@open-mercato/core 0.6.7-develop.6696.1.4236709f7e → 0.6.7-develop.6725.1.07a748cfc2

package/dist/modules/feature_toggles/components/hooks/useFeatureFlagNumber.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../src/modules/feature_toggles/components/hooks/useFeatureFlagNumber.ts"],
-  "sourcesContent": ["\"use client\"\n\nimport { useQuery } from '@tanstack/react-query'\nimport { readApiResultOrThrow } from '@open-mercato/ui/backend/utils/apiCall'\n\nexport type UseFeatureFlagNumberOptions = {\n    id: string\n}\n\nexport type UseFeatureFlagNumberResult = {\n    value: number | null\n    isLoading: boolean\n}\n\ntype Result<T> = {\n    ok: true\n    value: T\n} | {\n    ok: false\n    error: unknown\n}\n\nexport function useFeatureFlagNumber(options: UseFeatureFlagNumberOptions): UseFeatureFlagNumberResult {\n    const query = useQuery({\n        queryKey: ['featureToggles', 'check', 'number', options?.id],\n        queryFn: async () => {\n            const params = new URLSearchParams({\n                identifier: options.id,\n            })\n\n            const result = await readApiResultOrThrow<Result<number>>(\n                `/api/feature_toggles/check/number?${params.toString()}`,\n                undefined,\n                { errorMessage: 'Failed to check feature flag.' },\n            )\n\n            return result\n        },\n        enabled: !!options.id,\n    })\n\n    const value = query.data?.ok ? query.data.value : null\n    const isLoading = query.isLoading\n\n    return {\n        value,\n        isLoading,\n    }\n}\n"],
-  "mappings": ";AAEA,SAAS,gBAAgB;AACzB,SAAS,4BAA4B;AAmB9B,SAAS,qBAAqB,SAAkE;AACnG,QAAM,QAAQ,SAAS;AAAA,IACnB,UAAU,CAAC,kBAAkB,SAAS,UAAU,SAAS,EAAE;AAAA,IAC3D,SAAS,YAAY;AACjB,YAAM,SAAS,IAAI,gBAAgB;AAAA,QAC/B,YAAY,QAAQ;AAAA,MACxB,CAAC;AAED,YAAM,SAAS,MAAM;AAAA,QACjB,qCAAqC,OAAO,SAAS,CAAC;AAAA,QACtD;AAAA,QACA,EAAE,cAAc,gCAAgC;AAAA,MACpD;AAEA,aAAO;AAAA,IACX;AAAA,IACA,SAAS,CAAC,CAAC,QAAQ;AAAA,EACvB,CAAC;AAED,QAAM,QAAQ,MAAM,MAAM,KAAK,MAAM,KAAK,QAAQ;AAClD,QAAM,YAAY,MAAM;AAExB,SAAO;AAAA,IACH;AAAA,IACA;AAAA,EACJ;AACJ;",
+  "sourcesContent": ["\"use client\"\n\nimport { useQuery } from '@tanstack/react-query'\nimport { readApiResultOrThrow } from '@open-mercato/ui/backend/utils/apiCall'\nimport { FEATURE_FLAG_STALE_TIME_MS } from './staleTime'\n\nexport type UseFeatureFlagNumberOptions = {\n    id: string\n    /**\n     * Value used while the check is in flight and whenever the toggle cannot be\n     * resolved (undefined toggle, type mismatch, network or permission failure).\n     * Defaults to `null`.\n     */\n    defaultValue?: number | null\n}\n\nexport type UseFeatureFlagNumberResult = {\n    value: number | null\n    isLoading: boolean\n}\n\ntype Result<T> = {\n    ok: true\n    value: T\n} | {\n    ok: false\n    error: unknown\n}\n\nexport function useFeatureFlagNumber(options: UseFeatureFlagNumberOptions): UseFeatureFlagNumberResult {\n    const defaultValue = options.defaultValue ?? null\n    const query = useQuery({\n        queryKey: ['featureToggles', 'check', 'number', options?.id],\n        queryFn: async () => {\n            const params = new URLSearchParams({\n                identifier: options.id,\n            })\n\n            const result = await readApiResultOrThrow<Result<number>>(\n                `/api/feature_toggles/check/number?${params.toString()}`,\n                undefined,\n                { errorMessage: 'Failed to check feature flag.' },\n            )\n\n            return result\n        },\n        enabled: !!options.id,\n        staleTime: FEATURE_FLAG_STALE_TIME_MS,\n    })\n\n    const value = query.data?.ok ? query.data.value : defaultValue\n    const isLoading = query.isLoading\n\n    return {\n        value,\n        isLoading,\n    }\n}\n"],
+  "mappings": ";AAEA,SAAS,gBAAgB;AACzB,SAAS,4BAA4B;AACrC,SAAS,kCAAkC;AAyBpC,SAAS,qBAAqB,SAAkE;AACnG,QAAM,eAAe,QAAQ,gBAAgB;AAC7C,QAAM,QAAQ,SAAS;AAAA,IACnB,UAAU,CAAC,kBAAkB,SAAS,UAAU,SAAS,EAAE;AAAA,IAC3D,SAAS,YAAY;AACjB,YAAM,SAAS,IAAI,gBAAgB;AAAA,QAC/B,YAAY,QAAQ;AAAA,MACxB,CAAC;AAED,YAAM,SAAS,MAAM;AAAA,QACjB,qCAAqC,OAAO,SAAS,CAAC;AAAA,QACtD;AAAA,QACA,EAAE,cAAc,gCAAgC;AAAA,MACpD;AAEA,aAAO;AAAA,IACX;AAAA,IACA,SAAS,CAAC,CAAC,QAAQ;AAAA,IACnB,WAAW;AAAA,EACf,CAAC;AAED,QAAM,QAAQ,MAAM,MAAM,KAAK,MAAM,KAAK,QAAQ;AAClD,QAAM,YAAY,MAAM;AAExB,SAAO;AAAA,IACH;AAAA,IACA;AAAA,EACJ;AACJ;",
   "names": []
 }

package/dist/modules/feature_toggles/components/hooks/useFeatureFlagString.js

@@ -1,7 +1,9 @@
 "use client";
 import { useQuery } from "@tanstack/react-query";
 import { readApiResultOrThrow } from "@open-mercato/ui/backend/utils/apiCall";
+import { FEATURE_FLAG_STALE_TIME_MS } from "./staleTime.js";
 function useFeatureFlagString(options) {
+  const defaultValue = options.defaultValue ?? null;
   const query = useQuery({
     queryKey: ["featureToggles", "check", "string", options?.id],
     queryFn: async () => {
@@ -15,9 +17,10 @@ function useFeatureFlagString(options) {
       );
       return result;
     },
-    enabled: !!options.id
+    enabled: !!options.id,
+    staleTime: FEATURE_FLAG_STALE_TIME_MS
   });
-  const value = query.data?.ok ? query.data.value : null;
+  const value = query.data?.ok ? query.data.value : defaultValue;
   const isLoading = query.isLoading;
   return {
     value,

package/dist/modules/feature_toggles/components/hooks/useFeatureFlagString.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../src/modules/feature_toggles/components/hooks/useFeatureFlagString.ts"],
-  "sourcesContent": ["\"use client\"\n\nimport { useQuery } from '@tanstack/react-query'\nimport { readApiResultOrThrow } from '@open-mercato/ui/backend/utils/apiCall'\n\nexport type UseFeatureFlagStringOptions = {\n    id: string\n}\n\nexport type UseFeatureFlagStringResult = {\n    value: string | null\n    isLoading: boolean\n}\n\ntype Result<T> = {\n    ok: true\n    value: T\n} | {\n    ok: false\n    error: unknown\n}\n\nexport function useFeatureFlagString(options: UseFeatureFlagStringOptions): UseFeatureFlagStringResult {\n    const query = useQuery({\n        queryKey: ['featureToggles', 'check', 'string', options?.id],\n        queryFn: async () => {\n            const params = new URLSearchParams({\n                identifier: options.id,\n            })\n\n            const result = await readApiResultOrThrow<Result<string>>(\n                `/api/feature_toggles/check/string?${params.toString()}`,\n                undefined,\n                { errorMessage: 'Failed to check feature flag.' },\n            )\n\n            return result\n        },\n        enabled: !!options.id,\n    })\n\n    const value = query.data?.ok ? query.data.value : null\n    const isLoading = query.isLoading\n\n    return {\n        value,\n        isLoading,\n    }\n}\n"],
-  "mappings": ";AAEA,SAAS,gBAAgB;AACzB,SAAS,4BAA4B;AAmB9B,SAAS,qBAAqB,SAAkE;AACnG,QAAM,QAAQ,SAAS;AAAA,IACnB,UAAU,CAAC,kBAAkB,SAAS,UAAU,SAAS,EAAE;AAAA,IAC3D,SAAS,YAAY;AACjB,YAAM,SAAS,IAAI,gBAAgB;AAAA,QAC/B,YAAY,QAAQ;AAAA,MACxB,CAAC;AAED,YAAM,SAAS,MAAM;AAAA,QACjB,qCAAqC,OAAO,SAAS,CAAC;AAAA,QACtD;AAAA,QACA,EAAE,cAAc,gCAAgC;AAAA,MACpD;AAEA,aAAO;AAAA,IACX;AAAA,IACA,SAAS,CAAC,CAAC,QAAQ;AAAA,EACvB,CAAC;AAED,QAAM,QAAQ,MAAM,MAAM,KAAK,MAAM,KAAK,QAAQ;AAClD,QAAM,YAAY,MAAM;AAExB,SAAO;AAAA,IACH;AAAA,IACA;AAAA,EACJ;AACJ;",
+  "sourcesContent": ["\"use client\"\n\nimport { useQuery } from '@tanstack/react-query'\nimport { readApiResultOrThrow } from '@open-mercato/ui/backend/utils/apiCall'\nimport { FEATURE_FLAG_STALE_TIME_MS } from './staleTime'\n\nexport type UseFeatureFlagStringOptions = {\n    id: string\n    /**\n     * Value used while the check is in flight and whenever the toggle cannot be\n     * resolved (undefined toggle, type mismatch, network or permission failure).\n     * Defaults to `null`.\n     */\n    defaultValue?: string | null\n}\n\nexport type UseFeatureFlagStringResult = {\n    value: string | null\n    isLoading: boolean\n}\n\ntype Result<T> = {\n    ok: true\n    value: T\n} | {\n    ok: false\n    error: unknown\n}\n\nexport function useFeatureFlagString(options: UseFeatureFlagStringOptions): UseFeatureFlagStringResult {\n    const defaultValue = options.defaultValue ?? null\n    const query = useQuery({\n        queryKey: ['featureToggles', 'check', 'string', options?.id],\n        queryFn: async () => {\n            const params = new URLSearchParams({\n                identifier: options.id,\n            })\n\n            const result = await readApiResultOrThrow<Result<string>>(\n                `/api/feature_toggles/check/string?${params.toString()}`,\n                undefined,\n                { errorMessage: 'Failed to check feature flag.' },\n            )\n\n            return result\n        },\n        enabled: !!options.id,\n        staleTime: FEATURE_FLAG_STALE_TIME_MS,\n    })\n\n    const value = query.data?.ok ? query.data.value : defaultValue\n    const isLoading = query.isLoading\n\n    return {\n        value,\n        isLoading,\n    }\n}\n"],
+  "mappings": ";AAEA,SAAS,gBAAgB;AACzB,SAAS,4BAA4B;AACrC,SAAS,kCAAkC;AAyBpC,SAAS,qBAAqB,SAAkE;AACnG,QAAM,eAAe,QAAQ,gBAAgB;AAC7C,QAAM,QAAQ,SAAS;AAAA,IACnB,UAAU,CAAC,kBAAkB,SAAS,UAAU,SAAS,EAAE;AAAA,IAC3D,SAAS,YAAY;AACjB,YAAM,SAAS,IAAI,gBAAgB;AAAA,QAC/B,YAAY,QAAQ;AAAA,MACxB,CAAC;AAED,YAAM,SAAS,MAAM;AAAA,QACjB,qCAAqC,OAAO,SAAS,CAAC;AAAA,QACtD;AAAA,QACA,EAAE,cAAc,gCAAgC;AAAA,MACpD;AAEA,aAAO;AAAA,IACX;AAAA,IACA,SAAS,CAAC,CAAC,QAAQ;AAAA,IACnB,WAAW;AAAA,EACf,CAAC;AAED,QAAM,QAAQ,MAAM,MAAM,KAAK,MAAM,KAAK,QAAQ;AAClD,QAAM,YAAY,MAAM;AAExB,SAAO;AAAA,IACH;AAAA,IACA;AAAA,EACJ;AACJ;",
   "names": []
 }

package/dist/modules/inbox_ops/api/proposals/route.js

@@ -2,6 +2,8 @@ import { NextResponse } from "next/server";
 import { ZodError } from "zod";
 import { findAndCountWithDecryption, findWithDecryption } from "@open-mercato/shared/lib/encryption/find";
 import { escapeLikePattern } from "@open-mercato/shared/lib/db/escapeLikePattern";
+import { findEntityIdsBySearchTokens } from "@open-mercato/shared/lib/search/tokenLookup";
+import { E } from "../../../../generated/entities.ids.generated.js";
 import { InboxProposal, InboxEmail, InboxProposalAction, InboxDiscrepancy } from "../../data/entities.js";
 import { proposalListQuerySchema } from "../../data/validators.js";
 import { resolveRequestContext, UnauthorizedError } from "../routeHelpers.js";
@@ -39,7 +41,20 @@ async function GET(req) {
       }
     }
     if (query.search) {
-      where.summary = { $ilike: `%${escapeLikePattern(query.search)}%` };
+      const searchOr = [
+        { summary: { $ilike: `%${escapeLikePattern(query.search)}%` } }
+      ];
+      const tokenMatch = await findEntityIdsBySearchTokens({
+        db: ctx.em.getKysely(),
+        entityType: E.inbox_ops.inbox_proposal,
+        query: query.search,
+        fields: ["summary"],
+        scope: { tenantId: ctx.tenantId, organizationId: ctx.organizationId }
+      });
+      if (tokenMatch.matched && tokenMatch.ids.length) {
+        searchOr.push({ id: { $in: tokenMatch.ids } });
+      }
+      where.$or = searchOr;
     }
     const offset = (query.page - 1) * query.pageSize;
     const [items, total] = await findAndCountWithDecryption(

package/dist/modules/inbox_ops/api/proposals/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../src/modules/inbox_ops/api/proposals/route.ts"],
-  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { ZodError } from 'zod'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport type { FilterQuery } from '@mikro-orm/postgresql'\nimport { findAndCountWithDecryption, findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { escapeLikePattern } from '@open-mercato/shared/lib/db/escapeLikePattern'\nimport { InboxProposal, InboxEmail, InboxProposalAction, InboxDiscrepancy, type InboxProposalCategory } from '../../data/entities'\nimport { proposalListQuerySchema } from '../../data/validators'\nimport { resolveRequestContext, UnauthorizedError } from '../routeHelpers'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('inbox_ops').child({ component: 'proposals' })\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['inbox_ops.proposals.view'] },\n}\n\nexport async function GET(req: Request) {\n  try {\n    const url = new URL(req.url)\n    const query = proposalListQuerySchema.parse({\n      status: url.searchParams.get('status') || undefined,\n      category: url.searchParams.get('category') || undefined,\n      search: url.searchParams.get('search') || undefined,\n      page: url.searchParams.get('page') || undefined,\n      pageSize: url.searchParams.get('pageSize') || undefined,\n    })\n\n    const ctx = await resolveRequestContext(req)\n\n    const where: FilterQuery<InboxProposal> = {\n      organizationId: ctx.organizationId,\n      tenantId: ctx.tenantId,\n      deletedAt: null,\n      isActive: true,\n    }\n\n    if (query.status) {\n      where.status = query.status\n    }\n    if (query.category) {\n      const categories = query.category.split(',').map((c) => c.trim()).filter(Boolean) as InboxProposalCategory[]\n      if (categories.length === 1) {\n        where.category = categories[0]\n      } else if (categories.length > 1) {\n        where.category = { $in: categories }\n      }\n    }\n    if (query.search) {\n      where.summary = { $ilike: `%${escapeLikePattern(query.search)}%` }\n    }\n\n    const offset = (query.page - 1) * query.pageSize\n\n    const [items, total] = await findAndCountWithDecryption(\n      ctx.em,\n      InboxProposal,\n      where,\n      {\n        limit: query.pageSize,\n        offset,\n        orderBy: { createdAt: 'DESC' },\n      },\n      ctx.scope,\n    )\n\n    // Enrich proposals with email, action, and discrepancy data\n    const proposalIds = items.map((p) => p.id)\n    const emailIds = [...new Set(items.map((p) => p.inboxEmailId).filter(Boolean))]\n\n    const [emails, allActions, allDiscrepancies] = await Promise.all([\n      emailIds.length > 0\n        ? findWithDecryption(ctx.em, InboxEmail, { id: { $in: emailIds }, organizationId: ctx.organizationId, tenantId: ctx.tenantId }, {}, ctx.scope)\n        : Promise.resolve([] as InboxEmail[]),\n      proposalIds.length > 0\n        ? findWithDecryption(ctx.em, InboxProposalAction, { proposalId: { $in: proposalIds }, organizationId: ctx.organizationId, tenantId: ctx.tenantId, deletedAt: null }, {}, ctx.scope)\n        : Promise.resolve([] as InboxProposalAction[]),\n      proposalIds.length > 0\n        ? findWithDecryption(ctx.em, InboxDiscrepancy, { proposalId: { $in: proposalIds }, organizationId: ctx.organizationId, tenantId: ctx.tenantId, resolved: false }, {}, ctx.scope)\n        : Promise.resolve([] as InboxDiscrepancy[]),\n    ])\n\n    const emailMap = new Map(emails.map((e) => [e.id, e]))\n\n    const enrichedItems = items.map((proposal) => {\n      const email = emailMap.get(proposal.inboxEmailId)\n      const proposalActions = allActions.filter((a) => a.proposalId === proposal.id)\n      const proposalDiscrepancies = allDiscrepancies.filter((d) => d.proposalId === proposal.id)\n\n      return {\n        ...proposal,\n        actionCount: proposalActions.length,\n        pendingActionCount: proposalActions.filter((a) => a.status === 'pending').length,\n        discrepancyCount: proposalDiscrepancies.length,\n        emailSubject: email?.subject || null,\n        emailFrom: email?.forwardedByName || email?.forwardedByAddress || null,\n        receivedAt: email?.receivedAt || proposal.createdAt,\n      }\n    })\n\n    return NextResponse.json({\n      items: enrichedItems,\n      total,\n      page: query.page,\n      pageSize: query.pageSize,\n      totalPages: Math.ceil(total / query.pageSize),\n    })\n  } catch (err) {\n    if (err instanceof ZodError) {\n      return NextResponse.json({ error: 'Invalid query parameters' }, { status: 400 })\n    }\n    if (err instanceof UnauthorizedError) {\n      return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n    }\n    logger.error('Failed to list proposals', { err })\n    return NextResponse.json({ error: 'Failed to list proposals' }, { status: 500 })\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'InboxOps',\n  summary: 'Proposals',\n  methods: {\n    GET: {\n      summary: 'List proposals',\n      description: 'List inbox proposals with optional status filter and pagination',\n      responses: [\n        { status: 200, description: 'Paginated list of proposals' },\n        { status: 401, description: 'Unauthorized' },\n      ],\n    },\n  },\n}\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,gBAAgB;AAGzB,SAAS,4BAA4B,0BAA0B;AAC/D,SAAS,yBAAyB;AAClC,SAAS,eAAe,YAAY,qBAAqB,wBAAoD;AAC7G,SAAS,+BAA+B;AACxC,SAAS,uBAAuB,yBAAyB;AACzD,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,WAAW,EAAE,MAAM,EAAE,WAAW,YAAY,CAAC;AAElE,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,0BAA0B,EAAE;AAC1E;AAEA,eAAsB,IAAI,KAAc;AACtC,MAAI;AACF,UAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAC3B,UAAM,QAAQ,wBAAwB,MAAM;AAAA,MAC1C,QAAQ,IAAI,aAAa,IAAI,QAAQ,KAAK;AAAA,MAC1C,UAAU,IAAI,aAAa,IAAI,UAAU,KAAK;AAAA,MAC9C,QAAQ,IAAI,aAAa,IAAI,QAAQ,KAAK;AAAA,MAC1C,MAAM,IAAI,aAAa,IAAI,MAAM,KAAK;AAAA,MACtC,UAAU,IAAI,aAAa,IAAI,UAAU,KAAK;AAAA,IAChD,CAAC;AAED,UAAM,MAAM,MAAM,sBAAsB,GAAG;AAE3C,UAAM,QAAoC;AAAA,MACxC,gBAAgB,IAAI;AAAA,MACpB,UAAU,IAAI;AAAA,MACd,WAAW;AAAA,MACX,UAAU;AAAA,IACZ;AAEA,QAAI,MAAM,QAAQ;AAChB,YAAM,SAAS,MAAM;AAAA,IACvB;AACA,QAAI,MAAM,UAAU;AAClB,YAAM,aAAa,MAAM,SAAS,MAAM,GAAG,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO,OAAO;AAChF,UAAI,WAAW,WAAW,GAAG;AAC3B,cAAM,WAAW,WAAW,CAAC;AAAA,MAC/B,WAAW,WAAW,SAAS,GAAG;AAChC,cAAM,WAAW,EAAE,KAAK,WAAW;AAAA,MACrC;AAAA,IACF;AACA,QAAI,MAAM,QAAQ;AAChB,YAAM,UAAU,EAAE,QAAQ,IAAI,kBAAkB,MAAM,MAAM,CAAC,IAAI;AAAA,IACnE;AAEA,UAAM,UAAU,MAAM,OAAO,KAAK,MAAM;AAExC,UAAM,CAAC,OAAO,KAAK,IAAI,MAAM;AAAA,MAC3B,IAAI;AAAA,MACJ;AAAA,MACA;AAAA,MACA;AAAA,QACE,OAAO,MAAM;AAAA,QACb;AAAA,QACA,SAAS,EAAE,WAAW,OAAO;AAAA,MAC/B;AAAA,MACA,IAAI;AAAA,IACN;AAGA,UAAM,cAAc,MAAM,IAAI,CAAC,MAAM,EAAE,EAAE;AACzC,UAAM,WAAW,CAAC,GAAG,IAAI,IAAI,MAAM,IAAI,CAAC,MAAM,EAAE,YAAY,EAAE,OAAO,OAAO,CAAC,CAAC;AAE9E,UAAM,CAAC,QAAQ,YAAY,gBAAgB,IAAI,MAAM,QAAQ,IAAI;AAAA,MAC/D,SAAS,SAAS,IACd,mBAAmB,IAAI,IAAI,YAAY,EAAE,IAAI,EAAE,KAAK,SAAS,GAAG,gBAAgB,IAAI,gBAAgB,UAAU,IAAI,SAAS,GAAG,CAAC,GAAG,IAAI,KAAK,IAC3I,QAAQ,QAAQ,CAAC,CAAiB;AAAA,MACtC,YAAY,SAAS,IACjB,mBAAmB,IAAI,IAAI,qBAAqB,EAAE,YAAY,EAAE,KAAK,YAAY,GAAG,gBAAgB,IAAI,gBAAgB,UAAU,IAAI,UAAU,WAAW,KAAK,GAAG,CAAC,GAAG,IAAI,KAAK,IAChL,QAAQ,QAAQ,CAAC,CAA0B;AAAA,MAC/C,YAAY,SAAS,IACjB,mBAAmB,IAAI,IAAI,kBAAkB,EAAE,YAAY,EAAE,KAAK,YAAY,GAAG,gBAAgB,IAAI,gBAAgB,UAAU,IAAI,UAAU,UAAU,MAAM,GAAG,CAAC,GAAG,IAAI,KAAK,IAC7K,QAAQ,QAAQ,CAAC,CAAuB;AAAA,IAC9C,CAAC;AAED,UAAM,WAAW,IAAI,IAAI,OAAO,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;AAErD,UAAM,gBAAgB,MAAM,IAAI,CAAC,aAAa;AAC5C,YAAM,QAAQ,SAAS,IAAI,SAAS,YAAY;AAChD,YAAM,kBAAkB,WAAW,OAAO,CAAC,MAAM,EAAE,eAAe,SAAS,EAAE;AAC7E,YAAM,wBAAwB,iBAAiB,OAAO,CAAC,MAAM,EAAE,eAAe,SAAS,EAAE;AAEzF,aAAO;AAAA,QACL,GAAG;AAAA,QACH,aAAa,gBAAgB;AAAA,QAC7B,oBAAoB,gBAAgB,OAAO,CAAC,MAAM,EAAE,WAAW,SAAS,EAAE;AAAA,QAC1E,kBAAkB,sBAAsB;AAAA,QACxC,cAAc,OAAO,WAAW;AAAA,QAChC,WAAW,OAAO,mBAAmB,OAAO,sBAAsB;AAAA,QAClE,YAAY,OAAO,cAAc,SAAS;AAAA,MAC5C;AAAA,IACF,CAAC;AAED,WAAO,aAAa,KAAK;AAAA,MACvB,OAAO;AAAA,MACP;AAAA,MACA,MAAM,MAAM;AAAA,MACZ,UAAU,MAAM;AAAA,MAChB,YAAY,KAAK,KAAK,QAAQ,MAAM,QAAQ;AAAA,IAC9C,CAAC;AAAA,EACH,SAAS,KAAK;AACZ,QAAI,eAAe,UAAU;AAC3B,aAAO,aAAa,KAAK,EAAE,OAAO,2BAA2B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACjF;AACA,QAAI,eAAe,mBAAmB;AACpC,aAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACrE;AACA,WAAO,MAAM,4BAA4B,EAAE,IAAI,CAAC;AAChD,WAAO,aAAa,KAAK,EAAE,OAAO,2BAA2B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACjF;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,aAAa;AAAA,MACb,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,8BAA8B;AAAA,QAC1D,EAAE,QAAQ,KAAK,aAAa,eAAe;AAAA,MAC7C;AAAA,IACF;AAAA,EACF;AACF;",
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { ZodError } from 'zod'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport type { FilterQuery } from '@mikro-orm/postgresql'\nimport { findAndCountWithDecryption, findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { escapeLikePattern } from '@open-mercato/shared/lib/db/escapeLikePattern'\nimport { findEntityIdsBySearchTokens, type SearchTokenDatabase } from '@open-mercato/shared/lib/search/tokenLookup'\nimport { E } from '#generated/entities.ids.generated'\nimport { InboxProposal, InboxEmail, InboxProposalAction, InboxDiscrepancy, type InboxProposalCategory } from '../../data/entities'\nimport { proposalListQuerySchema } from '../../data/validators'\nimport { resolveRequestContext, UnauthorizedError } from '../routeHelpers'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('inbox_ops').child({ component: 'proposals' })\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['inbox_ops.proposals.view'] },\n}\n\nexport async function GET(req: Request) {\n  try {\n    const url = new URL(req.url)\n    const query = proposalListQuerySchema.parse({\n      status: url.searchParams.get('status') || undefined,\n      category: url.searchParams.get('category') || undefined,\n      search: url.searchParams.get('search') || undefined,\n      page: url.searchParams.get('page') || undefined,\n      pageSize: url.searchParams.get('pageSize') || undefined,\n    })\n\n    const ctx = await resolveRequestContext(req)\n\n    const where: FilterQuery<InboxProposal> = {\n      organizationId: ctx.organizationId,\n      tenantId: ctx.tenantId,\n      deletedAt: null,\n      isActive: true,\n    }\n\n    if (query.status) {\n      where.status = query.status\n    }\n    if (query.category) {\n      const categories = query.category.split(',').map((c) => c.trim()).filter(Boolean) as InboxProposalCategory[]\n      if (categories.length === 1) {\n        where.category = categories[0]\n      } else if (categories.length > 1) {\n        where.category = { $in: categories }\n      }\n    }\n    if (query.search) {\n      // `summary` is covered by the inbox_ops encryption map, so an ILIKE alone\n      // compares the pattern against ciphertext and matches nothing once\n      // encryption is on. Union it with the token index, which stores hashes of\n      // the plaintext. Issue #2990.\n      const searchOr: FilterQuery<InboxProposal>[] = [\n        { summary: { $ilike: `%${escapeLikePattern(query.search)}%` } },\n      ]\n      const tokenMatch = await findEntityIdsBySearchTokens({\n        db: ctx.em.getKysely<SearchTokenDatabase>(),\n        entityType: E.inbox_ops.inbox_proposal,\n        query: query.search,\n        fields: ['summary'],\n        scope: { tenantId: ctx.tenantId, organizationId: ctx.organizationId },\n      })\n      if (tokenMatch.matched && tokenMatch.ids.length) {\n        searchOr.push({ id: { $in: tokenMatch.ids } })\n      }\n      where.$or = searchOr\n    }\n\n    const offset = (query.page - 1) * query.pageSize\n\n    const [items, total] = await findAndCountWithDecryption(\n      ctx.em,\n      InboxProposal,\n      where,\n      {\n        limit: query.pageSize,\n        offset,\n        orderBy: { createdAt: 'DESC' },\n      },\n      ctx.scope,\n    )\n\n    // Enrich proposals with email, action, and discrepancy data\n    const proposalIds = items.map((p) => p.id)\n    const emailIds = [...new Set(items.map((p) => p.inboxEmailId).filter(Boolean))]\n\n    const [emails, allActions, allDiscrepancies] = await Promise.all([\n      emailIds.length > 0\n        ? findWithDecryption(ctx.em, InboxEmail, { id: { $in: emailIds }, organizationId: ctx.organizationId, tenantId: ctx.tenantId }, {}, ctx.scope)\n        : Promise.resolve([] as InboxEmail[]),\n      proposalIds.length > 0\n        ? findWithDecryption(ctx.em, InboxProposalAction, { proposalId: { $in: proposalIds }, organizationId: ctx.organizationId, tenantId: ctx.tenantId, deletedAt: null }, {}, ctx.scope)\n        : Promise.resolve([] as InboxProposalAction[]),\n      proposalIds.length > 0\n        ? findWithDecryption(ctx.em, InboxDiscrepancy, { proposalId: { $in: proposalIds }, organizationId: ctx.organizationId, tenantId: ctx.tenantId, resolved: false }, {}, ctx.scope)\n        : Promise.resolve([] as InboxDiscrepancy[]),\n    ])\n\n    const emailMap = new Map(emails.map((e) => [e.id, e]))\n\n    const enrichedItems = items.map((proposal) => {\n      const email = emailMap.get(proposal.inboxEmailId)\n      const proposalActions = allActions.filter((a) => a.proposalId === proposal.id)\n      const proposalDiscrepancies = allDiscrepancies.filter((d) => d.proposalId === proposal.id)\n\n      return {\n        ...proposal,\n        actionCount: proposalActions.length,\n        pendingActionCount: proposalActions.filter((a) => a.status === 'pending').length,\n        discrepancyCount: proposalDiscrepancies.length,\n        emailSubject: email?.subject || null,\n        emailFrom: email?.forwardedByName || email?.forwardedByAddress || null,\n        receivedAt: email?.receivedAt || proposal.createdAt,\n      }\n    })\n\n    return NextResponse.json({\n      items: enrichedItems,\n      total,\n      page: query.page,\n      pageSize: query.pageSize,\n      totalPages: Math.ceil(total / query.pageSize),\n    })\n  } catch (err) {\n    if (err instanceof ZodError) {\n      return NextResponse.json({ error: 'Invalid query parameters' }, { status: 400 })\n    }\n    if (err instanceof UnauthorizedError) {\n      return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n    }\n    logger.error('Failed to list proposals', { err })\n    return NextResponse.json({ error: 'Failed to list proposals' }, { status: 500 })\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'InboxOps',\n  summary: 'Proposals',\n  methods: {\n    GET: {\n      summary: 'List proposals',\n      description: 'List inbox proposals with optional status filter and pagination',\n      responses: [\n        { status: 200, description: 'Paginated list of proposals' },\n        { status: 401, description: 'Unauthorized' },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,gBAAgB;AAGzB,SAAS,4BAA4B,0BAA0B;AAC/D,SAAS,yBAAyB;AAClC,SAAS,mCAA6D;AACtE,SAAS,SAAS;AAClB,SAAS,eAAe,YAAY,qBAAqB,wBAAoD;AAC7G,SAAS,+BAA+B;AACxC,SAAS,uBAAuB,yBAAyB;AACzD,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,WAAW,EAAE,MAAM,EAAE,WAAW,YAAY,CAAC;AAElE,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,0BAA0B,EAAE;AAC1E;AAEA,eAAsB,IAAI,KAAc;AACtC,MAAI;AACF,UAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAC3B,UAAM,QAAQ,wBAAwB,MAAM;AAAA,MAC1C,QAAQ,IAAI,aAAa,IAAI,QAAQ,KAAK;AAAA,MAC1C,UAAU,IAAI,aAAa,IAAI,UAAU,KAAK;AAAA,MAC9C,QAAQ,IAAI,aAAa,IAAI,QAAQ,KAAK;AAAA,MAC1C,MAAM,IAAI,aAAa,IAAI,MAAM,KAAK;AAAA,MACtC,UAAU,IAAI,aAAa,IAAI,UAAU,KAAK;AAAA,IAChD,CAAC;AAED,UAAM,MAAM,MAAM,sBAAsB,GAAG;AAE3C,UAAM,QAAoC;AAAA,MACxC,gBAAgB,IAAI;AAAA,MACpB,UAAU,IAAI;AAAA,MACd,WAAW;AAAA,MACX,UAAU;AAAA,IACZ;AAEA,QAAI,MAAM,QAAQ;AAChB,YAAM,SAAS,MAAM;AAAA,IACvB;AACA,QAAI,MAAM,UAAU;AAClB,YAAM,aAAa,MAAM,SAAS,MAAM,GAAG,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO,OAAO;AAChF,UAAI,WAAW,WAAW,GAAG;AAC3B,cAAM,WAAW,WAAW,CAAC;AAAA,MAC/B,WAAW,WAAW,SAAS,GAAG;AAChC,cAAM,WAAW,EAAE,KAAK,WAAW;AAAA,MACrC;AAAA,IACF;AACA,QAAI,MAAM,QAAQ;AAKhB,YAAM,WAAyC;AAAA,QAC7C,EAAE,SAAS,EAAE,QAAQ,IAAI,kBAAkB,MAAM,MAAM,CAAC,IAAI,EAAE;AAAA,MAChE;AACA,YAAM,aAAa,MAAM,4BAA4B;AAAA,QACnD,IAAI,IAAI,GAAG,UAA+B;AAAA,QAC1C,YAAY,EAAE,UAAU;AAAA,QACxB,OAAO,MAAM;AAAA,QACb,QAAQ,CAAC,SAAS;AAAA,QAClB,OAAO,EAAE,UAAU,IAAI,UAAU,gBAAgB,IAAI,eAAe;AAAA,MACtE,CAAC;AACD,UAAI,WAAW,WAAW,WAAW,IAAI,QAAQ;AAC/C,iBAAS,KAAK,EAAE,IAAI,EAAE,KAAK,WAAW,IAAI,EAAE,CAAC;AAAA,MAC/C;AACA,YAAM,MAAM;AAAA,IACd;AAEA,UAAM,UAAU,MAAM,OAAO,KAAK,MAAM;AAExC,UAAM,CAAC,OAAO,KAAK,IAAI,MAAM;AAAA,MAC3B,IAAI;AAAA,MACJ;AAAA,MACA;AAAA,MACA;AAAA,QACE,OAAO,MAAM;AAAA,QACb;AAAA,QACA,SAAS,EAAE,WAAW,OAAO;AAAA,MAC/B;AAAA,MACA,IAAI;AAAA,IACN;AAGA,UAAM,cAAc,MAAM,IAAI,CAAC,MAAM,EAAE,EAAE;AACzC,UAAM,WAAW,CAAC,GAAG,IAAI,IAAI,MAAM,IAAI,CAAC,MAAM,EAAE,YAAY,EAAE,OAAO,OAAO,CAAC,CAAC;AAE9E,UAAM,CAAC,QAAQ,YAAY,gBAAgB,IAAI,MAAM,QAAQ,IAAI;AAAA,MAC/D,SAAS,SAAS,IACd,mBAAmB,IAAI,IAAI,YAAY,EAAE,IAAI,EAAE,KAAK,SAAS,GAAG,gBAAgB,IAAI,gBAAgB,UAAU,IAAI,SAAS,GAAG,CAAC,GAAG,IAAI,KAAK,IAC3I,QAAQ,QAAQ,CAAC,CAAiB;AAAA,MACtC,YAAY,SAAS,IACjB,mBAAmB,IAAI,IAAI,qBAAqB,EAAE,YAAY,EAAE,KAAK,YAAY,GAAG,gBAAgB,IAAI,gBAAgB,UAAU,IAAI,UAAU,WAAW,KAAK,GAAG,CAAC,GAAG,IAAI,KAAK,IAChL,QAAQ,QAAQ,CAAC,CAA0B;AAAA,MAC/C,YAAY,SAAS,IACjB,mBAAmB,IAAI,IAAI,kBAAkB,EAAE,YAAY,EAAE,KAAK,YAAY,GAAG,gBAAgB,IAAI,gBAAgB,UAAU,IAAI,UAAU,UAAU,MAAM,GAAG,CAAC,GAAG,IAAI,KAAK,IAC7K,QAAQ,QAAQ,CAAC,CAAuB;AAAA,IAC9C,CAAC;AAED,UAAM,WAAW,IAAI,IAAI,OAAO,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;AAErD,UAAM,gBAAgB,MAAM,IAAI,CAAC,aAAa;AAC5C,YAAM,QAAQ,SAAS,IAAI,SAAS,YAAY;AAChD,YAAM,kBAAkB,WAAW,OAAO,CAAC,MAAM,EAAE,eAAe,SAAS,EAAE;AAC7E,YAAM,wBAAwB,iBAAiB,OAAO,CAAC,MAAM,EAAE,eAAe,SAAS,EAAE;AAEzF,aAAO;AAAA,QACL,GAAG;AAAA,QACH,aAAa,gBAAgB;AAAA,QAC7B,oBAAoB,gBAAgB,OAAO,CAAC,MAAM,EAAE,WAAW,SAAS,EAAE;AAAA,QAC1E,kBAAkB,sBAAsB;AAAA,QACxC,cAAc,OAAO,WAAW;AAAA,QAChC,WAAW,OAAO,mBAAmB,OAAO,sBAAsB;AAAA,QAClE,YAAY,OAAO,cAAc,SAAS;AAAA,MAC5C;AAAA,IACF,CAAC;AAED,WAAO,aAAa,KAAK;AAAA,MACvB,OAAO;AAAA,MACP;AAAA,MACA,MAAM,MAAM;AAAA,MACZ,UAAU,MAAM;AAAA,MAChB,YAAY,KAAK,KAAK,QAAQ,MAAM,QAAQ;AAAA,IAC9C,CAAC;AAAA,EACH,SAAS,KAAK;AACZ,QAAI,eAAe,UAAU;AAC3B,aAAO,aAAa,KAAK,EAAE,OAAO,2BAA2B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACjF;AACA,QAAI,eAAe,mBAAmB;AACpC,aAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACrE;AACA,WAAO,MAAM,4BAA4B,EAAE,IAAI,CAAC;AAChD,WAAO,aAAa,KAAK,EAAE,OAAO,2BAA2B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACjF;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,aAAa;AAAA,MACb,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,8BAA8B;AAAA,QAC1D,EAAE,QAAQ,KAAK,aAAa,eAAe;AAAA,MAC7C;AAAA,IACF;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/modules/inbox_ops/subscribers/search-reindex-proposal-created.js

@@ -0,0 +1,32 @@
+const metadata = {
+  event: "inbox_ops.proposal.created",
+  persistent: false,
+  id: "inbox_ops:query-index-reindex-proposal-created"
+};
+async function handle(payload, ctx) {
+  const recordId = typeof payload.proposalId === "string" ? payload.proposalId : null;
+  const tenantId = typeof payload.tenantId === "string" ? payload.tenantId : null;
+  if (!recordId || !tenantId) return;
+  let eventBus = null;
+  try {
+    eventBus = ctx.resolve("eventBus");
+  } catch {
+    return;
+  }
+  await eventBus.emitEvent("query_index.upsert_one", {
+    entityType: "inbox_ops:inbox_proposal",
+    recordId,
+    organizationId: payload.organizationId ?? null,
+    tenantId,
+    crudAction: "created",
+    coverageBaseDelta: 1
+  }, {
+    tenantId,
+    organizationId: payload.organizationId ?? null
+  }).catch(() => void 0);
+}
+export {
+  handle as default,
+  metadata
+};
+//# sourceMappingURL=search-reindex-proposal-created.js.map

package/dist/modules/inbox_ops/subscribers/search-reindex-proposal-created.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/inbox_ops/subscribers/search-reindex-proposal-created.ts"],
+  "sourcesContent": ["export const metadata = {\n  event: 'inbox_ops.proposal.created',\n  persistent: false,\n  id: 'inbox_ops:query-index-reindex-proposal-created',\n}\n\ntype Payload = {\n  proposalId?: string\n  tenantId?: string | null\n  organizationId?: string | null\n}\n\ntype EventBus = { emitEvent: (name: string, body: unknown, options?: unknown) => Promise<void> }\ntype HandlerContext = { resolve: <T = unknown>(name: string) => T }\n\nexport default async function handle(payload: Payload, ctx: HandlerContext): Promise<void> {\n  const recordId = typeof payload.proposalId === 'string' ? payload.proposalId : null\n  const tenantId = typeof payload.tenantId === 'string' ? payload.tenantId : null\n  if (!recordId || !tenantId) return\n\n  let eventBus: EventBus | null = null\n  try {\n    eventBus = ctx.resolve<EventBus>('eventBus')\n  } catch {\n    return\n  }\n\n  await eventBus.emitEvent('query_index.upsert_one', {\n    entityType: 'inbox_ops:inbox_proposal',\n    recordId,\n    organizationId: payload.organizationId ?? null,\n    tenantId,\n    crudAction: 'created',\n    coverageBaseDelta: 1,\n  }, {\n    tenantId,\n    organizationId: payload.organizationId ?? null,\n  }).catch(() => undefined)\n}\n"],
+  "mappings": "AAAO,MAAM,WAAW;AAAA,EACtB,OAAO;AAAA,EACP,YAAY;AAAA,EACZ,IAAI;AACN;AAWA,eAAO,OAA8B,SAAkB,KAAoC;AACzF,QAAM,WAAW,OAAO,QAAQ,eAAe,WAAW,QAAQ,aAAa;AAC/E,QAAM,WAAW,OAAO,QAAQ,aAAa,WAAW,QAAQ,WAAW;AAC3E,MAAI,CAAC,YAAY,CAAC,SAAU;AAE5B,MAAI,WAA4B;AAChC,MAAI;AACF,eAAW,IAAI,QAAkB,UAAU;AAAA,EAC7C,QAAQ;AACN;AAAA,EACF;AAEA,QAAM,SAAS,UAAU,0BAA0B;AAAA,IACjD,YAAY;AAAA,IACZ;AAAA,IACA,gBAAgB,QAAQ,kBAAkB;AAAA,IAC1C;AAAA,IACA,YAAY;AAAA,IACZ,mBAAmB;AAAA,EACrB,GAAG;AAAA,IACD;AAAA,IACA,gBAAgB,QAAQ,kBAAkB;AAAA,EAC5C,CAAC,EAAE,MAAM,MAAM,MAAS;AAC1B;",
+  "names": []
+}

package/dist/modules/integrations/widgets/injection/external-ids/widget.client.js

@@ -58,11 +58,6 @@ function ExternalIdsWidget({ data }) {
     )) })
   ] });
 }
-ExternalIdsWidget.metadata = {
-  id: "integrations.injection.external-ids",
-  title: "External IDs",
-  features: ["integrations.view"]
-};
 export {
   ExternalIdsWidget as default
 };

package/dist/modules/integrations/widgets/injection/external-ids/widget.client.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../src/modules/integrations/widgets/injection/external-ids/widget.client.tsx"],
-  "sourcesContent": ["\"use client\"\n\nimport * as React from 'react'\nimport type { InjectionWidgetComponentProps } from '@open-mercato/shared/modules/widgets/injection'\nimport type { ExternalIdMapping } from '@open-mercato/shared/modules/integrations/types'\nimport { getIntegrationTitle } from '@open-mercato/shared/modules/integrations/types'\nimport { useT } from '@open-mercato/shared/lib/i18n/context'\nimport { cn } from '@open-mercato/shared/lib/utils'\n\ntype IntegrationsData = Record<string, ExternalIdMapping>\n\nconst SYNC_STATUS_STYLES: Record<ExternalIdMapping['syncStatus'], { dot: string; label: string }> = {\n  synced: { dot: 'bg-status-success-icon', label: 'integrations.syncStatus.synced' },\n  pending: { dot: 'bg-status-warning-icon', label: 'integrations.syncStatus.pending' },\n  error: { dot: 'bg-status-error-icon', label: 'integrations.syncStatus.error' },\n  not_synced: { dot: 'bg-status-neutral-icon', label: 'integrations.syncStatus.notSynced' },\n}\n\nfunction SyncStatusBadge({ status, lastSynced }: { status: ExternalIdMapping['syncStatus']; lastSynced?: string }) {\n  const t = useT()\n  const config = SYNC_STATUS_STYLES[status]\n  const label = t(config.label, status)\n\n  return (\n    <span className=\"inline-flex items-center gap-1 text-xs text-muted-foreground\">\n      <span className={cn('inline-block size-1.5 rounded-full', config.dot)} aria-hidden=\"true\" />\n      <span>{label}</span>\n      {lastSynced && (\n        <span title={lastSynced}>\n          {new Date(lastSynced).toLocaleDateString()}\n        </span>\n      )}\n    </span>\n  )\n}\n\nfunction ExternalLinkIcon() {\n  return (\n    <svg className=\"size-3.5\" viewBox=\"0 0 16 16\" fill=\"none\" stroke=\"currentColor\" strokeWidth=\"1.5\">\n      <path d=\"M6.5 3.5H3a1 1 0 0 0-1 1V13a1 1 0 0 0 1 1h8.5a1 1 0 0 0 1-1V9.5\" />\n      <path d=\"M9.5 2h4.5v4.5M14 2 7.5 8.5\" />\n    </svg>\n  )\n}\n\nexport default function ExternalIdsWidget({ data }: InjectionWidgetComponentProps) {\n  const t = useT()\n  const integrations = (data as Record<string, unknown>)?._integrations as IntegrationsData | undefined\n\n  if (!integrations || Object.keys(integrations).length === 0) return null\n\n  return (\n    <div className=\"rounded-lg border bg-card p-4\">\n      <h3 className=\"mb-3 text-sm font-medium\">\n        {t('integrations.externalIds.title', 'External IDs')}\n      </h3>\n      <div className=\"space-y-2\">\n        {Object.entries(integrations).map(([integrationId, mapping]) => (\n          <div\n            key={integrationId}\n            className=\"flex items-center justify-between gap-2 rounded-md bg-muted/50 px-3 py-2\"\n          >\n            <div className=\"flex items-center gap-2 min-w-0\">\n              <span className=\"text-sm font-medium truncate\">\n                {getIntegrationTitle(integrationId)}\n              </span>\n              <code className=\"rounded bg-muted px-1.5 py-0.5 text-xs font-mono text-muted-foreground\">\n                {mapping.externalId}\n              </code>\n              {mapping.externalUrl && (\n                <a\n                  href={mapping.externalUrl}\n                  target=\"_blank\"\n                  rel=\"noopener noreferrer\"\n                  className=\"text-muted-foreground hover:text-foreground transition-colors\"\n                  aria-label={t('integrations.externalIds.openExternal', 'Open in external system')}\n                >\n                  <ExternalLinkIcon />\n                </a>\n              )}\n            </div>\n            <SyncStatusBadge status={mapping.syncStatus} lastSynced={mapping.lastSyncedAt} />\n          </div>\n        ))}\n      </div>\n    </div>\n  )\n}\n\nExternalIdsWidget.metadata = {\n  id: 'integrations.injection.external-ids',\n  title: 'External IDs',\n  features: ['integrations.view'],\n}\n"],
-  "mappings": ";AAwBI,SACE,KADF;AAnBJ,SAAS,2BAA2B;AACpC,SAAS,YAAY;AACrB,SAAS,UAAU;AAInB,MAAM,qBAA8F;AAAA,EAClG,QAAQ,EAAE,KAAK,0BAA0B,OAAO,iCAAiC;AAAA,EACjF,SAAS,EAAE,KAAK,0BAA0B,OAAO,kCAAkC;AAAA,EACnF,OAAO,EAAE,KAAK,wBAAwB,OAAO,gCAAgC;AAAA,EAC7E,YAAY,EAAE,KAAK,0BAA0B,OAAO,oCAAoC;AAC1F;AAEA,SAAS,gBAAgB,EAAE,QAAQ,WAAW,GAAqE;AACjH,QAAM,IAAI,KAAK;AACf,QAAM,SAAS,mBAAmB,MAAM;AACxC,QAAM,QAAQ,EAAE,OAAO,OAAO,MAAM;AAEpC,SACE,qBAAC,UAAK,WAAU,gEACd;AAAA,wBAAC,UAAK,WAAW,GAAG,sCAAsC,OAAO,GAAG,GAAG,eAAY,QAAO;AAAA,IAC1F,oBAAC,UAAM,iBAAM;AAAA,IACZ,cACC,oBAAC,UAAK,OAAO,YACV,cAAI,KAAK,UAAU,EAAE,mBAAmB,GAC3C;AAAA,KAEJ;AAEJ;AAEA,SAAS,mBAAmB;AAC1B,SACE,qBAAC,SAAI,WAAU,YAAW,SAAQ,aAAY,MAAK,QAAO,QAAO,gBAAe,aAAY,OAC1F;AAAA,wBAAC,UAAK,GAAE,mEAAkE;AAAA,IAC1E,oBAAC,UAAK,GAAE,+BAA8B;AAAA,KACxC;AAEJ;AAEe,SAAR,kBAAmC,EAAE,KAAK,GAAkC;AACjF,QAAM,IAAI,KAAK;AACf,QAAM,eAAgB,MAAkC;AAExD,MAAI,CAAC,gBAAgB,OAAO,KAAK,YAAY,EAAE,WAAW,EAAG,QAAO;AAEpE,SACE,qBAAC,SAAI,WAAU,iCACb;AAAA,wBAAC,QAAG,WAAU,4BACX,YAAE,kCAAkC,cAAc,GACrD;AAAA,IACA,oBAAC,SAAI,WAAU,aACZ,iBAAO,QAAQ,YAAY,EAAE,IAAI,CAAC,CAAC,eAAe,OAAO,MACxD;AAAA,MAAC;AAAA;AAAA,QAEC,WAAU;AAAA,QAEV;AAAA,+BAAC,SAAI,WAAU,mCACb;AAAA,gCAAC,UAAK,WAAU,gCACb,8BAAoB,aAAa,GACpC;AAAA,YACA,oBAAC,UAAK,WAAU,0EACb,kBAAQ,YACX;AAAA,YACC,QAAQ,eACP;AAAA,cAAC;AAAA;AAAA,gBACC,MAAM,QAAQ;AAAA,gBACd,QAAO;AAAA,gBACP,KAAI;AAAA,gBACJ,WAAU;AAAA,gBACV,cAAY,EAAE,yCAAyC,yBAAyB;AAAA,gBAEhF,8BAAC,oBAAiB;AAAA;AAAA,YACpB;AAAA,aAEJ;AAAA,UACA,oBAAC,mBAAgB,QAAQ,QAAQ,YAAY,YAAY,QAAQ,cAAc;AAAA;AAAA;AAAA,MAtB1E;AAAA,IAuBP,CACD,GACH;AAAA,KACF;AAEJ;AAEA,kBAAkB,WAAW;AAAA,EAC3B,IAAI;AAAA,EACJ,OAAO;AAAA,EACP,UAAU,CAAC,mBAAmB;AAChC;",
+  "sourcesContent": ["\"use client\"\n\nimport * as React from 'react'\nimport type { InjectionWidgetComponentProps } from '@open-mercato/shared/modules/widgets/injection'\nimport type { ExternalIdMapping } from '@open-mercato/shared/modules/integrations/types'\nimport { getIntegrationTitle } from '@open-mercato/shared/modules/integrations/types'\nimport { useT } from '@open-mercato/shared/lib/i18n/context'\nimport { cn } from '@open-mercato/shared/lib/utils'\n\ntype IntegrationsData = Record<string, ExternalIdMapping>\n\nconst SYNC_STATUS_STYLES: Record<ExternalIdMapping['syncStatus'], { dot: string; label: string }> = {\n  synced: { dot: 'bg-status-success-icon', label: 'integrations.syncStatus.synced' },\n  pending: { dot: 'bg-status-warning-icon', label: 'integrations.syncStatus.pending' },\n  error: { dot: 'bg-status-error-icon', label: 'integrations.syncStatus.error' },\n  not_synced: { dot: 'bg-status-neutral-icon', label: 'integrations.syncStatus.notSynced' },\n}\n\nfunction SyncStatusBadge({ status, lastSynced }: { status: ExternalIdMapping['syncStatus']; lastSynced?: string }) {\n  const t = useT()\n  const config = SYNC_STATUS_STYLES[status]\n  const label = t(config.label, status)\n\n  return (\n    <span className=\"inline-flex items-center gap-1 text-xs text-muted-foreground\">\n      <span className={cn('inline-block size-1.5 rounded-full', config.dot)} aria-hidden=\"true\" />\n      <span>{label}</span>\n      {lastSynced && (\n        <span title={lastSynced}>\n          {new Date(lastSynced).toLocaleDateString()}\n        </span>\n      )}\n    </span>\n  )\n}\n\nfunction ExternalLinkIcon() {\n  return (\n    <svg className=\"size-3.5\" viewBox=\"0 0 16 16\" fill=\"none\" stroke=\"currentColor\" strokeWidth=\"1.5\">\n      <path d=\"M6.5 3.5H3a1 1 0 0 0-1 1V13a1 1 0 0 0 1 1h8.5a1 1 0 0 0 1-1V9.5\" />\n      <path d=\"M9.5 2h4.5v4.5M14 2 7.5 8.5\" />\n    </svg>\n  )\n}\n\nexport default function ExternalIdsWidget({ data }: InjectionWidgetComponentProps) {\n  const t = useT()\n  const integrations = (data as Record<string, unknown>)?._integrations as IntegrationsData | undefined\n\n  if (!integrations || Object.keys(integrations).length === 0) return null\n\n  return (\n    <div className=\"rounded-lg border bg-card p-4\">\n      <h3 className=\"mb-3 text-sm font-medium\">\n        {t('integrations.externalIds.title', 'External IDs')}\n      </h3>\n      <div className=\"space-y-2\">\n        {Object.entries(integrations).map(([integrationId, mapping]) => (\n          <div\n            key={integrationId}\n            className=\"flex items-center justify-between gap-2 rounded-md bg-muted/50 px-3 py-2\"\n          >\n            <div className=\"flex items-center gap-2 min-w-0\">\n              <span className=\"text-sm font-medium truncate\">\n                {getIntegrationTitle(integrationId)}\n              </span>\n              <code className=\"rounded bg-muted px-1.5 py-0.5 text-xs font-mono text-muted-foreground\">\n                {mapping.externalId}\n              </code>\n              {mapping.externalUrl && (\n                <a\n                  href={mapping.externalUrl}\n                  target=\"_blank\"\n                  rel=\"noopener noreferrer\"\n                  className=\"text-muted-foreground hover:text-foreground transition-colors\"\n                  aria-label={t('integrations.externalIds.openExternal', 'Open in external system')}\n                >\n                  <ExternalLinkIcon />\n                </a>\n              )}\n            </div>\n            <SyncStatusBadge status={mapping.syncStatus} lastSynced={mapping.lastSyncedAt} />\n          </div>\n        ))}\n      </div>\n    </div>\n  )\n}\n\n"],
+  "mappings": ";AAwBI,SACE,KADF;AAnBJ,SAAS,2BAA2B;AACpC,SAAS,YAAY;AACrB,SAAS,UAAU;AAInB,MAAM,qBAA8F;AAAA,EAClG,QAAQ,EAAE,KAAK,0BAA0B,OAAO,iCAAiC;AAAA,EACjF,SAAS,EAAE,KAAK,0BAA0B,OAAO,kCAAkC;AAAA,EACnF,OAAO,EAAE,KAAK,wBAAwB,OAAO,gCAAgC;AAAA,EAC7E,YAAY,EAAE,KAAK,0BAA0B,OAAO,oCAAoC;AAC1F;AAEA,SAAS,gBAAgB,EAAE,QAAQ,WAAW,GAAqE;AACjH,QAAM,IAAI,KAAK;AACf,QAAM,SAAS,mBAAmB,MAAM;AACxC,QAAM,QAAQ,EAAE,OAAO,OAAO,MAAM;AAEpC,SACE,qBAAC,UAAK,WAAU,gEACd;AAAA,wBAAC,UAAK,WAAW,GAAG,sCAAsC,OAAO,GAAG,GAAG,eAAY,QAAO;AAAA,IAC1F,oBAAC,UAAM,iBAAM;AAAA,IACZ,cACC,oBAAC,UAAK,OAAO,YACV,cAAI,KAAK,UAAU,EAAE,mBAAmB,GAC3C;AAAA,KAEJ;AAEJ;AAEA,SAAS,mBAAmB;AAC1B,SACE,qBAAC,SAAI,WAAU,YAAW,SAAQ,aAAY,MAAK,QAAO,QAAO,gBAAe,aAAY,OAC1F;AAAA,wBAAC,UAAK,GAAE,mEAAkE;AAAA,IAC1E,oBAAC,UAAK,GAAE,+BAA8B;AAAA,KACxC;AAEJ;AAEe,SAAR,kBAAmC,EAAE,KAAK,GAAkC;AACjF,QAAM,IAAI,KAAK;AACf,QAAM,eAAgB,MAAkC;AAExD,MAAI,CAAC,gBAAgB,OAAO,KAAK,YAAY,EAAE,WAAW,EAAG,QAAO;AAEpE,SACE,qBAAC,SAAI,WAAU,iCACb;AAAA,wBAAC,QAAG,WAAU,4BACX,YAAE,kCAAkC,cAAc,GACrD;AAAA,IACA,oBAAC,SAAI,WAAU,aACZ,iBAAO,QAAQ,YAAY,EAAE,IAAI,CAAC,CAAC,eAAe,OAAO,MACxD;AAAA,MAAC;AAAA;AAAA,QAEC,WAAU;AAAA,QAEV;AAAA,+BAAC,SAAI,WAAU,mCACb;AAAA,gCAAC,UAAK,WAAU,gCACb,8BAAoB,aAAa,GACpC;AAAA,YACA,oBAAC,UAAK,WAAU,0EACb,kBAAQ,YACX;AAAA,YACC,QAAQ,eACP;AAAA,cAAC;AAAA;AAAA,gBACC,MAAM,QAAQ;AAAA,gBACd,QAAO;AAAA,gBACP,KAAI;AAAA,gBACJ,WAAU;AAAA,gBACV,cAAY,EAAE,yCAAyC,yBAAyB;AAAA,gBAEhF,8BAAC,oBAAiB;AAAA;AAAA,YACpB;AAAA,aAEJ;AAAA,UACA,oBAAC,mBAAgB,QAAQ,QAAQ,YAAY,YAAY,QAAQ,cAAc;AAAA;AAAA;AAAA,MAtB1E;AAAA,IAuBP,CACD,GACH;AAAA,KACF;AAEJ;",
   "names": []
 }

package/dist/modules/integrations/widgets/injection/external-ids/widget.js

@@ -0,0 +1,14 @@
+import ExternalIdsWidget from "./widget.client.js";
+const widget = {
+  metadata: {
+    id: "integrations.injection.external-ids",
+    title: "External IDs",
+    features: ["integrations.view"]
+  },
+  Widget: ExternalIdsWidget
+};
+var widget_default = widget;
+export {
+  widget_default as default
+};
+//# sourceMappingURL=widget.js.map

package/dist/modules/integrations/widgets/injection/external-ids/widget.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../../src/modules/integrations/widgets/injection/external-ids/widget.ts"],
+  "sourcesContent": ["import type { InjectionWidgetModule } from '@open-mercato/shared/modules/widgets/injection'\nimport ExternalIdsWidget from './widget.client'\n\nconst widget: InjectionWidgetModule = {\n  metadata: {\n    id: 'integrations.injection.external-ids',\n    title: 'External IDs',\n    features: ['integrations.view'],\n  },\n  Widget: ExternalIdsWidget,\n}\n\nexport default widget\n"],
+  "mappings": "AACA,OAAO,uBAAuB;AAE9B,MAAM,SAAgC;AAAA,EACpC,UAAU;AAAA,IACR,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,UAAU,CAAC,mBAAmB;AAAA,EAChC;AAAA,EACA,QAAQ;AACV;AAEA,IAAO,iBAAQ;",
+  "names": []
+}

package/dist/modules/messages/lib/searchLookup.js

@@ -1,6 +1,4 @@
-import { sql } from "kysely";
-import { resolveSearchConfig } from "@open-mercato/shared/lib/search/config";
-import { tokenizeText } from "@open-mercato/shared/lib/search/tokenize";
+import { findEntityIdsBySearchTokensCompat } from "@open-mercato/shared/lib/search/tokenLookup";
 function getDb(em) {
   return em.getKysely();
 }
@@ -11,19 +9,13 @@ async function findMessageIdsBySearchTokens({
   organizationId,
   fields = ["subject", "body", "external_name"]
 }) {
-  const trimmed = query.trim();
-  if (!trimmed) return null;
-  const tokens = tokenizeText(trimmed, resolveSearchConfig());
-  if (!tokens.hashes.length) return [];
-  const db = getDb(em);
-  let searchQuery = db.selectFrom("search_tokens").select("entity_id").where("entity_type", "=", "messages:message").where("field", "in", fields).where("token_hash", "in", tokens.hashes).where(sql`tenant_id is not distinct from ${tenantId}`);
-  if (organizationId) {
-    searchQuery = searchQuery.where("organization_id", "=", organizationId);
-  } else {
-    searchQuery = searchQuery.where(sql`organization_id is not distinct from ${null}`);
-  }
-  const rows = await searchQuery.groupBy("entity_id").having(sql`count(distinct token_hash) >= ${tokens.hashes.length}`).execute();
-  return rows.map((row) => typeof row.entity_id === "string" ? row.entity_id : null).filter((id) => typeof id === "string" && id.length > 0);
+  return findEntityIdsBySearchTokensCompat({
+    db: getDb(em),
+    entityType: "messages:message",
+    query,
+    fields,
+    scope: { tenantId, organizationId }
+  });
 }
 export {
   findMessageIdsBySearchTokens

package/dist/modules/messages/lib/searchLookup.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/messages/lib/searchLookup.ts"],
-  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport { type Kysely, sql } from 'kysely'\nimport { resolveSearchConfig } from '@open-mercato/shared/lib/search/config'\nimport { tokenizeText } from '@open-mercato/shared/lib/search/tokenize'\n\nfunction getDb(em: EntityManager): Kysely<any> {\n  return em.getKysely<any>()\n}\n\nexport async function findMessageIdsBySearchTokens({\n  em,\n  query,\n  tenantId,\n  organizationId,\n  fields = ['subject', 'body', 'external_name'],\n}: {\n  em: EntityManager\n  query: string\n  tenantId: string | null\n  organizationId: string | null\n  fields?: string[]\n}): Promise<string[] | null> {\n  const trimmed = query.trim()\n  if (!trimmed) return null\n\n  const tokens = tokenizeText(trimmed, resolveSearchConfig())\n  if (!tokens.hashes.length) return []\n\n  const db = getDb(em) as any\n  let searchQuery = db\n    .selectFrom('search_tokens')\n    .select('entity_id')\n    .where('entity_type', '=', 'messages:message')\n    .where('field', 'in', fields)\n    .where('token_hash', 'in', tokens.hashes)\n    .where(sql<boolean>`tenant_id is not distinct from ${tenantId}`)\n\n  if (organizationId) {\n    searchQuery = searchQuery.where('organization_id', '=', organizationId)\n  } else {\n    searchQuery = searchQuery.where(sql<boolean>`organization_id is not distinct from ${null}`)\n  }\n\n  const rows = await searchQuery\n    .groupBy('entity_id')\n    .having(sql<boolean>`count(distinct token_hash) >= ${tokens.hashes.length}`)\n    .execute()\n\n  return rows\n    .map((row: { entity_id?: unknown }) => (typeof row.entity_id === 'string' ? row.entity_id : null))\n    .filter((id: string | null): id is string => typeof id === 'string' && id.length > 0)\n}\n"],
-  "mappings": "AACA,SAAsB,WAAW;AACjC,SAAS,2BAA2B;AACpC,SAAS,oBAAoB;AAE7B,SAAS,MAAM,IAAgC;AAC7C,SAAO,GAAG,UAAe;AAC3B;AAEA,eAAsB,6BAA6B;AAAA,EACjD;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,SAAS,CAAC,WAAW,QAAQ,eAAe;AAC9C,GAM6B;AAC3B,QAAM,UAAU,MAAM,KAAK;AAC3B,MAAI,CAAC,QAAS,QAAO;AAErB,QAAM,SAAS,aAAa,SAAS,oBAAoB,CAAC;AAC1D,MAAI,CAAC,OAAO,OAAO,OAAQ,QAAO,CAAC;AAEnC,QAAM,KAAK,MAAM,EAAE;AACnB,MAAI,cAAc,GACf,WAAW,eAAe,EAC1B,OAAO,WAAW,EAClB,MAAM,eAAe,KAAK,kBAAkB,EAC5C,MAAM,SAAS,MAAM,MAAM,EAC3B,MAAM,cAAc,MAAM,OAAO,MAAM,EACvC,MAAM,qCAA8C,QAAQ,EAAE;AAEjE,MAAI,gBAAgB;AAClB,kBAAc,YAAY,MAAM,mBAAmB,KAAK,cAAc;AAAA,EACxE,OAAO;AACL,kBAAc,YAAY,MAAM,2CAAoD,IAAI,EAAE;AAAA,EAC5F;AAEA,QAAM,OAAO,MAAM,YAChB,QAAQ,WAAW,EACnB,OAAO,oCAA6C,OAAO,OAAO,MAAM,EAAE,EAC1E,QAAQ;AAEX,SAAO,KACJ,IAAI,CAAC,QAAkC,OAAO,IAAI,cAAc,WAAW,IAAI,YAAY,IAAK,EAChG,OAAO,CAAC,OAAoC,OAAO,OAAO,YAAY,GAAG,SAAS,CAAC;AACxF;",
+  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport type { Kysely } from 'kysely'\nimport { findEntityIdsBySearchTokensCompat, type SearchTokenDatabase } from '@open-mercato/shared/lib/search/tokenLookup'\n\nfunction getDb(em: EntityManager): Kysely<SearchTokenDatabase> {\n  return em.getKysely<SearchTokenDatabase>()\n}\n\nexport async function findMessageIdsBySearchTokens({\n  em,\n  query,\n  tenantId,\n  organizationId,\n  fields = ['subject', 'body', 'external_name'],\n}: {\n  em: EntityManager\n  query: string\n  tenantId: string | null\n  organizationId: string | null\n  fields?: string[]\n}): Promise<string[] | null> {\n  return findEntityIdsBySearchTokensCompat({\n    db: getDb(em),\n    entityType: 'messages:message',\n    query,\n    fields,\n    scope: { tenantId, organizationId },\n  })\n}\n"],
+  "mappings": "AAEA,SAAS,yCAAmE;AAE5E,SAAS,MAAM,IAAgD;AAC7D,SAAO,GAAG,UAA+B;AAC3C;AAEA,eAAsB,6BAA6B;AAAA,EACjD;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,SAAS,CAAC,WAAW,QAAQ,eAAe;AAC9C,GAM6B;AAC3B,SAAO,kCAAkC;AAAA,IACvC,IAAI,MAAM,EAAE;AAAA,IACZ,YAAY;AAAA,IACZ;AAAA,IACA;AAAA,IACA,OAAO,EAAE,UAAU,eAAe;AAAA,EACpC,CAAC;AACH;",
   "names": []
 }

package/dist/modules/payment_gateways/api/sessions/route.js

@@ -2,6 +2,7 @@ import { NextResponse } from "next/server";
 import { getAuthFromRequest } from "@open-mercato/shared/lib/auth/server";
 import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
 import { readJsonSafe } from "@open-mercato/shared/lib/http/readJsonSafe";
+import { isCrudHttpError } from "@open-mercato/shared/lib/crud/errors";
 import { createSessionSchema } from "../../data/validators.js";
 import { paymentGatewaysTag } from "../openapi.js";
 import {
@@ -86,6 +87,9 @@ async function POST(req) {
       paymentId: transaction.paymentId
     }, { status: 201 });
   } catch (err) {
+    if (isCrudHttpError(err)) {
+      return NextResponse.json(err.body, { status: err.status });
+    }
     const message = err instanceof Error ? err.message : "Failed to create payment session";
     const status = message.includes("No gateway adapter") ? 422 : 502;
     return NextResponse.json({ error: message }, { status });
@@ -100,6 +104,7 @@ const openApi = {
       tags: [paymentGatewaysTag],
       responses: [
         { status: 201, description: "Payment session created" },
+        { status: 409, description: "Amount or currency does not match the referenced order" },
         { status: 422, description: "Invalid payload or unknown provider" },
         { status: 502, description: "Gateway provider error" }
       ]

package/dist/modules/payment_gateways/api/sessions/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../src/modules/payment_gateways/api/sessions/route.ts"],
-  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { readJsonSafe } from '@open-mercato/shared/lib/http/readJsonSafe'\nimport { createSessionSchema } from '../../data/validators'\nimport type { PaymentGatewayService } from '../../lib/gateway-service'\nimport { paymentGatewaysTag } from '../openapi'\nimport {\n  resolveUserFeatures,\n  runPaymentGatewayMutationGuardAfterSuccess,\n  runPaymentGatewayMutationGuards,\n} from '../guards'\n\nconst gatewayTransactionResourceKind = 'payment_gateways.gateway_transaction'\n\nexport const metadata = {\n  path: '/payment_gateways/sessions',\n  POST: { requireAuth: true, requireFeatures: ['payment_gateways.manage'] },\n}\n\nexport async function POST(req: Request) {\n  const auth = await getAuthFromRequest(req)\n  if (!auth?.tenantId || !auth.orgId) {\n    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n  }\n\n  const payload = await readJsonSafe<unknown>(req)\n  const parsed = createSessionSchema.safeParse(payload)\n  if (!parsed.success) {\n    return NextResponse.json({ error: 'Invalid payload', details: parsed.error.flatten() }, { status: 422 })\n  }\n\n  const container = await createRequestContainer()\n  const guardResult = await runPaymentGatewayMutationGuards(\n    container,\n    {\n      tenantId: auth.tenantId,\n      organizationId: auth.orgId,\n      userId: auth.sub ?? '',\n      resourceKind: gatewayTransactionResourceKind,\n      resourceId: null,\n      operation: 'create',\n      requestMethod: req.method,\n      requestHeaders: req.headers,\n      mutationPayload: parsed.data as Record<string, unknown>,\n    },\n    resolveUserFeatures(auth),\n  )\n  if (!guardResult.ok) {\n    return NextResponse.json(\n      guardResult.errorBody ?? { error: 'Operation blocked by guard' },\n      { status: guardResult.errorStatus ?? 422 },\n    )\n  }\n\n  const service = container.resolve('paymentGatewayService') as PaymentGatewayService\n\n  try {\n    const { transaction, session } = await service.createPaymentSession({\n      providerKey: parsed.data.providerKey,\n      paymentId: crypto.randomUUID(),\n      orderId: parsed.data.orderId,\n      amount: parsed.data.amount,\n      currencyCode: parsed.data.currencyCode,\n      captureMethod: parsed.data.captureMethod,\n      description: parsed.data.description,\n      successUrl: parsed.data.successUrl,\n      cancelUrl: parsed.data.cancelUrl,\n      metadata: parsed.data.metadata,\n      presentation: parsed.data.presentation,\n      organizationId: auth.orgId as string,\n      tenantId: auth.tenantId,\n    })\n\n    const redirectUrl = session.redirectUrl\n      ?? (session.clientSession?.type === 'redirect' ? session.clientSession.redirectUrl : null)\n\n    await runPaymentGatewayMutationGuardAfterSuccess(guardResult.afterSuccessCallbacks, {\n      tenantId: auth.tenantId,\n      organizationId: auth.orgId,\n      userId: auth.sub ?? '',\n      resourceKind: gatewayTransactionResourceKind,\n      resourceId: transaction.id,\n      operation: 'create',\n      requestMethod: req.method,\n      requestHeaders: req.headers,\n    })\n\n    return NextResponse.json({\n      transactionId: transaction.id,\n      sessionId: session.sessionId,\n      providerKey: transaction.providerKey,\n      clientSecret: session.clientSecret,\n      redirectUrl,\n      providerData: session.providerData ?? null,\n      clientSession: session.clientSession ?? null,\n      status: session.status,\n      paymentId: transaction.paymentId,\n    }, { status: 201 })\n  } catch (err: unknown) {\n    const message = err instanceof Error ? err.message : 'Failed to create payment session'\n    const status = message.includes('No gateway adapter') ? 422 : 502\n    return NextResponse.json({ error: message }, { status })\n  }\n}\n\nexport const openApi = {\n  tags: [paymentGatewaysTag],\n  summary: 'Create a payment session via a gateway provider',\n  methods: {\n    POST: {\n      summary: 'Create payment session',\n      tags: [paymentGatewaysTag],\n      responses: [\n        { status: 201, description: 'Payment session created' },\n        { status: 422, description: 'Invalid payload or unknown provider' },\n        { status: 502, description: 'Gateway provider error' },\n      ],\n    },\n  },\n}\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,0BAA0B;AACnC,SAAS,8BAA8B;AACvC,SAAS,oBAAoB;AAC7B,SAAS,2BAA2B;AAEpC,SAAS,0BAA0B;AACnC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEP,MAAM,iCAAiC;AAEhC,MAAM,WAAW;AAAA,EACtB,MAAM;AAAA,EACN,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,yBAAyB,EAAE;AAC1E;AAEA,eAAsB,KAAK,KAAc;AACvC,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM,YAAY,CAAC,KAAK,OAAO;AAClC,WAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrE;AAEA,QAAM,UAAU,MAAM,aAAsB,GAAG;AAC/C,QAAM,SAAS,oBAAoB,UAAU,OAAO;AACpD,MAAI,CAAC,OAAO,SAAS;AACnB,WAAO,aAAa,KAAK,EAAE,OAAO,mBAAmB,SAAS,OAAO,MAAM,QAAQ,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACzG;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,cAAc,MAAM;AAAA,IACxB;AAAA,IACA;AAAA,MACE,UAAU,KAAK;AAAA,MACf,gBAAgB,KAAK;AAAA,MACrB,QAAQ,KAAK,OAAO;AAAA,MACpB,cAAc;AAAA,MACd,YAAY;AAAA,MACZ,WAAW;AAAA,MACX,eAAe,IAAI;AAAA,MACnB,gBAAgB,IAAI;AAAA,MACpB,iBAAiB,OAAO;AAAA,IAC1B;AAAA,IACA,oBAAoB,IAAI;AAAA,EAC1B;AACA,MAAI,CAAC,YAAY,IAAI;AACnB,WAAO,aAAa;AAAA,MAClB,YAAY,aAAa,EAAE,OAAO,6BAA6B;AAAA,MAC/D,EAAE,QAAQ,YAAY,eAAe,IAAI;AAAA,IAC3C;AAAA,EACF;AAEA,QAAM,UAAU,UAAU,QAAQ,uBAAuB;AAEzD,MAAI;AACF,UAAM,EAAE,aAAa,QAAQ,IAAI,MAAM,QAAQ,qBAAqB;AAAA,MAClE,aAAa,OAAO,KAAK;AAAA,MACzB,WAAW,OAAO,WAAW;AAAA,MAC7B,SAAS,OAAO,KAAK;AAAA,MACrB,QAAQ,OAAO,KAAK;AAAA,MACpB,cAAc,OAAO,KAAK;AAAA,MAC1B,eAAe,OAAO,KAAK;AAAA,MAC3B,aAAa,OAAO,KAAK;AAAA,MACzB,YAAY,OAAO,KAAK;AAAA,MACxB,WAAW,OAAO,KAAK;AAAA,MACvB,UAAU,OAAO,KAAK;AAAA,MACtB,cAAc,OAAO,KAAK;AAAA,MAC1B,gBAAgB,KAAK;AAAA,MACrB,UAAU,KAAK;AAAA,IACjB,CAAC;AAED,UAAM,cAAc,QAAQ,gBACtB,QAAQ,eAAe,SAAS,aAAa,QAAQ,cAAc,cAAc;AAEvF,UAAM,2CAA2C,YAAY,uBAAuB;AAAA,MAClF,UAAU,KAAK;AAAA,MACf,gBAAgB,KAAK;AAAA,MACrB,QAAQ,KAAK,OAAO;AAAA,MACpB,cAAc;AAAA,MACd,YAAY,YAAY;AAAA,MACxB,WAAW;AAAA,MACX,eAAe,IAAI;AAAA,MACnB,gBAAgB,IAAI;AAAA,IACtB,CAAC;AAED,WAAO,aAAa,KAAK;AAAA,MACvB,eAAe,YAAY;AAAA,MAC3B,WAAW,QAAQ;AAAA,MACnB,aAAa,YAAY;AAAA,MACzB,cAAc,QAAQ;AAAA,MACtB;AAAA,MACA,cAAc,QAAQ,gBAAgB;AAAA,MACtC,eAAe,QAAQ,iBAAiB;AAAA,MACxC,QAAQ,QAAQ;AAAA,MAChB,WAAW,YAAY;AAAA,IACzB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACpB,SAAS,KAAc;AACrB,UAAM,UAAU,eAAe,QAAQ,IAAI,UAAU;AACrD,UAAM,SAAS,QAAQ,SAAS,oBAAoB,IAAI,MAAM;AAC9D,WAAO,aAAa,KAAK,EAAE,OAAO,QAAQ,GAAG,EAAE,OAAO,CAAC;AAAA,EACzD;AACF;AAEO,MAAM,UAAU;AAAA,EACrB,MAAM,CAAC,kBAAkB;AAAA,EACzB,SAAS;AAAA,EACT,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,MAAM,CAAC,kBAAkB;AAAA,MACzB,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,0BAA0B;AAAA,QACtD,EAAE,QAAQ,KAAK,aAAa,sCAAsC;AAAA,QAClE,EAAE,QAAQ,KAAK,aAAa,yBAAyB;AAAA,MACvD;AAAA,IACF;AAAA,EACF;AACF;",
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { readJsonSafe } from '@open-mercato/shared/lib/http/readJsonSafe'\nimport { isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { createSessionSchema } from '../../data/validators'\nimport type { PaymentGatewayService } from '../../lib/gateway-service'\nimport { paymentGatewaysTag } from '../openapi'\nimport {\n  resolveUserFeatures,\n  runPaymentGatewayMutationGuardAfterSuccess,\n  runPaymentGatewayMutationGuards,\n} from '../guards'\n\nconst gatewayTransactionResourceKind = 'payment_gateways.gateway_transaction'\n\nexport const metadata = {\n  path: '/payment_gateways/sessions',\n  POST: { requireAuth: true, requireFeatures: ['payment_gateways.manage'] },\n}\n\nexport async function POST(req: Request) {\n  const auth = await getAuthFromRequest(req)\n  if (!auth?.tenantId || !auth.orgId) {\n    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n  }\n\n  const payload = await readJsonSafe<unknown>(req)\n  const parsed = createSessionSchema.safeParse(payload)\n  if (!parsed.success) {\n    return NextResponse.json({ error: 'Invalid payload', details: parsed.error.flatten() }, { status: 422 })\n  }\n\n  const container = await createRequestContainer()\n  const guardResult = await runPaymentGatewayMutationGuards(\n    container,\n    {\n      tenantId: auth.tenantId,\n      organizationId: auth.orgId,\n      userId: auth.sub ?? '',\n      resourceKind: gatewayTransactionResourceKind,\n      resourceId: null,\n      operation: 'create',\n      requestMethod: req.method,\n      requestHeaders: req.headers,\n      mutationPayload: parsed.data as Record<string, unknown>,\n    },\n    resolveUserFeatures(auth),\n  )\n  if (!guardResult.ok) {\n    return NextResponse.json(\n      guardResult.errorBody ?? { error: 'Operation blocked by guard' },\n      { status: guardResult.errorStatus ?? 422 },\n    )\n  }\n\n  const service = container.resolve('paymentGatewayService') as PaymentGatewayService\n\n  try {\n    const { transaction, session } = await service.createPaymentSession({\n      providerKey: parsed.data.providerKey,\n      paymentId: crypto.randomUUID(),\n      orderId: parsed.data.orderId,\n      amount: parsed.data.amount,\n      currencyCode: parsed.data.currencyCode,\n      captureMethod: parsed.data.captureMethod,\n      description: parsed.data.description,\n      successUrl: parsed.data.successUrl,\n      cancelUrl: parsed.data.cancelUrl,\n      metadata: parsed.data.metadata,\n      presentation: parsed.data.presentation,\n      organizationId: auth.orgId as string,\n      tenantId: auth.tenantId,\n    })\n\n    const redirectUrl = session.redirectUrl\n      ?? (session.clientSession?.type === 'redirect' ? session.clientSession.redirectUrl : null)\n\n    await runPaymentGatewayMutationGuardAfterSuccess(guardResult.afterSuccessCallbacks, {\n      tenantId: auth.tenantId,\n      organizationId: auth.orgId,\n      userId: auth.sub ?? '',\n      resourceKind: gatewayTransactionResourceKind,\n      resourceId: transaction.id,\n      operation: 'create',\n      requestMethod: req.method,\n      requestHeaders: req.headers,\n    })\n\n    return NextResponse.json({\n      transactionId: transaction.id,\n      sessionId: session.sessionId,\n      providerKey: transaction.providerKey,\n      clientSecret: session.clientSecret,\n      redirectUrl,\n      providerData: session.providerData ?? null,\n      clientSession: session.clientSession ?? null,\n      status: session.status,\n      paymentId: transaction.paymentId,\n    }, { status: 201 })\n  } catch (err: unknown) {\n    if (isCrudHttpError(err)) {\n      return NextResponse.json(err.body, { status: err.status })\n    }\n    const message = err instanceof Error ? err.message : 'Failed to create payment session'\n    const status = message.includes('No gateway adapter') ? 422 : 502\n    return NextResponse.json({ error: message }, { status })\n  }\n}\n\nexport const openApi = {\n  tags: [paymentGatewaysTag],\n  summary: 'Create a payment session via a gateway provider',\n  methods: {\n    POST: {\n      summary: 'Create payment session',\n      tags: [paymentGatewaysTag],\n      responses: [\n        { status: 201, description: 'Payment session created' },\n        { status: 409, description: 'Amount or currency does not match the referenced order' },\n        { status: 422, description: 'Invalid payload or unknown provider' },\n        { status: 502, description: 'Gateway provider error' },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,0BAA0B;AACnC,SAAS,8BAA8B;AACvC,SAAS,oBAAoB;AAC7B,SAAS,uBAAuB;AAChC,SAAS,2BAA2B;AAEpC,SAAS,0BAA0B;AACnC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEP,MAAM,iCAAiC;AAEhC,MAAM,WAAW;AAAA,EACtB,MAAM;AAAA,EACN,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,yBAAyB,EAAE;AAC1E;AAEA,eAAsB,KAAK,KAAc;AACvC,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM,YAAY,CAAC,KAAK,OAAO;AAClC,WAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrE;AAEA,QAAM,UAAU,MAAM,aAAsB,GAAG;AAC/C,QAAM,SAAS,oBAAoB,UAAU,OAAO;AACpD,MAAI,CAAC,OAAO,SAAS;AACnB,WAAO,aAAa,KAAK,EAAE,OAAO,mBAAmB,SAAS,OAAO,MAAM,QAAQ,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACzG;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,cAAc,MAAM;AAAA,IACxB;AAAA,IACA;AAAA,MACE,UAAU,KAAK;AAAA,MACf,gBAAgB,KAAK;AAAA,MACrB,QAAQ,KAAK,OAAO;AAAA,MACpB,cAAc;AAAA,MACd,YAAY;AAAA,MACZ,WAAW;AAAA,MACX,eAAe,IAAI;AAAA,MACnB,gBAAgB,IAAI;AAAA,MACpB,iBAAiB,OAAO;AAAA,IAC1B;AAAA,IACA,oBAAoB,IAAI;AAAA,EAC1B;AACA,MAAI,CAAC,YAAY,IAAI;AACnB,WAAO,aAAa;AAAA,MAClB,YAAY,aAAa,EAAE,OAAO,6BAA6B;AAAA,MAC/D,EAAE,QAAQ,YAAY,eAAe,IAAI;AAAA,IAC3C;AAAA,EACF;AAEA,QAAM,UAAU,UAAU,QAAQ,uBAAuB;AAEzD,MAAI;AACF,UAAM,EAAE,aAAa,QAAQ,IAAI,MAAM,QAAQ,qBAAqB;AAAA,MAClE,aAAa,OAAO,KAAK;AAAA,MACzB,WAAW,OAAO,WAAW;AAAA,MAC7B,SAAS,OAAO,KAAK;AAAA,MACrB,QAAQ,OAAO,KAAK;AAAA,MACpB,cAAc,OAAO,KAAK;AAAA,MAC1B,eAAe,OAAO,KAAK;AAAA,MAC3B,aAAa,OAAO,KAAK;AAAA,MACzB,YAAY,OAAO,KAAK;AAAA,MACxB,WAAW,OAAO,KAAK;AAAA,MACvB,UAAU,OAAO,KAAK;AAAA,MACtB,cAAc,OAAO,KAAK;AAAA,MAC1B,gBAAgB,KAAK;AAAA,MACrB,UAAU,KAAK;AAAA,IACjB,CAAC;AAED,UAAM,cAAc,QAAQ,gBACtB,QAAQ,eAAe,SAAS,aAAa,QAAQ,cAAc,cAAc;AAEvF,UAAM,2CAA2C,YAAY,uBAAuB;AAAA,MAClF,UAAU,KAAK;AAAA,MACf,gBAAgB,KAAK;AAAA,MACrB,QAAQ,KAAK,OAAO;AAAA,MACpB,cAAc;AAAA,MACd,YAAY,YAAY;AAAA,MACxB,WAAW;AAAA,MACX,eAAe,IAAI;AAAA,MACnB,gBAAgB,IAAI;AAAA,IACtB,CAAC;AAED,WAAO,aAAa,KAAK;AAAA,MACvB,eAAe,YAAY;AAAA,MAC3B,WAAW,QAAQ;AAAA,MACnB,aAAa,YAAY;AAAA,MACzB,cAAc,QAAQ;AAAA,MACtB;AAAA,MACA,cAAc,QAAQ,gBAAgB;AAAA,MACtC,eAAe,QAAQ,iBAAiB;AAAA,MACxC,QAAQ,QAAQ;AAAA,MAChB,WAAW,YAAY;AAAA,IACzB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACpB,SAAS,KAAc;AACrB,QAAI,gBAAgB,GAAG,GAAG;AACxB,aAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AAAA,IAC3D;AACA,UAAM,UAAU,eAAe,QAAQ,IAAI,UAAU;AACrD,UAAM,SAAS,QAAQ,SAAS,oBAAoB,IAAI,MAAM;AAC9D,WAAO,aAAa,KAAK,EAAE,OAAO,QAAQ,GAAG,EAAE,OAAO,CAAC;AAAA,EACzD;AACF;AAEO,MAAM,UAAU;AAAA,EACrB,MAAM,CAAC,kBAAkB;AAAA,EACzB,SAAS;AAAA,EACT,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,MAAM,CAAC,kBAAkB;AAAA,MACzB,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,0BAA0B;AAAA,QACtD,EAAE,QAAQ,KAAK,aAAa,yDAAyD;AAAA,QACrF,EAAE,QAAQ,KAAK,aAAa,sCAAsC;AAAA,QAClE,EAAE,QAAQ,KAAK,aAAa,yBAAyB;AAAA,MACvD;AAAA,IACF;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/modules/payment_gateways/di.js

@@ -2,10 +2,26 @@ import { asFunction, asValue } from "awilix";
 import { GatewayTransaction, WebhookProcessedEvent } from "./data/entities.js";
 import { createPaymentGatewayDescriptorService } from "./lib/descriptor-service.js";
 import { createPaymentGatewayService } from "./lib/gateway-service.js";
+import { isPaymentOrderTotalResolver } from "./lib/order-amount-reconciliation.js";
+const ORDER_TOTAL_RESOLVER_NAME = "paymentOrderTotalResolver";
+function resolveOrderTotalResolver(container, cradle) {
+  if (!container.hasRegistration(ORDER_TOTAL_RESOLVER_NAME)) return null;
+  const candidate = cradle[ORDER_TOTAL_RESOLVER_NAME];
+  if (!isPaymentOrderTotalResolver(candidate)) {
+    throw new Error(`[internal] ${ORDER_TOTAL_RESOLVER_NAME} does not implement resolveOrderTotal`);
+  }
+  return candidate;
+}
 function register(container) {
   container.register({
     paymentGatewayService: asFunction(
-      ({ em, integrationCredentialsService, integrationLogService, integrationStateService }) => createPaymentGatewayService({ em, integrationCredentialsService, integrationLogService, integrationStateService })
+      (cradle) => createPaymentGatewayService({
+        em: cradle.em,
+        integrationCredentialsService: cradle.integrationCredentialsService,
+        integrationLogService: cradle.integrationLogService,
+        integrationStateService: cradle.integrationStateService,
+        paymentOrderTotalResolver: resolveOrderTotalResolver(container, cradle)
+      })
     ).scoped().proxy(),
     paymentGatewayDescriptorService: asFunction(
       ({ integrationCredentialsService, integrationStateService }) => createPaymentGatewayDescriptorService({ integrationCredentialsService, integrationStateService })

package/dist/modules/payment_gateways/di.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../src/modules/payment_gateways/di.ts"],
-  "sourcesContent": ["import { asFunction, asValue } from 'awilix'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport type { AppContainer } from '@open-mercato/shared/lib/di/container'\nimport type { CredentialsService } from '../integrations/lib/credentials-service'\nimport type { IntegrationLogService } from '../integrations/lib/log-service'\nimport type { IntegrationStateService } from '../integrations/lib/state-service'\nimport { GatewayTransaction, WebhookProcessedEvent } from './data/entities'\nimport { createPaymentGatewayDescriptorService } from './lib/descriptor-service'\nimport { createPaymentGatewayService } from './lib/gateway-service'\n\ntype Cradle = {\n  em: EntityManager\n  integrationCredentialsService: CredentialsService\n  integrationLogService: IntegrationLogService\n  integrationStateService: IntegrationStateService\n}\n\nexport function register(container: AppContainer) {\n  container.register({\n    paymentGatewayService: asFunction(({ em, integrationCredentialsService, integrationLogService, integrationStateService }: Cradle) =>\n      createPaymentGatewayService({ em, integrationCredentialsService, integrationLogService, integrationStateService }),\n    ).scoped().proxy(),\n    paymentGatewayDescriptorService: asFunction(({ integrationCredentialsService, integrationStateService }: Cradle) =>\n      createPaymentGatewayDescriptorService({ integrationCredentialsService, integrationStateService }),\n    ).scoped().proxy(),\n\n    GatewayTransaction: asValue(GatewayTransaction),\n    WebhookProcessedEvent: asValue(WebhookProcessedEvent),\n  })\n}\n"],
-  "mappings": "AAAA,SAAS,YAAY,eAAe;AAMpC,SAAS,oBAAoB,6BAA6B;AAC1D,SAAS,6CAA6C;AACtD,SAAS,mCAAmC;AASrC,SAAS,SAAS,WAAyB;AAChD,YAAU,SAAS;AAAA,IACjB,uBAAuB;AAAA,MAAW,CAAC,EAAE,IAAI,+BAA+B,uBAAuB,wBAAwB,MACrH,4BAA4B,EAAE,IAAI,+BAA+B,uBAAuB,wBAAwB,CAAC;AAAA,IACnH,EAAE,OAAO,EAAE,MAAM;AAAA,IACjB,iCAAiC;AAAA,MAAW,CAAC,EAAE,+BAA+B,wBAAwB,MACpG,sCAAsC,EAAE,+BAA+B,wBAAwB,CAAC;AAAA,IAClG,EAAE,OAAO,EAAE,MAAM;AAAA,IAEjB,oBAAoB,QAAQ,kBAAkB;AAAA,IAC9C,uBAAuB,QAAQ,qBAAqB;AAAA,EACtD,CAAC;AACH;",
+  "sourcesContent": ["import { asFunction, asValue } from 'awilix'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport type { AppContainer } from '@open-mercato/shared/lib/di/container'\nimport type { CredentialsService } from '../integrations/lib/credentials-service'\nimport type { IntegrationLogService } from '../integrations/lib/log-service'\nimport type { IntegrationStateService } from '../integrations/lib/state-service'\nimport type { PaymentOrderTotalResolver } from '@open-mercato/shared/modules/payment_gateways/types'\nimport { GatewayTransaction, WebhookProcessedEvent } from './data/entities'\nimport { createPaymentGatewayDescriptorService } from './lib/descriptor-service'\nimport { createPaymentGatewayService } from './lib/gateway-service'\nimport { isPaymentOrderTotalResolver } from './lib/order-amount-reconciliation'\n\ntype Cradle = {\n  em: EntityManager\n  integrationCredentialsService: CredentialsService\n  integrationLogService: IntegrationLogService\n  integrationStateService: IntegrationStateService\n}\n\nconst ORDER_TOTAL_RESOLVER_NAME = 'paymentOrderTotalResolver'\n\n/**\n * The order-total resolver is owned by whichever module owns orders (`sales`\n * registers the default one). Its absence is the only supported reason to skip\n * amount reconciliation, so this only tolerates a missing registration: a\n * registered resolver that fails to build or does not satisfy the contract\n * throws instead of silently disabling the check.\n */\nfunction resolveOrderTotalResolver(container: AppContainer, cradle: Cradle): PaymentOrderTotalResolver | null {\n  if (!container.hasRegistration(ORDER_TOTAL_RESOLVER_NAME)) return null\n  const candidate = (cradle as Cradle & { paymentOrderTotalResolver?: unknown })[ORDER_TOTAL_RESOLVER_NAME]\n  if (!isPaymentOrderTotalResolver(candidate)) {\n    throw new Error(`[internal] ${ORDER_TOTAL_RESOLVER_NAME} does not implement resolveOrderTotal`)\n  }\n  return candidate\n}\n\nexport function register(container: AppContainer) {\n  container.register({\n    paymentGatewayService: asFunction((cradle: Cradle) =>\n      createPaymentGatewayService({\n        em: cradle.em,\n        integrationCredentialsService: cradle.integrationCredentialsService,\n        integrationLogService: cradle.integrationLogService,\n        integrationStateService: cradle.integrationStateService,\n        paymentOrderTotalResolver: resolveOrderTotalResolver(container, cradle),\n      }),\n    ).scoped().proxy(),\n    paymentGatewayDescriptorService: asFunction(({ integrationCredentialsService, integrationStateService }: Cradle) =>\n      createPaymentGatewayDescriptorService({ integrationCredentialsService, integrationStateService }),\n    ).scoped().proxy(),\n\n    GatewayTransaction: asValue(GatewayTransaction),\n    WebhookProcessedEvent: asValue(WebhookProcessedEvent),\n  })\n}\n"],
+  "mappings": "AAAA,SAAS,YAAY,eAAe;AAOpC,SAAS,oBAAoB,6BAA6B;AAC1D,SAAS,6CAA6C;AACtD,SAAS,mCAAmC;AAC5C,SAAS,mCAAmC;AAS5C,MAAM,4BAA4B;AASlC,SAAS,0BAA0B,WAAyB,QAAkD;AAC5G,MAAI,CAAC,UAAU,gBAAgB,yBAAyB,EAAG,QAAO;AAClE,QAAM,YAAa,OAA4D,yBAAyB;AACxG,MAAI,CAAC,4BAA4B,SAAS,GAAG;AAC3C,UAAM,IAAI,MAAM,cAAc,yBAAyB,uCAAuC;AAAA,EAChG;AACA,SAAO;AACT;AAEO,SAAS,SAAS,WAAyB;AAChD,YAAU,SAAS;AAAA,IACjB,uBAAuB;AAAA,MAAW,CAAC,WACjC,4BAA4B;AAAA,QAC1B,IAAI,OAAO;AAAA,QACX,+BAA+B,OAAO;AAAA,QACtC,uBAAuB,OAAO;AAAA,QAC9B,yBAAyB,OAAO;AAAA,QAChC,2BAA2B,0BAA0B,WAAW,MAAM;AAAA,MACxE,CAAC;AAAA,IACH,EAAE,OAAO,EAAE,MAAM;AAAA,IACjB,iCAAiC;AAAA,MAAW,CAAC,EAAE,+BAA+B,wBAAwB,MACpG,sCAAsC,EAAE,+BAA+B,wBAAwB,CAAC;AAAA,IAClG,EAAE,OAAO,EAAE,MAAM;AAAA,IAEjB,oBAAoB,QAAQ,kBAAkB;AAAA,IAC9C,uBAAuB,QAAQ,qBAAqB;AAAA,EACtD,CAAC;AACH;",
   "names": []
 }

package/dist/modules/payment_gateways/lib/gateway-service.js

@@ -8,6 +8,7 @@ import { GatewaySessionInitialization, GatewayTransaction } from "../data/entiti
 import { canApplyManualAction, isValidTransition } from "./status-machine.js";
 import { emitPaymentGatewayEvent } from "../events.js";
 import { readGatewayMetadata, readWebhookLog } from "./transaction-fields.js";
+import { reconcileSessionAmountWithOrder } from "./order-amount-reconciliation.js";
 import {
   alignCapturedAmountWithStatus,
   assertCaptureWithinRemaining,
@@ -275,6 +276,13 @@ function createPaymentGatewayService(deps) {
   return {
     async createPaymentSession(input) {
       const scope = { organizationId: input.organizationId, tenantId: input.tenantId };
+      await reconcileSessionAmountWithOrder({
+        orderId: input.orderId,
+        amount: input.amount,
+        currencyCode: input.currencyCode,
+        scope,
+        resolver: deps.paymentOrderTotalResolver
+      });
       const { adapter, credentials } = await resolveAdapterAndCredentials(input.providerKey, scope);
       const sessionInput = {
         paymentId: input.paymentId,