@open-mercato/core 0.6.6-develop.6465.1.019f0fb26f → 0.6.6-develop.6471.1.9ab5bdd79a

package/dist/modules/inbox_ops/api/settings/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../src/modules/inbox_ops/api/settings/route.ts"],
-  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { runWithCacheTenant } from '@open-mercato/cache'\nimport { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { enforceCommandOptimisticLockWithGuards } from '@open-mercato/shared/lib/crud/optimistic-lock-command'\nimport { isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { InboxSettings } from '../../data/entities'\nimport { updateSettingsSchema } from '../../data/validators'\nimport { resolveRequestContext, handleRouteError } from '../routeHelpers'\nimport {\n  resolveCache,\n  createSettingsCacheKey,\n  createSettingsCacheTag,\n  invalidateSettingsCache,\n  SETTINGS_CACHE_TTL_MS,\n} from '../../lib/cache'\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['inbox_ops.settings.manage'] },\n  PATCH: { requireAuth: true, requireFeatures: ['inbox_ops.settings.manage'] },\n}\n\nexport async function GET(req: Request) {\n  try {\n    const ctx = await resolveRequestContext(req)\n    const cache = resolveCache(ctx.container)\n\n    if (cache) {\n      const cacheKey = createSettingsCacheKey(ctx.tenantId)\n      const cached = await runWithCacheTenant(ctx.tenantId, () => cache.get(cacheKey))\n      if (cached) {\n        return NextResponse.json(cached)\n      }\n    }\n\n    const settings = await findOneWithDecryption(\n      ctx.em,\n      InboxSettings,\n      {\n        organizationId: ctx.organizationId,\n        tenantId: ctx.tenantId,\n        deletedAt: null,\n      },\n      undefined,\n      ctx.scope,\n    )\n\n    const responseBody = {\n      settings: settings ? {\n        id: settings.id,\n        inboxAddress: settings.inboxAddress,\n        isActive: settings.isActive,\n        workingLanguage: settings.workingLanguage,\n        // Surface only whether a per-tenant secret exists \u2014 never the value.\n        webhookSecretSet: Boolean(settings.webhookSecret),\n        updatedAt: settings.updatedAt instanceof Date ? settings.updatedAt.toISOString() : (settings.updatedAt ?? null),\n      } : null,\n    }\n\n    if (cache) {\n      const cacheKey = createSettingsCacheKey(ctx.tenantId)\n      const tag = createSettingsCacheTag(ctx.tenantId)\n      try {\n        await runWithCacheTenant(ctx.tenantId, () =>\n          cache.set(cacheKey, responseBody, { ttl: SETTINGS_CACHE_TTL_MS, tags: [tag] }),\n        )\n      } catch (err) {\n        console.warn('[inbox_ops:settings] Failed to set cache', err)\n      }\n    }\n\n    return NextResponse.json(responseBody)\n  } catch (err) {\n    return handleRouteError(err, 'load settings')\n  }\n}\n\nexport async function PATCH(req: Request) {\n  try {\n    const ctx = await resolveRequestContext(req)\n\n    const body = await req.json()\n    const parsed = updateSettingsSchema.safeParse(body)\n    if (!parsed.success) {\n      return NextResponse.json({ error: 'Invalid request', details: parsed.error.issues }, { status: 400 })\n    }\n\n    const settings = await findOneWithDecryption(\n      ctx.em,\n      InboxSettings,\n      {\n        organizationId: ctx.organizationId,\n        tenantId: ctx.tenantId,\n        deletedAt: null,\n      },\n      undefined,\n      ctx.scope,\n    )\n\n    if (!settings) {\n      return NextResponse.json({ error: 'Settings not found' }, { status: 404 })\n    }\n\n    // Optimistic lock: refuse a stale overwrite when two tabs edit the same inbox\n    // settings record. Strictly additive \u2014 a no-op without the expected-version header.\n    try {\n      await enforceCommandOptimisticLockWithGuards(ctx.container, {\n        resourceKind: 'inbox_ops.settings',\n        resourceId: settings.id,\n        current: settings.updatedAt ?? null,\n        request: req,\n      })\n    } catch (err) {\n      if (isCrudHttpError(err)) return NextResponse.json(err.body, { status: err.status })\n      throw err\n    }\n\n    if (parsed.data.workingLanguage !== undefined) {\n      settings.workingLanguage = parsed.data.workingLanguage\n    }\n    if (parsed.data.isActive !== undefined) {\n      settings.isActive = parsed.data.isActive\n    }\n    if (parsed.data.webhookSecret !== undefined) {\n      // Empty/null clears the per-tenant secret (reverts to the global key).\n      settings.webhookSecret = parsed.data.webhookSecret ? parsed.data.webhookSecret : null\n    }\n\n    await ctx.em.flush()\n\n    const cache = resolveCache(ctx.container)\n    await runWithCacheTenant(ctx.tenantId, () => invalidateSettingsCache(cache, ctx.tenantId))\n\n    return NextResponse.json({\n      ok: true,\n      settings: {\n        id: settings.id,\n        inboxAddress: settings.inboxAddress,\n        isActive: settings.isActive,\n        workingLanguage: settings.workingLanguage,\n        webhookSecretSet: Boolean(settings.webhookSecret),\n        updatedAt: settings.updatedAt instanceof Date ? settings.updatedAt.toISOString() : (settings.updatedAt ?? null),\n      },\n    })\n  } catch (err) {\n    return handleRouteError(err, 'update settings')\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'InboxOps',\n  summary: 'Settings',\n  methods: {\n    GET: {\n      summary: 'Get tenant inbox configuration',\n      description: 'Returns the forwarding address and configuration for this tenant',\n      responses: [\n        { status: 200, description: 'Inbox settings' },\n      ],\n    },\n    PATCH: {\n      summary: 'Update tenant inbox configuration',\n      description: 'Updates working language and/or active status',\n      responses: [\n        { status: 200, description: 'Updated settings' },\n        { status: 404, description: 'Settings not found' },\n      ],\n    },\n  },\n}\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAE7B,SAAS,0BAA0B;AACnC,SAAS,6BAA6B;AACtC,SAAS,8CAA8C;AACvD,SAAS,uBAAuB;AAChC,SAAS,qBAAqB;AAC9B,SAAS,4BAA4B;AACrC,SAAS,uBAAuB,wBAAwB;AACxD;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEA,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,2BAA2B,EAAE;AAAA,EACzE,OAAO,EAAE,aAAa,MAAM,iBAAiB,CAAC,2BAA2B,EAAE;AAC7E;AAEA,eAAsB,IAAI,KAAc;AACtC,MAAI;AACF,UAAM,MAAM,MAAM,sBAAsB,GAAG;AAC3C,UAAM,QAAQ,aAAa,IAAI,SAAS;AAExC,QAAI,OAAO;AACT,YAAM,WAAW,uBAAuB,IAAI,QAAQ;AACpD,YAAM,SAAS,MAAM,mBAAmB,IAAI,UAAU,MAAM,MAAM,IAAI,QAAQ,CAAC;AAC/E,UAAI,QAAQ;AACV,eAAO,aAAa,KAAK,MAAM;AAAA,MACjC;AAAA,IACF;AAEA,UAAM,WAAW,MAAM;AAAA,MACrB,IAAI;AAAA,MACJ;AAAA,MACA;AAAA,QACE,gBAAgB,IAAI;AAAA,QACpB,UAAU,IAAI;AAAA,QACd,WAAW;AAAA,MACb;AAAA,MACA;AAAA,MACA,IAAI;AAAA,IACN;AAEA,UAAM,eAAe;AAAA,MACnB,UAAU,WAAW;AAAA,QACnB,IAAI,SAAS;AAAA,QACb,cAAc,SAAS;AAAA,QACvB,UAAU,SAAS;AAAA,QACnB,iBAAiB,SAAS;AAAA;AAAA,QAE1B,kBAAkB,QAAQ,SAAS,aAAa;AAAA,QAChD,WAAW,SAAS,qBAAqB,OAAO,SAAS,UAAU,YAAY,IAAK,SAAS,aAAa;AAAA,MAC5G,IAAI;AAAA,IACN;AAEA,QAAI,OAAO;AACT,YAAM,WAAW,uBAAuB,IAAI,QAAQ;AACpD,YAAM,MAAM,uBAAuB,IAAI,QAAQ;AAC/C,UAAI;AACF,cAAM;AAAA,UAAmB,IAAI;AAAA,UAAU,MACrC,MAAM,IAAI,UAAU,cAAc,EAAE,KAAK,uBAAuB,MAAM,CAAC,GAAG,EAAE,CAAC;AAAA,QAC/E;AAAA,MACF,SAAS,KAAK;AACZ,gBAAQ,KAAK,4CAA4C,GAAG;AAAA,MAC9D;AAAA,IACF;AAEA,WAAO,aAAa,KAAK,YAAY;AAAA,EACvC,SAAS,KAAK;AACZ,WAAO,iBAAiB,KAAK,eAAe;AAAA,EAC9C;AACF;AAEA,eAAsB,MAAM,KAAc;AACxC,MAAI;AACF,UAAM,MAAM,MAAM,sBAAsB,GAAG;AAE3C,UAAM,OAAO,MAAM,IAAI,KAAK;AAC5B,UAAM,SAAS,qBAAqB,UAAU,IAAI;AAClD,QAAI,CAAC,OAAO,SAAS;AACnB,aAAO,aAAa,KAAK,EAAE,OAAO,mBAAmB,SAAS,OAAO,MAAM,OAAO,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACtG;AAEA,UAAM,WAAW,MAAM;AAAA,MACrB,IAAI;AAAA,MACJ;AAAA,MACA;AAAA,QACE,gBAAgB,IAAI;AAAA,QACpB,UAAU,IAAI;AAAA,QACd,WAAW;AAAA,MACb;AAAA,MACA;AAAA,MACA,IAAI;AAAA,IACN;AAEA,QAAI,CAAC,UAAU;AACb,aAAO,aAAa,KAAK,EAAE,OAAO,qBAAqB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC3E;AAIA,QAAI;AACF,YAAM,uCAAuC,IAAI,WAAW;AAAA,QAC1D,cAAc;AAAA,QACd,YAAY,SAAS;AAAA,QACrB,SAAS,SAAS,aAAa;AAAA,QAC/B,SAAS;AAAA,MACX,CAAC;AAAA,IACH,SAAS,KAAK;AACZ,UAAI,gBAAgB,GAAG,EAAG,QAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AACnF,YAAM;AAAA,IACR;AAEA,QAAI,OAAO,KAAK,oBAAoB,QAAW;AAC7C,eAAS,kBAAkB,OAAO,KAAK;AAAA,IACzC;AACA,QAAI,OAAO,KAAK,aAAa,QAAW;AACtC,eAAS,WAAW,OAAO,KAAK;AAAA,IAClC;AACA,QAAI,OAAO,KAAK,kBAAkB,QAAW;AAE3C,eAAS,gBAAgB,OAAO,KAAK,gBAAgB,OAAO,KAAK,gBAAgB;AAAA,IACnF;AAEA,UAAM,IAAI,GAAG,MAAM;AAEnB,UAAM,QAAQ,aAAa,IAAI,SAAS;AACxC,UAAM,mBAAmB,IAAI,UAAU,MAAM,wBAAwB,OAAO,IAAI,QAAQ,CAAC;AAEzF,WAAO,aAAa,KAAK;AAAA,MACvB,IAAI;AAAA,MACJ,UAAU;AAAA,QACR,IAAI,SAAS;AAAA,QACb,cAAc,SAAS;AAAA,QACvB,UAAU,SAAS;AAAA,QACnB,iBAAiB,SAAS;AAAA,QAC1B,kBAAkB,QAAQ,SAAS,aAAa;AAAA,QAChD,WAAW,SAAS,qBAAqB,OAAO,SAAS,UAAU,YAAY,IAAK,SAAS,aAAa;AAAA,MAC5G;AAAA,IACF,CAAC;AAAA,EACH,SAAS,KAAK;AACZ,WAAO,iBAAiB,KAAK,iBAAiB;AAAA,EAChD;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,aAAa;AAAA,MACb,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,iBAAiB;AAAA,MAC/C;AAAA,IACF;AAAA,IACA,OAAO;AAAA,MACL,SAAS;AAAA,MACT,aAAa;AAAA,MACb,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,mBAAmB;AAAA,QAC/C,EAAE,QAAQ,KAAK,aAAa,qBAAqB;AAAA,MACnD;AAAA,IACF;AAAA,EACF;AACF;",
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { runWithCacheTenant } from '@open-mercato/cache'\nimport { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { enforceCommandOptimisticLockWithGuards } from '@open-mercato/shared/lib/crud/optimistic-lock-command'\nimport { isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { InboxSettings } from '../../data/entities'\nimport { updateSettingsSchema } from '../../data/validators'\nimport { resolveRequestContext, handleRouteError } from '../routeHelpers'\nimport {\n  resolveCache,\n  createSettingsCacheKey,\n  createSettingsCacheTag,\n  invalidateSettingsCache,\n  SETTINGS_CACHE_TTL_MS,\n} from '../../lib/cache'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('inbox_ops').child({ component: 'settings' })\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['inbox_ops.settings.manage'] },\n  PATCH: { requireAuth: true, requireFeatures: ['inbox_ops.settings.manage'] },\n}\n\nexport async function GET(req: Request) {\n  try {\n    const ctx = await resolveRequestContext(req)\n    const cache = resolveCache(ctx.container)\n\n    if (cache) {\n      const cacheKey = createSettingsCacheKey(ctx.tenantId)\n      const cached = await runWithCacheTenant(ctx.tenantId, () => cache.get(cacheKey))\n      if (cached) {\n        return NextResponse.json(cached)\n      }\n    }\n\n    const settings = await findOneWithDecryption(\n      ctx.em,\n      InboxSettings,\n      {\n        organizationId: ctx.organizationId,\n        tenantId: ctx.tenantId,\n        deletedAt: null,\n      },\n      undefined,\n      ctx.scope,\n    )\n\n    const responseBody = {\n      settings: settings ? {\n        id: settings.id,\n        inboxAddress: settings.inboxAddress,\n        isActive: settings.isActive,\n        workingLanguage: settings.workingLanguage,\n        // Surface only whether a per-tenant secret exists \u2014 never the value.\n        webhookSecretSet: Boolean(settings.webhookSecret),\n        updatedAt: settings.updatedAt instanceof Date ? settings.updatedAt.toISOString() : (settings.updatedAt ?? null),\n      } : null,\n    }\n\n    if (cache) {\n      const cacheKey = createSettingsCacheKey(ctx.tenantId)\n      const tag = createSettingsCacheTag(ctx.tenantId)\n      try {\n        await runWithCacheTenant(ctx.tenantId, () =>\n          cache.set(cacheKey, responseBody, { ttl: SETTINGS_CACHE_TTL_MS, tags: [tag] }),\n        )\n      } catch (err) {\n        logger.warn('Failed to set cache', { err })\n      }\n    }\n\n    return NextResponse.json(responseBody)\n  } catch (err) {\n    return handleRouteError(err, 'load settings')\n  }\n}\n\nexport async function PATCH(req: Request) {\n  try {\n    const ctx = await resolveRequestContext(req)\n\n    const body = await req.json()\n    const parsed = updateSettingsSchema.safeParse(body)\n    if (!parsed.success) {\n      return NextResponse.json({ error: 'Invalid request', details: parsed.error.issues }, { status: 400 })\n    }\n\n    const settings = await findOneWithDecryption(\n      ctx.em,\n      InboxSettings,\n      {\n        organizationId: ctx.organizationId,\n        tenantId: ctx.tenantId,\n        deletedAt: null,\n      },\n      undefined,\n      ctx.scope,\n    )\n\n    if (!settings) {\n      return NextResponse.json({ error: 'Settings not found' }, { status: 404 })\n    }\n\n    // Optimistic lock: refuse a stale overwrite when two tabs edit the same inbox\n    // settings record. Strictly additive \u2014 a no-op without the expected-version header.\n    try {\n      await enforceCommandOptimisticLockWithGuards(ctx.container, {\n        resourceKind: 'inbox_ops.settings',\n        resourceId: settings.id,\n        current: settings.updatedAt ?? null,\n        request: req,\n      })\n    } catch (err) {\n      if (isCrudHttpError(err)) return NextResponse.json(err.body, { status: err.status })\n      throw err\n    }\n\n    if (parsed.data.workingLanguage !== undefined) {\n      settings.workingLanguage = parsed.data.workingLanguage\n    }\n    if (parsed.data.isActive !== undefined) {\n      settings.isActive = parsed.data.isActive\n    }\n    if (parsed.data.webhookSecret !== undefined) {\n      // Empty/null clears the per-tenant secret (reverts to the global key).\n      settings.webhookSecret = parsed.data.webhookSecret ? parsed.data.webhookSecret : null\n    }\n\n    await ctx.em.flush()\n\n    const cache = resolveCache(ctx.container)\n    await runWithCacheTenant(ctx.tenantId, () => invalidateSettingsCache(cache, ctx.tenantId))\n\n    return NextResponse.json({\n      ok: true,\n      settings: {\n        id: settings.id,\n        inboxAddress: settings.inboxAddress,\n        isActive: settings.isActive,\n        workingLanguage: settings.workingLanguage,\n        webhookSecretSet: Boolean(settings.webhookSecret),\n        updatedAt: settings.updatedAt instanceof Date ? settings.updatedAt.toISOString() : (settings.updatedAt ?? null),\n      },\n    })\n  } catch (err) {\n    return handleRouteError(err, 'update settings')\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'InboxOps',\n  summary: 'Settings',\n  methods: {\n    GET: {\n      summary: 'Get tenant inbox configuration',\n      description: 'Returns the forwarding address and configuration for this tenant',\n      responses: [\n        { status: 200, description: 'Inbox settings' },\n      ],\n    },\n    PATCH: {\n      summary: 'Update tenant inbox configuration',\n      description: 'Updates working language and/or active status',\n      responses: [\n        { status: 200, description: 'Updated settings' },\n        { status: 404, description: 'Settings not found' },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAE7B,SAAS,0BAA0B;AACnC,SAAS,6BAA6B;AACtC,SAAS,8CAA8C;AACvD,SAAS,uBAAuB;AAChC,SAAS,qBAAqB;AAC9B,SAAS,4BAA4B;AACrC,SAAS,uBAAuB,wBAAwB;AACxD;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,WAAW,EAAE,MAAM,EAAE,WAAW,WAAW,CAAC;AAEjE,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,2BAA2B,EAAE;AAAA,EACzE,OAAO,EAAE,aAAa,MAAM,iBAAiB,CAAC,2BAA2B,EAAE;AAC7E;AAEA,eAAsB,IAAI,KAAc;AACtC,MAAI;AACF,UAAM,MAAM,MAAM,sBAAsB,GAAG;AAC3C,UAAM,QAAQ,aAAa,IAAI,SAAS;AAExC,QAAI,OAAO;AACT,YAAM,WAAW,uBAAuB,IAAI,QAAQ;AACpD,YAAM,SAAS,MAAM,mBAAmB,IAAI,UAAU,MAAM,MAAM,IAAI,QAAQ,CAAC;AAC/E,UAAI,QAAQ;AACV,eAAO,aAAa,KAAK,MAAM;AAAA,MACjC;AAAA,IACF;AAEA,UAAM,WAAW,MAAM;AAAA,MACrB,IAAI;AAAA,MACJ;AAAA,MACA;AAAA,QACE,gBAAgB,IAAI;AAAA,QACpB,UAAU,IAAI;AAAA,QACd,WAAW;AAAA,MACb;AAAA,MACA;AAAA,MACA,IAAI;AAAA,IACN;AAEA,UAAM,eAAe;AAAA,MACnB,UAAU,WAAW;AAAA,QACnB,IAAI,SAAS;AAAA,QACb,cAAc,SAAS;AAAA,QACvB,UAAU,SAAS;AAAA,QACnB,iBAAiB,SAAS;AAAA;AAAA,QAE1B,kBAAkB,QAAQ,SAAS,aAAa;AAAA,QAChD,WAAW,SAAS,qBAAqB,OAAO,SAAS,UAAU,YAAY,IAAK,SAAS,aAAa;AAAA,MAC5G,IAAI;AAAA,IACN;AAEA,QAAI,OAAO;AACT,YAAM,WAAW,uBAAuB,IAAI,QAAQ;AACpD,YAAM,MAAM,uBAAuB,IAAI,QAAQ;AAC/C,UAAI;AACF,cAAM;AAAA,UAAmB,IAAI;AAAA,UAAU,MACrC,MAAM,IAAI,UAAU,cAAc,EAAE,KAAK,uBAAuB,MAAM,CAAC,GAAG,EAAE,CAAC;AAAA,QAC/E;AAAA,MACF,SAAS,KAAK;AACZ,eAAO,KAAK,uBAAuB,EAAE,IAAI,CAAC;AAAA,MAC5C;AAAA,IACF;AAEA,WAAO,aAAa,KAAK,YAAY;AAAA,EACvC,SAAS,KAAK;AACZ,WAAO,iBAAiB,KAAK,eAAe;AAAA,EAC9C;AACF;AAEA,eAAsB,MAAM,KAAc;AACxC,MAAI;AACF,UAAM,MAAM,MAAM,sBAAsB,GAAG;AAE3C,UAAM,OAAO,MAAM,IAAI,KAAK;AAC5B,UAAM,SAAS,qBAAqB,UAAU,IAAI;AAClD,QAAI,CAAC,OAAO,SAAS;AACnB,aAAO,aAAa,KAAK,EAAE,OAAO,mBAAmB,SAAS,OAAO,MAAM,OAAO,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACtG;AAEA,UAAM,WAAW,MAAM;AAAA,MACrB,IAAI;AAAA,MACJ;AAAA,MACA;AAAA,QACE,gBAAgB,IAAI;AAAA,QACpB,UAAU,IAAI;AAAA,QACd,WAAW;AAAA,MACb;AAAA,MACA;AAAA,MACA,IAAI;AAAA,IACN;AAEA,QAAI,CAAC,UAAU;AACb,aAAO,aAAa,KAAK,EAAE,OAAO,qBAAqB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC3E;AAIA,QAAI;AACF,YAAM,uCAAuC,IAAI,WAAW;AAAA,QAC1D,cAAc;AAAA,QACd,YAAY,SAAS;AAAA,QACrB,SAAS,SAAS,aAAa;AAAA,QAC/B,SAAS;AAAA,MACX,CAAC;AAAA,IACH,SAAS,KAAK;AACZ,UAAI,gBAAgB,GAAG,EAAG,QAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AACnF,YAAM;AAAA,IACR;AAEA,QAAI,OAAO,KAAK,oBAAoB,QAAW;AAC7C,eAAS,kBAAkB,OAAO,KAAK;AAAA,IACzC;AACA,QAAI,OAAO,KAAK,aAAa,QAAW;AACtC,eAAS,WAAW,OAAO,KAAK;AAAA,IAClC;AACA,QAAI,OAAO,KAAK,kBAAkB,QAAW;AAE3C,eAAS,gBAAgB,OAAO,KAAK,gBAAgB,OAAO,KAAK,gBAAgB;AAAA,IACnF;AAEA,UAAM,IAAI,GAAG,MAAM;AAEnB,UAAM,QAAQ,aAAa,IAAI,SAAS;AACxC,UAAM,mBAAmB,IAAI,UAAU,MAAM,wBAAwB,OAAO,IAAI,QAAQ,CAAC;AAEzF,WAAO,aAAa,KAAK;AAAA,MACvB,IAAI;AAAA,MACJ,UAAU;AAAA,QACR,IAAI,SAAS;AAAA,QACb,cAAc,SAAS;AAAA,QACvB,UAAU,SAAS;AAAA,QACnB,iBAAiB,SAAS;AAAA,QAC1B,kBAAkB,QAAQ,SAAS,aAAa;AAAA,QAChD,WAAW,SAAS,qBAAqB,OAAO,SAAS,UAAU,YAAY,IAAK,SAAS,aAAa;AAAA,MAC5G;AAAA,IACF,CAAC;AAAA,EACH,SAAS,KAAK;AACZ,WAAO,iBAAiB,KAAK,iBAAiB;AAAA,EAChD;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,aAAa;AAAA,MACb,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,iBAAiB;AAAA,MAC/C;AAAA,IACF;AAAA,IACA,OAAO;AAAA,MACL,SAAS;AAAA,MACT,aAAa;AAAA,MACb,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,mBAAmB;AAAA,QAC/C,EAAE,QAAQ,KAAK,aAAa,qBAAqB;AAAA,MACnD;AAAA,IACF;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/modules/inbox_ops/api/webhook/inbound.js

@@ -9,6 +9,8 @@ import { InboxSettings, InboxEmail } from "../../data/entities.js";
 import { parseInboundEmail } from "../../lib/emailParser.js";
 import { checkRateLimit } from "../../lib/rateLimiter.js";
 import { emitInboxOpsEvent } from "../../events.js";
+import { createLogger } from "@open-mercato/shared/lib/logger";
+const logger = createLogger("inbox_ops").child({ component: "webhook" });
 const metadata = {
   POST: { requireAuth: false }
 };
@@ -83,7 +85,7 @@ async function verifyAndParse(req, rawBody) {
   if (customSig) {
     const webhookSecret = process.env.INBOX_OPS_WEBHOOK_SECRET;
     if (!webhookSecret) {
-      console.error("[inbox_ops:webhook] INBOX_OPS_WEBHOOK_SECRET not configured");
+      logger.error("INBOX_OPS_WEBHOOK_SECRET not configured");
       return { ok: false, response: NextResponse.json({ error: "Service unavailable" }, { status: 503 }) };
     }
     const timestamp = req.headers.get("x-webhook-timestamp") || "";
@@ -101,7 +103,7 @@ async function verifyAndParse(req, rawBody) {
   if (svixId) {
     const signingSecret = process.env.RESEND_WEBHOOK_SIGNING_SECRET;
     if (!signingSecret) {
-      console.error("[inbox_ops:webhook] RESEND_WEBHOOK_SIGNING_SECRET not configured");
+      logger.error("RESEND_WEBHOOK_SIGNING_SECRET not configured");
       return { ok: false, response: NextResponse.json({ error: "Service unavailable" }, { status: 503 }) };
     }
     const headers = {
@@ -135,7 +137,7 @@ async function POST(req) {
   const hasCustomSecret = Boolean(process.env.INBOX_OPS_WEBHOOK_SECRET);
   const hasResendSecret = Boolean(process.env.RESEND_WEBHOOK_SIGNING_SECRET);
   if (!hasCustomSecret && !hasResendSecret) {
-    console.error("[inbox_ops:webhook] Neither INBOX_OPS_WEBHOOK_SECRET nor RESEND_WEBHOOK_SIGNING_SECRET is configured");
+    logger.error("Neither INBOX_OPS_WEBHOOK_SECRET nor RESEND_WEBHOOK_SIGNING_SECRET is configured");
     return NextResponse.json({ error: "Service unavailable" }, { status: 503 });
   }
   const contentLength = parseInt(req.headers.get("content-length") || "0", 10);
@@ -245,7 +247,7 @@ async function POST(req) {
         toAddress
       });
     } catch (eventError) {
-      console.error("[inbox_ops:webhook] Failed to emit deduplicated event:", eventError);
+      logger.error("Failed to emit deduplicated event", { err: eventError });
     }
     return NextResponse.json({ ok: true });
   }
@@ -283,7 +285,7 @@ async function POST(req) {
       subject: parsed.subject
     });
   } catch (eventError) {
-    console.error("[inbox_ops:webhook] Failed to emit email.received event:", eventError);
+    logger.error("Failed to emit email.received event", { err: eventError });
   }
   return NextResponse.json({ ok: true });
 }

package/dist/modules/inbox_ops/api/webhook/inbound.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../src/modules/inbox_ops/api/webhook/inbound.ts"],
-  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { createHmac, timingSafeEqual } from 'node:crypto'\nimport { z } from 'zod'\nimport { Webhook } from 'svix'\nimport { Resend } from 'resend'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport type { CacheStrategy } from '@open-mercato/cache'\nimport { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { InboxSettings, InboxEmail } from '../../data/entities'\nimport { parseInboundEmail } from '../../lib/emailParser'\nimport { checkRateLimit } from '../../lib/rateLimiter'\nimport { emitInboxOpsEvent } from '../../events'\n\nexport const metadata = {\n  POST: { requireAuth: false },\n}\n\nconst MAX_PAYLOAD_SIZE = 2 * 1024 * 1024 // 2MB\nconst REPLAY_WINDOW_MS = 5 * 60 * 1000 // 5 minutes\n\nfunction isTimestampFresh(timestamp: string): boolean {\n  if (!timestamp) return false\n  const timestampMs = parseInt(timestamp, 10) * 1000\n  if (isNaN(timestampMs)) return false\n  return Math.abs(Date.now() - timestampMs) <= REPLAY_WINDOW_MS\n}\n\nfunction verifyHmacSignature(\n  payload: string,\n  signature: string,\n  timestamp: string,\n  secret: string,\n): boolean {\n  if (!signature || !timestamp || !secret) return false\n\n  if (!isTimestampFresh(timestamp)) return false\n\n  const expected = createHmac('sha256', secret)\n    .update(`${timestamp}.${payload}`)\n    .digest('hex')\n  const received = signature.startsWith('sha256=')\n    ? signature.slice('sha256='.length)\n    : signature\n\n  try {\n    if (received.length !== expected.length) return false\n    return timingSafeEqual(\n      Buffer.from(received, 'hex'),\n      Buffer.from(expected, 'hex'),\n    )\n  } catch {\n    return false\n  }\n}\n\n// True when the signature verifies against ANY of the candidate secrets. Used\n// to bind the inbound signature to the resolved tenant: once the target inbox\n// declares its own per-tenant secret, the global INBOX_OPS_WEBHOOK_SECRET is no\n// longer accepted for that inbox, so a holder of the global key alone cannot\n// forge mail into a tenant that opted into a dedicated secret.\nfunction verifyHmacAgainstAny(\n  payload: string,\n  signature: string,\n  timestamp: string,\n  secrets: string[],\n): boolean {\n  for (const secret of secrets) {\n    if (secret && verifyHmacSignature(payload, signature, timestamp, secret)) return true\n  }\n  return false\n}\n\n// Stable, non-reversible identifier for the pre-DB global rate-limit bucket.\n// Keying on the configured signing secret (rather than the attacker-set `to` or\n// the per-request signature) means the bucket is request-invariant for a given\n// secret, so rotating recipients or mutating the body cannot dilute the limit.\nfunction secretFingerprint(secret: string): string {\n  return createHmac('sha256', 'inbox_ops:rate_limit:salt').update(secret).digest('hex').slice(0, 32)\n}\n\nfunction verifySvixSignature(\n  rawBody: string,\n  headers: Record<string, string>,\n  secret: string,\n): boolean {\n  try {\n    const wh = new Webhook(secret)\n    wh.verify(rawBody, {\n      'svix-id': headers['svix-id'],\n      'svix-timestamp': headers['svix-timestamp'],\n      'svix-signature': headers['svix-signature'],\n    })\n    return true\n  } catch {\n    return false\n  }\n}\n\nasync function fetchResendEmail(emailId: string): Promise<{\n  from?: string\n  to?: string[]\n  subject?: string\n  text?: string\n  html?: string\n  messageId?: string\n  replyTo?: string\n  inReplyTo?: string\n  references?: string[]\n}> {\n  const apiKey = process.env.RESEND_API_KEY\n  if (!apiKey) throw new Error('RESEND_API_KEY is required to fetch Resend inbound emails')\n\n  const resend = new Resend(apiKey)\n  const { data, error } = await resend.emails.receiving.get(emailId)\n  if (error || !data) {\n    throw new Error(`Failed to fetch Resend email ${emailId}: ${error?.message || 'unknown error'}`)\n  }\n\n  return {\n    from: data.from,\n    to: data.to,\n    subject: data.subject,\n    text: data.text ?? undefined,\n    html: data.html ?? undefined,\n    messageId: data.message_id,\n    replyTo: data.reply_to?.[0] ?? undefined,\n    inReplyTo: data.headers?.['in-reply-to'] ?? undefined,\n    references: data.headers?.['references']?.split(/\\s+/).filter(Boolean),\n  }\n}\n\ntype VerifiedPayload =\n  | { kind: 'custom'; payload: Record<string, unknown>; signature: string; timestamp: string }\n  | { kind: 'resend'; emailFields: Awaited<ReturnType<typeof fetchResendEmail>>; to: string[] }\n\nasync function verifyAndParse(req: Request, rawBody: string): Promise<\n  | { ok: true; data: VerifiedPayload }\n  | { ok: false; response: NextResponse }\n> {\n  const customSig = req.headers.get('x-webhook-signature')\n  const svixId = req.headers.get('svix-id')\n\n  if (customSig) {\n    const webhookSecret = process.env.INBOX_OPS_WEBHOOK_SECRET\n    if (!webhookSecret) {\n      console.error('[inbox_ops:webhook] INBOX_OPS_WEBHOOK_SECRET not configured')\n      return { ok: false, response: NextResponse.json({ error: 'Service unavailable' }, { status: 503 }) }\n    }\n    const timestamp = req.headers.get('x-webhook-timestamp') || ''\n    // Cheap, secret-independent gate first: reject replayed/stale requests\n    // before parsing. The HMAC itself is verified later, against the secret\n    // bound to the resolved inbox (see the POST handler), so a holder of the\n    // global secret cannot inject into a tenant that owns its own secret.\n    if (!isTimestampFresh(timestamp)) {\n      return { ok: false, response: NextResponse.json({ error: 'Invalid signature' }, { status: 400 }) }\n    }\n    let payload: Record<string, unknown>\n    try {\n      payload = JSON.parse(rawBody)\n    } catch {\n      return { ok: false, response: NextResponse.json({ error: 'Invalid JSON' }, { status: 400 }) }\n    }\n    return { ok: true, data: { kind: 'custom', payload, signature: customSig, timestamp } }\n  }\n\n  if (svixId) {\n    const signingSecret = process.env.RESEND_WEBHOOK_SIGNING_SECRET\n    if (!signingSecret) {\n      console.error('[inbox_ops:webhook] RESEND_WEBHOOK_SIGNING_SECRET not configured')\n      return { ok: false, response: NextResponse.json({ error: 'Service unavailable' }, { status: 503 }) }\n    }\n    const headers: Record<string, string> = {\n      'svix-id': svixId,\n      'svix-timestamp': req.headers.get('svix-timestamp') || '',\n      'svix-signature': req.headers.get('svix-signature') || '',\n    }\n    if (!verifySvixSignature(rawBody, headers, signingSecret)) {\n      return { ok: false, response: NextResponse.json({ error: 'Invalid signature' }, { status: 400 }) }\n    }\n    let envelope: { type?: string; data?: { email_id?: string; from?: string; to?: string[] } }\n    try {\n      envelope = JSON.parse(rawBody)\n    } catch {\n      return { ok: false, response: NextResponse.json({ error: 'Invalid JSON' }, { status: 400 }) }\n    }\n    if (envelope.type !== 'email.received') {\n      return { ok: false, response: NextResponse.json({ ok: true }) }\n    }\n    const emailId = envelope.data?.email_id\n    if (!emailId) {\n      return { ok: false, response: NextResponse.json({ error: 'Missing email_id in Resend payload' }, { status: 400 }) }\n    }\n    const emailFields = await fetchResendEmail(emailId)\n    const to = emailFields.to || envelope.data?.to || []\n    return { ok: true, data: { kind: 'resend', emailFields, to } }\n  }\n\n  return { ok: false, response: NextResponse.json({ error: 'Missing signature headers' }, { status: 400 }) }\n}\n\nexport async function POST(req: Request) {\n  const hasCustomSecret = Boolean(process.env.INBOX_OPS_WEBHOOK_SECRET)\n  const hasResendSecret = Boolean(process.env.RESEND_WEBHOOK_SIGNING_SECRET)\n  if (!hasCustomSecret && !hasResendSecret) {\n    console.error('[inbox_ops:webhook] Neither INBOX_OPS_WEBHOOK_SECRET nor RESEND_WEBHOOK_SIGNING_SECRET is configured')\n    return NextResponse.json({ error: 'Service unavailable' }, { status: 503 })\n  }\n\n  const contentLength = parseInt(req.headers.get('content-length') || '0', 10)\n  if (contentLength > MAX_PAYLOAD_SIZE) {\n    return NextResponse.json({ error: 'Payload too large' }, { status: 413 })\n  }\n\n  let rawBody: string\n  try {\n    rawBody = await req.text()\n  } catch {\n    return NextResponse.json({ error: 'Bad request' }, { status: 400 })\n  }\n\n  if (rawBody.length > MAX_PAYLOAD_SIZE) {\n    return NextResponse.json({ error: 'Payload too large' }, { status: 413 })\n  }\n\n  const verified = await verifyAndParse(req, rawBody)\n  if (!verified.ok) {\n    return verified.response\n  }\n\n  let toAddress: string | null\n  let emailInput: Parameters<typeof parseInboundEmail>[0]\n\n  if (verified.data.kind === 'custom') {\n    const payload = verified.data.payload\n    toAddress = extractToAddress(payload)\n    emailInput = {\n      from: payload.from as string | undefined,\n      to: payload.to as string | string[] | undefined,\n      subject: payload.subject as string | undefined,\n      text: payload.text as string | undefined,\n      html: payload.html as string | undefined,\n      messageId: payload.messageId as string | undefined,\n      replyTo: payload.replyTo as string | undefined,\n      inReplyTo: payload.inReplyTo as string | undefined,\n      references: payload.references as string | string[] | undefined,\n    }\n  } else {\n    const { emailFields, to } = verified.data\n    toAddress = to.length > 0 ? to[0].toLowerCase() : null\n    emailInput = {\n      from: emailFields.from,\n      to: emailFields.to,\n      subject: emailFields.subject,\n      text: emailFields.text,\n      html: emailFields.html,\n      messageId: emailFields.messageId,\n      replyTo: emailFields.replyTo,\n      inReplyTo: emailFields.inReplyTo,\n      references: emailFields.references,\n    }\n  }\n\n  if (!toAddress) {\n    return NextResponse.json({ error: 'Missing recipient address' }, { status: 400 })\n  }\n\n  const container = await createRequestContainer()\n\n  let cache: CacheStrategy | null = null\n  try {\n    cache = container.resolve('cache') as CacheStrategy\n  } catch {\n    // Cache not available \u2014 the limiter now fails closed with a process-local\n    // bucket instead of waving the request through.\n  }\n\n  // Pre-DB global bucket keyed on the configured signing secret (custom) or the\n  // static Resend path, NOT on the attacker-controllable `to` and NOT on the\n  // per-request signature (which mutates with timestamp/body, so it would mint a\n  // fresh bucket every request and never throttle). The per-tenant secret lives\n  // behind the encrypted-column lookup, so the only secret available here without\n  // a DB hit is the global one \u2014 keying on it caps total inbound volume for the\n  // custom path and runs BEFORE the lookup so a flood cannot amplify DB work.\n  const globalBucketKey = verified.data.kind === 'custom'\n    ? `webhook:secret:${secretFingerprint(process.env.INBOX_OPS_WEBHOOK_SECRET || '')}`\n    : 'webhook:resend'\n  const globalRateCheck = await checkRateLimit(cache, globalBucketKey)\n  if (!globalRateCheck.allowed) {\n    return rateLimitedResponse(globalRateCheck.retryAfterSeconds)\n  }\n\n  const em = (container.resolve('em') as EntityManager).fork()\n\n  // No explicit scope: decryptEntitiesWithFallbackScope reads tenant/org off the\n  // resolved row, which is exactly what binds webhook_secret to its own tenant.\n  const settings = await findOneWithDecryption(\n    em,\n    InboxSettings,\n    {\n      inboxAddress: toAddress.toLowerCase(),\n      isActive: true,\n      deletedAt: null,\n    },\n  )\n\n  // Final HMAC verification for the custom provider path: bind the signature to\n  // the resolved tenant. When the inbox declares its own secret, ONLY that\n  // secret is accepted; otherwise the global secret is accepted (back-compat).\n  // For an unknown `to` we still require the global secret so the endpoint never\n  // behaves as an unauthenticated probe oracle.\n  if (verified.data.kind === 'custom') {\n    const globalSecret = process.env.INBOX_OPS_WEBHOOK_SECRET || ''\n    const inboxSecret = settings?.webhookSecret || ''\n    const acceptableSecrets = inboxSecret ? [inboxSecret] : [globalSecret]\n    const signatureValid = verifyHmacAgainstAny(\n      rawBody,\n      verified.data.signature,\n      verified.data.timestamp,\n      acceptableSecrets,\n    )\n    if (!signatureValid) {\n      return NextResponse.json({ error: 'Invalid signature' }, { status: 400 })\n    }\n  }\n\n  if (!settings) {\n    return NextResponse.json({ ok: true })\n  }\n\n  // Per-tenant bucket keyed on the RESOLVED tenant (not the raw `to`), so it\n  // cannot be diluted by alias addresses that map to the same inbox.\n  const tenantRateCheck = await checkRateLimit(\n    cache,\n    `webhook:tenant:${settings.tenantId}`,\n    settings.tenantId,\n  )\n  if (!tenantRateCheck.allowed) {\n    return rateLimitedResponse(tenantRateCheck.retryAfterSeconds)\n  }\n\n  const parsed = parseInboundEmail(emailInput)\n\n  const isDuplicate = await checkDuplicate(em, settings, parsed.messageId, parsed.contentHash)\n  if (isDuplicate) {\n    try {\n      await emitInboxOpsEvent('inbox_ops.email.deduplicated', {\n        tenantId: settings.tenantId,\n        organizationId: settings.organizationId,\n        toAddress,\n      })\n    } catch (eventError) {\n      console.error('[inbox_ops:webhook] Failed to emit deduplicated event:', eventError)\n    }\n    return NextResponse.json({ ok: true })\n  }\n\n  const maxTextSize = parseInt(process.env.INBOX_OPS_MAX_TEXT_SIZE || '204800', 10)\n  const cleanedText = parsed.cleanedText.slice(0, maxTextSize)\n\n  const email = em.create(InboxEmail, {\n    messageId: parsed.messageId,\n    contentHash: parsed.contentHash,\n    forwardedByAddress: parsed.from.email,\n    forwardedByName: parsed.from.name || null,\n    toAddress,\n    subject: parsed.subject,\n    replyTo: parsed.replyTo,\n    inReplyTo: parsed.inReplyTo,\n    emailReferences: parsed.references,\n    rawText: parsed.rawText,\n    rawHtml: parsed.rawHtml,\n    cleanedText,\n    threadMessages: parsed.threadMessages,\n    detectedLanguage: parsed.detectedLanguage,\n    receivedAt: new Date(),\n    status: 'received' as const,\n    isActive: true,\n    organizationId: settings.organizationId,\n    tenantId: settings.tenantId,\n  })\n\n  em.persist(email)\n  await em.flush()\n\n  try {\n    await emitInboxOpsEvent('inbox_ops.email.received', {\n      emailId: email.id,\n      tenantId: settings.tenantId,\n      organizationId: settings.organizationId,\n      forwardedByAddress: parsed.from.email,\n      subject: parsed.subject,\n    })\n  } catch (eventError) {\n    console.error('[inbox_ops:webhook] Failed to emit email.received event:', eventError)\n  }\n\n  return NextResponse.json({ ok: true })\n}\n\nfunction rateLimitedResponse(retryAfterSeconds?: number): NextResponse {\n  return NextResponse.json(\n    { error: 'Rate limit exceeded' },\n    {\n      status: 429,\n      headers: retryAfterSeconds ? { 'Retry-After': String(retryAfterSeconds) } : undefined,\n    },\n  )\n}\n\nfunction extractToAddress(payload: Record<string, unknown>): string | null {\n  const to = payload.to\n  if (typeof to === 'string') {\n    const match = to.match(/<([^>]+)>/)\n    return match ? match[1].toLowerCase() : to.trim().toLowerCase()\n  }\n  if (Array.isArray(to) && to.length > 0) {\n    const first = to[0]\n    if (typeof first === 'string') {\n      const match = first.match(/<([^>]+)>/)\n      return match ? match[1].toLowerCase() : first.trim().toLowerCase()\n    }\n  }\n  return null\n}\n\nasync function checkDuplicate(\n  em: EntityManager,\n  settings: InboxSettings,\n  messageId: string | null | undefined,\n  contentHash: string | null | undefined,\n): Promise<boolean> {\n  const encScope = {\n    tenantId: settings.tenantId,\n    organizationId: settings.organizationId,\n  }\n  const whereBase = {\n    organizationId: settings.organizationId,\n    tenantId: settings.tenantId,\n    deletedAt: null,\n  }\n\n  if (messageId) {\n    const byMessageId = await findOneWithDecryption(em, InboxEmail, { ...whereBase, messageId }, undefined, encScope)\n    if (byMessageId) return true\n  }\n\n  if (contentHash) {\n    const byHash = await findOneWithDecryption(em, InboxEmail, { ...whereBase, contentHash }, undefined, encScope)\n    if (byHash) return true\n  }\n\n  return false\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'InboxOps',\n  summary: 'Inbound email webhook',\n  methods: {\n    POST: {\n      summary: 'Receive forwarded email from provider webhook',\n      description: 'Public endpoint \u2014 validated by provider HMAC signature or Resend/Svix signature. Rate limited per tenant.',\n      requestBody: {\n        contentType: 'application/json',\n        schema: z.object({\n          from: z.string().optional(),\n          to: z.union([z.string(), z.array(z.string())]).optional(),\n          subject: z.string().optional(),\n          text: z.string().optional(),\n          html: z.string().optional(),\n          messageId: z.string().optional(),\n          replyTo: z.string().optional(),\n          inReplyTo: z.string().optional(),\n          references: z.union([z.string(), z.array(z.string())]).optional(),\n        }),\n      },\n      responses: [\n        { status: 200, description: 'Email received and queued for processing' },\n        { status: 400, description: 'Invalid payload or signature' },\n        { status: 413, description: 'Payload too large' },\n        { status: 429, description: 'Rate limit exceeded' },\n        { status: 503, description: 'Webhook secret not configured' },\n      ],\n    },\n  },\n}\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,YAAY,uBAAuB;AAC5C,SAAS,SAAS;AAClB,SAAS,eAAe;AACxB,SAAS,cAAc;AACvB,SAAS,8BAA8B;AAIvC,SAAS,6BAA6B;AACtC,SAAS,eAAe,kBAAkB;AAC1C,SAAS,yBAAyB;AAClC,SAAS,sBAAsB;AAC/B,SAAS,yBAAyB;AAE3B,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,MAAM;AAC7B;AAEA,MAAM,mBAAmB,IAAI,OAAO;AACpC,MAAM,mBAAmB,IAAI,KAAK;AAElC,SAAS,iBAAiB,WAA4B;AACpD,MAAI,CAAC,UAAW,QAAO;AACvB,QAAM,cAAc,SAAS,WAAW,EAAE,IAAI;AAC9C,MAAI,MAAM,WAAW,EAAG,QAAO;AAC/B,SAAO,KAAK,IAAI,KAAK,IAAI,IAAI,WAAW,KAAK;AAC/C;AAEA,SAAS,oBACP,SACA,WACA,WACA,QACS;AACT,MAAI,CAAC,aAAa,CAAC,aAAa,CAAC,OAAQ,QAAO;AAEhD,MAAI,CAAC,iBAAiB,SAAS,EAAG,QAAO;AAEzC,QAAM,WAAW,WAAW,UAAU,MAAM,EACzC,OAAO,GAAG,SAAS,IAAI,OAAO,EAAE,EAChC,OAAO,KAAK;AACf,QAAM,WAAW,UAAU,WAAW,SAAS,IAC3C,UAAU,MAAM,UAAU,MAAM,IAChC;AAEJ,MAAI;AACF,QAAI,SAAS,WAAW,SAAS,OAAQ,QAAO;AAChD,WAAO;AAAA,MACL,OAAO,KAAK,UAAU,KAAK;AAAA,MAC3B,OAAO,KAAK,UAAU,KAAK;AAAA,IAC7B;AAAA,EACF,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAOA,SAAS,qBACP,SACA,WACA,WACA,SACS;AACT,aAAW,UAAU,SAAS;AAC5B,QAAI,UAAU,oBAAoB,SAAS,WAAW,WAAW,MAAM,EAAG,QAAO;AAAA,EACnF;AACA,SAAO;AACT;AAMA,SAAS,kBAAkB,QAAwB;AACjD,SAAO,WAAW,UAAU,2BAA2B,EAAE,OAAO,MAAM,EAAE,OAAO,KAAK,EAAE,MAAM,GAAG,EAAE;AACnG;AAEA,SAAS,oBACP,SACA,SACA,QACS;AACT,MAAI;AACF,UAAM,KAAK,IAAI,QAAQ,MAAM;AAC7B,OAAG,OAAO,SAAS;AAAA,MACjB,WAAW,QAAQ,SAAS;AAAA,MAC5B,kBAAkB,QAAQ,gBAAgB;AAAA,MAC1C,kBAAkB,QAAQ,gBAAgB;AAAA,IAC5C,CAAC;AACD,WAAO;AAAA,EACT,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,eAAe,iBAAiB,SAU7B;AACD,QAAM,SAAS,QAAQ,IAAI;AAC3B,MAAI,CAAC,OAAQ,OAAM,IAAI,MAAM,2DAA2D;AAExF,QAAM,SAAS,IAAI,OAAO,MAAM;AAChC,QAAM,EAAE,MAAM,MAAM,IAAI,MAAM,OAAO,OAAO,UAAU,IAAI,OAAO;AACjE,MAAI,SAAS,CAAC,MAAM;AAClB,UAAM,IAAI,MAAM,gCAAgC,OAAO,KAAK,OAAO,WAAW,eAAe,EAAE;AAAA,EACjG;AAEA,SAAO;AAAA,IACL,MAAM,KAAK;AAAA,IACX,IAAI,KAAK;AAAA,IACT,SAAS,KAAK;AAAA,IACd,MAAM,KAAK,QAAQ;AAAA,IACnB,MAAM,KAAK,QAAQ;AAAA,IACnB,WAAW,KAAK;AAAA,IAChB,SAAS,KAAK,WAAW,CAAC,KAAK;AAAA,IAC/B,WAAW,KAAK,UAAU,aAAa,KAAK;AAAA,IAC5C,YAAY,KAAK,UAAU,YAAY,GAAG,MAAM,KAAK,EAAE,OAAO,OAAO;AAAA,EACvE;AACF;AAMA,eAAe,eAAe,KAAc,SAG1C;AACA,QAAM,YAAY,IAAI,QAAQ,IAAI,qBAAqB;AACvD,QAAM,SAAS,IAAI,QAAQ,IAAI,SAAS;AAExC,MAAI,WAAW;AACb,UAAM,gBAAgB,QAAQ,IAAI;AAClC,QAAI,CAAC,eAAe;AAClB,cAAQ,MAAM,6DAA6D;AAC3E,aAAO,EAAE,IAAI,OAAO,UAAU,aAAa,KAAK,EAAE,OAAO,sBAAsB,GAAG,EAAE,QAAQ,IAAI,CAAC,EAAE;AAAA,IACrG;AACA,UAAM,YAAY,IAAI,QAAQ,IAAI,qBAAqB,KAAK;AAK5D,QAAI,CAAC,iBAAiB,SAAS,GAAG;AAChC,aAAO,EAAE,IAAI,OAAO,UAAU,aAAa,KAAK,EAAE,OAAO,oBAAoB,GAAG,EAAE,QAAQ,IAAI,CAAC,EAAE;AAAA,IACnG;AACA,QAAI;AACJ,QAAI;AACF,gBAAU,KAAK,MAAM,OAAO;AAAA,IAC9B,QAAQ;AACN,aAAO,EAAE,IAAI,OAAO,UAAU,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC,EAAE;AAAA,IAC9F;AACA,WAAO,EAAE,IAAI,MAAM,MAAM,EAAE,MAAM,UAAU,SAAS,WAAW,WAAW,UAAU,EAAE;AAAA,EACxF;AAEA,MAAI,QAAQ;AACV,UAAM,gBAAgB,QAAQ,IAAI;AAClC,QAAI,CAAC,eAAe;AAClB,cAAQ,MAAM,kEAAkE;AAChF,aAAO,EAAE,IAAI,OAAO,UAAU,aAAa,KAAK,EAAE,OAAO,sBAAsB,GAAG,EAAE,QAAQ,IAAI,CAAC,EAAE;AAAA,IACrG;AACA,UAAM,UAAkC;AAAA,MACtC,WAAW;AAAA,MACX,kBAAkB,IAAI,QAAQ,IAAI,gBAAgB,KAAK;AAAA,MACvD,kBAAkB,IAAI,QAAQ,IAAI,gBAAgB,KAAK;AAAA,IACzD;AACA,QAAI,CAAC,oBAAoB,SAAS,SAAS,aAAa,GAAG;AACzD,aAAO,EAAE,IAAI,OAAO,UAAU,aAAa,KAAK,EAAE,OAAO,oBAAoB,GAAG,EAAE,QAAQ,IAAI,CAAC,EAAE;AAAA,IACnG;AACA,QAAI;AACJ,QAAI;AACF,iBAAW,KAAK,MAAM,OAAO;AAAA,IAC/B,QAAQ;AACN,aAAO,EAAE,IAAI,OAAO,UAAU,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC,EAAE;AAAA,IAC9F;AACA,QAAI,SAAS,SAAS,kBAAkB;AACtC,aAAO,EAAE,IAAI,OAAO,UAAU,aAAa,KAAK,EAAE,IAAI,KAAK,CAAC,EAAE;AAAA,IAChE;AACA,UAAM,UAAU,SAAS,MAAM;AAC/B,QAAI,CAAC,SAAS;AACZ,aAAO,EAAE,IAAI,OAAO,UAAU,aAAa,KAAK,EAAE,OAAO,qCAAqC,GAAG,EAAE,QAAQ,IAAI,CAAC,EAAE;AAAA,IACpH;AACA,UAAM,cAAc,MAAM,iBAAiB,OAAO;AAClD,UAAM,KAAK,YAAY,MAAM,SAAS,MAAM,MAAM,CAAC;AACnD,WAAO,EAAE,IAAI,MAAM,MAAM,EAAE,MAAM,UAAU,aAAa,GAAG,EAAE;AAAA,EAC/D;AAEA,SAAO,EAAE,IAAI,OAAO,UAAU,aAAa,KAAK,EAAE,OAAO,4BAA4B,GAAG,EAAE,QAAQ,IAAI,CAAC,EAAE;AAC3G;AAEA,eAAsB,KAAK,KAAc;AACvC,QAAM,kBAAkB,QAAQ,QAAQ,IAAI,wBAAwB;AACpE,QAAM,kBAAkB,QAAQ,QAAQ,IAAI,6BAA6B;AACzE,MAAI,CAAC,mBAAmB,CAAC,iBAAiB;AACxC,YAAQ,MAAM,sGAAsG;AACpH,WAAO,aAAa,KAAK,EAAE,OAAO,sBAAsB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC5E;AAEA,QAAM,gBAAgB,SAAS,IAAI,QAAQ,IAAI,gBAAgB,KAAK,KAAK,EAAE;AAC3E,MAAI,gBAAgB,kBAAkB;AACpC,WAAO,aAAa,KAAK,EAAE,OAAO,oBAAoB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC1E;AAEA,MAAI;AACJ,MAAI;AACF,cAAU,MAAM,IAAI,KAAK;AAAA,EAC3B,QAAQ;AACN,WAAO,aAAa,KAAK,EAAE,OAAO,cAAc,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACpE;AAEA,MAAI,QAAQ,SAAS,kBAAkB;AACrC,WAAO,aAAa,KAAK,EAAE,OAAO,oBAAoB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC1E;AAEA,QAAM,WAAW,MAAM,eAAe,KAAK,OAAO;AAClD,MAAI,CAAC,SAAS,IAAI;AAChB,WAAO,SAAS;AAAA,EAClB;AAEA,MAAI;AACJ,MAAI;AAEJ,MAAI,SAAS,KAAK,SAAS,UAAU;AACnC,UAAM,UAAU,SAAS,KAAK;AAC9B,gBAAY,iBAAiB,OAAO;AACpC,iBAAa;AAAA,MACX,MAAM,QAAQ;AAAA,MACd,IAAI,QAAQ;AAAA,MACZ,SAAS,QAAQ;AAAA,MACjB,MAAM,QAAQ;AAAA,MACd,MAAM,QAAQ;AAAA,MACd,WAAW,QAAQ;AAAA,MACnB,SAAS,QAAQ;AAAA,MACjB,WAAW,QAAQ;AAAA,MACnB,YAAY,QAAQ;AAAA,IACtB;AAAA,EACF,OAAO;AACL,UAAM,EAAE,aAAa,GAAG,IAAI,SAAS;AACrC,gBAAY,GAAG,SAAS,IAAI,GAAG,CAAC,EAAE,YAAY,IAAI;AAClD,iBAAa;AAAA,MACX,MAAM,YAAY;AAAA,MAClB,IAAI,YAAY;AAAA,MAChB,SAAS,YAAY;AAAA,MACrB,MAAM,YAAY;AAAA,MAClB,MAAM,YAAY;AAAA,MAClB,WAAW,YAAY;AAAA,MACvB,SAAS,YAAY;AAAA,MACrB,WAAW,YAAY;AAAA,MACvB,YAAY,YAAY;AAAA,IAC1B;AAAA,EACF;AAEA,MAAI,CAAC,WAAW;AACd,WAAO,aAAa,KAAK,EAAE,OAAO,4BAA4B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAClF;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAE/C,MAAI,QAA8B;AAClC,MAAI;AACF,YAAQ,UAAU,QAAQ,OAAO;AAAA,EACnC,QAAQ;AAAA,EAGR;AASA,QAAM,kBAAkB,SAAS,KAAK,SAAS,WAC3C,kBAAkB,kBAAkB,QAAQ,IAAI,4BAA4B,EAAE,CAAC,KAC/E;AACJ,QAAM,kBAAkB,MAAM,eAAe,OAAO,eAAe;AACnE,MAAI,CAAC,gBAAgB,SAAS;AAC5B,WAAO,oBAAoB,gBAAgB,iBAAiB;AAAA,EAC9D;AAEA,QAAM,KAAM,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAI3D,QAAM,WAAW,MAAM;AAAA,IACrB;AAAA,IACA;AAAA,IACA;AAAA,MACE,cAAc,UAAU,YAAY;AAAA,MACpC,UAAU;AAAA,MACV,WAAW;AAAA,IACb;AAAA,EACF;AAOA,MAAI,SAAS,KAAK,SAAS,UAAU;AACnC,UAAM,eAAe,QAAQ,IAAI,4BAA4B;AAC7D,UAAM,cAAc,UAAU,iBAAiB;AAC/C,UAAM,oBAAoB,cAAc,CAAC,WAAW,IAAI,CAAC,YAAY;AACrE,UAAM,iBAAiB;AAAA,MACrB;AAAA,MACA,SAAS,KAAK;AAAA,MACd,SAAS,KAAK;AAAA,MACd;AAAA,IACF;AACA,QAAI,CAAC,gBAAgB;AACnB,aAAO,aAAa,KAAK,EAAE,OAAO,oBAAoB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC1E;AAAA,EACF;AAEA,MAAI,CAAC,UAAU;AACb,WAAO,aAAa,KAAK,EAAE,IAAI,KAAK,CAAC;AAAA,EACvC;AAIA,QAAM,kBAAkB,MAAM;AAAA,IAC5B;AAAA,IACA,kBAAkB,SAAS,QAAQ;AAAA,IACnC,SAAS;AAAA,EACX;AACA,MAAI,CAAC,gBAAgB,SAAS;AAC5B,WAAO,oBAAoB,gBAAgB,iBAAiB;AAAA,EAC9D;AAEA,QAAM,SAAS,kBAAkB,UAAU;AAE3C,QAAM,cAAc,MAAM,eAAe,IAAI,UAAU,OAAO,WAAW,OAAO,WAAW;AAC3F,MAAI,aAAa;AACf,QAAI;AACF,YAAM,kBAAkB,gCAAgC;AAAA,QACtD,UAAU,SAAS;AAAA,QACnB,gBAAgB,SAAS;AAAA,QACzB;AAAA,MACF,CAAC;AAAA,IACH,SAAS,YAAY;AACnB,cAAQ,MAAM,0DAA0D,UAAU;AAAA,IACpF;AACA,WAAO,aAAa,KAAK,EAAE,IAAI,KAAK,CAAC;AAAA,EACvC;AAEA,QAAM,cAAc,SAAS,QAAQ,IAAI,2BAA2B,UAAU,EAAE;AAChF,QAAM,cAAc,OAAO,YAAY,MAAM,GAAG,WAAW;AAE3D,QAAM,QAAQ,GAAG,OAAO,YAAY;AAAA,IAClC,WAAW,OAAO;AAAA,IAClB,aAAa,OAAO;AAAA,IACpB,oBAAoB,OAAO,KAAK;AAAA,IAChC,iBAAiB,OAAO,KAAK,QAAQ;AAAA,IACrC;AAAA,IACA,SAAS,OAAO;AAAA,IAChB,SAAS,OAAO;AAAA,IAChB,WAAW,OAAO;AAAA,IAClB,iBAAiB,OAAO;AAAA,IACxB,SAAS,OAAO;AAAA,IAChB,SAAS,OAAO;AAAA,IAChB;AAAA,IACA,gBAAgB,OAAO;AAAA,IACvB,kBAAkB,OAAO;AAAA,IACzB,YAAY,oBAAI,KAAK;AAAA,IACrB,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,gBAAgB,SAAS;AAAA,IACzB,UAAU,SAAS;AAAA,EACrB,CAAC;AAED,KAAG,QAAQ,KAAK;AAChB,QAAM,GAAG,MAAM;AAEf,MAAI;AACF,UAAM,kBAAkB,4BAA4B;AAAA,MAClD,SAAS,MAAM;AAAA,MACf,UAAU,SAAS;AAAA,MACnB,gBAAgB,SAAS;AAAA,MACzB,oBAAoB,OAAO,KAAK;AAAA,MAChC,SAAS,OAAO;AAAA,IAClB,CAAC;AAAA,EACH,SAAS,YAAY;AACnB,YAAQ,MAAM,4DAA4D,UAAU;AAAA,EACtF;AAEA,SAAO,aAAa,KAAK,EAAE,IAAI,KAAK,CAAC;AACvC;AAEA,SAAS,oBAAoB,mBAA0C;AACrE,SAAO,aAAa;AAAA,IAClB,EAAE,OAAO,sBAAsB;AAAA,IAC/B;AAAA,MACE,QAAQ;AAAA,MACR,SAAS,oBAAoB,EAAE,eAAe,OAAO,iBAAiB,EAAE,IAAI;AAAA,IAC9E;AAAA,EACF;AACF;AAEA,SAAS,iBAAiB,SAAiD;AACzE,QAAM,KAAK,QAAQ;AACnB,MAAI,OAAO,OAAO,UAAU;AAC1B,UAAM,QAAQ,GAAG,MAAM,WAAW;AAClC,WAAO,QAAQ,MAAM,CAAC,EAAE,YAAY,IAAI,GAAG,KAAK,EAAE,YAAY;AAAA,EAChE;AACA,MAAI,MAAM,QAAQ,EAAE,KAAK,GAAG,SAAS,GAAG;AACtC,UAAM,QAAQ,GAAG,CAAC;AAClB,QAAI,OAAO,UAAU,UAAU;AAC7B,YAAM,QAAQ,MAAM,MAAM,WAAW;AACrC,aAAO,QAAQ,MAAM,CAAC,EAAE,YAAY,IAAI,MAAM,KAAK,EAAE,YAAY;AAAA,IACnE;AAAA,EACF;AACA,SAAO;AACT;AAEA,eAAe,eACb,IACA,UACA,WACA,aACkB;AAClB,QAAM,WAAW;AAAA,IACf,UAAU,SAAS;AAAA,IACnB,gBAAgB,SAAS;AAAA,EAC3B;AACA,QAAM,YAAY;AAAA,IAChB,gBAAgB,SAAS;AAAA,IACzB,UAAU,SAAS;AAAA,IACnB,WAAW;AAAA,EACb;AAEA,MAAI,WAAW;AACb,UAAM,cAAc,MAAM,sBAAsB,IAAI,YAAY,EAAE,GAAG,WAAW,UAAU,GAAG,QAAW,QAAQ;AAChH,QAAI,YAAa,QAAO;AAAA,EAC1B;AAEA,MAAI,aAAa;AACf,UAAM,SAAS,MAAM,sBAAsB,IAAI,YAAY,EAAE,GAAG,WAAW,YAAY,GAAG,QAAW,QAAQ;AAC7G,QAAI,OAAQ,QAAO;AAAA,EACrB;AAEA,SAAO;AACT;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aAAa;AAAA,MACb,aAAa;AAAA,QACX,aAAa;AAAA,QACb,QAAQ,EAAE,OAAO;AAAA,UACf,MAAM,EAAE,OAAO,EAAE,SAAS;AAAA,UAC1B,IAAI,EAAE,MAAM,CAAC,EAAE,OAAO,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,SAAS;AAAA,UACxD,SAAS,EAAE,OAAO,EAAE,SAAS;AAAA,UAC7B,MAAM,EAAE,OAAO,EAAE,SAAS;AAAA,UAC1B,MAAM,EAAE,OAAO,EAAE,SAAS;AAAA,UAC1B,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,UAC/B,SAAS,EAAE,OAAO,EAAE,SAAS;AAAA,UAC7B,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,UAC/B,YAAY,EAAE,MAAM,CAAC,EAAE,OAAO,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,SAAS;AAAA,QAClE,CAAC;AAAA,MACH;AAAA,MACA,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,2CAA2C;AAAA,QACvE,EAAE,QAAQ,KAAK,aAAa,+BAA+B;AAAA,QAC3D,EAAE,QAAQ,KAAK,aAAa,oBAAoB;AAAA,QAChD,EAAE,QAAQ,KAAK,aAAa,sBAAsB;AAAA,QAClD,EAAE,QAAQ,KAAK,aAAa,gCAAgC;AAAA,MAC9D;AAAA,IACF;AAAA,EACF;AACF;",
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { createHmac, timingSafeEqual } from 'node:crypto'\nimport { z } from 'zod'\nimport { Webhook } from 'svix'\nimport { Resend } from 'resend'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport type { CacheStrategy } from '@open-mercato/cache'\nimport { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { InboxSettings, InboxEmail } from '../../data/entities'\nimport { parseInboundEmail } from '../../lib/emailParser'\nimport { checkRateLimit } from '../../lib/rateLimiter'\nimport { emitInboxOpsEvent } from '../../events'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('inbox_ops').child({ component: 'webhook' })\n\nexport const metadata = {\n  POST: { requireAuth: false },\n}\n\nconst MAX_PAYLOAD_SIZE = 2 * 1024 * 1024 // 2MB\nconst REPLAY_WINDOW_MS = 5 * 60 * 1000 // 5 minutes\n\nfunction isTimestampFresh(timestamp: string): boolean {\n  if (!timestamp) return false\n  const timestampMs = parseInt(timestamp, 10) * 1000\n  if (isNaN(timestampMs)) return false\n  return Math.abs(Date.now() - timestampMs) <= REPLAY_WINDOW_MS\n}\n\nfunction verifyHmacSignature(\n  payload: string,\n  signature: string,\n  timestamp: string,\n  secret: string,\n): boolean {\n  if (!signature || !timestamp || !secret) return false\n\n  if (!isTimestampFresh(timestamp)) return false\n\n  const expected = createHmac('sha256', secret)\n    .update(`${timestamp}.${payload}`)\n    .digest('hex')\n  const received = signature.startsWith('sha256=')\n    ? signature.slice('sha256='.length)\n    : signature\n\n  try {\n    if (received.length !== expected.length) return false\n    return timingSafeEqual(\n      Buffer.from(received, 'hex'),\n      Buffer.from(expected, 'hex'),\n    )\n  } catch {\n    return false\n  }\n}\n\n// True when the signature verifies against ANY of the candidate secrets. Used\n// to bind the inbound signature to the resolved tenant: once the target inbox\n// declares its own per-tenant secret, the global INBOX_OPS_WEBHOOK_SECRET is no\n// longer accepted for that inbox, so a holder of the global key alone cannot\n// forge mail into a tenant that opted into a dedicated secret.\nfunction verifyHmacAgainstAny(\n  payload: string,\n  signature: string,\n  timestamp: string,\n  secrets: string[],\n): boolean {\n  for (const secret of secrets) {\n    if (secret && verifyHmacSignature(payload, signature, timestamp, secret)) return true\n  }\n  return false\n}\n\n// Stable, non-reversible identifier for the pre-DB global rate-limit bucket.\n// Keying on the configured signing secret (rather than the attacker-set `to` or\n// the per-request signature) means the bucket is request-invariant for a given\n// secret, so rotating recipients or mutating the body cannot dilute the limit.\nfunction secretFingerprint(secret: string): string {\n  return createHmac('sha256', 'inbox_ops:rate_limit:salt').update(secret).digest('hex').slice(0, 32)\n}\n\nfunction verifySvixSignature(\n  rawBody: string,\n  headers: Record<string, string>,\n  secret: string,\n): boolean {\n  try {\n    const wh = new Webhook(secret)\n    wh.verify(rawBody, {\n      'svix-id': headers['svix-id'],\n      'svix-timestamp': headers['svix-timestamp'],\n      'svix-signature': headers['svix-signature'],\n    })\n    return true\n  } catch {\n    return false\n  }\n}\n\nasync function fetchResendEmail(emailId: string): Promise<{\n  from?: string\n  to?: string[]\n  subject?: string\n  text?: string\n  html?: string\n  messageId?: string\n  replyTo?: string\n  inReplyTo?: string\n  references?: string[]\n}> {\n  const apiKey = process.env.RESEND_API_KEY\n  if (!apiKey) throw new Error('RESEND_API_KEY is required to fetch Resend inbound emails')\n\n  const resend = new Resend(apiKey)\n  const { data, error } = await resend.emails.receiving.get(emailId)\n  if (error || !data) {\n    throw new Error(`Failed to fetch Resend email ${emailId}: ${error?.message || 'unknown error'}`)\n  }\n\n  return {\n    from: data.from,\n    to: data.to,\n    subject: data.subject,\n    text: data.text ?? undefined,\n    html: data.html ?? undefined,\n    messageId: data.message_id,\n    replyTo: data.reply_to?.[0] ?? undefined,\n    inReplyTo: data.headers?.['in-reply-to'] ?? undefined,\n    references: data.headers?.['references']?.split(/\\s+/).filter(Boolean),\n  }\n}\n\ntype VerifiedPayload =\n  | { kind: 'custom'; payload: Record<string, unknown>; signature: string; timestamp: string }\n  | { kind: 'resend'; emailFields: Awaited<ReturnType<typeof fetchResendEmail>>; to: string[] }\n\nasync function verifyAndParse(req: Request, rawBody: string): Promise<\n  | { ok: true; data: VerifiedPayload }\n  | { ok: false; response: NextResponse }\n> {\n  const customSig = req.headers.get('x-webhook-signature')\n  const svixId = req.headers.get('svix-id')\n\n  if (customSig) {\n    const webhookSecret = process.env.INBOX_OPS_WEBHOOK_SECRET\n    if (!webhookSecret) {\n      logger.error('INBOX_OPS_WEBHOOK_SECRET not configured')\n      return { ok: false, response: NextResponse.json({ error: 'Service unavailable' }, { status: 503 }) }\n    }\n    const timestamp = req.headers.get('x-webhook-timestamp') || ''\n    // Cheap, secret-independent gate first: reject replayed/stale requests\n    // before parsing. The HMAC itself is verified later, against the secret\n    // bound to the resolved inbox (see the POST handler), so a holder of the\n    // global secret cannot inject into a tenant that owns its own secret.\n    if (!isTimestampFresh(timestamp)) {\n      return { ok: false, response: NextResponse.json({ error: 'Invalid signature' }, { status: 400 }) }\n    }\n    let payload: Record<string, unknown>\n    try {\n      payload = JSON.parse(rawBody)\n    } catch {\n      return { ok: false, response: NextResponse.json({ error: 'Invalid JSON' }, { status: 400 }) }\n    }\n    return { ok: true, data: { kind: 'custom', payload, signature: customSig, timestamp } }\n  }\n\n  if (svixId) {\n    const signingSecret = process.env.RESEND_WEBHOOK_SIGNING_SECRET\n    if (!signingSecret) {\n      logger.error('RESEND_WEBHOOK_SIGNING_SECRET not configured')\n      return { ok: false, response: NextResponse.json({ error: 'Service unavailable' }, { status: 503 }) }\n    }\n    const headers: Record<string, string> = {\n      'svix-id': svixId,\n      'svix-timestamp': req.headers.get('svix-timestamp') || '',\n      'svix-signature': req.headers.get('svix-signature') || '',\n    }\n    if (!verifySvixSignature(rawBody, headers, signingSecret)) {\n      return { ok: false, response: NextResponse.json({ error: 'Invalid signature' }, { status: 400 }) }\n    }\n    let envelope: { type?: string; data?: { email_id?: string; from?: string; to?: string[] } }\n    try {\n      envelope = JSON.parse(rawBody)\n    } catch {\n      return { ok: false, response: NextResponse.json({ error: 'Invalid JSON' }, { status: 400 }) }\n    }\n    if (envelope.type !== 'email.received') {\n      return { ok: false, response: NextResponse.json({ ok: true }) }\n    }\n    const emailId = envelope.data?.email_id\n    if (!emailId) {\n      return { ok: false, response: NextResponse.json({ error: 'Missing email_id in Resend payload' }, { status: 400 }) }\n    }\n    const emailFields = await fetchResendEmail(emailId)\n    const to = emailFields.to || envelope.data?.to || []\n    return { ok: true, data: { kind: 'resend', emailFields, to } }\n  }\n\n  return { ok: false, response: NextResponse.json({ error: 'Missing signature headers' }, { status: 400 }) }\n}\n\nexport async function POST(req: Request) {\n  const hasCustomSecret = Boolean(process.env.INBOX_OPS_WEBHOOK_SECRET)\n  const hasResendSecret = Boolean(process.env.RESEND_WEBHOOK_SIGNING_SECRET)\n  if (!hasCustomSecret && !hasResendSecret) {\n    logger.error('Neither INBOX_OPS_WEBHOOK_SECRET nor RESEND_WEBHOOK_SIGNING_SECRET is configured')\n    return NextResponse.json({ error: 'Service unavailable' }, { status: 503 })\n  }\n\n  const contentLength = parseInt(req.headers.get('content-length') || '0', 10)\n  if (contentLength > MAX_PAYLOAD_SIZE) {\n    return NextResponse.json({ error: 'Payload too large' }, { status: 413 })\n  }\n\n  let rawBody: string\n  try {\n    rawBody = await req.text()\n  } catch {\n    return NextResponse.json({ error: 'Bad request' }, { status: 400 })\n  }\n\n  if (rawBody.length > MAX_PAYLOAD_SIZE) {\n    return NextResponse.json({ error: 'Payload too large' }, { status: 413 })\n  }\n\n  const verified = await verifyAndParse(req, rawBody)\n  if (!verified.ok) {\n    return verified.response\n  }\n\n  let toAddress: string | null\n  let emailInput: Parameters<typeof parseInboundEmail>[0]\n\n  if (verified.data.kind === 'custom') {\n    const payload = verified.data.payload\n    toAddress = extractToAddress(payload)\n    emailInput = {\n      from: payload.from as string | undefined,\n      to: payload.to as string | string[] | undefined,\n      subject: payload.subject as string | undefined,\n      text: payload.text as string | undefined,\n      html: payload.html as string | undefined,\n      messageId: payload.messageId as string | undefined,\n      replyTo: payload.replyTo as string | undefined,\n      inReplyTo: payload.inReplyTo as string | undefined,\n      references: payload.references as string | string[] | undefined,\n    }\n  } else {\n    const { emailFields, to } = verified.data\n    toAddress = to.length > 0 ? to[0].toLowerCase() : null\n    emailInput = {\n      from: emailFields.from,\n      to: emailFields.to,\n      subject: emailFields.subject,\n      text: emailFields.text,\n      html: emailFields.html,\n      messageId: emailFields.messageId,\n      replyTo: emailFields.replyTo,\n      inReplyTo: emailFields.inReplyTo,\n      references: emailFields.references,\n    }\n  }\n\n  if (!toAddress) {\n    return NextResponse.json({ error: 'Missing recipient address' }, { status: 400 })\n  }\n\n  const container = await createRequestContainer()\n\n  let cache: CacheStrategy | null = null\n  try {\n    cache = container.resolve('cache') as CacheStrategy\n  } catch {\n    // Cache not available \u2014 the limiter now fails closed with a process-local\n    // bucket instead of waving the request through.\n  }\n\n  // Pre-DB global bucket keyed on the configured signing secret (custom) or the\n  // static Resend path, NOT on the attacker-controllable `to` and NOT on the\n  // per-request signature (which mutates with timestamp/body, so it would mint a\n  // fresh bucket every request and never throttle). The per-tenant secret lives\n  // behind the encrypted-column lookup, so the only secret available here without\n  // a DB hit is the global one \u2014 keying on it caps total inbound volume for the\n  // custom path and runs BEFORE the lookup so a flood cannot amplify DB work.\n  const globalBucketKey = verified.data.kind === 'custom'\n    ? `webhook:secret:${secretFingerprint(process.env.INBOX_OPS_WEBHOOK_SECRET || '')}`\n    : 'webhook:resend'\n  const globalRateCheck = await checkRateLimit(cache, globalBucketKey)\n  if (!globalRateCheck.allowed) {\n    return rateLimitedResponse(globalRateCheck.retryAfterSeconds)\n  }\n\n  const em = (container.resolve('em') as EntityManager).fork()\n\n  // No explicit scope: decryptEntitiesWithFallbackScope reads tenant/org off the\n  // resolved row, which is exactly what binds webhook_secret to its own tenant.\n  const settings = await findOneWithDecryption(\n    em,\n    InboxSettings,\n    {\n      inboxAddress: toAddress.toLowerCase(),\n      isActive: true,\n      deletedAt: null,\n    },\n  )\n\n  // Final HMAC verification for the custom provider path: bind the signature to\n  // the resolved tenant. When the inbox declares its own secret, ONLY that\n  // secret is accepted; otherwise the global secret is accepted (back-compat).\n  // For an unknown `to` we still require the global secret so the endpoint never\n  // behaves as an unauthenticated probe oracle.\n  if (verified.data.kind === 'custom') {\n    const globalSecret = process.env.INBOX_OPS_WEBHOOK_SECRET || ''\n    const inboxSecret = settings?.webhookSecret || ''\n    const acceptableSecrets = inboxSecret ? [inboxSecret] : [globalSecret]\n    const signatureValid = verifyHmacAgainstAny(\n      rawBody,\n      verified.data.signature,\n      verified.data.timestamp,\n      acceptableSecrets,\n    )\n    if (!signatureValid) {\n      return NextResponse.json({ error: 'Invalid signature' }, { status: 400 })\n    }\n  }\n\n  if (!settings) {\n    return NextResponse.json({ ok: true })\n  }\n\n  // Per-tenant bucket keyed on the RESOLVED tenant (not the raw `to`), so it\n  // cannot be diluted by alias addresses that map to the same inbox.\n  const tenantRateCheck = await checkRateLimit(\n    cache,\n    `webhook:tenant:${settings.tenantId}`,\n    settings.tenantId,\n  )\n  if (!tenantRateCheck.allowed) {\n    return rateLimitedResponse(tenantRateCheck.retryAfterSeconds)\n  }\n\n  const parsed = parseInboundEmail(emailInput)\n\n  const isDuplicate = await checkDuplicate(em, settings, parsed.messageId, parsed.contentHash)\n  if (isDuplicate) {\n    try {\n      await emitInboxOpsEvent('inbox_ops.email.deduplicated', {\n        tenantId: settings.tenantId,\n        organizationId: settings.organizationId,\n        toAddress,\n      })\n    } catch (eventError) {\n      logger.error('Failed to emit deduplicated event', { err: eventError })\n    }\n    return NextResponse.json({ ok: true })\n  }\n\n  const maxTextSize = parseInt(process.env.INBOX_OPS_MAX_TEXT_SIZE || '204800', 10)\n  const cleanedText = parsed.cleanedText.slice(0, maxTextSize)\n\n  const email = em.create(InboxEmail, {\n    messageId: parsed.messageId,\n    contentHash: parsed.contentHash,\n    forwardedByAddress: parsed.from.email,\n    forwardedByName: parsed.from.name || null,\n    toAddress,\n    subject: parsed.subject,\n    replyTo: parsed.replyTo,\n    inReplyTo: parsed.inReplyTo,\n    emailReferences: parsed.references,\n    rawText: parsed.rawText,\n    rawHtml: parsed.rawHtml,\n    cleanedText,\n    threadMessages: parsed.threadMessages,\n    detectedLanguage: parsed.detectedLanguage,\n    receivedAt: new Date(),\n    status: 'received' as const,\n    isActive: true,\n    organizationId: settings.organizationId,\n    tenantId: settings.tenantId,\n  })\n\n  em.persist(email)\n  await em.flush()\n\n  try {\n    await emitInboxOpsEvent('inbox_ops.email.received', {\n      emailId: email.id,\n      tenantId: settings.tenantId,\n      organizationId: settings.organizationId,\n      forwardedByAddress: parsed.from.email,\n      subject: parsed.subject,\n    })\n  } catch (eventError) {\n    logger.error('Failed to emit email.received event', { err: eventError })\n  }\n\n  return NextResponse.json({ ok: true })\n}\n\nfunction rateLimitedResponse(retryAfterSeconds?: number): NextResponse {\n  return NextResponse.json(\n    { error: 'Rate limit exceeded' },\n    {\n      status: 429,\n      headers: retryAfterSeconds ? { 'Retry-After': String(retryAfterSeconds) } : undefined,\n    },\n  )\n}\n\nfunction extractToAddress(payload: Record<string, unknown>): string | null {\n  const to = payload.to\n  if (typeof to === 'string') {\n    const match = to.match(/<([^>]+)>/)\n    return match ? match[1].toLowerCase() : to.trim().toLowerCase()\n  }\n  if (Array.isArray(to) && to.length > 0) {\n    const first = to[0]\n    if (typeof first === 'string') {\n      const match = first.match(/<([^>]+)>/)\n      return match ? match[1].toLowerCase() : first.trim().toLowerCase()\n    }\n  }\n  return null\n}\n\nasync function checkDuplicate(\n  em: EntityManager,\n  settings: InboxSettings,\n  messageId: string | null | undefined,\n  contentHash: string | null | undefined,\n): Promise<boolean> {\n  const encScope = {\n    tenantId: settings.tenantId,\n    organizationId: settings.organizationId,\n  }\n  const whereBase = {\n    organizationId: settings.organizationId,\n    tenantId: settings.tenantId,\n    deletedAt: null,\n  }\n\n  if (messageId) {\n    const byMessageId = await findOneWithDecryption(em, InboxEmail, { ...whereBase, messageId }, undefined, encScope)\n    if (byMessageId) return true\n  }\n\n  if (contentHash) {\n    const byHash = await findOneWithDecryption(em, InboxEmail, { ...whereBase, contentHash }, undefined, encScope)\n    if (byHash) return true\n  }\n\n  return false\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'InboxOps',\n  summary: 'Inbound email webhook',\n  methods: {\n    POST: {\n      summary: 'Receive forwarded email from provider webhook',\n      description: 'Public endpoint \u2014 validated by provider HMAC signature or Resend/Svix signature. Rate limited per tenant.',\n      requestBody: {\n        contentType: 'application/json',\n        schema: z.object({\n          from: z.string().optional(),\n          to: z.union([z.string(), z.array(z.string())]).optional(),\n          subject: z.string().optional(),\n          text: z.string().optional(),\n          html: z.string().optional(),\n          messageId: z.string().optional(),\n          replyTo: z.string().optional(),\n          inReplyTo: z.string().optional(),\n          references: z.union([z.string(), z.array(z.string())]).optional(),\n        }),\n      },\n      responses: [\n        { status: 200, description: 'Email received and queued for processing' },\n        { status: 400, description: 'Invalid payload or signature' },\n        { status: 413, description: 'Payload too large' },\n        { status: 429, description: 'Rate limit exceeded' },\n        { status: 503, description: 'Webhook secret not configured' },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,YAAY,uBAAuB;AAC5C,SAAS,SAAS;AAClB,SAAS,eAAe;AACxB,SAAS,cAAc;AACvB,SAAS,8BAA8B;AAIvC,SAAS,6BAA6B;AACtC,SAAS,eAAe,kBAAkB;AAC1C,SAAS,yBAAyB;AAClC,SAAS,sBAAsB;AAC/B,SAAS,yBAAyB;AAClC,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,WAAW,EAAE,MAAM,EAAE,WAAW,UAAU,CAAC;AAEhE,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,MAAM;AAC7B;AAEA,MAAM,mBAAmB,IAAI,OAAO;AACpC,MAAM,mBAAmB,IAAI,KAAK;AAElC,SAAS,iBAAiB,WAA4B;AACpD,MAAI,CAAC,UAAW,QAAO;AACvB,QAAM,cAAc,SAAS,WAAW,EAAE,IAAI;AAC9C,MAAI,MAAM,WAAW,EAAG,QAAO;AAC/B,SAAO,KAAK,IAAI,KAAK,IAAI,IAAI,WAAW,KAAK;AAC/C;AAEA,SAAS,oBACP,SACA,WACA,WACA,QACS;AACT,MAAI,CAAC,aAAa,CAAC,aAAa,CAAC,OAAQ,QAAO;AAEhD,MAAI,CAAC,iBAAiB,SAAS,EAAG,QAAO;AAEzC,QAAM,WAAW,WAAW,UAAU,MAAM,EACzC,OAAO,GAAG,SAAS,IAAI,OAAO,EAAE,EAChC,OAAO,KAAK;AACf,QAAM,WAAW,UAAU,WAAW,SAAS,IAC3C,UAAU,MAAM,UAAU,MAAM,IAChC;AAEJ,MAAI;AACF,QAAI,SAAS,WAAW,SAAS,OAAQ,QAAO;AAChD,WAAO;AAAA,MACL,OAAO,KAAK,UAAU,KAAK;AAAA,MAC3B,OAAO,KAAK,UAAU,KAAK;AAAA,IAC7B;AAAA,EACF,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAOA,SAAS,qBACP,SACA,WACA,WACA,SACS;AACT,aAAW,UAAU,SAAS;AAC5B,QAAI,UAAU,oBAAoB,SAAS,WAAW,WAAW,MAAM,EAAG,QAAO;AAAA,EACnF;AACA,SAAO;AACT;AAMA,SAAS,kBAAkB,QAAwB;AACjD,SAAO,WAAW,UAAU,2BAA2B,EAAE,OAAO,MAAM,EAAE,OAAO,KAAK,EAAE,MAAM,GAAG,EAAE;AACnG;AAEA,SAAS,oBACP,SACA,SACA,QACS;AACT,MAAI;AACF,UAAM,KAAK,IAAI,QAAQ,MAAM;AAC7B,OAAG,OAAO,SAAS;AAAA,MACjB,WAAW,QAAQ,SAAS;AAAA,MAC5B,kBAAkB,QAAQ,gBAAgB;AAAA,MAC1C,kBAAkB,QAAQ,gBAAgB;AAAA,IAC5C,CAAC;AACD,WAAO;AAAA,EACT,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,eAAe,iBAAiB,SAU7B;AACD,QAAM,SAAS,QAAQ,IAAI;AAC3B,MAAI,CAAC,OAAQ,OAAM,IAAI,MAAM,2DAA2D;AAExF,QAAM,SAAS,IAAI,OAAO,MAAM;AAChC,QAAM,EAAE,MAAM,MAAM,IAAI,MAAM,OAAO,OAAO,UAAU,IAAI,OAAO;AACjE,MAAI,SAAS,CAAC,MAAM;AAClB,UAAM,IAAI,MAAM,gCAAgC,OAAO,KAAK,OAAO,WAAW,eAAe,EAAE;AAAA,EACjG;AAEA,SAAO;AAAA,IACL,MAAM,KAAK;AAAA,IACX,IAAI,KAAK;AAAA,IACT,SAAS,KAAK;AAAA,IACd,MAAM,KAAK,QAAQ;AAAA,IACnB,MAAM,KAAK,QAAQ;AAAA,IACnB,WAAW,KAAK;AAAA,IAChB,SAAS,KAAK,WAAW,CAAC,KAAK;AAAA,IAC/B,WAAW,KAAK,UAAU,aAAa,KAAK;AAAA,IAC5C,YAAY,KAAK,UAAU,YAAY,GAAG,MAAM,KAAK,EAAE,OAAO,OAAO;AAAA,EACvE;AACF;AAMA,eAAe,eAAe,KAAc,SAG1C;AACA,QAAM,YAAY,IAAI,QAAQ,IAAI,qBAAqB;AACvD,QAAM,SAAS,IAAI,QAAQ,IAAI,SAAS;AAExC,MAAI,WAAW;AACb,UAAM,gBAAgB,QAAQ,IAAI;AAClC,QAAI,CAAC,eAAe;AAClB,aAAO,MAAM,yCAAyC;AACtD,aAAO,EAAE,IAAI,OAAO,UAAU,aAAa,KAAK,EAAE,OAAO,sBAAsB,GAAG,EAAE,QAAQ,IAAI,CAAC,EAAE;AAAA,IACrG;AACA,UAAM,YAAY,IAAI,QAAQ,IAAI,qBAAqB,KAAK;AAK5D,QAAI,CAAC,iBAAiB,SAAS,GAAG;AAChC,aAAO,EAAE,IAAI,OAAO,UAAU,aAAa,KAAK,EAAE,OAAO,oBAAoB,GAAG,EAAE,QAAQ,IAAI,CAAC,EAAE;AAAA,IACnG;AACA,QAAI;AACJ,QAAI;AACF,gBAAU,KAAK,MAAM,OAAO;AAAA,IAC9B,QAAQ;AACN,aAAO,EAAE,IAAI,OAAO,UAAU,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC,EAAE;AAAA,IAC9F;AACA,WAAO,EAAE,IAAI,MAAM,MAAM,EAAE,MAAM,UAAU,SAAS,WAAW,WAAW,UAAU,EAAE;AAAA,EACxF;AAEA,MAAI,QAAQ;AACV,UAAM,gBAAgB,QAAQ,IAAI;AAClC,QAAI,CAAC,eAAe;AAClB,aAAO,MAAM,8CAA8C;AAC3D,aAAO,EAAE,IAAI,OAAO,UAAU,aAAa,KAAK,EAAE,OAAO,sBAAsB,GAAG,EAAE,QAAQ,IAAI,CAAC,EAAE;AAAA,IACrG;AACA,UAAM,UAAkC;AAAA,MACtC,WAAW;AAAA,MACX,kBAAkB,IAAI,QAAQ,IAAI,gBAAgB,KAAK;AAAA,MACvD,kBAAkB,IAAI,QAAQ,IAAI,gBAAgB,KAAK;AAAA,IACzD;AACA,QAAI,CAAC,oBAAoB,SAAS,SAAS,aAAa,GAAG;AACzD,aAAO,EAAE,IAAI,OAAO,UAAU,aAAa,KAAK,EAAE,OAAO,oBAAoB,GAAG,EAAE,QAAQ,IAAI,CAAC,EAAE;AAAA,IACnG;AACA,QAAI;AACJ,QAAI;AACF,iBAAW,KAAK,MAAM,OAAO;AAAA,IAC/B,QAAQ;AACN,aAAO,EAAE,IAAI,OAAO,UAAU,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC,EAAE;AAAA,IAC9F;AACA,QAAI,SAAS,SAAS,kBAAkB;AACtC,aAAO,EAAE,IAAI,OAAO,UAAU,aAAa,KAAK,EAAE,IAAI,KAAK,CAAC,EAAE;AAAA,IAChE;AACA,UAAM,UAAU,SAAS,MAAM;AAC/B,QAAI,CAAC,SAAS;AACZ,aAAO,EAAE,IAAI,OAAO,UAAU,aAAa,KAAK,EAAE,OAAO,qCAAqC,GAAG,EAAE,QAAQ,IAAI,CAAC,EAAE;AAAA,IACpH;AACA,UAAM,cAAc,MAAM,iBAAiB,OAAO;AAClD,UAAM,KAAK,YAAY,MAAM,SAAS,MAAM,MAAM,CAAC;AACnD,WAAO,EAAE,IAAI,MAAM,MAAM,EAAE,MAAM,UAAU,aAAa,GAAG,EAAE;AAAA,EAC/D;AAEA,SAAO,EAAE,IAAI,OAAO,UAAU,aAAa,KAAK,EAAE,OAAO,4BAA4B,GAAG,EAAE,QAAQ,IAAI,CAAC,EAAE;AAC3G;AAEA,eAAsB,KAAK,KAAc;AACvC,QAAM,kBAAkB,QAAQ,QAAQ,IAAI,wBAAwB;AACpE,QAAM,kBAAkB,QAAQ,QAAQ,IAAI,6BAA6B;AACzE,MAAI,CAAC,mBAAmB,CAAC,iBAAiB;AACxC,WAAO,MAAM,kFAAkF;AAC/F,WAAO,aAAa,KAAK,EAAE,OAAO,sBAAsB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC5E;AAEA,QAAM,gBAAgB,SAAS,IAAI,QAAQ,IAAI,gBAAgB,KAAK,KAAK,EAAE;AAC3E,MAAI,gBAAgB,kBAAkB;AACpC,WAAO,aAAa,KAAK,EAAE,OAAO,oBAAoB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC1E;AAEA,MAAI;AACJ,MAAI;AACF,cAAU,MAAM,IAAI,KAAK;AAAA,EAC3B,QAAQ;AACN,WAAO,aAAa,KAAK,EAAE,OAAO,cAAc,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACpE;AAEA,MAAI,QAAQ,SAAS,kBAAkB;AACrC,WAAO,aAAa,KAAK,EAAE,OAAO,oBAAoB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC1E;AAEA,QAAM,WAAW,MAAM,eAAe,KAAK,OAAO;AAClD,MAAI,CAAC,SAAS,IAAI;AAChB,WAAO,SAAS;AAAA,EAClB;AAEA,MAAI;AACJ,MAAI;AAEJ,MAAI,SAAS,KAAK,SAAS,UAAU;AACnC,UAAM,UAAU,SAAS,KAAK;AAC9B,gBAAY,iBAAiB,OAAO;AACpC,iBAAa;AAAA,MACX,MAAM,QAAQ;AAAA,MACd,IAAI,QAAQ;AAAA,MACZ,SAAS,QAAQ;AAAA,MACjB,MAAM,QAAQ;AAAA,MACd,MAAM,QAAQ;AAAA,MACd,WAAW,QAAQ;AAAA,MACnB,SAAS,QAAQ;AAAA,MACjB,WAAW,QAAQ;AAAA,MACnB,YAAY,QAAQ;AAAA,IACtB;AAAA,EACF,OAAO;AACL,UAAM,EAAE,aAAa,GAAG,IAAI,SAAS;AACrC,gBAAY,GAAG,SAAS,IAAI,GAAG,CAAC,EAAE,YAAY,IAAI;AAClD,iBAAa;AAAA,MACX,MAAM,YAAY;AAAA,MAClB,IAAI,YAAY;AAAA,MAChB,SAAS,YAAY;AAAA,MACrB,MAAM,YAAY;AAAA,MAClB,MAAM,YAAY;AAAA,MAClB,WAAW,YAAY;AAAA,MACvB,SAAS,YAAY;AAAA,MACrB,WAAW,YAAY;AAAA,MACvB,YAAY,YAAY;AAAA,IAC1B;AAAA,EACF;AAEA,MAAI,CAAC,WAAW;AACd,WAAO,aAAa,KAAK,EAAE,OAAO,4BAA4B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAClF;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAE/C,MAAI,QAA8B;AAClC,MAAI;AACF,YAAQ,UAAU,QAAQ,OAAO;AAAA,EACnC,QAAQ;AAAA,EAGR;AASA,QAAM,kBAAkB,SAAS,KAAK,SAAS,WAC3C,kBAAkB,kBAAkB,QAAQ,IAAI,4BAA4B,EAAE,CAAC,KAC/E;AACJ,QAAM,kBAAkB,MAAM,eAAe,OAAO,eAAe;AACnE,MAAI,CAAC,gBAAgB,SAAS;AAC5B,WAAO,oBAAoB,gBAAgB,iBAAiB;AAAA,EAC9D;AAEA,QAAM,KAAM,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAI3D,QAAM,WAAW,MAAM;AAAA,IACrB;AAAA,IACA;AAAA,IACA;AAAA,MACE,cAAc,UAAU,YAAY;AAAA,MACpC,UAAU;AAAA,MACV,WAAW;AAAA,IACb;AAAA,EACF;AAOA,MAAI,SAAS,KAAK,SAAS,UAAU;AACnC,UAAM,eAAe,QAAQ,IAAI,4BAA4B;AAC7D,UAAM,cAAc,UAAU,iBAAiB;AAC/C,UAAM,oBAAoB,cAAc,CAAC,WAAW,IAAI,CAAC,YAAY;AACrE,UAAM,iBAAiB;AAAA,MACrB;AAAA,MACA,SAAS,KAAK;AAAA,MACd,SAAS,KAAK;AAAA,MACd;AAAA,IACF;AACA,QAAI,CAAC,gBAAgB;AACnB,aAAO,aAAa,KAAK,EAAE,OAAO,oBAAoB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC1E;AAAA,EACF;AAEA,MAAI,CAAC,UAAU;AACb,WAAO,aAAa,KAAK,EAAE,IAAI,KAAK,CAAC;AAAA,EACvC;AAIA,QAAM,kBAAkB,MAAM;AAAA,IAC5B;AAAA,IACA,kBAAkB,SAAS,QAAQ;AAAA,IACnC,SAAS;AAAA,EACX;AACA,MAAI,CAAC,gBAAgB,SAAS;AAC5B,WAAO,oBAAoB,gBAAgB,iBAAiB;AAAA,EAC9D;AAEA,QAAM,SAAS,kBAAkB,UAAU;AAE3C,QAAM,cAAc,MAAM,eAAe,IAAI,UAAU,OAAO,WAAW,OAAO,WAAW;AAC3F,MAAI,aAAa;AACf,QAAI;AACF,YAAM,kBAAkB,gCAAgC;AAAA,QACtD,UAAU,SAAS;AAAA,QACnB,gBAAgB,SAAS;AAAA,QACzB;AAAA,MACF,CAAC;AAAA,IACH,SAAS,YAAY;AACnB,aAAO,MAAM,qCAAqC,EAAE,KAAK,WAAW,CAAC;AAAA,IACvE;AACA,WAAO,aAAa,KAAK,EAAE,IAAI,KAAK,CAAC;AAAA,EACvC;AAEA,QAAM,cAAc,SAAS,QAAQ,IAAI,2BAA2B,UAAU,EAAE;AAChF,QAAM,cAAc,OAAO,YAAY,MAAM,GAAG,WAAW;AAE3D,QAAM,QAAQ,GAAG,OAAO,YAAY;AAAA,IAClC,WAAW,OAAO;AAAA,IAClB,aAAa,OAAO;AAAA,IACpB,oBAAoB,OAAO,KAAK;AAAA,IAChC,iBAAiB,OAAO,KAAK,QAAQ;AAAA,IACrC;AAAA,IACA,SAAS,OAAO;AAAA,IAChB,SAAS,OAAO;AAAA,IAChB,WAAW,OAAO;AAAA,IAClB,iBAAiB,OAAO;AAAA,IACxB,SAAS,OAAO;AAAA,IAChB,SAAS,OAAO;AAAA,IAChB;AAAA,IACA,gBAAgB,OAAO;AAAA,IACvB,kBAAkB,OAAO;AAAA,IACzB,YAAY,oBAAI,KAAK;AAAA,IACrB,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,gBAAgB,SAAS;AAAA,IACzB,UAAU,SAAS;AAAA,EACrB,CAAC;AAED,KAAG,QAAQ,KAAK;AAChB,QAAM,GAAG,MAAM;AAEf,MAAI;AACF,UAAM,kBAAkB,4BAA4B;AAAA,MAClD,SAAS,MAAM;AAAA,MACf,UAAU,SAAS;AAAA,MACnB,gBAAgB,SAAS;AAAA,MACzB,oBAAoB,OAAO,KAAK;AAAA,MAChC,SAAS,OAAO;AAAA,IAClB,CAAC;AAAA,EACH,SAAS,YAAY;AACnB,WAAO,MAAM,uCAAuC,EAAE,KAAK,WAAW,CAAC;AAAA,EACzE;AAEA,SAAO,aAAa,KAAK,EAAE,IAAI,KAAK,CAAC;AACvC;AAEA,SAAS,oBAAoB,mBAA0C;AACrE,SAAO,aAAa;AAAA,IAClB,EAAE,OAAO,sBAAsB;AAAA,IAC/B;AAAA,MACE,QAAQ;AAAA,MACR,SAAS,oBAAoB,EAAE,eAAe,OAAO,iBAAiB,EAAE,IAAI;AAAA,IAC9E;AAAA,EACF;AACF;AAEA,SAAS,iBAAiB,SAAiD;AACzE,QAAM,KAAK,QAAQ;AACnB,MAAI,OAAO,OAAO,UAAU;AAC1B,UAAM,QAAQ,GAAG,MAAM,WAAW;AAClC,WAAO,QAAQ,MAAM,CAAC,EAAE,YAAY,IAAI,GAAG,KAAK,EAAE,YAAY;AAAA,EAChE;AACA,MAAI,MAAM,QAAQ,EAAE,KAAK,GAAG,SAAS,GAAG;AACtC,UAAM,QAAQ,GAAG,CAAC;AAClB,QAAI,OAAO,UAAU,UAAU;AAC7B,YAAM,QAAQ,MAAM,MAAM,WAAW;AACrC,aAAO,QAAQ,MAAM,CAAC,EAAE,YAAY,IAAI,MAAM,KAAK,EAAE,YAAY;AAAA,IACnE;AAAA,EACF;AACA,SAAO;AACT;AAEA,eAAe,eACb,IACA,UACA,WACA,aACkB;AAClB,QAAM,WAAW;AAAA,IACf,UAAU,SAAS;AAAA,IACnB,gBAAgB,SAAS;AAAA,EAC3B;AACA,QAAM,YAAY;AAAA,IAChB,gBAAgB,SAAS;AAAA,IACzB,UAAU,SAAS;AAAA,IACnB,WAAW;AAAA,EACb;AAEA,MAAI,WAAW;AACb,UAAM,cAAc,MAAM,sBAAsB,IAAI,YAAY,EAAE,GAAG,WAAW,UAAU,GAAG,QAAW,QAAQ;AAChH,QAAI,YAAa,QAAO;AAAA,EAC1B;AAEA,MAAI,aAAa;AACf,UAAM,SAAS,MAAM,sBAAsB,IAAI,YAAY,EAAE,GAAG,WAAW,YAAY,GAAG,QAAW,QAAQ;AAC7G,QAAI,OAAQ,QAAO;AAAA,EACrB;AAEA,SAAO;AACT;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aAAa;AAAA,MACb,aAAa;AAAA,QACX,aAAa;AAAA,QACb,QAAQ,EAAE,OAAO;AAAA,UACf,MAAM,EAAE,OAAO,EAAE,SAAS;AAAA,UAC1B,IAAI,EAAE,MAAM,CAAC,EAAE,OAAO,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,SAAS;AAAA,UACxD,SAAS,EAAE,OAAO,EAAE,SAAS;AAAA,UAC7B,MAAM,EAAE,OAAO,EAAE,SAAS;AAAA,UAC1B,MAAM,EAAE,OAAO,EAAE,SAAS;AAAA,UAC1B,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,UAC/B,SAAS,EAAE,OAAO,EAAE,SAAS;AAAA,UAC7B,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,UAC/B,YAAY,EAAE,MAAM,CAAC,EAAE,OAAO,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,SAAS;AAAA,QAClE,CAAC;AAAA,MACH;AAAA,MACA,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,2CAA2C;AAAA,QACvE,EAAE,QAAQ,KAAK,aAAa,+BAA+B;AAAA,QAC3D,EAAE,QAAQ,KAAK,aAAa,oBAAoB;AAAA,QAChD,EAAE,QAAQ,KAAK,aAAa,sBAAsB;AAAA,QAClD,EAAE,QAAQ,KAAK,aAAa,gCAAgC;AAAA,MAC9D;AAAA,IACF;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/modules/inbox_ops/lib/cache.js

@@ -1,3 +1,5 @@
+import { createLogger } from "@open-mercato/shared/lib/logger";
+const logger = createLogger("inbox_ops").child({ component: "cache" });
 const COUNTS_CACHE_PREFIX = "inbox_ops:counts";
 const SETTINGS_CACHE_PREFIX = "inbox_ops:settings";
 const COUNTS_CACHE_TTL_MS = 30 * 1e3;
@@ -20,7 +22,7 @@ async function invalidateCountsCache(cache, tenantId) {
   try {
     await cache.deleteByTags([tag]);
   } catch (err) {
-    console.warn("[inbox_ops:cache] Failed to invalidate counts cache", err);
+    logger.warn("Failed to invalidate counts cache", { err });
   }
 }
 async function invalidateSettingsCache(cache, tenantId) {
@@ -29,7 +31,7 @@ async function invalidateSettingsCache(cache, tenantId) {
   try {
     await cache.deleteByTags([tag]);
   } catch (err) {
-    console.warn("[inbox_ops:cache] Failed to invalidate settings cache", err);
+    logger.warn("Failed to invalidate settings cache", { err });
   }
 }
 function resolveCache(container) {

package/dist/modules/inbox_ops/lib/cache.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/inbox_ops/lib/cache.ts"],
-  "sourcesContent": ["import type { CacheStrategy } from '@open-mercato/cache'\n\nconst COUNTS_CACHE_PREFIX = 'inbox_ops:counts'\nconst SETTINGS_CACHE_PREFIX = 'inbox_ops:settings'\n\n// Cache key and tag share the same value intentionally \u2014 each tenant has exactly\n// one counts entry and one settings entry, so a 1:1 key-to-tag mapping suffices.\n\nexport const COUNTS_CACHE_TTL_MS = 30 * 1000\nexport const SETTINGS_CACHE_TTL_MS = 5 * 60 * 1000\n\nexport function createCountsCacheKey(tenantId: string): string {\n  return `${COUNTS_CACHE_PREFIX}:${tenantId}`\n}\n\nexport function createCountsCacheTag(tenantId: string): string {\n  return `${COUNTS_CACHE_PREFIX}:${tenantId}`\n}\n\nexport function createSettingsCacheKey(tenantId: string): string {\n  return `${SETTINGS_CACHE_PREFIX}:${tenantId}`\n}\n\nexport function createSettingsCacheTag(tenantId: string): string {\n  return `${SETTINGS_CACHE_PREFIX}:${tenantId}`\n}\n\nexport async function invalidateCountsCache(\n  cache: CacheStrategy | null | undefined,\n  tenantId: string,\n): Promise<void> {\n  if (!cache?.deleteByTags) return\n  const tag = createCountsCacheTag(tenantId)\n  try {\n    await cache.deleteByTags([tag])\n  } catch (err) {\n    console.warn('[inbox_ops:cache] Failed to invalidate counts cache', err)\n  }\n}\n\nexport async function invalidateSettingsCache(\n  cache: CacheStrategy | null | undefined,\n  tenantId: string,\n): Promise<void> {\n  if (!cache?.deleteByTags) return\n  const tag = createSettingsCacheTag(tenantId)\n  try {\n    await cache.deleteByTags([tag])\n  } catch (err) {\n    console.warn('[inbox_ops:cache] Failed to invalidate settings cache', err)\n  }\n}\n\nexport function resolveCache(container: { resolve: (name: string) => unknown }): CacheStrategy | null {\n  try {\n    return container.resolve('cache') as CacheStrategy\n  } catch {\n    return null\n  }\n}\n"],
-  "mappings": "AAEA,MAAM,sBAAsB;AAC5B,MAAM,wBAAwB;AAKvB,MAAM,sBAAsB,KAAK;AACjC,MAAM,wBAAwB,IAAI,KAAK;AAEvC,SAAS,qBAAqB,UAA0B;AAC7D,SAAO,GAAG,mBAAmB,IAAI,QAAQ;AAC3C;AAEO,SAAS,qBAAqB,UAA0B;AAC7D,SAAO,GAAG,mBAAmB,IAAI,QAAQ;AAC3C;AAEO,SAAS,uBAAuB,UAA0B;AAC/D,SAAO,GAAG,qBAAqB,IAAI,QAAQ;AAC7C;AAEO,SAAS,uBAAuB,UAA0B;AAC/D,SAAO,GAAG,qBAAqB,IAAI,QAAQ;AAC7C;AAEA,eAAsB,sBACpB,OACA,UACe;AACf,MAAI,CAAC,OAAO,aAAc;AAC1B,QAAM,MAAM,qBAAqB,QAAQ;AACzC,MAAI;AACF,UAAM,MAAM,aAAa,CAAC,GAAG,CAAC;AAAA,EAChC,SAAS,KAAK;AACZ,YAAQ,KAAK,uDAAuD,GAAG;AAAA,EACzE;AACF;AAEA,eAAsB,wBACpB,OACA,UACe;AACf,MAAI,CAAC,OAAO,aAAc;AAC1B,QAAM,MAAM,uBAAuB,QAAQ;AAC3C,MAAI;AACF,UAAM,MAAM,aAAa,CAAC,GAAG,CAAC;AAAA,EAChC,SAAS,KAAK;AACZ,YAAQ,KAAK,yDAAyD,GAAG;AAAA,EAC3E;AACF;AAEO,SAAS,aAAa,WAAyE;AACpG,MAAI;AACF,WAAO,UAAU,QAAQ,OAAO;AAAA,EAClC,QAAQ;AACN,WAAO;AAAA,EACT;AACF;",
+  "sourcesContent": ["import type { CacheStrategy } from '@open-mercato/cache'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('inbox_ops').child({ component: 'cache' })\n\nconst COUNTS_CACHE_PREFIX = 'inbox_ops:counts'\nconst SETTINGS_CACHE_PREFIX = 'inbox_ops:settings'\n\n// Cache key and tag share the same value intentionally \u2014 each tenant has exactly\n// one counts entry and one settings entry, so a 1:1 key-to-tag mapping suffices.\n\nexport const COUNTS_CACHE_TTL_MS = 30 * 1000\nexport const SETTINGS_CACHE_TTL_MS = 5 * 60 * 1000\n\nexport function createCountsCacheKey(tenantId: string): string {\n  return `${COUNTS_CACHE_PREFIX}:${tenantId}`\n}\n\nexport function createCountsCacheTag(tenantId: string): string {\n  return `${COUNTS_CACHE_PREFIX}:${tenantId}`\n}\n\nexport function createSettingsCacheKey(tenantId: string): string {\n  return `${SETTINGS_CACHE_PREFIX}:${tenantId}`\n}\n\nexport function createSettingsCacheTag(tenantId: string): string {\n  return `${SETTINGS_CACHE_PREFIX}:${tenantId}`\n}\n\nexport async function invalidateCountsCache(\n  cache: CacheStrategy | null | undefined,\n  tenantId: string,\n): Promise<void> {\n  if (!cache?.deleteByTags) return\n  const tag = createCountsCacheTag(tenantId)\n  try {\n    await cache.deleteByTags([tag])\n  } catch (err) {\n    logger.warn('Failed to invalidate counts cache', { err })\n  }\n}\n\nexport async function invalidateSettingsCache(\n  cache: CacheStrategy | null | undefined,\n  tenantId: string,\n): Promise<void> {\n  if (!cache?.deleteByTags) return\n  const tag = createSettingsCacheTag(tenantId)\n  try {\n    await cache.deleteByTags([tag])\n  } catch (err) {\n    logger.warn('Failed to invalidate settings cache', { err })\n  }\n}\n\nexport function resolveCache(container: { resolve: (name: string) => unknown }): CacheStrategy | null {\n  try {\n    return container.resolve('cache') as CacheStrategy\n  } catch {\n    return null\n  }\n}\n"],
+  "mappings": "AACA,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,WAAW,EAAE,MAAM,EAAE,WAAW,QAAQ,CAAC;AAErE,MAAM,sBAAsB;AAC5B,MAAM,wBAAwB;AAKvB,MAAM,sBAAsB,KAAK;AACjC,MAAM,wBAAwB,IAAI,KAAK;AAEvC,SAAS,qBAAqB,UAA0B;AAC7D,SAAO,GAAG,mBAAmB,IAAI,QAAQ;AAC3C;AAEO,SAAS,qBAAqB,UAA0B;AAC7D,SAAO,GAAG,mBAAmB,IAAI,QAAQ;AAC3C;AAEO,SAAS,uBAAuB,UAA0B;AAC/D,SAAO,GAAG,qBAAqB,IAAI,QAAQ;AAC7C;AAEO,SAAS,uBAAuB,UAA0B;AAC/D,SAAO,GAAG,qBAAqB,IAAI,QAAQ;AAC7C;AAEA,eAAsB,sBACpB,OACA,UACe;AACf,MAAI,CAAC,OAAO,aAAc;AAC1B,QAAM,MAAM,qBAAqB,QAAQ;AACzC,MAAI;AACF,UAAM,MAAM,aAAa,CAAC,GAAG,CAAC;AAAA,EAChC,SAAS,KAAK;AACZ,WAAO,KAAK,qCAAqC,EAAE,IAAI,CAAC;AAAA,EAC1D;AACF;AAEA,eAAsB,wBACpB,OACA,UACe;AACf,MAAI,CAAC,OAAO,aAAc;AAC1B,QAAM,MAAM,uBAAuB,QAAQ;AAC3C,MAAI;AACF,UAAM,MAAM,aAAa,CAAC,GAAG,CAAC;AAAA,EAChC,SAAS,KAAK;AACZ,WAAO,KAAK,uCAAuC,EAAE,IAAI,CAAC;AAAA,EAC5D;AACF;AAEO,SAAS,aAAa,WAAyE;AACpG,MAAI;AACF,WAAO,UAAU,QAAQ,OAAO;AAAA,EAClC,QAAQ;AACN,WAAO;AAAA,EACT;AACF;",
   "names": []
 }

package/dist/modules/inbox_ops/lib/catalogLookup.js

@@ -1,4 +1,6 @@
 import { findWithDecryption } from "@open-mercato/shared/lib/encryption/find";
+import { createLogger } from "@open-mercato/shared/lib/logger";
+const logger = createLogger("inbox_ops").child({ component: "catalog-lookup" });
 const MAX_CATALOG_PRODUCTS = 50;
 async function fetchCatalogProductsForExtraction(em, scope, deps) {
   if (!deps?.catalogProductClass || !deps?.catalogProductPriceClass) return [];
@@ -43,7 +45,7 @@ async function fetchCatalogProductsForExtraction(em, scope, deps) {
       price: priceByProduct.get(product.id)
     }));
   } catch (err) {
-    console.error("[inbox_ops:catalogLookup] Failed to fetch catalog products:", err);
+    logger.error("Failed to fetch catalog products", { err });
     return [];
   }
 }

package/dist/modules/inbox_ops/lib/catalogLookup.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/inbox_ops/lib/catalogLookup.ts"],
-  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport type { EntityClass } from '@mikro-orm/core'\nimport { findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\n\ninterface CatalogProductForExtraction {\n  id: string\n  name: string\n  sku?: string\n  price?: string\n}\n\ninterface CatalogProductLike {\n  id: string\n  title: string\n  sku?: string | null\n  tenantId?: string\n  organizationId?: string\n  deletedAt?: Date | null\n  updatedAt?: Date\n}\n\ninterface CatalogProductPriceLike {\n  product?: unknown\n  unitPriceNet?: string | null\n  unitPriceGross?: string | null\n  tenantId?: string\n  organizationId?: string\n  createdAt?: Date\n}\n\ninterface CatalogLookupDeps {\n  catalogProductClass: EntityClass<CatalogProductLike>\n  catalogProductPriceClass: EntityClass<CatalogProductPriceLike>\n}\n\nconst MAX_CATALOG_PRODUCTS = 50\n\nexport async function fetchCatalogProductsForExtraction(\n  em: EntityManager,\n  scope: { tenantId: string; organizationId: string },\n  deps?: CatalogLookupDeps,\n): Promise<CatalogProductForExtraction[]> {\n  if (!deps?.catalogProductClass || !deps?.catalogProductPriceClass) return []\n\n  try {\n    const products = await findWithDecryption(\n      em,\n      deps.catalogProductClass,\n      {\n        organizationId: scope.organizationId,\n        tenantId: scope.tenantId,\n        deletedAt: null,\n      },\n      { limit: MAX_CATALOG_PRODUCTS, orderBy: { updatedAt: 'DESC' } },\n      { tenantId: scope.tenantId, organizationId: scope.organizationId },\n    )\n\n    if (!products || products.length === 0) return []\n\n    const productIds = products.map((p) => p.id)\n\n    const prices = await findWithDecryption(\n      em,\n      deps.catalogProductPriceClass,\n      {\n        product: { $in: productIds },\n        organizationId: scope.organizationId,\n        tenantId: scope.tenantId,\n      },\n      { orderBy: { createdAt: 'DESC' } },\n      { tenantId: scope.tenantId, organizationId: scope.organizationId },\n    )\n\n    const priceByProduct = new Map<string, string>()\n    for (const price of prices) {\n      const rawProduct = price.product\n      const productId = typeof rawProduct === 'string'\n        ? rawProduct\n        : rawProduct && typeof rawProduct === 'object' && 'id' in rawProduct\n          ? String((rawProduct as Record<string, unknown>).id)\n          : undefined\n      if (productId && !priceByProduct.has(productId)) {\n        const amount = price.unitPriceNet ?? price.unitPriceGross ?? null\n        if (amount) priceByProduct.set(productId, amount)\n      }\n    }\n\n    return products.map((product) => ({\n      id: product.id,\n      name: product.title,\n      sku: product.sku ?? undefined,\n      price: priceByProduct.get(product.id),\n    }))\n  } catch (err) {\n    console.error('[inbox_ops:catalogLookup] Failed to fetch catalog products:', err)\n    return []\n  }\n}\n"],
-  "mappings": "AAEA,SAAS,0BAA0B;AAiCnC,MAAM,uBAAuB;AAE7B,eAAsB,kCACpB,IACA,OACA,MACwC;AACxC,MAAI,CAAC,MAAM,uBAAuB,CAAC,MAAM,yBAA0B,QAAO,CAAC;AAE3E,MAAI;AACF,UAAM,WAAW,MAAM;AAAA,MACrB;AAAA,MACA,KAAK;AAAA,MACL;AAAA,QACE,gBAAgB,MAAM;AAAA,QACtB,UAAU,MAAM;AAAA,QAChB,WAAW;AAAA,MACb;AAAA,MACA,EAAE,OAAO,sBAAsB,SAAS,EAAE,WAAW,OAAO,EAAE;AAAA,MAC9D,EAAE,UAAU,MAAM,UAAU,gBAAgB,MAAM,eAAe;AAAA,IACnE;AAEA,QAAI,CAAC,YAAY,SAAS,WAAW,EAAG,QAAO,CAAC;AAEhD,UAAM,aAAa,SAAS,IAAI,CAAC,MAAM,EAAE,EAAE;AAE3C,UAAM,SAAS,MAAM;AAAA,MACnB;AAAA,MACA,KAAK;AAAA,MACL;AAAA,QACE,SAAS,EAAE,KAAK,WAAW;AAAA,QAC3B,gBAAgB,MAAM;AAAA,QACtB,UAAU,MAAM;AAAA,MAClB;AAAA,MACA,EAAE,SAAS,EAAE,WAAW,OAAO,EAAE;AAAA,MACjC,EAAE,UAAU,MAAM,UAAU,gBAAgB,MAAM,eAAe;AAAA,IACnE;AAEA,UAAM,iBAAiB,oBAAI,IAAoB;AAC/C,eAAW,SAAS,QAAQ;AAC1B,YAAM,aAAa,MAAM;AACzB,YAAM,YAAY,OAAO,eAAe,WACpC,aACA,cAAc,OAAO,eAAe,YAAY,QAAQ,aACtD,OAAQ,WAAuC,EAAE,IACjD;AACN,UAAI,aAAa,CAAC,eAAe,IAAI,SAAS,GAAG;AAC/C,cAAM,SAAS,MAAM,gBAAgB,MAAM,kBAAkB;AAC7D,YAAI,OAAQ,gBAAe,IAAI,WAAW,MAAM;AAAA,MAClD;AAAA,IACF;AAEA,WAAO,SAAS,IAAI,CAAC,aAAa;AAAA,MAChC,IAAI,QAAQ;AAAA,MACZ,MAAM,QAAQ;AAAA,MACd,KAAK,QAAQ,OAAO;AAAA,MACpB,OAAO,eAAe,IAAI,QAAQ,EAAE;AAAA,IACtC,EAAE;AAAA,EACJ,SAAS,KAAK;AACZ,YAAQ,MAAM,+DAA+D,GAAG;AAChF,WAAO,CAAC;AAAA,EACV;AACF;",
+  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport type { EntityClass } from '@mikro-orm/core'\nimport { findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('inbox_ops').child({ component: 'catalog-lookup' })\n\ninterface CatalogProductForExtraction {\n  id: string\n  name: string\n  sku?: string\n  price?: string\n}\n\ninterface CatalogProductLike {\n  id: string\n  title: string\n  sku?: string | null\n  tenantId?: string\n  organizationId?: string\n  deletedAt?: Date | null\n  updatedAt?: Date\n}\n\ninterface CatalogProductPriceLike {\n  product?: unknown\n  unitPriceNet?: string | null\n  unitPriceGross?: string | null\n  tenantId?: string\n  organizationId?: string\n  createdAt?: Date\n}\n\ninterface CatalogLookupDeps {\n  catalogProductClass: EntityClass<CatalogProductLike>\n  catalogProductPriceClass: EntityClass<CatalogProductPriceLike>\n}\n\nconst MAX_CATALOG_PRODUCTS = 50\n\nexport async function fetchCatalogProductsForExtraction(\n  em: EntityManager,\n  scope: { tenantId: string; organizationId: string },\n  deps?: CatalogLookupDeps,\n): Promise<CatalogProductForExtraction[]> {\n  if (!deps?.catalogProductClass || !deps?.catalogProductPriceClass) return []\n\n  try {\n    const products = await findWithDecryption(\n      em,\n      deps.catalogProductClass,\n      {\n        organizationId: scope.organizationId,\n        tenantId: scope.tenantId,\n        deletedAt: null,\n      },\n      { limit: MAX_CATALOG_PRODUCTS, orderBy: { updatedAt: 'DESC' } },\n      { tenantId: scope.tenantId, organizationId: scope.organizationId },\n    )\n\n    if (!products || products.length === 0) return []\n\n    const productIds = products.map((p) => p.id)\n\n    const prices = await findWithDecryption(\n      em,\n      deps.catalogProductPriceClass,\n      {\n        product: { $in: productIds },\n        organizationId: scope.organizationId,\n        tenantId: scope.tenantId,\n      },\n      { orderBy: { createdAt: 'DESC' } },\n      { tenantId: scope.tenantId, organizationId: scope.organizationId },\n    )\n\n    const priceByProduct = new Map<string, string>()\n    for (const price of prices) {\n      const rawProduct = price.product\n      const productId = typeof rawProduct === 'string'\n        ? rawProduct\n        : rawProduct && typeof rawProduct === 'object' && 'id' in rawProduct\n          ? String((rawProduct as Record<string, unknown>).id)\n          : undefined\n      if (productId && !priceByProduct.has(productId)) {\n        const amount = price.unitPriceNet ?? price.unitPriceGross ?? null\n        if (amount) priceByProduct.set(productId, amount)\n      }\n    }\n\n    return products.map((product) => ({\n      id: product.id,\n      name: product.title,\n      sku: product.sku ?? undefined,\n      price: priceByProduct.get(product.id),\n    }))\n  } catch (err) {\n    logger.error('Failed to fetch catalog products', { err })\n    return []\n  }\n}\n"],
+  "mappings": "AAEA,SAAS,0BAA0B;AACnC,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,WAAW,EAAE,MAAM,EAAE,WAAW,iBAAiB,CAAC;AAiC9E,MAAM,uBAAuB;AAE7B,eAAsB,kCACpB,IACA,OACA,MACwC;AACxC,MAAI,CAAC,MAAM,uBAAuB,CAAC,MAAM,yBAA0B,QAAO,CAAC;AAE3E,MAAI;AACF,UAAM,WAAW,MAAM;AAAA,MACrB;AAAA,MACA,KAAK;AAAA,MACL;AAAA,QACE,gBAAgB,MAAM;AAAA,QACtB,UAAU,MAAM;AAAA,QAChB,WAAW;AAAA,MACb;AAAA,MACA,EAAE,OAAO,sBAAsB,SAAS,EAAE,WAAW,OAAO,EAAE;AAAA,MAC9D,EAAE,UAAU,MAAM,UAAU,gBAAgB,MAAM,eAAe;AAAA,IACnE;AAEA,QAAI,CAAC,YAAY,SAAS,WAAW,EAAG,QAAO,CAAC;AAEhD,UAAM,aAAa,SAAS,IAAI,CAAC,MAAM,EAAE,EAAE;AAE3C,UAAM,SAAS,MAAM;AAAA,MACnB;AAAA,MACA,KAAK;AAAA,MACL;AAAA,QACE,SAAS,EAAE,KAAK,WAAW;AAAA,QAC3B,gBAAgB,MAAM;AAAA,QACtB,UAAU,MAAM;AAAA,MAClB;AAAA,MACA,EAAE,SAAS,EAAE,WAAW,OAAO,EAAE;AAAA,MACjC,EAAE,UAAU,MAAM,UAAU,gBAAgB,MAAM,eAAe;AAAA,IACnE;AAEA,UAAM,iBAAiB,oBAAI,IAAoB;AAC/C,eAAW,SAAS,QAAQ;AAC1B,YAAM,aAAa,MAAM;AACzB,YAAM,YAAY,OAAO,eAAe,WACpC,aACA,cAAc,OAAO,eAAe,YAAY,QAAQ,aACtD,OAAQ,WAAuC,EAAE,IACjD;AACN,UAAI,aAAa,CAAC,eAAe,IAAI,SAAS,GAAG;AAC/C,cAAM,SAAS,MAAM,gBAAgB,MAAM,kBAAkB;AAC7D,YAAI,OAAQ,gBAAe,IAAI,WAAW,MAAM;AAAA,MAClD;AAAA,IACF;AAEA,WAAO,SAAS,IAAI,CAAC,aAAa;AAAA,MAChC,IAAI,QAAQ;AAAA,MACZ,MAAM,QAAQ;AAAA,MACd,KAAK,QAAQ,OAAO;AAAA,MACpB,OAAO,eAAe,IAAI,QAAQ,EAAE;AAAA,IACtC,EAAE;AAAA,EACJ,SAAS,KAAK;AACZ,WAAO,MAAM,oCAAoC,EAAE,IAAI,CAAC;AACxD,WAAO,CAAC;AAAA,EACV;AACF;",
   "names": []
 }

package/dist/modules/inbox_ops/lib/eventBus.js

@@ -1,11 +1,10 @@
+import { createLogger } from "@open-mercato/shared/lib/logger";
+const logger = createLogger("inbox_ops");
 function resolveOptionalEventBus(container) {
   try {
     return container.resolve("eventBus");
   } catch (error) {
-    console.warn(
-      "[inbox_ops] Event bus unavailable:",
-      error instanceof Error ? error.message : String(error)
-    );
+    logger.warn("Event bus unavailable", { err: error });
     return null;
   }
 }

package/dist/modules/inbox_ops/lib/eventBus.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/inbox_ops/lib/eventBus.ts"],
-  "sourcesContent": ["import type { AwilixContainer } from 'awilix'\nimport type { EventBus } from '@open-mercato/events/types'\n\nexport function resolveOptionalEventBus(container: AwilixContainer): EventBus | null {\n  try {\n    return container.resolve('eventBus') as EventBus\n  } catch (error) {\n    console.warn(\n      '[inbox_ops] Event bus unavailable:',\n      error instanceof Error ? error.message : String(error),\n    )\n    return null\n  }\n}\n\n"],
-  "mappings": "AAGO,SAAS,wBAAwB,WAA6C;AACnF,MAAI;AACF,WAAO,UAAU,QAAQ,UAAU;AAAA,EACrC,SAAS,OAAO;AACd,YAAQ;AAAA,MACN;AAAA,MACA,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AAAA,IACvD;AACA,WAAO;AAAA,EACT;AACF;",
+  "sourcesContent": ["import type { AwilixContainer } from 'awilix'\nimport type { EventBus } from '@open-mercato/events/types'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('inbox_ops')\n\nexport function resolveOptionalEventBus(container: AwilixContainer): EventBus | null {\n  try {\n    return container.resolve('eventBus') as EventBus\n  } catch (error) {\n    logger.warn('Event bus unavailable', { err: error })\n    return null\n  }\n}\n\n"],
+  "mappings": "AAEA,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,WAAW;AAEhC,SAAS,wBAAwB,WAA6C;AACnF,MAAI;AACF,WAAO,UAAU,QAAQ,UAAU;AAAA,EACrC,SAAS,OAAO;AACd,WAAO,KAAK,yBAAyB,EAAE,KAAK,MAAM,CAAC;AACnD,WAAO;AAAA,EACT;AACF;",
   "names": []
 }

package/dist/modules/inbox_ops/lib/messagesIntegration.js

@@ -1,4 +1,6 @@
 import { getRecipientUserIdsForFeature } from "../../notifications/lib/notificationRecipients.js";
+import { createLogger } from "@open-mercato/shared/lib/logger";
+const logger = createLogger("inbox_ops").child({ component: "messages" });
 function asContainer(resolver) {
   return resolver;
 }
@@ -81,10 +83,7 @@ async function createMessageRecordForEmail(email, ctx) {
     const messageId = result?.id ?? null;
     return messageId;
   } catch (err) {
-    console.error(
-      "[inbox_ops:messages] Failed to create message record for email:",
-      err instanceof Error ? err.message : String(err)
-    );
+    logger.error("Failed to create message record for email", { err });
     return null;
   }
 }
@@ -140,10 +139,7 @@ async function createMessageRecordForReply(reply, inboxEmailId, ctx) {
     if (!messageId) return null;
     return { messageId };
   } catch (err) {
-    console.error(
-      "[inbox_ops:messages] Failed to create reply message record:",
-      err instanceof Error ? err.message : String(err)
-    );
+    logger.error("Failed to create reply message record", { err });
     return null;
   }
 }

package/dist/modules/inbox_ops/lib/messagesIntegration.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/inbox_ops/lib/messagesIntegration.ts"],
-  "sourcesContent": ["import type { AwilixContainer } from 'awilix'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport type { CommandBus } from '@open-mercato/shared/lib/commands'\nimport { getRecipientUserIdsForFeature } from '../../notifications/lib/notificationRecipients'\n\ninterface ResolverLike {\n  resolve: <T = unknown>(name: string) => T\n}\n\nfunction asContainer(resolver: ResolverLike): AwilixContainer {\n  return resolver as unknown as AwilixContainer\n}\n\ninterface MessagesIntegrationScope {\n  tenantId: string\n  organizationId: string\n  userId: string\n}\n\ninterface MessagesIntegrationContext {\n  container: ResolverLike\n  scope: MessagesIntegrationScope\n}\n\ninterface InboxEmailData {\n  id: string\n  subject: string\n  cleanedText?: string | null\n  rawText?: string | null\n  forwardedByAddress: string\n  forwardedByName?: string | null\n  status: string\n}\n\ninterface DraftReplyData {\n  to: string\n  toName?: string | null\n  subject: string\n  body: string\n}\n\nconst SYSTEM_USER_ID = '00000000-0000-0000-0000-000000000000'\n\n/**\n * Resolve a real user ID to use as the message sender.\n * Tries to find the forwarding user by email in the auth users table,\n * then falls back to the first recipient (admin with proposals.view).\n * Last resort: SYSTEM_USER_ID (zero UUID).\n */\nexport async function resolveMessageSenderUserId(\n  em: EntityManager,\n  forwardedByEmail: string,\n  recipientUserIds: string[],\n  scope: { tenantId: string; organizationId: string },\n): Promise<string> {\n  try {\n    // users.email is a plaintext login field, not encrypted at field level,\n    // so findOneWithDecryption is unnecessary here.\n    const db = em.getKysely<any>() as any\n    const normalizedEmail = forwardedByEmail.trim().toLowerCase()\n    if (normalizedEmail) {\n      const row = await db\n        .selectFrom('users')\n        .select('id')\n        .where('email', '=', normalizedEmail)\n        .where('deleted_at', 'is', null)\n        .executeTakeFirst() as { id?: string } | undefined\n      if (row?.id) return row.id\n    }\n  } catch {\n    // User lookup failed \u2014 fall through\n  }\n  if (recipientUserIds.length > 0) return recipientUserIds[0]\n  return SYSTEM_USER_ID\n}\n\nfunction resolveCommandBus(container: ResolverLike): CommandBus | null {\n  try {\n    const bus = container.resolve('commandBus') as CommandBus\n    return bus && typeof bus.execute === 'function' ? bus : null\n  } catch {\n    return null\n  }\n}\n\n/**\n * Creates an internal message record for an incoming inbox email.\n *\n * The message is delivered to all users with the `inbox_ops.proposals.view`\n * feature in the tenant \u2014 mirroring the same audience that sees proposals\n * in the inbox_ops module. This follows the shared-queue pattern used by\n * all major ERP/CRM systems (Salesforce queues, Dynamics 365 queues,\n * HubSpot shared inboxes, Odoo team followers).\n */\nexport async function createMessageRecordForEmail(\n  email: InboxEmailData,\n  ctx: MessagesIntegrationContext,\n): Promise<string | null> {\n  try {\n    const commandBus = resolveCommandBus(ctx.container)\n    if (!commandBus) return null\n\n    const em = ctx.container.resolve('em') as EntityManager\n    const db = em.getKysely<any>()\n    const recipientUserIds = await getRecipientUserIdsForFeature(\n      db, ctx.scope.tenantId, 'inbox_ops.proposals.view',\n    )\n\n    const recipients = recipientUserIds.map((userId) => ({ userId, type: 'to' as const }))\n    // Use rawText (full thread) instead of cleanedText (stripped quotes) so\n    // the Messages module preserves the complete email conversation.\n    const bodyText = email.rawText || email.cleanedText || ''\n\n    // Resolve a real user as sender \u2014 prefer the forwarding user, fall back\n    // to the first recipient (admin with proposals.view feature) so the\n    // Messages UI can display an actual user name instead of the zero UUID.\n    const senderUserId = await resolveMessageSenderUserId(\n      em, email.forwardedByAddress, recipientUserIds, ctx.scope,\n    )\n\n    const { result } = await commandBus.execute('messages.messages.compose', {\n      input: {\n        type: 'inbox_ops.email',\n        visibility: recipients.length > 0 ? 'internal' as const : 'public' as const,\n        sourceEntityType: 'inbox_ops:inbox_email',\n        sourceEntityId: email.id,\n        externalEmail: email.forwardedByAddress,\n        externalName: email.forwardedByName || undefined,\n        recipients,\n        subject: email.subject,\n        body: bodyText.slice(0, 50000),\n        bodyFormat: 'text' as const,\n        priority: 'normal' as const,\n        isDraft: false,\n        sendViaEmail: false,\n        objects: [\n          {\n            entityModule: 'inbox_ops',\n            entityType: 'inbox_email',\n            entityId: email.id,\n            actionRequired: false,\n          },\n        ],\n        tenantId: ctx.scope.tenantId,\n        organizationId: ctx.scope.organizationId,\n        userId: senderUserId,\n      },\n      ctx: {\n        container: asContainer(ctx.container),\n        auth: null,\n        organizationScope: null,\n        selectedOrganizationId: ctx.scope.organizationId,\n        organizationIds: [ctx.scope.organizationId],\n      },\n    })\n\n    const messageId = (result as { id: string })?.id ?? null\n    return messageId\n  } catch (err) {\n    console.error(\n      '[inbox_ops:messages] Failed to create message record for email:',\n      err instanceof Error ? err.message : String(err),\n    )\n    return null\n  }\n}\n\nexport async function createMessageRecordForReply(\n  reply: DraftReplyData,\n  inboxEmailId: string,\n  ctx: MessagesIntegrationContext,\n): Promise<{ messageId: string } | null> {\n  try {\n    const commandBus = resolveCommandBus(ctx.container)\n    if (!commandBus) return null\n\n    const em = ctx.container.resolve('em') as EntityManager\n    const db = em.getKysely<any>()\n    const recipientUserIds = await getRecipientUserIdsForFeature(\n      db, ctx.scope.tenantId, 'inbox_ops.proposals.view',\n    )\n    if (recipientUserIds.length === 0) return null\n\n    const recipients = recipientUserIds.map((userId) => ({ userId, type: 'to' as const }))\n\n    const { result } = await commandBus.execute('messages.messages.compose', {\n      input: {\n        type: 'inbox_ops.reply',\n        visibility: 'internal' as const,\n        sourceEntityType: 'inbox_ops:inbox_email',\n        sourceEntityId: inboxEmailId,\n        externalEmail: reply.to,\n        externalName: reply.toName ?? undefined,\n        recipients,\n        subject: reply.subject,\n        body: reply.body,\n        bodyFormat: 'text' as const,\n        priority: 'normal' as const,\n        isDraft: false,\n        sendViaEmail: false,\n        objects: [\n          {\n            entityModule: 'inbox_ops',\n            entityType: 'inbox_email',\n            entityId: inboxEmailId,\n            actionRequired: false,\n          },\n        ],\n        tenantId: ctx.scope.tenantId,\n        organizationId: ctx.scope.organizationId,\n        userId: ctx.scope.userId,\n      },\n      ctx: {\n        container: asContainer(ctx.container),\n        auth: null,\n        organizationScope: null,\n        selectedOrganizationId: ctx.scope.organizationId,\n        organizationIds: [ctx.scope.organizationId],\n      },\n    })\n\n    const messageId = (result as { id: string })?.id ?? null\n    if (!messageId) return null\n    return { messageId }\n  } catch (err) {\n    console.error(\n      '[inbox_ops:messages] Failed to create reply message record:',\n      err instanceof Error ? err.message : String(err),\n    )\n    return null\n  }\n}\n"],
-  "mappings": "AAGA,SAAS,qCAAqC;AAM9C,SAAS,YAAY,UAAyC;AAC5D,SAAO;AACT;AA8BA,MAAM,iBAAiB;AAQvB,eAAsB,2BACpB,IACA,kBACA,kBACA,OACiB;AACjB,MAAI;AAGF,UAAM,KAAK,GAAG,UAAe;AAC7B,UAAM,kBAAkB,iBAAiB,KAAK,EAAE,YAAY;AAC5D,QAAI,iBAAiB;AACnB,YAAM,MAAM,MAAM,GACf,WAAW,OAAO,EAClB,OAAO,IAAI,EACX,MAAM,SAAS,KAAK,eAAe,EACnC,MAAM,cAAc,MAAM,IAAI,EAC9B,iBAAiB;AACpB,UAAI,KAAK,GAAI,QAAO,IAAI;AAAA,IAC1B;AAAA,EACF,QAAQ;AAAA,EAER;AACA,MAAI,iBAAiB,SAAS,EAAG,QAAO,iBAAiB,CAAC;AAC1D,SAAO;AACT;AAEA,SAAS,kBAAkB,WAA4C;AACrE,MAAI;AACF,UAAM,MAAM,UAAU,QAAQ,YAAY;AAC1C,WAAO,OAAO,OAAO,IAAI,YAAY,aAAa,MAAM;AAAA,EAC1D,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAWA,eAAsB,4BACpB,OACA,KACwB;AACxB,MAAI;AACF,UAAM,aAAa,kBAAkB,IAAI,SAAS;AAClD,QAAI,CAAC,WAAY,QAAO;AAExB,UAAM,KAAK,IAAI,UAAU,QAAQ,IAAI;AACrC,UAAM,KAAK,GAAG,UAAe;AAC7B,UAAM,mBAAmB,MAAM;AAAA,MAC7B;AAAA,MAAI,IAAI,MAAM;AAAA,MAAU;AAAA,IAC1B;AAEA,UAAM,aAAa,iBAAiB,IAAI,CAAC,YAAY,EAAE,QAAQ,MAAM,KAAc,EAAE;AAGrF,UAAM,WAAW,MAAM,WAAW,MAAM,eAAe;AAKvD,UAAM,eAAe,MAAM;AAAA,MACzB;AAAA,MAAI,MAAM;AAAA,MAAoB;AAAA,MAAkB,IAAI;AAAA,IACtD;AAEA,UAAM,EAAE,OAAO,IAAI,MAAM,WAAW,QAAQ,6BAA6B;AAAA,MACvE,OAAO;AAAA,QACL,MAAM;AAAA,QACN,YAAY,WAAW,SAAS,IAAI,aAAsB;AAAA,QAC1D,kBAAkB;AAAA,QAClB,gBAAgB,MAAM;AAAA,QACtB,eAAe,MAAM;AAAA,QACrB,cAAc,MAAM,mBAAmB;AAAA,QACvC;AAAA,QACA,SAAS,MAAM;AAAA,QACf,MAAM,SAAS,MAAM,GAAG,GAAK;AAAA,QAC7B,YAAY;AAAA,QACZ,UAAU;AAAA,QACV,SAAS;AAAA,QACT,cAAc;AAAA,QACd,SAAS;AAAA,UACP;AAAA,YACE,cAAc;AAAA,YACd,YAAY;AAAA,YACZ,UAAU,MAAM;AAAA,YAChB,gBAAgB;AAAA,UAClB;AAAA,QACF;AAAA,QACA,UAAU,IAAI,MAAM;AAAA,QACpB,gBAAgB,IAAI,MAAM;AAAA,QAC1B,QAAQ;AAAA,MACV;AAAA,MACA,KAAK;AAAA,QACH,WAAW,YAAY,IAAI,SAAS;AAAA,QACpC,MAAM;AAAA,QACN,mBAAmB;AAAA,QACnB,wBAAwB,IAAI,MAAM;AAAA,QAClC,iBAAiB,CAAC,IAAI,MAAM,cAAc;AAAA,MAC5C;AAAA,IACF,CAAC;AAED,UAAM,YAAa,QAA2B,MAAM;AACpD,WAAO;AAAA,EACT,SAAS,KAAK;AACZ,YAAQ;AAAA,MACN;AAAA,MACA,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAAA,IACjD;AACA,WAAO;AAAA,EACT;AACF;AAEA,eAAsB,4BACpB,OACA,cACA,KACuC;AACvC,MAAI;AACF,UAAM,aAAa,kBAAkB,IAAI,SAAS;AAClD,QAAI,CAAC,WAAY,QAAO;AAExB,UAAM,KAAK,IAAI,UAAU,QAAQ,IAAI;AACrC,UAAM,KAAK,GAAG,UAAe;AAC7B,UAAM,mBAAmB,MAAM;AAAA,MAC7B;AAAA,MAAI,IAAI,MAAM;AAAA,MAAU;AAAA,IAC1B;AACA,QAAI,iBAAiB,WAAW,EAAG,QAAO;AAE1C,UAAM,aAAa,iBAAiB,IAAI,CAAC,YAAY,EAAE,QAAQ,MAAM,KAAc,EAAE;AAErF,UAAM,EAAE,OAAO,IAAI,MAAM,WAAW,QAAQ,6BAA6B;AAAA,MACvE,OAAO;AAAA,QACL,MAAM;AAAA,QACN,YAAY;AAAA,QACZ,kBAAkB;AAAA,QAClB,gBAAgB;AAAA,QAChB,eAAe,MAAM;AAAA,QACrB,cAAc,MAAM,UAAU;AAAA,QAC9B;AAAA,QACA,SAAS,MAAM;AAAA,QACf,MAAM,MAAM;AAAA,QACZ,YAAY;AAAA,QACZ,UAAU;AAAA,QACV,SAAS;AAAA,QACT,cAAc;AAAA,QACd,SAAS;AAAA,UACP;AAAA,YACE,cAAc;AAAA,YACd,YAAY;AAAA,YACZ,UAAU;AAAA,YACV,gBAAgB;AAAA,UAClB;AAAA,QACF;AAAA,QACA,UAAU,IAAI,MAAM;AAAA,QACpB,gBAAgB,IAAI,MAAM;AAAA,QAC1B,QAAQ,IAAI,MAAM;AAAA,MACpB;AAAA,MACA,KAAK;AAAA,QACH,WAAW,YAAY,IAAI,SAAS;AAAA,QACpC,MAAM;AAAA,QACN,mBAAmB;AAAA,QACnB,wBAAwB,IAAI,MAAM;AAAA,QAClC,iBAAiB,CAAC,IAAI,MAAM,cAAc;AAAA,MAC5C;AAAA,IACF,CAAC;AAED,UAAM,YAAa,QAA2B,MAAM;AACpD,QAAI,CAAC,UAAW,QAAO;AACvB,WAAO,EAAE,UAAU;AAAA,EACrB,SAAS,KAAK;AACZ,YAAQ;AAAA,MACN;AAAA,MACA,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAAA,IACjD;AACA,WAAO;AAAA,EACT;AACF;",
+  "sourcesContent": ["import type { AwilixContainer } from 'awilix'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport type { CommandBus } from '@open-mercato/shared/lib/commands'\nimport { getRecipientUserIdsForFeature } from '../../notifications/lib/notificationRecipients'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('inbox_ops').child({ component: 'messages' })\n\ninterface ResolverLike {\n  resolve: <T = unknown>(name: string) => T\n}\n\nfunction asContainer(resolver: ResolverLike): AwilixContainer {\n  return resolver as unknown as AwilixContainer\n}\n\ninterface MessagesIntegrationScope {\n  tenantId: string\n  organizationId: string\n  userId: string\n}\n\ninterface MessagesIntegrationContext {\n  container: ResolverLike\n  scope: MessagesIntegrationScope\n}\n\ninterface InboxEmailData {\n  id: string\n  subject: string\n  cleanedText?: string | null\n  rawText?: string | null\n  forwardedByAddress: string\n  forwardedByName?: string | null\n  status: string\n}\n\ninterface DraftReplyData {\n  to: string\n  toName?: string | null\n  subject: string\n  body: string\n}\n\nconst SYSTEM_USER_ID = '00000000-0000-0000-0000-000000000000'\n\n/**\n * Resolve a real user ID to use as the message sender.\n * Tries to find the forwarding user by email in the auth users table,\n * then falls back to the first recipient (admin with proposals.view).\n * Last resort: SYSTEM_USER_ID (zero UUID).\n */\nexport async function resolveMessageSenderUserId(\n  em: EntityManager,\n  forwardedByEmail: string,\n  recipientUserIds: string[],\n  scope: { tenantId: string; organizationId: string },\n): Promise<string> {\n  try {\n    // users.email is a plaintext login field, not encrypted at field level,\n    // so findOneWithDecryption is unnecessary here.\n    const db = em.getKysely<any>() as any\n    const normalizedEmail = forwardedByEmail.trim().toLowerCase()\n    if (normalizedEmail) {\n      const row = await db\n        .selectFrom('users')\n        .select('id')\n        .where('email', '=', normalizedEmail)\n        .where('deleted_at', 'is', null)\n        .executeTakeFirst() as { id?: string } | undefined\n      if (row?.id) return row.id\n    }\n  } catch {\n    // User lookup failed \u2014 fall through\n  }\n  if (recipientUserIds.length > 0) return recipientUserIds[0]\n  return SYSTEM_USER_ID\n}\n\nfunction resolveCommandBus(container: ResolverLike): CommandBus | null {\n  try {\n    const bus = container.resolve('commandBus') as CommandBus\n    return bus && typeof bus.execute === 'function' ? bus : null\n  } catch {\n    return null\n  }\n}\n\n/**\n * Creates an internal message record for an incoming inbox email.\n *\n * The message is delivered to all users with the `inbox_ops.proposals.view`\n * feature in the tenant \u2014 mirroring the same audience that sees proposals\n * in the inbox_ops module. This follows the shared-queue pattern used by\n * all major ERP/CRM systems (Salesforce queues, Dynamics 365 queues,\n * HubSpot shared inboxes, Odoo team followers).\n */\nexport async function createMessageRecordForEmail(\n  email: InboxEmailData,\n  ctx: MessagesIntegrationContext,\n): Promise<string | null> {\n  try {\n    const commandBus = resolveCommandBus(ctx.container)\n    if (!commandBus) return null\n\n    const em = ctx.container.resolve('em') as EntityManager\n    const db = em.getKysely<any>()\n    const recipientUserIds = await getRecipientUserIdsForFeature(\n      db, ctx.scope.tenantId, 'inbox_ops.proposals.view',\n    )\n\n    const recipients = recipientUserIds.map((userId) => ({ userId, type: 'to' as const }))\n    // Use rawText (full thread) instead of cleanedText (stripped quotes) so\n    // the Messages module preserves the complete email conversation.\n    const bodyText = email.rawText || email.cleanedText || ''\n\n    // Resolve a real user as sender \u2014 prefer the forwarding user, fall back\n    // to the first recipient (admin with proposals.view feature) so the\n    // Messages UI can display an actual user name instead of the zero UUID.\n    const senderUserId = await resolveMessageSenderUserId(\n      em, email.forwardedByAddress, recipientUserIds, ctx.scope,\n    )\n\n    const { result } = await commandBus.execute('messages.messages.compose', {\n      input: {\n        type: 'inbox_ops.email',\n        visibility: recipients.length > 0 ? 'internal' as const : 'public' as const,\n        sourceEntityType: 'inbox_ops:inbox_email',\n        sourceEntityId: email.id,\n        externalEmail: email.forwardedByAddress,\n        externalName: email.forwardedByName || undefined,\n        recipients,\n        subject: email.subject,\n        body: bodyText.slice(0, 50000),\n        bodyFormat: 'text' as const,\n        priority: 'normal' as const,\n        isDraft: false,\n        sendViaEmail: false,\n        objects: [\n          {\n            entityModule: 'inbox_ops',\n            entityType: 'inbox_email',\n            entityId: email.id,\n            actionRequired: false,\n          },\n        ],\n        tenantId: ctx.scope.tenantId,\n        organizationId: ctx.scope.organizationId,\n        userId: senderUserId,\n      },\n      ctx: {\n        container: asContainer(ctx.container),\n        auth: null,\n        organizationScope: null,\n        selectedOrganizationId: ctx.scope.organizationId,\n        organizationIds: [ctx.scope.organizationId],\n      },\n    })\n\n    const messageId = (result as { id: string })?.id ?? null\n    return messageId\n  } catch (err) {\n    logger.error('Failed to create message record for email', { err })\n    return null\n  }\n}\n\nexport async function createMessageRecordForReply(\n  reply: DraftReplyData,\n  inboxEmailId: string,\n  ctx: MessagesIntegrationContext,\n): Promise<{ messageId: string } | null> {\n  try {\n    const commandBus = resolveCommandBus(ctx.container)\n    if (!commandBus) return null\n\n    const em = ctx.container.resolve('em') as EntityManager\n    const db = em.getKysely<any>()\n    const recipientUserIds = await getRecipientUserIdsForFeature(\n      db, ctx.scope.tenantId, 'inbox_ops.proposals.view',\n    )\n    if (recipientUserIds.length === 0) return null\n\n    const recipients = recipientUserIds.map((userId) => ({ userId, type: 'to' as const }))\n\n    const { result } = await commandBus.execute('messages.messages.compose', {\n      input: {\n        type: 'inbox_ops.reply',\n        visibility: 'internal' as const,\n        sourceEntityType: 'inbox_ops:inbox_email',\n        sourceEntityId: inboxEmailId,\n        externalEmail: reply.to,\n        externalName: reply.toName ?? undefined,\n        recipients,\n        subject: reply.subject,\n        body: reply.body,\n        bodyFormat: 'text' as const,\n        priority: 'normal' as const,\n        isDraft: false,\n        sendViaEmail: false,\n        objects: [\n          {\n            entityModule: 'inbox_ops',\n            entityType: 'inbox_email',\n            entityId: inboxEmailId,\n            actionRequired: false,\n          },\n        ],\n        tenantId: ctx.scope.tenantId,\n        organizationId: ctx.scope.organizationId,\n        userId: ctx.scope.userId,\n      },\n      ctx: {\n        container: asContainer(ctx.container),\n        auth: null,\n        organizationScope: null,\n        selectedOrganizationId: ctx.scope.organizationId,\n        organizationIds: [ctx.scope.organizationId],\n      },\n    })\n\n    const messageId = (result as { id: string })?.id ?? null\n    if (!messageId) return null\n    return { messageId }\n  } catch (err) {\n    logger.error('Failed to create reply message record', { err })\n    return null\n  }\n}\n"],
+  "mappings": "AAGA,SAAS,qCAAqC;AAC9C,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,WAAW,EAAE,MAAM,EAAE,WAAW,WAAW,CAAC;AAMxE,SAAS,YAAY,UAAyC;AAC5D,SAAO;AACT;AA8BA,MAAM,iBAAiB;AAQvB,eAAsB,2BACpB,IACA,kBACA,kBACA,OACiB;AACjB,MAAI;AAGF,UAAM,KAAK,GAAG,UAAe;AAC7B,UAAM,kBAAkB,iBAAiB,KAAK,EAAE,YAAY;AAC5D,QAAI,iBAAiB;AACnB,YAAM,MAAM,MAAM,GACf,WAAW,OAAO,EAClB,OAAO,IAAI,EACX,MAAM,SAAS,KAAK,eAAe,EACnC,MAAM,cAAc,MAAM,IAAI,EAC9B,iBAAiB;AACpB,UAAI,KAAK,GAAI,QAAO,IAAI;AAAA,IAC1B;AAAA,EACF,QAAQ;AAAA,EAER;AACA,MAAI,iBAAiB,SAAS,EAAG,QAAO,iBAAiB,CAAC;AAC1D,SAAO;AACT;AAEA,SAAS,kBAAkB,WAA4C;AACrE,MAAI;AACF,UAAM,MAAM,UAAU,QAAQ,YAAY;AAC1C,WAAO,OAAO,OAAO,IAAI,YAAY,aAAa,MAAM;AAAA,EAC1D,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAWA,eAAsB,4BACpB,OACA,KACwB;AACxB,MAAI;AACF,UAAM,aAAa,kBAAkB,IAAI,SAAS;AAClD,QAAI,CAAC,WAAY,QAAO;AAExB,UAAM,KAAK,IAAI,UAAU,QAAQ,IAAI;AACrC,UAAM,KAAK,GAAG,UAAe;AAC7B,UAAM,mBAAmB,MAAM;AAAA,MAC7B;AAAA,MAAI,IAAI,MAAM;AAAA,MAAU;AAAA,IAC1B;AAEA,UAAM,aAAa,iBAAiB,IAAI,CAAC,YAAY,EAAE,QAAQ,MAAM,KAAc,EAAE;AAGrF,UAAM,WAAW,MAAM,WAAW,MAAM,eAAe;AAKvD,UAAM,eAAe,MAAM;AAAA,MACzB;AAAA,MAAI,MAAM;AAAA,MAAoB;AAAA,MAAkB,IAAI;AAAA,IACtD;AAEA,UAAM,EAAE,OAAO,IAAI,MAAM,WAAW,QAAQ,6BAA6B;AAAA,MACvE,OAAO;AAAA,QACL,MAAM;AAAA,QACN,YAAY,WAAW,SAAS,IAAI,aAAsB;AAAA,QAC1D,kBAAkB;AAAA,QAClB,gBAAgB,MAAM;AAAA,QACtB,eAAe,MAAM;AAAA,QACrB,cAAc,MAAM,mBAAmB;AAAA,QACvC;AAAA,QACA,SAAS,MAAM;AAAA,QACf,MAAM,SAAS,MAAM,GAAG,GAAK;AAAA,QAC7B,YAAY;AAAA,QACZ,UAAU;AAAA,QACV,SAAS;AAAA,QACT,cAAc;AAAA,QACd,SAAS;AAAA,UACP;AAAA,YACE,cAAc;AAAA,YACd,YAAY;AAAA,YACZ,UAAU,MAAM;AAAA,YAChB,gBAAgB;AAAA,UAClB;AAAA,QACF;AAAA,QACA,UAAU,IAAI,MAAM;AAAA,QACpB,gBAAgB,IAAI,MAAM;AAAA,QAC1B,QAAQ;AAAA,MACV;AAAA,MACA,KAAK;AAAA,QACH,WAAW,YAAY,IAAI,SAAS;AAAA,QACpC,MAAM;AAAA,QACN,mBAAmB;AAAA,QACnB,wBAAwB,IAAI,MAAM;AAAA,QAClC,iBAAiB,CAAC,IAAI,MAAM,cAAc;AAAA,MAC5C;AAAA,IACF,CAAC;AAED,UAAM,YAAa,QAA2B,MAAM;AACpD,WAAO;AAAA,EACT,SAAS,KAAK;AACZ,WAAO,MAAM,6CAA6C,EAAE,IAAI,CAAC;AACjE,WAAO;AAAA,EACT;AACF;AAEA,eAAsB,4BACpB,OACA,cACA,KACuC;AACvC,MAAI;AACF,UAAM,aAAa,kBAAkB,IAAI,SAAS;AAClD,QAAI,CAAC,WAAY,QAAO;AAExB,UAAM,KAAK,IAAI,UAAU,QAAQ,IAAI;AACrC,UAAM,KAAK,GAAG,UAAe;AAC7B,UAAM,mBAAmB,MAAM;AAAA,MAC7B;AAAA,MAAI,IAAI,MAAM;AAAA,MAAU;AAAA,IAC1B;AACA,QAAI,iBAAiB,WAAW,EAAG,QAAO;AAE1C,UAAM,aAAa,iBAAiB,IAAI,CAAC,YAAY,EAAE,QAAQ,MAAM,KAAc,EAAE;AAErF,UAAM,EAAE,OAAO,IAAI,MAAM,WAAW,QAAQ,6BAA6B;AAAA,MACvE,OAAO;AAAA,QACL,MAAM;AAAA,QACN,YAAY;AAAA,QACZ,kBAAkB;AAAA,QAClB,gBAAgB;AAAA,QAChB,eAAe,MAAM;AAAA,QACrB,cAAc,MAAM,UAAU;AAAA,QAC9B;AAAA,QACA,SAAS,MAAM;AAAA,QACf,MAAM,MAAM;AAAA,QACZ,YAAY;AAAA,QACZ,UAAU;AAAA,QACV,SAAS;AAAA,QACT,cAAc;AAAA,QACd,SAAS;AAAA,UACP;AAAA,YACE,cAAc;AAAA,YACd,YAAY;AAAA,YACZ,UAAU;AAAA,YACV,gBAAgB;AAAA,UAClB;AAAA,QACF;AAAA,QACA,UAAU,IAAI,MAAM;AAAA,QACpB,gBAAgB,IAAI,MAAM;AAAA,QAC1B,QAAQ,IAAI,MAAM;AAAA,MACpB;AAAA,MACA,KAAK;AAAA,QACH,WAAW,YAAY,IAAI,SAAS;AAAA,QACpC,MAAM;AAAA,QACN,mBAAmB;AAAA,QACnB,wBAAwB,IAAI,MAAM;AAAA,QAClC,iBAAiB,CAAC,IAAI,MAAM,cAAc;AAAA,MAC5C;AAAA,IACF,CAAC;AAED,UAAM,YAAa,QAA2B,MAAM;AACpD,QAAI,CAAC,UAAW,QAAO;AACvB,WAAO,EAAE,UAAU;AAAA,EACrB,SAAS,KAAK;AACZ,WAAO,MAAM,yCAAyC,EAAE,IAAI,CAAC;AAC7D,WAAO;AAAA,EACT;AACF;",
   "names": []
 }

package/dist/modules/inbox_ops/subscribers/executionAuditor.js

@@ -1,3 +1,5 @@
+import { createLogger } from "@open-mercato/shared/lib/logger";
+const logger = createLogger("inbox_ops").child({ component: "execution-auditor" });
 const metadata = {
   event: "inbox_ops.action.executed",
   persistent: true,
@@ -22,7 +24,7 @@ async function handle(payload, ctx) {
       }
     });
   } catch (err) {
-    console.error("[inbox_ops:execution-auditor] Failed to write audit log:", err);
+    logger.error("Failed to write audit log", { err });
     throw err;
   }
 }

package/dist/modules/inbox_ops/subscribers/executionAuditor.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/inbox_ops/subscribers/executionAuditor.ts"],
-  "sourcesContent": ["export const metadata = {\n  event: 'inbox_ops.action.executed',\n  persistent: true,\n  id: 'inbox_ops:execution-auditor',\n}\n\ninterface ActionExecutedPayload {\n  actionId: string\n  proposalId: string\n  actionType: string\n  createdEntityId: string | null\n  createdEntityType: string | null\n  executedByUserId: string\n  tenantId: string\n  organizationId: string | null\n}\n\ninterface DataEngineWithAudit {\n  audit?: (entry: {\n    action: string\n    resourceKind: string\n    resourceId: string\n    userId: string\n    tenantId: string\n    organizationId: string | null\n    payload: Record<string, unknown>\n  }) => Promise<void>\n}\n\ninterface ResolverContext {\n  resolve: <T = unknown>(name: string) => T\n}\n\nexport default async function handle(payload: ActionExecutedPayload, ctx: ResolverContext) {\n  try {\n    const dataEngine = ctx.resolve<DataEngineWithAudit>('dataEngine')\n    if (!dataEngine?.audit) return\n\n    await dataEngine.audit({\n      action: 'inbox_ops.action.executed',\n      resourceKind: `inbox_ops.${payload.actionType}`,\n      resourceId: payload.actionId,\n      userId: payload.executedByUserId,\n      tenantId: payload.tenantId,\n      organizationId: payload.organizationId,\n      payload: {\n        proposalId: payload.proposalId,\n        actionType: payload.actionType,\n        createdEntityId: payload.createdEntityId,\n        createdEntityType: payload.createdEntityType,\n      },\n    })\n  } catch (err) {\n    console.error('[inbox_ops:execution-auditor] Failed to write audit log:', err)\n    throw err\n  }\n}\n"],
-  "mappings": "AAAO,MAAM,WAAW;AAAA,EACtB,OAAO;AAAA,EACP,YAAY;AAAA,EACZ,IAAI;AACN;AA6BA,eAAO,OAA8B,SAAgC,KAAsB;AACzF,MAAI;AACF,UAAM,aAAa,IAAI,QAA6B,YAAY;AAChE,QAAI,CAAC,YAAY,MAAO;AAExB,UAAM,WAAW,MAAM;AAAA,MACrB,QAAQ;AAAA,MACR,cAAc,aAAa,QAAQ,UAAU;AAAA,MAC7C,YAAY,QAAQ;AAAA,MACpB,QAAQ,QAAQ;AAAA,MAChB,UAAU,QAAQ;AAAA,MAClB,gBAAgB,QAAQ;AAAA,MACxB,SAAS;AAAA,QACP,YAAY,QAAQ;AAAA,QACpB,YAAY,QAAQ;AAAA,QACpB,iBAAiB,QAAQ;AAAA,QACzB,mBAAmB,QAAQ;AAAA,MAC7B;AAAA,IACF,CAAC;AAAA,EACH,SAAS,KAAK;AACZ,YAAQ,MAAM,4DAA4D,GAAG;AAC7E,UAAM;AAAA,EACR;AACF;",
+  "sourcesContent": ["import { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('inbox_ops').child({ component: 'execution-auditor' })\n\nexport const metadata = {\n  event: 'inbox_ops.action.executed',\n  persistent: true,\n  id: 'inbox_ops:execution-auditor',\n}\n\ninterface ActionExecutedPayload {\n  actionId: string\n  proposalId: string\n  actionType: string\n  createdEntityId: string | null\n  createdEntityType: string | null\n  executedByUserId: string\n  tenantId: string\n  organizationId: string | null\n}\n\ninterface DataEngineWithAudit {\n  audit?: (entry: {\n    action: string\n    resourceKind: string\n    resourceId: string\n    userId: string\n    tenantId: string\n    organizationId: string | null\n    payload: Record<string, unknown>\n  }) => Promise<void>\n}\n\ninterface ResolverContext {\n  resolve: <T = unknown>(name: string) => T\n}\n\nexport default async function handle(payload: ActionExecutedPayload, ctx: ResolverContext) {\n  try {\n    const dataEngine = ctx.resolve<DataEngineWithAudit>('dataEngine')\n    if (!dataEngine?.audit) return\n\n    await dataEngine.audit({\n      action: 'inbox_ops.action.executed',\n      resourceKind: `inbox_ops.${payload.actionType}`,\n      resourceId: payload.actionId,\n      userId: payload.executedByUserId,\n      tenantId: payload.tenantId,\n      organizationId: payload.organizationId,\n      payload: {\n        proposalId: payload.proposalId,\n        actionType: payload.actionType,\n        createdEntityId: payload.createdEntityId,\n        createdEntityType: payload.createdEntityType,\n      },\n    })\n  } catch (err) {\n    logger.error('Failed to write audit log', { err })\n    throw err\n  }\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,WAAW,EAAE,MAAM,EAAE,WAAW,oBAAoB,CAAC;AAE1E,MAAM,WAAW;AAAA,EACtB,OAAO;AAAA,EACP,YAAY;AAAA,EACZ,IAAI;AACN;AA6BA,eAAO,OAA8B,SAAgC,KAAsB;AACzF,MAAI;AACF,UAAM,aAAa,IAAI,QAA6B,YAAY;AAChE,QAAI,CAAC,YAAY,MAAO;AAExB,UAAM,WAAW,MAAM;AAAA,MACrB,QAAQ;AAAA,MACR,cAAc,aAAa,QAAQ,UAAU;AAAA,MAC7C,YAAY,QAAQ;AAAA,MACpB,QAAQ,QAAQ;AAAA,MAChB,UAAU,QAAQ;AAAA,MAClB,gBAAgB,QAAQ;AAAA,MACxB,SAAS;AAAA,QACP,YAAY,QAAQ;AAAA,QACpB,YAAY,QAAQ;AAAA,QACpB,iBAAiB,QAAQ;AAAA,QACzB,mBAAmB,QAAQ;AAAA,MAC7B;AAAA,IACF,CAAC;AAAA,EACH,SAAS,KAAK;AACZ,WAAO,MAAM,6BAA6B,EAAE,IAAI,CAAC;AACjD,UAAM;AAAA,EACR;AACF;",
   "names": []
 }

package/dist/modules/inbox_ops/subscribers/extractionWorker.js

@@ -15,6 +15,8 @@ import { runWithCacheTenant } from "@open-mercato/cache";
 import { emitInboxOpsEvent } from "../events.js";
 import { createMessageRecordForEmail } from "../lib/messagesIntegration.js";
 import { resolveCache, invalidateCountsCache } from "../lib/cache.js";
+import { createLogger } from "@open-mercato/shared/lib/logger";
+const logger = createLogger("inbox_ops").child({ component: "extraction-worker" });
 const SYSTEM_USER_ID = "00000000-0000-0000-0000-000000000000";
 const metadata = {
   event: "inbox_ops.email.received",
@@ -25,7 +27,7 @@ function tryResolve(ctx, name) {
   try {
     return ctx.resolve(name);
   } catch {
-    console.debug(`[inbox_ops:extraction] optional dependency "${name}" not available`);
+    logger.debug("Optional dependency not available", { name });
     return void 0;
   }
 }
@@ -70,7 +72,7 @@ async function handle(payload, ctx) {
     { tenantId: payload.tenantId, organizationId: payload.organizationId }
   );
   if (!email) {
-    console.error(`[inbox_ops:extraction-worker] Email not found: ${payload.emailId}`);
+    logger.error("Email not found", { emailId: payload.emailId });
     return;
   }
   try {
@@ -130,7 +132,7 @@ async function handle(payload, ctx) {
           error: email.processingError
         });
       } catch (eventError) {
-        console.error("[inbox_ops:extraction-worker] Failed to emit email.failed event:", eventError);
+        logger.error("Failed to emit email.failed event", { err: eventError });
       }
       return;
     }
@@ -412,7 +414,7 @@ async function handle(payload, ctx) {
       const cache = resolveCache(ctx);
       await runWithCacheTenant(email.tenantId, () => invalidateCountsCache(cache, email.tenantId));
     } catch (cacheErr) {
-      console.warn("[inbox_ops:extraction-worker] Cache invalidation failed (non-fatal):", cacheErr);
+      logger.warn("Cache invalidation failed (non-fatal)", { err: cacheErr });
     }
     try {
       await createMessageRecordForEmail(
@@ -435,7 +437,7 @@ async function handle(payload, ctx) {
         }
       );
     } catch (msgErr) {
-      console.error("[inbox_ops:extraction-worker] Messages integration failed (non-fatal):", msgErr);
+      logger.error("Messages integration failed (non-fatal)", { err: msgErr });
     }
     try {
       await emitInboxOpsEvent("inbox_ops.email.processed", {
@@ -454,7 +456,7 @@ async function handle(payload, ctx) {
         summary: proposal.summary
       });
     } catch (eventError) {
-      console.error("[inbox_ops:extraction-worker] Failed to emit events:", eventError);
+      logger.error("Failed to emit events", { err: eventError });
     }
   } catch (err) {
     email.status = "failed";
@@ -468,9 +470,9 @@ async function handle(payload, ctx) {
         error: email.processingError
       });
     } catch (eventError) {
-      console.error("[inbox_ops:extraction-worker] Failed to emit email.failed event:", eventError);
+      logger.error("Failed to emit email.failed event", { err: eventError });
     }
-    console.error("[inbox_ops:extraction-worker] Extraction failed:", err);
+    logger.error("Extraction failed", { err });
   }
 }
 function normalizeOrderPayloadFields(payload) {