@open-mercato/core 0.6.6-develop.6465.1.019f0fb26f → 0.6.6-develop.6472.1.1673e7e66b

package/dist/modules/notifications/lib/notificationMapper.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/notifications/lib/notificationMapper.ts"],
-  "sourcesContent": ["import type { NotificationDto } from '@open-mercato/shared/modules/notifications/types'\nimport { Notification } from '../data/entities'\n\nexport function toNotificationDto(notification: Notification): NotificationDto {\n  const createdAt = notification.createdAt instanceof Date\n    ? notification.createdAt\n    : (() => {\n      if (process.env.NODE_ENV !== 'test') {\n        console.warn(\n          '[notifications] Invalid createdAt on notification entity, falling back to current time',\n          { id: notification.id, createdAt: notification.createdAt },\n        )\n      }\n      return new Date()\n    })()\n  return {\n    id: notification.id,\n    type: notification.type,\n    title: notification.title,\n    body: notification.body,\n    titleKey: notification.titleKey,\n    bodyKey: notification.bodyKey,\n    titleVariables: notification.titleVariables,\n    bodyVariables: notification.bodyVariables,\n    icon: notification.icon,\n    severity: notification.severity,\n    status: notification.status,\n    actions: notification.actionData?.actions?.map((action) => ({\n      id: action.id,\n      label: action.label,\n      labelKey: action.labelKey,\n      variant: action.variant,\n      icon: action.icon,\n    })) ?? [],\n    primaryActionId: notification.actionData?.primaryActionId,\n    sourceModule: notification.sourceModule,\n    sourceEntityType: notification.sourceEntityType,\n    sourceEntityId: notification.sourceEntityId,\n    linkHref: notification.linkHref,\n    createdAt: createdAt.toISOString(),\n    readAt: notification.readAt?.toISOString() ?? null,\n    actionTaken: notification.actionTaken,\n  }\n}\n"],
-  "mappings": "AAGO,SAAS,kBAAkB,cAA6C;AAC7E,QAAM,YAAY,aAAa,qBAAqB,OAChD,aAAa,aACZ,MAAM;AACP,QAAI,QAAQ,IAAI,aAAa,QAAQ;AACnC,cAAQ;AAAA,QACN;AAAA,QACA,EAAE,IAAI,aAAa,IAAI,WAAW,aAAa,UAAU;AAAA,MAC3D;AAAA,IACF;AACA,WAAO,oBAAI,KAAK;AAAA,EAClB,GAAG;AACL,SAAO;AAAA,IACL,IAAI,aAAa;AAAA,IACjB,MAAM,aAAa;AAAA,IACnB,OAAO,aAAa;AAAA,IACpB,MAAM,aAAa;AAAA,IACnB,UAAU,aAAa;AAAA,IACvB,SAAS,aAAa;AAAA,IACtB,gBAAgB,aAAa;AAAA,IAC7B,eAAe,aAAa;AAAA,IAC5B,MAAM,aAAa;AAAA,IACnB,UAAU,aAAa;AAAA,IACvB,QAAQ,aAAa;AAAA,IACrB,SAAS,aAAa,YAAY,SAAS,IAAI,CAAC,YAAY;AAAA,MAC1D,IAAI,OAAO;AAAA,MACX,OAAO,OAAO;AAAA,MACd,UAAU,OAAO;AAAA,MACjB,SAAS,OAAO;AAAA,MAChB,MAAM,OAAO;AAAA,IACf,EAAE,KAAK,CAAC;AAAA,IACR,iBAAiB,aAAa,YAAY;AAAA,IAC1C,cAAc,aAAa;AAAA,IAC3B,kBAAkB,aAAa;AAAA,IAC/B,gBAAgB,aAAa;AAAA,IAC7B,UAAU,aAAa;AAAA,IACvB,WAAW,UAAU,YAAY;AAAA,IACjC,QAAQ,aAAa,QAAQ,YAAY,KAAK;AAAA,IAC9C,aAAa,aAAa;AAAA,EAC5B;AACF;",
+  "sourcesContent": ["import type { NotificationDto } from '@open-mercato/shared/modules/notifications/types'\nimport { Notification } from '../data/entities'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('notifications').child({ component: 'mapper' })\n\nexport function toNotificationDto(notification: Notification): NotificationDto {\n  const createdAt = notification.createdAt instanceof Date\n    ? notification.createdAt\n    : (() => {\n      if (process.env.NODE_ENV !== 'test') {\n        logger.warn('Invalid createdAt on notification entity, falling back to current time', { id: notification.id, createdAt: notification.createdAt })\n      }\n      return new Date()\n    })()\n  return {\n    id: notification.id,\n    type: notification.type,\n    title: notification.title,\n    body: notification.body,\n    titleKey: notification.titleKey,\n    bodyKey: notification.bodyKey,\n    titleVariables: notification.titleVariables,\n    bodyVariables: notification.bodyVariables,\n    icon: notification.icon,\n    severity: notification.severity,\n    status: notification.status,\n    actions: notification.actionData?.actions?.map((action) => ({\n      id: action.id,\n      label: action.label,\n      labelKey: action.labelKey,\n      variant: action.variant,\n      icon: action.icon,\n    })) ?? [],\n    primaryActionId: notification.actionData?.primaryActionId,\n    sourceModule: notification.sourceModule,\n    sourceEntityType: notification.sourceEntityType,\n    sourceEntityId: notification.sourceEntityId,\n    linkHref: notification.linkHref,\n    createdAt: createdAt.toISOString(),\n    readAt: notification.readAt?.toISOString() ?? null,\n    actionTaken: notification.actionTaken,\n  }\n}\n"],
+  "mappings": "AAEA,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,eAAe,EAAE,MAAM,EAAE,WAAW,SAAS,CAAC;AAEnE,SAAS,kBAAkB,cAA6C;AAC7E,QAAM,YAAY,aAAa,qBAAqB,OAChD,aAAa,aACZ,MAAM;AACP,QAAI,QAAQ,IAAI,aAAa,QAAQ;AACnC,aAAO,KAAK,0EAA0E,EAAE,IAAI,aAAa,IAAI,WAAW,aAAa,UAAU,CAAC;AAAA,IAClJ;AACA,WAAO,oBAAI,KAAK;AAAA,EAClB,GAAG;AACL,SAAO;AAAA,IACL,IAAI,aAAa;AAAA,IACjB,MAAM,aAAa;AAAA,IACnB,OAAO,aAAa;AAAA,IACpB,MAAM,aAAa;AAAA,IACnB,UAAU,aAAa;AAAA,IACvB,SAAS,aAAa;AAAA,IACtB,gBAAgB,aAAa;AAAA,IAC7B,eAAe,aAAa;AAAA,IAC5B,MAAM,aAAa;AAAA,IACnB,UAAU,aAAa;AAAA,IACvB,QAAQ,aAAa;AAAA,IACrB,SAAS,aAAa,YAAY,SAAS,IAAI,CAAC,YAAY;AAAA,MAC1D,IAAI,OAAO;AAAA,MACX,OAAO,OAAO;AAAA,MACd,UAAU,OAAO;AAAA,MACjB,SAAS,OAAO;AAAA,MAChB,MAAM,OAAO;AAAA,IACf,EAAE,KAAK,CAAC;AAAA,IACR,iBAAiB,aAAa,YAAY;AAAA,IAC1C,cAAc,aAAa;AAAA,IAC3B,kBAAkB,aAAa;AAAA,IAC/B,gBAAgB,aAAa;AAAA,IAC7B,UAAU,aAAa;AAAA,IACvB,WAAW,UAAU,YAAY;AAAA,IACjC,QAAQ,aAAa,QAAQ,YAAY,KAAK;AAAA,IAC9C,aAAa,aAAa;AAAA,EAC5B;AACF;",
   "names": []
 }

package/dist/modules/notifications/lib/notificationService.js

@@ -11,11 +11,10 @@ import {
 import { toNotificationDto } from "./notificationMapper.js";
 import { getRecipientUserIdsForFeature, getRecipientUserIdsForRole } from "./notificationRecipients.js";
 import { assertSafeNotificationHref, sanitizeNotificationActions } from "./safeHref.js";
-const DEBUG = process.env.NOTIFICATIONS_DEBUG === "true";
-function debug(...args) {
-  if (DEBUG) {
-    console.log("[notifications]", ...args);
-  }
+import { createLogger } from "@open-mercato/shared/lib/logger";
+const logger = createLogger("notifications").child({ component: "service" });
+function debug(message, ...details) {
+  logger.debug(message, details.length ? { details } : void 0);
 }
 function getDb(em) {
   return em.getKysely();

package/dist/modules/notifications/lib/notificationService.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/notifications/lib/notificationService.ts"],
-  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport { type Kysely, sql } from 'kysely'\nimport { CrudHttpError, conflict } from '@open-mercato/shared/lib/crud/errors'\nimport { Notification, type NotificationStatus } from '../data/entities'\nimport type { CreateNotificationInput, CreateBatchNotificationInput, CreateRoleNotificationInput, CreateFeatureNotificationInput, ExecuteActionInput } from '../data/validators'\nimport type { NotificationPollData } from '@open-mercato/shared/modules/notifications/types'\nimport { NOTIFICATION_EVENTS, NOTIFICATION_SSE_EVENTS } from './events'\nimport { findOneWithDecryption, findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport {\n  buildNotificationEntity,\n  emitNotificationCreated,\n  emitNotificationCreatedBatch,\n  type NotificationContentInput,\n  type NotificationTenantContext,\n} from './notificationFactory'\nimport { toNotificationDto } from './notificationMapper'\nimport { getRecipientUserIdsForFeature, getRecipientUserIdsForRole } from './notificationRecipients'\nimport { assertSafeNotificationHref, sanitizeNotificationActions } from './safeHref'\n\nconst DEBUG = process.env.NOTIFICATIONS_DEBUG === 'true'\n\nfunction debug(...args: unknown[]): void {\n  if (DEBUG) {\n    console.log('[notifications]', ...args)\n  }\n}\n\nfunction getDb(em: EntityManager): Kysely<any> {\n  return em.getKysely<any>()\n}\n\nconst UNIQUE_NOTIFICATION_ACTIVE_STATUSES: NotificationStatus[] = ['unread', 'read', 'actioned']\n\nfunction normalizeOrgScope(organizationId: string | null | undefined): string | null {\n  return organizationId ?? null\n}\n\nfunction applyNotificationContent(\n  notification: Notification,\n  input: NotificationContentInput,\n  recipientUserId: string,\n  ctx: NotificationTenantContext,\n) {\n  const actions = sanitizeNotificationActions(input.actions)\n  const linkHref = assertSafeNotificationHref(input.linkHref)\n\n  notification.recipientUserId = recipientUserId\n  notification.type = input.type\n  notification.titleKey = input.titleKey\n  notification.bodyKey = input.bodyKey\n  notification.titleVariables = input.titleVariables\n  notification.bodyVariables = input.bodyVariables\n  notification.title = input.title || input.titleKey || ''\n  notification.body = input.body\n  notification.icon = input.icon\n  notification.severity = input.severity ?? 'info'\n  notification.actionData = actions\n    ? {\n        actions,\n        primaryActionId: input.primaryActionId,\n      }\n    : null\n  notification.sourceModule = input.sourceModule\n  notification.sourceEntityType = input.sourceEntityType\n  notification.sourceEntityId = input.sourceEntityId\n  notification.linkHref = linkHref\n  notification.groupKey = input.groupKey\n  notification.expiresAt = input.expiresAt ? new Date(input.expiresAt) : null\n  notification.tenantId = ctx.tenantId\n  notification.organizationId = normalizeOrgScope(ctx.organizationId)\n  notification.status = 'unread'\n  notification.readAt = null\n  notification.actionedAt = null\n  notification.dismissedAt = null\n  notification.actionTaken = null\n  notification.actionResult = null\n  notification.createdAt = new Date()\n}\n\nasync function findScopedNotificationOrThrow(\n  em: EntityManager,\n  notificationId: string,\n  ctx: NotificationServiceContext,\n): Promise<Notification> {\n  const notification = await findOneWithDecryption(\n    em,\n    Notification,\n    {\n      id: notificationId,\n      recipientUserId: ctx.userId,\n      tenantId: ctx.tenantId,\n    },\n    undefined,\n    {\n      tenantId: ctx.tenantId,\n      organizationId: ctx.organizationId ?? null,\n    },\n  )\n  if (!notification) {\n    throw new CrudHttpError(404, { error: 'Notification not found' })\n  }\n  return notification\n}\n\nasync function emitNotificationSseEvents(\n  eventBus: { emit: (event: string, payload: unknown) => Promise<void> },\n  notifications: Notification[],\n  ctx: NotificationServiceContext,\n  recipientUserIds: string[],\n): Promise<void> {\n  await eventBus.emit(NOTIFICATION_SSE_EVENTS.BATCH_CREATED, {\n    tenantId: ctx.tenantId,\n    organizationId: normalizeOrgScope(ctx.organizationId),\n    recipientUserIds,\n    count: notifications.length,\n  })\n\n  for (const notification of notifications) {\n    await eventBus.emit(NOTIFICATION_SSE_EVENTS.CREATED, {\n      tenantId: notification.tenantId,\n      organizationId: notification.organizationId ?? null,\n      recipientUserId: notification.recipientUserId,\n      notification: toNotificationDto(notification),\n    })\n  }\n}\n\nasync function createOrRefreshNotification(\n  em: EntityManager,\n  input: NotificationContentInput,\n  recipientUserId: string,\n  ctx: NotificationTenantContext,\n): Promise<Notification> {\n  if (input.groupKey && input.groupKey.trim().length > 0) {\n    const orgScope = normalizeOrgScope(ctx.organizationId) ?? 'global'\n    const lockKey = `notifications:${ctx.tenantId}:${orgScope}:${recipientUserId}:${input.type}:${input.groupKey}`\n    try {\n      const db = getDb(em)\n      await sql`select pg_advisory_xact_lock(hashtext(${lockKey}))`.execute(db)\n    } catch {\n      // If advisory locks are unavailable, continue with best-effort dedupe.\n    }\n\n    const existing = await em.findOne(Notification, {\n      recipientUserId,\n      tenantId: ctx.tenantId,\n      organizationId: normalizeOrgScope(ctx.organizationId),\n      type: input.type,\n      groupKey: input.groupKey,\n      status: { $in: UNIQUE_NOTIFICATION_ACTIVE_STATUSES },\n    }, {\n      orderBy: { createdAt: 'desc' },\n    })\n\n    if (existing) {\n      applyNotificationContent(existing, input, recipientUserId, ctx)\n      return existing\n    }\n  }\n\n  return buildNotificationEntity(em, input, recipientUserId, ctx)\n}\n\nexport interface NotificationServiceContext {\n  tenantId: string\n  organizationId?: string | null\n  userId?: string | null\n}\n\nexport interface NotificationService {\n  create(input: CreateNotificationInput, ctx: NotificationServiceContext): Promise<Notification>\n  createBatch(input: CreateBatchNotificationInput, ctx: NotificationServiceContext): Promise<Notification[]>\n  createForRole(input: CreateRoleNotificationInput, ctx: NotificationServiceContext): Promise<Notification[]>\n  createForFeature(input: CreateFeatureNotificationInput, ctx: NotificationServiceContext): Promise<Notification[]>\n  markAsRead(notificationId: string, ctx: NotificationServiceContext): Promise<Notification>\n  markAllAsRead(ctx: NotificationServiceContext): Promise<number>\n  dismiss(notificationId: string, ctx: NotificationServiceContext): Promise<Notification>\n  restoreDismissed(\n    notificationId: string,\n    status: 'read' | 'unread' | undefined,\n    ctx: NotificationServiceContext\n  ): Promise<Notification>\n  executeAction(\n    notificationId: string,\n    input: ExecuteActionInput,\n    ctx: NotificationServiceContext\n  ): Promise<{ notification: Notification; result: unknown }>\n  getUnreadCount(ctx: NotificationServiceContext): Promise<number>\n  getPollData(ctx: NotificationServiceContext, since?: string): Promise<NotificationPollData>\n  cleanupExpired(): Promise<number>\n  deleteBySource(\n    sourceEntityType: string,\n    sourceEntityId: string,\n    ctx: NotificationServiceContext\n  ): Promise<number>\n}\n\nexport interface NotificationServiceDeps {\n  em: EntityManager\n  eventBus: { emit: (event: string, payload: unknown) => Promise<void> }\n  commandBus?: {\n    execute: (\n      commandId: string,\n      options: { input: unknown; ctx: unknown; metadata?: unknown }\n    ) => Promise<{ result: unknown }>\n  }\n  container?: { resolve: (name: string) => unknown }\n}\n\nexport function createNotificationService(deps: NotificationServiceDeps): NotificationService {\n  const { em: rootEm, eventBus, commandBus, container } = deps\n\n  return {\n    async create(input, ctx) {\n      const { recipientUserId, ...content } = input\n      const writeEm = rootEm.fork()\n      const notification = await writeEm.transactional(async (tx) => {\n        const entity = await createOrRefreshNotification(tx, content, recipientUserId, ctx)\n        await tx.flush()\n        return entity\n      })\n\n      await emitNotificationCreated(eventBus, notification, ctx)\n      await eventBus.emit(NOTIFICATION_SSE_EVENTS.CREATED, {\n        tenantId: notification.tenantId,\n        organizationId: notification.organizationId ?? null,\n        recipientUserId: notification.recipientUserId,\n        notification: toNotificationDto(notification),\n      })\n\n      return notification\n    },\n\n    async createBatch(input, ctx) {\n      const recipientUserIds = Array.from(new Set(input.recipientUserIds))\n      const { recipientUserIds: _recipientUserIds, ...content } = input\n      const notifications: Notification[] = []\n      const writeEm = rootEm.fork()\n\n      await writeEm.transactional(async (tx) => {\n        for (const recipientUserId of recipientUserIds) {\n          const notification = await createOrRefreshNotification(tx, content, recipientUserId, ctx)\n          notifications.push(notification)\n        }\n        await tx.flush()\n      })\n\n      await emitNotificationCreatedBatch(eventBus, notifications, ctx)\n      await emitNotificationSseEvents(eventBus, notifications, ctx, recipientUserIds)\n\n      return notifications\n    },\n\n    async createForRole(input, ctx) {\n      const em = rootEm.fork()\n\n      const db = getDb(em)\n      const recipientUserIds = await getRecipientUserIdsForRole(db, ctx.tenantId, input.roleId)\n      if (recipientUserIds.length === 0) {\n        return []\n      }\n\n      const { roleId: _roleId, ...content } = input\n      const notifications: Notification[] = []\n      const uniqueRecipientUserIds = Array.from(new Set(recipientUserIds))\n      const writeEm = rootEm.fork()\n\n      await writeEm.transactional(async (tx) => {\n        for (const recipientUserId of uniqueRecipientUserIds) {\n          const notification = await createOrRefreshNotification(tx, content, recipientUserId, ctx)\n          notifications.push(notification)\n        }\n        await tx.flush()\n      })\n\n      await emitNotificationCreatedBatch(eventBus, notifications, ctx)\n      await emitNotificationSseEvents(eventBus, notifications, ctx, uniqueRecipientUserIds)\n\n      return notifications\n    },\n\n    async createForFeature(input, ctx) {\n      const em = rootEm.fork()\n      const db = getDb(em)\n      const recipientUserIds = await getRecipientUserIdsForFeature(db, ctx.tenantId, input.requiredFeature)\n\n      if (recipientUserIds.length === 0) {\n        debug('No users found with feature:', input.requiredFeature, 'in tenant:', ctx.tenantId)\n        return []\n      }\n\n      debug('Creating notifications for', recipientUserIds.length, 'user(s) with feature:', input.requiredFeature)\n\n      const { requiredFeature: _requiredFeature, ...content } = input\n      const notifications: Notification[] = []\n      const uniqueRecipientUserIds = Array.from(new Set(recipientUserIds))\n      const writeEm = rootEm.fork()\n\n      await writeEm.transactional(async (tx) => {\n        for (const recipientUserId of uniqueRecipientUserIds) {\n          const notification = await createOrRefreshNotification(tx, content, recipientUserId, ctx)\n          notifications.push(notification)\n        }\n        await tx.flush()\n      })\n\n      await emitNotificationCreatedBatch(eventBus, notifications, ctx)\n      await emitNotificationSseEvents(eventBus, notifications, ctx, uniqueRecipientUserIds)\n\n      return notifications\n    },\n\n    async markAsRead(notificationId, ctx) {\n      const em = rootEm.fork()\n      const notification = await findScopedNotificationOrThrow(em, notificationId, ctx)\n\n      if (notification.status === 'unread') {\n        notification.status = 'read'\n        notification.readAt = new Date()\n        await em.flush()\n\n        await eventBus.emit(NOTIFICATION_EVENTS.READ, {\n          notificationId: notification.id,\n          userId: ctx.userId,\n          tenantId: ctx.tenantId,\n        })\n      }\n\n      return notification\n    },\n\n    async markAllAsRead(ctx) {\n      const em = rootEm.fork()\n      const db = getDb(em)\n      const applyScope = <QB extends { where: (...args: any[]) => QB }>(q: QB): QB => {\n        let chain = q\n          .where('recipient_user_id' as any, '=', ctx.userId as any)\n          .where('tenant_id' as any, '=', ctx.tenantId)\n          .where('status' as any, '=', 'unread')\n        if (ctx.organizationId) {\n          chain = chain.where('organization_id' as any, '=', ctx.organizationId)\n        }\n        return chain\n      }\n\n      const targetRows = await applyScope(\n        db\n          .selectFrom('notifications' as any)\n          .select([\n            'id' as any,\n            'organization_id' as any,\n            'recipient_user_id' as any,\n          ]),\n      ).execute() as Array<{ id: string }>\n\n      if (!targetRows.length) {\n        return 0\n      }\n\n      const updateResult = await applyScope(\n        db.updateTable('notifications' as any).set({\n          status: 'read',\n          read_at: sql`now()`,\n        } as any) as any,\n      ).executeTakeFirst() as { numUpdatedRows?: bigint | number } | undefined\n      const result = Number(updateResult?.numUpdatedRows ?? targetRows.length)\n\n      const notifications = await findWithDecryption(em, Notification, {\n        id: { $in: targetRows.map((row) => row.id) },\n      }, undefined, {\n        tenantId: ctx.tenantId,\n        organizationId: ctx.organizationId ?? null,\n      })\n\n      for (const notification of notifications) {\n        await eventBus.emit(NOTIFICATION_EVENTS.READ, {\n          notificationId: notification.id,\n          userId: ctx.userId,\n          tenantId: ctx.tenantId,\n        })\n\n        await eventBus.emit(NOTIFICATION_SSE_EVENTS.CREATED, {\n          tenantId: notification.tenantId,\n          organizationId: notification.organizationId ?? null,\n          recipientUserId: notification.recipientUserId,\n          notification: toNotificationDto(notification),\n        })\n      }\n\n      return result\n    },\n\n    async dismiss(notificationId, ctx) {\n      const em = rootEm.fork()\n      const notification = await findScopedNotificationOrThrow(em, notificationId, ctx)\n\n      notification.status = 'dismissed'\n      notification.dismissedAt = new Date()\n      await em.flush()\n\n      await eventBus.emit(NOTIFICATION_EVENTS.DISMISSED, {\n        notificationId: notification.id,\n        userId: ctx.userId,\n        tenantId: ctx.tenantId,\n      })\n\n      return notification\n    },\n\n    async restoreDismissed(notificationId, status, ctx) {\n      const em = rootEm.fork()\n      const notification = await findScopedNotificationOrThrow(em, notificationId, ctx)\n\n      if (notification.status !== 'dismissed') {\n        return notification\n      }\n\n      const targetStatus = status ?? 'read'\n      notification.status = targetStatus\n      notification.dismissedAt = null\n\n      if (targetStatus === 'unread') {\n        notification.readAt = null\n      } else if (!notification.readAt) {\n        notification.readAt = new Date()\n      }\n\n      await em.flush()\n\n      await eventBus.emit(NOTIFICATION_EVENTS.RESTORED, {\n        notificationId: notification.id,\n        userId: ctx.userId,\n        tenantId: ctx.tenantId,\n        status: targetStatus,\n      })\n\n      return notification\n    },\n\n    async executeAction(notificationId, input, ctx) {\n      const em = rootEm.fork()\n      const notification = await findScopedNotificationOrThrow(em, notificationId, ctx)\n\n      const actionData = notification.actionData\n      const action = actionData?.actions?.find((a) => a.id === input.actionId)\n\n      if (!action) {\n        throw new Error('Action not found')\n      }\n\n      // Reject an already-actioned notification before dispatching the command,\n      // so a retry or double-click cannot re-run the side effect.\n      if (notification.status === 'actioned') {\n        throw conflict('Notification action already executed')\n      }\n\n      const actionedAt = new Date()\n      const previousStatus = notification.status\n      const previousActionedAt = notification.actionedAt ?? null\n      const previousActionTaken = notification.actionTaken ?? null\n\n      // Atomically claim the notification so only one concurrent request can run\n      // the side-effecting command. The conditional UPDATE matches only while the\n      // notification has not been actioned yet; a losing request updates 0 rows.\n      const claimResult = (await getDb(em)\n        .updateTable('notifications' as any)\n        .set({\n          status: 'actioned',\n          actioned_at: actionedAt,\n          action_taken: input.actionId,\n        } as any)\n        .where('id' as any, '=', notification.id)\n        .where('recipient_user_id' as any, '=', ctx.userId as any)\n        .where('tenant_id' as any, '=', ctx.tenantId)\n        .where('status' as any, '!=', 'actioned')\n        .executeTakeFirst()) as { numUpdatedRows?: bigint | number } | undefined\n\n      if (Number(claimResult?.numUpdatedRows ?? 0) === 0) {\n        throw conflict('Notification action already executed')\n      }\n\n      // The claim is provisional: if the side-effecting command fails, the action\n      // never actually completed, so release the claim to its prior state. This\n      // lets the user retry the action instead of the notification being locked as\n      // `actioned` forever. Only release while we still own the claim\n      // (status = 'actioned'), so a concurrent winner's state is never clobbered.\n      const releaseClaim = async () => {\n        await getDb(em)\n          .updateTable('notifications' as any)\n          .set({\n            status: previousStatus,\n            actioned_at: previousActionedAt,\n            action_taken: previousActionTaken,\n          } as any)\n          .where('id' as any, '=', notification.id)\n          .where('recipient_user_id' as any, '=', ctx.userId as any)\n          .where('tenant_id' as any, '=', ctx.tenantId)\n          .where('status' as any, '=', 'actioned')\n          .executeTakeFirst()\n      }\n\n      let result: unknown = null\n\n      if (action.commandId && commandBus && container) {\n        const commandInput = {\n          id: notification.sourceEntityId,\n          ...input.payload,\n        }\n\n        // Build a CommandRuntimeContext from the notification service context\n        const commandCtx = {\n          container,\n          auth: {\n            sub: ctx.userId,\n            tenantId: ctx.tenantId,\n            orgId: ctx.organizationId,\n          },\n          organizationScope: null,\n          selectedOrganizationId: ctx.organizationId ?? null,\n          organizationIds: ctx.organizationId ? [ctx.organizationId] : null,\n        }\n\n        let commandResult: { result: unknown }\n        try {\n          commandResult = await commandBus.execute(action.commandId, {\n            input: commandInput,\n            ctx: commandCtx,\n            metadata: {\n              tenantId: ctx.tenantId,\n              organizationId: ctx.organizationId,\n              resourceKind: 'notifications',\n            },\n          })\n        } catch (err) {\n          // Never let a rollback failure mask the original command error \u2014 the\n          // caller needs the real failure to decide whether to retry.\n          try {\n            await releaseClaim()\n          } catch (releaseErr) {\n            debug('failed to release notification action claim', releaseErr)\n          }\n          throw err\n        }\n\n        result = commandResult.result\n      }\n\n      notification.status = 'actioned'\n      notification.actionedAt = actionedAt\n      notification.actionTaken = input.actionId\n      notification.actionResult = result as Record<string, unknown>\n\n      if (!notification.readAt) {\n        notification.readAt = new Date()\n      }\n\n      await em.flush()\n\n      await eventBus.emit(NOTIFICATION_EVENTS.ACTIONED, {\n        notificationId: notification.id,\n        actionId: input.actionId,\n        userId: ctx.userId,\n        tenantId: ctx.tenantId,\n      })\n\n      return { notification, result }\n    },\n\n    async getUnreadCount(ctx) {\n      const em = rootEm.fork()\n      return em.count(Notification, {\n        recipientUserId: ctx.userId,\n        tenantId: ctx.tenantId,\n        status: 'unread',\n      })\n    },\n\n    async getPollData(ctx, since) {\n      const em = rootEm.fork()\n      const filters: Record<string, unknown> = {\n        recipientUserId: ctx.userId,\n        tenantId: ctx.tenantId,\n      }\n\n      if (since) {\n        filters.createdAt = { $gt: new Date(since) }\n      }\n\n      const [notifications, unreadCount] = await Promise.all([\n        em.find(Notification, filters, {\n          orderBy: { createdAt: 'desc' },\n          limit: 50,\n        }),\n        em.count(Notification, {\n          recipientUserId: ctx.userId,\n          tenantId: ctx.tenantId,\n          status: 'unread',\n        }),\n      ])\n\n      const recent = notifications.map(toNotificationDto)\n      const hasNew = since ? recent.length > 0 : false\n\n      return {\n        unreadCount,\n        recent,\n        hasNew,\n        lastId: recent[0]?.id,\n      }\n    },\n\n    async cleanupExpired() {\n      const em = rootEm.fork()\n      const db = getDb(em)\n\n      const updateResult = await db\n        .updateTable('notifications' as any)\n        .set({\n          status: 'dismissed',\n          dismissed_at: sql`now()`,\n        } as any)\n        .where('expires_at' as any, '<', sql`now()`)\n        .where('status' as any, 'not in', ['actioned', 'dismissed'])\n        .executeTakeFirst() as { numUpdatedRows?: bigint | number } | undefined\n\n      return Number(updateResult?.numUpdatedRows ?? 0)\n    },\n\n    async deleteBySource(sourceEntityType, sourceEntityId, ctx) {\n      const em = rootEm.fork()\n      const db = getDb(em)\n\n      const deleteResult = await db\n        .deleteFrom('notifications' as any)\n        .where('source_entity_type' as any, '=', sourceEntityType)\n        .where('source_entity_id' as any, '=', sourceEntityId)\n        .where('tenant_id' as any, '=', ctx.tenantId)\n        .executeTakeFirst() as { numDeletedRows?: bigint | number } | undefined\n\n      return Number(deleteResult?.numDeletedRows ?? 0)\n    },\n  }\n}\n\n/**\n * Helper to create notification service from a DI container.\n * Use this in API routes and commands to avoid DI resolution issues.\n */\nexport function resolveNotificationService(container: {\n  resolve: (name: string) => unknown\n}): NotificationService {\n  const em = container.resolve('em') as EntityManager\n  const eventBus = container.resolve('eventBus') as { emit: (event: string, payload: unknown) => Promise<void> }\n\n  // commandBus may not be registered in all contexts, so resolve it safely\n  let commandBus: NotificationServiceDeps['commandBus']\n  try {\n    commandBus = container.resolve('commandBus') as typeof commandBus\n  } catch {\n    // commandBus not available - actions with commandId won't work\n    commandBus = undefined\n  }\n\n  return createNotificationService({ em, eventBus, commandBus, container })\n}\n"],
-  "mappings": "AACA,SAAsB,WAAW;AACjC,SAAS,eAAe,gBAAgB;AACxC,SAAS,oBAA6C;AAGtD,SAAS,qBAAqB,+BAA+B;AAC7D,SAAS,uBAAuB,0BAA0B;AAC1D;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OAGK;AACP,SAAS,yBAAyB;AAClC,SAAS,+BAA+B,kCAAkC;AAC1E,SAAS,4BAA4B,mCAAmC;AAExE,MAAM,QAAQ,QAAQ,IAAI,wBAAwB;AAElD,SAAS,SAAS,MAAuB;AACvC,MAAI,OAAO;AACT,YAAQ,IAAI,mBAAmB,GAAG,IAAI;AAAA,EACxC;AACF;AAEA,SAAS,MAAM,IAAgC;AAC7C,SAAO,GAAG,UAAe;AAC3B;AAEA,MAAM,sCAA4D,CAAC,UAAU,QAAQ,UAAU;AAE/F,SAAS,kBAAkB,gBAA0D;AACnF,SAAO,kBAAkB;AAC3B;AAEA,SAAS,yBACP,cACA,OACA,iBACA,KACA;AACA,QAAM,UAAU,4BAA4B,MAAM,OAAO;AACzD,QAAM,WAAW,2BAA2B,MAAM,QAAQ;AAE1D,eAAa,kBAAkB;AAC/B,eAAa,OAAO,MAAM;AAC1B,eAAa,WAAW,MAAM;AAC9B,eAAa,UAAU,MAAM;AAC7B,eAAa,iBAAiB,MAAM;AACpC,eAAa,gBAAgB,MAAM;AACnC,eAAa,QAAQ,MAAM,SAAS,MAAM,YAAY;AACtD,eAAa,OAAO,MAAM;AAC1B,eAAa,OAAO,MAAM;AAC1B,eAAa,WAAW,MAAM,YAAY;AAC1C,eAAa,aAAa,UACtB;AAAA,IACE;AAAA,IACA,iBAAiB,MAAM;AAAA,EACzB,IACA;AACJ,eAAa,eAAe,MAAM;AAClC,eAAa,mBAAmB,MAAM;AACtC,eAAa,iBAAiB,MAAM;AACpC,eAAa,WAAW;AACxB,eAAa,WAAW,MAAM;AAC9B,eAAa,YAAY,MAAM,YAAY,IAAI,KAAK,MAAM,SAAS,IAAI;AACvE,eAAa,WAAW,IAAI;AAC5B,eAAa,iBAAiB,kBAAkB,IAAI,cAAc;AAClE,eAAa,SAAS;AACtB,eAAa,SAAS;AACtB,eAAa,aAAa;AAC1B,eAAa,cAAc;AAC3B,eAAa,cAAc;AAC3B,eAAa,eAAe;AAC5B,eAAa,YAAY,oBAAI,KAAK;AACpC;AAEA,eAAe,8BACb,IACA,gBACA,KACuB;AACvB,QAAM,eAAe,MAAM;AAAA,IACzB;AAAA,IACA;AAAA,IACA;AAAA,MACE,IAAI;AAAA,MACJ,iBAAiB,IAAI;AAAA,MACrB,UAAU,IAAI;AAAA,IAChB;AAAA,IACA;AAAA,IACA;AAAA,MACE,UAAU,IAAI;AAAA,MACd,gBAAgB,IAAI,kBAAkB;AAAA,IACxC;AAAA,EACF;AACA,MAAI,CAAC,cAAc;AACjB,UAAM,IAAI,cAAc,KAAK,EAAE,OAAO,yBAAyB,CAAC;AAAA,EAClE;AACA,SAAO;AACT;AAEA,eAAe,0BACb,UACA,eACA,KACA,kBACe;AACf,QAAM,SAAS,KAAK,wBAAwB,eAAe;AAAA,IACzD,UAAU,IAAI;AAAA,IACd,gBAAgB,kBAAkB,IAAI,cAAc;AAAA,IACpD;AAAA,IACA,OAAO,cAAc;AAAA,EACvB,CAAC;AAED,aAAW,gBAAgB,eAAe;AACxC,UAAM,SAAS,KAAK,wBAAwB,SAAS;AAAA,MACnD,UAAU,aAAa;AAAA,MACvB,gBAAgB,aAAa,kBAAkB;AAAA,MAC/C,iBAAiB,aAAa;AAAA,MAC9B,cAAc,kBAAkB,YAAY;AAAA,IAC9C,CAAC;AAAA,EACH;AACF;AAEA,eAAe,4BACb,IACA,OACA,iBACA,KACuB;AACvB,MAAI,MAAM,YAAY,MAAM,SAAS,KAAK,EAAE,SAAS,GAAG;AACtD,UAAM,WAAW,kBAAkB,IAAI,cAAc,KAAK;AAC1D,UAAM,UAAU,iBAAiB,IAAI,QAAQ,IAAI,QAAQ,IAAI,eAAe,IAAI,MAAM,IAAI,IAAI,MAAM,QAAQ;AAC5G,QAAI;AACF,YAAM,KAAK,MAAM,EAAE;AACnB,YAAM,4CAA4C,OAAO,KAAK,QAAQ,EAAE;AAAA,IAC1E,QAAQ;AAAA,IAER;AAEA,UAAM,WAAW,MAAM,GAAG,QAAQ,cAAc;AAAA,MAC9C;AAAA,MACA,UAAU,IAAI;AAAA,MACd,gBAAgB,kBAAkB,IAAI,cAAc;AAAA,MACpD,MAAM,MAAM;AAAA,MACZ,UAAU,MAAM;AAAA,MAChB,QAAQ,EAAE,KAAK,oCAAoC;AAAA,IACrD,GAAG;AAAA,MACD,SAAS,EAAE,WAAW,OAAO;AAAA,IAC/B,CAAC;AAED,QAAI,UAAU;AACZ,+BAAyB,UAAU,OAAO,iBAAiB,GAAG;AAC9D,aAAO;AAAA,IACT;AAAA,EACF;AAEA,SAAO,wBAAwB,IAAI,OAAO,iBAAiB,GAAG;AAChE;AAgDO,SAAS,0BAA0B,MAAoD;AAC5F,QAAM,EAAE,IAAI,QAAQ,UAAU,YAAY,UAAU,IAAI;AAExD,SAAO;AAAA,IACL,MAAM,OAAO,OAAO,KAAK;AACvB,YAAM,EAAE,iBAAiB,GAAG,QAAQ,IAAI;AACxC,YAAM,UAAU,OAAO,KAAK;AAC5B,YAAM,eAAe,MAAM,QAAQ,cAAc,OAAO,OAAO;AAC7D,cAAM,SAAS,MAAM,4BAA4B,IAAI,SAAS,iBAAiB,GAAG;AAClF,cAAM,GAAG,MAAM;AACf,eAAO;AAAA,MACT,CAAC;AAED,YAAM,wBAAwB,UAAU,cAAc,GAAG;AACzD,YAAM,SAAS,KAAK,wBAAwB,SAAS;AAAA,QACnD,UAAU,aAAa;AAAA,QACvB,gBAAgB,aAAa,kBAAkB;AAAA,QAC/C,iBAAiB,aAAa;AAAA,QAC9B,cAAc,kBAAkB,YAAY;AAAA,MAC9C,CAAC;AAED,aAAO;AAAA,IACT;AAAA,IAEA,MAAM,YAAY,OAAO,KAAK;AAC5B,YAAM,mBAAmB,MAAM,KAAK,IAAI,IAAI,MAAM,gBAAgB,CAAC;AACnE,YAAM,EAAE,kBAAkB,mBAAmB,GAAG,QAAQ,IAAI;AAC5D,YAAM,gBAAgC,CAAC;AACvC,YAAM,UAAU,OAAO,KAAK;AAE5B,YAAM,QAAQ,cAAc,OAAO,OAAO;AACxC,mBAAW,mBAAmB,kBAAkB;AAC9C,gBAAM,eAAe,MAAM,4BAA4B,IAAI,SAAS,iBAAiB,GAAG;AACxF,wBAAc,KAAK,YAAY;AAAA,QACjC;AACA,cAAM,GAAG,MAAM;AAAA,MACjB,CAAC;AAED,YAAM,6BAA6B,UAAU,eAAe,GAAG;AAC/D,YAAM,0BAA0B,UAAU,eAAe,KAAK,gBAAgB;AAE9E,aAAO;AAAA,IACT;AAAA,IAEA,MAAM,cAAc,OAAO,KAAK;AAC9B,YAAM,KAAK,OAAO,KAAK;AAEvB,YAAM,KAAK,MAAM,EAAE;AACnB,YAAM,mBAAmB,MAAM,2BAA2B,IAAI,IAAI,UAAU,MAAM,MAAM;AACxF,UAAI,iBAAiB,WAAW,GAAG;AACjC,eAAO,CAAC;AAAA,MACV;AAEA,YAAM,EAAE,QAAQ,SAAS,GAAG,QAAQ,IAAI;AACxC,YAAM,gBAAgC,CAAC;AACvC,YAAM,yBAAyB,MAAM,KAAK,IAAI,IAAI,gBAAgB,CAAC;AACnE,YAAM,UAAU,OAAO,KAAK;AAE5B,YAAM,QAAQ,cAAc,OAAO,OAAO;AACxC,mBAAW,mBAAmB,wBAAwB;AACpD,gBAAM,eAAe,MAAM,4BAA4B,IAAI,SAAS,iBAAiB,GAAG;AACxF,wBAAc,KAAK,YAAY;AAAA,QACjC;AACA,cAAM,GAAG,MAAM;AAAA,MACjB,CAAC;AAED,YAAM,6BAA6B,UAAU,eAAe,GAAG;AAC/D,YAAM,0BAA0B,UAAU,eAAe,KAAK,sBAAsB;AAEpF,aAAO;AAAA,IACT;AAAA,IAEA,MAAM,iBAAiB,OAAO,KAAK;AACjC,YAAM,KAAK,OAAO,KAAK;AACvB,YAAM,KAAK,MAAM,EAAE;AACnB,YAAM,mBAAmB,MAAM,8BAA8B,IAAI,IAAI,UAAU,MAAM,eAAe;AAEpG,UAAI,iBAAiB,WAAW,GAAG;AACjC,cAAM,gCAAgC,MAAM,iBAAiB,cAAc,IAAI,QAAQ;AACvF,eAAO,CAAC;AAAA,MACV;AAEA,YAAM,8BAA8B,iBAAiB,QAAQ,yBAAyB,MAAM,eAAe;AAE3G,YAAM,EAAE,iBAAiB,kBAAkB,GAAG,QAAQ,IAAI;AAC1D,YAAM,gBAAgC,CAAC;AACvC,YAAM,yBAAyB,MAAM,KAAK,IAAI,IAAI,gBAAgB,CAAC;AACnE,YAAM,UAAU,OAAO,KAAK;AAE5B,YAAM,QAAQ,cAAc,OAAO,OAAO;AACxC,mBAAW,mBAAmB,wBAAwB;AACpD,gBAAM,eAAe,MAAM,4BAA4B,IAAI,SAAS,iBAAiB,GAAG;AACxF,wBAAc,KAAK,YAAY;AAAA,QACjC;AACA,cAAM,GAAG,MAAM;AAAA,MACjB,CAAC;AAED,YAAM,6BAA6B,UAAU,eAAe,GAAG;AAC/D,YAAM,0BAA0B,UAAU,eAAe,KAAK,sBAAsB;AAEpF,aAAO;AAAA,IACT;AAAA,IAEA,MAAM,WAAW,gBAAgB,KAAK;AACpC,YAAM,KAAK,OAAO,KAAK;AACvB,YAAM,eAAe,MAAM,8BAA8B,IAAI,gBAAgB,GAAG;AAEhF,UAAI,aAAa,WAAW,UAAU;AACpC,qBAAa,SAAS;AACtB,qBAAa,SAAS,oBAAI,KAAK;AAC/B,cAAM,GAAG,MAAM;AAEf,cAAM,SAAS,KAAK,oBAAoB,MAAM;AAAA,UAC5C,gBAAgB,aAAa;AAAA,UAC7B,QAAQ,IAAI;AAAA,UACZ,UAAU,IAAI;AAAA,QAChB,CAAC;AAAA,MACH;AAEA,aAAO;AAAA,IACT;AAAA,IAEA,MAAM,cAAc,KAAK;AACvB,YAAM,KAAK,OAAO,KAAK;AACvB,YAAM,KAAK,MAAM,EAAE;AACnB,YAAM,aAAa,CAA+C,MAAc;AAC9E,YAAI,QAAQ,EACT,MAAM,qBAA4B,KAAK,IAAI,MAAa,EACxD,MAAM,aAAoB,KAAK,IAAI,QAAQ,EAC3C,MAAM,UAAiB,KAAK,QAAQ;AACvC,YAAI,IAAI,gBAAgB;AACtB,kBAAQ,MAAM,MAAM,mBAA0B,KAAK,IAAI,cAAc;AAAA,QACvE;AACA,eAAO;AAAA,MACT;AAEA,YAAM,aAAa,MAAM;AAAA,QACvB,GACG,WAAW,eAAsB,EACjC,OAAO;AAAA,UACN;AAAA,UACA;AAAA,UACA;AAAA,QACF,CAAC;AAAA,MACL,EAAE,QAAQ;AAEV,UAAI,CAAC,WAAW,QAAQ;AACtB,eAAO;AAAA,MACT;AAEA,YAAM,eAAe,MAAM;AAAA,QACzB,GAAG,YAAY,eAAsB,EAAE,IAAI;AAAA,UACzC,QAAQ;AAAA,UACR,SAAS;AAAA,QACX,CAAQ;AAAA,MACV,EAAE,iBAAiB;AACnB,YAAM,SAAS,OAAO,cAAc,kBAAkB,WAAW,MAAM;AAEvE,YAAM,gBAAgB,MAAM,mBAAmB,IAAI,cAAc;AAAA,QAC/D,IAAI,EAAE,KAAK,WAAW,IAAI,CAAC,QAAQ,IAAI,EAAE,EAAE;AAAA,MAC7C,GAAG,QAAW;AAAA,QACZ,UAAU,IAAI;AAAA,QACd,gBAAgB,IAAI,kBAAkB;AAAA,MACxC,CAAC;AAED,iBAAW,gBAAgB,eAAe;AACxC,cAAM,SAAS,KAAK,oBAAoB,MAAM;AAAA,UAC5C,gBAAgB,aAAa;AAAA,UAC7B,QAAQ,IAAI;AAAA,UACZ,UAAU,IAAI;AAAA,QAChB,CAAC;AAED,cAAM,SAAS,KAAK,wBAAwB,SAAS;AAAA,UACnD,UAAU,aAAa;AAAA,UACvB,gBAAgB,aAAa,kBAAkB;AAAA,UAC/C,iBAAiB,aAAa;AAAA,UAC9B,cAAc,kBAAkB,YAAY;AAAA,QAC9C,CAAC;AAAA,MACH;AAEA,aAAO;AAAA,IACT;AAAA,IAEA,MAAM,QAAQ,gBAAgB,KAAK;AACjC,YAAM,KAAK,OAAO,KAAK;AACvB,YAAM,eAAe,MAAM,8BAA8B,IAAI,gBAAgB,GAAG;AAEhF,mBAAa,SAAS;AACtB,mBAAa,cAAc,oBAAI,KAAK;AACpC,YAAM,GAAG,MAAM;AAEf,YAAM,SAAS,KAAK,oBAAoB,WAAW;AAAA,QACjD,gBAAgB,aAAa;AAAA,QAC7B,QAAQ,IAAI;AAAA,QACZ,UAAU,IAAI;AAAA,MAChB,CAAC;AAED,aAAO;AAAA,IACT;AAAA,IAEA,MAAM,iBAAiB,gBAAgB,QAAQ,KAAK;AAClD,YAAM,KAAK,OAAO,KAAK;AACvB,YAAM,eAAe,MAAM,8BAA8B,IAAI,gBAAgB,GAAG;AAEhF,UAAI,aAAa,WAAW,aAAa;AACvC,eAAO;AAAA,MACT;AAEA,YAAM,eAAe,UAAU;AAC/B,mBAAa,SAAS;AACtB,mBAAa,cAAc;AAE3B,UAAI,iBAAiB,UAAU;AAC7B,qBAAa,SAAS;AAAA,MACxB,WAAW,CAAC,aAAa,QAAQ;AAC/B,qBAAa,SAAS,oBAAI,KAAK;AAAA,MACjC;AAEA,YAAM,GAAG,MAAM;AAEf,YAAM,SAAS,KAAK,oBAAoB,UAAU;AAAA,QAChD,gBAAgB,aAAa;AAAA,QAC7B,QAAQ,IAAI;AAAA,QACZ,UAAU,IAAI;AAAA,QACd,QAAQ;AAAA,MACV,CAAC;AAED,aAAO;AAAA,IACT;AAAA,IAEA,MAAM,cAAc,gBAAgB,OAAO,KAAK;AAC9C,YAAM,KAAK,OAAO,KAAK;AACvB,YAAM,eAAe,MAAM,8BAA8B,IAAI,gBAAgB,GAAG;AAEhF,YAAM,aAAa,aAAa;AAChC,YAAM,SAAS,YAAY,SAAS,KAAK,CAAC,MAAM,EAAE,OAAO,MAAM,QAAQ;AAEvE,UAAI,CAAC,QAAQ;AACX,cAAM,IAAI,MAAM,kBAAkB;AAAA,MACpC;AAIA,UAAI,aAAa,WAAW,YAAY;AACtC,cAAM,SAAS,sCAAsC;AAAA,MACvD;AAEA,YAAM,aAAa,oBAAI,KAAK;AAC5B,YAAM,iBAAiB,aAAa;AACpC,YAAM,qBAAqB,aAAa,cAAc;AACtD,YAAM,sBAAsB,aAAa,eAAe;AAKxD,YAAM,cAAe,MAAM,MAAM,EAAE,EAChC,YAAY,eAAsB,EAClC,IAAI;AAAA,QACH,QAAQ;AAAA,QACR,aAAa;AAAA,QACb,cAAc,MAAM;AAAA,MACtB,CAAQ,EACP,MAAM,MAAa,KAAK,aAAa,EAAE,EACvC,MAAM,qBAA4B,KAAK,IAAI,MAAa,EACxD,MAAM,aAAoB,KAAK,IAAI,QAAQ,EAC3C,MAAM,UAAiB,MAAM,UAAU,EACvC,iBAAiB;AAEpB,UAAI,OAAO,aAAa,kBAAkB,CAAC,MAAM,GAAG;AAClD,cAAM,SAAS,sCAAsC;AAAA,MACvD;AAOA,YAAM,eAAe,YAAY;AAC/B,cAAM,MAAM,EAAE,EACX,YAAY,eAAsB,EAClC,IAAI;AAAA,UACH,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,cAAc;AAAA,QAChB,CAAQ,EACP,MAAM,MAAa,KAAK,aAAa,EAAE,EACvC,MAAM,qBAA4B,KAAK,IAAI,MAAa,EACxD,MAAM,aAAoB,KAAK,IAAI,QAAQ,EAC3C,MAAM,UAAiB,KAAK,UAAU,EACtC,iBAAiB;AAAA,MACtB;AAEA,UAAI,SAAkB;AAEtB,UAAI,OAAO,aAAa,cAAc,WAAW;AAC/C,cAAM,eAAe;AAAA,UACnB,IAAI,aAAa;AAAA,UACjB,GAAG,MAAM;AAAA,QACX;AAGA,cAAM,aAAa;AAAA,UACjB;AAAA,UACA,MAAM;AAAA,YACJ,KAAK,IAAI;AAAA,YACT,UAAU,IAAI;AAAA,YACd,OAAO,IAAI;AAAA,UACb;AAAA,UACA,mBAAmB;AAAA,UACnB,wBAAwB,IAAI,kBAAkB;AAAA,UAC9C,iBAAiB,IAAI,iBAAiB,CAAC,IAAI,cAAc,IAAI;AAAA,QAC/D;AAEA,YAAI;AACJ,YAAI;AACF,0BAAgB,MAAM,WAAW,QAAQ,OAAO,WAAW;AAAA,YACzD,OAAO;AAAA,YACP,KAAK;AAAA,YACL,UAAU;AAAA,cACR,UAAU,IAAI;AAAA,cACd,gBAAgB,IAAI;AAAA,cACpB,cAAc;AAAA,YAChB;AAAA,UACF,CAAC;AAAA,QACH,SAAS,KAAK;AAGZ,cAAI;AACF,kBAAM,aAAa;AAAA,UACrB,SAAS,YAAY;AACnB,kBAAM,+CAA+C,UAAU;AAAA,UACjE;AACA,gBAAM;AAAA,QACR;AAEA,iBAAS,cAAc;AAAA,MACzB;AAEA,mBAAa,SAAS;AACtB,mBAAa,aAAa;AAC1B,mBAAa,cAAc,MAAM;AACjC,mBAAa,eAAe;AAE5B,UAAI,CAAC,aAAa,QAAQ;AACxB,qBAAa,SAAS,oBAAI,KAAK;AAAA,MACjC;AAEA,YAAM,GAAG,MAAM;AAEf,YAAM,SAAS,KAAK,oBAAoB,UAAU;AAAA,QAChD,gBAAgB,aAAa;AAAA,QAC7B,UAAU,MAAM;AAAA,QAChB,QAAQ,IAAI;AAAA,QACZ,UAAU,IAAI;AAAA,MAChB,CAAC;AAED,aAAO,EAAE,cAAc,OAAO;AAAA,IAChC;AAAA,IAEA,MAAM,eAAe,KAAK;AACxB,YAAM,KAAK,OAAO,KAAK;AACvB,aAAO,GAAG,MAAM,cAAc;AAAA,QAC5B,iBAAiB,IAAI;AAAA,QACrB,UAAU,IAAI;AAAA,QACd,QAAQ;AAAA,MACV,CAAC;AAAA,IACH;AAAA,IAEA,MAAM,YAAY,KAAK,OAAO;AAC5B,YAAM,KAAK,OAAO,KAAK;AACvB,YAAM,UAAmC;AAAA,QACvC,iBAAiB,IAAI;AAAA,QACrB,UAAU,IAAI;AAAA,MAChB;AAEA,UAAI,OAAO;AACT,gBAAQ,YAAY,EAAE,KAAK,IAAI,KAAK,KAAK,EAAE;AAAA,MAC7C;AAEA,YAAM,CAAC,eAAe,WAAW,IAAI,MAAM,QAAQ,IAAI;AAAA,QACrD,GAAG,KAAK,cAAc,SAAS;AAAA,UAC7B,SAAS,EAAE,WAAW,OAAO;AAAA,UAC7B,OAAO;AAAA,QACT,CAAC;AAAA,QACD,GAAG,MAAM,cAAc;AAAA,UACrB,iBAAiB,IAAI;AAAA,UACrB,UAAU,IAAI;AAAA,UACd,QAAQ;AAAA,QACV,CAAC;AAAA,MACH,CAAC;AAED,YAAM,SAAS,cAAc,IAAI,iBAAiB;AAClD,YAAM,SAAS,QAAQ,OAAO,SAAS,IAAI;AAE3C,aAAO;AAAA,QACL;AAAA,QACA;AAAA,QACA;AAAA,QACA,QAAQ,OAAO,CAAC,GAAG;AAAA,MACrB;AAAA,IACF;AAAA,IAEA,MAAM,iBAAiB;AACrB,YAAM,KAAK,OAAO,KAAK;AACvB,YAAM,KAAK,MAAM,EAAE;AAEnB,YAAM,eAAe,MAAM,GACxB,YAAY,eAAsB,EAClC,IAAI;AAAA,QACH,QAAQ;AAAA,QACR,cAAc;AAAA,MAChB,CAAQ,EACP,MAAM,cAAqB,KAAK,UAAU,EAC1C,MAAM,UAAiB,UAAU,CAAC,YAAY,WAAW,CAAC,EAC1D,iBAAiB;AAEpB,aAAO,OAAO,cAAc,kBAAkB,CAAC;AAAA,IACjD;AAAA,IAEA,MAAM,eAAe,kBAAkB,gBAAgB,KAAK;AAC1D,YAAM,KAAK,OAAO,KAAK;AACvB,YAAM,KAAK,MAAM,EAAE;AAEnB,YAAM,eAAe,MAAM,GACxB,WAAW,eAAsB,EACjC,MAAM,sBAA6B,KAAK,gBAAgB,EACxD,MAAM,oBAA2B,KAAK,cAAc,EACpD,MAAM,aAAoB,KAAK,IAAI,QAAQ,EAC3C,iBAAiB;AAEpB,aAAO,OAAO,cAAc,kBAAkB,CAAC;AAAA,IACjD;AAAA,EACF;AACF;AAMO,SAAS,2BAA2B,WAEnB;AACtB,QAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,QAAM,WAAW,UAAU,QAAQ,UAAU;AAG7C,MAAI;AACJ,MAAI;AACF,iBAAa,UAAU,QAAQ,YAAY;AAAA,EAC7C,QAAQ;AAEN,iBAAa;AAAA,EACf;AAEA,SAAO,0BAA0B,EAAE,IAAI,UAAU,YAAY,UAAU,CAAC;AAC1E;",
+  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport { type Kysely, sql } from 'kysely'\nimport { CrudHttpError, conflict } from '@open-mercato/shared/lib/crud/errors'\nimport { Notification, type NotificationStatus } from '../data/entities'\nimport type { CreateNotificationInput, CreateBatchNotificationInput, CreateRoleNotificationInput, CreateFeatureNotificationInput, ExecuteActionInput } from '../data/validators'\nimport type { NotificationPollData } from '@open-mercato/shared/modules/notifications/types'\nimport { NOTIFICATION_EVENTS, NOTIFICATION_SSE_EVENTS } from './events'\nimport { findOneWithDecryption, findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport {\n  buildNotificationEntity,\n  emitNotificationCreated,\n  emitNotificationCreatedBatch,\n  type NotificationContentInput,\n  type NotificationTenantContext,\n} from './notificationFactory'\nimport { toNotificationDto } from './notificationMapper'\nimport { getRecipientUserIdsForFeature, getRecipientUserIdsForRole } from './notificationRecipients'\nimport { assertSafeNotificationHref, sanitizeNotificationActions } from './safeHref'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('notifications').child({ component: 'service' })\n\nfunction debug(message: string, ...details: unknown[]): void {\n  logger.debug(message, details.length ? { details } : undefined)\n}\n\nfunction getDb(em: EntityManager): Kysely<any> {\n  return em.getKysely<any>()\n}\n\nconst UNIQUE_NOTIFICATION_ACTIVE_STATUSES: NotificationStatus[] = ['unread', 'read', 'actioned']\n\nfunction normalizeOrgScope(organizationId: string | null | undefined): string | null {\n  return organizationId ?? null\n}\n\nfunction applyNotificationContent(\n  notification: Notification,\n  input: NotificationContentInput,\n  recipientUserId: string,\n  ctx: NotificationTenantContext,\n) {\n  const actions = sanitizeNotificationActions(input.actions)\n  const linkHref = assertSafeNotificationHref(input.linkHref)\n\n  notification.recipientUserId = recipientUserId\n  notification.type = input.type\n  notification.titleKey = input.titleKey\n  notification.bodyKey = input.bodyKey\n  notification.titleVariables = input.titleVariables\n  notification.bodyVariables = input.bodyVariables\n  notification.title = input.title || input.titleKey || ''\n  notification.body = input.body\n  notification.icon = input.icon\n  notification.severity = input.severity ?? 'info'\n  notification.actionData = actions\n    ? {\n        actions,\n        primaryActionId: input.primaryActionId,\n      }\n    : null\n  notification.sourceModule = input.sourceModule\n  notification.sourceEntityType = input.sourceEntityType\n  notification.sourceEntityId = input.sourceEntityId\n  notification.linkHref = linkHref\n  notification.groupKey = input.groupKey\n  notification.expiresAt = input.expiresAt ? new Date(input.expiresAt) : null\n  notification.tenantId = ctx.tenantId\n  notification.organizationId = normalizeOrgScope(ctx.organizationId)\n  notification.status = 'unread'\n  notification.readAt = null\n  notification.actionedAt = null\n  notification.dismissedAt = null\n  notification.actionTaken = null\n  notification.actionResult = null\n  notification.createdAt = new Date()\n}\n\nasync function findScopedNotificationOrThrow(\n  em: EntityManager,\n  notificationId: string,\n  ctx: NotificationServiceContext,\n): Promise<Notification> {\n  const notification = await findOneWithDecryption(\n    em,\n    Notification,\n    {\n      id: notificationId,\n      recipientUserId: ctx.userId,\n      tenantId: ctx.tenantId,\n    },\n    undefined,\n    {\n      tenantId: ctx.tenantId,\n      organizationId: ctx.organizationId ?? null,\n    },\n  )\n  if (!notification) {\n    throw new CrudHttpError(404, { error: 'Notification not found' })\n  }\n  return notification\n}\n\nasync function emitNotificationSseEvents(\n  eventBus: { emit: (event: string, payload: unknown) => Promise<void> },\n  notifications: Notification[],\n  ctx: NotificationServiceContext,\n  recipientUserIds: string[],\n): Promise<void> {\n  await eventBus.emit(NOTIFICATION_SSE_EVENTS.BATCH_CREATED, {\n    tenantId: ctx.tenantId,\n    organizationId: normalizeOrgScope(ctx.organizationId),\n    recipientUserIds,\n    count: notifications.length,\n  })\n\n  for (const notification of notifications) {\n    await eventBus.emit(NOTIFICATION_SSE_EVENTS.CREATED, {\n      tenantId: notification.tenantId,\n      organizationId: notification.organizationId ?? null,\n      recipientUserId: notification.recipientUserId,\n      notification: toNotificationDto(notification),\n    })\n  }\n}\n\nasync function createOrRefreshNotification(\n  em: EntityManager,\n  input: NotificationContentInput,\n  recipientUserId: string,\n  ctx: NotificationTenantContext,\n): Promise<Notification> {\n  if (input.groupKey && input.groupKey.trim().length > 0) {\n    const orgScope = normalizeOrgScope(ctx.organizationId) ?? 'global'\n    const lockKey = `notifications:${ctx.tenantId}:${orgScope}:${recipientUserId}:${input.type}:${input.groupKey}`\n    try {\n      const db = getDb(em)\n      await sql`select pg_advisory_xact_lock(hashtext(${lockKey}))`.execute(db)\n    } catch {\n      // If advisory locks are unavailable, continue with best-effort dedupe.\n    }\n\n    const existing = await em.findOne(Notification, {\n      recipientUserId,\n      tenantId: ctx.tenantId,\n      organizationId: normalizeOrgScope(ctx.organizationId),\n      type: input.type,\n      groupKey: input.groupKey,\n      status: { $in: UNIQUE_NOTIFICATION_ACTIVE_STATUSES },\n    }, {\n      orderBy: { createdAt: 'desc' },\n    })\n\n    if (existing) {\n      applyNotificationContent(existing, input, recipientUserId, ctx)\n      return existing\n    }\n  }\n\n  return buildNotificationEntity(em, input, recipientUserId, ctx)\n}\n\nexport interface NotificationServiceContext {\n  tenantId: string\n  organizationId?: string | null\n  userId?: string | null\n}\n\nexport interface NotificationService {\n  create(input: CreateNotificationInput, ctx: NotificationServiceContext): Promise<Notification>\n  createBatch(input: CreateBatchNotificationInput, ctx: NotificationServiceContext): Promise<Notification[]>\n  createForRole(input: CreateRoleNotificationInput, ctx: NotificationServiceContext): Promise<Notification[]>\n  createForFeature(input: CreateFeatureNotificationInput, ctx: NotificationServiceContext): Promise<Notification[]>\n  markAsRead(notificationId: string, ctx: NotificationServiceContext): Promise<Notification>\n  markAllAsRead(ctx: NotificationServiceContext): Promise<number>\n  dismiss(notificationId: string, ctx: NotificationServiceContext): Promise<Notification>\n  restoreDismissed(\n    notificationId: string,\n    status: 'read' | 'unread' | undefined,\n    ctx: NotificationServiceContext\n  ): Promise<Notification>\n  executeAction(\n    notificationId: string,\n    input: ExecuteActionInput,\n    ctx: NotificationServiceContext\n  ): Promise<{ notification: Notification; result: unknown }>\n  getUnreadCount(ctx: NotificationServiceContext): Promise<number>\n  getPollData(ctx: NotificationServiceContext, since?: string): Promise<NotificationPollData>\n  cleanupExpired(): Promise<number>\n  deleteBySource(\n    sourceEntityType: string,\n    sourceEntityId: string,\n    ctx: NotificationServiceContext\n  ): Promise<number>\n}\n\nexport interface NotificationServiceDeps {\n  em: EntityManager\n  eventBus: { emit: (event: string, payload: unknown) => Promise<void> }\n  commandBus?: {\n    execute: (\n      commandId: string,\n      options: { input: unknown; ctx: unknown; metadata?: unknown }\n    ) => Promise<{ result: unknown }>\n  }\n  container?: { resolve: (name: string) => unknown }\n}\n\nexport function createNotificationService(deps: NotificationServiceDeps): NotificationService {\n  const { em: rootEm, eventBus, commandBus, container } = deps\n\n  return {\n    async create(input, ctx) {\n      const { recipientUserId, ...content } = input\n      const writeEm = rootEm.fork()\n      const notification = await writeEm.transactional(async (tx) => {\n        const entity = await createOrRefreshNotification(tx, content, recipientUserId, ctx)\n        await tx.flush()\n        return entity\n      })\n\n      await emitNotificationCreated(eventBus, notification, ctx)\n      await eventBus.emit(NOTIFICATION_SSE_EVENTS.CREATED, {\n        tenantId: notification.tenantId,\n        organizationId: notification.organizationId ?? null,\n        recipientUserId: notification.recipientUserId,\n        notification: toNotificationDto(notification),\n      })\n\n      return notification\n    },\n\n    async createBatch(input, ctx) {\n      const recipientUserIds = Array.from(new Set(input.recipientUserIds))\n      const { recipientUserIds: _recipientUserIds, ...content } = input\n      const notifications: Notification[] = []\n      const writeEm = rootEm.fork()\n\n      await writeEm.transactional(async (tx) => {\n        for (const recipientUserId of recipientUserIds) {\n          const notification = await createOrRefreshNotification(tx, content, recipientUserId, ctx)\n          notifications.push(notification)\n        }\n        await tx.flush()\n      })\n\n      await emitNotificationCreatedBatch(eventBus, notifications, ctx)\n      await emitNotificationSseEvents(eventBus, notifications, ctx, recipientUserIds)\n\n      return notifications\n    },\n\n    async createForRole(input, ctx) {\n      const em = rootEm.fork()\n\n      const db = getDb(em)\n      const recipientUserIds = await getRecipientUserIdsForRole(db, ctx.tenantId, input.roleId)\n      if (recipientUserIds.length === 0) {\n        return []\n      }\n\n      const { roleId: _roleId, ...content } = input\n      const notifications: Notification[] = []\n      const uniqueRecipientUserIds = Array.from(new Set(recipientUserIds))\n      const writeEm = rootEm.fork()\n\n      await writeEm.transactional(async (tx) => {\n        for (const recipientUserId of uniqueRecipientUserIds) {\n          const notification = await createOrRefreshNotification(tx, content, recipientUserId, ctx)\n          notifications.push(notification)\n        }\n        await tx.flush()\n      })\n\n      await emitNotificationCreatedBatch(eventBus, notifications, ctx)\n      await emitNotificationSseEvents(eventBus, notifications, ctx, uniqueRecipientUserIds)\n\n      return notifications\n    },\n\n    async createForFeature(input, ctx) {\n      const em = rootEm.fork()\n      const db = getDb(em)\n      const recipientUserIds = await getRecipientUserIdsForFeature(db, ctx.tenantId, input.requiredFeature)\n\n      if (recipientUserIds.length === 0) {\n        debug('No users found with feature:', input.requiredFeature, 'in tenant:', ctx.tenantId)\n        return []\n      }\n\n      debug('Creating notifications for', recipientUserIds.length, 'user(s) with feature:', input.requiredFeature)\n\n      const { requiredFeature: _requiredFeature, ...content } = input\n      const notifications: Notification[] = []\n      const uniqueRecipientUserIds = Array.from(new Set(recipientUserIds))\n      const writeEm = rootEm.fork()\n\n      await writeEm.transactional(async (tx) => {\n        for (const recipientUserId of uniqueRecipientUserIds) {\n          const notification = await createOrRefreshNotification(tx, content, recipientUserId, ctx)\n          notifications.push(notification)\n        }\n        await tx.flush()\n      })\n\n      await emitNotificationCreatedBatch(eventBus, notifications, ctx)\n      await emitNotificationSseEvents(eventBus, notifications, ctx, uniqueRecipientUserIds)\n\n      return notifications\n    },\n\n    async markAsRead(notificationId, ctx) {\n      const em = rootEm.fork()\n      const notification = await findScopedNotificationOrThrow(em, notificationId, ctx)\n\n      if (notification.status === 'unread') {\n        notification.status = 'read'\n        notification.readAt = new Date()\n        await em.flush()\n\n        await eventBus.emit(NOTIFICATION_EVENTS.READ, {\n          notificationId: notification.id,\n          userId: ctx.userId,\n          tenantId: ctx.tenantId,\n        })\n      }\n\n      return notification\n    },\n\n    async markAllAsRead(ctx) {\n      const em = rootEm.fork()\n      const db = getDb(em)\n      const applyScope = <QB extends { where: (...args: any[]) => QB }>(q: QB): QB => {\n        let chain = q\n          .where('recipient_user_id' as any, '=', ctx.userId as any)\n          .where('tenant_id' as any, '=', ctx.tenantId)\n          .where('status' as any, '=', 'unread')\n        if (ctx.organizationId) {\n          chain = chain.where('organization_id' as any, '=', ctx.organizationId)\n        }\n        return chain\n      }\n\n      const targetRows = await applyScope(\n        db\n          .selectFrom('notifications' as any)\n          .select([\n            'id' as any,\n            'organization_id' as any,\n            'recipient_user_id' as any,\n          ]),\n      ).execute() as Array<{ id: string }>\n\n      if (!targetRows.length) {\n        return 0\n      }\n\n      const updateResult = await applyScope(\n        db.updateTable('notifications' as any).set({\n          status: 'read',\n          read_at: sql`now()`,\n        } as any) as any,\n      ).executeTakeFirst() as { numUpdatedRows?: bigint | number } | undefined\n      const result = Number(updateResult?.numUpdatedRows ?? targetRows.length)\n\n      const notifications = await findWithDecryption(em, Notification, {\n        id: { $in: targetRows.map((row) => row.id) },\n      }, undefined, {\n        tenantId: ctx.tenantId,\n        organizationId: ctx.organizationId ?? null,\n      })\n\n      for (const notification of notifications) {\n        await eventBus.emit(NOTIFICATION_EVENTS.READ, {\n          notificationId: notification.id,\n          userId: ctx.userId,\n          tenantId: ctx.tenantId,\n        })\n\n        await eventBus.emit(NOTIFICATION_SSE_EVENTS.CREATED, {\n          tenantId: notification.tenantId,\n          organizationId: notification.organizationId ?? null,\n          recipientUserId: notification.recipientUserId,\n          notification: toNotificationDto(notification),\n        })\n      }\n\n      return result\n    },\n\n    async dismiss(notificationId, ctx) {\n      const em = rootEm.fork()\n      const notification = await findScopedNotificationOrThrow(em, notificationId, ctx)\n\n      notification.status = 'dismissed'\n      notification.dismissedAt = new Date()\n      await em.flush()\n\n      await eventBus.emit(NOTIFICATION_EVENTS.DISMISSED, {\n        notificationId: notification.id,\n        userId: ctx.userId,\n        tenantId: ctx.tenantId,\n      })\n\n      return notification\n    },\n\n    async restoreDismissed(notificationId, status, ctx) {\n      const em = rootEm.fork()\n      const notification = await findScopedNotificationOrThrow(em, notificationId, ctx)\n\n      if (notification.status !== 'dismissed') {\n        return notification\n      }\n\n      const targetStatus = status ?? 'read'\n      notification.status = targetStatus\n      notification.dismissedAt = null\n\n      if (targetStatus === 'unread') {\n        notification.readAt = null\n      } else if (!notification.readAt) {\n        notification.readAt = new Date()\n      }\n\n      await em.flush()\n\n      await eventBus.emit(NOTIFICATION_EVENTS.RESTORED, {\n        notificationId: notification.id,\n        userId: ctx.userId,\n        tenantId: ctx.tenantId,\n        status: targetStatus,\n      })\n\n      return notification\n    },\n\n    async executeAction(notificationId, input, ctx) {\n      const em = rootEm.fork()\n      const notification = await findScopedNotificationOrThrow(em, notificationId, ctx)\n\n      const actionData = notification.actionData\n      const action = actionData?.actions?.find((a) => a.id === input.actionId)\n\n      if (!action) {\n        throw new Error('Action not found')\n      }\n\n      // Reject an already-actioned notification before dispatching the command,\n      // so a retry or double-click cannot re-run the side effect.\n      if (notification.status === 'actioned') {\n        throw conflict('Notification action already executed')\n      }\n\n      const actionedAt = new Date()\n      const previousStatus = notification.status\n      const previousActionedAt = notification.actionedAt ?? null\n      const previousActionTaken = notification.actionTaken ?? null\n\n      // Atomically claim the notification so only one concurrent request can run\n      // the side-effecting command. The conditional UPDATE matches only while the\n      // notification has not been actioned yet; a losing request updates 0 rows.\n      const claimResult = (await getDb(em)\n        .updateTable('notifications' as any)\n        .set({\n          status: 'actioned',\n          actioned_at: actionedAt,\n          action_taken: input.actionId,\n        } as any)\n        .where('id' as any, '=', notification.id)\n        .where('recipient_user_id' as any, '=', ctx.userId as any)\n        .where('tenant_id' as any, '=', ctx.tenantId)\n        .where('status' as any, '!=', 'actioned')\n        .executeTakeFirst()) as { numUpdatedRows?: bigint | number } | undefined\n\n      if (Number(claimResult?.numUpdatedRows ?? 0) === 0) {\n        throw conflict('Notification action already executed')\n      }\n\n      // The claim is provisional: if the side-effecting command fails, the action\n      // never actually completed, so release the claim to its prior state. This\n      // lets the user retry the action instead of the notification being locked as\n      // `actioned` forever. Only release while we still own the claim\n      // (status = 'actioned'), so a concurrent winner's state is never clobbered.\n      const releaseClaim = async () => {\n        await getDb(em)\n          .updateTable('notifications' as any)\n          .set({\n            status: previousStatus,\n            actioned_at: previousActionedAt,\n            action_taken: previousActionTaken,\n          } as any)\n          .where('id' as any, '=', notification.id)\n          .where('recipient_user_id' as any, '=', ctx.userId as any)\n          .where('tenant_id' as any, '=', ctx.tenantId)\n          .where('status' as any, '=', 'actioned')\n          .executeTakeFirst()\n      }\n\n      let result: unknown = null\n\n      if (action.commandId && commandBus && container) {\n        const commandInput = {\n          id: notification.sourceEntityId,\n          ...input.payload,\n        }\n\n        // Build a CommandRuntimeContext from the notification service context\n        const commandCtx = {\n          container,\n          auth: {\n            sub: ctx.userId,\n            tenantId: ctx.tenantId,\n            orgId: ctx.organizationId,\n          },\n          organizationScope: null,\n          selectedOrganizationId: ctx.organizationId ?? null,\n          organizationIds: ctx.organizationId ? [ctx.organizationId] : null,\n        }\n\n        let commandResult: { result: unknown }\n        try {\n          commandResult = await commandBus.execute(action.commandId, {\n            input: commandInput,\n            ctx: commandCtx,\n            metadata: {\n              tenantId: ctx.tenantId,\n              organizationId: ctx.organizationId,\n              resourceKind: 'notifications',\n            },\n          })\n        } catch (err) {\n          // Never let a rollback failure mask the original command error \u2014 the\n          // caller needs the real failure to decide whether to retry.\n          try {\n            await releaseClaim()\n          } catch (releaseErr) {\n            debug('failed to release notification action claim', releaseErr)\n          }\n          throw err\n        }\n\n        result = commandResult.result\n      }\n\n      notification.status = 'actioned'\n      notification.actionedAt = actionedAt\n      notification.actionTaken = input.actionId\n      notification.actionResult = result as Record<string, unknown>\n\n      if (!notification.readAt) {\n        notification.readAt = new Date()\n      }\n\n      await em.flush()\n\n      await eventBus.emit(NOTIFICATION_EVENTS.ACTIONED, {\n        notificationId: notification.id,\n        actionId: input.actionId,\n        userId: ctx.userId,\n        tenantId: ctx.tenantId,\n      })\n\n      return { notification, result }\n    },\n\n    async getUnreadCount(ctx) {\n      const em = rootEm.fork()\n      return em.count(Notification, {\n        recipientUserId: ctx.userId,\n        tenantId: ctx.tenantId,\n        status: 'unread',\n      })\n    },\n\n    async getPollData(ctx, since) {\n      const em = rootEm.fork()\n      const filters: Record<string, unknown> = {\n        recipientUserId: ctx.userId,\n        tenantId: ctx.tenantId,\n      }\n\n      if (since) {\n        filters.createdAt = { $gt: new Date(since) }\n      }\n\n      const [notifications, unreadCount] = await Promise.all([\n        em.find(Notification, filters, {\n          orderBy: { createdAt: 'desc' },\n          limit: 50,\n        }),\n        em.count(Notification, {\n          recipientUserId: ctx.userId,\n          tenantId: ctx.tenantId,\n          status: 'unread',\n        }),\n      ])\n\n      const recent = notifications.map(toNotificationDto)\n      const hasNew = since ? recent.length > 0 : false\n\n      return {\n        unreadCount,\n        recent,\n        hasNew,\n        lastId: recent[0]?.id,\n      }\n    },\n\n    async cleanupExpired() {\n      const em = rootEm.fork()\n      const db = getDb(em)\n\n      const updateResult = await db\n        .updateTable('notifications' as any)\n        .set({\n          status: 'dismissed',\n          dismissed_at: sql`now()`,\n        } as any)\n        .where('expires_at' as any, '<', sql`now()`)\n        .where('status' as any, 'not in', ['actioned', 'dismissed'])\n        .executeTakeFirst() as { numUpdatedRows?: bigint | number } | undefined\n\n      return Number(updateResult?.numUpdatedRows ?? 0)\n    },\n\n    async deleteBySource(sourceEntityType, sourceEntityId, ctx) {\n      const em = rootEm.fork()\n      const db = getDb(em)\n\n      const deleteResult = await db\n        .deleteFrom('notifications' as any)\n        .where('source_entity_type' as any, '=', sourceEntityType)\n        .where('source_entity_id' as any, '=', sourceEntityId)\n        .where('tenant_id' as any, '=', ctx.tenantId)\n        .executeTakeFirst() as { numDeletedRows?: bigint | number } | undefined\n\n      return Number(deleteResult?.numDeletedRows ?? 0)\n    },\n  }\n}\n\n/**\n * Helper to create notification service from a DI container.\n * Use this in API routes and commands to avoid DI resolution issues.\n */\nexport function resolveNotificationService(container: {\n  resolve: (name: string) => unknown\n}): NotificationService {\n  const em = container.resolve('em') as EntityManager\n  const eventBus = container.resolve('eventBus') as { emit: (event: string, payload: unknown) => Promise<void> }\n\n  // commandBus may not be registered in all contexts, so resolve it safely\n  let commandBus: NotificationServiceDeps['commandBus']\n  try {\n    commandBus = container.resolve('commandBus') as typeof commandBus\n  } catch {\n    // commandBus not available - actions with commandId won't work\n    commandBus = undefined\n  }\n\n  return createNotificationService({ em, eventBus, commandBus, container })\n}\n"],
+  "mappings": "AACA,SAAsB,WAAW;AACjC,SAAS,eAAe,gBAAgB;AACxC,SAAS,oBAA6C;AAGtD,SAAS,qBAAqB,+BAA+B;AAC7D,SAAS,uBAAuB,0BAA0B;AAC1D;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OAGK;AACP,SAAS,yBAAyB;AAClC,SAAS,+BAA+B,kCAAkC;AAC1E,SAAS,4BAA4B,mCAAmC;AACxE,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,eAAe,EAAE,MAAM,EAAE,WAAW,UAAU,CAAC;AAE3E,SAAS,MAAM,YAAoB,SAA0B;AAC3D,SAAO,MAAM,SAAS,QAAQ,SAAS,EAAE,QAAQ,IAAI,MAAS;AAChE;AAEA,SAAS,MAAM,IAAgC;AAC7C,SAAO,GAAG,UAAe;AAC3B;AAEA,MAAM,sCAA4D,CAAC,UAAU,QAAQ,UAAU;AAE/F,SAAS,kBAAkB,gBAA0D;AACnF,SAAO,kBAAkB;AAC3B;AAEA,SAAS,yBACP,cACA,OACA,iBACA,KACA;AACA,QAAM,UAAU,4BAA4B,MAAM,OAAO;AACzD,QAAM,WAAW,2BAA2B,MAAM,QAAQ;AAE1D,eAAa,kBAAkB;AAC/B,eAAa,OAAO,MAAM;AAC1B,eAAa,WAAW,MAAM;AAC9B,eAAa,UAAU,MAAM;AAC7B,eAAa,iBAAiB,MAAM;AACpC,eAAa,gBAAgB,MAAM;AACnC,eAAa,QAAQ,MAAM,SAAS,MAAM,YAAY;AACtD,eAAa,OAAO,MAAM;AAC1B,eAAa,OAAO,MAAM;AAC1B,eAAa,WAAW,MAAM,YAAY;AAC1C,eAAa,aAAa,UACtB;AAAA,IACE;AAAA,IACA,iBAAiB,MAAM;AAAA,EACzB,IACA;AACJ,eAAa,eAAe,MAAM;AAClC,eAAa,mBAAmB,MAAM;AACtC,eAAa,iBAAiB,MAAM;AACpC,eAAa,WAAW;AACxB,eAAa,WAAW,MAAM;AAC9B,eAAa,YAAY,MAAM,YAAY,IAAI,KAAK,MAAM,SAAS,IAAI;AACvE,eAAa,WAAW,IAAI;AAC5B,eAAa,iBAAiB,kBAAkB,IAAI,cAAc;AAClE,eAAa,SAAS;AACtB,eAAa,SAAS;AACtB,eAAa,aAAa;AAC1B,eAAa,cAAc;AAC3B,eAAa,cAAc;AAC3B,eAAa,eAAe;AAC5B,eAAa,YAAY,oBAAI,KAAK;AACpC;AAEA,eAAe,8BACb,IACA,gBACA,KACuB;AACvB,QAAM,eAAe,MAAM;AAAA,IACzB;AAAA,IACA;AAAA,IACA;AAAA,MACE,IAAI;AAAA,MACJ,iBAAiB,IAAI;AAAA,MACrB,UAAU,IAAI;AAAA,IAChB;AAAA,IACA;AAAA,IACA;AAAA,MACE,UAAU,IAAI;AAAA,MACd,gBAAgB,IAAI,kBAAkB;AAAA,IACxC;AAAA,EACF;AACA,MAAI,CAAC,cAAc;AACjB,UAAM,IAAI,cAAc,KAAK,EAAE,OAAO,yBAAyB,CAAC;AAAA,EAClE;AACA,SAAO;AACT;AAEA,eAAe,0BACb,UACA,eACA,KACA,kBACe;AACf,QAAM,SAAS,KAAK,wBAAwB,eAAe;AAAA,IACzD,UAAU,IAAI;AAAA,IACd,gBAAgB,kBAAkB,IAAI,cAAc;AAAA,IACpD;AAAA,IACA,OAAO,cAAc;AAAA,EACvB,CAAC;AAED,aAAW,gBAAgB,eAAe;AACxC,UAAM,SAAS,KAAK,wBAAwB,SAAS;AAAA,MACnD,UAAU,aAAa;AAAA,MACvB,gBAAgB,aAAa,kBAAkB;AAAA,MAC/C,iBAAiB,aAAa;AAAA,MAC9B,cAAc,kBAAkB,YAAY;AAAA,IAC9C,CAAC;AAAA,EACH;AACF;AAEA,eAAe,4BACb,IACA,OACA,iBACA,KACuB;AACvB,MAAI,MAAM,YAAY,MAAM,SAAS,KAAK,EAAE,SAAS,GAAG;AACtD,UAAM,WAAW,kBAAkB,IAAI,cAAc,KAAK;AAC1D,UAAM,UAAU,iBAAiB,IAAI,QAAQ,IAAI,QAAQ,IAAI,eAAe,IAAI,MAAM,IAAI,IAAI,MAAM,QAAQ;AAC5G,QAAI;AACF,YAAM,KAAK,MAAM,EAAE;AACnB,YAAM,4CAA4C,OAAO,KAAK,QAAQ,EAAE;AAAA,IAC1E,QAAQ;AAAA,IAER;AAEA,UAAM,WAAW,MAAM,GAAG,QAAQ,cAAc;AAAA,MAC9C;AAAA,MACA,UAAU,IAAI;AAAA,MACd,gBAAgB,kBAAkB,IAAI,cAAc;AAAA,MACpD,MAAM,MAAM;AAAA,MACZ,UAAU,MAAM;AAAA,MAChB,QAAQ,EAAE,KAAK,oCAAoC;AAAA,IACrD,GAAG;AAAA,MACD,SAAS,EAAE,WAAW,OAAO;AAAA,IAC/B,CAAC;AAED,QAAI,UAAU;AACZ,+BAAyB,UAAU,OAAO,iBAAiB,GAAG;AAC9D,aAAO;AAAA,IACT;AAAA,EACF;AAEA,SAAO,wBAAwB,IAAI,OAAO,iBAAiB,GAAG;AAChE;AAgDO,SAAS,0BAA0B,MAAoD;AAC5F,QAAM,EAAE,IAAI,QAAQ,UAAU,YAAY,UAAU,IAAI;AAExD,SAAO;AAAA,IACL,MAAM,OAAO,OAAO,KAAK;AACvB,YAAM,EAAE,iBAAiB,GAAG,QAAQ,IAAI;AACxC,YAAM,UAAU,OAAO,KAAK;AAC5B,YAAM,eAAe,MAAM,QAAQ,cAAc,OAAO,OAAO;AAC7D,cAAM,SAAS,MAAM,4BAA4B,IAAI,SAAS,iBAAiB,GAAG;AAClF,cAAM,GAAG,MAAM;AACf,eAAO;AAAA,MACT,CAAC;AAED,YAAM,wBAAwB,UAAU,cAAc,GAAG;AACzD,YAAM,SAAS,KAAK,wBAAwB,SAAS;AAAA,QACnD,UAAU,aAAa;AAAA,QACvB,gBAAgB,aAAa,kBAAkB;AAAA,QAC/C,iBAAiB,aAAa;AAAA,QAC9B,cAAc,kBAAkB,YAAY;AAAA,MAC9C,CAAC;AAED,aAAO;AAAA,IACT;AAAA,IAEA,MAAM,YAAY,OAAO,KAAK;AAC5B,YAAM,mBAAmB,MAAM,KAAK,IAAI,IAAI,MAAM,gBAAgB,CAAC;AACnE,YAAM,EAAE,kBAAkB,mBAAmB,GAAG,QAAQ,IAAI;AAC5D,YAAM,gBAAgC,CAAC;AACvC,YAAM,UAAU,OAAO,KAAK;AAE5B,YAAM,QAAQ,cAAc,OAAO,OAAO;AACxC,mBAAW,mBAAmB,kBAAkB;AAC9C,gBAAM,eAAe,MAAM,4BAA4B,IAAI,SAAS,iBAAiB,GAAG;AACxF,wBAAc,KAAK,YAAY;AAAA,QACjC;AACA,cAAM,GAAG,MAAM;AAAA,MACjB,CAAC;AAED,YAAM,6BAA6B,UAAU,eAAe,GAAG;AAC/D,YAAM,0BAA0B,UAAU,eAAe,KAAK,gBAAgB;AAE9E,aAAO;AAAA,IACT;AAAA,IAEA,MAAM,cAAc,OAAO,KAAK;AAC9B,YAAM,KAAK,OAAO,KAAK;AAEvB,YAAM,KAAK,MAAM,EAAE;AACnB,YAAM,mBAAmB,MAAM,2BAA2B,IAAI,IAAI,UAAU,MAAM,MAAM;AACxF,UAAI,iBAAiB,WAAW,GAAG;AACjC,eAAO,CAAC;AAAA,MACV;AAEA,YAAM,EAAE,QAAQ,SAAS,GAAG,QAAQ,IAAI;AACxC,YAAM,gBAAgC,CAAC;AACvC,YAAM,yBAAyB,MAAM,KAAK,IAAI,IAAI,gBAAgB,CAAC;AACnE,YAAM,UAAU,OAAO,KAAK;AAE5B,YAAM,QAAQ,cAAc,OAAO,OAAO;AACxC,mBAAW,mBAAmB,wBAAwB;AACpD,gBAAM,eAAe,MAAM,4BAA4B,IAAI,SAAS,iBAAiB,GAAG;AACxF,wBAAc,KAAK,YAAY;AAAA,QACjC;AACA,cAAM,GAAG,MAAM;AAAA,MACjB,CAAC;AAED,YAAM,6BAA6B,UAAU,eAAe,GAAG;AAC/D,YAAM,0BAA0B,UAAU,eAAe,KAAK,sBAAsB;AAEpF,aAAO;AAAA,IACT;AAAA,IAEA,MAAM,iBAAiB,OAAO,KAAK;AACjC,YAAM,KAAK,OAAO,KAAK;AACvB,YAAM,KAAK,MAAM,EAAE;AACnB,YAAM,mBAAmB,MAAM,8BAA8B,IAAI,IAAI,UAAU,MAAM,eAAe;AAEpG,UAAI,iBAAiB,WAAW,GAAG;AACjC,cAAM,gCAAgC,MAAM,iBAAiB,cAAc,IAAI,QAAQ;AACvF,eAAO,CAAC;AAAA,MACV;AAEA,YAAM,8BAA8B,iBAAiB,QAAQ,yBAAyB,MAAM,eAAe;AAE3G,YAAM,EAAE,iBAAiB,kBAAkB,GAAG,QAAQ,IAAI;AAC1D,YAAM,gBAAgC,CAAC;AACvC,YAAM,yBAAyB,MAAM,KAAK,IAAI,IAAI,gBAAgB,CAAC;AACnE,YAAM,UAAU,OAAO,KAAK;AAE5B,YAAM,QAAQ,cAAc,OAAO,OAAO;AACxC,mBAAW,mBAAmB,wBAAwB;AACpD,gBAAM,eAAe,MAAM,4BAA4B,IAAI,SAAS,iBAAiB,GAAG;AACxF,wBAAc,KAAK,YAAY;AAAA,QACjC;AACA,cAAM,GAAG,MAAM;AAAA,MACjB,CAAC;AAED,YAAM,6BAA6B,UAAU,eAAe,GAAG;AAC/D,YAAM,0BAA0B,UAAU,eAAe,KAAK,sBAAsB;AAEpF,aAAO;AAAA,IACT;AAAA,IAEA,MAAM,WAAW,gBAAgB,KAAK;AACpC,YAAM,KAAK,OAAO,KAAK;AACvB,YAAM,eAAe,MAAM,8BAA8B,IAAI,gBAAgB,GAAG;AAEhF,UAAI,aAAa,WAAW,UAAU;AACpC,qBAAa,SAAS;AACtB,qBAAa,SAAS,oBAAI,KAAK;AAC/B,cAAM,GAAG,MAAM;AAEf,cAAM,SAAS,KAAK,oBAAoB,MAAM;AAAA,UAC5C,gBAAgB,aAAa;AAAA,UAC7B,QAAQ,IAAI;AAAA,UACZ,UAAU,IAAI;AAAA,QAChB,CAAC;AAAA,MACH;AAEA,aAAO;AAAA,IACT;AAAA,IAEA,MAAM,cAAc,KAAK;AACvB,YAAM,KAAK,OAAO,KAAK;AACvB,YAAM,KAAK,MAAM,EAAE;AACnB,YAAM,aAAa,CAA+C,MAAc;AAC9E,YAAI,QAAQ,EACT,MAAM,qBAA4B,KAAK,IAAI,MAAa,EACxD,MAAM,aAAoB,KAAK,IAAI,QAAQ,EAC3C,MAAM,UAAiB,KAAK,QAAQ;AACvC,YAAI,IAAI,gBAAgB;AACtB,kBAAQ,MAAM,MAAM,mBAA0B,KAAK,IAAI,cAAc;AAAA,QACvE;AACA,eAAO;AAAA,MACT;AAEA,YAAM,aAAa,MAAM;AAAA,QACvB,GACG,WAAW,eAAsB,EACjC,OAAO;AAAA,UACN;AAAA,UACA;AAAA,UACA;AAAA,QACF,CAAC;AAAA,MACL,EAAE,QAAQ;AAEV,UAAI,CAAC,WAAW,QAAQ;AACtB,eAAO;AAAA,MACT;AAEA,YAAM,eAAe,MAAM;AAAA,QACzB,GAAG,YAAY,eAAsB,EAAE,IAAI;AAAA,UACzC,QAAQ;AAAA,UACR,SAAS;AAAA,QACX,CAAQ;AAAA,MACV,EAAE,iBAAiB;AACnB,YAAM,SAAS,OAAO,cAAc,kBAAkB,WAAW,MAAM;AAEvE,YAAM,gBAAgB,MAAM,mBAAmB,IAAI,cAAc;AAAA,QAC/D,IAAI,EAAE,KAAK,WAAW,IAAI,CAAC,QAAQ,IAAI,EAAE,EAAE;AAAA,MAC7C,GAAG,QAAW;AAAA,QACZ,UAAU,IAAI;AAAA,QACd,gBAAgB,IAAI,kBAAkB;AAAA,MACxC,CAAC;AAED,iBAAW,gBAAgB,eAAe;AACxC,cAAM,SAAS,KAAK,oBAAoB,MAAM;AAAA,UAC5C,gBAAgB,aAAa;AAAA,UAC7B,QAAQ,IAAI;AAAA,UACZ,UAAU,IAAI;AAAA,QAChB,CAAC;AAED,cAAM,SAAS,KAAK,wBAAwB,SAAS;AAAA,UACnD,UAAU,aAAa;AAAA,UACvB,gBAAgB,aAAa,kBAAkB;AAAA,UAC/C,iBAAiB,aAAa;AAAA,UAC9B,cAAc,kBAAkB,YAAY;AAAA,QAC9C,CAAC;AAAA,MACH;AAEA,aAAO;AAAA,IACT;AAAA,IAEA,MAAM,QAAQ,gBAAgB,KAAK;AACjC,YAAM,KAAK,OAAO,KAAK;AACvB,YAAM,eAAe,MAAM,8BAA8B,IAAI,gBAAgB,GAAG;AAEhF,mBAAa,SAAS;AACtB,mBAAa,cAAc,oBAAI,KAAK;AACpC,YAAM,GAAG,MAAM;AAEf,YAAM,SAAS,KAAK,oBAAoB,WAAW;AAAA,QACjD,gBAAgB,aAAa;AAAA,QAC7B,QAAQ,IAAI;AAAA,QACZ,UAAU,IAAI;AAAA,MAChB,CAAC;AAED,aAAO;AAAA,IACT;AAAA,IAEA,MAAM,iBAAiB,gBAAgB,QAAQ,KAAK;AAClD,YAAM,KAAK,OAAO,KAAK;AACvB,YAAM,eAAe,MAAM,8BAA8B,IAAI,gBAAgB,GAAG;AAEhF,UAAI,aAAa,WAAW,aAAa;AACvC,eAAO;AAAA,MACT;AAEA,YAAM,eAAe,UAAU;AAC/B,mBAAa,SAAS;AACtB,mBAAa,cAAc;AAE3B,UAAI,iBAAiB,UAAU;AAC7B,qBAAa,SAAS;AAAA,MACxB,WAAW,CAAC,aAAa,QAAQ;AAC/B,qBAAa,SAAS,oBAAI,KAAK;AAAA,MACjC;AAEA,YAAM,GAAG,MAAM;AAEf,YAAM,SAAS,KAAK,oBAAoB,UAAU;AAAA,QAChD,gBAAgB,aAAa;AAAA,QAC7B,QAAQ,IAAI;AAAA,QACZ,UAAU,IAAI;AAAA,QACd,QAAQ;AAAA,MACV,CAAC;AAED,aAAO;AAAA,IACT;AAAA,IAEA,MAAM,cAAc,gBAAgB,OAAO,KAAK;AAC9C,YAAM,KAAK,OAAO,KAAK;AACvB,YAAM,eAAe,MAAM,8BAA8B,IAAI,gBAAgB,GAAG;AAEhF,YAAM,aAAa,aAAa;AAChC,YAAM,SAAS,YAAY,SAAS,KAAK,CAAC,MAAM,EAAE,OAAO,MAAM,QAAQ;AAEvE,UAAI,CAAC,QAAQ;AACX,cAAM,IAAI,MAAM,kBAAkB;AAAA,MACpC;AAIA,UAAI,aAAa,WAAW,YAAY;AACtC,cAAM,SAAS,sCAAsC;AAAA,MACvD;AAEA,YAAM,aAAa,oBAAI,KAAK;AAC5B,YAAM,iBAAiB,aAAa;AACpC,YAAM,qBAAqB,aAAa,cAAc;AACtD,YAAM,sBAAsB,aAAa,eAAe;AAKxD,YAAM,cAAe,MAAM,MAAM,EAAE,EAChC,YAAY,eAAsB,EAClC,IAAI;AAAA,QACH,QAAQ;AAAA,QACR,aAAa;AAAA,QACb,cAAc,MAAM;AAAA,MACtB,CAAQ,EACP,MAAM,MAAa,KAAK,aAAa,EAAE,EACvC,MAAM,qBAA4B,KAAK,IAAI,MAAa,EACxD,MAAM,aAAoB,KAAK,IAAI,QAAQ,EAC3C,MAAM,UAAiB,MAAM,UAAU,EACvC,iBAAiB;AAEpB,UAAI,OAAO,aAAa,kBAAkB,CAAC,MAAM,GAAG;AAClD,cAAM,SAAS,sCAAsC;AAAA,MACvD;AAOA,YAAM,eAAe,YAAY;AAC/B,cAAM,MAAM,EAAE,EACX,YAAY,eAAsB,EAClC,IAAI;AAAA,UACH,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,cAAc;AAAA,QAChB,CAAQ,EACP,MAAM,MAAa,KAAK,aAAa,EAAE,EACvC,MAAM,qBAA4B,KAAK,IAAI,MAAa,EACxD,MAAM,aAAoB,KAAK,IAAI,QAAQ,EAC3C,MAAM,UAAiB,KAAK,UAAU,EACtC,iBAAiB;AAAA,MACtB;AAEA,UAAI,SAAkB;AAEtB,UAAI,OAAO,aAAa,cAAc,WAAW;AAC/C,cAAM,eAAe;AAAA,UACnB,IAAI,aAAa;AAAA,UACjB,GAAG,MAAM;AAAA,QACX;AAGA,cAAM,aAAa;AAAA,UACjB;AAAA,UACA,MAAM;AAAA,YACJ,KAAK,IAAI;AAAA,YACT,UAAU,IAAI;AAAA,YACd,OAAO,IAAI;AAAA,UACb;AAAA,UACA,mBAAmB;AAAA,UACnB,wBAAwB,IAAI,kBAAkB;AAAA,UAC9C,iBAAiB,IAAI,iBAAiB,CAAC,IAAI,cAAc,IAAI;AAAA,QAC/D;AAEA,YAAI;AACJ,YAAI;AACF,0BAAgB,MAAM,WAAW,QAAQ,OAAO,WAAW;AAAA,YACzD,OAAO;AAAA,YACP,KAAK;AAAA,YACL,UAAU;AAAA,cACR,UAAU,IAAI;AAAA,cACd,gBAAgB,IAAI;AAAA,cACpB,cAAc;AAAA,YAChB;AAAA,UACF,CAAC;AAAA,QACH,SAAS,KAAK;AAGZ,cAAI;AACF,kBAAM,aAAa;AAAA,UACrB,SAAS,YAAY;AACnB,kBAAM,+CAA+C,UAAU;AAAA,UACjE;AACA,gBAAM;AAAA,QACR;AAEA,iBAAS,cAAc;AAAA,MACzB;AAEA,mBAAa,SAAS;AACtB,mBAAa,aAAa;AAC1B,mBAAa,cAAc,MAAM;AACjC,mBAAa,eAAe;AAE5B,UAAI,CAAC,aAAa,QAAQ;AACxB,qBAAa,SAAS,oBAAI,KAAK;AAAA,MACjC;AAEA,YAAM,GAAG,MAAM;AAEf,YAAM,SAAS,KAAK,oBAAoB,UAAU;AAAA,QAChD,gBAAgB,aAAa;AAAA,QAC7B,UAAU,MAAM;AAAA,QAChB,QAAQ,IAAI;AAAA,QACZ,UAAU,IAAI;AAAA,MAChB,CAAC;AAED,aAAO,EAAE,cAAc,OAAO;AAAA,IAChC;AAAA,IAEA,MAAM,eAAe,KAAK;AACxB,YAAM,KAAK,OAAO,KAAK;AACvB,aAAO,GAAG,MAAM,cAAc;AAAA,QAC5B,iBAAiB,IAAI;AAAA,QACrB,UAAU,IAAI;AAAA,QACd,QAAQ;AAAA,MACV,CAAC;AAAA,IACH;AAAA,IAEA,MAAM,YAAY,KAAK,OAAO;AAC5B,YAAM,KAAK,OAAO,KAAK;AACvB,YAAM,UAAmC;AAAA,QACvC,iBAAiB,IAAI;AAAA,QACrB,UAAU,IAAI;AAAA,MAChB;AAEA,UAAI,OAAO;AACT,gBAAQ,YAAY,EAAE,KAAK,IAAI,KAAK,KAAK,EAAE;AAAA,MAC7C;AAEA,YAAM,CAAC,eAAe,WAAW,IAAI,MAAM,QAAQ,IAAI;AAAA,QACrD,GAAG,KAAK,cAAc,SAAS;AAAA,UAC7B,SAAS,EAAE,WAAW,OAAO;AAAA,UAC7B,OAAO;AAAA,QACT,CAAC;AAAA,QACD,GAAG,MAAM,cAAc;AAAA,UACrB,iBAAiB,IAAI;AAAA,UACrB,UAAU,IAAI;AAAA,UACd,QAAQ;AAAA,QACV,CAAC;AAAA,MACH,CAAC;AAED,YAAM,SAAS,cAAc,IAAI,iBAAiB;AAClD,YAAM,SAAS,QAAQ,OAAO,SAAS,IAAI;AAE3C,aAAO;AAAA,QACL;AAAA,QACA;AAAA,QACA;AAAA,QACA,QAAQ,OAAO,CAAC,GAAG;AAAA,MACrB;AAAA,IACF;AAAA,IAEA,MAAM,iBAAiB;AACrB,YAAM,KAAK,OAAO,KAAK;AACvB,YAAM,KAAK,MAAM,EAAE;AAEnB,YAAM,eAAe,MAAM,GACxB,YAAY,eAAsB,EAClC,IAAI;AAAA,QACH,QAAQ;AAAA,QACR,cAAc;AAAA,MAChB,CAAQ,EACP,MAAM,cAAqB,KAAK,UAAU,EAC1C,MAAM,UAAiB,UAAU,CAAC,YAAY,WAAW,CAAC,EAC1D,iBAAiB;AAEpB,aAAO,OAAO,cAAc,kBAAkB,CAAC;AAAA,IACjD;AAAA,IAEA,MAAM,eAAe,kBAAkB,gBAAgB,KAAK;AAC1D,YAAM,KAAK,OAAO,KAAK;AACvB,YAAM,KAAK,MAAM,EAAE;AAEnB,YAAM,eAAe,MAAM,GACxB,WAAW,eAAsB,EACjC,MAAM,sBAA6B,KAAK,gBAAgB,EACxD,MAAM,oBAA2B,KAAK,cAAc,EACpD,MAAM,aAAoB,KAAK,IAAI,QAAQ,EAC3C,iBAAiB;AAEpB,aAAO,OAAO,cAAc,kBAAkB,CAAC;AAAA,IACjD;AAAA,EACF;AACF;AAMO,SAAS,2BAA2B,WAEnB;AACtB,QAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,QAAM,WAAW,UAAU,QAAQ,UAAU;AAG7C,MAAI;AACJ,MAAI;AACF,iBAAa,UAAU,QAAQ,YAAY;AAAA,EAC7C,QAAQ;AAEN,iBAAa;AAAA,EACf;AAEA,SAAO,0BAA0B,EAAE,IAAI,UAAU,YAAY,UAAU,CAAC;AAC1E;",
   "names": []
 }

package/dist/modules/notifications/subscribers/deliver-notification.js

@@ -9,16 +9,15 @@ import { createFallbackTranslator } from "@open-mercato/shared/lib/i18n/translat
 import { defaultLocale } from "@open-mercato/shared/lib/i18n/config";
 import { findOneWithDecryption } from "@open-mercato/shared/lib/encryption/find";
 import { User } from "../../auth/data/entities.js";
+import { createLogger } from "@open-mercato/shared/lib/logger";
+const logger = createLogger("notifications").child({ component: "deliver" });
 const metadata = {
   event: NOTIFICATION_EVENTS.CREATED,
   persistent: true,
   id: "notifications:deliver"
 };
-const DEBUG = process.env.NOTIFICATIONS_DEBUG === "true";
-function debug(...args) {
-  if (DEBUG) {
-    console.log("[notifications]", ...args);
-  }
+function debug(message, ...details) {
+  logger.debug(message, details.length ? { details } : void 0);
 }
 const buildPanelLink = (panelUrl, notificationId) => {
   if (panelUrl.startsWith("http://") || panelUrl.startsWith("https://")) {
@@ -131,7 +130,7 @@ async function handle(payload, ctx) {
         footer: t("notifications.delivery.email.footer", "Open Mercato notifications")
       };
       try {
-        debug("sending email", { to: recipient.email, from: deliveryConfig.strategies.email.from, subject });
+        debug("sending email", { recipientUserId: notification.recipientUserId });
         await sendEmail({
           to: recipient.email,
           subject,
@@ -146,7 +145,7 @@ async function handle(payload, ctx) {
           })
         });
       } catch (error) {
-        console.error("[notifications] email delivery failed", error);
+        logger.error("Email delivery failed", { err: error });
       }
     }
     const strategyConfigs = deliveryConfig.strategies.custom ?? {};
@@ -173,15 +172,11 @@ async function handle(payload, ctx) {
           t
         });
       } catch (error) {
-        console.error(`[notifications] delivery strategy failed (${strategy.id})`, error);
+        logger.error("Delivery strategy failed", { strategyId: strategy.id, err: error });
       }
     }
   } catch (err) {
-    console.error("[notifications:deliver] Failed to deliver notification:", {
-      notificationId: payload.notificationId,
-      recipientUserId: notification.recipientUserId,
-      error: err instanceof Error ? err.message : String(err)
-    });
+    logger.error("Failed to deliver notification", { notificationId: payload.notificationId, recipientUserId: notification.recipientUserId, err });
     throw err;
   }
   return;

package/dist/modules/notifications/subscribers/deliver-notification.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/notifications/subscribers/deliver-notification.ts"],
-  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport { Notification } from '../data/entities'\nimport { NOTIFICATION_EVENTS } from '../lib/events'\nimport { DEFAULT_NOTIFICATION_DELIVERY_CONFIG, resolveNotificationDeliveryConfig, resolveNotificationPanelUrl } from '../lib/deliveryConfig'\nimport { getNotificationDeliveryStrategies } from '../lib/deliveryStrategies'\nimport { sendEmail } from '@open-mercato/shared/lib/email/send'\nimport NotificationEmail from '../emails/NotificationEmail'\nimport { loadDictionary } from '@open-mercato/shared/lib/i18n/server'\nimport { createFallbackTranslator } from '@open-mercato/shared/lib/i18n/translate'\nimport { defaultLocale } from '@open-mercato/shared/lib/i18n/config'\nimport { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { User } from '../../auth/data/entities'\nimport type { TenantDataEncryptionService } from '@open-mercato/shared/lib/encryption/tenantDataEncryptionService'\n\nexport const metadata = {\n  event: NOTIFICATION_EVENTS.CREATED,\n  persistent: true,\n  id: 'notifications:deliver',\n}\n\nconst DEBUG = process.env.NOTIFICATIONS_DEBUG === 'true'\n\nfunction debug(...args: unknown[]): void {\n  if (DEBUG) {\n    console.log('[notifications]', ...args)\n  }\n}\n\ntype NotificationCreatedPayload = {\n  notificationId: string\n  recipientUserId: string\n  tenantId: string\n  organizationId?: string | null\n}\n\ntype ResolverContext = {\n  resolve: <T = unknown>(name: string) => T\n}\n\nconst buildPanelLink = (panelUrl: string, notificationId: string) => {\n  if (panelUrl.startsWith('http://') || panelUrl.startsWith('https://')) {\n    const url = new URL(panelUrl)\n    url.searchParams.set('notificationId', notificationId)\n    return url.toString()\n  }\n  const separator = panelUrl.includes('?') ? '&' : '?'\n  return `${panelUrl}${separator}notificationId=${encodeURIComponent(notificationId)}`\n}\n\nconst resolveNotificationCopy = async (\n  notification: Notification\n) => {\n  const dict = await loadDictionary(defaultLocale)\n  const t = createFallbackTranslator(dict)\n\n  const title = notification.titleKey\n    ? t(notification.titleKey, notification.title ?? notification.titleKey, notification.titleVariables ?? undefined)\n    : notification.title\n\n  const body = notification.bodyKey\n    ? t(notification.bodyKey, notification.body ?? notification.bodyKey ?? '', notification.bodyVariables ?? undefined)\n    : notification.body ?? null\n\n  return { title, body, t }\n}\n\nconst resolveRecipient = async (\n  em: EntityManager,\n  notification: Notification,\n  encryptionService?: TenantDataEncryptionService | null,\n) => {\n  const where: Partial<User> & { deletedAt?: null } = {\n    id: notification.recipientUserId,\n    tenantId: notification.tenantId,\n    deletedAt: null,\n  }\n  if (notification.organizationId) {\n    where.organizationId = notification.organizationId\n  }\n  const record = await findOneWithDecryption(\n    em,\n    User,\n    where,\n    undefined,\n    {\n      tenantId: notification.tenantId,\n      organizationId: notification.organizationId ?? null,\n      encryptionService: encryptionService ?? null,\n    },\n  )\n  if (!record) return null\n  return {\n    email: typeof record.email === 'string' ? record.email : null,\n    name: typeof record.name === 'string' ? record.name : null,\n  }\n}\n\n\nexport default async function handle(payload: NotificationCreatedPayload, ctx: ResolverContext) {\n  debug('deliver notification event', payload)\n  const deliveryConfig = await resolveNotificationDeliveryConfig(ctx, { defaultValue: DEFAULT_NOTIFICATION_DELIVERY_CONFIG })\n  if (!deliveryConfig.strategies.email.enabled) {\n    debug('email delivery disabled')\n  }\n\n  const em = ctx.resolve('em') as EntityManager\n  const notification = await findOneWithDecryption(\n    em,\n    Notification,\n    {\n      id: payload.notificationId,\n      tenantId: payload.tenantId,\n      organizationId: payload.organizationId ?? null,\n    },\n    undefined,\n    {\n      tenantId: payload.tenantId,\n      organizationId: payload.organizationId ?? null,\n      encryptionService: null,\n    },\n  )\n  if (!notification) {\n    debug('notification not found', payload.notificationId)\n    return\n  }\n\n  let encryptionService: TenantDataEncryptionService | null = null\n  try {\n    encryptionService = ctx.resolve<TenantDataEncryptionService>('tenantEncryptionService')\n  } catch {\n    encryptionService = null\n  }\n\n  try {\n    const recipient = (await resolveRecipient(em, notification, encryptionService)) ?? { email: null, name: null }\n    if (!recipient?.email) {\n      debug('recipient has no email', notification.recipientUserId)\n    }\n    const { title, body, t } = await resolveNotificationCopy(notification)\n    const panelUrl = resolveNotificationPanelUrl(deliveryConfig)\n    if (!panelUrl) {\n      debug('missing panelUrl; check appUrl/panelPath settings')\n    }\n\n    const panelLink = panelUrl ? buildPanelLink(panelUrl, notification.id) : null\n    const baseOrigin = panelUrl ? new URL(panelUrl).origin : null\n    const actionLinks = (notification.actionData?.actions ?? [])\n      .map((action) => {\n        let href = action.href\n        if (href && notification.sourceEntityId) {\n          href = href.replace('{sourceEntityId}', notification.sourceEntityId)\n        }\n        const fullHref = (href && baseOrigin) ? `${baseOrigin}${href}` : panelLink\n        if (!fullHref) return null\n        return {\n          id: action.id,\n          label: action.labelKey ? t(action.labelKey, action.label) : action.label,\n          href: fullHref,\n        }\n      })\n      .filter((action): action is NonNullable<typeof action> => action !== null)\n\n    if (deliveryConfig.strategies.email.enabled && recipient?.email && panelLink) {\n      const subjectPrefix = deliveryConfig.strategies.email.subjectPrefix?.trim()\n      const subject = subjectPrefix ? `${subjectPrefix} ${title}` : title\n      const copy = {\n        preview: t('notifications.delivery.email.preview', 'New notification'),\n        heading: t('notifications.delivery.email.heading', 'You have a new notification'),\n        bodyIntro: t('notifications.delivery.email.bodyIntro', 'Review the notification details and take any required actions.'),\n        actionNotice: t('notifications.delivery.email.actionNotice', 'Actions are available in Open Mercato and are read-only in this email.'),\n        openCta: t('notifications.delivery.email.openCta', 'Open notification center'),\n        footer: t('notifications.delivery.email.footer', 'Open Mercato notifications'),\n      }\n\n      try {\n        debug('sending email', { to: recipient.email, from: deliveryConfig.strategies.email.from, subject })\n        await sendEmail({\n          to: recipient.email,\n          subject,\n          from: deliveryConfig.strategies.email.from,\n          replyTo: deliveryConfig.strategies.email.replyTo,\n          react: NotificationEmail({\n            title,\n            body,\n            actions: actionLinks,\n            panelUrl: panelLink,\n            copy,\n          }),\n        })\n      } catch (error) {\n        console.error('[notifications] email delivery failed', error)\n      }\n    }\n\n    const strategyConfigs = deliveryConfig.strategies.custom ?? {}\n    const strategies = getNotificationDeliveryStrategies()\n    for (const strategy of strategies) {\n      const strategyConfig = strategyConfigs[strategy.id]\n      const enabled = strategyConfig?.enabled ?? strategy.defaultEnabled ?? false\n      if (!enabled) {\n        debug('custom delivery disabled', strategy.id)\n        continue\n      }\n      try {\n        await strategy.deliver({\n          notification,\n          recipient,\n          title,\n          body,\n          panelUrl,\n          panelLink,\n          actionLinks,\n          deliveryConfig,\n          config: strategyConfig ?? {},\n          resolve: ctx.resolve,\n          t,\n        })\n      } catch (error) {\n        console.error(`[notifications] delivery strategy failed (${strategy.id})`, error)\n      }\n    }\n  } catch (err) {\n    console.error('[notifications:deliver] Failed to deliver notification:', {\n      notificationId: payload.notificationId,\n      recipientUserId: notification.recipientUserId,\n      error: err instanceof Error ? err.message : String(err),\n    })\n    throw err\n  }\n\n  return\n}\n"],
-  "mappings": "AACA,SAAS,oBAAoB;AAC7B,SAAS,2BAA2B;AACpC,SAAS,sCAAsC,mCAAmC,mCAAmC;AACrH,SAAS,yCAAyC;AAClD,SAAS,iBAAiB;AAC1B,OAAO,uBAAuB;AAC9B,SAAS,sBAAsB;AAC/B,SAAS,gCAAgC;AACzC,SAAS,qBAAqB;AAC9B,SAAS,6BAA6B;AACtC,SAAS,YAAY;AAGd,MAAM,WAAW;AAAA,EACtB,OAAO,oBAAoB;AAAA,EAC3B,YAAY;AAAA,EACZ,IAAI;AACN;AAEA,MAAM,QAAQ,QAAQ,IAAI,wBAAwB;AAElD,SAAS,SAAS,MAAuB;AACvC,MAAI,OAAO;AACT,YAAQ,IAAI,mBAAmB,GAAG,IAAI;AAAA,EACxC;AACF;AAaA,MAAM,iBAAiB,CAAC,UAAkB,mBAA2B;AACnE,MAAI,SAAS,WAAW,SAAS,KAAK,SAAS,WAAW,UAAU,GAAG;AACrE,UAAM,MAAM,IAAI,IAAI,QAAQ;AAC5B,QAAI,aAAa,IAAI,kBAAkB,cAAc;AACrD,WAAO,IAAI,SAAS;AAAA,EACtB;AACA,QAAM,YAAY,SAAS,SAAS,GAAG,IAAI,MAAM;AACjD,SAAO,GAAG,QAAQ,GAAG,SAAS,kBAAkB,mBAAmB,cAAc,CAAC;AACpF;AAEA,MAAM,0BAA0B,OAC9B,iBACG;AACH,QAAM,OAAO,MAAM,eAAe,aAAa;AAC/C,QAAM,IAAI,yBAAyB,IAAI;AAEvC,QAAM,QAAQ,aAAa,WACvB,EAAE,aAAa,UAAU,aAAa,SAAS,aAAa,UAAU,aAAa,kBAAkB,MAAS,IAC9G,aAAa;AAEjB,QAAM,OAAO,aAAa,UACtB,EAAE,aAAa,SAAS,aAAa,QAAQ,aAAa,WAAW,IAAI,aAAa,iBAAiB,MAAS,IAChH,aAAa,QAAQ;AAEzB,SAAO,EAAE,OAAO,MAAM,EAAE;AAC1B;AAEA,MAAM,mBAAmB,OACvB,IACA,cACA,sBACG;AACH,QAAM,QAA8C;AAAA,IAClD,IAAI,aAAa;AAAA,IACjB,UAAU,aAAa;AAAA,IACvB,WAAW;AAAA,EACb;AACA,MAAI,aAAa,gBAAgB;AAC/B,UAAM,iBAAiB,aAAa;AAAA,EACtC;AACA,QAAM,SAAS,MAAM;AAAA,IACnB;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,MACE,UAAU,aAAa;AAAA,MACvB,gBAAgB,aAAa,kBAAkB;AAAA,MAC/C,mBAAmB,qBAAqB;AAAA,IAC1C;AAAA,EACF;AACA,MAAI,CAAC,OAAQ,QAAO;AACpB,SAAO;AAAA,IACL,OAAO,OAAO,OAAO,UAAU,WAAW,OAAO,QAAQ;AAAA,IACzD,MAAM,OAAO,OAAO,SAAS,WAAW,OAAO,OAAO;AAAA,EACxD;AACF;AAGA,eAAO,OAA8B,SAAqC,KAAsB;AAC9F,QAAM,8BAA8B,OAAO;AAC3C,QAAM,iBAAiB,MAAM,kCAAkC,KAAK,EAAE,cAAc,qCAAqC,CAAC;AAC1H,MAAI,CAAC,eAAe,WAAW,MAAM,SAAS;AAC5C,UAAM,yBAAyB;AAAA,EACjC;AAEA,QAAM,KAAK,IAAI,QAAQ,IAAI;AAC3B,QAAM,eAAe,MAAM;AAAA,IACzB;AAAA,IACA;AAAA,IACA;AAAA,MACE,IAAI,QAAQ;AAAA,MACZ,UAAU,QAAQ;AAAA,MAClB,gBAAgB,QAAQ,kBAAkB;AAAA,IAC5C;AAAA,IACA;AAAA,IACA;AAAA,MACE,UAAU,QAAQ;AAAA,MAClB,gBAAgB,QAAQ,kBAAkB;AAAA,MAC1C,mBAAmB;AAAA,IACrB;AAAA,EACF;AACA,MAAI,CAAC,cAAc;AACjB,UAAM,0BAA0B,QAAQ,cAAc;AACtD;AAAA,EACF;AAEA,MAAI,oBAAwD;AAC5D,MAAI;AACF,wBAAoB,IAAI,QAAqC,yBAAyB;AAAA,EACxF,QAAQ;AACN,wBAAoB;AAAA,EACtB;AAEA,MAAI;AACF,UAAM,YAAa,MAAM,iBAAiB,IAAI,cAAc,iBAAiB,KAAM,EAAE,OAAO,MAAM,MAAM,KAAK;AAC7G,QAAI,CAAC,WAAW,OAAO;AACrB,YAAM,0BAA0B,aAAa,eAAe;AAAA,IAC9D;AACA,UAAM,EAAE,OAAO,MAAM,EAAE,IAAI,MAAM,wBAAwB,YAAY;AACrE,UAAM,WAAW,4BAA4B,cAAc;AAC3D,QAAI,CAAC,UAAU;AACb,YAAM,mDAAmD;AAAA,IAC3D;AAEA,UAAM,YAAY,WAAW,eAAe,UAAU,aAAa,EAAE,IAAI;AACzE,UAAM,aAAa,WAAW,IAAI,IAAI,QAAQ,EAAE,SAAS;AACzD,UAAM,eAAe,aAAa,YAAY,WAAW,CAAC,GACvD,IAAI,CAAC,WAAW;AACf,UAAI,OAAO,OAAO;AAClB,UAAI,QAAQ,aAAa,gBAAgB;AACvC,eAAO,KAAK,QAAQ,oBAAoB,aAAa,cAAc;AAAA,MACrE;AACA,YAAM,WAAY,QAAQ,aAAc,GAAG,UAAU,GAAG,IAAI,KAAK;AACjE,UAAI,CAAC,SAAU,QAAO;AACtB,aAAO;AAAA,QACL,IAAI,OAAO;AAAA,QACX,OAAO,OAAO,WAAW,EAAE,OAAO,UAAU,OAAO,KAAK,IAAI,OAAO;AAAA,QACnE,MAAM;AAAA,MACR;AAAA,IACF,CAAC,EACA,OAAO,CAAC,WAAiD,WAAW,IAAI;AAE3E,QAAI,eAAe,WAAW,MAAM,WAAW,WAAW,SAAS,WAAW;AAC5E,YAAM,gBAAgB,eAAe,WAAW,MAAM,eAAe,KAAK;AAC1E,YAAM,UAAU,gBAAgB,GAAG,aAAa,IAAI,KAAK,KAAK;AAC9D,YAAM,OAAO;AAAA,QACX,SAAS,EAAE,wCAAwC,kBAAkB;AAAA,QACrE,SAAS,EAAE,wCAAwC,6BAA6B;AAAA,QAChF,WAAW,EAAE,0CAA0C,gEAAgE;AAAA,QACvH,cAAc,EAAE,6CAA6C,wEAAwE;AAAA,QACrI,SAAS,EAAE,wCAAwC,0BAA0B;AAAA,QAC7E,QAAQ,EAAE,uCAAuC,4BAA4B;AAAA,MAC/E;AAEA,UAAI;AACF,cAAM,iBAAiB,EAAE,IAAI,UAAU,OAAO,MAAM,eAAe,WAAW,MAAM,MAAM,QAAQ,CAAC;AACnG,cAAM,UAAU;AAAA,UACd,IAAI,UAAU;AAAA,UACd;AAAA,UACA,MAAM,eAAe,WAAW,MAAM;AAAA,UACtC,SAAS,eAAe,WAAW,MAAM;AAAA,UACzC,OAAO,kBAAkB;AAAA,YACvB;AAAA,YACA;AAAA,YACA,SAAS;AAAA,YACT,UAAU;AAAA,YACV;AAAA,UACF,CAAC;AAAA,QACH,CAAC;AAAA,MACH,SAAS,OAAO;AACd,gBAAQ,MAAM,yCAAyC,KAAK;AAAA,MAC9D;AAAA,IACF;AAEA,UAAM,kBAAkB,eAAe,WAAW,UAAU,CAAC;AAC7D,UAAM,aAAa,kCAAkC;AACrD,eAAW,YAAY,YAAY;AACjC,YAAM,iBAAiB,gBAAgB,SAAS,EAAE;AAClD,YAAM,UAAU,gBAAgB,WAAW,SAAS,kBAAkB;AACtE,UAAI,CAAC,SAAS;AACZ,cAAM,4BAA4B,SAAS,EAAE;AAC7C;AAAA,MACF;AACA,UAAI;AACF,cAAM,SAAS,QAAQ;AAAA,UACrB;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA,QAAQ,kBAAkB,CAAC;AAAA,UAC3B,SAAS,IAAI;AAAA,UACb;AAAA,QACF,CAAC;AAAA,MACH,SAAS,OAAO;AACd,gBAAQ,MAAM,6CAA6C,SAAS,EAAE,KAAK,KAAK;AAAA,MAClF;AAAA,IACF;AAAA,EACF,SAAS,KAAK;AACZ,YAAQ,MAAM,2DAA2D;AAAA,MACvE,gBAAgB,QAAQ;AAAA,MACxB,iBAAiB,aAAa;AAAA,MAC9B,OAAO,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAAA,IACxD,CAAC;AACD,UAAM;AAAA,EACR;AAEA;AACF;",
+  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport { Notification } from '../data/entities'\nimport { NOTIFICATION_EVENTS } from '../lib/events'\nimport { DEFAULT_NOTIFICATION_DELIVERY_CONFIG, resolveNotificationDeliveryConfig, resolveNotificationPanelUrl } from '../lib/deliveryConfig'\nimport { getNotificationDeliveryStrategies } from '../lib/deliveryStrategies'\nimport { sendEmail } from '@open-mercato/shared/lib/email/send'\nimport NotificationEmail from '../emails/NotificationEmail'\nimport { loadDictionary } from '@open-mercato/shared/lib/i18n/server'\nimport { createFallbackTranslator } from '@open-mercato/shared/lib/i18n/translate'\nimport { defaultLocale } from '@open-mercato/shared/lib/i18n/config'\nimport { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { User } from '../../auth/data/entities'\nimport type { TenantDataEncryptionService } from '@open-mercato/shared/lib/encryption/tenantDataEncryptionService'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('notifications').child({ component: 'deliver' })\n\nexport const metadata = {\n  event: NOTIFICATION_EVENTS.CREATED,\n  persistent: true,\n  id: 'notifications:deliver',\n}\n\nfunction debug(message: string, ...details: unknown[]): void {\n  logger.debug(message, details.length ? { details } : undefined)\n}\n\ntype NotificationCreatedPayload = {\n  notificationId: string\n  recipientUserId: string\n  tenantId: string\n  organizationId?: string | null\n}\n\ntype ResolverContext = {\n  resolve: <T = unknown>(name: string) => T\n}\n\nconst buildPanelLink = (panelUrl: string, notificationId: string) => {\n  if (panelUrl.startsWith('http://') || panelUrl.startsWith('https://')) {\n    const url = new URL(panelUrl)\n    url.searchParams.set('notificationId', notificationId)\n    return url.toString()\n  }\n  const separator = panelUrl.includes('?') ? '&' : '?'\n  return `${panelUrl}${separator}notificationId=${encodeURIComponent(notificationId)}`\n}\n\nconst resolveNotificationCopy = async (\n  notification: Notification\n) => {\n  const dict = await loadDictionary(defaultLocale)\n  const t = createFallbackTranslator(dict)\n\n  const title = notification.titleKey\n    ? t(notification.titleKey, notification.title ?? notification.titleKey, notification.titleVariables ?? undefined)\n    : notification.title\n\n  const body = notification.bodyKey\n    ? t(notification.bodyKey, notification.body ?? notification.bodyKey ?? '', notification.bodyVariables ?? undefined)\n    : notification.body ?? null\n\n  return { title, body, t }\n}\n\nconst resolveRecipient = async (\n  em: EntityManager,\n  notification: Notification,\n  encryptionService?: TenantDataEncryptionService | null,\n) => {\n  const where: Partial<User> & { deletedAt?: null } = {\n    id: notification.recipientUserId,\n    tenantId: notification.tenantId,\n    deletedAt: null,\n  }\n  if (notification.organizationId) {\n    where.organizationId = notification.organizationId\n  }\n  const record = await findOneWithDecryption(\n    em,\n    User,\n    where,\n    undefined,\n    {\n      tenantId: notification.tenantId,\n      organizationId: notification.organizationId ?? null,\n      encryptionService: encryptionService ?? null,\n    },\n  )\n  if (!record) return null\n  return {\n    email: typeof record.email === 'string' ? record.email : null,\n    name: typeof record.name === 'string' ? record.name : null,\n  }\n}\n\n\nexport default async function handle(payload: NotificationCreatedPayload, ctx: ResolverContext) {\n  debug('deliver notification event', payload)\n  const deliveryConfig = await resolveNotificationDeliveryConfig(ctx, { defaultValue: DEFAULT_NOTIFICATION_DELIVERY_CONFIG })\n  if (!deliveryConfig.strategies.email.enabled) {\n    debug('email delivery disabled')\n  }\n\n  const em = ctx.resolve('em') as EntityManager\n  const notification = await findOneWithDecryption(\n    em,\n    Notification,\n    {\n      id: payload.notificationId,\n      tenantId: payload.tenantId,\n      organizationId: payload.organizationId ?? null,\n    },\n    undefined,\n    {\n      tenantId: payload.tenantId,\n      organizationId: payload.organizationId ?? null,\n      encryptionService: null,\n    },\n  )\n  if (!notification) {\n    debug('notification not found', payload.notificationId)\n    return\n  }\n\n  let encryptionService: TenantDataEncryptionService | null = null\n  try {\n    encryptionService = ctx.resolve<TenantDataEncryptionService>('tenantEncryptionService')\n  } catch {\n    encryptionService = null\n  }\n\n  try {\n    const recipient = (await resolveRecipient(em, notification, encryptionService)) ?? { email: null, name: null }\n    if (!recipient?.email) {\n      debug('recipient has no email', notification.recipientUserId)\n    }\n    const { title, body, t } = await resolveNotificationCopy(notification)\n    const panelUrl = resolveNotificationPanelUrl(deliveryConfig)\n    if (!panelUrl) {\n      debug('missing panelUrl; check appUrl/panelPath settings')\n    }\n\n    const panelLink = panelUrl ? buildPanelLink(panelUrl, notification.id) : null\n    const baseOrigin = panelUrl ? new URL(panelUrl).origin : null\n    const actionLinks = (notification.actionData?.actions ?? [])\n      .map((action) => {\n        let href = action.href\n        if (href && notification.sourceEntityId) {\n          href = href.replace('{sourceEntityId}', notification.sourceEntityId)\n        }\n        const fullHref = (href && baseOrigin) ? `${baseOrigin}${href}` : panelLink\n        if (!fullHref) return null\n        return {\n          id: action.id,\n          label: action.labelKey ? t(action.labelKey, action.label) : action.label,\n          href: fullHref,\n        }\n      })\n      .filter((action): action is NonNullable<typeof action> => action !== null)\n\n    if (deliveryConfig.strategies.email.enabled && recipient?.email && panelLink) {\n      const subjectPrefix = deliveryConfig.strategies.email.subjectPrefix?.trim()\n      const subject = subjectPrefix ? `${subjectPrefix} ${title}` : title\n      const copy = {\n        preview: t('notifications.delivery.email.preview', 'New notification'),\n        heading: t('notifications.delivery.email.heading', 'You have a new notification'),\n        bodyIntro: t('notifications.delivery.email.bodyIntro', 'Review the notification details and take any required actions.'),\n        actionNotice: t('notifications.delivery.email.actionNotice', 'Actions are available in Open Mercato and are read-only in this email.'),\n        openCta: t('notifications.delivery.email.openCta', 'Open notification center'),\n        footer: t('notifications.delivery.email.footer', 'Open Mercato notifications'),\n      }\n\n      try {\n        debug('sending email', { recipientUserId: notification.recipientUserId })\n        await sendEmail({\n          to: recipient.email,\n          subject,\n          from: deliveryConfig.strategies.email.from,\n          replyTo: deliveryConfig.strategies.email.replyTo,\n          react: NotificationEmail({\n            title,\n            body,\n            actions: actionLinks,\n            panelUrl: panelLink,\n            copy,\n          }),\n        })\n      } catch (error) {\n        logger.error('Email delivery failed', { err: error })\n      }\n    }\n\n    const strategyConfigs = deliveryConfig.strategies.custom ?? {}\n    const strategies = getNotificationDeliveryStrategies()\n    for (const strategy of strategies) {\n      const strategyConfig = strategyConfigs[strategy.id]\n      const enabled = strategyConfig?.enabled ?? strategy.defaultEnabled ?? false\n      if (!enabled) {\n        debug('custom delivery disabled', strategy.id)\n        continue\n      }\n      try {\n        await strategy.deliver({\n          notification,\n          recipient,\n          title,\n          body,\n          panelUrl,\n          panelLink,\n          actionLinks,\n          deliveryConfig,\n          config: strategyConfig ?? {},\n          resolve: ctx.resolve,\n          t,\n        })\n      } catch (error) {\n        logger.error('Delivery strategy failed', { strategyId: strategy.id, err: error })\n      }\n    }\n  } catch (err) {\n    logger.error('Failed to deliver notification', { notificationId: payload.notificationId, recipientUserId: notification.recipientUserId, err })\n    throw err\n  }\n\n  return\n}\n"],
+  "mappings": "AACA,SAAS,oBAAoB;AAC7B,SAAS,2BAA2B;AACpC,SAAS,sCAAsC,mCAAmC,mCAAmC;AACrH,SAAS,yCAAyC;AAClD,SAAS,iBAAiB;AAC1B,OAAO,uBAAuB;AAC9B,SAAS,sBAAsB;AAC/B,SAAS,gCAAgC;AACzC,SAAS,qBAAqB;AAC9B,SAAS,6BAA6B;AACtC,SAAS,YAAY;AAErB,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,eAAe,EAAE,MAAM,EAAE,WAAW,UAAU,CAAC;AAEpE,MAAM,WAAW;AAAA,EACtB,OAAO,oBAAoB;AAAA,EAC3B,YAAY;AAAA,EACZ,IAAI;AACN;AAEA,SAAS,MAAM,YAAoB,SAA0B;AAC3D,SAAO,MAAM,SAAS,QAAQ,SAAS,EAAE,QAAQ,IAAI,MAAS;AAChE;AAaA,MAAM,iBAAiB,CAAC,UAAkB,mBAA2B;AACnE,MAAI,SAAS,WAAW,SAAS,KAAK,SAAS,WAAW,UAAU,GAAG;AACrE,UAAM,MAAM,IAAI,IAAI,QAAQ;AAC5B,QAAI,aAAa,IAAI,kBAAkB,cAAc;AACrD,WAAO,IAAI,SAAS;AAAA,EACtB;AACA,QAAM,YAAY,SAAS,SAAS,GAAG,IAAI,MAAM;AACjD,SAAO,GAAG,QAAQ,GAAG,SAAS,kBAAkB,mBAAmB,cAAc,CAAC;AACpF;AAEA,MAAM,0BAA0B,OAC9B,iBACG;AACH,QAAM,OAAO,MAAM,eAAe,aAAa;AAC/C,QAAM,IAAI,yBAAyB,IAAI;AAEvC,QAAM,QAAQ,aAAa,WACvB,EAAE,aAAa,UAAU,aAAa,SAAS,aAAa,UAAU,aAAa,kBAAkB,MAAS,IAC9G,aAAa;AAEjB,QAAM,OAAO,aAAa,UACtB,EAAE,aAAa,SAAS,aAAa,QAAQ,aAAa,WAAW,IAAI,aAAa,iBAAiB,MAAS,IAChH,aAAa,QAAQ;AAEzB,SAAO,EAAE,OAAO,MAAM,EAAE;AAC1B;AAEA,MAAM,mBAAmB,OACvB,IACA,cACA,sBACG;AACH,QAAM,QAA8C;AAAA,IAClD,IAAI,aAAa;AAAA,IACjB,UAAU,aAAa;AAAA,IACvB,WAAW;AAAA,EACb;AACA,MAAI,aAAa,gBAAgB;AAC/B,UAAM,iBAAiB,aAAa;AAAA,EACtC;AACA,QAAM,SAAS,MAAM;AAAA,IACnB;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,MACE,UAAU,aAAa;AAAA,MACvB,gBAAgB,aAAa,kBAAkB;AAAA,MAC/C,mBAAmB,qBAAqB;AAAA,IAC1C;AAAA,EACF;AACA,MAAI,CAAC,OAAQ,QAAO;AACpB,SAAO;AAAA,IACL,OAAO,OAAO,OAAO,UAAU,WAAW,OAAO,QAAQ;AAAA,IACzD,MAAM,OAAO,OAAO,SAAS,WAAW,OAAO,OAAO;AAAA,EACxD;AACF;AAGA,eAAO,OAA8B,SAAqC,KAAsB;AAC9F,QAAM,8BAA8B,OAAO;AAC3C,QAAM,iBAAiB,MAAM,kCAAkC,KAAK,EAAE,cAAc,qCAAqC,CAAC;AAC1H,MAAI,CAAC,eAAe,WAAW,MAAM,SAAS;AAC5C,UAAM,yBAAyB;AAAA,EACjC;AAEA,QAAM,KAAK,IAAI,QAAQ,IAAI;AAC3B,QAAM,eAAe,MAAM;AAAA,IACzB;AAAA,IACA;AAAA,IACA;AAAA,MACE,IAAI,QAAQ;AAAA,MACZ,UAAU,QAAQ;AAAA,MAClB,gBAAgB,QAAQ,kBAAkB;AAAA,IAC5C;AAAA,IACA;AAAA,IACA;AAAA,MACE,UAAU,QAAQ;AAAA,MAClB,gBAAgB,QAAQ,kBAAkB;AAAA,MAC1C,mBAAmB;AAAA,IACrB;AAAA,EACF;AACA,MAAI,CAAC,cAAc;AACjB,UAAM,0BAA0B,QAAQ,cAAc;AACtD;AAAA,EACF;AAEA,MAAI,oBAAwD;AAC5D,MAAI;AACF,wBAAoB,IAAI,QAAqC,yBAAyB;AAAA,EACxF,QAAQ;AACN,wBAAoB;AAAA,EACtB;AAEA,MAAI;AACF,UAAM,YAAa,MAAM,iBAAiB,IAAI,cAAc,iBAAiB,KAAM,EAAE,OAAO,MAAM,MAAM,KAAK;AAC7G,QAAI,CAAC,WAAW,OAAO;AACrB,YAAM,0BAA0B,aAAa,eAAe;AAAA,IAC9D;AACA,UAAM,EAAE,OAAO,MAAM,EAAE,IAAI,MAAM,wBAAwB,YAAY;AACrE,UAAM,WAAW,4BAA4B,cAAc;AAC3D,QAAI,CAAC,UAAU;AACb,YAAM,mDAAmD;AAAA,IAC3D;AAEA,UAAM,YAAY,WAAW,eAAe,UAAU,aAAa,EAAE,IAAI;AACzE,UAAM,aAAa,WAAW,IAAI,IAAI,QAAQ,EAAE,SAAS;AACzD,UAAM,eAAe,aAAa,YAAY,WAAW,CAAC,GACvD,IAAI,CAAC,WAAW;AACf,UAAI,OAAO,OAAO;AAClB,UAAI,QAAQ,aAAa,gBAAgB;AACvC,eAAO,KAAK,QAAQ,oBAAoB,aAAa,cAAc;AAAA,MACrE;AACA,YAAM,WAAY,QAAQ,aAAc,GAAG,UAAU,GAAG,IAAI,KAAK;AACjE,UAAI,CAAC,SAAU,QAAO;AACtB,aAAO;AAAA,QACL,IAAI,OAAO;AAAA,QACX,OAAO,OAAO,WAAW,EAAE,OAAO,UAAU,OAAO,KAAK,IAAI,OAAO;AAAA,QACnE,MAAM;AAAA,MACR;AAAA,IACF,CAAC,EACA,OAAO,CAAC,WAAiD,WAAW,IAAI;AAE3E,QAAI,eAAe,WAAW,MAAM,WAAW,WAAW,SAAS,WAAW;AAC5E,YAAM,gBAAgB,eAAe,WAAW,MAAM,eAAe,KAAK;AAC1E,YAAM,UAAU,gBAAgB,GAAG,aAAa,IAAI,KAAK,KAAK;AAC9D,YAAM,OAAO;AAAA,QACX,SAAS,EAAE,wCAAwC,kBAAkB;AAAA,QACrE,SAAS,EAAE,wCAAwC,6BAA6B;AAAA,QAChF,WAAW,EAAE,0CAA0C,gEAAgE;AAAA,QACvH,cAAc,EAAE,6CAA6C,wEAAwE;AAAA,QACrI,SAAS,EAAE,wCAAwC,0BAA0B;AAAA,QAC7E,QAAQ,EAAE,uCAAuC,4BAA4B;AAAA,MAC/E;AAEA,UAAI;AACF,cAAM,iBAAiB,EAAE,iBAAiB,aAAa,gBAAgB,CAAC;AACxE,cAAM,UAAU;AAAA,UACd,IAAI,UAAU;AAAA,UACd;AAAA,UACA,MAAM,eAAe,WAAW,MAAM;AAAA,UACtC,SAAS,eAAe,WAAW,MAAM;AAAA,UACzC,OAAO,kBAAkB;AAAA,YACvB;AAAA,YACA;AAAA,YACA,SAAS;AAAA,YACT,UAAU;AAAA,YACV;AAAA,UACF,CAAC;AAAA,QACH,CAAC;AAAA,MACH,SAAS,OAAO;AACd,eAAO,MAAM,yBAAyB,EAAE,KAAK,MAAM,CAAC;AAAA,MACtD;AAAA,IACF;AAEA,UAAM,kBAAkB,eAAe,WAAW,UAAU,CAAC;AAC7D,UAAM,aAAa,kCAAkC;AACrD,eAAW,YAAY,YAAY;AACjC,YAAM,iBAAiB,gBAAgB,SAAS,EAAE;AAClD,YAAM,UAAU,gBAAgB,WAAW,SAAS,kBAAkB;AACtE,UAAI,CAAC,SAAS;AACZ,cAAM,4BAA4B,SAAS,EAAE;AAC7C;AAAA,MACF;AACA,UAAI;AACF,cAAM,SAAS,QAAQ;AAAA,UACrB;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA,QAAQ,kBAAkB,CAAC;AAAA,UAC3B,SAAS,IAAI;AAAA,UACb;AAAA,QACF,CAAC;AAAA,MACH,SAAS,OAAO;AACd,eAAO,MAAM,4BAA4B,EAAE,YAAY,SAAS,IAAI,KAAK,MAAM,CAAC;AAAA,MAClF;AAAA,IACF;AAAA,EACF,SAAS,KAAK;AACZ,WAAO,MAAM,kCAAkC,EAAE,gBAAgB,QAAQ,gBAAgB,iBAAiB,aAAa,iBAAiB,IAAI,CAAC;AAC7I,UAAM;AAAA,EACR;AAEA;AACF;",
   "names": []
 }

package/dist/modules/payment_gateways/api/webhook/[provider]/route.js

@@ -8,6 +8,8 @@ import { GatewayTransaction } from "../../../data/entities.js";
 import { getPaymentGatewayQueue } from "../../../lib/queue.js";
 import { processPaymentGatewayWebhookJob } from "../../../lib/webhook-processor.js";
 import { paymentGatewaysTag } from "../../openapi.js";
+import { createLogger } from "@open-mercato/shared/lib/logger";
+const logger = createLogger("payment_gateways").child({ component: "webhook" });
 const metadata = {
   path: "/payment_gateways/webhook/[provider]",
   POST: { requireAuth: false }
@@ -93,7 +95,7 @@ async function POST(req, { params }) {
     }
     return NextResponse.json({ received: true, queued: true }, { status: 202 });
   } catch (err) {
-    console.warn(`[payment_gateways] Webhook verification failed for provider "${providerKey}"`, err);
+    logger.warn("Webhook verification failed", { providerKey, err });
     return NextResponse.json({ error: WEBHOOK_VERIFICATION_FAILED }, { status: 401 });
   }
 }

package/dist/modules/payment_gateways/api/webhook/[provider]/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../src/modules/payment_gateways/api/webhook/%5Bprovider%5D/route.ts"],
-  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { readJsonSafe } from '@open-mercato/shared/lib/http/readJsonSafe'\nimport { checkRateLimit, getClientIp, RATE_LIMIT_ERROR_FALLBACK } from '@open-mercato/shared/lib/ratelimit/helpers'\nimport type { RateLimiterService } from '@open-mercato/shared/lib/ratelimit/service'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { getWebhookHandler } from '@open-mercato/shared/modules/payment_gateways/types'\nimport type { IntegrationLogService } from '../../../../integrations/lib/log-service'\nimport type { PaymentGatewayService } from '../../../lib/gateway-service'\nimport type { CredentialsService } from '../../../../integrations/lib/credentials-service'\nimport { GatewayTransaction } from '../../../data/entities'\nimport { getPaymentGatewayQueue } from '../../../lib/queue'\nimport { processPaymentGatewayWebhookJob } from '../../../lib/webhook-processor'\nimport { paymentGatewaysTag } from '../../openapi'\n\nexport const metadata = {\n  path: '/payment_gateways/webhook/[provider]',\n  POST: { requireAuth: false },\n}\n\nconst WEBHOOK_VERIFICATION_FAILED = 'Webhook verification failed'\n\nconst paymentGatewayWebhookRateLimitConfig = {\n  points: 60,\n  duration: 60,\n  keyPrefix: 'payment_gateways:webhook',\n}\n\nexport async function POST(req: Request, { params }: { params: Promise<{ provider: string }> | { provider: string } }) {\n  const resolvedParams = await params\n  const providerKey = resolvedParams.provider\n  const container = await createRequestContainer()\n  const registration = getWebhookHandler(providerKey)\n  if (!registration) {\n    return NextResponse.json({ error: `No webhook handler for provider: ${providerKey}` }, { status: 404 })\n  }\n\n  const rateLimitResponse = await checkProviderWebhookRateLimit(container, req, providerKey)\n  if (rateLimitResponse) return rateLimitResponse\n\n  const rawBody = await req.text()\n  const headers: Record<string, string> = {}\n  req.headers.forEach((value, key) => {\n    headers[key] = value\n  })\n\n  const service = container.resolve('paymentGatewayService') as PaymentGatewayService\n  const em = container.resolve('em') as EntityManager\n  const integrationCredentialsService = container.resolve('integrationCredentialsService') as CredentialsService\n  const queue = getPaymentGatewayQueue(registration.queue ?? 'payment-gateways-webhook')\n  const payload = await readJsonSafe<Record<string, unknown>>(rawBody)\n  const sessionIdHint = registration.readSessionIdHint?.(payload) ?? null\n\n  try {\n    // The webhook endpoint is unauthenticated. Tenant/organization scope MUST come from a\n    // GatewayTransaction whose per-tenant credentials successfully verify the inbound\n    // signature \u2014 NEVER from attacker-controlled payload metadata. If no candidate\n    // transaction can be located by the provider-reported session id, or no candidate's\n    // credentials can verify the signature, we fail closed with 401. This prevents\n    // forged webhooks (e.g. mock gateway PoC) from mutating another tenant's payment\n    // state via `event.data.metadata.{organizationId,tenantId}`.\n    const candidates = sessionIdHint\n      ? await findWithDecryption(\n        em,\n        GatewayTransaction,\n        {\n          providerKey,\n          providerSessionId: sessionIdHint,\n          deletedAt: null,\n        },\n        { limit: 10, orderBy: { createdAt: 'desc' } },\n      )\n      : []\n\n    let transaction: GatewayTransaction | null = null\n    let matchedScope: { organizationId: string; tenantId: string } | null = null\n    let event: Awaited<ReturnType<typeof registration.handler>> | null = null\n    let lastVerificationError: unknown = null\n\n    for (const candidate of candidates) {\n      const candidateScope = { organizationId: candidate.organizationId, tenantId: candidate.tenantId }\n      const credentials = await integrationCredentialsService.resolve(`gateway_${providerKey}`, candidateScope) ?? {}\n      try {\n        event = await registration.handler({ rawBody, headers, credentials })\n        transaction = candidate\n        matchedScope = candidateScope\n        break\n      } catch (error: unknown) {\n        lastVerificationError = error\n      }\n    }\n\n    if (!event || !transaction || !matchedScope) {\n      throw lastVerificationError ?? new Error('Webhook verification failed: no matching transaction')\n    }\n\n    const scope = matchedScope\n\n    const jobPayload = {\n      providerKey,\n      event,\n      transactionId: transaction.id,\n      scope,\n    }\n\n    if (process.env.QUEUE_STRATEGY === 'async') {\n      await queue.enqueue({\n        name: 'payment-gateway-webhook',\n        payload: jobPayload,\n      })\n    } else {\n      await processPaymentGatewayWebhookJob(\n        {\n          em: container.resolve('em') as EntityManager,\n          paymentGatewayService: service,\n          integrationLogService: container.resolve('integrationLogService') as IntegrationLogService,\n        },\n        jobPayload,\n      )\n    }\n\n    return NextResponse.json({ received: true, queued: true }, { status: 202 })\n  } catch (err: unknown) {\n    console.warn(`[payment_gateways] Webhook verification failed for provider \"${providerKey}\"`, err)\n    return NextResponse.json({ error: WEBHOOK_VERIFICATION_FAILED }, { status: 401 })\n  }\n}\n\nasync function checkProviderWebhookRateLimit(\n  container: { resolve: (name: string) => unknown },\n  req: Request,\n  providerKey: string,\n): Promise<NextResponse | null> {\n  const rateLimiterService = tryResolve<RateLimiterService>(container, 'rateLimiterService')\n  if (!rateLimiterService) return null\n\n  return checkRateLimit(\n    rateLimiterService,\n    paymentGatewayWebhookRateLimitConfig,\n    `${providerKey}:${getClientIp(req, rateLimiterService.trustProxyDepth) ?? 'unknown'}`,\n    RATE_LIMIT_ERROR_FALLBACK,\n  )\n}\n\nfunction tryResolve<T>(container: { resolve: (name: string) => unknown }, name: string): T | null {\n  try {\n    return container.resolve(name) as T\n  } catch {\n    return null\n  }\n}\n\nexport const openApi = {\n  tags: [paymentGatewaysTag],\n  summary: 'Receive payment gateway webhook',\n  methods: {\n    POST: {\n      summary: 'Process inbound webhook from payment provider',\n      tags: [paymentGatewaysTag],\n      responses: [\n        { status: 202, description: 'Webhook accepted for async processing' },\n        { status: 401, description: 'Signature verification failed' },\n        { status: 404, description: 'Unknown provider' },\n      ],\n    },\n  },\n}\n\nexport default POST\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,oBAAoB;AAC7B,SAAS,gBAAgB,aAAa,iCAAiC;AAGvE,SAAS,yBAAyB;AAIlC,SAAS,0BAA0B;AACnC,SAAS,8BAA8B;AACvC,SAAS,uCAAuC;AAChD,SAAS,0BAA0B;AAE5B,MAAM,WAAW;AAAA,EACtB,MAAM;AAAA,EACN,MAAM,EAAE,aAAa,MAAM;AAC7B;AAEA,MAAM,8BAA8B;AAEpC,MAAM,uCAAuC;AAAA,EAC3C,QAAQ;AAAA,EACR,UAAU;AAAA,EACV,WAAW;AACb;AAEA,eAAsB,KAAK,KAAc,EAAE,OAAO,GAAqE;AACrH,QAAM,iBAAiB,MAAM;AAC7B,QAAM,cAAc,eAAe;AACnC,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,eAAe,kBAAkB,WAAW;AAClD,MAAI,CAAC,cAAc;AACjB,WAAO,aAAa,KAAK,EAAE,OAAO,oCAAoC,WAAW,GAAG,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACxG;AAEA,QAAM,oBAAoB,MAAM,8BAA8B,WAAW,KAAK,WAAW;AACzF,MAAI,kBAAmB,QAAO;AAE9B,QAAM,UAAU,MAAM,IAAI,KAAK;AAC/B,QAAM,UAAkC,CAAC;AACzC,MAAI,QAAQ,QAAQ,CAAC,OAAO,QAAQ;AAClC,YAAQ,GAAG,IAAI;AAAA,EACjB,CAAC;AAED,QAAM,UAAU,UAAU,QAAQ,uBAAuB;AACzD,QAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,QAAM,gCAAgC,UAAU,QAAQ,+BAA+B;AACvF,QAAM,QAAQ,uBAAuB,aAAa,SAAS,0BAA0B;AACrF,QAAM,UAAU,MAAM,aAAsC,OAAO;AACnE,QAAM,gBAAgB,aAAa,oBAAoB,OAAO,KAAK;AAEnE,MAAI;AAQF,UAAM,aAAa,gBACf,MAAM;AAAA,MACN;AAAA,MACA;AAAA,MACA;AAAA,QACE;AAAA,QACA,mBAAmB;AAAA,QACnB,WAAW;AAAA,MACb;AAAA,MACA,EAAE,OAAO,IAAI,SAAS,EAAE,WAAW,OAAO,EAAE;AAAA,IAC9C,IACE,CAAC;AAEL,QAAI,cAAyC;AAC7C,QAAI,eAAoE;AACxE,QAAI,QAAiE;AACrE,QAAI,wBAAiC;AAErC,eAAW,aAAa,YAAY;AAClC,YAAM,iBAAiB,EAAE,gBAAgB,UAAU,gBAAgB,UAAU,UAAU,SAAS;AAChG,YAAM,cAAc,MAAM,8BAA8B,QAAQ,WAAW,WAAW,IAAI,cAAc,KAAK,CAAC;AAC9G,UAAI;AACF,gBAAQ,MAAM,aAAa,QAAQ,EAAE,SAAS,SAAS,YAAY,CAAC;AACpE,sBAAc;AACd,uBAAe;AACf;AAAA,MACF,SAAS,OAAgB;AACvB,gCAAwB;AAAA,MAC1B;AAAA,IACF;AAEA,QAAI,CAAC,SAAS,CAAC,eAAe,CAAC,cAAc;AAC3C,YAAM,yBAAyB,IAAI,MAAM,sDAAsD;AAAA,IACjG;AAEA,UAAM,QAAQ;AAEd,UAAM,aAAa;AAAA,MACjB;AAAA,MACA;AAAA,MACA,eAAe,YAAY;AAAA,MAC3B;AAAA,IACF;AAEA,QAAI,QAAQ,IAAI,mBAAmB,SAAS;AAC1C,YAAM,MAAM,QAAQ;AAAA,QAClB,MAAM;AAAA,QACN,SAAS;AAAA,MACX,CAAC;AAAA,IACH,OAAO;AACL,YAAM;AAAA,QACJ;AAAA,UACE,IAAI,UAAU,QAAQ,IAAI;AAAA,UAC1B,uBAAuB;AAAA,UACvB,uBAAuB,UAAU,QAAQ,uBAAuB;AAAA,QAClE;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAEA,WAAO,aAAa,KAAK,EAAE,UAAU,MAAM,QAAQ,KAAK,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC5E,SAAS,KAAc;AACrB,YAAQ,KAAK,gEAAgE,WAAW,KAAK,GAAG;AAChG,WAAO,aAAa,KAAK,EAAE,OAAO,4BAA4B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAClF;AACF;AAEA,eAAe,8BACb,WACA,KACA,aAC8B;AAC9B,QAAM,qBAAqB,WAA+B,WAAW,oBAAoB;AACzF,MAAI,CAAC,mBAAoB,QAAO;AAEhC,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA,GAAG,WAAW,IAAI,YAAY,KAAK,mBAAmB,eAAe,KAAK,SAAS;AAAA,IACnF;AAAA,EACF;AACF;AAEA,SAAS,WAAc,WAAmD,MAAwB;AAChG,MAAI;AACF,WAAO,UAAU,QAAQ,IAAI;AAAA,EAC/B,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEO,MAAM,UAAU;AAAA,EACrB,MAAM,CAAC,kBAAkB;AAAA,EACzB,SAAS;AAAA,EACT,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,MAAM,CAAC,kBAAkB;AAAA,MACzB,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,wCAAwC;AAAA,QACpE,EAAE,QAAQ,KAAK,aAAa,gCAAgC;AAAA,QAC5D,EAAE,QAAQ,KAAK,aAAa,mBAAmB;AAAA,MACjD;AAAA,IACF;AAAA,EACF;AACF;AAEA,IAAO,gBAAQ;",
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { readJsonSafe } from '@open-mercato/shared/lib/http/readJsonSafe'\nimport { checkRateLimit, getClientIp, RATE_LIMIT_ERROR_FALLBACK } from '@open-mercato/shared/lib/ratelimit/helpers'\nimport type { RateLimiterService } from '@open-mercato/shared/lib/ratelimit/service'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { getWebhookHandler } from '@open-mercato/shared/modules/payment_gateways/types'\nimport type { IntegrationLogService } from '../../../../integrations/lib/log-service'\nimport type { PaymentGatewayService } from '../../../lib/gateway-service'\nimport type { CredentialsService } from '../../../../integrations/lib/credentials-service'\nimport { GatewayTransaction } from '../../../data/entities'\nimport { getPaymentGatewayQueue } from '../../../lib/queue'\nimport { processPaymentGatewayWebhookJob } from '../../../lib/webhook-processor'\nimport { paymentGatewaysTag } from '../../openapi'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('payment_gateways').child({ component: 'webhook' })\n\nexport const metadata = {\n  path: '/payment_gateways/webhook/[provider]',\n  POST: { requireAuth: false },\n}\n\nconst WEBHOOK_VERIFICATION_FAILED = 'Webhook verification failed'\n\nconst paymentGatewayWebhookRateLimitConfig = {\n  points: 60,\n  duration: 60,\n  keyPrefix: 'payment_gateways:webhook',\n}\n\nexport async function POST(req: Request, { params }: { params: Promise<{ provider: string }> | { provider: string } }) {\n  const resolvedParams = await params\n  const providerKey = resolvedParams.provider\n  const container = await createRequestContainer()\n  const registration = getWebhookHandler(providerKey)\n  if (!registration) {\n    return NextResponse.json({ error: `No webhook handler for provider: ${providerKey}` }, { status: 404 })\n  }\n\n  const rateLimitResponse = await checkProviderWebhookRateLimit(container, req, providerKey)\n  if (rateLimitResponse) return rateLimitResponse\n\n  const rawBody = await req.text()\n  const headers: Record<string, string> = {}\n  req.headers.forEach((value, key) => {\n    headers[key] = value\n  })\n\n  const service = container.resolve('paymentGatewayService') as PaymentGatewayService\n  const em = container.resolve('em') as EntityManager\n  const integrationCredentialsService = container.resolve('integrationCredentialsService') as CredentialsService\n  const queue = getPaymentGatewayQueue(registration.queue ?? 'payment-gateways-webhook')\n  const payload = await readJsonSafe<Record<string, unknown>>(rawBody)\n  const sessionIdHint = registration.readSessionIdHint?.(payload) ?? null\n\n  try {\n    // The webhook endpoint is unauthenticated. Tenant/organization scope MUST come from a\n    // GatewayTransaction whose per-tenant credentials successfully verify the inbound\n    // signature \u2014 NEVER from attacker-controlled payload metadata. If no candidate\n    // transaction can be located by the provider-reported session id, or no candidate's\n    // credentials can verify the signature, we fail closed with 401. This prevents\n    // forged webhooks (e.g. mock gateway PoC) from mutating another tenant's payment\n    // state via `event.data.metadata.{organizationId,tenantId}`.\n    const candidates = sessionIdHint\n      ? await findWithDecryption(\n        em,\n        GatewayTransaction,\n        {\n          providerKey,\n          providerSessionId: sessionIdHint,\n          deletedAt: null,\n        },\n        { limit: 10, orderBy: { createdAt: 'desc' } },\n      )\n      : []\n\n    let transaction: GatewayTransaction | null = null\n    let matchedScope: { organizationId: string; tenantId: string } | null = null\n    let event: Awaited<ReturnType<typeof registration.handler>> | null = null\n    let lastVerificationError: unknown = null\n\n    for (const candidate of candidates) {\n      const candidateScope = { organizationId: candidate.organizationId, tenantId: candidate.tenantId }\n      const credentials = await integrationCredentialsService.resolve(`gateway_${providerKey}`, candidateScope) ?? {}\n      try {\n        event = await registration.handler({ rawBody, headers, credentials })\n        transaction = candidate\n        matchedScope = candidateScope\n        break\n      } catch (error: unknown) {\n        lastVerificationError = error\n      }\n    }\n\n    if (!event || !transaction || !matchedScope) {\n      throw lastVerificationError ?? new Error('Webhook verification failed: no matching transaction')\n    }\n\n    const scope = matchedScope\n\n    const jobPayload = {\n      providerKey,\n      event,\n      transactionId: transaction.id,\n      scope,\n    }\n\n    if (process.env.QUEUE_STRATEGY === 'async') {\n      await queue.enqueue({\n        name: 'payment-gateway-webhook',\n        payload: jobPayload,\n      })\n    } else {\n      await processPaymentGatewayWebhookJob(\n        {\n          em: container.resolve('em') as EntityManager,\n          paymentGatewayService: service,\n          integrationLogService: container.resolve('integrationLogService') as IntegrationLogService,\n        },\n        jobPayload,\n      )\n    }\n\n    return NextResponse.json({ received: true, queued: true }, { status: 202 })\n  } catch (err: unknown) {\n    logger.warn('Webhook verification failed', { providerKey, err })\n    return NextResponse.json({ error: WEBHOOK_VERIFICATION_FAILED }, { status: 401 })\n  }\n}\n\nasync function checkProviderWebhookRateLimit(\n  container: { resolve: (name: string) => unknown },\n  req: Request,\n  providerKey: string,\n): Promise<NextResponse | null> {\n  const rateLimiterService = tryResolve<RateLimiterService>(container, 'rateLimiterService')\n  if (!rateLimiterService) return null\n\n  return checkRateLimit(\n    rateLimiterService,\n    paymentGatewayWebhookRateLimitConfig,\n    `${providerKey}:${getClientIp(req, rateLimiterService.trustProxyDepth) ?? 'unknown'}`,\n    RATE_LIMIT_ERROR_FALLBACK,\n  )\n}\n\nfunction tryResolve<T>(container: { resolve: (name: string) => unknown }, name: string): T | null {\n  try {\n    return container.resolve(name) as T\n  } catch {\n    return null\n  }\n}\n\nexport const openApi = {\n  tags: [paymentGatewaysTag],\n  summary: 'Receive payment gateway webhook',\n  methods: {\n    POST: {\n      summary: 'Process inbound webhook from payment provider',\n      tags: [paymentGatewaysTag],\n      responses: [\n        { status: 202, description: 'Webhook accepted for async processing' },\n        { status: 401, description: 'Signature verification failed' },\n        { status: 404, description: 'Unknown provider' },\n      ],\n    },\n  },\n}\n\nexport default POST\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,oBAAoB;AAC7B,SAAS,gBAAgB,aAAa,iCAAiC;AAGvE,SAAS,yBAAyB;AAIlC,SAAS,0BAA0B;AACnC,SAAS,8BAA8B;AACvC,SAAS,uCAAuC;AAChD,SAAS,0BAA0B;AACnC,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,kBAAkB,EAAE,MAAM,EAAE,WAAW,UAAU,CAAC;AAEvE,MAAM,WAAW;AAAA,EACtB,MAAM;AAAA,EACN,MAAM,EAAE,aAAa,MAAM;AAC7B;AAEA,MAAM,8BAA8B;AAEpC,MAAM,uCAAuC;AAAA,EAC3C,QAAQ;AAAA,EACR,UAAU;AAAA,EACV,WAAW;AACb;AAEA,eAAsB,KAAK,KAAc,EAAE,OAAO,GAAqE;AACrH,QAAM,iBAAiB,MAAM;AAC7B,QAAM,cAAc,eAAe;AACnC,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,eAAe,kBAAkB,WAAW;AAClD,MAAI,CAAC,cAAc;AACjB,WAAO,aAAa,KAAK,EAAE,OAAO,oCAAoC,WAAW,GAAG,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACxG;AAEA,QAAM,oBAAoB,MAAM,8BAA8B,WAAW,KAAK,WAAW;AACzF,MAAI,kBAAmB,QAAO;AAE9B,QAAM,UAAU,MAAM,IAAI,KAAK;AAC/B,QAAM,UAAkC,CAAC;AACzC,MAAI,QAAQ,QAAQ,CAAC,OAAO,QAAQ;AAClC,YAAQ,GAAG,IAAI;AAAA,EACjB,CAAC;AAED,QAAM,UAAU,UAAU,QAAQ,uBAAuB;AACzD,QAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,QAAM,gCAAgC,UAAU,QAAQ,+BAA+B;AACvF,QAAM,QAAQ,uBAAuB,aAAa,SAAS,0BAA0B;AACrF,QAAM,UAAU,MAAM,aAAsC,OAAO;AACnE,QAAM,gBAAgB,aAAa,oBAAoB,OAAO,KAAK;AAEnE,MAAI;AAQF,UAAM,aAAa,gBACf,MAAM;AAAA,MACN;AAAA,MACA;AAAA,MACA;AAAA,QACE;AAAA,QACA,mBAAmB;AAAA,QACnB,WAAW;AAAA,MACb;AAAA,MACA,EAAE,OAAO,IAAI,SAAS,EAAE,WAAW,OAAO,EAAE;AAAA,IAC9C,IACE,CAAC;AAEL,QAAI,cAAyC;AAC7C,QAAI,eAAoE;AACxE,QAAI,QAAiE;AACrE,QAAI,wBAAiC;AAErC,eAAW,aAAa,YAAY;AAClC,YAAM,iBAAiB,EAAE,gBAAgB,UAAU,gBAAgB,UAAU,UAAU,SAAS;AAChG,YAAM,cAAc,MAAM,8BAA8B,QAAQ,WAAW,WAAW,IAAI,cAAc,KAAK,CAAC;AAC9G,UAAI;AACF,gBAAQ,MAAM,aAAa,QAAQ,EAAE,SAAS,SAAS,YAAY,CAAC;AACpE,sBAAc;AACd,uBAAe;AACf;AAAA,MACF,SAAS,OAAgB;AACvB,gCAAwB;AAAA,MAC1B;AAAA,IACF;AAEA,QAAI,CAAC,SAAS,CAAC,eAAe,CAAC,cAAc;AAC3C,YAAM,yBAAyB,IAAI,MAAM,sDAAsD;AAAA,IACjG;AAEA,UAAM,QAAQ;AAEd,UAAM,aAAa;AAAA,MACjB;AAAA,MACA;AAAA,MACA,eAAe,YAAY;AAAA,MAC3B;AAAA,IACF;AAEA,QAAI,QAAQ,IAAI,mBAAmB,SAAS;AAC1C,YAAM,MAAM,QAAQ;AAAA,QAClB,MAAM;AAAA,QACN,SAAS;AAAA,MACX,CAAC;AAAA,IACH,OAAO;AACL,YAAM;AAAA,QACJ;AAAA,UACE,IAAI,UAAU,QAAQ,IAAI;AAAA,UAC1B,uBAAuB;AAAA,UACvB,uBAAuB,UAAU,QAAQ,uBAAuB;AAAA,QAClE;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAEA,WAAO,aAAa,KAAK,EAAE,UAAU,MAAM,QAAQ,KAAK,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC5E,SAAS,KAAc;AACrB,WAAO,KAAK,+BAA+B,EAAE,aAAa,IAAI,CAAC;AAC/D,WAAO,aAAa,KAAK,EAAE,OAAO,4BAA4B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAClF;AACF;AAEA,eAAe,8BACb,WACA,KACA,aAC8B;AAC9B,QAAM,qBAAqB,WAA+B,WAAW,oBAAoB;AACzF,MAAI,CAAC,mBAAoB,QAAO;AAEhC,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA,GAAG,WAAW,IAAI,YAAY,KAAK,mBAAmB,eAAe,KAAK,SAAS;AAAA,IACnF;AAAA,EACF;AACF;AAEA,SAAS,WAAc,WAAmD,MAAwB;AAChG,MAAI;AACF,WAAO,UAAU,QAAQ,IAAI;AAAA,EAC/B,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEO,MAAM,UAAU;AAAA,EACrB,MAAM,CAAC,kBAAkB;AAAA,EACzB,SAAS;AAAA,EACT,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,MAAM,CAAC,kBAAkB;AAAA,MACzB,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,wCAAwC;AAAA,QACpE,EAAE,QAAQ,KAAK,aAAa,gCAAgC;AAAA,QAC5D,EAAE,QAAQ,KAAK,aAAa,mBAAmB;AAAA,MACjD;AAAA,IACF;AAAA,EACF;AACF;AAEA,IAAO,gBAAQ;",
   "names": []
 }

package/dist/modules/perspectives/services/perspectiveService.js

@@ -5,6 +5,8 @@ import {
   enforceRecordGoneIsConflict
 } from "@open-mercato/shared/lib/crud/optimistic-lock-command";
 import { Perspective, RolePerspective } from "../data/entities.js";
+import { createLogger } from "@open-mercato/shared/lib/logger";
+const logger = createLogger("perspectives").child({ component: "perspective-service" });
 const PERSPECTIVE_RESOURCE_KIND = "perspectives.perspective";
 const ROLE_PERSPECTIVE_RESOURCE_KIND = "perspectives.role_perspective";
 function resolveRoleLockInput(expectedUpdatedAtByRoleId, roleId, request) {
@@ -65,9 +67,7 @@ function maybeMigrateLegacyFilterValues(settings) {
   const record = filters;
   if ("v" in record && record.v === 2) return settings;
   if ("root" in record) return settings;
-  if (typeof console !== "undefined") {
-    console.warn("[perspectives] Dropping legacy filterValues shape; please re-create the perspective with the new filter UI.");
-  }
+  logger.warn("Dropping legacy filterValues shape; please re-create the perspective with the new filter UI.");
   return { ...settings, filters: void 0 };
 }
 function toResolvedPerspective(entity) {