId: ctx.tenantId,\n        deletedAt: null,\n      },\n      undefined,\n      ctx.scope,\n    )\n\n    if (!action) {\n      return NextResponse.json({ error: 'Reply action not found' }, { status: 404 })\n    }\n\n    if (action.status !== 'executed') {\n      return NextResponse.json(\n        { error: `Cannot send reply \u2014 action must be accepted first (current status: \"${action.status}\")` },\n        { status: 409 },\n      )\n    }\n\n    const existingMetadata =\n      action.metadata && typeof action.metadata === 'object' ? action.metadata : {}\n    if ((existingMetadata as Record<string, unknown>).replySentAt) {\n      return NextResponse.json(\n        { error: 'Reply has already been sent for this action' },\n        { status: 409 },\n      )\n    }\n\n    const email = await findOneWithDecryption(\n      ctx.em,\n      InboxEmail,\n      { id: proposal.inboxEmailId, deletedAt: null },\n      undefined,\n      ctx.scope,\n    )\n\n    const payloadResult = draftReplyPayloadSchema.safeParse(action.payload)\n    if (!payloadResult.success) {\n      return NextResponse.json({ error: 'Reply payload missing required fields (to, subject, body)' }, { status: 400 })\n    }\n    const { to: toAddress, toName, subject, body } = payloadResult.data\n\n    const apiKey = process.env.RESEND_API_KEY\n    if (!apiKey) {\n      return NextResponse.json({ error: 'Email service not configured' }, { status: 503 })\n    }\n\n    const emailDisabled =\n      parseBooleanWithDefault(process.env.OM_DISABLE_EMAIL_DELIVERY, false) ||\n      parseBooleanWithDefault(process.env.OM_TEST_MODE, false)\n    if (emailDisabled) {\n      return NextResponse.json({ error: 'Email delivery is disabled' }, { status: 503 })\n    }\n\n    const { inReplyToMessageId, references: payloadReferences } = payloadResult.data\n    const fromAddress = resolveDefaultEmailFromAddress()\n    if (!fromAddress) {\n      return NextResponse.json({\n        error: 'Email sender is not configured. Set NOTIFICATIONS_EMAIL_FROM, EMAIL_FROM, or ADMIN_EMAIL.',\n      }, { status: 503 })\n    }\n\n    const headers: Record<string, string> = {}\n    const inReplyTo = inReplyToMessageId || email?.messageId\n    if (inReplyTo) {\n      headers['In-Reply-To'] = inReplyTo\n    }\n    const references = payloadReferences || (email?.emailReferences as string[])\n    if (references && references.length > 0) {\n      headers['References'] = references.join(' ')\n    }\n\n    // Atomically claim the send right before calling the external email provider so\n    // two concurrent requests cannot both deliver the same reply. The claim only\n    // succeeds when neither replySentAt nor replySendClaimedAt is already set in the\n    // metadata; a losing request gets 0 rows back and is rejected with 409.\n    const sendClaimedAt = new Date().toISOString()\n    const claimed = await ctx.em.nativeUpdate(\n      InboxProposalAction,\n      {\n        id: action.id,\n        proposalId: proposal.id,\n        actionType: 'draft_reply',\n        organizationId: ctx.organizationId,\n        tenantId: ctx.tenantId,\n        deletedAt: null,\n        status: 'executed',\n        [raw(`coalesce(\"metadata\"->>'replySentAt', '')`)]: '',\n        [raw(`coalesce(\"metadata\"->>'replySendClaimedAt', '')`)]: '',\n      },\n      {\n        metadata: raw(\n          `coalesce(\"metadata\", '{}'::jsonb) || jsonb_build_object('replySendClaimedAt', ?::text)`,\n          [sendClaimedAt],\n        ),\n      },\n    )\n\n    if (claimed === 0) {\n      return NextResponse.json(\n        { error: 'Reply send is already in progress or has been sent for this action' },\n        { status: 409 },\n      )\n    }\n\n    const releaseSendClaim = async () => {\n      try {\n        await ctx.em.nativeUpdate(\n          InboxProposalAction,\n          {\n            id: action.id,\n            organizationId: ctx.organizationId,\n            tenantId: ctx.tenantId,\n            [raw(`coalesce(\"metadata\"->>'replySentAt', '')`)]: '',\n            [raw(`(\"metadata\"->>'replySendClaimedAt')`)]: sendClaimedAt,\n          },\n          { metadata: raw(`\"metadata\" - 'replySendClaimedAt'`) },\n        )\n      } catch (releaseError) {\n        console.error('[inbox_ops:reply:send] Failed to release send claim:', releaseError)\n      }\n    }\n\n    const resend = new Resend(apiKey)\n    const { data: sendData, error: sendError } = await resend.emails.send({\n      to: toAddress,\n      from: fromAddress,\n      subject,\n      text: body,\n      ...(Object.keys(headers).length > 0 ? { headers } : {}),\n    })\n\n    if (sendError) {\n      await releaseSendClaim()\n      const errorMessage = sendError.message || 'Unknown error'\n      return NextResponse.json({ error: `Failed to send email: ${errorMessage}` }, { status: 502 })\n    }\n\n    const sentMessageId = sendData?.id || null\n    const messagesResult = await createMessageRecordForReply(\n      { to: toAddress, toName, subject, body },\n      proposal.inboxEmailId,\n      {\n        container: ctx.container,\n        scope: {\n          tenantId: ctx.tenantId,\n          organizationId: ctx.organizationId,\n          userId: ctx.userId,\n        },\n      },\n    )\n\n    action.metadata = {\n      ...existingMetadata,\n      replySentAt: new Date().toISOString(),\n      sentMessageId,\n      ...(messagesResult ? { messageRecordId: messagesResult.messageId } : {}),\n    }\n    await ctx.em.flush()\n\n    try {\n      await emitInboxOpsEvent('inbox_ops.reply.sent', {\n        proposalId: proposal.id,\n        actionId: replyId,\n        tenantId: ctx.tenantId,\n        organizationId: ctx.organizationId,\n        toAddress,\n        sentMessageId,\n        messageRecordId: messagesResult?.messageId ?? null,\n      })\n    } catch (eventError) {\n      console.error('[inbox_ops:reply:send] Failed to emit event:', eventError)\n    }\n\n    return NextResponse.json({\n      ok: true,\n      sentMessageId,\n      ...(messagesResult ? { messageRecordId: messagesResult.messageId } : {}),\n    })\n  } catch (err) {\n    return handleRouteError(err, 'send reply')\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'InboxOps',\n  summary: 'Send draft reply',\n  methods: {\n    POST: {\n      summary: 'Send a draft reply email and register it in messages when available',\n      description: 'Sends the draft_reply action payload via the configured email provider. When the messages module is available, also records the sent reply as an internal message record. Sets In-Reply-To and References headers for threading.',\n      responses: [\n        { status: 200, description: 'Reply sent successfully' },\n        { status: 400, description: 'Missing required payload fields' },\n        { status: 404, description: 'Reply action not found' },\n        { status: 409, description: 'Action in invalid state for sending, or a send is already in progress / completed for this reply' },\n        { status: 502, description: 'Email delivery failed' },\n        { status: 503, description: 'Email service not configured or disabled' },\n      ],\n    },\n  },\n}\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,WAAW;AACpB,SAAS,cAAc;AACvB,SAAS,+BAA+B;AACxC,SAAS,sCAAsC;AAE/C,SAAS,6BAA6B;AACtC,SAAS,qBAAqB,kBAAkB;AAChD,SAAS,+BAA+B;AACxC,SAAS,yBAAyB;AAClC,SAAS,mCAAmC;AAC5C;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEA,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,wBAAwB,EAAE;AACzE;AAEA,eAAsB,KAAK,KAAc;AACvC,MAAI;AACF,UAAM,MAAM,MAAM,sBAAsB,GAAG;AAC3C,UAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAC3B,UAAM,WAAW,MAAM,gBAAgB,KAAK,GAAG;AAC/C,QAAI,gBAAgB,QAAQ,EAAG,QAAO;AAEtC,UAAM,UAAU,mBAAmB,KAAK,SAAS;AACjD,QAAI,CAAC,SAAS;AACZ,aAAO,aAAa,KAAK,EAAE,OAAO,mBAAmB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACzE;AAEA,UAAM,SAAS,MAAM;AAAA,MACnB,IAAI;AAAA,MACJ;AAAA,MACA;AAAA,QACE,IAAI;AAAA,QACJ,YAAY,SAAS;AAAA,QACrB,YAAY;AAAA,QACZ,gBAAgB,IAAI;AAAA,QACpB,UAAU,IAAI;AAAA,QACd,WAAW;AAAA,MACb;AAAA,MACA;AAAA,MACA,IAAI;AAAA,IACN;AAEA,QAAI,CAAC,QAAQ;AACX,aAAO,aAAa,KAAK,EAAE,OAAO,yBAAyB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC/E;AAEA,QAAI,OAAO,WAAW,YAAY;AAChC,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,4EAAuE,OAAO,MAAM,KAAK;AAAA,QAClG,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAEA,UAAM,mBACJ,OAAO,YAAY,OAAO,OAAO,aAAa,WAAW,OAAO,WAAW,CAAC;AAC9E,QAAK,iBAA6C,aAAa;AAC7D,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,8CAA8C;AAAA,QACvD,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAEA,UAAM,QAAQ,MAAM;AAAA,MAClB,IAAI;AAAA,MACJ;AAAA,MACA,EAAE,IAAI,SAAS,cAAc,WAAW,KAAK;AAAA,MAC7C;AAAA,MACA,IAAI;AAAA,IACN;AAEA,UAAM,gBAAgB,wBAAwB,UAAU,OAAO,OAAO;AACtE,QAAI,CAAC,cAAc,SAAS;AAC1B,aAAO,aAAa,KAAK,EAAE,OAAO,4DAA4D,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAClH;AACA,UAAM,EAAE,IAAI,WAAW,QAAQ,SAAS,KAAK,IAAI,cAAc;AAE/D,UAAM,SAAS,QAAQ,IAAI;AAC3B,QAAI,CAAC,QAAQ;AACX,aAAO,aAAa,KAAK,EAAE,OAAO,+BAA+B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACrF;AAEA,UAAM,gBACJ,wBAAwB,QAAQ,IAAI,2BAA2B,KAAK,KACpE,wBAAwB,QAAQ,IAAI,cAAc,KAAK;AACzD,QAAI,eAAe;AACjB,aAAO,aAAa,KAAK,EAAE,OAAO,6BAA6B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACnF;AAEA,UAAM,EAAE,oBAAoB,YAAY,kBAAkB,IAAI,cAAc;AAC5E,UAAM,cAAc,+BAA+B;AACnD,QAAI,CAAC,aAAa;AAChB,aAAO,aAAa,KAAK;AAAA,QACvB,OAAO;AAAA,MACT,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACpB;AAEA,UAAM,UAAkC,CAAC;AACzC,UAAM,YAAY,sBAAsB,OAAO;AAC/C,QAAI,WAAW;AACb,cAAQ,aAAa,IAAI;AAAA,IAC3B;AACA,UAAM,aAAa,qBAAsB,OAAO;AAChD,QAAI,cAAc,WAAW,SAAS,GAAG;AACvC,cAAQ,YAAY,IAAI,WAAW,KAAK,GAAG;AAAA,IAC7C;AAMA,UAAM,iBAAgB,oBAAI,KAAK,GAAE,YAAY;AAC7C,UAAM,UAAU,MAAM,IAAI,GAAG;AAAA,MAC3B;AAAA,MACA;AAAA,QACE,IAAI,OAAO;AAAA,QACX,YAAY,SAAS;AAAA,QACrB,YAAY;AAAA,QACZ,gBAAgB,IAAI;AAAA,QACpB,UAAU,IAAI;AAAA,QACd,WAAW;AAAA,QACX,QAAQ;AAAA,QACR,CAAC,IAAI,0CAA0C,CAAC,GAAG;AAAA,QACnD,CAAC,IAAI,iDAAiD,CAAC,GAAG;AAAA,MAC5D;AAAA,MACA;AAAA,QACE,UAAU;AAAA,UACR;AAAA,UACA,CAAC,aAAa;AAAA,QAChB;AAAA,MACF;AAAA,IACF;AAEA,QAAI,YAAY,GAAG;AACjB,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,qEAAqE;AAAA,QAC9E,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAEA,UAAM,mBAAmB,YAAY;AACnC,UAAI;AACF,cAAM,IAAI,GAAG;AAAA,UACX;AAAA,UACA;AAAA,YACE,IAAI,OAAO;AAAA,YACX,gBAAgB,IAAI;AAAA,YACpB,UAAU,IAAI;AAAA,YACd,CAAC,IAAI,0CAA0C,CAAC,GAAG;AAAA,YACnD,CAAC,IAAI,qCAAqC,CAAC,GAAG;AAAA,UAChD;AAAA,UACA,EAAE,UAAU,IAAI,mCAAmC,EAAE;AAAA,QACvD;AAAA,MACF,SAAS,cAAc;AACrB,gBAAQ,MAAM,wDAAwD,YAAY;AAAA,MACpF;AAAA,IACF;AAEA,UAAM,SAAS,IAAI,OAAO,MAAM;AAChC,UAAM,EAAE,MAAM,UAAU,OAAO,UAAU,IAAI,MAAM,OAAO,OAAO,KAAK;AAAA,MACpE,IAAI;AAAA,MACJ,MAAM;AAAA,MACN;AAAA,MACA,MAAM;AAAA,MACN,GAAI,OAAO,KAAK,OAAO,EAAE,SAAS,IAAI,EAAE,QAAQ,IAAI,CAAC;AAAA,IACvD,CAAC;AAED,QAAI,WAAW;AACb,YAAM,iBAAiB;AACvB,YAAM,eAAe,UAAU,WAAW;AAC1C,aAAO,aAAa,KAAK,EAAE,OAAO,yBAAyB,YAAY,GAAG,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC9F;AAEA,UAAM,gBAAgB,UAAU,MAAM;AACtC,UAAM,iBAAiB,MAAM;AAAA,MAC3B,EAAE,IAAI,WAAW,QAAQ,SAAS,KAAK;AAAA,MACvC,SAAS;AAAA,MACT;AAAA,QACE,WAAW,IAAI;AAAA,QACf,OAAO;AAAA,UACL,UAAU,IAAI;AAAA,UACd,gBAAgB,IAAI;AAAA,UACpB,QAAQ,IAAI;AAAA,QACd;AAAA,MACF;AAAA,IACF;AAEA,WAAO,WAAW;AAAA,MAChB,GAAG;AAAA,MACH,cAAa,oBAAI,KAAK,GAAE,YAAY;AAAA,MACpC;AAAA,MACA,GAAI,iBAAiB,EAAE,iBAAiB,eAAe,UAAU,IAAI,CAAC;AAAA,IACxE;AACA,UAAM,IAAI,GAAG,MAAM;AAEnB,QAAI;AACF,YAAM,kBAAkB,wBAAwB;AAAA,QAC9C,YAAY,SAAS;AAAA,QACrB,UAAU;AAAA,QACV,UAAU,IAAI;AAAA,QACd,gBAAgB,IAAI;AAAA,QACpB;AAAA,QACA;AAAA,QACA,iBAAiB,gBAAgB,aAAa;AAAA,MAChD,CAAC;AAAA,IACH,SAAS,YAAY;AACnB,cAAQ,MAAM,gDAAgD,UAAU;AAAA,IAC1E;AAEA,WAAO,aAAa,KAAK;AAAA,MACvB,IAAI;AAAA,MACJ;AAAA,MACA,GAAI,iBAAiB,EAAE,iBAAiB,eAAe,UAAU,IAAI,CAAC;AAAA,IACxE,CAAC;AAAA,EACH,SAAS,KAAK;AACZ,WAAO,iBAAiB,KAAK,YAAY;AAAA,EAC3C;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aAAa;AAAA,MACb,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,0BAA0B;AAAA,QACtD,EAAE,QAAQ,KAAK,aAAa,kCAAkC;AAAA,QAC9D,EAAE,QAAQ,KAAK,aAAa,yBAAyB;AAAA,QACrD,EAAE,QAAQ,KAAK,aAAa,mGAAmG;AAAA,QAC/H,EAAE,QAAQ,KAAK,aAAa,wBAAwB;AAAA,QACpD,EAAE,QAAQ,KAAK,aAAa,2CAA2C;AAAA,MACzE;AAAA,IACF;AAAA,EACF;AACF;",
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { raw } from '@mikro-orm/core'\nimport { Resend } from 'resend'\nimport { parseBooleanWithDefault } from '@open-mercato/shared/lib/boolean'\nimport { resolveDefaultEmailFromAddress } from '@open-mercato/shared/lib/email/config'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { InboxProposalAction, InboxEmail } from '../../../../../../data/entities'\nimport { draftReplyPayloadSchema } from '../../../../../../data/validators'\nimport { emitInboxOpsEvent } from '../../../../../../events'\nimport { createMessageRecordForReply } from '../../../../../../lib/messagesIntegration'\nimport {\n  resolveRequestContext,\n  resolveProposal,\n  extractPathSegment,\n  handleRouteError,\n  isErrorResponse,\n} from '../../../../../routeHelpers'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('inbox_ops').child({ component: 'reply-send' })\n\nexport const metadata = {\n  POST: { requireAuth: true, requireFeatures: ['inbox_ops.replies.send'] },\n}\n\nexport async function POST(req: Request) {\n  try {\n    const ctx = await resolveRequestContext(req)\n    const url = new URL(req.url)\n    const proposal = await resolveProposal(url, ctx)\n    if (isErrorResponse(proposal)) return proposal\n\n    const replyId = extractPathSegment(url, 'replies')\n    if (!replyId) {\n      return NextResponse.json({ error: 'Missing reply ID' }, { status: 400 })\n    }\n\n    const action = await findOneWithDecryption(\n      ctx.em,\n      InboxProposalAction,\n      {\n        id: replyId,\n        proposalId: proposal.id,\n        actionType: 'draft_reply',\n        organizationId: ctx.organizationId,\n        tenantId: ctx.tenantId,\n        deletedAt: null,\n      },\n      undefined,\n      ctx.scope,\n    )\n\n    if (!action) {\n      return NextResponse.json({ error: 'Reply action not found' }, { status: 404 })\n    }\n\n    if (action.status !== 'executed') {\n      return NextResponse.json(\n        { error: `Cannot send reply \u2014 action must be accepted first (current status: \"${action.status}\")` },\n        { status: 409 },\n      )\n    }\n\n    const existingMetadata =\n      action.metadata && typeof action.metadata === 'object' ? action.metadata : {}\n    if ((existingMetadata as Record<string, unknown>).replySentAt) {\n      return NextResponse.json(\n        { error: 'Reply has already been sent for this action' },\n        { status: 409 },\n      )\n    }\n\n    const email = await findOneWithDecryption(\n      ctx.em,\n      InboxEmail,\n      { id: proposal.inboxEmailId, deletedAt: null },\n      undefined,\n      ctx.scope,\n    )\n\n    const payloadResult = draftReplyPayloadSchema.safeParse(action.payload)\n    if (!payloadResult.success) {\n      return NextResponse.json({ error: 'Reply payload missing required fields (to, subject, body)' }, { status: 400 })\n    }\n    const { to: toAddress, toName, subject, body } = payloadResult.data\n\n    const apiKey = process.env.RESEND_API_KEY\n    if (!apiKey) {\n      return NextResponse.json({ error: 'Email service not configured' }, { status: 503 })\n    }\n\n    const emailDisabled =\n      parseBooleanWithDefault(process.env.OM_DISABLE_EMAIL_DELIVERY, false) ||\n      parseBooleanWithDefault(process.env.OM_TEST_MODE, false)\n    if (emailDisabled) {\n      return NextResponse.json({ error: 'Email delivery is disabled' }, { status: 503 })\n    }\n\n    const { inReplyToMessageId, references: payloadReferences } = payloadResult.data\n    const fromAddress = resolveDefaultEmailFromAddress()\n    if (!fromAddress) {\n      return NextResponse.json({\n        error: 'Email sender is not configured. Set NOTIFICATIONS_EMAIL_FROM, EMAIL_FROM, or ADMIN_EMAIL.',\n      }, { status: 503 })\n    }\n\n    const headers: Record<string, string> = {}\n    const inReplyTo = inReplyToMessageId || email?.messageId\n    if (inReplyTo) {\n      headers['In-Reply-To'] = inReplyTo\n    }\n    const references = payloadReferences || (email?.emailReferences as string[])\n    if (references && references.length > 0) {\n      headers['References'] = references.join(' ')\n    }\n\n    // Atomically claim the send right before calling the external email provider so\n    // two concurrent requests cannot both deliver the same reply. The claim only\n    // succeeds when neither replySentAt nor replySendClaimedAt is already set in the\n    // metadata; a losing request gets 0 rows back and is rejected with 409.\n    const sendClaimedAt = new Date().toISOString()\n    const claimed = await ctx.em.nativeUpdate(\n      InboxProposalAction,\n      {\n        id: action.id,\n        proposalId: proposal.id,\n        actionType: 'draft_reply',\n        organizationId: ctx.organizationId,\n        tenantId: ctx.tenantId,\n        deletedAt: null,\n        status: 'executed',\n        [raw(`coalesce(\"metadata\"->>'replySentAt', '')`)]: '',\n        [raw(`coalesce(\"metadata\"->>'replySendClaimedAt', '')`)]: '',\n      },\n      {\n        metadata: raw(\n          `coalesce(\"metadata\", '{}'::jsonb) || jsonb_build_object('replySendClaimedAt', ?::text)`,\n          [sendClaimedAt],\n        ),\n      },\n    )\n\n    if (claimed === 0) {\n      return NextResponse.json(\n        { error: 'Reply send is already in progress or has been sent for this action' },\n        { status: 409 },\n      )\n    }\n\n    const releaseSendClaim = async () => {\n      try {\n        await ctx.em.nativeUpdate(\n          InboxProposalAction,\n          {\n            id: action.id,\n            organizationId: ctx.organizationId,\n            tenantId: ctx.tenantId,\n            [raw(`coalesce(\"metadata\"->>'replySentAt', '')`)]: '',\n            [raw(`(\"metadata\"->>'replySendClaimedAt')`)]: sendClaimedAt,\n          },\n          { metadata: raw(`\"metadata\" - 'replySendClaimedAt'`) },\n        )\n      } catch (releaseError) {\n        logger.error('Failed to release send claim', { err: releaseError })\n      }\n    }\n\n    const resend = new Resend(apiKey)\n    const { data: sendData, error: sendError } = await resend.emails.send({\n      to: toAddress,\n      from: fromAddress,\n      subject,\n      text: body,\n      ...(Object.keys(headers).length > 0 ? { headers } : {}),\n    })\n\n    if (sendError) {\n      await releaseSendClaim()\n      const errorMessage = sendError.message || 'Unknown error'\n      return NextResponse.json({ error: `Failed to send email: ${errorMessage}` }, { status: 502 })\n    }\n\n    const sentMessageId = sendData?.id || null\n    const messagesResult = await createMessageRecordForReply(\n      { to: toAddress, toName, subject, body },\n      proposal.inboxEmailId,\n      {\n        container: ctx.container,\n        scope: {\n          tenantId: ctx.tenantId,\n          organizationId: ctx.organizationId,\n          userId: ctx.userId,\n        },\n      },\n    )\n\n    action.metadata = {\n      ...existingMetadata,\n      replySentAt: new Date().toISOString(),\n      sentMessageId,\n      ...(messagesResult ? { messageRecordId: messagesResult.messageId } : {}),\n    }\n    await ctx.em.flush()\n\n    try {\n      await emitInboxOpsEvent('inbox_ops.reply.sent', {\n        proposalId: proposal.id,\n        actionId: replyId,\n        tenantId: ctx.tenantId,\n        organizationId: ctx.organizationId,\n        toAddress,\n        sentMessageId,\n        messageRecordId: messagesResult?.messageId ?? null,\n      })\n    } catch (eventError) {\n      logger.error('Failed to emit event', { err: eventError })\n    }\n\n    return NextResponse.json({\n      ok: true,\n      sentMessageId,\n      ...(messagesResult ? { messageRecordId: messagesResult.messageId } : {}),\n    })\n  } catch (err) {\n    return handleRouteError(err, 'send reply')\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'InboxOps',\n  summary: 'Send draft reply',\n  methods: {\n    POST: {\n      summary: 'Send a draft reply email and register it in messages when available',\n      description: 'Sends the draft_reply action payload via the configured email provider. When the messages module is available, also records the sent reply as an internal message record. Sets In-Reply-To and References headers for threading.',\n      responses: [\n        { status: 200, description: 'Reply sent successfully' },\n        { status: 400, description: 'Missing required payload fields' },\n        { status: 404, description: 'Reply action not found' },\n        { status: 409, description: 'Action in invalid state for sending, or a send is already in progress / completed for this reply' },\n        { status: 502, description: 'Email delivery failed' },\n        { status: 503, description: 'Email service not configured or disabled' },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,WAAW;AACpB,SAAS,cAAc;AACvB,SAAS,+BAA+B;AACxC,SAAS,sCAAsC;AAE/C,SAAS,6BAA6B;AACtC,SAAS,qBAAqB,kBAAkB;AAChD,SAAS,+BAA+B;AACxC,SAAS,yBAAyB;AAClC,SAAS,mCAAmC;AAC5C;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,WAAW,EAAE,MAAM,EAAE,WAAW,aAAa,CAAC;AAEnE,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,wBAAwB,EAAE;AACzE;AAEA,eAAsB,KAAK,KAAc;AACvC,MAAI;AACF,UAAM,MAAM,MAAM,sBAAsB,GAAG;AAC3C,UAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAC3B,UAAM,WAAW,MAAM,gBAAgB,KAAK,GAAG;AAC/C,QAAI,gBAAgB,QAAQ,EAAG,QAAO;AAEtC,UAAM,UAAU,mBAAmB,KAAK,SAAS;AACjD,QAAI,CAAC,SAAS;AACZ,aAAO,aAAa,KAAK,EAAE,OAAO,mBAAmB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACzE;AAEA,UAAM,SAAS,MAAM;AAAA,MACnB,IAAI;AAAA,MACJ;AAAA,MACA;AAAA,QACE,IAAI;AAAA,QACJ,YAAY,SAAS;AAAA,QACrB,YAAY;AAAA,QACZ,gBAAgB,IAAI;AAAA,QACpB,UAAU,IAAI;AAAA,QACd,WAAW;AAAA,MACb;AAAA,MACA;AAAA,MACA,IAAI;AAAA,IACN;AAEA,QAAI,CAAC,QAAQ;AACX,aAAO,aAAa,KAAK,EAAE,OAAO,yBAAyB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC/E;AAEA,QAAI,OAAO,WAAW,YAAY;AAChC,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,4EAAuE,OAAO,MAAM,KAAK;AAAA,QAClG,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAEA,UAAM,mBACJ,OAAO,YAAY,OAAO,OAAO,aAAa,WAAW,OAAO,WAAW,CAAC;AAC9E,QAAK,iBAA6C,aAAa;AAC7D,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,8CAA8C;AAAA,QACvD,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAEA,UAAM,QAAQ,MAAM;AAAA,MAClB,IAAI;AAAA,MACJ;AAAA,MACA,EAAE,IAAI,SAAS,cAAc,WAAW,KAAK;AAAA,MAC7C;AAAA,MACA,IAAI;AAAA,IACN;AAEA,UAAM,gBAAgB,wBAAwB,UAAU,OAAO,OAAO;AACtE,QAAI,CAAC,cAAc,SAAS;AAC1B,aAAO,aAAa,KAAK,EAAE,OAAO,4DAA4D,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAClH;AACA,UAAM,EAAE,IAAI,WAAW,QAAQ,SAAS,KAAK,IAAI,cAAc;AAE/D,UAAM,SAAS,QAAQ,IAAI;AAC3B,QAAI,CAAC,QAAQ;AACX,aAAO,aAAa,KAAK,EAAE,OAAO,+BAA+B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACrF;AAEA,UAAM,gBACJ,wBAAwB,QAAQ,IAAI,2BAA2B,KAAK,KACpE,wBAAwB,QAAQ,IAAI,cAAc,KAAK;AACzD,QAAI,eAAe;AACjB,aAAO,aAAa,KAAK,EAAE,OAAO,6BAA6B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACnF;AAEA,UAAM,EAAE,oBAAoB,YAAY,kBAAkB,IAAI,cAAc;AAC5E,UAAM,cAAc,+BAA+B;AACnD,QAAI,CAAC,aAAa;AAChB,aAAO,aAAa,KAAK;AAAA,QACvB,OAAO;AAAA,MACT,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACpB;AAEA,UAAM,UAAkC,CAAC;AACzC,UAAM,YAAY,sBAAsB,OAAO;AAC/C,QAAI,WAAW;AACb,cAAQ,aAAa,IAAI;AAAA,IAC3B;AACA,UAAM,aAAa,qBAAsB,OAAO;AAChD,QAAI,cAAc,WAAW,SAAS,GAAG;AACvC,cAAQ,YAAY,IAAI,WAAW,KAAK,GAAG;AAAA,IAC7C;AAMA,UAAM,iBAAgB,oBAAI,KAAK,GAAE,YAAY;AAC7C,UAAM,UAAU,MAAM,IAAI,GAAG;AAAA,MAC3B;AAAA,MACA;AAAA,QACE,IAAI,OAAO;AAAA,QACX,YAAY,SAAS;AAAA,QACrB,YAAY;AAAA,QACZ,gBAAgB,IAAI;AAAA,QACpB,UAAU,IAAI;AAAA,QACd,WAAW;AAAA,QACX,QAAQ;AAAA,QACR,CAAC,IAAI,0CAA0C,CAAC,GAAG;AAAA,QACnD,CAAC,IAAI,iDAAiD,CAAC,GAAG;AAAA,MAC5D;AAAA,MACA;AAAA,QACE,UAAU;AAAA,UACR;AAAA,UACA,CAAC,aAAa;AAAA,QAChB;AAAA,MACF;AAAA,IACF;AAEA,QAAI,YAAY,GAAG;AACjB,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,qEAAqE;AAAA,QAC9E,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAEA,UAAM,mBAAmB,YAAY;AACnC,UAAI;AACF,cAAM,IAAI,GAAG;AAAA,UACX;AAAA,UACA;AAAA,YACE,IAAI,OAAO;AAAA,YACX,gBAAgB,IAAI;AAAA,YACpB,UAAU,IAAI;AAAA,YACd,CAAC,IAAI,0CAA0C,CAAC,GAAG;AAAA,YACnD,CAAC,IAAI,qCAAqC,CAAC,GAAG;AAAA,UAChD;AAAA,UACA,EAAE,UAAU,IAAI,mCAAmC,EAAE;AAAA,QACvD;AAAA,MACF,SAAS,cAAc;AACrB,eAAO,MAAM,gCAAgC,EAAE,KAAK,aAAa,CAAC;AAAA,MACpE;AAAA,IACF;AAEA,UAAM,SAAS,IAAI,OAAO,MAAM;AAChC,UAAM,EAAE,MAAM,UAAU,OAAO,UAAU,IAAI,MAAM,OAAO,OAAO,KAAK;AAAA,MACpE,IAAI;AAAA,MACJ,MAAM;AAAA,MACN;AAAA,MACA,MAAM;AAAA,MACN,GAAI,OAAO,KAAK,OAAO,EAAE,SAAS,IAAI,EAAE,QAAQ,IAAI,CAAC;AAAA,IACvD,CAAC;AAED,QAAI,WAAW;AACb,YAAM,iBAAiB;AACvB,YAAM,eAAe,UAAU,WAAW;AAC1C,aAAO,aAAa,KAAK,EAAE,OAAO,yBAAyB,YAAY,GAAG,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC9F;AAEA,UAAM,gBAAgB,UAAU,MAAM;AACtC,UAAM,iBAAiB,MAAM;AAAA,MAC3B,EAAE,IAAI,WAAW,QAAQ,SAAS,KAAK;AAAA,MACvC,SAAS;AAAA,MACT;AAAA,QACE,WAAW,IAAI;AAAA,QACf,OAAO;AAAA,UACL,UAAU,IAAI;AAAA,UACd,gBAAgB,IAAI;AAAA,UACpB,QAAQ,IAAI;AAAA,QACd;AAAA,MACF;AAAA,IACF;AAEA,WAAO,WAAW;AAAA,MAChB,GAAG;AAAA,MACH,cAAa,oBAAI,KAAK,GAAE,YAAY;AAAA,MACpC;AAAA,MACA,GAAI,iBAAiB,EAAE,iBAAiB,eAAe,UAAU,IAAI,CAAC;AAAA,IACxE;AACA,UAAM,IAAI,GAAG,MAAM;AAEnB,QAAI;AACF,YAAM,kBAAkB,wBAAwB;AAAA,QAC9C,YAAY,SAAS;AAAA,QACrB,UAAU;AAAA,QACV,UAAU,IAAI;AAAA,QACd,gBAAgB,IAAI;AAAA,QACpB;AAAA,QACA;AAAA,QACA,iBAAiB,gBAAgB,aAAa;AAAA,MAChD,CAAC;AAAA,IACH,SAAS,YAAY;AACnB,aAAO,MAAM,wBAAwB,EAAE,KAAK,WAAW,CAAC;AAAA,IAC1D;AAEA,WAAO,aAAa,KAAK;AAAA,MACvB,IAAI;AAAA,MACJ;AAAA,MACA,GAAI,iBAAiB,EAAE,iBAAiB,eAAe,UAAU,IAAI,CAAC;AAAA,IACxE,CAAC;AAAA,EACH,SAAS,KAAK;AACZ,WAAO,iBAAiB,KAAK,YAAY;AAAA,EAC3C;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aAAa;AAAA,MACb,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,0BAA0B;AAAA,QACtD,EAAE,QAAQ,KAAK,aAAa,kCAAkC;AAAA,QAC9D,EAAE,QAAQ,KAAK,aAAa,yBAAyB;AAAA,QACrD,EAAE,QAAQ,KAAK,aAAa,mGAAmG;AAAA,QAC/H,EAAE,QAAQ,KAAK,aAAa,wBAAwB;AAAA,QACpD,EAAE,QAAQ,KAAK,aAAa,2CAA2C;AAAA,MACzE;AAAA,IACF;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/modules/inbox_ops/api/proposals/counts/route.js

@@ -10,6 +10,8 @@ import {
   createCountsCacheTag,
   COUNTS_CACHE_TTL_MS
 } from "../../../lib/cache.js";
+import { createLogger } from "@open-mercato/shared/lib/logger";
+const logger = createLogger("inbox_ops").child({ component: "proposals-counts" });
 const metadata = {
   GET: { requireAuth: true, requireFeatures: ["inbox_ops.proposals.view"] }
 };
@@ -58,7 +60,7 @@ async function GET(req) {
           () => cache.set(cacheKey, responseBody, { ttl: COUNTS_CACHE_TTL_MS, tags: [tag] })
         );
       } catch (err) {
-        console.warn("[inbox_ops:proposals:counts] Failed to set cache", err);
+        logger.warn("Failed to set cache", { err });
       }
     }
     return NextResponse.json(responseBody);
@@ -66,7 +68,7 @@ async function GET(req) {
     if (err instanceof UnauthorizedError) {
       return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
     }
-    console.error("[inbox_ops:proposals:counts] Error:", err);
+    logger.error("Failed to get counts", { err });
     return NextResponse.json({ error: "Failed to get counts" }, { status: 500 });
   }
 }

package/dist/modules/inbox_ops/api/proposals/counts/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../src/modules/inbox_ops/api/proposals/counts/route.ts"],
-  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { sql } from 'kysely'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { runWithCacheTenant } from '@open-mercato/cache'\nimport { InboxProposal } from '../../../data/entities'\nimport { ALL_CATEGORIES } from '../../../data/validators'\nimport { resolveRequestContext, UnauthorizedError } from '../../routeHelpers'\nimport {\n  resolveCache,\n  createCountsCacheKey,\n  createCountsCacheTag,\n  COUNTS_CACHE_TTL_MS,\n} from '../../../lib/cache'\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['inbox_ops.proposals.view'] },\n}\n\nexport async function GET(req: Request) {\n  try {\n    const ctx = await resolveRequestContext(req)\n    const cache = resolveCache(ctx.container)\n\n    if (cache) {\n      const cacheKey = createCountsCacheKey(ctx.tenantId)\n      const cached = await runWithCacheTenant(ctx.tenantId, () => cache.get(cacheKey))\n      if (cached) {\n        return NextResponse.json(cached)\n      }\n    }\n\n    const scope = {\n      organizationId: ctx.organizationId,\n      tenantId: ctx.tenantId,\n      deletedAt: null,\n      isActive: true,\n    }\n\n    // em.count() is safe here \u2014 filter fields (status, organizationId, tenantId,\n    // deletedAt, isActive, category) are not encrypted, so decryption helpers are not needed.\n    const [pending, partial, accepted, rejected] = await Promise.all([\n      ctx.em.count(InboxProposal, { ...scope, status: 'pending' }),\n      ctx.em.count(InboxProposal, { ...scope, status: 'partial' }),\n      ctx.em.count(InboxProposal, { ...scope, status: 'accepted' }),\n      ctx.em.count(InboxProposal, { ...scope, status: 'rejected' }),\n    ])\n\n    // Single GROUP BY query for category counts \u2014 O(1) queries\n    const db = ctx.em.getKysely<any>() as any\n    const categoryRows = await db\n      .selectFrom('inbox_proposals')\n      .select(['category', sql<string>`count(*)`.as('count')])\n      .where('organization_id', '=', ctx.organizationId)\n      .where('tenant_id', '=', ctx.tenantId)\n      .where('is_active', '=', true)\n      .where('deleted_at', 'is', null)\n      .groupBy('category')\n      .execute() as Array<{ category: string | null; count: string | number }>\n\n    const byCategory: Record<string, number> = {}\n    for (const cat of ALL_CATEGORIES) {\n      byCategory[cat] = 0\n    }\n    for (const row of categoryRows) {\n      const cat = row.category as string | null\n      if (cat && cat in byCategory) {\n        byCategory[cat] = Number(row.count)\n      }\n    }\n\n    const responseBody = { pending, partial, accepted, rejected, byCategory }\n\n    if (cache) {\n      const cacheKey = createCountsCacheKey(ctx.tenantId)\n      const tag = createCountsCacheTag(ctx.tenantId)\n      try {\n        await runWithCacheTenant(ctx.tenantId, () =>\n          cache.set(cacheKey, responseBody, { ttl: COUNTS_CACHE_TTL_MS, tags: [tag] }),\n        )\n      } catch (err) {\n        console.warn('[inbox_ops:proposals:counts] Failed to set cache', err)\n      }\n    }\n\n    return NextResponse.json(responseBody)\n  } catch (err) {\n    if (err instanceof UnauthorizedError) {\n      return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n    }\n    console.error('[inbox_ops:proposals:counts] Error:', err)\n    return NextResponse.json({ error: 'Failed to get counts' }, { status: 500 })\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'InboxOps',\n  summary: 'Proposal counts',\n  methods: {\n    GET: {\n      summary: 'Get proposal status and category counts',\n      description: 'Returns counts by status and by category for tab badges and filter dropdowns',\n      responses: [\n        { status: 200, description: 'Status and category counts object' },\n      ],\n    },\n  },\n}\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,WAAW;AAEpB,SAAS,0BAA0B;AACnC,SAAS,qBAAqB;AAC9B,SAAS,sBAAsB;AAC/B,SAAS,uBAAuB,yBAAyB;AACzD;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEA,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,0BAA0B,EAAE;AAC1E;AAEA,eAAsB,IAAI,KAAc;AACtC,MAAI;AACF,UAAM,MAAM,MAAM,sBAAsB,GAAG;AAC3C,UAAM,QAAQ,aAAa,IAAI,SAAS;AAExC,QAAI,OAAO;AACT,YAAM,WAAW,qBAAqB,IAAI,QAAQ;AAClD,YAAM,SAAS,MAAM,mBAAmB,IAAI,UAAU,MAAM,MAAM,IAAI,QAAQ,CAAC;AAC/E,UAAI,QAAQ;AACV,eAAO,aAAa,KAAK,MAAM;AAAA,MACjC;AAAA,IACF;AAEA,UAAM,QAAQ;AAAA,MACZ,gBAAgB,IAAI;AAAA,MACpB,UAAU,IAAI;AAAA,MACd,WAAW;AAAA,MACX,UAAU;AAAA,IACZ;AAIA,UAAM,CAAC,SAAS,SAAS,UAAU,QAAQ,IAAI,MAAM,QAAQ,IAAI;AAAA,MAC/D,IAAI,GAAG,MAAM,eAAe,EAAE,GAAG,OAAO,QAAQ,UAAU,CAAC;AAAA,MAC3D,IAAI,GAAG,MAAM,eAAe,EAAE,GAAG,OAAO,QAAQ,UAAU,CAAC;AAAA,MAC3D,IAAI,GAAG,MAAM,eAAe,EAAE,GAAG,OAAO,QAAQ,WAAW,CAAC;AAAA,MAC5D,IAAI,GAAG,MAAM,eAAe,EAAE,GAAG,OAAO,QAAQ,WAAW,CAAC;AAAA,IAC9D,CAAC;AAGD,UAAM,KAAK,IAAI,GAAG,UAAe;AACjC,UAAM,eAAe,MAAM,GACxB,WAAW,iBAAiB,EAC5B,OAAO,CAAC,YAAY,cAAsB,GAAG,OAAO,CAAC,CAAC,EACtD,MAAM,mBAAmB,KAAK,IAAI,cAAc,EAChD,MAAM,aAAa,KAAK,IAAI,QAAQ,EACpC,MAAM,aAAa,KAAK,IAAI,EAC5B,MAAM,cAAc,MAAM,IAAI,EAC9B,QAAQ,UAAU,EAClB,QAAQ;AAEX,UAAM,aAAqC,CAAC;AAC5C,eAAW,OAAO,gBAAgB;AAChC,iBAAW,GAAG,IAAI;AAAA,IACpB;AACA,eAAW,OAAO,cAAc;AAC9B,YAAM,MAAM,IAAI;AAChB,UAAI,OAAO,OAAO,YAAY;AAC5B,mBAAW,GAAG,IAAI,OAAO,IAAI,KAAK;AAAA,MACpC;AAAA,IACF;AAEA,UAAM,eAAe,EAAE,SAAS,SAAS,UAAU,UAAU,WAAW;AAExE,QAAI,OAAO;AACT,YAAM,WAAW,qBAAqB,IAAI,QAAQ;AAClD,YAAM,MAAM,qBAAqB,IAAI,QAAQ;AAC7C,UAAI;AACF,cAAM;AAAA,UAAmB,IAAI;AAAA,UAAU,MACrC,MAAM,IAAI,UAAU,cAAc,EAAE,KAAK,qBAAqB,MAAM,CAAC,GAAG,EAAE,CAAC;AAAA,QAC7E;AAAA,MACF,SAAS,KAAK;AACZ,gBAAQ,KAAK,oDAAoD,GAAG;AAAA,MACtE;AAAA,IACF;AAEA,WAAO,aAAa,KAAK,YAAY;AAAA,EACvC,SAAS,KAAK;AACZ,QAAI,eAAe,mBAAmB;AACpC,aAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACrE;AACA,YAAQ,MAAM,uCAAuC,GAAG;AACxD,WAAO,aAAa,KAAK,EAAE,OAAO,uBAAuB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC7E;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,aAAa;AAAA,MACb,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,oCAAoC;AAAA,MAClE;AAAA,IACF;AAAA,EACF;AACF;",
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { sql } from 'kysely'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { runWithCacheTenant } from '@open-mercato/cache'\nimport { InboxProposal } from '../../../data/entities'\nimport { ALL_CATEGORIES } from '../../../data/validators'\nimport { resolveRequestContext, UnauthorizedError } from '../../routeHelpers'\nimport {\n  resolveCache,\n  createCountsCacheKey,\n  createCountsCacheTag,\n  COUNTS_CACHE_TTL_MS,\n} from '../../../lib/cache'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('inbox_ops').child({ component: 'proposals-counts' })\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['inbox_ops.proposals.view'] },\n}\n\nexport async function GET(req: Request) {\n  try {\n    const ctx = await resolveRequestContext(req)\n    const cache = resolveCache(ctx.container)\n\n    if (cache) {\n      const cacheKey = createCountsCacheKey(ctx.tenantId)\n      const cached = await runWithCacheTenant(ctx.tenantId, () => cache.get(cacheKey))\n      if (cached) {\n        return NextResponse.json(cached)\n      }\n    }\n\n    const scope = {\n      organizationId: ctx.organizationId,\n      tenantId: ctx.tenantId,\n      deletedAt: null,\n      isActive: true,\n    }\n\n    // em.count() is safe here \u2014 filter fields (status, organizationId, tenantId,\n    // deletedAt, isActive, category) are not encrypted, so decryption helpers are not needed.\n    const [pending, partial, accepted, rejected] = await Promise.all([\n      ctx.em.count(InboxProposal, { ...scope, status: 'pending' }),\n      ctx.em.count(InboxProposal, { ...scope, status: 'partial' }),\n      ctx.em.count(InboxProposal, { ...scope, status: 'accepted' }),\n      ctx.em.count(InboxProposal, { ...scope, status: 'rejected' }),\n    ])\n\n    // Single GROUP BY query for category counts \u2014 O(1) queries\n    const db = ctx.em.getKysely<any>() as any\n    const categoryRows = await db\n      .selectFrom('inbox_proposals')\n      .select(['category', sql<string>`count(*)`.as('count')])\n      .where('organization_id', '=', ctx.organizationId)\n      .where('tenant_id', '=', ctx.tenantId)\n      .where('is_active', '=', true)\n      .where('deleted_at', 'is', null)\n      .groupBy('category')\n      .execute() as Array<{ category: string | null; count: string | number }>\n\n    const byCategory: Record<string, number> = {}\n    for (const cat of ALL_CATEGORIES) {\n      byCategory[cat] = 0\n    }\n    for (const row of categoryRows) {\n      const cat = row.category as string | null\n      if (cat && cat in byCategory) {\n        byCategory[cat] = Number(row.count)\n      }\n    }\n\n    const responseBody = { pending, partial, accepted, rejected, byCategory }\n\n    if (cache) {\n      const cacheKey = createCountsCacheKey(ctx.tenantId)\n      const tag = createCountsCacheTag(ctx.tenantId)\n      try {\n        await runWithCacheTenant(ctx.tenantId, () =>\n          cache.set(cacheKey, responseBody, { ttl: COUNTS_CACHE_TTL_MS, tags: [tag] }),\n        )\n      } catch (err) {\n        logger.warn('Failed to set cache', { err })\n      }\n    }\n\n    return NextResponse.json(responseBody)\n  } catch (err) {\n    if (err instanceof UnauthorizedError) {\n      return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n    }\n    logger.error('Failed to get counts', { err })\n    return NextResponse.json({ error: 'Failed to get counts' }, { status: 500 })\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'InboxOps',\n  summary: 'Proposal counts',\n  methods: {\n    GET: {\n      summary: 'Get proposal status and category counts',\n      description: 'Returns counts by status and by category for tab badges and filter dropdowns',\n      responses: [\n        { status: 200, description: 'Status and category counts object' },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,WAAW;AAEpB,SAAS,0BAA0B;AACnC,SAAS,qBAAqB;AAC9B,SAAS,sBAAsB;AAC/B,SAAS,uBAAuB,yBAAyB;AACzD;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,WAAW,EAAE,MAAM,EAAE,WAAW,mBAAmB,CAAC;AAEzE,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,0BAA0B,EAAE;AAC1E;AAEA,eAAsB,IAAI,KAAc;AACtC,MAAI;AACF,UAAM,MAAM,MAAM,sBAAsB,GAAG;AAC3C,UAAM,QAAQ,aAAa,IAAI,SAAS;AAExC,QAAI,OAAO;AACT,YAAM,WAAW,qBAAqB,IAAI,QAAQ;AAClD,YAAM,SAAS,MAAM,mBAAmB,IAAI,UAAU,MAAM,MAAM,IAAI,QAAQ,CAAC;AAC/E,UAAI,QAAQ;AACV,eAAO,aAAa,KAAK,MAAM;AAAA,MACjC;AAAA,IACF;AAEA,UAAM,QAAQ;AAAA,MACZ,gBAAgB,IAAI;AAAA,MACpB,UAAU,IAAI;AAAA,MACd,WAAW;AAAA,MACX,UAAU;AAAA,IACZ;AAIA,UAAM,CAAC,SAAS,SAAS,UAAU,QAAQ,IAAI,MAAM,QAAQ,IAAI;AAAA,MAC/D,IAAI,GAAG,MAAM,eAAe,EAAE,GAAG,OAAO,QAAQ,UAAU,CAAC;AAAA,MAC3D,IAAI,GAAG,MAAM,eAAe,EAAE,GAAG,OAAO,QAAQ,UAAU,CAAC;AAAA,MAC3D,IAAI,GAAG,MAAM,eAAe,EAAE,GAAG,OAAO,QAAQ,WAAW,CAAC;AAAA,MAC5D,IAAI,GAAG,MAAM,eAAe,EAAE,GAAG,OAAO,QAAQ,WAAW,CAAC;AAAA,IAC9D,CAAC;AAGD,UAAM,KAAK,IAAI,GAAG,UAAe;AACjC,UAAM,eAAe,MAAM,GACxB,WAAW,iBAAiB,EAC5B,OAAO,CAAC,YAAY,cAAsB,GAAG,OAAO,CAAC,CAAC,EACtD,MAAM,mBAAmB,KAAK,IAAI,cAAc,EAChD,MAAM,aAAa,KAAK,IAAI,QAAQ,EACpC,MAAM,aAAa,KAAK,IAAI,EAC5B,MAAM,cAAc,MAAM,IAAI,EAC9B,QAAQ,UAAU,EAClB,QAAQ;AAEX,UAAM,aAAqC,CAAC;AAC5C,eAAW,OAAO,gBAAgB;AAChC,iBAAW,GAAG,IAAI;AAAA,IACpB;AACA,eAAW,OAAO,cAAc;AAC9B,YAAM,MAAM,IAAI;AAChB,UAAI,OAAO,OAAO,YAAY;AAC5B,mBAAW,GAAG,IAAI,OAAO,IAAI,KAAK;AAAA,MACpC;AAAA,IACF;AAEA,UAAM,eAAe,EAAE,SAAS,SAAS,UAAU,UAAU,WAAW;AAExE,QAAI,OAAO;AACT,YAAM,WAAW,qBAAqB,IAAI,QAAQ;AAClD,YAAM,MAAM,qBAAqB,IAAI,QAAQ;AAC7C,UAAI;AACF,cAAM;AAAA,UAAmB,IAAI;AAAA,UAAU,MACrC,MAAM,IAAI,UAAU,cAAc,EAAE,KAAK,qBAAqB,MAAM,CAAC,GAAG,EAAE,CAAC;AAAA,QAC7E;AAAA,MACF,SAAS,KAAK;AACZ,eAAO,KAAK,uBAAuB,EAAE,IAAI,CAAC;AAAA,MAC5C;AAAA,IACF;AAEA,WAAO,aAAa,KAAK,YAAY;AAAA,EACvC,SAAS,KAAK;AACZ,QAAI,eAAe,mBAAmB;AACpC,aAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACrE;AACA,WAAO,MAAM,wBAAwB,EAAE,IAAI,CAAC;AAC5C,WAAO,aAAa,KAAK,EAAE,OAAO,uBAAuB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC7E;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,aAAa;AAAA,MACb,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,oCAAoC;AAAA,MAClE;AAAA,IACF;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/modules/inbox_ops/api/proposals/route.js

@@ -5,6 +5,8 @@ import { escapeLikePattern } from "@open-mercato/shared/lib/db/escapeLikePattern
 import { InboxProposal, InboxEmail, InboxProposalAction, InboxDiscrepancy } from "../../data/entities.js";
 import { proposalListQuerySchema } from "../../data/validators.js";
 import { resolveRequestContext, UnauthorizedError } from "../routeHelpers.js";
+import { createLogger } from "@open-mercato/shared/lib/logger";
+const logger = createLogger("inbox_ops").child({ component: "proposals" });
 const metadata = {
   GET: { requireAuth: true, requireFeatures: ["inbox_ops.proposals.view"] }
 };
@@ -87,7 +89,7 @@ async function GET(req) {
     if (err instanceof UnauthorizedError) {
       return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
     }
-    console.error("[inbox_ops:proposals] Error listing proposals:", err);
+    logger.error("Failed to list proposals", { err });
     return NextResponse.json({ error: "Failed to list proposals" }, { status: 500 });
   }
 }

package/dist/modules/inbox_ops/api/proposals/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../src/modules/inbox_ops/api/proposals/route.ts"],
-  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { ZodError } from 'zod'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport type { FilterQuery } from '@mikro-orm/postgresql'\nimport { findAndCountWithDecryption, findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { escapeLikePattern } from '@open-mercato/shared/lib/db/escapeLikePattern'\nimport { InboxProposal, InboxEmail, InboxProposalAction, InboxDiscrepancy, type InboxProposalCategory } from '../../data/entities'\nimport { proposalListQuerySchema } from '../../data/validators'\nimport { resolveRequestContext, UnauthorizedError } from '../routeHelpers'\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['inbox_ops.proposals.view'] },\n}\n\nexport async function GET(req: Request) {\n  try {\n    const url = new URL(req.url)\n    const query = proposalListQuerySchema.parse({\n      status: url.searchParams.get('status') || undefined,\n      category: url.searchParams.get('category') || undefined,\n      search: url.searchParams.get('search') || undefined,\n      page: url.searchParams.get('page') || undefined,\n      pageSize: url.searchParams.get('pageSize') || undefined,\n    })\n\n    const ctx = await resolveRequestContext(req)\n\n    const where: FilterQuery<InboxProposal> = {\n      organizationId: ctx.organizationId,\n      tenantId: ctx.tenantId,\n      deletedAt: null,\n      isActive: true,\n    }\n\n    if (query.status) {\n      where.status = query.status\n    }\n    if (query.category) {\n      const categories = query.category.split(',').map((c) => c.trim()).filter(Boolean) as InboxProposalCategory[]\n      if (categories.length === 1) {\n        where.category = categories[0]\n      } else if (categories.length > 1) {\n        where.category = { $in: categories }\n      }\n    }\n    if (query.search) {\n      where.summary = { $ilike: `%${escapeLikePattern(query.search)}%` }\n    }\n\n    const offset = (query.page - 1) * query.pageSize\n\n    const [items, total] = await findAndCountWithDecryption(\n      ctx.em,\n      InboxProposal,\n      where,\n      {\n        limit: query.pageSize,\n        offset,\n        orderBy: { createdAt: 'DESC' },\n      },\n      ctx.scope,\n    )\n\n    // Enrich proposals with email, action, and discrepancy data\n    const proposalIds = items.map((p) => p.id)\n    const emailIds = [...new Set(items.map((p) => p.inboxEmailId).filter(Boolean))]\n\n    const [emails, allActions, allDiscrepancies] = await Promise.all([\n      emailIds.length > 0\n        ? findWithDecryption(ctx.em, InboxEmail, { id: { $in: emailIds }, organizationId: ctx.organizationId, tenantId: ctx.tenantId }, {}, ctx.scope)\n        : Promise.resolve([] as InboxEmail[]),\n      proposalIds.length > 0\n        ? findWithDecryption(ctx.em, InboxProposalAction, { proposalId: { $in: proposalIds }, organizationId: ctx.organizationId, tenantId: ctx.tenantId, deletedAt: null }, {}, ctx.scope)\n        : Promise.resolve([] as InboxProposalAction[]),\n      proposalIds.length > 0\n        ? findWithDecryption(ctx.em, InboxDiscrepancy, { proposalId: { $in: proposalIds }, organizationId: ctx.organizationId, tenantId: ctx.tenantId, resolved: false }, {}, ctx.scope)\n        : Promise.resolve([] as InboxDiscrepancy[]),\n    ])\n\n    const emailMap = new Map(emails.map((e) => [e.id, e]))\n\n    const enrichedItems = items.map((proposal) => {\n      const email = emailMap.get(proposal.inboxEmailId)\n      const proposalActions = allActions.filter((a) => a.proposalId === proposal.id)\n      const proposalDiscrepancies = allDiscrepancies.filter((d) => d.proposalId === proposal.id)\n\n      return {\n        ...proposal,\n        actionCount: proposalActions.length,\n        pendingActionCount: proposalActions.filter((a) => a.status === 'pending').length,\n        discrepancyCount: proposalDiscrepancies.length,\n        emailSubject: email?.subject || null,\n        emailFrom: email?.forwardedByName || email?.forwardedByAddress || null,\n        receivedAt: email?.receivedAt || proposal.createdAt,\n      }\n    })\n\n    return NextResponse.json({\n      items: enrichedItems,\n      total,\n      page: query.page,\n      pageSize: query.pageSize,\n      totalPages: Math.ceil(total / query.pageSize),\n    })\n  } catch (err) {\n    if (err instanceof ZodError) {\n      return NextResponse.json({ error: 'Invalid query parameters' }, { status: 400 })\n    }\n    if (err instanceof UnauthorizedError) {\n      return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n    }\n    console.error('[inbox_ops:proposals] Error listing proposals:', err)\n    return NextResponse.json({ error: 'Failed to list proposals' }, { status: 500 })\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'InboxOps',\n  summary: 'Proposals',\n  methods: {\n    GET: {\n      summary: 'List proposals',\n      description: 'List inbox proposals with optional status filter and pagination',\n      responses: [\n        { status: 200, description: 'Paginated list of proposals' },\n        { status: 401, description: 'Unauthorized' },\n      ],\n    },\n  },\n}\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,gBAAgB;AAGzB,SAAS,4BAA4B,0BAA0B;AAC/D,SAAS,yBAAyB;AAClC,SAAS,eAAe,YAAY,qBAAqB,wBAAoD;AAC7G,SAAS,+BAA+B;AACxC,SAAS,uBAAuB,yBAAyB;AAElD,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,0BAA0B,EAAE;AAC1E;AAEA,eAAsB,IAAI,KAAc;AACtC,MAAI;AACF,UAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAC3B,UAAM,QAAQ,wBAAwB,MAAM;AAAA,MAC1C,QAAQ,IAAI,aAAa,IAAI,QAAQ,KAAK;AAAA,MAC1C,UAAU,IAAI,aAAa,IAAI,UAAU,KAAK;AAAA,MAC9C,QAAQ,IAAI,aAAa,IAAI,QAAQ,KAAK;AAAA,MAC1C,MAAM,IAAI,aAAa,IAAI,MAAM,KAAK;AAAA,MACtC,UAAU,IAAI,aAAa,IAAI,UAAU,KAAK;AAAA,IAChD,CAAC;AAED,UAAM,MAAM,MAAM,sBAAsB,GAAG;AAE3C,UAAM,QAAoC;AAAA,MACxC,gBAAgB,IAAI;AAAA,MACpB,UAAU,IAAI;AAAA,MACd,WAAW;AAAA,MACX,UAAU;AAAA,IACZ;AAEA,QAAI,MAAM,QAAQ;AAChB,YAAM,SAAS,MAAM;AAAA,IACvB;AACA,QAAI,MAAM,UAAU;AAClB,YAAM,aAAa,MAAM,SAAS,MAAM,GAAG,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO,OAAO;AAChF,UAAI,WAAW,WAAW,GAAG;AAC3B,cAAM,WAAW,WAAW,CAAC;AAAA,MAC/B,WAAW,WAAW,SAAS,GAAG;AAChC,cAAM,WAAW,EAAE,KAAK,WAAW;AAAA,MACrC;AAAA,IACF;AACA,QAAI,MAAM,QAAQ;AAChB,YAAM,UAAU,EAAE,QAAQ,IAAI,kBAAkB,MAAM,MAAM,CAAC,IAAI;AAAA,IACnE;AAEA,UAAM,UAAU,MAAM,OAAO,KAAK,MAAM;AAExC,UAAM,CAAC,OAAO,KAAK,IAAI,MAAM;AAAA,MAC3B,IAAI;AAAA,MACJ;AAAA,MACA;AAAA,MACA;AAAA,QACE,OAAO,MAAM;AAAA,QACb;AAAA,QACA,SAAS,EAAE,WAAW,OAAO;AAAA,MAC/B;AAAA,MACA,IAAI;AAAA,IACN;AAGA,UAAM,cAAc,MAAM,IAAI,CAAC,MAAM,EAAE,EAAE;AACzC,UAAM,WAAW,CAAC,GAAG,IAAI,IAAI,MAAM,IAAI,CAAC,MAAM,EAAE,YAAY,EAAE,OAAO,OAAO,CAAC,CAAC;AAE9E,UAAM,CAAC,QAAQ,YAAY,gBAAgB,IAAI,MAAM,QAAQ,IAAI;AAAA,MAC/D,SAAS,SAAS,IACd,mBAAmB,IAAI,IAAI,YAAY,EAAE,IAAI,EAAE,KAAK,SAAS,GAAG,gBAAgB,IAAI,gBAAgB,UAAU,IAAI,SAAS,GAAG,CAAC,GAAG,IAAI,KAAK,IAC3I,QAAQ,QAAQ,CAAC,CAAiB;AAAA,MACtC,YAAY,SAAS,IACjB,mBAAmB,IAAI,IAAI,qBAAqB,EAAE,YAAY,EAAE,KAAK,YAAY,GAAG,gBAAgB,IAAI,gBAAgB,UAAU,IAAI,UAAU,WAAW,KAAK,GAAG,CAAC,GAAG,IAAI,KAAK,IAChL,QAAQ,QAAQ,CAAC,CAA0B;AAAA,MAC/C,YAAY,SAAS,IACjB,mBAAmB,IAAI,IAAI,kBAAkB,EAAE,YAAY,EAAE,KAAK,YAAY,GAAG,gBAAgB,IAAI,gBAAgB,UAAU,IAAI,UAAU,UAAU,MAAM,GAAG,CAAC,GAAG,IAAI,KAAK,IAC7K,QAAQ,QAAQ,CAAC,CAAuB;AAAA,IAC9C,CAAC;AAED,UAAM,WAAW,IAAI,IAAI,OAAO,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;AAErD,UAAM,gBAAgB,MAAM,IAAI,CAAC,aAAa;AAC5C,YAAM,QAAQ,SAAS,IAAI,SAAS,YAAY;AAChD,YAAM,kBAAkB,WAAW,OAAO,CAAC,MAAM,EAAE,eAAe,SAAS,EAAE;AAC7E,YAAM,wBAAwB,iBAAiB,OAAO,CAAC,MAAM,EAAE,eAAe,SAAS,EAAE;AAEzF,aAAO;AAAA,QACL,GAAG;AAAA,QACH,aAAa,gBAAgB;AAAA,QAC7B,oBAAoB,gBAAgB,OAAO,CAAC,MAAM,EAAE,WAAW,SAAS,EAAE;AAAA,QAC1E,kBAAkB,sBAAsB;AAAA,QACxC,cAAc,OAAO,WAAW;AAAA,QAChC,WAAW,OAAO,mBAAmB,OAAO,sBAAsB;AAAA,QAClE,YAAY,OAAO,cAAc,SAAS;AAAA,MAC5C;AAAA,IACF,CAAC;AAED,WAAO,aAAa,KAAK;AAAA,MACvB,OAAO;AAAA,MACP;AAAA,MACA,MAAM,MAAM;AAAA,MACZ,UAAU,MAAM;AAAA,MAChB,YAAY,KAAK,KAAK,QAAQ,MAAM,QAAQ;AAAA,IAC9C,CAAC;AAAA,EACH,SAAS,KAAK;AACZ,QAAI,eAAe,UAAU;AAC3B,aAAO,aAAa,KAAK,EAAE,OAAO,2BAA2B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACjF;AACA,QAAI,eAAe,mBAAmB;AACpC,aAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACrE;AACA,YAAQ,MAAM,kDAAkD,GAAG;AACnE,WAAO,aAAa,KAAK,EAAE,OAAO,2BAA2B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACjF;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,aAAa;AAAA,MACb,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,8BAA8B;AAAA,QAC1D,EAAE,QAAQ,KAAK,aAAa,eAAe;AAAA,MAC7C;AAAA,IACF;AAAA,EACF;AACF;",
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { ZodError } from 'zod'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport type { FilterQuery } from '@mikro-orm/postgresql'\nimport { findAndCountWithDecryption, findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { escapeLikePattern } from '@open-mercato/shared/lib/db/escapeLikePattern'\nimport { InboxProposal, InboxEmail, InboxProposalAction, InboxDiscrepancy, type InboxProposalCategory } from '../../data/entities'\nimport { proposalListQuerySchema } from '../../data/validators'\nimport { resolveRequestContext, UnauthorizedError } from '../routeHelpers'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('inbox_ops').child({ component: 'proposals' })\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['inbox_ops.proposals.view'] },\n}\n\nexport async function GET(req: Request) {\n  try {\n    const url = new URL(req.url)\n    const query = proposalListQuerySchema.parse({\n      status: url.searchParams.get('status') || undefined,\n      category: url.searchParams.get('category') || undefined,\n      search: url.searchParams.get('search') || undefined,\n      page: url.searchParams.get('page') || undefined,\n      pageSize: url.searchParams.get('pageSize') || undefined,\n    })\n\n    const ctx = await resolveRequestContext(req)\n\n    const where: FilterQuery<InboxProposal> = {\n      organizationId: ctx.organizationId,\n      tenantId: ctx.tenantId,\n      deletedAt: null,\n      isActive: true,\n    }\n\n    if (query.status) {\n      where.status = query.status\n    }\n    if (query.category) {\n      const categories = query.category.split(',').map((c) => c.trim()).filter(Boolean) as InboxProposalCategory[]\n      if (categories.length === 1) {\n        where.category = categories[0]\n      } else if (categories.length > 1) {\n        where.category = { $in: categories }\n      }\n    }\n    if (query.search) {\n      where.summary = { $ilike: `%${escapeLikePattern(query.search)}%` }\n    }\n\n    const offset = (query.page - 1) * query.pageSize\n\n    const [items, total] = await findAndCountWithDecryption(\n      ctx.em,\n      InboxProposal,\n      where,\n      {\n        limit: query.pageSize,\n        offset,\n        orderBy: { createdAt: 'DESC' },\n      },\n      ctx.scope,\n    )\n\n    // Enrich proposals with email, action, and discrepancy data\n    const proposalIds = items.map((p) => p.id)\n    const emailIds = [...new Set(items.map((p) => p.inboxEmailId).filter(Boolean))]\n\n    const [emails, allActions, allDiscrepancies] = await Promise.all([\n      emailIds.length > 0\n        ? findWithDecryption(ctx.em, InboxEmail, { id: { $in: emailIds }, organizationId: ctx.organizationId, tenantId: ctx.tenantId }, {}, ctx.scope)\n        : Promise.resolve([] as InboxEmail[]),\n      proposalIds.length > 0\n        ? findWithDecryption(ctx.em, InboxProposalAction, { proposalId: { $in: proposalIds }, organizationId: ctx.organizationId, tenantId: ctx.tenantId, deletedAt: null }, {}, ctx.scope)\n        : Promise.resolve([] as InboxProposalAction[]),\n      proposalIds.length > 0\n        ? findWithDecryption(ctx.em, InboxDiscrepancy, { proposalId: { $in: proposalIds }, organizationId: ctx.organizationId, tenantId: ctx.tenantId, resolved: false }, {}, ctx.scope)\n        : Promise.resolve([] as InboxDiscrepancy[]),\n    ])\n\n    const emailMap = new Map(emails.map((e) => [e.id, e]))\n\n    const enrichedItems = items.map((proposal) => {\n      const email = emailMap.get(proposal.inboxEmailId)\n      const proposalActions = allActions.filter((a) => a.proposalId === proposal.id)\n      const proposalDiscrepancies = allDiscrepancies.filter((d) => d.proposalId === proposal.id)\n\n      return {\n        ...proposal,\n        actionCount: proposalActions.length,\n        pendingActionCount: proposalActions.filter((a) => a.status === 'pending').length,\n        discrepancyCount: proposalDiscrepancies.length,\n        emailSubject: email?.subject || null,\n        emailFrom: email?.forwardedByName || email?.forwardedByAddress || null,\n        receivedAt: email?.receivedAt || proposal.createdAt,\n      }\n    })\n\n    return NextResponse.json({\n      items: enrichedItems,\n      total,\n      page: query.page,\n      pageSize: query.pageSize,\n      totalPages: Math.ceil(total / query.pageSize),\n    })\n  } catch (err) {\n    if (err instanceof ZodError) {\n      return NextResponse.json({ error: 'Invalid query parameters' }, { status: 400 })\n    }\n    if (err instanceof UnauthorizedError) {\n      return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n    }\n    logger.error('Failed to list proposals', { err })\n    return NextResponse.json({ error: 'Failed to list proposals' }, { status: 500 })\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'InboxOps',\n  summary: 'Proposals',\n  methods: {\n    GET: {\n      summary: 'List proposals',\n      description: 'List inbox proposals with optional status filter and pagination',\n      responses: [\n        { status: 200, description: 'Paginated list of proposals' },\n        { status: 401, description: 'Unauthorized' },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,gBAAgB;AAGzB,SAAS,4BAA4B,0BAA0B;AAC/D,SAAS,yBAAyB;AAClC,SAAS,eAAe,YAAY,qBAAqB,wBAAoD;AAC7G,SAAS,+BAA+B;AACxC,SAAS,uBAAuB,yBAAyB;AACzD,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,WAAW,EAAE,MAAM,EAAE,WAAW,YAAY,CAAC;AAElE,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,0BAA0B,EAAE;AAC1E;AAEA,eAAsB,IAAI,KAAc;AACtC,MAAI;AACF,UAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAC3B,UAAM,QAAQ,wBAAwB,MAAM;AAAA,MAC1C,QAAQ,IAAI,aAAa,IAAI,QAAQ,KAAK;AAAA,MAC1C,UAAU,IAAI,aAAa,IAAI,UAAU,KAAK;AAAA,MAC9C,QAAQ,IAAI,aAAa,IAAI,QAAQ,KAAK;AAAA,MAC1C,MAAM,IAAI,aAAa,IAAI,MAAM,KAAK;AAAA,MACtC,UAAU,IAAI,aAAa,IAAI,UAAU,KAAK;AAAA,IAChD,CAAC;AAED,UAAM,MAAM,MAAM,sBAAsB,GAAG;AAE3C,UAAM,QAAoC;AAAA,MACxC,gBAAgB,IAAI;AAAA,MACpB,UAAU,IAAI;AAAA,MACd,WAAW;AAAA,MACX,UAAU;AAAA,IACZ;AAEA,QAAI,MAAM,QAAQ;AAChB,YAAM,SAAS,MAAM;AAAA,IACvB;AACA,QAAI,MAAM,UAAU;AAClB,YAAM,aAAa,MAAM,SAAS,MAAM,GAAG,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO,OAAO;AAChF,UAAI,WAAW,WAAW,GAAG;AAC3B,cAAM,WAAW,WAAW,CAAC;AAAA,MAC/B,WAAW,WAAW,SAAS,GAAG;AAChC,cAAM,WAAW,EAAE,KAAK,WAAW;AAAA,MACrC;AAAA,IACF;AACA,QAAI,MAAM,QAAQ;AAChB,YAAM,UAAU,EAAE,QAAQ,IAAI,kBAAkB,MAAM,MAAM,CAAC,IAAI;AAAA,IACnE;AAEA,UAAM,UAAU,MAAM,OAAO,KAAK,MAAM;AAExC,UAAM,CAAC,OAAO,KAAK,IAAI,MAAM;AAAA,MAC3B,IAAI;AAAA,MACJ;AAAA,MACA;AAAA,MACA;AAAA,QACE,OAAO,MAAM;AAAA,QACb;AAAA,QACA,SAAS,EAAE,WAAW,OAAO;AAAA,MAC/B;AAAA,MACA,IAAI;AAAA,IACN;AAGA,UAAM,cAAc,MAAM,IAAI,CAAC,MAAM,EAAE,EAAE;AACzC,UAAM,WAAW,CAAC,GAAG,IAAI,IAAI,MAAM,IAAI,CAAC,MAAM,EAAE,YAAY,EAAE,OAAO,OAAO,CAAC,CAAC;AAE9E,UAAM,CAAC,QAAQ,YAAY,gBAAgB,IAAI,MAAM,QAAQ,IAAI;AAAA,MAC/D,SAAS,SAAS,IACd,mBAAmB,IAAI,IAAI,YAAY,EAAE,IAAI,EAAE,KAAK,SAAS,GAAG,gBAAgB,IAAI,gBAAgB,UAAU,IAAI,SAAS,GAAG,CAAC,GAAG,IAAI,KAAK,IAC3I,QAAQ,QAAQ,CAAC,CAAiB;AAAA,MACtC,YAAY,SAAS,IACjB,mBAAmB,IAAI,IAAI,qBAAqB,EAAE,YAAY,EAAE,KAAK,YAAY,GAAG,gBAAgB,IAAI,gBAAgB,UAAU,IAAI,UAAU,WAAW,KAAK,GAAG,CAAC,GAAG,IAAI,KAAK,IAChL,QAAQ,QAAQ,CAAC,CAA0B;AAAA,MAC/C,YAAY,SAAS,IACjB,mBAAmB,IAAI,IAAI,kBAAkB,EAAE,YAAY,EAAE,KAAK,YAAY,GAAG,gBAAgB,IAAI,gBAAgB,UAAU,IAAI,UAAU,UAAU,MAAM,GAAG,CAAC,GAAG,IAAI,KAAK,IAC7K,QAAQ,QAAQ,CAAC,CAAuB;AAAA,IAC9C,CAAC;AAED,UAAM,WAAW,IAAI,IAAI,OAAO,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;AAErD,UAAM,gBAAgB,MAAM,IAAI,CAAC,aAAa;AAC5C,YAAM,QAAQ,SAAS,IAAI,SAAS,YAAY;AAChD,YAAM,kBAAkB,WAAW,OAAO,CAAC,MAAM,EAAE,eAAe,SAAS,EAAE;AAC7E,YAAM,wBAAwB,iBAAiB,OAAO,CAAC,MAAM,EAAE,eAAe,SAAS,EAAE;AAEzF,aAAO;AAAA,QACL,GAAG;AAAA,QACH,aAAa,gBAAgB;AAAA,QAC7B,oBAAoB,gBAAgB,OAAO,CAAC,MAAM,EAAE,WAAW,SAAS,EAAE;AAAA,QAC1E,kBAAkB,sBAAsB;AAAA,QACxC,cAAc,OAAO,WAAW;AAAA,QAChC,WAAW,OAAO,mBAAmB,OAAO,sBAAsB;AAAA,QAClE,YAAY,OAAO,cAAc,SAAS;AAAA,MAC5C;AAAA,IACF,CAAC;AAED,WAAO,aAAa,KAAK;AAAA,MACvB,OAAO;AAAA,MACP;AAAA,MACA,MAAM,MAAM;AAAA,MACZ,UAAU,MAAM;AAAA,MAChB,YAAY,KAAK,KAAK,QAAQ,MAAM,QAAQ;AAAA,IAC9C,CAAC;AAAA,EACH,SAAS,KAAK;AACZ,QAAI,eAAe,UAAU;AAC3B,aAAO,aAAa,KAAK,EAAE,OAAO,2BAA2B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACjF;AACA,QAAI,eAAe,mBAAmB;AACpC,aAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACrE;AACA,WAAO,MAAM,4BAA4B,EAAE,IAAI,CAAC;AAChD,WAAO,aAAa,KAAK,EAAE,OAAO,2BAA2B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACjF;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,aAAa;AAAA,MACb,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,8BAA8B;AAAA,QAC1D,EAAE,QAAQ,KAAK,aAAa,eAAe;AAAA,MAC7C;AAAA,IACF;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/modules/inbox_ops/api/routeHelpers.js

@@ -4,6 +4,8 @@ import { getAuthFromRequest } from "@open-mercato/shared/lib/auth/server";
 import { findOneWithDecryption } from "@open-mercato/shared/lib/encryption/find";
 import { InboxProposal, InboxProposalAction } from "../data/entities.js";
 import { resolveOptionalEventBus } from "../lib/eventBus.js";
+import { createLogger } from "@open-mercato/shared/lib/logger";
+const logger = createLogger("inbox_ops");
 async function resolveRequestContext(req) {
   const auth = await getAuthFromRequest(req);
   if (!auth?.sub || !auth?.tenantId || !auth?.orgId) {
@@ -106,7 +108,7 @@ function handleRouteError(err, label) {
   if (err instanceof UnauthorizedError) {
     return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
   }
-  console.error(`[inbox_ops:${label}] Error:`, err);
+  logger.error("Request failed", { label, err });
   return NextResponse.json({ error: `Failed to ${label}` }, { status: 500 });
 }
 function isErrorResponse(value) {

package/dist/modules/inbox_ops/api/routeHelpers.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/inbox_ops/api/routeHelpers.ts"],
-  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport type { AwilixContainer } from 'awilix'\nimport type { AuthContext } from '@open-mercato/shared/lib/auth/server'\nimport type { EventBus } from '@open-mercato/events/types'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { InboxProposal, InboxProposalAction } from '../data/entities'\nimport type { CrossModuleEntities } from '../lib/executionEngine'\nimport { resolveOptionalEventBus } from '../lib/eventBus'\n\nexport interface RequestContext {\n  auth: AuthContext\n  userId: string\n  tenantId: string\n  organizationId: string\n  scope: { tenantId: string; organizationId: string }\n  em: EntityManager\n  container: AwilixContainer\n  eventBus: EventBus | null\n}\n\nexport interface ExecutionContextInput {\n  em: EntityManager\n  userId: string\n  tenantId: string\n  organizationId: string\n  eventBus: EventBus | null\n  container: AwilixContainer\n  auth: AuthContext\n  entities?: CrossModuleEntities\n}\n\nexport async function resolveRequestContext(req: Request): Promise<RequestContext> {\n  const auth = await getAuthFromRequest(req)\n  if (!auth?.sub || !auth?.tenantId || !auth?.orgId) {\n    throw new UnauthorizedError()\n  }\n  const container = await createRequestContainer()\n  const em = (container.resolve('em') as EntityManager).fork()\n  return {\n    auth,\n    userId: auth.sub,\n    tenantId: auth.tenantId,\n    organizationId: auth.orgId,\n    scope: { tenantId: auth.tenantId, organizationId: auth.orgId },\n    em,\n    container,\n    eventBus: resolveOptionalEventBus(container),\n  }\n}\n\nexport function extractPathSegment(url: URL, afterSegment: string): string | null {\n  const segments = url.pathname.split('/')\n  const index = segments.indexOf(afterSegment)\n  return index >= 0 ? segments[index + 1] || null : null\n}\n\nexport async function resolveActionAndProposal(\n  url: URL,\n  ctx: RequestContext,\n): Promise<{ action: InboxProposalAction; proposal: InboxProposal } | NextResponse> {\n  const proposalId = extractPathSegment(url, 'proposals')\n  const actionId = extractPathSegment(url, 'actions')\n\n  if (!proposalId || !actionId) {\n    return NextResponse.json({ error: 'Missing IDs' }, { status: 400 })\n  }\n\n  const action = await findOneWithDecryption(\n    ctx.em,\n    InboxProposalAction,\n    {\n      id: actionId,\n      proposalId,\n      organizationId: ctx.organizationId,\n      tenantId: ctx.tenantId,\n      deletedAt: null,\n    },\n    undefined,\n    ctx.scope,\n  )\n\n  if (!action) {\n    return NextResponse.json({ error: 'Action not found' }, { status: 404 })\n  }\n\n  const proposal = await findOneWithDecryption(\n    ctx.em,\n    InboxProposal,\n    {\n      id: proposalId,\n      organizationId: ctx.organizationId,\n      tenantId: ctx.tenantId,\n      isActive: true,\n      deletedAt: null,\n    },\n    undefined,\n    ctx.scope,\n  )\n  if (!proposal) {\n    return NextResponse.json({ error: 'Proposal has been superseded by a newer extraction' }, { status: 409 })\n  }\n\n  return { action, proposal }\n}\n\nexport async function resolveProposal(\n  url: URL,\n  ctx: RequestContext,\n): Promise<InboxProposal | NextResponse> {\n  const proposalId = extractPathSegment(url, 'proposals')\n\n  if (!proposalId) {\n    return NextResponse.json({ error: 'Missing proposal ID' }, { status: 400 })\n  }\n\n  const proposal = await findOneWithDecryption(\n    ctx.em,\n    InboxProposal,\n    {\n      id: proposalId,\n      organizationId: ctx.organizationId,\n      tenantId: ctx.tenantId,\n      isActive: true,\n      deletedAt: null,\n    },\n    undefined,\n    ctx.scope,\n  )\n\n  if (!proposal) {\n    return NextResponse.json({ error: 'Proposal not found' }, { status: 404 })\n  }\n\n  return proposal\n}\n\nexport function toExecutionContext(ctx: RequestContext, entities?: CrossModuleEntities): ExecutionContextInput {\n  return {\n    em: ctx.em,\n    userId: ctx.userId,\n    tenantId: ctx.tenantId,\n    organizationId: ctx.organizationId,\n    eventBus: ctx.eventBus,\n    container: ctx.container,\n    auth: ctx.auth,\n    entities,\n  }\n}\n\nexport function handleRouteError(err: unknown, label: string): NextResponse {\n  if (err instanceof UnauthorizedError) {\n    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n  }\n  console.error(`[inbox_ops:${label}] Error:`, err)\n  return NextResponse.json({ error: `Failed to ${label}` }, { status: 500 })\n}\n\nexport function isErrorResponse(value: unknown): value is NextResponse {\n  return value instanceof NextResponse\n}\n\nexport function resolveCrossModuleEntities(container: AwilixContainer): CrossModuleEntities {\n  const entities: Partial<CrossModuleEntities> = {}\n  try { entities.CustomerEntity = container.resolve('CustomerEntity') } catch { /* module not available */ }\n  try { entities.SalesOrder = container.resolve('SalesOrder') } catch { /* module not available */ }\n  try { entities.SalesShipment = container.resolve('SalesShipment') } catch { /* module not available */ }\n  try { entities.SalesChannel = container.resolve('SalesChannel') } catch { /* module not available */ }\n  try { entities.Dictionary = container.resolve('Dictionary') } catch { /* module not available */ }\n  try { entities.DictionaryEntry = container.resolve('DictionaryEntry') } catch { /* module not available */ }\n  return entities as CrossModuleEntities\n}\n\nexport class UnauthorizedError extends Error {\n  constructor() {\n    super('Unauthorized')\n  }\n}\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAK7B,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,6BAA6B;AACtC,SAAS,eAAe,2BAA2B;AAEnD,SAAS,+BAA+B;AAwBxC,eAAsB,sBAAsB,KAAuC;AACjF,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM,OAAO,CAAC,MAAM,YAAY,CAAC,MAAM,OAAO;AACjD,UAAM,IAAI,kBAAkB;AAAA,EAC9B;AACA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,KAAM,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC3D,SAAO;AAAA,IACL;AAAA,IACA,QAAQ,KAAK;AAAA,IACb,UAAU,KAAK;AAAA,IACf,gBAAgB,KAAK;AAAA,IACrB,OAAO,EAAE,UAAU,KAAK,UAAU,gBAAgB,KAAK,MAAM;AAAA,IAC7D;AAAA,IACA;AAAA,IACA,UAAU,wBAAwB,SAAS;AAAA,EAC7C;AACF;AAEO,SAAS,mBAAmB,KAAU,cAAqC;AAChF,QAAM,WAAW,IAAI,SAAS,MAAM,GAAG;AACvC,QAAM,QAAQ,SAAS,QAAQ,YAAY;AAC3C,SAAO,SAAS,IAAI,SAAS,QAAQ,CAAC,KAAK,OAAO;AACpD;AAEA,eAAsB,yBACpB,KACA,KACkF;AAClF,QAAM,aAAa,mBAAmB,KAAK,WAAW;AACtD,QAAM,WAAW,mBAAmB,KAAK,SAAS;AAElD,MAAI,CAAC,cAAc,CAAC,UAAU;AAC5B,WAAO,aAAa,KAAK,EAAE,OAAO,cAAc,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACpE;AAEA,QAAM,SAAS,MAAM;AAAA,IACnB,IAAI;AAAA,IACJ;AAAA,IACA;AAAA,MACE,IAAI;AAAA,MACJ;AAAA,MACA,gBAAgB,IAAI;AAAA,MACpB,UAAU,IAAI;AAAA,MACd,WAAW;AAAA,IACb;AAAA,IACA;AAAA,IACA,IAAI;AAAA,EACN;AAEA,MAAI,CAAC,QAAQ;AACX,WAAO,aAAa,KAAK,EAAE,OAAO,mBAAmB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACzE;AAEA,QAAM,WAAW,MAAM;AAAA,IACrB,IAAI;AAAA,IACJ;AAAA,IACA;AAAA,MACE,IAAI;AAAA,MACJ,gBAAgB,IAAI;AAAA,MACpB,UAAU,IAAI;AAAA,MACd,UAAU;AAAA,MACV,WAAW;AAAA,IACb;AAAA,IACA;AAAA,IACA,IAAI;AAAA,EACN;AACA,MAAI,CAAC,UAAU;AACb,WAAO,aAAa,KAAK,EAAE,OAAO,qDAAqD,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC3G;AAEA,SAAO,EAAE,QAAQ,SAAS;AAC5B;AAEA,eAAsB,gBACpB,KACA,KACuC;AACvC,QAAM,aAAa,mBAAmB,KAAK,WAAW;AAEtD,MAAI,CAAC,YAAY;AACf,WAAO,aAAa,KAAK,EAAE,OAAO,sBAAsB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC5E;AAEA,QAAM,WAAW,MAAM;AAAA,IACrB,IAAI;AAAA,IACJ;AAAA,IACA;AAAA,MACE,IAAI;AAAA,MACJ,gBAAgB,IAAI;AAAA,MACpB,UAAU,IAAI;AAAA,MACd,UAAU;AAAA,MACV,WAAW;AAAA,IACb;AAAA,IACA;AAAA,IACA,IAAI;AAAA,EACN;AAEA,MAAI,CAAC,UAAU;AACb,WAAO,aAAa,KAAK,EAAE,OAAO,qBAAqB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC3E;AAEA,SAAO;AACT;AAEO,SAAS,mBAAmB,KAAqB,UAAuD;AAC7G,SAAO;AAAA,IACL,IAAI,IAAI;AAAA,IACR,QAAQ,IAAI;AAAA,IACZ,UAAU,IAAI;AAAA,IACd,gBAAgB,IAAI;AAAA,IACpB,UAAU,IAAI;AAAA,IACd,WAAW,IAAI;AAAA,IACf,MAAM,IAAI;AAAA,IACV;AAAA,EACF;AACF;AAEO,SAAS,iBAAiB,KAAc,OAA6B;AAC1E,MAAI,eAAe,mBAAmB;AACpC,WAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrE;AACA,UAAQ,MAAM,cAAc,KAAK,YAAY,GAAG;AAChD,SAAO,aAAa,KAAK,EAAE,OAAO,aAAa,KAAK,GAAG,GAAG,EAAE,QAAQ,IAAI,CAAC;AAC3E;AAEO,SAAS,gBAAgB,OAAuC;AACrE,SAAO,iBAAiB;AAC1B;AAEO,SAAS,2BAA2B,WAAiD;AAC1F,QAAM,WAAyC,CAAC;AAChD,MAAI;AAAE,aAAS,iBAAiB,UAAU,QAAQ,gBAAgB;AAAA,EAAE,QAAQ;AAAA,EAA6B;AACzG,MAAI;AAAE,aAAS,aAAa,UAAU,QAAQ,YAAY;AAAA,EAAE,QAAQ;AAAA,EAA6B;AACjG,MAAI;AAAE,aAAS,gBAAgB,UAAU,QAAQ,eAAe;AAAA,EAAE,QAAQ;AAAA,EAA6B;AACvG,MAAI;AAAE,aAAS,eAAe,UAAU,QAAQ,cAAc;AAAA,EAAE,QAAQ;AAAA,EAA6B;AACrG,MAAI;AAAE,aAAS,aAAa,UAAU,QAAQ,YAAY;AAAA,EAAE,QAAQ;AAAA,EAA6B;AACjG,MAAI;AAAE,aAAS,kBAAkB,UAAU,QAAQ,iBAAiB;AAAA,EAAE,QAAQ;AAAA,EAA6B;AAC3G,SAAO;AACT;AAEO,MAAM,0BAA0B,MAAM;AAAA,EAC3C,cAAc;AACZ,UAAM,cAAc;AAAA,EACtB;AACF;",
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport type { AwilixContainer } from 'awilix'\nimport type { AuthContext } from '@open-mercato/shared/lib/auth/server'\nimport type { EventBus } from '@open-mercato/events/types'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { InboxProposal, InboxProposalAction } from '../data/entities'\nimport type { CrossModuleEntities } from '../lib/executionEngine'\nimport { resolveOptionalEventBus } from '../lib/eventBus'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('inbox_ops')\n\nexport interface RequestContext {\n  auth: AuthContext\n  userId: string\n  tenantId: string\n  organizationId: string\n  scope: { tenantId: string; organizationId: string }\n  em: EntityManager\n  container: AwilixContainer\n  eventBus: EventBus | null\n}\n\nexport interface ExecutionContextInput {\n  em: EntityManager\n  userId: string\n  tenantId: string\n  organizationId: string\n  eventBus: EventBus | null\n  container: AwilixContainer\n  auth: AuthContext\n  entities?: CrossModuleEntities\n}\n\nexport async function resolveRequestContext(req: Request): Promise<RequestContext> {\n  const auth = await getAuthFromRequest(req)\n  if (!auth?.sub || !auth?.tenantId || !auth?.orgId) {\n    throw new UnauthorizedError()\n  }\n  const container = await createRequestContainer()\n  const em = (container.resolve('em') as EntityManager).fork()\n  return {\n    auth,\n    userId: auth.sub,\n    tenantId: auth.tenantId,\n    organizationId: auth.orgId,\n    scope: { tenantId: auth.tenantId, organizationId: auth.orgId },\n    em,\n    container,\n    eventBus: resolveOptionalEventBus(container),\n  }\n}\n\nexport function extractPathSegment(url: URL, afterSegment: string): string | null {\n  const segments = url.pathname.split('/')\n  const index = segments.indexOf(afterSegment)\n  return index >= 0 ? segments[index + 1] || null : null\n}\n\nexport async function resolveActionAndProposal(\n  url: URL,\n  ctx: RequestContext,\n): Promise<{ action: InboxProposalAction; proposal: InboxProposal } | NextResponse> {\n  const proposalId = extractPathSegment(url, 'proposals')\n  const actionId = extractPathSegment(url, 'actions')\n\n  if (!proposalId || !actionId) {\n    return NextResponse.json({ error: 'Missing IDs' }, { status: 400 })\n  }\n\n  const action = await findOneWithDecryption(\n    ctx.em,\n    InboxProposalAction,\n    {\n      id: actionId,\n      proposalId,\n      organizationId: ctx.organizationId,\n      tenantId: ctx.tenantId,\n      deletedAt: null,\n    },\n    undefined,\n    ctx.scope,\n  )\n\n  if (!action) {\n    return NextResponse.json({ error: 'Action not found' }, { status: 404 })\n  }\n\n  const proposal = await findOneWithDecryption(\n    ctx.em,\n    InboxProposal,\n    {\n      id: proposalId,\n      organizationId: ctx.organizationId,\n      tenantId: ctx.tenantId,\n      isActive: true,\n      deletedAt: null,\n    },\n    undefined,\n    ctx.scope,\n  )\n  if (!proposal) {\n    return NextResponse.json({ error: 'Proposal has been superseded by a newer extraction' }, { status: 409 })\n  }\n\n  return { action, proposal }\n}\n\nexport async function resolveProposal(\n  url: URL,\n  ctx: RequestContext,\n): Promise<InboxProposal | NextResponse> {\n  const proposalId = extractPathSegment(url, 'proposals')\n\n  if (!proposalId) {\n    return NextResponse.json({ error: 'Missing proposal ID' }, { status: 400 })\n  }\n\n  const proposal = await findOneWithDecryption(\n    ctx.em,\n    InboxProposal,\n    {\n      id: proposalId,\n      organizationId: ctx.organizationId,\n      tenantId: ctx.tenantId,\n      isActive: true,\n      deletedAt: null,\n    },\n    undefined,\n    ctx.scope,\n  )\n\n  if (!proposal) {\n    return NextResponse.json({ error: 'Proposal not found' }, { status: 404 })\n  }\n\n  return proposal\n}\n\nexport function toExecutionContext(ctx: RequestContext, entities?: CrossModuleEntities): ExecutionContextInput {\n  return {\n    em: ctx.em,\n    userId: ctx.userId,\n    tenantId: ctx.tenantId,\n    organizationId: ctx.organizationId,\n    eventBus: ctx.eventBus,\n    container: ctx.container,\n    auth: ctx.auth,\n    entities,\n  }\n}\n\nexport function handleRouteError(err: unknown, label: string): NextResponse {\n  if (err instanceof UnauthorizedError) {\n    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n  }\n  logger.error('Request failed', { label, err })\n  return NextResponse.json({ error: `Failed to ${label}` }, { status: 500 })\n}\n\nexport function isErrorResponse(value: unknown): value is NextResponse {\n  return value instanceof NextResponse\n}\n\nexport function resolveCrossModuleEntities(container: AwilixContainer): CrossModuleEntities {\n  const entities: Partial<CrossModuleEntities> = {}\n  try { entities.CustomerEntity = container.resolve('CustomerEntity') } catch { /* module not available */ }\n  try { entities.SalesOrder = container.resolve('SalesOrder') } catch { /* module not available */ }\n  try { entities.SalesShipment = container.resolve('SalesShipment') } catch { /* module not available */ }\n  try { entities.SalesChannel = container.resolve('SalesChannel') } catch { /* module not available */ }\n  try { entities.Dictionary = container.resolve('Dictionary') } catch { /* module not available */ }\n  try { entities.DictionaryEntry = container.resolve('DictionaryEntry') } catch { /* module not available */ }\n  return entities as CrossModuleEntities\n}\n\nexport class UnauthorizedError extends Error {\n  constructor() {\n    super('Unauthorized')\n  }\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAK7B,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,6BAA6B;AACtC,SAAS,eAAe,2BAA2B;AAEnD,SAAS,+BAA+B;AACxC,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,WAAW;AAwBvC,eAAsB,sBAAsB,KAAuC;AACjF,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM,OAAO,CAAC,MAAM,YAAY,CAAC,MAAM,OAAO;AACjD,UAAM,IAAI,kBAAkB;AAAA,EAC9B;AACA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,KAAM,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC3D,SAAO;AAAA,IACL;AAAA,IACA,QAAQ,KAAK;AAAA,IACb,UAAU,KAAK;AAAA,IACf,gBAAgB,KAAK;AAAA,IACrB,OAAO,EAAE,UAAU,KAAK,UAAU,gBAAgB,KAAK,MAAM;AAAA,IAC7D;AAAA,IACA;AAAA,IACA,UAAU,wBAAwB,SAAS;AAAA,EAC7C;AACF;AAEO,SAAS,mBAAmB,KAAU,cAAqC;AAChF,QAAM,WAAW,IAAI,SAAS,MAAM,GAAG;AACvC,QAAM,QAAQ,SAAS,QAAQ,YAAY;AAC3C,SAAO,SAAS,IAAI,SAAS,QAAQ,CAAC,KAAK,OAAO;AACpD;AAEA,eAAsB,yBACpB,KACA,KACkF;AAClF,QAAM,aAAa,mBAAmB,KAAK,WAAW;AACtD,QAAM,WAAW,mBAAmB,KAAK,SAAS;AAElD,MAAI,CAAC,cAAc,CAAC,UAAU;AAC5B,WAAO,aAAa,KAAK,EAAE,OAAO,cAAc,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACpE;AAEA,QAAM,SAAS,MAAM;AAAA,IACnB,IAAI;AAAA,IACJ;AAAA,IACA;AAAA,MACE,IAAI;AAAA,MACJ;AAAA,MACA,gBAAgB,IAAI;AAAA,MACpB,UAAU,IAAI;AAAA,MACd,WAAW;AAAA,IACb;AAAA,IACA;AAAA,IACA,IAAI;AAAA,EACN;AAEA,MAAI,CAAC,QAAQ;AACX,WAAO,aAAa,KAAK,EAAE,OAAO,mBAAmB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACzE;AAEA,QAAM,WAAW,MAAM;AAAA,IACrB,IAAI;AAAA,IACJ;AAAA,IACA;AAAA,MACE,IAAI;AAAA,MACJ,gBAAgB,IAAI;AAAA,MACpB,UAAU,IAAI;AAAA,MACd,UAAU;AAAA,MACV,WAAW;AAAA,IACb;AAAA,IACA;AAAA,IACA,IAAI;AAAA,EACN;AACA,MAAI,CAAC,UAAU;AACb,WAAO,aAAa,KAAK,EAAE,OAAO,qDAAqD,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC3G;AAEA,SAAO,EAAE,QAAQ,SAAS;AAC5B;AAEA,eAAsB,gBACpB,KACA,KACuC;AACvC,QAAM,aAAa,mBAAmB,KAAK,WAAW;AAEtD,MAAI,CAAC,YAAY;AACf,WAAO,aAAa,KAAK,EAAE,OAAO,sBAAsB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC5E;AAEA,QAAM,WAAW,MAAM;AAAA,IACrB,IAAI;AAAA,IACJ;AAAA,IACA;AAAA,MACE,IAAI;AAAA,MACJ,gBAAgB,IAAI;AAAA,MACpB,UAAU,IAAI;AAAA,MACd,UAAU;AAAA,MACV,WAAW;AAAA,IACb;AAAA,IACA;AAAA,IACA,IAAI;AAAA,EACN;AAEA,MAAI,CAAC,UAAU;AACb,WAAO,aAAa,KAAK,EAAE,OAAO,qBAAqB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC3E;AAEA,SAAO;AACT;AAEO,SAAS,mBAAmB,KAAqB,UAAuD;AAC7G,SAAO;AAAA,IACL,IAAI,IAAI;AAAA,IACR,QAAQ,IAAI;AAAA,IACZ,UAAU,IAAI;AAAA,IACd,gBAAgB,IAAI;AAAA,IACpB,UAAU,IAAI;AAAA,IACd,WAAW,IAAI;AAAA,IACf,MAAM,IAAI;AAAA,IACV;AAAA,EACF;AACF;AAEO,SAAS,iBAAiB,KAAc,OAA6B;AAC1E,MAAI,eAAe,mBAAmB;AACpC,WAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrE;AACA,SAAO,MAAM,kBAAkB,EAAE,OAAO,IAAI,CAAC;AAC7C,SAAO,aAAa,KAAK,EAAE,OAAO,aAAa,KAAK,GAAG,GAAG,EAAE,QAAQ,IAAI,CAAC;AAC3E;AAEO,SAAS,gBAAgB,OAAuC;AACrE,SAAO,iBAAiB;AAC1B;AAEO,SAAS,2BAA2B,WAAiD;AAC1F,QAAM,WAAyC,CAAC;AAChD,MAAI;AAAE,aAAS,iBAAiB,UAAU,QAAQ,gBAAgB;AAAA,EAAE,QAAQ;AAAA,EAA6B;AACzG,MAAI;AAAE,aAAS,aAAa,UAAU,QAAQ,YAAY;AAAA,EAAE,QAAQ;AAAA,EAA6B;AACjG,MAAI;AAAE,aAAS,gBAAgB,UAAU,QAAQ,eAAe;AAAA,EAAE,QAAQ;AAAA,EAA6B;AACvG,MAAI;AAAE,aAAS,eAAe,UAAU,QAAQ,cAAc;AAAA,EAAE,QAAQ;AAAA,EAA6B;AACrG,MAAI;AAAE,aAAS,aAAa,UAAU,QAAQ,YAAY;AAAA,EAAE,QAAQ;AAAA,EAA6B;AACjG,MAAI;AAAE,aAAS,kBAAkB,UAAU,QAAQ,iBAAiB;AAAA,EAAE,QAAQ;AAAA,EAA6B;AAC3G,SAAO;AACT;AAEO,MAAM,0BAA0B,MAAM;AAAA,EAC3C,cAAc;AACZ,UAAM,cAAc;AAAA,EACtB;AACF;",
   "names": []
 }

package/dist/modules/inbox_ops/api/settings/route.js

@@ -13,6 +13,8 @@ import {
   invalidateSettingsCache,
   SETTINGS_CACHE_TTL_MS
 } from "../../lib/cache.js";
+import { createLogger } from "@open-mercato/shared/lib/logger";
+const logger = createLogger("inbox_ops").child({ component: "settings" });
 const metadata = {
   GET: { requireAuth: true, requireFeatures: ["inbox_ops.settings.manage"] },
   PATCH: { requireAuth: true, requireFeatures: ["inbox_ops.settings.manage"] }
@@ -59,7 +61,7 @@ async function GET(req) {
           () => cache.set(cacheKey, responseBody, { ttl: SETTINGS_CACHE_TTL_MS, tags: [tag] })
         );
       } catch (err) {
-        console.warn("[inbox_ops:settings] Failed to set cache", err);
+        logger.warn("Failed to set cache", { err });
       }
     }
     return NextResponse.json(responseBody);