@open-mercato/core 0.6.7-develop.6863.1.61001cf9a8 → 0.6.7

package/dist/modules/entities/lib/entityAcl.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/entities/lib/entityAcl.ts"],
-  "sourcesContent": ["import { CrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport type { RbacService } from '@open-mercato/core/modules/auth/services/rbacService'\nimport { getModules } from '@open-mercato/shared/lib/i18n/server'\nimport { authorizeFeatures } from '@open-mercato/shared/security/featurePolicy'\nimport { deriveCustomEntityRecordFeature } from './recordFeatures'\n\nexport type EntityAclRequirement = {\n  view: string[]\n  manage: string[]\n  platformOnly?: boolean\n}\n\nconst ENTITY_ACL_REQUIREMENTS: Record<string, EntityAclRequirement> = {\n  'directory:tenant': {\n    view: ['directory.tenants.view'],\n    manage: ['directory.tenants.manage'],\n    platformOnly: true,\n  },\n  'directory:organization': {\n    view: ['directory.organizations.view'],\n    manage: ['directory.organizations.manage'],\n  },\n  'customers:customer_person_profile': {\n    view: ['customers.people.view'],\n    manage: ['customers.people.manage'],\n  },\n  'customers:customer_company_profile': {\n    view: ['customers.companies.view'],\n    manage: ['customers.companies.manage'],\n  },\n  'customers:customer_deal': {\n    view: ['customers.deals.view'],\n    manage: ['customers.deals.manage'],\n  },\n  'customers:customer_activity': {\n    view: ['customers.activities.view'],\n    manage: ['customers.activities.manage'],\n  },\n  'customers:customer_interaction': {\n    view: ['customers.interactions.view'],\n    manage: ['customers.interactions.manage'],\n  },\n  'catalog:catalog_product': {\n    view: ['catalog.products.view'],\n    manage: ['catalog.products.manage'],\n  },\n  'catalog:catalog_product_category': {\n    view: ['catalog.categories.view'],\n    manage: ['catalog.categories.manage'],\n  },\n  'sales:sales_order': {\n    view: ['sales.orders.view'],\n    manage: ['sales.orders.manage'],\n  },\n  'sales:sales_quote': {\n    view: ['sales.quotes.view'],\n    manage: ['sales.quotes.manage'],\n  },\n  'auth:user': {\n    view: ['auth.users.list'],\n    manage: ['auth.users.edit'],\n  },\n  'auth:role': {\n    view: ['auth.roles.list'],\n    manage: ['auth.roles.manage'],\n  },\n}\n\nlet declaredCustomEntityRestrictions: Map<string, boolean> | null = null\n\nfunction loadDeclaredCustomEntityRestrictions(): Map<string, boolean> {\n  if (declaredCustomEntityRestrictions === null) {\n    try {\n      const modules = getModules() as Array<{\n        customEntities?: Array<{ id?: string; accessRestricted?: boolean }>\n      }>\n      const restrictions = new Map<string, boolean>()\n      for (const moduleEntry of modules ?? []) {\n        for (const spec of moduleEntry.customEntities ?? []) {\n          if (spec.id) restrictions.set(spec.id, spec.accessRestricted === true)\n        }\n      }\n      declaredCustomEntityRestrictions = restrictions\n    } catch {}\n  }\n  return declaredCustomEntityRestrictions ?? new Map<string, boolean>()\n}\n\nexport function getDeclaredCustomEntityRestriction(entityId: string): boolean | undefined {\n  return loadDeclaredCustomEntityRestrictions().get(entityId)\n}\n\nexport function isDeclaredCustomEntity(entityId: string): boolean {\n  return loadDeclaredCustomEntityRestrictions().has(entityId)\n}\n\nexport function resolveEntityAclRequirement(entityId: string): EntityAclRequirement | null {\n  return ENTITY_ACL_REQUIREMENTS[entityId] ?? null\n}\n\nexport function canReadAllEntityMetadata(acl: {\n  isSuperAdmin?: boolean\n  features?: readonly string[]\n}): boolean {\n  return authorizeFeatures(['entities.definitions.view'], {\n    grantedFeatures: acl.features ?? [],\n    unrestricted: Boolean(acl.isSuperAdmin),\n  })\n}\n\nexport function canReadEntityMetadata(args: {\n  entityId: string\n  isCustomEntity: boolean\n  isRestricted?: boolean\n  acl: { isSuperAdmin?: boolean; features?: readonly string[] }\n}): boolean {\n  const requirement = resolveEntityAclRequirement(args.entityId)\n  if (requirement?.platformOnly) {\n    return Boolean(args.acl.isSuperAdmin) && authorizeFeatures(requirement.view, {\n      grantedFeatures: args.acl.features ?? [],\n      unrestricted: true,\n    })\n  }\n  if (canReadAllEntityMetadata(args.acl)) return true\n  if (args.isCustomEntity) {\n    const requiredFeatures = ['entities.records.view']\n    if (args.isRestricted) {\n      requiredFeatures.push(deriveCustomEntityRecordFeature(args.entityId, 'view'))\n    }\n    return authorizeFeatures(requiredFeatures, {\n      grantedFeatures: args.acl.features ?? [],\n      unrestricted: Boolean(args.acl.isSuperAdmin),\n    })\n  }\n  if (!requirement) return Boolean(args.acl.isSuperAdmin)\n  return authorizeFeatures(requirement.view, {\n    grantedFeatures: args.acl.features ?? [],\n    unrestricted: Boolean(args.acl.isSuperAdmin),\n  })\n}\n\ntype EntityAclActor = {\n  sub?: string | null\n  tenantId?: string | null\n  orgId?: string | null\n  isSuperAdmin?: boolean\n}\n\ntype AssertEntityAclArgs = {\n  auth: EntityAclActor\n  entityId: string\n  action: 'view' | 'manage'\n  isCustomEntity: boolean\n  // Set for a custom entity flagged `access_restricted`. When true, the coarse\n  // route-level entities.records.* feature is no longer sufficient \u2014 the caller\n  // must additionally hold the synthesized per-entity feature.\n  isRestricted?: boolean\n  rbac: RbacService\n}\n\nfunction forbiddenEntityAccess(): CrudHttpError {\n  return new CrudHttpError(403, { error: 'Forbidden' })\n}\n\nasync function loadActorAcl(args: AssertEntityAclArgs) {\n  return args.rbac.loadAcl(args.auth.sub ?? '', {\n    tenantId: args.auth.tenantId ?? null,\n    organizationId: args.auth.orgId ?? null,\n  })\n}\n\nexport async function assertEntityAclForRequest(args: AssertEntityAclArgs): Promise<void> {\n  if (args.isCustomEntity) {\n    // Unrestricted custom entities keep the historical behavior: the coarse\n    // entities.records.view/.manage route guard is the whole authorization.\n    if (!args.isRestricted) return\n\n    const required = deriveCustomEntityRecordFeature(args.entityId, args.action)\n    const allowed = await args.rbac.userHasAllFeatures(\n      args.auth.sub ?? '',\n      [required],\n      {\n        tenantId: args.auth.tenantId ?? null,\n        organizationId: args.auth.orgId ?? null,\n      },\n    )\n    if (!allowed) {\n      throw forbiddenEntityAccess()\n    }\n    return\n  }\n\n  const requirement = resolveEntityAclRequirement(args.entityId)\n\n  if (!requirement) {\n    const acl = await loadActorAcl(args)\n    if (!acl.isSuperAdmin) throw forbiddenEntityAccess()\n    return\n  }\n\n  if (requirement.platformOnly) {\n    const acl = await loadActorAcl(args)\n    if (!acl.isSuperAdmin) throw forbiddenEntityAccess()\n  }\n\n  const allowed = await args.rbac.userHasAllFeatures(\n    args.auth.sub ?? '',\n    requirement[args.action],\n    {\n      tenantId: args.auth.tenantId ?? null,\n      organizationId: args.auth.orgId ?? null,\n    },\n  )\n  if (!allowed) {\n    throw forbiddenEntityAccess()\n  }\n}\n"],
-  "mappings": "AAAA,SAAS,qBAAqB;AAE9B,SAAS,kBAAkB;AAC3B,SAAS,yBAAyB;AAClC,SAAS,uCAAuC;AAQhD,MAAM,0BAAgE;AAAA,EACpE,oBAAoB;AAAA,IAClB,MAAM,CAAC,wBAAwB;AAAA,IAC/B,QAAQ,CAAC,0BAA0B;AAAA,IACnC,cAAc;AAAA,EAChB;AAAA,EACA,0BAA0B;AAAA,IACxB,MAAM,CAAC,8BAA8B;AAAA,IACrC,QAAQ,CAAC,gCAAgC;AAAA,EAC3C;AAAA,EACA,qCAAqC;AAAA,IACnC,MAAM,CAAC,uBAAuB;AAAA,IAC9B,QAAQ,CAAC,yBAAyB;AAAA,EACpC;AAAA,EACA,sCAAsC;AAAA,IACpC,MAAM,CAAC,0BAA0B;AAAA,IACjC,QAAQ,CAAC,4BAA4B;AAAA,EACvC;AAAA,EACA,2BAA2B;AAAA,IACzB,MAAM,CAAC,sBAAsB;AAAA,IAC7B,QAAQ,CAAC,wBAAwB;AAAA,EACnC;AAAA,EACA,+BAA+B;AAAA,IAC7B,MAAM,CAAC,2BAA2B;AAAA,IAClC,QAAQ,CAAC,6BAA6B;AAAA,EACxC;AAAA,EACA,kCAAkC;AAAA,IAChC,MAAM,CAAC,6BAA6B;AAAA,IACpC,QAAQ,CAAC,+BAA+B;AAAA,EAC1C;AAAA,EACA,2BAA2B;AAAA,IACzB,MAAM,CAAC,uBAAuB;AAAA,IAC9B,QAAQ,CAAC,yBAAyB;AAAA,EACpC;AAAA,EACA,oCAAoC;AAAA,IAClC,MAAM,CAAC,yBAAyB;AAAA,IAChC,QAAQ,CAAC,2BAA2B;AAAA,EACtC;AAAA,EACA,qBAAqB;AAAA,IACnB,MAAM,CAAC,mBAAmB;AAAA,IAC1B,QAAQ,CAAC,qBAAqB;AAAA,EAChC;AAAA,EACA,qBAAqB;AAAA,IACnB,MAAM,CAAC,mBAAmB;AAAA,IAC1B,QAAQ,CAAC,qBAAqB;AAAA,EAChC;AAAA,EACA,aAAa;AAAA,IACX,MAAM,CAAC,iBAAiB;AAAA,IACxB,QAAQ,CAAC,iBAAiB;AAAA,EAC5B;AAAA,EACA,aAAa;AAAA,IACX,MAAM,CAAC,iBAAiB;AAAA,IACxB,QAAQ,CAAC,mBAAmB;AAAA,EAC9B;AACF;AAEA,IAAI,mCAAgE;AAEpE,SAAS,uCAA6D;AACpE,MAAI,qCAAqC,MAAM;AAC7C,QAAI;AACF,YAAM,UAAU,WAAW;AAG3B,YAAM,eAAe,oBAAI,IAAqB;AAC9C,iBAAW,eAAe,WAAW,CAAC,GAAG;AACvC,mBAAW,QAAQ,YAAY,kBAAkB,CAAC,GAAG;AACnD,cAAI,KAAK,GAAI,cAAa,IAAI,KAAK,IAAI,KAAK,qBAAqB,IAAI;AAAA,QACvE;AAAA,MACF;AACA,yCAAmC;AAAA,IACrC,QAAQ;AAAA,IAAC;AAAA,EACX;AACA,SAAO,oCAAoC,oBAAI,IAAqB;AACtE;AAEO,SAAS,mCAAmC,UAAuC;AACxF,SAAO,qCAAqC,EAAE,IAAI,QAAQ;AAC5D;AAEO,SAAS,uBAAuB,UAA2B;AAChE,SAAO,qCAAqC,EAAE,IAAI,QAAQ;AAC5D;AAEO,SAAS,4BAA4B,UAA+C;AACzF,SAAO,wBAAwB,QAAQ,KAAK;AAC9C;AAEO,SAAS,yBAAyB,KAG7B;AACV,SAAO,kBAAkB,CAAC,2BAA2B,GAAG;AAAA,IACtD,iBAAiB,IAAI,YAAY,CAAC;AAAA,IAClC,cAAc,QAAQ,IAAI,YAAY;AAAA,EACxC,CAAC;AACH;AAEO,SAAS,sBAAsB,MAK1B;AACV,QAAM,cAAc,4BAA4B,KAAK,QAAQ;AAC7D,MAAI,aAAa,cAAc;AAC7B,WAAO,QAAQ,KAAK,IAAI,YAAY,KAAK,kBAAkB,YAAY,MAAM;AAAA,MAC3E,iBAAiB,KAAK,IAAI,YAAY,CAAC;AAAA,MACvC,cAAc;AAAA,IAChB,CAAC;AAAA,EACH;AACA,MAAI,yBAAyB,KAAK,GAAG,EAAG,QAAO;AAC/C,MAAI,KAAK,gBAAgB;AACvB,UAAM,mBAAmB,CAAC,uBAAuB;AACjD,QAAI,KAAK,cAAc;AACrB,uBAAiB,KAAK,gCAAgC,KAAK,UAAU,MAAM,CAAC;AAAA,IAC9E;AACA,WAAO,kBAAkB,kBAAkB;AAAA,MACzC,iBAAiB,KAAK,IAAI,YAAY,CAAC;AAAA,MACvC,cAAc,QAAQ,KAAK,IAAI,YAAY;AAAA,IAC7C,CAAC;AAAA,EACH;AACA,MAAI,CAAC,YAAa,QAAO,QAAQ,KAAK,IAAI,YAAY;AACtD,SAAO,kBAAkB,YAAY,MAAM;AAAA,IACzC,iBAAiB,KAAK,IAAI,YAAY,CAAC;AAAA,IACvC,cAAc,QAAQ,KAAK,IAAI,YAAY;AAAA,EAC7C,CAAC;AACH;AAqBA,SAAS,wBAAuC;AAC9C,SAAO,IAAI,cAAc,KAAK,EAAE,OAAO,YAAY,CAAC;AACtD;AAEA,eAAe,aAAa,MAA2B;AACrD,SAAO,KAAK,KAAK,QAAQ,KAAK,KAAK,OAAO,IAAI;AAAA,IAC5C,UAAU,KAAK,KAAK,YAAY;AAAA,IAChC,gBAAgB,KAAK,KAAK,SAAS;AAAA,EACrC,CAAC;AACH;AAEA,eAAsB,0BAA0B,MAA0C;AACxF,MAAI,KAAK,gBAAgB;AAGvB,QAAI,CAAC,KAAK,aAAc;AAExB,UAAM,WAAW,gCAAgC,KAAK,UAAU,KAAK,MAAM;AAC3E,UAAMA,WAAU,MAAM,KAAK,KAAK;AAAA,MAC9B,KAAK,KAAK,OAAO;AAAA,MACjB,CAAC,QAAQ;AAAA,MACT;AAAA,QACE,UAAU,KAAK,KAAK,YAAY;AAAA,QAChC,gBAAgB,KAAK,KAAK,SAAS;AAAA,MACrC;AAAA,IACF;AACA,QAAI,CAACA,UAAS;AACZ,YAAM,sBAAsB;AAAA,IAC9B;AACA;AAAA,EACF;AAEA,QAAM,cAAc,4BAA4B,KAAK,QAAQ;AAE7D,MAAI,CAAC,aAAa;AAChB,UAAM,MAAM,MAAM,aAAa,IAAI;AACnC,QAAI,CAAC,IAAI,aAAc,OAAM,sBAAsB;AACnD;AAAA,EACF;AAEA,MAAI,YAAY,cAAc;AAC5B,UAAM,MAAM,MAAM,aAAa,IAAI;AACnC,QAAI,CAAC,IAAI,aAAc,OAAM,sBAAsB;AAAA,EACrD;AAEA,QAAM,UAAU,MAAM,KAAK,KAAK;AAAA,IAC9B,KAAK,KAAK,OAAO;AAAA,IACjB,YAAY,KAAK,MAAM;AAAA,IACvB;AAAA,MACE,UAAU,KAAK,KAAK,YAAY;AAAA,MAChC,gBAAgB,KAAK,KAAK,SAAS;AAAA,IACrC;AAAA,EACF;AACA,MAAI,CAAC,SAAS;AACZ,UAAM,sBAAsB;AAAA,EAC9B;AACF;",
-  "names": ["allowed"]
+  "sourcesContent": ["import { CrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { hasAllFeatures } from '@open-mercato/shared/security/features'\nimport type { RbacService } from '@open-mercato/core/modules/auth/services/rbacService'\nimport { deriveCustomEntityRecordFeature } from './recordFeatures'\n\nexport type EntityAclRequirement = {\n  view: string[]\n  manage: string[]\n  platformOnly?: boolean\n}\n\nconst ENTITY_ACL_REQUIREMENTS: Record<string, EntityAclRequirement> = {\n  'directory:tenant': {\n    view: ['directory.tenants.view'],\n    manage: ['directory.tenants.manage'],\n    platformOnly: true,\n  },\n  'directory:organization': {\n    view: ['directory.organizations.view'],\n    manage: ['directory.organizations.manage'],\n  },\n  'customers:customer_person_profile': {\n    view: ['customers.people.view'],\n    manage: ['customers.people.manage'],\n  },\n  'customers:customer_company_profile': {\n    view: ['customers.companies.view'],\n    manage: ['customers.companies.manage'],\n  },\n  'customers:customer_deal': {\n    view: ['customers.deals.view'],\n    manage: ['customers.deals.manage'],\n  },\n  'customers:customer_activity': {\n    view: ['customers.activities.view'],\n    manage: ['customers.activities.manage'],\n  },\n  'customers:customer_interaction': {\n    view: ['customers.interactions.view'],\n    manage: ['customers.interactions.manage'],\n  },\n  'catalog:catalog_product': {\n    view: ['catalog.products.view'],\n    manage: ['catalog.products.manage'],\n  },\n  'catalog:catalog_product_category': {\n    view: ['catalog.categories.view'],\n    manage: ['catalog.categories.manage'],\n  },\n  'sales:sales_order': {\n    view: ['sales.orders.view'],\n    manage: ['sales.orders.manage'],\n  },\n  'sales:sales_quote': {\n    view: ['sales.quotes.view'],\n    manage: ['sales.quotes.manage'],\n  },\n  'auth:user': {\n    view: ['auth.users.list'],\n    manage: ['auth.users.edit'],\n  },\n  'auth:role': {\n    view: ['auth.roles.list'],\n    manage: ['auth.roles.manage'],\n  },\n}\n\nexport function resolveEntityAclRequirement(entityId: string): EntityAclRequirement | null {\n  return ENTITY_ACL_REQUIREMENTS[entityId] ?? null\n}\n\ntype EntityAclActor = {\n  sub?: string | null\n  tenantId?: string | null\n  orgId?: string | null\n  isSuperAdmin?: boolean\n}\n\ntype AssertEntityAclArgs = {\n  auth: EntityAclActor\n  entityId: string\n  action: 'view' | 'manage'\n  isCustomEntity: boolean\n  // Set for a custom entity flagged `access_restricted`. When true, the coarse\n  // route-level entities.records.* feature is no longer sufficient \u2014 the caller\n  // must additionally hold the synthesized per-entity feature.\n  isRestricted?: boolean\n  rbac: RbacService\n}\n\nfunction forbiddenEntityAccess(): CrudHttpError {\n  return new CrudHttpError(403, { error: 'Forbidden' })\n}\n\nasync function loadActorAcl(args: AssertEntityAclArgs) {\n  return args.rbac.loadAcl(args.auth.sub ?? '', {\n    tenantId: args.auth.tenantId ?? null,\n    organizationId: args.auth.orgId ?? null,\n  })\n}\n\nexport async function assertEntityAclForRequest(args: AssertEntityAclArgs): Promise<void> {\n  if (args.isCustomEntity) {\n    // Unrestricted custom entities keep the historical behavior: the coarse\n    // entities.records.view/.manage route guard is the whole authorization.\n    if (!args.isRestricted) return\n\n    const acl = await loadActorAcl(args)\n    if (acl?.isSuperAdmin) return\n\n    const required = deriveCustomEntityRecordFeature(args.entityId, args.action)\n    if (!hasAllFeatures(acl?.features, [required])) {\n      throw forbiddenEntityAccess()\n    }\n    return\n  }\n\n  const requirement = resolveEntityAclRequirement(args.entityId)\n\n  const acl = await loadActorAcl(args)\n\n  if (acl?.isSuperAdmin) return\n\n  if (!requirement) throw forbiddenEntityAccess()\n  if (requirement.platformOnly) throw forbiddenEntityAccess()\n\n  if (!hasAllFeatures(acl?.features, requirement[args.action])) {\n    throw forbiddenEntityAccess()\n  }\n}\n"],
+  "mappings": "AAAA,SAAS,qBAAqB;AAC9B,SAAS,sBAAsB;AAE/B,SAAS,uCAAuC;AAQhD,MAAM,0BAAgE;AAAA,EACpE,oBAAoB;AAAA,IAClB,MAAM,CAAC,wBAAwB;AAAA,IAC/B,QAAQ,CAAC,0BAA0B;AAAA,IACnC,cAAc;AAAA,EAChB;AAAA,EACA,0BAA0B;AAAA,IACxB,MAAM,CAAC,8BAA8B;AAAA,IACrC,QAAQ,CAAC,gCAAgC;AAAA,EAC3C;AAAA,EACA,qCAAqC;AAAA,IACnC,MAAM,CAAC,uBAAuB;AAAA,IAC9B,QAAQ,CAAC,yBAAyB;AAAA,EACpC;AAAA,EACA,sCAAsC;AAAA,IACpC,MAAM,CAAC,0BAA0B;AAAA,IACjC,QAAQ,CAAC,4BAA4B;AAAA,EACvC;AAAA,EACA,2BAA2B;AAAA,IACzB,MAAM,CAAC,sBAAsB;AAAA,IAC7B,QAAQ,CAAC,wBAAwB;AAAA,EACnC;AAAA,EACA,+BAA+B;AAAA,IAC7B,MAAM,CAAC,2BAA2B;AAAA,IAClC,QAAQ,CAAC,6BAA6B;AAAA,EACxC;AAAA,EACA,kCAAkC;AAAA,IAChC,MAAM,CAAC,6BAA6B;AAAA,IACpC,QAAQ,CAAC,+BAA+B;AAAA,EAC1C;AAAA,EACA,2BAA2B;AAAA,IACzB,MAAM,CAAC,uBAAuB;AAAA,IAC9B,QAAQ,CAAC,yBAAyB;AAAA,EACpC;AAAA,EACA,oCAAoC;AAAA,IAClC,MAAM,CAAC,yBAAyB;AAAA,IAChC,QAAQ,CAAC,2BAA2B;AAAA,EACtC;AAAA,EACA,qBAAqB;AAAA,IACnB,MAAM,CAAC,mBAAmB;AAAA,IAC1B,QAAQ,CAAC,qBAAqB;AAAA,EAChC;AAAA,EACA,qBAAqB;AAAA,IACnB,MAAM,CAAC,mBAAmB;AAAA,IAC1B,QAAQ,CAAC,qBAAqB;AAAA,EAChC;AAAA,EACA,aAAa;AAAA,IACX,MAAM,CAAC,iBAAiB;AAAA,IACxB,QAAQ,CAAC,iBAAiB;AAAA,EAC5B;AAAA,EACA,aAAa;AAAA,IACX,MAAM,CAAC,iBAAiB;AAAA,IACxB,QAAQ,CAAC,mBAAmB;AAAA,EAC9B;AACF;AAEO,SAAS,4BAA4B,UAA+C;AACzF,SAAO,wBAAwB,QAAQ,KAAK;AAC9C;AAqBA,SAAS,wBAAuC;AAC9C,SAAO,IAAI,cAAc,KAAK,EAAE,OAAO,YAAY,CAAC;AACtD;AAEA,eAAe,aAAa,MAA2B;AACrD,SAAO,KAAK,KAAK,QAAQ,KAAK,KAAK,OAAO,IAAI;AAAA,IAC5C,UAAU,KAAK,KAAK,YAAY;AAAA,IAChC,gBAAgB,KAAK,KAAK,SAAS;AAAA,EACrC,CAAC;AACH;AAEA,eAAsB,0BAA0B,MAA0C;AACxF,MAAI,KAAK,gBAAgB;AAGvB,QAAI,CAAC,KAAK,aAAc;AAExB,UAAMA,OAAM,MAAM,aAAa,IAAI;AACnC,QAAIA,MAAK,aAAc;AAEvB,UAAM,WAAW,gCAAgC,KAAK,UAAU,KAAK,MAAM;AAC3E,QAAI,CAAC,eAAeA,MAAK,UAAU,CAAC,QAAQ,CAAC,GAAG;AAC9C,YAAM,sBAAsB;AAAA,IAC9B;AACA;AAAA,EACF;AAEA,QAAM,cAAc,4BAA4B,KAAK,QAAQ;AAE7D,QAAM,MAAM,MAAM,aAAa,IAAI;AAEnC,MAAI,KAAK,aAAc;AAEvB,MAAI,CAAC,YAAa,OAAM,sBAAsB;AAC9C,MAAI,YAAY,aAAc,OAAM,sBAAsB;AAE1D,MAAI,CAAC,eAAe,KAAK,UAAU,YAAY,KAAK,MAAM,CAAC,GAAG;AAC5D,UAAM,sBAAsB;AAAA,EAC9B;AACF;",
+  "names": ["acl"]
 }

package/dist/modules/feature_toggles/components/FeatureGuard.js

@@ -5,10 +5,9 @@ function FeatureGuard({
   id,
   children,
   fallback = null,
-  loadingFallback = null,
-  defaultValue = false
+  loadingFallback = null
 }) {
-  const { enabled, isLoading } = useFeatureFlagBoolean({ id, defaultValue });
+  const { enabled, isLoading } = useFeatureFlagBoolean({ id });
   if (isLoading) {
     return /* @__PURE__ */ jsx(Fragment, { children: loadingFallback });
   }

package/dist/modules/feature_toggles/components/FeatureGuard.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/feature_toggles/components/FeatureGuard.tsx"],
-  "sourcesContent": ["\"use client\"\n\nimport * as React from 'react'\nimport { useFeatureFlagBoolean } from './hooks/useFeatureFlagBoolean'\n\nexport type FeatureGuardProps = {\n  id: string\n  children: React.ReactNode\n  fallback?: React.ReactNode\n  loadingFallback?: React.ReactNode\n  defaultValue?: boolean\n}\n\n/**\n * FeatureGuard component that conditionally renders children based on feature toggle state.\n *\n * @param id - The feature toggle identifier\n * @param children - Content to render when the feature is enabled\n * @param fallback - Optional content to render when the feature is disabled\n * @param loadingFallback - Optional content to render while loading the feature state\n * @param defaultValue - Toggle value assumed when the check cannot be resolved\n *   (undefined toggle, type mismatch, network or permission failure). Defaults\n *   to `false`; pass `true` to keep guarded UI visible when the check fails.\n *   Distinct from `fallback`, which is what gets rendered once the feature is\n *   known to be disabled.\n */\nexport function FeatureGuard({\n  id,\n  children,\n  fallback = null,\n  loadingFallback = null,\n  defaultValue = false,\n}: FeatureGuardProps) {\n  const { enabled, isLoading } = useFeatureFlagBoolean({ id, defaultValue })\n\n  if (isLoading) {\n    return <>{loadingFallback}</>\n  }\n\n  if (!enabled) {\n    return <>{fallback}</>\n  }\n\n  return <>{children}</>\n}\n"],
-  "mappings": ";AAoCW;AAjCX,SAAS,6BAA6B;AAuB/B,SAAS,aAAa;AAAA,EAC3B;AAAA,EACA;AAAA,EACA,WAAW;AAAA,EACX,kBAAkB;AAAA,EAClB,eAAe;AACjB,GAAsB;AACpB,QAAM,EAAE,SAAS,UAAU,IAAI,sBAAsB,EAAE,IAAI,aAAa,CAAC;AAEzE,MAAI,WAAW;AACb,WAAO,gCAAG,2BAAgB;AAAA,EAC5B;AAEA,MAAI,CAAC,SAAS;AACZ,WAAO,gCAAG,oBAAS;AAAA,EACrB;AAEA,SAAO,gCAAG,UAAS;AACrB;",
+  "sourcesContent": ["\"use client\"\n\nimport * as React from 'react'\nimport { useFeatureFlagBoolean } from './hooks/useFeatureFlagBoolean'\n\nexport type FeatureGuardProps = {\n  id: string\n  children: React.ReactNode\n  fallback?: React.ReactNode\n  loadingFallback?: React.ReactNode\n}\n\n/**\n * FeatureGuard component that conditionally renders children based on feature toggle state.\n * \n * @param id - The feature toggle identifier\n * @param children - Content to render when the feature is enabled\n * @param fallback - Optional content to render when the feature is disabled\n * @param loadingFallback - Optional content to render while loading the feature state\n */\nexport function FeatureGuard({\n  id,\n  children,\n  fallback = null,\n  loadingFallback = null,\n}: FeatureGuardProps) {\n  const { enabled, isLoading } = useFeatureFlagBoolean({ id })\n\n  if (isLoading) {\n    return <>{loadingFallback}</>\n  }\n\n  if (!enabled) {\n    return <>{fallback}</>\n  }\n\n  return <>{children}</>\n}\n"],
+  "mappings": ";AA6BW;AA1BX,SAAS,6BAA6B;AAiB/B,SAAS,aAAa;AAAA,EAC3B;AAAA,EACA;AAAA,EACA,WAAW;AAAA,EACX,kBAAkB;AACpB,GAAsB;AACpB,QAAM,EAAE,SAAS,UAAU,IAAI,sBAAsB,EAAE,GAAG,CAAC;AAE3D,MAAI,WAAW;AACb,WAAO,gCAAG,2BAAgB;AAAA,EAC5B;AAEA,MAAI,CAAC,SAAS;AACZ,WAAO,gCAAG,oBAAS;AAAA,EACrB;AAEA,SAAO,gCAAG,UAAS;AACrB;",
   "names": []
 }

package/dist/modules/feature_toggles/components/hooks/useFeatureFlagBoolean.js

@@ -1,9 +1,7 @@
 "use client";
 import { useQuery } from "@tanstack/react-query";
 import { readApiResultOrThrow } from "@open-mercato/ui/backend/utils/apiCall";
-import { FEATURE_FLAG_STALE_TIME_MS } from "./staleTime.js";
 function useFeatureFlagBoolean(options) {
-  const defaultValue = options.defaultValue ?? false;
   const query = useQuery({
     queryKey: ["featureToggles", "check", options?.id],
     queryFn: async () => {
@@ -17,10 +15,9 @@ function useFeatureFlagBoolean(options) {
       );
       return result;
     },
-    enabled: !!options.id,
-    staleTime: FEATURE_FLAG_STALE_TIME_MS
+    enabled: !!options.id
   });
-  const enabled = query.data?.ok ? query.data.value : defaultValue;
+  const enabled = query.data?.ok ? query.data.value : false;
   const isLoading = query.isLoading;
   return {
     enabled,

package/dist/modules/feature_toggles/components/hooks/useFeatureFlagBoolean.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../src/modules/feature_toggles/components/hooks/useFeatureFlagBoolean.ts"],
-  "sourcesContent": ["\"use client\"\n\nimport { useQuery } from '@tanstack/react-query'\nimport { readApiResultOrThrow } from '@open-mercato/ui/backend/utils/apiCall'\nimport { FEATURE_FLAG_STALE_TIME_MS } from './staleTime'\n\nexport type UseFeatureFlagOptions = {\n  id: string\n  /**\n   * Value used while the check is in flight and whenever the toggle cannot be\n   * resolved (undefined toggle, type mismatch, network or permission failure).\n   *\n   * Defaults to `false` so an unresolved toggle keeps a feature switched off.\n   * Pass `true` for toggles that hide existing UI \u2014 there a failed check must\n   * not make the feature disappear.\n   */\n  defaultValue?: boolean\n}\n\nexport type UseFeatureFlagResult = {\n  enabled: boolean\n  isLoading: boolean\n}\n\ntype Result<T> = {\n  ok: true\n  value: T\n} | {\n  ok: false\n  error: unknown\n}\n\nexport function useFeatureFlagBoolean(options: UseFeatureFlagOptions): UseFeatureFlagResult {\n  const defaultValue = options.defaultValue ?? false\n  const query = useQuery({\n    queryKey: ['featureToggles', 'check', options?.id],\n    queryFn: async () => {\n      const params = new URLSearchParams({\n        identifier: options.id,\n      })\n\n      const result = await readApiResultOrThrow<Result<boolean>>(\n        `/api/feature_toggles/check/boolean?${params.toString()}`,\n        undefined,\n        { errorMessage: 'Failed to check feature flag.' },\n      )\n\n      return result\n    },\n    enabled: !!options.id,\n    staleTime: FEATURE_FLAG_STALE_TIME_MS,\n  })\n\n  const enabled = query.data?.ok ? query.data.value : defaultValue\n  const isLoading = query.isLoading\n\n  return {\n    enabled,\n    isLoading,\n  }\n}\n"],
-  "mappings": ";AAEA,SAAS,gBAAgB;AACzB,SAAS,4BAA4B;AACrC,SAAS,kCAAkC;AA4BpC,SAAS,sBAAsB,SAAsD;AAC1F,QAAM,eAAe,QAAQ,gBAAgB;AAC7C,QAAM,QAAQ,SAAS;AAAA,IACrB,UAAU,CAAC,kBAAkB,SAAS,SAAS,EAAE;AAAA,IACjD,SAAS,YAAY;AACnB,YAAM,SAAS,IAAI,gBAAgB;AAAA,QACjC,YAAY,QAAQ;AAAA,MACtB,CAAC;AAED,YAAM,SAAS,MAAM;AAAA,QACnB,sCAAsC,OAAO,SAAS,CAAC;AAAA,QACvD;AAAA,QACA,EAAE,cAAc,gCAAgC;AAAA,MAClD;AAEA,aAAO;AAAA,IACT;AAAA,IACA,SAAS,CAAC,CAAC,QAAQ;AAAA,IACnB,WAAW;AAAA,EACb,CAAC;AAED,QAAM,UAAU,MAAM,MAAM,KAAK,MAAM,KAAK,QAAQ;AACpD,QAAM,YAAY,MAAM;AAExB,SAAO;AAAA,IACL;AAAA,IACA;AAAA,EACF;AACF;",
+  "sourcesContent": ["\"use client\"\n\nimport { useQuery } from '@tanstack/react-query'\nimport { readApiResultOrThrow } from '@open-mercato/ui/backend/utils/apiCall'\n\nexport type UseFeatureFlagOptions = {\n  id: string\n}\n\nexport type UseFeatureFlagResult = {\n  enabled: boolean\n  isLoading: boolean\n}\n\ntype Result<T> = {\n  ok: true\n  value: T\n} | {\n  ok: false\n  error: unknown\n}\n\nexport function useFeatureFlagBoolean(options: UseFeatureFlagOptions): UseFeatureFlagResult {\n  const query = useQuery({\n    queryKey: ['featureToggles', 'check', options?.id],\n    queryFn: async () => {\n      const params = new URLSearchParams({\n        identifier: options.id,\n      })\n\n      const result = await readApiResultOrThrow<Result<boolean>>(\n        `/api/feature_toggles/check/boolean?${params.toString()}`,\n        undefined,\n        { errorMessage: 'Failed to check feature flag.' },\n      )\n\n      return result\n    },\n    enabled: !!options.id,\n  })\n\n  const enabled = query.data?.ok ? query.data.value : false\n  const isLoading = query.isLoading\n\n  return {\n    enabled,\n    isLoading,\n  }\n}\n"],
+  "mappings": ";AAEA,SAAS,gBAAgB;AACzB,SAAS,4BAA4B;AAmB9B,SAAS,sBAAsB,SAAsD;AAC1F,QAAM,QAAQ,SAAS;AAAA,IACrB,UAAU,CAAC,kBAAkB,SAAS,SAAS,EAAE;AAAA,IACjD,SAAS,YAAY;AACnB,YAAM,SAAS,IAAI,gBAAgB;AAAA,QACjC,YAAY,QAAQ;AAAA,MACtB,CAAC;AAED,YAAM,SAAS,MAAM;AAAA,QACnB,sCAAsC,OAAO,SAAS,CAAC;AAAA,QACvD;AAAA,QACA,EAAE,cAAc,gCAAgC;AAAA,MAClD;AAEA,aAAO;AAAA,IACT;AAAA,IACA,SAAS,CAAC,CAAC,QAAQ;AAAA,EACrB,CAAC;AAED,QAAM,UAAU,MAAM,MAAM,KAAK,MAAM,KAAK,QAAQ;AACpD,QAAM,YAAY,MAAM;AAExB,SAAO;AAAA,IACL;AAAA,IACA;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/modules/feature_toggles/components/hooks/useFeatureFlagJson.js

@@ -1,9 +1,7 @@
 "use client";
 import { useQuery } from "@tanstack/react-query";
 import { readApiResultOrThrow } from "@open-mercato/ui/backend/utils/apiCall";
-import { FEATURE_FLAG_STALE_TIME_MS } from "./staleTime.js";
 function useFeatureFlagJson(options) {
-  const defaultValue = options.defaultValue ?? null;
   const query = useQuery({
     queryKey: ["featureToggles", "check", "json", options?.id],
     queryFn: async () => {
@@ -17,10 +15,9 @@ function useFeatureFlagJson(options) {
       );
       return result;
     },
-    enabled: !!options.id,
-    staleTime: FEATURE_FLAG_STALE_TIME_MS
+    enabled: !!options.id
   });
-  const value = query.data?.ok ? query.data.value : defaultValue;
+  const value = query.data?.ok ? query.data.value : null;
   const isLoading = query.isLoading;
   return {
     value,

package/dist/modules/feature_toggles/components/hooks/useFeatureFlagJson.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../src/modules/feature_toggles/components/hooks/useFeatureFlagJson.ts"],
-  "sourcesContent": ["\"use client\"\n\nimport { useQuery } from '@tanstack/react-query'\nimport { readApiResultOrThrow } from '@open-mercato/ui/backend/utils/apiCall'\nimport { FEATURE_FLAG_STALE_TIME_MS } from './staleTime'\n\nexport type UseFeatureFlagJsonOptions<T = unknown> = {\n    id: string\n    /**\n     * Value used while the check is in flight and whenever the toggle cannot be\n     * resolved (undefined toggle, type mismatch, network or permission failure).\n     * Defaults to `null`.\n     */\n    defaultValue?: T | null\n}\n\nexport type UseFeatureFlagJsonResult<T = unknown> = {\n    value: T | null\n    isLoading: boolean\n}\n\ntype Result<T> = {\n    ok: true\n    value: T\n} | {\n    ok: false\n    error: unknown\n}\n\nexport function useFeatureFlagJson<T = unknown>(options: UseFeatureFlagJsonOptions<T>): UseFeatureFlagJsonResult<T> {\n    const defaultValue = options.defaultValue ?? null\n    const query = useQuery({\n        queryKey: ['featureToggles', 'check', 'json', options?.id],\n        queryFn: async () => {\n            const params = new URLSearchParams({\n                identifier: options.id,\n            })\n\n            const result = await readApiResultOrThrow<Result<T>>(\n                `/api/feature_toggles/check/json?${params.toString()}`,\n                undefined,\n                { errorMessage: 'Failed to check feature flag.' },\n            )\n\n            return result\n        },\n        enabled: !!options.id,\n        staleTime: FEATURE_FLAG_STALE_TIME_MS,\n    })\n\n    const value = query.data?.ok ? query.data.value : defaultValue\n    const isLoading = query.isLoading\n\n    return {\n        value,\n        isLoading,\n    }\n}\n"],
-  "mappings": ";AAEA,SAAS,gBAAgB;AACzB,SAAS,4BAA4B;AACrC,SAAS,kCAAkC;AAyBpC,SAAS,mBAAgC,SAAoE;AAChH,QAAM,eAAe,QAAQ,gBAAgB;AAC7C,QAAM,QAAQ,SAAS;AAAA,IACnB,UAAU,CAAC,kBAAkB,SAAS,QAAQ,SAAS,EAAE;AAAA,IACzD,SAAS,YAAY;AACjB,YAAM,SAAS,IAAI,gBAAgB;AAAA,QAC/B,YAAY,QAAQ;AAAA,MACxB,CAAC;AAED,YAAM,SAAS,MAAM;AAAA,QACjB,mCAAmC,OAAO,SAAS,CAAC;AAAA,QACpD;AAAA,QACA,EAAE,cAAc,gCAAgC;AAAA,MACpD;AAEA,aAAO;AAAA,IACX;AAAA,IACA,SAAS,CAAC,CAAC,QAAQ;AAAA,IACnB,WAAW;AAAA,EACf,CAAC;AAED,QAAM,QAAQ,MAAM,MAAM,KAAK,MAAM,KAAK,QAAQ;AAClD,QAAM,YAAY,MAAM;AAExB,SAAO;AAAA,IACH;AAAA,IACA;AAAA,EACJ;AACJ;",
+  "sourcesContent": ["\"use client\"\n\nimport { useQuery } from '@tanstack/react-query'\nimport { readApiResultOrThrow } from '@open-mercato/ui/backend/utils/apiCall'\n\nexport type UseFeatureFlagJsonOptions = {\n    id: string\n}\n\nexport type UseFeatureFlagJsonResult<T = unknown> = {\n    value: T | null\n    isLoading: boolean\n}\n\ntype Result<T> = {\n    ok: true\n    value: T\n} | {\n    ok: false\n    error: unknown\n}\n\nexport function useFeatureFlagJson<T = unknown>(options: UseFeatureFlagJsonOptions): UseFeatureFlagJsonResult<T> {\n    const query = useQuery({\n        queryKey: ['featureToggles', 'check', 'json', options?.id],\n        queryFn: async () => {\n            const params = new URLSearchParams({\n                identifier: options.id,\n            })\n\n            const result = await readApiResultOrThrow<Result<T>>(\n                `/api/feature_toggles/check/json?${params.toString()}`,\n                undefined,\n                { errorMessage: 'Failed to check feature flag.' },\n            )\n\n            return result\n        },\n        enabled: !!options.id,\n    })\n\n    const value = query.data?.ok ? query.data.value : null\n    const isLoading = query.isLoading\n\n    return {\n        value,\n        isLoading,\n    }\n}\n"],
+  "mappings": ";AAEA,SAAS,gBAAgB;AACzB,SAAS,4BAA4B;AAmB9B,SAAS,mBAAgC,SAAiE;AAC7G,QAAM,QAAQ,SAAS;AAAA,IACnB,UAAU,CAAC,kBAAkB,SAAS,QAAQ,SAAS,EAAE;AAAA,IACzD,SAAS,YAAY;AACjB,YAAM,SAAS,IAAI,gBAAgB;AAAA,QAC/B,YAAY,QAAQ;AAAA,MACxB,CAAC;AAED,YAAM,SAAS,MAAM;AAAA,QACjB,mCAAmC,OAAO,SAAS,CAAC;AAAA,QACpD;AAAA,QACA,EAAE,cAAc,gCAAgC;AAAA,MACpD;AAEA,aAAO;AAAA,IACX;AAAA,IACA,SAAS,CAAC,CAAC,QAAQ;AAAA,EACvB,CAAC;AAED,QAAM,QAAQ,MAAM,MAAM,KAAK,MAAM,KAAK,QAAQ;AAClD,QAAM,YAAY,MAAM;AAExB,SAAO;AAAA,IACH;AAAA,IACA;AAAA,EACJ;AACJ;",
   "names": []
 }

package/dist/modules/feature_toggles/components/hooks/useFeatureFlagNumber.js

@@ -1,9 +1,7 @@
 "use client";
 import { useQuery } from "@tanstack/react-query";
 import { readApiResultOrThrow } from "@open-mercato/ui/backend/utils/apiCall";
-import { FEATURE_FLAG_STALE_TIME_MS } from "./staleTime.js";
 function useFeatureFlagNumber(options) {
-  const defaultValue = options.defaultValue ?? null;
   const query = useQuery({
     queryKey: ["featureToggles", "check", "number", options?.id],
     queryFn: async () => {
@@ -17,10 +15,9 @@ function useFeatureFlagNumber(options) {
       );
       return result;
     },
-    enabled: !!options.id,
-    staleTime: FEATURE_FLAG_STALE_TIME_MS
+    enabled: !!options.id
   });
-  const value = query.data?.ok ? query.data.value : defaultValue;
+  const value = query.data?.ok ? query.data.value : null;
   const isLoading = query.isLoading;
   return {
     value,

package/dist/modules/feature_toggles/components/hooks/useFeatureFlagNumber.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../src/modules/feature_toggles/components/hooks/useFeatureFlagNumber.ts"],
-  "sourcesContent": ["\"use client\"\n\nimport { useQuery } from '@tanstack/react-query'\nimport { readApiResultOrThrow } from '@open-mercato/ui/backend/utils/apiCall'\nimport { FEATURE_FLAG_STALE_TIME_MS } from './staleTime'\n\nexport type UseFeatureFlagNumberOptions = {\n    id: string\n    /**\n     * Value used while the check is in flight and whenever the toggle cannot be\n     * resolved (undefined toggle, type mismatch, network or permission failure).\n     * Defaults to `null`.\n     */\n    defaultValue?: number | null\n}\n\nexport type UseFeatureFlagNumberResult = {\n    value: number | null\n    isLoading: boolean\n}\n\ntype Result<T> = {\n    ok: true\n    value: T\n} | {\n    ok: false\n    error: unknown\n}\n\nexport function useFeatureFlagNumber(options: UseFeatureFlagNumberOptions): UseFeatureFlagNumberResult {\n    const defaultValue = options.defaultValue ?? null\n    const query = useQuery({\n        queryKey: ['featureToggles', 'check', 'number', options?.id],\n        queryFn: async () => {\n            const params = new URLSearchParams({\n                identifier: options.id,\n            })\n\n            const result = await readApiResultOrThrow<Result<number>>(\n                `/api/feature_toggles/check/number?${params.toString()}`,\n                undefined,\n                { errorMessage: 'Failed to check feature flag.' },\n            )\n\n            return result\n        },\n        enabled: !!options.id,\n        staleTime: FEATURE_FLAG_STALE_TIME_MS,\n    })\n\n    const value = query.data?.ok ? query.data.value : defaultValue\n    const isLoading = query.isLoading\n\n    return {\n        value,\n        isLoading,\n    }\n}\n"],
-  "mappings": ";AAEA,SAAS,gBAAgB;AACzB,SAAS,4BAA4B;AACrC,SAAS,kCAAkC;AAyBpC,SAAS,qBAAqB,SAAkE;AACnG,QAAM,eAAe,QAAQ,gBAAgB;AAC7C,QAAM,QAAQ,SAAS;AAAA,IACnB,UAAU,CAAC,kBAAkB,SAAS,UAAU,SAAS,EAAE;AAAA,IAC3D,SAAS,YAAY;AACjB,YAAM,SAAS,IAAI,gBAAgB;AAAA,QAC/B,YAAY,QAAQ;AAAA,MACxB,CAAC;AAED,YAAM,SAAS,MAAM;AAAA,QACjB,qCAAqC,OAAO,SAAS,CAAC;AAAA,QACtD;AAAA,QACA,EAAE,cAAc,gCAAgC;AAAA,MACpD;AAEA,aAAO;AAAA,IACX;AAAA,IACA,SAAS,CAAC,CAAC,QAAQ;AAAA,IACnB,WAAW;AAAA,EACf,CAAC;AAED,QAAM,QAAQ,MAAM,MAAM,KAAK,MAAM,KAAK,QAAQ;AAClD,QAAM,YAAY,MAAM;AAExB,SAAO;AAAA,IACH;AAAA,IACA;AAAA,EACJ;AACJ;",
+  "sourcesContent": ["\"use client\"\n\nimport { useQuery } from '@tanstack/react-query'\nimport { readApiResultOrThrow } from '@open-mercato/ui/backend/utils/apiCall'\n\nexport type UseFeatureFlagNumberOptions = {\n    id: string\n}\n\nexport type UseFeatureFlagNumberResult = {\n    value: number | null\n    isLoading: boolean\n}\n\ntype Result<T> = {\n    ok: true\n    value: T\n} | {\n    ok: false\n    error: unknown\n}\n\nexport function useFeatureFlagNumber(options: UseFeatureFlagNumberOptions): UseFeatureFlagNumberResult {\n    const query = useQuery({\n        queryKey: ['featureToggles', 'check', 'number', options?.id],\n        queryFn: async () => {\n            const params = new URLSearchParams({\n                identifier: options.id,\n            })\n\n            const result = await readApiResultOrThrow<Result<number>>(\n                `/api/feature_toggles/check/number?${params.toString()}`,\n                undefined,\n                { errorMessage: 'Failed to check feature flag.' },\n            )\n\n            return result\n        },\n        enabled: !!options.id,\n    })\n\n    const value = query.data?.ok ? query.data.value : null\n    const isLoading = query.isLoading\n\n    return {\n        value,\n        isLoading,\n    }\n}\n"],
+  "mappings": ";AAEA,SAAS,gBAAgB;AACzB,SAAS,4BAA4B;AAmB9B,SAAS,qBAAqB,SAAkE;AACnG,QAAM,QAAQ,SAAS;AAAA,IACnB,UAAU,CAAC,kBAAkB,SAAS,UAAU,SAAS,EAAE;AAAA,IAC3D,SAAS,YAAY;AACjB,YAAM,SAAS,IAAI,gBAAgB;AAAA,QAC/B,YAAY,QAAQ;AAAA,MACxB,CAAC;AAED,YAAM,SAAS,MAAM;AAAA,QACjB,qCAAqC,OAAO,SAAS,CAAC;AAAA,QACtD;AAAA,QACA,EAAE,cAAc,gCAAgC;AAAA,MACpD;AAEA,aAAO;AAAA,IACX;AAAA,IACA,SAAS,CAAC,CAAC,QAAQ;AAAA,EACvB,CAAC;AAED,QAAM,QAAQ,MAAM,MAAM,KAAK,MAAM,KAAK,QAAQ;AAClD,QAAM,YAAY,MAAM;AAExB,SAAO;AAAA,IACH;AAAA,IACA;AAAA,EACJ;AACJ;",
   "names": []
 }

package/dist/modules/feature_toggles/components/hooks/useFeatureFlagString.js

@@ -1,9 +1,7 @@
 "use client";
 import { useQuery } from "@tanstack/react-query";
 import { readApiResultOrThrow } from "@open-mercato/ui/backend/utils/apiCall";
-import { FEATURE_FLAG_STALE_TIME_MS } from "./staleTime.js";
 function useFeatureFlagString(options) {
-  const defaultValue = options.defaultValue ?? null;
   const query = useQuery({
     queryKey: ["featureToggles", "check", "string", options?.id],
     queryFn: async () => {
@@ -17,10 +15,9 @@ function useFeatureFlagString(options) {
       );
       return result;
     },
-    enabled: !!options.id,
-    staleTime: FEATURE_FLAG_STALE_TIME_MS
+    enabled: !!options.id
   });
-  const value = query.data?.ok ? query.data.value : defaultValue;
+  const value = query.data?.ok ? query.data.value : null;
   const isLoading = query.isLoading;
   return {
     value,

package/dist/modules/feature_toggles/components/hooks/useFeatureFlagString.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../src/modules/feature_toggles/components/hooks/useFeatureFlagString.ts"],
-  "sourcesContent": ["\"use client\"\n\nimport { useQuery } from '@tanstack/react-query'\nimport { readApiResultOrThrow } from '@open-mercato/ui/backend/utils/apiCall'\nimport { FEATURE_FLAG_STALE_TIME_MS } from './staleTime'\n\nexport type UseFeatureFlagStringOptions = {\n    id: string\n    /**\n     * Value used while the check is in flight and whenever the toggle cannot be\n     * resolved (undefined toggle, type mismatch, network or permission failure).\n     * Defaults to `null`.\n     */\n    defaultValue?: string | null\n}\n\nexport type UseFeatureFlagStringResult = {\n    value: string | null\n    isLoading: boolean\n}\n\ntype Result<T> = {\n    ok: true\n    value: T\n} | {\n    ok: false\n    error: unknown\n}\n\nexport function useFeatureFlagString(options: UseFeatureFlagStringOptions): UseFeatureFlagStringResult {\n    const defaultValue = options.defaultValue ?? null\n    const query = useQuery({\n        queryKey: ['featureToggles', 'check', 'string', options?.id],\n        queryFn: async () => {\n            const params = new URLSearchParams({\n                identifier: options.id,\n            })\n\n            const result = await readApiResultOrThrow<Result<string>>(\n                `/api/feature_toggles/check/string?${params.toString()}`,\n                undefined,\n                { errorMessage: 'Failed to check feature flag.' },\n            )\n\n            return result\n        },\n        enabled: !!options.id,\n        staleTime: FEATURE_FLAG_STALE_TIME_MS,\n    })\n\n    const value = query.data?.ok ? query.data.value : defaultValue\n    const isLoading = query.isLoading\n\n    return {\n        value,\n        isLoading,\n    }\n}\n"],
-  "mappings": ";AAEA,SAAS,gBAAgB;AACzB,SAAS,4BAA4B;AACrC,SAAS,kCAAkC;AAyBpC,SAAS,qBAAqB,SAAkE;AACnG,QAAM,eAAe,QAAQ,gBAAgB;AAC7C,QAAM,QAAQ,SAAS;AAAA,IACnB,UAAU,CAAC,kBAAkB,SAAS,UAAU,SAAS,EAAE;AAAA,IAC3D,SAAS,YAAY;AACjB,YAAM,SAAS,IAAI,gBAAgB;AAAA,QAC/B,YAAY,QAAQ;AAAA,MACxB,CAAC;AAED,YAAM,SAAS,MAAM;AAAA,QACjB,qCAAqC,OAAO,SAAS,CAAC;AAAA,QACtD;AAAA,QACA,EAAE,cAAc,gCAAgC;AAAA,MACpD;AAEA,aAAO;AAAA,IACX;AAAA,IACA,SAAS,CAAC,CAAC,QAAQ;AAAA,IACnB,WAAW;AAAA,EACf,CAAC;AAED,QAAM,QAAQ,MAAM,MAAM,KAAK,MAAM,KAAK,QAAQ;AAClD,QAAM,YAAY,MAAM;AAExB,SAAO;AAAA,IACH;AAAA,IACA;AAAA,EACJ;AACJ;",
+  "sourcesContent": ["\"use client\"\n\nimport { useQuery } from '@tanstack/react-query'\nimport { readApiResultOrThrow } from '@open-mercato/ui/backend/utils/apiCall'\n\nexport type UseFeatureFlagStringOptions = {\n    id: string\n}\n\nexport type UseFeatureFlagStringResult = {\n    value: string | null\n    isLoading: boolean\n}\n\ntype Result<T> = {\n    ok: true\n    value: T\n} | {\n    ok: false\n    error: unknown\n}\n\nexport function useFeatureFlagString(options: UseFeatureFlagStringOptions): UseFeatureFlagStringResult {\n    const query = useQuery({\n        queryKey: ['featureToggles', 'check', 'string', options?.id],\n        queryFn: async () => {\n            const params = new URLSearchParams({\n                identifier: options.id,\n            })\n\n            const result = await readApiResultOrThrow<Result<string>>(\n                `/api/feature_toggles/check/string?${params.toString()}`,\n                undefined,\n                { errorMessage: 'Failed to check feature flag.' },\n            )\n\n            return result\n        },\n        enabled: !!options.id,\n    })\n\n    const value = query.data?.ok ? query.data.value : null\n    const isLoading = query.isLoading\n\n    return {\n        value,\n        isLoading,\n    }\n}\n"],
+  "mappings": ";AAEA,SAAS,gBAAgB;AACzB,SAAS,4BAA4B;AAmB9B,SAAS,qBAAqB,SAAkE;AACnG,QAAM,QAAQ,SAAS;AAAA,IACnB,UAAU,CAAC,kBAAkB,SAAS,UAAU,SAAS,EAAE;AAAA,IAC3D,SAAS,YAAY;AACjB,YAAM,SAAS,IAAI,gBAAgB;AAAA,QAC/B,YAAY,QAAQ;AAAA,MACxB,CAAC;AAED,YAAM,SAAS,MAAM;AAAA,QACjB,qCAAqC,OAAO,SAAS,CAAC;AAAA,QACtD;AAAA,QACA,EAAE,cAAc,gCAAgC;AAAA,MACpD;AAEA,aAAO;AAAA,IACX;AAAA,IACA,SAAS,CAAC,CAAC,QAAQ;AAAA,EACvB,CAAC;AAED,QAAM,QAAQ,MAAM,MAAM,KAAK,MAAM,KAAK,QAAQ;AAClD,QAAM,YAAY,MAAM;AAExB,SAAO;AAAA,IACH;AAAA,IACA;AAAA,EACJ;AACJ;",
   "names": []
 }

package/dist/modules/inbox_ops/ai-tools.js

@@ -1,7 +1,7 @@
 import { z } from "zod";
 import { runWithCacheTenant } from "@open-mercato/cache";
 import { findOneWithDecryption, findWithDecryption } from "@open-mercato/shared/lib/encryption/find";
-import { authorizeFeatures } from "@open-mercato/shared/security/featurePolicy";
+import { hasFeature } from "@open-mercato/shared/security/features";
 import { InboxProposal, InboxProposalAction, InboxDiscrepancy } from "./data/entities.js";
 import { inboxProposalCategoryEnum } from "./data/validators.js";
 import { executeAction } from "./lib/executionEngine.js";
@@ -231,10 +231,7 @@ Returns on error: error message with appropriate detail.`,
       return { error: "Action already processed", status: action.status };
     }
     if (action.requiredFeature) {
-      const featureGranted = authorizeFeatures([action.requiredFeature], {
-        grantedFeatures: ctx.userFeatures,
-        unrestricted: ctx.isSuperAdmin
-      });
+      const featureGranted = ctx.isSuperAdmin || hasFeature(ctx.userFeatures, action.requiredFeature);
       if (!featureGranted) {
         return {
           error: "Insufficient permissions",

package/dist/modules/inbox_ops/ai-tools.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../src/modules/inbox_ops/ai-tools.ts"],
-  "sourcesContent": ["import { z } from 'zod'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport type { AwilixContainer } from 'awilix'\nimport { runWithCacheTenant } from '@open-mercato/cache'\nimport { findOneWithDecryption, findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { authorizeFeatures } from '@open-mercato/shared/security/featurePolicy'\nimport { InboxProposal, InboxProposalAction, InboxDiscrepancy } from './data/entities'\nimport { inboxProposalCategoryEnum } from './data/validators'\nimport { executeAction } from './lib/executionEngine'\nimport { resolveConfiguredStructuredModel, withTimeout } from './lib/llmProvider'\nimport { resolveOptionalEventBus } from './lib/eventBus'\n\ntype ToolContext = {\n  tenantId: string | null\n  organizationId: string | null\n  userId: string | null\n  container: AwilixContainer\n  userFeatures: string[]\n  isSuperAdmin: boolean\n}\n\ninterface AiToolDefinition {\n  name: string\n  description: string\n  inputSchema: z.ZodType\n  requiredFeatures?: string[]\n  handler: (input: never, ctx: ToolContext) => Promise<unknown>\n}\n\n// =============================================================================\n// Helpers\n// =============================================================================\n\nfunction requireTenantContext(ctx: ToolContext): { tenantId: string; organizationId: string } {\n  if (!ctx.tenantId || !ctx.organizationId) {\n    throw new Error('Tenant context is required')\n  }\n  return { tenantId: ctx.tenantId, organizationId: ctx.organizationId }\n}\n\nfunction resolveCrossModuleEntities(container: ToolContext['container']) {\n  const entities: Record<string, unknown> = {}\n  const keys = [\n    'CustomerEntity',\n    'SalesOrder',\n    'SalesShipment',\n    'SalesChannel',\n    'Dictionary',\n    'DictionaryEntry',\n  ]\n  for (const key of keys) {\n    try {\n      entities[key] = container.resolve(key)\n    } catch {\n      /* module not available */\n    }\n  }\n  return entities\n}\n\n// =============================================================================\n// inbox_ops_list_proposals \u2014 Query proposals by status, category, date range\n// =============================================================================\n\nconst listProposalsTool = {\n  name: 'inbox_ops_list_proposals',\n  description: `List inbox proposals with optional filters by status, category, and date range.\n\nReturns: total count and an array of proposals with id, summary, status, category, confidence, actionCount, and createdAt.`,\n  inputSchema: z.object({\n    status: z\n      .enum(['pending', 'partial', 'accepted', 'rejected'])\n      .optional()\n      .describe('Filter by proposal status'),\n    category: inboxProposalCategoryEnum\n      .optional()\n      .describe('Filter by email category'),\n    limit: z\n      .number()\n      .int()\n      .min(1)\n      .max(50)\n      .optional()\n      .default(10)\n      .describe('Maximum number of proposals to return (default: 10)'),\n    dateFrom: z\n      .string()\n      .optional()\n      .describe('Filter proposals created on or after this date (ISO 8601)'),\n    dateTo: z\n      .string()\n      .optional()\n      .describe('Filter proposals created on or before this date (ISO 8601)'),\n  }),\n  requiredFeatures: ['inbox_ops.proposals.view'],\n  handler: async (input: { status?: string; category?: string; limit?: number; dateFrom?: string; dateTo?: string }, ctx: ToolContext) => {\n    const scope = requireTenantContext(ctx)\n    const em = ctx.container.resolve<EntityManager>('em').fork()\n\n    const where: Record<string, unknown> = {\n      organizationId: scope.organizationId,\n      tenantId: scope.tenantId,\n      isActive: true,\n      deletedAt: null,\n    }\n\n    if (input.status) {\n      where.status = input.status\n    }\n    if (input.category) {\n      where.category = input.category\n    }\n    if (input.dateFrom || input.dateTo) {\n      const createdAt: Record<string, unknown> = {}\n      if (input.dateFrom) {\n        createdAt.$gte = new Date(input.dateFrom)\n      }\n      if (input.dateTo) {\n        createdAt.$lte = new Date(input.dateTo)\n      }\n      where.createdAt = createdAt\n    }\n\n    const proposals = await findWithDecryption(\n      em,\n      InboxProposal,\n      where,\n      { orderBy: { createdAt: 'DESC' }, limit: input.limit },\n      scope,\n    )\n\n    // Count actions per proposal in a single query\n    const proposalIds = proposals.map((p) => p.id)\n    const actionCountMap = new Map<string, number>()\n\n    if (proposalIds.length > 0) {\n      const actions = await findWithDecryption(\n        em,\n        InboxProposalAction,\n        {\n          proposalId: { $in: proposalIds },\n          deletedAt: null,\n        },\n        undefined,\n        scope,\n      )\n      for (const action of actions) {\n        actionCountMap.set(action.proposalId, (actionCountMap.get(action.proposalId) ?? 0) + 1)\n      }\n    }\n\n    // Get total count for the filter\n    const total = await em.count(InboxProposal, where)\n\n    return {\n      total,\n      proposals: proposals.map((p) => ({\n        id: p.id,\n        summary: p.summary,\n        status: p.status,\n        category: p.category ?? null,\n        confidence: Number(p.confidence),\n        actionCount: actionCountMap.get(p.id) ?? 0,\n        createdAt: p.createdAt.toISOString(),\n      })),\n    }\n  },\n}\n\n// =============================================================================\n// inbox_ops_get_proposal \u2014 Fetch proposal detail with actions and discrepancies\n// =============================================================================\n\nconst getProposalTool = {\n  name: 'inbox_ops_get_proposal',\n  description: `Get full details of an inbox proposal including its actions and discrepancies.\n\nReturns: proposal with id, summary, status, category, confidence, actions array, and discrepancies array.`,\n  inputSchema: z.object({\n    proposalId: z.string().uuid().describe('The UUID of the proposal to retrieve'),\n  }),\n  requiredFeatures: ['inbox_ops.proposals.view'],\n  handler: async (input: { proposalId: string }, ctx: ToolContext) => {\n    const scope = requireTenantContext(ctx)\n    const em = ctx.container.resolve<EntityManager>('em').fork()\n\n    const proposal = await findOneWithDecryption(\n      em,\n      InboxProposal,\n      {\n        id: input.proposalId,\n        organizationId: scope.organizationId,\n        tenantId: scope.tenantId,\n        isActive: true,\n        deletedAt: null,\n      },\n      undefined,\n      scope,\n    )\n\n    if (!proposal) {\n      return { error: 'Proposal not found' }\n    }\n\n    const actions = await findWithDecryption(\n      em,\n      InboxProposalAction,\n      {\n        proposalId: proposal.id,\n        organizationId: scope.organizationId,\n        tenantId: scope.tenantId,\n        deletedAt: null,\n      },\n      { orderBy: { sortOrder: 'ASC' } },\n      scope,\n    )\n\n    const discrepancies = await findWithDecryption(\n      em,\n      InboxDiscrepancy,\n      {\n        proposalId: proposal.id,\n        organizationId: scope.organizationId,\n        tenantId: scope.tenantId,\n      },\n      undefined,\n      scope,\n    )\n\n    return {\n      proposal: {\n        id: proposal.id,\n        summary: proposal.summary,\n        status: proposal.status,\n        category: proposal.category ?? null,\n        confidence: Number(proposal.confidence),\n        actions: actions.map((a) => ({\n          id: a.id,\n          actionType: a.actionType,\n          description: a.description,\n          status: a.status,\n          confidence: Number(a.confidence),\n          requiredFeature: a.requiredFeature ?? null,\n          sortOrder: a.sortOrder,\n          createdEntityId: a.createdEntityId ?? null,\n          createdEntityType: a.createdEntityType ?? null,\n        })),\n        discrepancies: discrepancies.map((d) => ({\n          id: d.id,\n          type: d.type,\n          severity: d.severity,\n          description: d.description,\n          expectedValue: d.expectedValue ?? null,\n          foundValue: d.foundValue ?? null,\n          resolved: d.resolved,\n        })),\n      },\n    }\n  },\n}\n\n// =============================================================================\n// inbox_ops_accept_action \u2014 Accept and execute a specific action\n// =============================================================================\n\nconst acceptActionTool = {\n  name: 'inbox_ops_accept_action',\n  description: `Accept and execute a specific action from an inbox proposal. Creates the entity in the target module (e.g., order, contact).\n\nReturns on success: { ok: true, createdEntityId, createdEntityType }\nReturns on error: error message with appropriate detail.`,\n  inputSchema: z.object({\n    proposalId: z.string().uuid().describe('The UUID of the proposal'),\n    actionId: z.string().uuid().describe('The UUID of the action to accept'),\n  }),\n  requiredFeatures: ['inbox_ops.proposals.manage'],\n  // Accepting an inbox action creates downstream entities (orders, contacts,\n  // etc.) in target modules \u2014 must surface as a write so any agent that\n  // whitelists it routes through the approval card.\n  isMutation: true,\n  handler: async (input: { proposalId: string; actionId: string }, ctx: ToolContext) => {\n    const scope = requireTenantContext(ctx)\n    if (!ctx.userId) {\n      throw new Error('User context is required')\n    }\n\n    const em = ctx.container.resolve<EntityManager>('em').fork()\n\n    const action = await findOneWithDecryption(\n      em,\n      InboxProposalAction,\n      {\n        id: input.actionId,\n        proposalId: input.proposalId,\n        organizationId: scope.organizationId,\n        tenantId: scope.tenantId,\n        deletedAt: null,\n      },\n      undefined,\n      scope,\n    )\n\n    if (!action) {\n      return { error: 'Action not found' }\n    }\n\n    // Check if action was already processed\n    if (action.status !== 'pending' && action.status !== 'failed') {\n      return { error: 'Action already processed', status: action.status }\n    }\n\n    // Check target module permission\n    if (action.requiredFeature) {\n      const featureGranted = authorizeFeatures([action.requiredFeature], {\n        grantedFeatures: ctx.userFeatures,\n        unrestricted: ctx.isSuperAdmin,\n      })\n      if (!featureGranted) {\n        return {\n          error: 'Insufficient permissions',\n          requiredFeature: action.requiredFeature,\n        }\n      }\n    }\n\n    const entities = resolveCrossModuleEntities(ctx.container)\n    const eventBus = resolveOptionalEventBus(ctx.container)\n\n    const result = await executeAction(action, {\n      em,\n      userId: ctx.userId,\n      tenantId: scope.tenantId,\n      organizationId: scope.organizationId,\n      eventBus,\n      container: ctx.container,\n      entities: entities as unknown as import('./lib/executionEngine').CrossModuleEntities,\n    })\n\n    if (!result.success) {\n      if (result.statusCode === 409) {\n        return { error: 'Action already processed', status: 'accepted' }\n      }\n      if (result.statusCode === 403) {\n        return {\n          error: 'Insufficient permissions',\n          requiredFeature: action.requiredFeature ?? 'unknown',\n        }\n      }\n      return { error: 'Execution failed', detail: result.error ?? 'Unknown error' }\n    }\n\n    try {\n      const { resolveCache, invalidateCountsCache } = await import('./lib/cache')\n      const cache = resolveCache(ctx.container)\n      if (cache && scope.tenantId) {\n        await runWithCacheTenant(scope.tenantId, () => invalidateCountsCache(cache, scope.tenantId))\n      }\n    } catch { /* cache invalidation is non-critical */ }\n\n    return {\n      ok: true,\n      createdEntityId: result.createdEntityId ?? null,\n      createdEntityType: result.createdEntityType ?? null,\n    }\n  },\n}\n\n// =============================================================================\n// inbox_ops_categorize_email \u2014 Standalone LLM-based text categorization\n// =============================================================================\n\nconst categorizeEmailSchema = z.object({\n  category: inboxProposalCategoryEnum,\n  confidence: z.number(),\n  reasoning: z.string(),\n})\n\nconst categorizeEmailTool = {\n  name: 'inbox_ops_categorize_email',\n  description: `Categorize email or text content using AI. Classifies text into one of: rfq, order, order_update, complaint, shipping_update, inquiry, payment, other.\n\nReturns: { category, confidence (0-1), reasoning }\nInput text is limited to 10,000 characters for cost control.`,\n  inputSchema: z.object({\n    text: z\n      .string()\n      .min(1)\n      .max(10000)\n      .describe('Email or text content to categorize (max 10K chars)'),\n  }),\n  requiredFeatures: ['inbox_ops.proposals.view'],\n  handler: async (input: { text: string }, ctx: ToolContext) => {\n    requireTenantContext(ctx)\n\n    const { model } = await resolveConfiguredStructuredModel({ moduleId: 'inbox_ops' })\n\n    const { generateObject } = await import('ai')\n\n    const result = await withTimeout(\n      generateObject({\n        model,\n        schema: categorizeEmailSchema,\n        system: `You are an email classification agent. Classify the given text into exactly one category:\n- rfq: Request for quotation or pricing inquiry\n- order: New purchase order or order placement\n- order_update: Change or update to an existing order\n- complaint: Customer complaint, dispute, or dissatisfaction\n- shipping_update: Shipment status, tracking, or delivery information\n- inquiry: General question or information request\n- payment: Payment-related (invoice, receipt, payment terms)\n- other: Does not fit any category above\n\nReturn a JSON object with:\n- category: one of the categories above\n- confidence: a number between 0 and 1 indicating how confident you are\n- reasoning: a brief explanation (1-2 sentences) of why this category was chosen`,\n        prompt: input.text,\n        temperature: 0,\n      }),\n      15000,\n      'Email categorization timed out after 15s',\n    )\n\n    return {\n      category: result.object.category,\n      confidence: Math.round(result.object.confidence * 100) / 100,\n      reasoning: result.object.reasoning,\n    }\n  },\n}\n\n// =============================================================================\n// Export\n// =============================================================================\n\n/**\n * All AI tools exported by the inbox_ops module.\n * Discovered by ai-assistant module's generator.\n */\nexport const aiTools: AiToolDefinition[] = [\n  listProposalsTool,\n  getProposalTool,\n  acceptActionTool,\n  categorizeEmailTool,\n]\n\nexport default aiTools\n"],
-  "mappings": "AAAA,SAAS,SAAS;AAGlB,SAAS,0BAA0B;AACnC,SAAS,uBAAuB,0BAA0B;AAC1D,SAAS,yBAAyB;AAClC,SAAS,eAAe,qBAAqB,wBAAwB;AACrE,SAAS,iCAAiC;AAC1C,SAAS,qBAAqB;AAC9B,SAAS,kCAAkC,mBAAmB;AAC9D,SAAS,+BAA+B;AAuBxC,SAAS,qBAAqB,KAAgE;AAC5F,MAAI,CAAC,IAAI,YAAY,CAAC,IAAI,gBAAgB;AACxC,UAAM,IAAI,MAAM,4BAA4B;AAAA,EAC9C;AACA,SAAO,EAAE,UAAU,IAAI,UAAU,gBAAgB,IAAI,eAAe;AACtE;AAEA,SAAS,2BAA2B,WAAqC;AACvE,QAAM,WAAoC,CAAC;AAC3C,QAAM,OAAO;AAAA,IACX;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACA,aAAW,OAAO,MAAM;AACtB,QAAI;AACF,eAAS,GAAG,IAAI,UAAU,QAAQ,GAAG;AAAA,IACvC,QAAQ;AAAA,IAER;AAAA,EACF;AACA,SAAO;AACT;AAMA,MAAM,oBAAoB;AAAA,EACxB,MAAM;AAAA,EACN,aAAa;AAAA;AAAA;AAAA,EAGb,aAAa,EAAE,OAAO;AAAA,IACpB,QAAQ,EACL,KAAK,CAAC,WAAW,WAAW,YAAY,UAAU,CAAC,EACnD,SAAS,EACT,SAAS,2BAA2B;AAAA,IACvC,UAAU,0BACP,SAAS,EACT,SAAS,0BAA0B;AAAA,IACtC,OAAO,EACJ,OAAO,EACP,IAAI,EACJ,IAAI,CAAC,EACL,IAAI,EAAE,EACN,SAAS,EACT,QAAQ,EAAE,EACV,SAAS,qDAAqD;AAAA,IACjE,UAAU,EACP,OAAO,EACP,SAAS,EACT,SAAS,2DAA2D;AAAA,IACvE,QAAQ,EACL,OAAO,EACP,SAAS,EACT,SAAS,4DAA4D;AAAA,EAC1E,CAAC;AAAA,EACD,kBAAkB,CAAC,0BAA0B;AAAA,EAC7C,SAAS,OAAO,OAAmG,QAAqB;AACtI,UAAM,QAAQ,qBAAqB,GAAG;AACtC,UAAM,KAAK,IAAI,UAAU,QAAuB,IAAI,EAAE,KAAK;AAE3D,UAAM,QAAiC;AAAA,MACrC,gBAAgB,MAAM;AAAA,MACtB,UAAU,MAAM;AAAA,MAChB,UAAU;AAAA,MACV,WAAW;AAAA,IACb;AAEA,QAAI,MAAM,QAAQ;AAChB,YAAM,SAAS,MAAM;AAAA,IACvB;AACA,QAAI,MAAM,UAAU;AAClB,YAAM,WAAW,MAAM;AAAA,IACzB;AACA,QAAI,MAAM,YAAY,MAAM,QAAQ;AAClC,YAAM,YAAqC,CAAC;AAC5C,UAAI,MAAM,UAAU;AAClB,kBAAU,OAAO,IAAI,KAAK,MAAM,QAAQ;AAAA,MAC1C;AACA,UAAI,MAAM,QAAQ;AAChB,kBAAU,OAAO,IAAI,KAAK,MAAM,MAAM;AAAA,MACxC;AACA,YAAM,YAAY;AAAA,IACpB;AAEA,UAAM,YAAY,MAAM;AAAA,MACtB;AAAA,MACA;AAAA,MACA;AAAA,MACA,EAAE,SAAS,EAAE,WAAW,OAAO,GAAG,OAAO,MAAM,MAAM;AAAA,MACrD;AAAA,IACF;AAGA,UAAM,cAAc,UAAU,IAAI,CAAC,MAAM,EAAE,EAAE;AAC7C,UAAM,iBAAiB,oBAAI,IAAoB;AAE/C,QAAI,YAAY,SAAS,GAAG;AAC1B,YAAM,UAAU,MAAM;AAAA,QACpB;AAAA,QACA;AAAA,QACA;AAAA,UACE,YAAY,EAAE,KAAK,YAAY;AAAA,UAC/B,WAAW;AAAA,QACb;AAAA,QACA;AAAA,QACA;AAAA,MACF;AACA,iBAAW,UAAU,SAAS;AAC5B,uBAAe,IAAI,OAAO,aAAa,eAAe,IAAI,OAAO,UAAU,KAAK,KAAK,CAAC;AAAA,MACxF;AAAA,IACF;AAGA,UAAM,QAAQ,MAAM,GAAG,MAAM,eAAe,KAAK;AAEjD,WAAO;AAAA,MACL;AAAA,MACA,WAAW,UAAU,IAAI,CAAC,OAAO;AAAA,QAC/B,IAAI,EAAE;AAAA,QACN,SAAS,EAAE;AAAA,QACX,QAAQ,EAAE;AAAA,QACV,UAAU,EAAE,YAAY;AAAA,QACxB,YAAY,OAAO,EAAE,UAAU;AAAA,QAC/B,aAAa,eAAe,IAAI,EAAE,EAAE,KAAK;AAAA,QACzC,WAAW,EAAE,UAAU,YAAY;AAAA,MACrC,EAAE;AAAA,IACJ;AAAA,EACF;AACF;AAMA,MAAM,kBAAkB;AAAA,EACtB,MAAM;AAAA,EACN,aAAa;AAAA;AAAA;AAAA,EAGb,aAAa,EAAE,OAAO;AAAA,IACpB,YAAY,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,sCAAsC;AAAA,EAC/E,CAAC;AAAA,EACD,kBAAkB,CAAC,0BAA0B;AAAA,EAC7C,SAAS,OAAO,OAA+B,QAAqB;AAClE,UAAM,QAAQ,qBAAqB,GAAG;AACtC,UAAM,KAAK,IAAI,UAAU,QAAuB,IAAI,EAAE,KAAK;AAE3D,UAAM,WAAW,MAAM;AAAA,MACrB;AAAA,MACA;AAAA,MACA;AAAA,QACE,IAAI,MAAM;AAAA,QACV,gBAAgB,MAAM;AAAA,QACtB,UAAU,MAAM;AAAA,QAChB,UAAU;AAAA,QACV,WAAW;AAAA,MACb;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAEA,QAAI,CAAC,UAAU;AACb,aAAO,EAAE,OAAO,qBAAqB;AAAA,IACvC;AAEA,UAAM,UAAU,MAAM;AAAA,MACpB;AAAA,MACA;AAAA,MACA;AAAA,QACE,YAAY,SAAS;AAAA,QACrB,gBAAgB,MAAM;AAAA,QACtB,UAAU,MAAM;AAAA,QAChB,WAAW;AAAA,MACb;AAAA,MACA,EAAE,SAAS,EAAE,WAAW,MAAM,EAAE;AAAA,MAChC;AAAA,IACF;AAEA,UAAM,gBAAgB,MAAM;AAAA,MAC1B;AAAA,MACA;AAAA,MACA;AAAA,QACE,YAAY,SAAS;AAAA,QACrB,gBAAgB,MAAM;AAAA,QACtB,UAAU,MAAM;AAAA,MAClB;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAEA,WAAO;AAAA,MACL,UAAU;AAAA,QACR,IAAI,SAAS;AAAA,QACb,SAAS,SAAS;AAAA,QAClB,QAAQ,SAAS;AAAA,QACjB,UAAU,SAAS,YAAY;AAAA,QAC/B,YAAY,OAAO,SAAS,UAAU;AAAA,QACtC,SAAS,QAAQ,IAAI,CAAC,OAAO;AAAA,UAC3B,IAAI,EAAE;AAAA,UACN,YAAY,EAAE;AAAA,UACd,aAAa,EAAE;AAAA,UACf,QAAQ,EAAE;AAAA,UACV,YAAY,OAAO,EAAE,UAAU;AAAA,UAC/B,iBAAiB,EAAE,mBAAmB;AAAA,UACtC,WAAW,EAAE;AAAA,UACb,iBAAiB,EAAE,mBAAmB;AAAA,UACtC,mBAAmB,EAAE,qBAAqB;AAAA,QAC5C,EAAE;AAAA,QACF,eAAe,cAAc,IAAI,CAAC,OAAO;AAAA,UACvC,IAAI,EAAE;AAAA,UACN,MAAM,EAAE;AAAA,UACR,UAAU,EAAE;AAAA,UACZ,aAAa,EAAE;AAAA,UACf,eAAe,EAAE,iBAAiB;AAAA,UAClC,YAAY,EAAE,cAAc;AAAA,UAC5B,UAAU,EAAE;AAAA,QACd,EAAE;AAAA,MACJ;AAAA,IACF;AAAA,EACF;AACF;AAMA,MAAM,mBAAmB;AAAA,EACvB,MAAM;AAAA,EACN,aAAa;AAAA;AAAA;AAAA;AAAA,EAIb,aAAa,EAAE,OAAO;AAAA,IACpB,YAAY,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,0BAA0B;AAAA,IACjE,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,kCAAkC;AAAA,EACzE,CAAC;AAAA,EACD,kBAAkB,CAAC,4BAA4B;AAAA;AAAA;AAAA;AAAA,EAI/C,YAAY;AAAA,EACZ,SAAS,OAAO,OAAiD,QAAqB;AACpF,UAAM,QAAQ,qBAAqB,GAAG;AACtC,QAAI,CAAC,IAAI,QAAQ;AACf,YAAM,IAAI,MAAM,0BAA0B;AAAA,IAC5C;AAEA,UAAM,KAAK,IAAI,UAAU,QAAuB,IAAI,EAAE,KAAK;AAE3D,UAAM,SAAS,MAAM;AAAA,MACnB;AAAA,MACA;AAAA,MACA;AAAA,QACE,IAAI,MAAM;AAAA,QACV,YAAY,MAAM;AAAA,QAClB,gBAAgB,MAAM;AAAA,QACtB,UAAU,MAAM;AAAA,QAChB,WAAW;AAAA,MACb;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAEA,QAAI,CAAC,QAAQ;AACX,aAAO,EAAE,OAAO,mBAAmB;AAAA,IACrC;AAGA,QAAI,OAAO,WAAW,aAAa,OAAO,WAAW,UAAU;AAC7D,aAAO,EAAE,OAAO,4BAA4B,QAAQ,OAAO,OAAO;AAAA,IACpE;AAGA,QAAI,OAAO,iBAAiB;AAC1B,YAAM,iBAAiB,kBAAkB,CAAC,OAAO,eAAe,GAAG;AAAA,QACjE,iBAAiB,IAAI;AAAA,QACrB,cAAc,IAAI;AAAA,MACpB,CAAC;AACD,UAAI,CAAC,gBAAgB;AACnB,eAAO;AAAA,UACL,OAAO;AAAA,UACP,iBAAiB,OAAO;AAAA,QAC1B;AAAA,MACF;AAAA,IACF;AAEA,UAAM,WAAW,2BAA2B,IAAI,SAAS;AACzD,UAAM,WAAW,wBAAwB,IAAI,SAAS;AAEtD,UAAM,SAAS,MAAM,cAAc,QAAQ;AAAA,MACzC;AAAA,MACA,QAAQ,IAAI;AAAA,MACZ,UAAU,MAAM;AAAA,MAChB,gBAAgB,MAAM;AAAA,MACtB;AAAA,MACA,WAAW,IAAI;AAAA,MACf;AAAA,IACF,CAAC;AAED,QAAI,CAAC,OAAO,SAAS;AACnB,UAAI,OAAO,eAAe,KAAK;AAC7B,eAAO,EAAE,OAAO,4BAA4B,QAAQ,WAAW;AAAA,MACjE;AACA,UAAI,OAAO,eAAe,KAAK;AAC7B,eAAO;AAAA,UACL,OAAO;AAAA,UACP,iBAAiB,OAAO,mBAAmB;AAAA,QAC7C;AAAA,MACF;AACA,aAAO,EAAE,OAAO,oBAAoB,QAAQ,OAAO,SAAS,gBAAgB;AAAA,IAC9E;AAEA,QAAI;AACF,YAAM,EAAE,cAAc,sBAAsB,IAAI,MAAM,OAAO,aAAa;AAC1E,YAAM,QAAQ,aAAa,IAAI,SAAS;AACxC,UAAI,SAAS,MAAM,UAAU;AAC3B,cAAM,mBAAmB,MAAM,UAAU,MAAM,sBAAsB,OAAO,MAAM,QAAQ,CAAC;AAAA,MAC7F;AAAA,IACF,QAAQ;AAAA,IAA2C;AAEnD,WAAO;AAAA,MACL,IAAI;AAAA,MACJ,iBAAiB,OAAO,mBAAmB;AAAA,MAC3C,mBAAmB,OAAO,qBAAqB;AAAA,IACjD;AAAA,EACF;AACF;AAMA,MAAM,wBAAwB,EAAE,OAAO;AAAA,EACrC,UAAU;AAAA,EACV,YAAY,EAAE,OAAO;AAAA,EACrB,WAAW,EAAE,OAAO;AACtB,CAAC;AAED,MAAM,sBAAsB;AAAA,EAC1B,MAAM;AAAA,EACN,aAAa;AAAA;AAAA;AAAA;AAAA,EAIb,aAAa,EAAE,OAAO;AAAA,IACpB,MAAM,EACH,OAAO,EACP,IAAI,CAAC,EACL,IAAI,GAAK,EACT,SAAS,qDAAqD;AAAA,EACnE,CAAC;AAAA,EACD,kBAAkB,CAAC,0BAA0B;AAAA,EAC7C,SAAS,OAAO,OAAyB,QAAqB;AAC5D,yBAAqB,GAAG;AAExB,UAAM,EAAE,MAAM,IAAI,MAAM,iCAAiC,EAAE,UAAU,YAAY,CAAC;AAElF,UAAM,EAAE,eAAe,IAAI,MAAM,OAAO,IAAI;AAE5C,UAAM,SAAS,MAAM;AAAA,MACnB,eAAe;AAAA,QACb;AAAA,QACA,QAAQ;AAAA,QACR,QAAQ;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,QAcR,QAAQ,MAAM;AAAA,QACd,aAAa;AAAA,MACf,CAAC;AAAA,MACD;AAAA,MACA;AAAA,IACF;AAEA,WAAO;AAAA,MACL,UAAU,OAAO,OAAO;AAAA,MACxB,YAAY,KAAK,MAAM,OAAO,OAAO,aAAa,GAAG,IAAI;AAAA,MACzD,WAAW,OAAO,OAAO;AAAA,IAC3B;AAAA,EACF;AACF;AAUO,MAAM,UAA8B;AAAA,EACzC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAEA,IAAO,mBAAQ;",
+  "sourcesContent": ["import { z } from 'zod'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport type { AwilixContainer } from 'awilix'\nimport { runWithCacheTenant } from '@open-mercato/cache'\nimport { findOneWithDecryption, findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { hasFeature } from '@open-mercato/shared/security/features'\nimport { InboxProposal, InboxProposalAction, InboxDiscrepancy } from './data/entities'\nimport { inboxProposalCategoryEnum } from './data/validators'\nimport { executeAction } from './lib/executionEngine'\nimport { resolveConfiguredStructuredModel, withTimeout } from './lib/llmProvider'\nimport { resolveOptionalEventBus } from './lib/eventBus'\n\ntype ToolContext = {\n  tenantId: string | null\n  organizationId: string | null\n  userId: string | null\n  container: AwilixContainer\n  userFeatures: string[]\n  isSuperAdmin: boolean\n}\n\ninterface AiToolDefinition {\n  name: string\n  description: string\n  inputSchema: z.ZodType\n  requiredFeatures?: string[]\n  handler: (input: never, ctx: ToolContext) => Promise<unknown>\n}\n\n// =============================================================================\n// Helpers\n// =============================================================================\n\nfunction requireTenantContext(ctx: ToolContext): { tenantId: string; organizationId: string } {\n  if (!ctx.tenantId || !ctx.organizationId) {\n    throw new Error('Tenant context is required')\n  }\n  return { tenantId: ctx.tenantId, organizationId: ctx.organizationId }\n}\n\nfunction resolveCrossModuleEntities(container: ToolContext['container']) {\n  const entities: Record<string, unknown> = {}\n  const keys = [\n    'CustomerEntity',\n    'SalesOrder',\n    'SalesShipment',\n    'SalesChannel',\n    'Dictionary',\n    'DictionaryEntry',\n  ]\n  for (const key of keys) {\n    try {\n      entities[key] = container.resolve(key)\n    } catch {\n      /* module not available */\n    }\n  }\n  return entities\n}\n\n// =============================================================================\n// inbox_ops_list_proposals \u2014 Query proposals by status, category, date range\n// =============================================================================\n\nconst listProposalsTool = {\n  name: 'inbox_ops_list_proposals',\n  description: `List inbox proposals with optional filters by status, category, and date range.\n\nReturns: total count and an array of proposals with id, summary, status, category, confidence, actionCount, and createdAt.`,\n  inputSchema: z.object({\n    status: z\n      .enum(['pending', 'partial', 'accepted', 'rejected'])\n      .optional()\n      .describe('Filter by proposal status'),\n    category: inboxProposalCategoryEnum\n      .optional()\n      .describe('Filter by email category'),\n    limit: z\n      .number()\n      .int()\n      .min(1)\n      .max(50)\n      .optional()\n      .default(10)\n      .describe('Maximum number of proposals to return (default: 10)'),\n    dateFrom: z\n      .string()\n      .optional()\n      .describe('Filter proposals created on or after this date (ISO 8601)'),\n    dateTo: z\n      .string()\n      .optional()\n      .describe('Filter proposals created on or before this date (ISO 8601)'),\n  }),\n  requiredFeatures: ['inbox_ops.proposals.view'],\n  handler: async (input: { status?: string; category?: string; limit?: number; dateFrom?: string; dateTo?: string }, ctx: ToolContext) => {\n    const scope = requireTenantContext(ctx)\n    const em = ctx.container.resolve<EntityManager>('em').fork()\n\n    const where: Record<string, unknown> = {\n      organizationId: scope.organizationId,\n      tenantId: scope.tenantId,\n      isActive: true,\n      deletedAt: null,\n    }\n\n    if (input.status) {\n      where.status = input.status\n    }\n    if (input.category) {\n      where.category = input.category\n    }\n    if (input.dateFrom || input.dateTo) {\n      const createdAt: Record<string, unknown> = {}\n      if (input.dateFrom) {\n        createdAt.$gte = new Date(input.dateFrom)\n      }\n      if (input.dateTo) {\n        createdAt.$lte = new Date(input.dateTo)\n      }\n      where.createdAt = createdAt\n    }\n\n    const proposals = await findWithDecryption(\n      em,\n      InboxProposal,\n      where,\n      { orderBy: { createdAt: 'DESC' }, limit: input.limit },\n      scope,\n    )\n\n    // Count actions per proposal in a single query\n    const proposalIds = proposals.map((p) => p.id)\n    const actionCountMap = new Map<string, number>()\n\n    if (proposalIds.length > 0) {\n      const actions = await findWithDecryption(\n        em,\n        InboxProposalAction,\n        {\n          proposalId: { $in: proposalIds },\n          deletedAt: null,\n        },\n        undefined,\n        scope,\n      )\n      for (const action of actions) {\n        actionCountMap.set(action.proposalId, (actionCountMap.get(action.proposalId) ?? 0) + 1)\n      }\n    }\n\n    // Get total count for the filter\n    const total = await em.count(InboxProposal, where)\n\n    return {\n      total,\n      proposals: proposals.map((p) => ({\n        id: p.id,\n        summary: p.summary,\n        status: p.status,\n        category: p.category ?? null,\n        confidence: Number(p.confidence),\n        actionCount: actionCountMap.get(p.id) ?? 0,\n        createdAt: p.createdAt.toISOString(),\n      })),\n    }\n  },\n}\n\n// =============================================================================\n// inbox_ops_get_proposal \u2014 Fetch proposal detail with actions and discrepancies\n// =============================================================================\n\nconst getProposalTool = {\n  name: 'inbox_ops_get_proposal',\n  description: `Get full details of an inbox proposal including its actions and discrepancies.\n\nReturns: proposal with id, summary, status, category, confidence, actions array, and discrepancies array.`,\n  inputSchema: z.object({\n    proposalId: z.string().uuid().describe('The UUID of the proposal to retrieve'),\n  }),\n  requiredFeatures: ['inbox_ops.proposals.view'],\n  handler: async (input: { proposalId: string }, ctx: ToolContext) => {\n    const scope = requireTenantContext(ctx)\n    const em = ctx.container.resolve<EntityManager>('em').fork()\n\n    const proposal = await findOneWithDecryption(\n      em,\n      InboxProposal,\n      {\n        id: input.proposalId,\n        organizationId: scope.organizationId,\n        tenantId: scope.tenantId,\n        isActive: true,\n        deletedAt: null,\n      },\n      undefined,\n      scope,\n    )\n\n    if (!proposal) {\n      return { error: 'Proposal not found' }\n    }\n\n    const actions = await findWithDecryption(\n      em,\n      InboxProposalAction,\n      {\n        proposalId: proposal.id,\n        organizationId: scope.organizationId,\n        tenantId: scope.tenantId,\n        deletedAt: null,\n      },\n      { orderBy: { sortOrder: 'ASC' } },\n      scope,\n    )\n\n    const discrepancies = await findWithDecryption(\n      em,\n      InboxDiscrepancy,\n      {\n        proposalId: proposal.id,\n        organizationId: scope.organizationId,\n        tenantId: scope.tenantId,\n      },\n      undefined,\n      scope,\n    )\n\n    return {\n      proposal: {\n        id: proposal.id,\n        summary: proposal.summary,\n        status: proposal.status,\n        category: proposal.category ?? null,\n        confidence: Number(proposal.confidence),\n        actions: actions.map((a) => ({\n          id: a.id,\n          actionType: a.actionType,\n          description: a.description,\n          status: a.status,\n          confidence: Number(a.confidence),\n          requiredFeature: a.requiredFeature ?? null,\n          sortOrder: a.sortOrder,\n          createdEntityId: a.createdEntityId ?? null,\n          createdEntityType: a.createdEntityType ?? null,\n        })),\n        discrepancies: discrepancies.map((d) => ({\n          id: d.id,\n          type: d.type,\n          severity: d.severity,\n          description: d.description,\n          expectedValue: d.expectedValue ?? null,\n          foundValue: d.foundValue ?? null,\n          resolved: d.resolved,\n        })),\n      },\n    }\n  },\n}\n\n// =============================================================================\n// inbox_ops_accept_action \u2014 Accept and execute a specific action\n// =============================================================================\n\nconst acceptActionTool = {\n  name: 'inbox_ops_accept_action',\n  description: `Accept and execute a specific action from an inbox proposal. Creates the entity in the target module (e.g., order, contact).\n\nReturns on success: { ok: true, createdEntityId, createdEntityType }\nReturns on error: error message with appropriate detail.`,\n  inputSchema: z.object({\n    proposalId: z.string().uuid().describe('The UUID of the proposal'),\n    actionId: z.string().uuid().describe('The UUID of the action to accept'),\n  }),\n  requiredFeatures: ['inbox_ops.proposals.manage'],\n  // Accepting an inbox action creates downstream entities (orders, contacts,\n  // etc.) in target modules \u2014 must surface as a write so any agent that\n  // whitelists it routes through the approval card.\n  isMutation: true,\n  handler: async (input: { proposalId: string; actionId: string }, ctx: ToolContext) => {\n    const scope = requireTenantContext(ctx)\n    if (!ctx.userId) {\n      throw new Error('User context is required')\n    }\n\n    const em = ctx.container.resolve<EntityManager>('em').fork()\n\n    const action = await findOneWithDecryption(\n      em,\n      InboxProposalAction,\n      {\n        id: input.actionId,\n        proposalId: input.proposalId,\n        organizationId: scope.organizationId,\n        tenantId: scope.tenantId,\n        deletedAt: null,\n      },\n      undefined,\n      scope,\n    )\n\n    if (!action) {\n      return { error: 'Action not found' }\n    }\n\n    // Check if action was already processed\n    if (action.status !== 'pending' && action.status !== 'failed') {\n      return { error: 'Action already processed', status: action.status }\n    }\n\n    // Check target module permission\n    if (action.requiredFeature) {\n      const featureGranted =\n        ctx.isSuperAdmin || hasFeature(ctx.userFeatures, action.requiredFeature)\n      if (!featureGranted) {\n        return {\n          error: 'Insufficient permissions',\n          requiredFeature: action.requiredFeature,\n        }\n      }\n    }\n\n    const entities = resolveCrossModuleEntities(ctx.container)\n    const eventBus = resolveOptionalEventBus(ctx.container)\n\n    const result = await executeAction(action, {\n      em,\n      userId: ctx.userId,\n      tenantId: scope.tenantId,\n      organizationId: scope.organizationId,\n      eventBus,\n      container: ctx.container,\n      entities: entities as unknown as import('./lib/executionEngine').CrossModuleEntities,\n    })\n\n    if (!result.success) {\n      if (result.statusCode === 409) {\n        return { error: 'Action already processed', status: 'accepted' }\n      }\n      if (result.statusCode === 403) {\n        return {\n          error: 'Insufficient permissions',\n          requiredFeature: action.requiredFeature ?? 'unknown',\n        }\n      }\n      return { error: 'Execution failed', detail: result.error ?? 'Unknown error' }\n    }\n\n    try {\n      const { resolveCache, invalidateCountsCache } = await import('./lib/cache')\n      const cache = resolveCache(ctx.container)\n      if (cache && scope.tenantId) {\n        await runWithCacheTenant(scope.tenantId, () => invalidateCountsCache(cache, scope.tenantId))\n      }\n    } catch { /* cache invalidation is non-critical */ }\n\n    return {\n      ok: true,\n      createdEntityId: result.createdEntityId ?? null,\n      createdEntityType: result.createdEntityType ?? null,\n    }\n  },\n}\n\n// =============================================================================\n// inbox_ops_categorize_email \u2014 Standalone LLM-based text categorization\n// =============================================================================\n\nconst categorizeEmailSchema = z.object({\n  category: inboxProposalCategoryEnum,\n  confidence: z.number(),\n  reasoning: z.string(),\n})\n\nconst categorizeEmailTool = {\n  name: 'inbox_ops_categorize_email',\n  description: `Categorize email or text content using AI. Classifies text into one of: rfq, order, order_update, complaint, shipping_update, inquiry, payment, other.\n\nReturns: { category, confidence (0-1), reasoning }\nInput text is limited to 10,000 characters for cost control.`,\n  inputSchema: z.object({\n    text: z\n      .string()\n      .min(1)\n      .max(10000)\n      .describe('Email or text content to categorize (max 10K chars)'),\n  }),\n  requiredFeatures: ['inbox_ops.proposals.view'],\n  handler: async (input: { text: string }, ctx: ToolContext) => {\n    requireTenantContext(ctx)\n\n    const { model } = await resolveConfiguredStructuredModel({ moduleId: 'inbox_ops' })\n\n    const { generateObject } = await import('ai')\n\n    const result = await withTimeout(\n      generateObject({\n        model,\n        schema: categorizeEmailSchema,\n        system: `You are an email classification agent. Classify the given text into exactly one category:\n- rfq: Request for quotation or pricing inquiry\n- order: New purchase order or order placement\n- order_update: Change or update to an existing order\n- complaint: Customer complaint, dispute, or dissatisfaction\n- shipping_update: Shipment status, tracking, or delivery information\n- inquiry: General question or information request\n- payment: Payment-related (invoice, receipt, payment terms)\n- other: Does not fit any category above\n\nReturn a JSON object with:\n- category: one of the categories above\n- confidence: a number between 0 and 1 indicating how confident you are\n- reasoning: a brief explanation (1-2 sentences) of why this category was chosen`,\n        prompt: input.text,\n        temperature: 0,\n      }),\n      15000,\n      'Email categorization timed out after 15s',\n    )\n\n    return {\n      category: result.object.category,\n      confidence: Math.round(result.object.confidence * 100) / 100,\n      reasoning: result.object.reasoning,\n    }\n  },\n}\n\n// =============================================================================\n// Export\n// =============================================================================\n\n/**\n * All AI tools exported by the inbox_ops module.\n * Discovered by ai-assistant module's generator.\n */\nexport const aiTools: AiToolDefinition[] = [\n  listProposalsTool,\n  getProposalTool,\n  acceptActionTool,\n  categorizeEmailTool,\n]\n\nexport default aiTools\n"],
+  "mappings": "AAAA,SAAS,SAAS;AAGlB,SAAS,0BAA0B;AACnC,SAAS,uBAAuB,0BAA0B;AAC1D,SAAS,kBAAkB;AAC3B,SAAS,eAAe,qBAAqB,wBAAwB;AACrE,SAAS,iCAAiC;AAC1C,SAAS,qBAAqB;AAC9B,SAAS,kCAAkC,mBAAmB;AAC9D,SAAS,+BAA+B;AAuBxC,SAAS,qBAAqB,KAAgE;AAC5F,MAAI,CAAC,IAAI,YAAY,CAAC,IAAI,gBAAgB;AACxC,UAAM,IAAI,MAAM,4BAA4B;AAAA,EAC9C;AACA,SAAO,EAAE,UAAU,IAAI,UAAU,gBAAgB,IAAI,eAAe;AACtE;AAEA,SAAS,2BAA2B,WAAqC;AACvE,QAAM,WAAoC,CAAC;AAC3C,QAAM,OAAO;AAAA,IACX;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACA,aAAW,OAAO,MAAM;AACtB,QAAI;AACF,eAAS,GAAG,IAAI,UAAU,QAAQ,GAAG;AAAA,IACvC,QAAQ;AAAA,IAER;AAAA,EACF;AACA,SAAO;AACT;AAMA,MAAM,oBAAoB;AAAA,EACxB,MAAM;AAAA,EACN,aAAa;AAAA;AAAA;AAAA,EAGb,aAAa,EAAE,OAAO;AAAA,IACpB,QAAQ,EACL,KAAK,CAAC,WAAW,WAAW,YAAY,UAAU,CAAC,EACnD,SAAS,EACT,SAAS,2BAA2B;AAAA,IACvC,UAAU,0BACP,SAAS,EACT,SAAS,0BAA0B;AAAA,IACtC,OAAO,EACJ,OAAO,EACP,IAAI,EACJ,IAAI,CAAC,EACL,IAAI,EAAE,EACN,SAAS,EACT,QAAQ,EAAE,EACV,SAAS,qDAAqD;AAAA,IACjE,UAAU,EACP,OAAO,EACP,SAAS,EACT,SAAS,2DAA2D;AAAA,IACvE,QAAQ,EACL,OAAO,EACP,SAAS,EACT,SAAS,4DAA4D;AAAA,EAC1E,CAAC;AAAA,EACD,kBAAkB,CAAC,0BAA0B;AAAA,EAC7C,SAAS,OAAO,OAAmG,QAAqB;AACtI,UAAM,QAAQ,qBAAqB,GAAG;AACtC,UAAM,KAAK,IAAI,UAAU,QAAuB,IAAI,EAAE,KAAK;AAE3D,UAAM,QAAiC;AAAA,MACrC,gBAAgB,MAAM;AAAA,MACtB,UAAU,MAAM;AAAA,MAChB,UAAU;AAAA,MACV,WAAW;AAAA,IACb;AAEA,QAAI,MAAM,QAAQ;AAChB,YAAM,SAAS,MAAM;AAAA,IACvB;AACA,QAAI,MAAM,UAAU;AAClB,YAAM,WAAW,MAAM;AAAA,IACzB;AACA,QAAI,MAAM,YAAY,MAAM,QAAQ;AAClC,YAAM,YAAqC,CAAC;AAC5C,UAAI,MAAM,UAAU;AAClB,kBAAU,OAAO,IAAI,KAAK,MAAM,QAAQ;AAAA,MAC1C;AACA,UAAI,MAAM,QAAQ;AAChB,kBAAU,OAAO,IAAI,KAAK,MAAM,MAAM;AAAA,MACxC;AACA,YAAM,YAAY;AAAA,IACpB;AAEA,UAAM,YAAY,MAAM;AAAA,MACtB;AAAA,MACA;AAAA,MACA;AAAA,MACA,EAAE,SAAS,EAAE,WAAW,OAAO,GAAG,OAAO,MAAM,MAAM;AAAA,MACrD;AAAA,IACF;AAGA,UAAM,cAAc,UAAU,IAAI,CAAC,MAAM,EAAE,EAAE;AAC7C,UAAM,iBAAiB,oBAAI,IAAoB;AAE/C,QAAI,YAAY,SAAS,GAAG;AAC1B,YAAM,UAAU,MAAM;AAAA,QACpB;AAAA,QACA;AAAA,QACA;AAAA,UACE,YAAY,EAAE,KAAK,YAAY;AAAA,UAC/B,WAAW;AAAA,QACb;AAAA,QACA;AAAA,QACA;AAAA,MACF;AACA,iBAAW,UAAU,SAAS;AAC5B,uBAAe,IAAI,OAAO,aAAa,eAAe,IAAI,OAAO,UAAU,KAAK,KAAK,CAAC;AAAA,MACxF;AAAA,IACF;AAGA,UAAM,QAAQ,MAAM,GAAG,MAAM,eAAe,KAAK;AAEjD,WAAO;AAAA,MACL;AAAA,MACA,WAAW,UAAU,IAAI,CAAC,OAAO;AAAA,QAC/B,IAAI,EAAE;AAAA,QACN,SAAS,EAAE;AAAA,QACX,QAAQ,EAAE;AAAA,QACV,UAAU,EAAE,YAAY;AAAA,QACxB,YAAY,OAAO,EAAE,UAAU;AAAA,QAC/B,aAAa,eAAe,IAAI,EAAE,EAAE,KAAK;AAAA,QACzC,WAAW,EAAE,UAAU,YAAY;AAAA,MACrC,EAAE;AAAA,IACJ;AAAA,EACF;AACF;AAMA,MAAM,kBAAkB;AAAA,EACtB,MAAM;AAAA,EACN,aAAa;AAAA;AAAA;AAAA,EAGb,aAAa,EAAE,OAAO;AAAA,IACpB,YAAY,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,sCAAsC;AAAA,EAC/E,CAAC;AAAA,EACD,kBAAkB,CAAC,0BAA0B;AAAA,EAC7C,SAAS,OAAO,OAA+B,QAAqB;AAClE,UAAM,QAAQ,qBAAqB,GAAG;AACtC,UAAM,KAAK,IAAI,UAAU,QAAuB,IAAI,EAAE,KAAK;AAE3D,UAAM,WAAW,MAAM;AAAA,MACrB;AAAA,MACA;AAAA,MACA;AAAA,QACE,IAAI,MAAM;AAAA,QACV,gBAAgB,MAAM;AAAA,QACtB,UAAU,MAAM;AAAA,QAChB,UAAU;AAAA,QACV,WAAW;AAAA,MACb;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAEA,QAAI,CAAC,UAAU;AACb,aAAO,EAAE,OAAO,qBAAqB;AAAA,IACvC;AAEA,UAAM,UAAU,MAAM;AAAA,MACpB;AAAA,MACA;AAAA,MACA;AAAA,QACE,YAAY,SAAS;AAAA,QACrB,gBAAgB,MAAM;AAAA,QACtB,UAAU,MAAM;AAAA,QAChB,WAAW;AAAA,MACb;AAAA,MACA,EAAE,SAAS,EAAE,WAAW,MAAM,EAAE;AAAA,MAChC;AAAA,IACF;AAEA,UAAM,gBAAgB,MAAM;AAAA,MAC1B;AAAA,MACA;AAAA,MACA;AAAA,QACE,YAAY,SAAS;AAAA,QACrB,gBAAgB,MAAM;AAAA,QACtB,UAAU,MAAM;AAAA,MAClB;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAEA,WAAO;AAAA,MACL,UAAU;AAAA,QACR,IAAI,SAAS;AAAA,QACb,SAAS,SAAS;AAAA,QAClB,QAAQ,SAAS;AAAA,QACjB,UAAU,SAAS,YAAY;AAAA,QAC/B,YAAY,OAAO,SAAS,UAAU;AAAA,QACtC,SAAS,QAAQ,IAAI,CAAC,OAAO;AAAA,UAC3B,IAAI,EAAE;AAAA,UACN,YAAY,EAAE;AAAA,UACd,aAAa,EAAE;AAAA,UACf,QAAQ,EAAE;AAAA,UACV,YAAY,OAAO,EAAE,UAAU;AAAA,UAC/B,iBAAiB,EAAE,mBAAmB;AAAA,UACtC,WAAW,EAAE;AAAA,UACb,iBAAiB,EAAE,mBAAmB;AAAA,UACtC,mBAAmB,EAAE,qBAAqB;AAAA,QAC5C,EAAE;AAAA,QACF,eAAe,cAAc,IAAI,CAAC,OAAO;AAAA,UACvC,IAAI,EAAE;AAAA,UACN,MAAM,EAAE;AAAA,UACR,UAAU,EAAE;AAAA,UACZ,aAAa,EAAE;AAAA,UACf,eAAe,EAAE,iBAAiB;AAAA,UAClC,YAAY,EAAE,cAAc;AAAA,UAC5B,UAAU,EAAE;AAAA,QACd,EAAE;AAAA,MACJ;AAAA,IACF;AAAA,EACF;AACF;AAMA,MAAM,mBAAmB;AAAA,EACvB,MAAM;AAAA,EACN,aAAa;AAAA;AAAA;AAAA;AAAA,EAIb,aAAa,EAAE,OAAO;AAAA,IACpB,YAAY,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,0BAA0B;AAAA,IACjE,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,kCAAkC;AAAA,EACzE,CAAC;AAAA,EACD,kBAAkB,CAAC,4BAA4B;AAAA;AAAA;AAAA;AAAA,EAI/C,YAAY;AAAA,EACZ,SAAS,OAAO,OAAiD,QAAqB;AACpF,UAAM,QAAQ,qBAAqB,GAAG;AACtC,QAAI,CAAC,IAAI,QAAQ;AACf,YAAM,IAAI,MAAM,0BAA0B;AAAA,IAC5C;AAEA,UAAM,KAAK,IAAI,UAAU,QAAuB,IAAI,EAAE,KAAK;AAE3D,UAAM,SAAS,MAAM;AAAA,MACnB;AAAA,MACA;AAAA,MACA;AAAA,QACE,IAAI,MAAM;AAAA,QACV,YAAY,MAAM;AAAA,QAClB,gBAAgB,MAAM;AAAA,QACtB,UAAU,MAAM;AAAA,QAChB,WAAW;AAAA,MACb;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAEA,QAAI,CAAC,QAAQ;AACX,aAAO,EAAE,OAAO,mBAAmB;AAAA,IACrC;AAGA,QAAI,OAAO,WAAW,aAAa,OAAO,WAAW,UAAU;AAC7D,aAAO,EAAE,OAAO,4BAA4B,QAAQ,OAAO,OAAO;AAAA,IACpE;AAGA,QAAI,OAAO,iBAAiB;AAC1B,YAAM,iBACJ,IAAI,gBAAgB,WAAW,IAAI,cAAc,OAAO,eAAe;AACzE,UAAI,CAAC,gBAAgB;AACnB,eAAO;AAAA,UACL,OAAO;AAAA,UACP,iBAAiB,OAAO;AAAA,QAC1B;AAAA,MACF;AAAA,IACF;AAEA,UAAM,WAAW,2BAA2B,IAAI,SAAS;AACzD,UAAM,WAAW,wBAAwB,IAAI,SAAS;AAEtD,UAAM,SAAS,MAAM,cAAc,QAAQ;AAAA,MACzC;AAAA,MACA,QAAQ,IAAI;AAAA,MACZ,UAAU,MAAM;AAAA,MAChB,gBAAgB,MAAM;AAAA,MACtB;AAAA,MACA,WAAW,IAAI;AAAA,MACf;AAAA,IACF,CAAC;AAED,QAAI,CAAC,OAAO,SAAS;AACnB,UAAI,OAAO,eAAe,KAAK;AAC7B,eAAO,EAAE,OAAO,4BAA4B,QAAQ,WAAW;AAAA,MACjE;AACA,UAAI,OAAO,eAAe,KAAK;AAC7B,eAAO;AAAA,UACL,OAAO;AAAA,UACP,iBAAiB,OAAO,mBAAmB;AAAA,QAC7C;AAAA,MACF;AACA,aAAO,EAAE,OAAO,oBAAoB,QAAQ,OAAO,SAAS,gBAAgB;AAAA,IAC9E;AAEA,QAAI;AACF,YAAM,EAAE,cAAc,sBAAsB,IAAI,MAAM,OAAO,aAAa;AAC1E,YAAM,QAAQ,aAAa,IAAI,SAAS;AACxC,UAAI,SAAS,MAAM,UAAU;AAC3B,cAAM,mBAAmB,MAAM,UAAU,MAAM,sBAAsB,OAAO,MAAM,QAAQ,CAAC;AAAA,MAC7F;AAAA,IACF,QAAQ;AAAA,IAA2C;AAEnD,WAAO;AAAA,MACL,IAAI;AAAA,MACJ,iBAAiB,OAAO,mBAAmB;AAAA,MAC3C,mBAAmB,OAAO,qBAAqB;AAAA,IACjD;AAAA,EACF;AACF;AAMA,MAAM,wBAAwB,EAAE,OAAO;AAAA,EACrC,UAAU;AAAA,EACV,YAAY,EAAE,OAAO;AAAA,EACrB,WAAW,EAAE,OAAO;AACtB,CAAC;AAED,MAAM,sBAAsB;AAAA,EAC1B,MAAM;AAAA,EACN,aAAa;AAAA;AAAA;AAAA;AAAA,EAIb,aAAa,EAAE,OAAO;AAAA,IACpB,MAAM,EACH,OAAO,EACP,IAAI,CAAC,EACL,IAAI,GAAK,EACT,SAAS,qDAAqD;AAAA,EACnE,CAAC;AAAA,EACD,kBAAkB,CAAC,0BAA0B;AAAA,EAC7C,SAAS,OAAO,OAAyB,QAAqB;AAC5D,yBAAqB,GAAG;AAExB,UAAM,EAAE,MAAM,IAAI,MAAM,iCAAiC,EAAE,UAAU,YAAY,CAAC;AAElF,UAAM,EAAE,eAAe,IAAI,MAAM,OAAO,IAAI;AAE5C,UAAM,SAAS,MAAM;AAAA,MACnB,eAAe;AAAA,QACb;AAAA,QACA,QAAQ;AAAA,QACR,QAAQ;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,QAcR,QAAQ,MAAM;AAAA,QACd,aAAa;AAAA,MACf,CAAC;AAAA,MACD;AAAA,MACA;AAAA,IACF;AAEA,WAAO;AAAA,MACL,UAAU,OAAO,OAAO;AAAA,MACxB,YAAY,KAAK,MAAM,OAAO,OAAO,aAAa,GAAG,IAAI;AAAA,MACzD,WAAW,OAAO,OAAO;AAAA,IAC3B;AAAA,EACF;AACF;AAUO,MAAM,UAA8B;AAAA,EACzC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAEA,IAAO,mBAAQ;",
   "names": []
 }

package/dist/modules/inbox_ops/api/proposals/[id]/actions/[actionId]/route.js

@@ -1,7 +1,5 @@
 import { NextResponse } from "next/server";
 import { runWithCacheTenant } from "@open-mercato/cache";
-import { enforceCommandOptimisticLockWithGuards } from "@open-mercato/shared/lib/crud/optimistic-lock-command";
-import { isCrudHttpError } from "@open-mercato/shared/lib/crud/errors";
 import {
   runCrudMutationGuardAfterSuccess,
   validateCrudMutationGuard
@@ -34,17 +32,6 @@ async function PATCH(req) {
     if (action.status !== "pending" && action.status !== "failed") {
       return NextResponse.json({ error: "Action already processed" }, { status: 409 });
     }
-    try {
-      await enforceCommandOptimisticLockWithGuards(ctx.container, {
-        resourceKind: "inbox_ops.action",
-        resourceId: action.id,
-        current: action.updatedAt ?? null,
-        request: req
-      });
-    } catch (err) {
-      if (isCrudHttpError(err)) return NextResponse.json(err.body, { status: err.status });
-      throw err;
-    }
     const mergedPayload = { ...action.payload, ...parsed.data.payload };
     const payloadValidation = validateActionPayloadForType(action.actionType, mergedPayload);
     if (!payloadValidation.success) {
@@ -106,7 +93,7 @@ const openApi = {
       responses: [
         { status: 200, description: "Action updated" },
         { status: 404, description: "Action not found" },
-        { status: 409, description: "Action already processed or stale (optimistic-lock conflict)" }
+        { status: 409, description: "Action already processed" }
       ]
     }
   }

package/dist/modules/inbox_ops/api/proposals/[id]/actions/[actionId]/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../../../src/modules/inbox_ops/api/proposals/%5Bid%5D/actions/%5BactionId%5D/route.ts"],
-  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { runWithCacheTenant } from '@open-mercato/cache'\nimport { enforceCommandOptimisticLockWithGuards } from '@open-mercato/shared/lib/crud/optimistic-lock-command'\nimport { isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport {\n  runCrudMutationGuardAfterSuccess,\n  validateCrudMutationGuard,\n} from '@open-mercato/shared/lib/crud/mutation-guard'\nimport { actionEditSchema, validateActionPayloadForType } from '../../../../../data/validators'\nimport { emitInboxOpsEvent } from '../../../../../events'\nimport { resolveCache, invalidateCountsCache } from '../../../../../lib/cache'\nimport {\n  resolveRequestContext,\n  resolveActionAndProposal,\n  handleRouteError,\n  isErrorResponse,\n} from '../../../../routeHelpers'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('inbox_ops').child({ component: 'action-edit' })\n\nexport const metadata = {\n  PATCH: { requireAuth: true, requireFeatures: ['inbox_ops.proposals.manage'] },\n}\n\nexport async function PATCH(req: Request) {\n  try {\n    const body = await req.json()\n    const parsed = actionEditSchema.safeParse(body)\n    if (!parsed.success) {\n      return NextResponse.json({ error: 'Invalid payload', details: parsed.error.issues }, { status: 400 })\n    }\n\n    const ctx = await resolveRequestContext(req)\n    const resolved = await resolveActionAndProposal(new URL(req.url), ctx)\n    if (isErrorResponse(resolved)) return resolved\n\n    const { action } = resolved\n\n    if (action.status !== 'pending' && action.status !== 'failed') {\n      return NextResponse.json({ error: 'Action already processed' }, { status: 409 })\n    }\n\n    // Optimistic lock: refuse a stale overwrite when two tabs edit the same action\n    // payload. Strictly additive \u2014 a no-op without the expected-version header.\n    try {\n      await enforceCommandOptimisticLockWithGuards(ctx.container, {\n        resourceKind: 'inbox_ops.action',\n        resourceId: action.id,\n        current: action.updatedAt ?? null,\n        request: req,\n      })\n    } catch (err) {\n      if (isCrudHttpError(err)) return NextResponse.json(err.body, { status: err.status })\n      throw err\n    }\n\n    const mergedPayload = { ...action.payload as Record<string, unknown>, ...parsed.data.payload }\n    const payloadValidation = validateActionPayloadForType(action.actionType, mergedPayload)\n    if (!payloadValidation.success) {\n      return NextResponse.json({ error: payloadValidation.error }, { status: 400 })\n    }\n\n    const guardResult = await validateCrudMutationGuard(ctx.container, {\n      tenantId: ctx.tenantId,\n      organizationId: ctx.organizationId,\n      userId: ctx.userId,\n      resourceKind: 'inbox_ops:inbox_proposal_action',\n      resourceId: action.id,\n      operation: 'update',\n      requestMethod: req.method,\n      requestHeaders: req.headers,\n      mutationPayload: parsed.data,\n    })\n    if (guardResult && !guardResult.ok) {\n      return NextResponse.json(guardResult.body, { status: guardResult.status })\n    }\n\n    action.payload = mergedPayload\n    await ctx.em.flush()\n\n    if (guardResult?.ok && guardResult.shouldRunAfterSuccess) {\n      await runCrudMutationGuardAfterSuccess(ctx.container, {\n        tenantId: ctx.tenantId,\n        organizationId: ctx.organizationId,\n        userId: ctx.userId,\n        resourceKind: 'inbox_ops:inbox_proposal_action',\n        resourceId: action.id,\n        operation: 'update',\n        requestMethod: req.method,\n        requestHeaders: req.headers,\n        metadata: guardResult.metadata ?? null,\n      })\n    }\n\n    const cache = resolveCache(ctx.container)\n    await runWithCacheTenant(ctx.tenantId, () => invalidateCountsCache(cache, ctx.tenantId))\n\n    try {\n      await emitInboxOpsEvent('inbox_ops.action.edited', {\n        actionId: action.id,\n        proposalId: action.proposalId,\n        actionType: action.actionType,\n        tenantId: ctx.tenantId,\n        organizationId: ctx.organizationId,\n      })\n    } catch (eventError) {\n      logger.error('Failed to emit event', { err: eventError })\n    }\n\n    return NextResponse.json({ ok: true, action })\n  } catch (err) {\n    return handleRouteError(err, 'edit action')\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'InboxOps',\n  summary: 'Edit action',\n  methods: {\n    PATCH: {\n      summary: 'Edit action payload before accepting',\n      responses: [\n        { status: 200, description: 'Action updated' },\n        { status: 404, description: 'Action not found' },\n        { status: 409, description: 'Action already processed or stale (optimistic-lock conflict)' },\n      ],\n    },\n  },\n}\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAE7B,SAAS,0BAA0B;AACnC,SAAS,8CAA8C;AACvD,SAAS,uBAAuB;AAChC;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAS,kBAAkB,oCAAoC;AAC/D,SAAS,yBAAyB;AAClC,SAAS,cAAc,6BAA6B;AACpD;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,WAAW,EAAE,MAAM,EAAE,WAAW,cAAc,CAAC;AAEpE,MAAM,WAAW;AAAA,EACtB,OAAO,EAAE,aAAa,MAAM,iBAAiB,CAAC,4BAA4B,EAAE;AAC9E;AAEA,eAAsB,MAAM,KAAc;AACxC,MAAI;AACF,UAAM,OAAO,MAAM,IAAI,KAAK;AAC5B,UAAM,SAAS,iBAAiB,UAAU,IAAI;AAC9C,QAAI,CAAC,OAAO,SAAS;AACnB,aAAO,aAAa,KAAK,EAAE,OAAO,mBAAmB,SAAS,OAAO,MAAM,OAAO,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACtG;AAEA,UAAM,MAAM,MAAM,sBAAsB,GAAG;AAC3C,UAAM,WAAW,MAAM,yBAAyB,IAAI,IAAI,IAAI,GAAG,GAAG,GAAG;AACrE,QAAI,gBAAgB,QAAQ,EAAG,QAAO;AAEtC,UAAM,EAAE,OAAO,IAAI;AAEnB,QAAI,OAAO,WAAW,aAAa,OAAO,WAAW,UAAU;AAC7D,aAAO,aAAa,KAAK,EAAE,OAAO,2BAA2B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACjF;AAIA,QAAI;AACF,YAAM,uCAAuC,IAAI,WAAW;AAAA,QAC1D,cAAc;AAAA,QACd,YAAY,OAAO;AAAA,QACnB,SAAS,OAAO,aAAa;AAAA,QAC7B,SAAS;AAAA,MACX,CAAC;AAAA,IACH,SAAS,KAAK;AACZ,UAAI,gBAAgB,GAAG,EAAG,QAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AACnF,YAAM;AAAA,IACR;AAEA,UAAM,gBAAgB,EAAE,GAAG,OAAO,SAAoC,GAAG,OAAO,KAAK,QAAQ;AAC7F,UAAM,oBAAoB,6BAA6B,OAAO,YAAY,aAAa;AACvF,QAAI,CAAC,kBAAkB,SAAS;AAC9B,aAAO,aAAa,KAAK,EAAE,OAAO,kBAAkB,MAAM,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC9E;AAEA,UAAM,cAAc,MAAM,0BAA0B,IAAI,WAAW;AAAA,MACjE,UAAU,IAAI;AAAA,MACd,gBAAgB,IAAI;AAAA,MACpB,QAAQ,IAAI;AAAA,MACZ,cAAc;AAAA,MACd,YAAY,OAAO;AAAA,MACnB,WAAW;AAAA,MACX,eAAe,IAAI;AAAA,MACnB,gBAAgB,IAAI;AAAA,MACpB,iBAAiB,OAAO;AAAA,IAC1B,CAAC;AACD,QAAI,eAAe,CAAC,YAAY,IAAI;AAClC,aAAO,aAAa,KAAK,YAAY,MAAM,EAAE,QAAQ,YAAY,OAAO,CAAC;AAAA,IAC3E;AAEA,WAAO,UAAU;AACjB,UAAM,IAAI,GAAG,MAAM;AAEnB,QAAI,aAAa,MAAM,YAAY,uBAAuB;AACxD,YAAM,iCAAiC,IAAI,WAAW;AAAA,QACpD,UAAU,IAAI;AAAA,QACd,gBAAgB,IAAI;AAAA,QACpB,QAAQ,IAAI;AAAA,QACZ,cAAc;AAAA,QACd,YAAY,OAAO;AAAA,QACnB,WAAW;AAAA,QACX,eAAe,IAAI;AAAA,QACnB,gBAAgB,IAAI;AAAA,QACpB,UAAU,YAAY,YAAY;AAAA,MACpC,CAAC;AAAA,IACH;AAEA,UAAM,QAAQ,aAAa,IAAI,SAAS;AACxC,UAAM,mBAAmB,IAAI,UAAU,MAAM,sBAAsB,OAAO,IAAI,QAAQ,CAAC;AAEvF,QAAI;AACF,YAAM,kBAAkB,2BAA2B;AAAA,QACjD,UAAU,OAAO;AAAA,QACjB,YAAY,OAAO;AAAA,QACnB,YAAY,OAAO;AAAA,QACnB,UAAU,IAAI;AAAA,QACd,gBAAgB,IAAI;AAAA,MACtB,CAAC;AAAA,IACH,SAAS,YAAY;AACnB,aAAO,MAAM,wBAAwB,EAAE,KAAK,WAAW,CAAC;AAAA,IAC1D;AAEA,WAAO,aAAa,KAAK,EAAE,IAAI,MAAM,OAAO,CAAC;AAAA,EAC/C,SAAS,KAAK;AACZ,WAAO,iBAAiB,KAAK,aAAa;AAAA,EAC5C;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,OAAO;AAAA,MACL,SAAS;AAAA,MACT,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,iBAAiB;AAAA,QAC7C,EAAE,QAAQ,KAAK,aAAa,mBAAmB;AAAA,QAC/C,EAAE,QAAQ,KAAK,aAAa,+DAA+D;AAAA,MAC7F;AAAA,IACF;AAAA,EACF;AACF;",
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { runWithCacheTenant } from '@open-mercato/cache'\nimport {\n  runCrudMutationGuardAfterSuccess,\n  validateCrudMutationGuard,\n} from '@open-mercato/shared/lib/crud/mutation-guard'\nimport { actionEditSchema, validateActionPayloadForType } from '../../../../../data/validators'\nimport { emitInboxOpsEvent } from '../../../../../events'\nimport { resolveCache, invalidateCountsCache } from '../../../../../lib/cache'\nimport {\n  resolveRequestContext,\n  resolveActionAndProposal,\n  handleRouteError,\n  isErrorResponse,\n} from '../../../../routeHelpers'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('inbox_ops').child({ component: 'action-edit' })\n\nexport const metadata = {\n  PATCH: { requireAuth: true, requireFeatures: ['inbox_ops.proposals.manage'] },\n}\n\nexport async function PATCH(req: Request) {\n  try {\n    const body = await req.json()\n    const parsed = actionEditSchema.safeParse(body)\n    if (!parsed.success) {\n      return NextResponse.json({ error: 'Invalid payload', details: parsed.error.issues }, { status: 400 })\n    }\n\n    const ctx = await resolveRequestContext(req)\n    const resolved = await resolveActionAndProposal(new URL(req.url), ctx)\n    if (isErrorResponse(resolved)) return resolved\n\n    const { action } = resolved\n\n    if (action.status !== 'pending' && action.status !== 'failed') {\n      return NextResponse.json({ error: 'Action already processed' }, { status: 409 })\n    }\n\n    const mergedPayload = { ...action.payload as Record<string, unknown>, ...parsed.data.payload }\n    const payloadValidation = validateActionPayloadForType(action.actionType, mergedPayload)\n    if (!payloadValidation.success) {\n      return NextResponse.json({ error: payloadValidation.error }, { status: 400 })\n    }\n\n    const guardResult = await validateCrudMutationGuard(ctx.container, {\n      tenantId: ctx.tenantId,\n      organizationId: ctx.organizationId,\n      userId: ctx.userId,\n      resourceKind: 'inbox_ops:inbox_proposal_action',\n      resourceId: action.id,\n      operation: 'update',\n      requestMethod: req.method,\n      requestHeaders: req.headers,\n      mutationPayload: parsed.data,\n    })\n    if (guardResult && !guardResult.ok) {\n      return NextResponse.json(guardResult.body, { status: guardResult.status })\n    }\n\n    action.payload = mergedPayload\n    await ctx.em.flush()\n\n    if (guardResult?.ok && guardResult.shouldRunAfterSuccess) {\n      await runCrudMutationGuardAfterSuccess(ctx.container, {\n        tenantId: ctx.tenantId,\n        organizationId: ctx.organizationId,\n        userId: ctx.userId,\n        resourceKind: 'inbox_ops:inbox_proposal_action',\n        resourceId: action.id,\n        operation: 'update',\n        requestMethod: req.method,\n        requestHeaders: req.headers,\n        metadata: guardResult.metadata ?? null,\n      })\n    }\n\n    const cache = resolveCache(ctx.container)\n    await runWithCacheTenant(ctx.tenantId, () => invalidateCountsCache(cache, ctx.tenantId))\n\n    try {\n      await emitInboxOpsEvent('inbox_ops.action.edited', {\n        actionId: action.id,\n        proposalId: action.proposalId,\n        actionType: action.actionType,\n        tenantId: ctx.tenantId,\n        organizationId: ctx.organizationId,\n      })\n    } catch (eventError) {\n      logger.error('Failed to emit event', { err: eventError })\n    }\n\n    return NextResponse.json({ ok: true, action })\n  } catch (err) {\n    return handleRouteError(err, 'edit action')\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'InboxOps',\n  summary: 'Edit action',\n  methods: {\n    PATCH: {\n      summary: 'Edit action payload before accepting',\n      responses: [\n        { status: 200, description: 'Action updated' },\n        { status: 404, description: 'Action not found' },\n        { status: 409, description: 'Action already processed' },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAE7B,SAAS,0BAA0B;AACnC;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAS,kBAAkB,oCAAoC;AAC/D,SAAS,yBAAyB;AAClC,SAAS,cAAc,6BAA6B;AACpD;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,WAAW,EAAE,MAAM,EAAE,WAAW,cAAc,CAAC;AAEpE,MAAM,WAAW;AAAA,EACtB,OAAO,EAAE,aAAa,MAAM,iBAAiB,CAAC,4BAA4B,EAAE;AAC9E;AAEA,eAAsB,MAAM,KAAc;AACxC,MAAI;AACF,UAAM,OAAO,MAAM,IAAI,KAAK;AAC5B,UAAM,SAAS,iBAAiB,UAAU,IAAI;AAC9C,QAAI,CAAC,OAAO,SAAS;AACnB,aAAO,aAAa,KAAK,EAAE,OAAO,mBAAmB,SAAS,OAAO,MAAM,OAAO,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACtG;AAEA,UAAM,MAAM,MAAM,sBAAsB,GAAG;AAC3C,UAAM,WAAW,MAAM,yBAAyB,IAAI,IAAI,IAAI,GAAG,GAAG,GAAG;AACrE,QAAI,gBAAgB,QAAQ,EAAG,QAAO;AAEtC,UAAM,EAAE,OAAO,IAAI;AAEnB,QAAI,OAAO,WAAW,aAAa,OAAO,WAAW,UAAU;AAC7D,aAAO,aAAa,KAAK,EAAE,OAAO,2BAA2B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACjF;AAEA,UAAM,gBAAgB,EAAE,GAAG,OAAO,SAAoC,GAAG,OAAO,KAAK,QAAQ;AAC7F,UAAM,oBAAoB,6BAA6B,OAAO,YAAY,aAAa;AACvF,QAAI,CAAC,kBAAkB,SAAS;AAC9B,aAAO,aAAa,KAAK,EAAE,OAAO,kBAAkB,MAAM,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC9E;AAEA,UAAM,cAAc,MAAM,0BAA0B,IAAI,WAAW;AAAA,MACjE,UAAU,IAAI;AAAA,MACd,gBAAgB,IAAI;AAAA,MACpB,QAAQ,IAAI;AAAA,MACZ,cAAc;AAAA,MACd,YAAY,OAAO;AAAA,MACnB,WAAW;AAAA,MACX,eAAe,IAAI;AAAA,MACnB,gBAAgB,IAAI;AAAA,MACpB,iBAAiB,OAAO;AAAA,IAC1B,CAAC;AACD,QAAI,eAAe,CAAC,YAAY,IAAI;AAClC,aAAO,aAAa,KAAK,YAAY,MAAM,EAAE,QAAQ,YAAY,OAAO,CAAC;AAAA,IAC3E;AAEA,WAAO,UAAU;AACjB,UAAM,IAAI,GAAG,MAAM;AAEnB,QAAI,aAAa,MAAM,YAAY,uBAAuB;AACxD,YAAM,iCAAiC,IAAI,WAAW;AAAA,QACpD,UAAU,IAAI;AAAA,QACd,gBAAgB,IAAI;AAAA,QACpB,QAAQ,IAAI;AAAA,QACZ,cAAc;AAAA,QACd,YAAY,OAAO;AAAA,QACnB,WAAW;AAAA,QACX,eAAe,IAAI;AAAA,QACnB,gBAAgB,IAAI;AAAA,QACpB,UAAU,YAAY,YAAY;AAAA,MACpC,CAAC;AAAA,IACH;AAEA,UAAM,QAAQ,aAAa,IAAI,SAAS;AACxC,UAAM,mBAAmB,IAAI,UAAU,MAAM,sBAAsB,OAAO,IAAI,QAAQ,CAAC;AAEvF,QAAI;AACF,YAAM,kBAAkB,2BAA2B;AAAA,QACjD,UAAU,OAAO;AAAA,QACjB,YAAY,OAAO;AAAA,QACnB,YAAY,OAAO;AAAA,QACnB,UAAU,IAAI;AAAA,QACd,gBAAgB,IAAI;AAAA,MACtB,CAAC;AAAA,IACH,SAAS,YAAY;AACnB,aAAO,MAAM,wBAAwB,EAAE,KAAK,WAAW,CAAC;AAAA,IAC1D;AAEA,WAAO,aAAa,KAAK,EAAE,IAAI,MAAM,OAAO,CAAC;AAAA,EAC/C,SAAS,KAAK;AACZ,WAAO,iBAAiB,KAAK,aAAa;AAAA,EAC5C;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,OAAO;AAAA,MACL,SAAS;AAAA,MACT,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,iBAAiB;AAAA,QAC7C,EAAE,QAAQ,KAAK,aAAa,mBAAmB;AAAA,QAC/C,EAAE,QAAQ,KAAK,aAAa,2BAA2B;AAAA,MACzD;AAAA,IACF;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/modules/inbox_ops/api/proposals/route.js

@@ -2,8 +2,6 @@ import { NextResponse } from "next/server";
 import { ZodError } from "zod";
 import { findAndCountWithDecryption, findWithDecryption } from "@open-mercato/shared/lib/encryption/find";
 import { escapeLikePattern } from "@open-mercato/shared/lib/db/escapeLikePattern";
-import { findEntityIdsBySearchTokens } from "@open-mercato/shared/lib/search/tokenLookup";
-import { E } from "../../../../generated/entities.ids.generated.js";
 import { InboxProposal, InboxEmail, InboxProposalAction, InboxDiscrepancy } from "../../data/entities.js";
 import { proposalListQuerySchema } from "../../data/validators.js";
 import { resolveRequestContext, UnauthorizedError } from "../routeHelpers.js";
@@ -41,20 +39,7 @@ async function GET(req) {
       }
     }
     if (query.search) {
-      const searchOr = [
-        { summary: { $ilike: `%${escapeLikePattern(query.search)}%` } }
-      ];
-      const tokenMatch = await findEntityIdsBySearchTokens({
-        db: ctx.em.getKysely(),
-        entityType: E.inbox_ops.inbox_proposal,
-        query: query.search,
-        fields: ["summary"],
-        scope: { tenantId: ctx.tenantId, organizationId: ctx.organizationId }
-      });
-      if (tokenMatch.matched && tokenMatch.ids.length) {
-        searchOr.push({ id: { $in: tokenMatch.ids } });
-      }
-      where.$or = searchOr;
+      where.summary = { $ilike: `%${escapeLikePattern(query.search)}%` };
     }
     const offset = (query.page - 1) * query.pageSize;
     const [items, total] = await findAndCountWithDecryption(

package/dist/modules/inbox_ops/api/proposals/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../src/modules/inbox_ops/api/proposals/route.ts"],
-  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { ZodError } from 'zod'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport type { FilterQuery } from '@mikro-orm/postgresql'\nimport { findAndCountWithDecryption, findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { escapeLikePattern } from '@open-mercato/shared/lib/db/escapeLikePattern'\nimport { findEntityIdsBySearchTokens, type SearchTokenDatabase } from '@open-mercato/shared/lib/search/tokenLookup'\nimport { E } from '#generated/entities.ids.generated'\nimport { InboxProposal, InboxEmail, InboxProposalAction, InboxDiscrepancy, type InboxProposalCategory } from '../../data/entities'\nimport { proposalListQuerySchema } from '../../data/validators'\nimport { resolveRequestContext, UnauthorizedError } from '../routeHelpers'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('inbox_ops').child({ component: 'proposals' })\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['inbox_ops.proposals.view'] },\n}\n\nexport async function GET(req: Request) {\n  try {\n    const url = new URL(req.url)\n    const query = proposalListQuerySchema.parse({\n      status: url.searchParams.get('status') || undefined,\n      category: url.searchParams.get('category') || undefined,\n      search: url.searchParams.get('search') || undefined,\n      page: url.searchParams.get('page') || undefined,\n      pageSize: url.searchParams.get('pageSize') || undefined,\n    })\n\n    const ctx = await resolveRequestContext(req)\n\n    const where: FilterQuery<InboxProposal> = {\n      organizationId: ctx.organizationId,\n      tenantId: ctx.tenantId,\n      deletedAt: null,\n      isActive: true,\n    }\n\n    if (query.status) {\n      where.status = query.status\n    }\n    if (query.category) {\n      const categories = query.category.split(',').map((c) => c.trim()).filter(Boolean) as InboxProposalCategory[]\n      if (categories.length === 1) {\n        where.category = categories[0]\n      } else if (categories.length > 1) {\n        where.category = { $in: categories }\n      }\n    }\n    if (query.search) {\n      // `summary` is covered by the inbox_ops encryption map, so an ILIKE alone\n      // compares the pattern against ciphertext and matches nothing once\n      // encryption is on. Union it with the token index, which stores hashes of\n      // the plaintext. Issue #2990.\n      const searchOr: FilterQuery<InboxProposal>[] = [\n        { summary: { $ilike: `%${escapeLikePattern(query.search)}%` } },\n      ]\n      const tokenMatch = await findEntityIdsBySearchTokens({\n        db: ctx.em.getKysely<SearchTokenDatabase>(),\n        entityType: E.inbox_ops.inbox_proposal,\n        query: query.search,\n        fields: ['summary'],\n        scope: { tenantId: ctx.tenantId, organizationId: ctx.organizationId },\n      })\n      if (tokenMatch.matched && tokenMatch.ids.length) {\n        searchOr.push({ id: { $in: tokenMatch.ids } })\n      }\n      where.$or = searchOr\n    }\n\n    const offset = (query.page - 1) * query.pageSize\n\n    const [items, total] = await findAndCountWithDecryption(\n      ctx.em,\n      InboxProposal,\n      where,\n      {\n        limit: query.pageSize,\n        offset,\n        orderBy: { createdAt: 'DESC' },\n      },\n      ctx.scope,\n    )\n\n    // Enrich proposals with email, action, and discrepancy data\n    const proposalIds = items.map((p) => p.id)\n    const emailIds = [...new Set(items.map((p) => p.inboxEmailId).filter(Boolean))]\n\n    const [emails, allActions, allDiscrepancies] = await Promise.all([\n      emailIds.length > 0\n        ? findWithDecryption(ctx.em, InboxEmail, { id: { $in: emailIds }, organizationId: ctx.organizationId, tenantId: ctx.tenantId }, {}, ctx.scope)\n        : Promise.resolve([] as InboxEmail[]),\n      proposalIds.length > 0\n        ? findWithDecryption(ctx.em, InboxProposalAction, { proposalId: { $in: proposalIds }, organizationId: ctx.organizationId, tenantId: ctx.tenantId, deletedAt: null }, {}, ctx.scope)\n        : Promise.resolve([] as InboxProposalAction[]),\n      proposalIds.length > 0\n        ? findWithDecryption(ctx.em, InboxDiscrepancy, { proposalId: { $in: proposalIds }, organizationId: ctx.organizationId, tenantId: ctx.tenantId, resolved: false }, {}, ctx.scope)\n        : Promise.resolve([] as InboxDiscrepancy[]),\n    ])\n\n    const emailMap = new Map(emails.map((e) => [e.id, e]))\n\n    const enrichedItems = items.map((proposal) => {\n      const email = emailMap.get(proposal.inboxEmailId)\n      const proposalActions = allActions.filter((a) => a.proposalId === proposal.id)\n      const proposalDiscrepancies = allDiscrepancies.filter((d) => d.proposalId === proposal.id)\n\n      return {\n        ...proposal,\n        actionCount: proposalActions.length,\n        pendingActionCount: proposalActions.filter((a) => a.status === 'pending').length,\n        discrepancyCount: proposalDiscrepancies.length,\n        emailSubject: email?.subject || null,\n        emailFrom: email?.forwardedByName || email?.forwardedByAddress || null,\n        receivedAt: email?.receivedAt || proposal.createdAt,\n      }\n    })\n\n    return NextResponse.json({\n      items: enrichedItems,\n      total,\n      page: query.page,\n      pageSize: query.pageSize,\n      totalPages: Math.ceil(total / query.pageSize),\n    })\n  } catch (err) {\n    if (err instanceof ZodError) {\n      return NextResponse.json({ error: 'Invalid query parameters' }, { status: 400 })\n    }\n    if (err instanceof UnauthorizedError) {\n      return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n    }\n    logger.error('Failed to list proposals', { err })\n    return NextResponse.json({ error: 'Failed to list proposals' }, { status: 500 })\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'InboxOps',\n  summary: 'Proposals',\n  methods: {\n    GET: {\n      summary: 'List proposals',\n      description: 'List inbox proposals with optional status filter and pagination',\n      responses: [\n        { status: 200, description: 'Paginated list of proposals' },\n        { status: 401, description: 'Unauthorized' },\n      ],\n    },\n  },\n}\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,gBAAgB;AAGzB,SAAS,4BAA4B,0BAA0B;AAC/D,SAAS,yBAAyB;AAClC,SAAS,mCAA6D;AACtE,SAAS,SAAS;AAClB,SAAS,eAAe,YAAY,qBAAqB,wBAAoD;AAC7G,SAAS,+BAA+B;AACxC,SAAS,uBAAuB,yBAAyB;AACzD,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,WAAW,EAAE,MAAM,EAAE,WAAW,YAAY,CAAC;AAElE,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,0BAA0B,EAAE;AAC1E;AAEA,eAAsB,IAAI,KAAc;AACtC,MAAI;AACF,UAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAC3B,UAAM,QAAQ,wBAAwB,MAAM;AAAA,MAC1C,QAAQ,IAAI,aAAa,IAAI,QAAQ,KAAK;AAAA,MAC1C,UAAU,IAAI,aAAa,IAAI,UAAU,KAAK;AAAA,MAC9C,QAAQ,IAAI,aAAa,IAAI,QAAQ,KAAK;AAAA,MAC1C,MAAM,IAAI,aAAa,IAAI,MAAM,KAAK;AAAA,MACtC,UAAU,IAAI,aAAa,IAAI,UAAU,KAAK;AAAA,IAChD,CAAC;AAED,UAAM,MAAM,MAAM,sBAAsB,GAAG;AAE3C,UAAM,QAAoC;AAAA,MACxC,gBAAgB,IAAI;AAAA,MACpB,UAAU,IAAI;AAAA,MACd,WAAW;AAAA,MACX,UAAU;AAAA,IACZ;AAEA,QAAI,MAAM,QAAQ;AAChB,YAAM,SAAS,MAAM;AAAA,IACvB;AACA,QAAI,MAAM,UAAU;AAClB,YAAM,aAAa,MAAM,SAAS,MAAM,GAAG,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO,OAAO;AAChF,UAAI,WAAW,WAAW,GAAG;AAC3B,cAAM,WAAW,WAAW,CAAC;AAAA,MAC/B,WAAW,WAAW,SAAS,GAAG;AAChC,cAAM,WAAW,EAAE,KAAK,WAAW;AAAA,MACrC;AAAA,IACF;AACA,QAAI,MAAM,QAAQ;AAKhB,YAAM,WAAyC;AAAA,QAC7C,EAAE,SAAS,EAAE,QAAQ,IAAI,kBAAkB,MAAM,MAAM,CAAC,IAAI,EAAE;AAAA,MAChE;AACA,YAAM,aAAa,MAAM,4BAA4B;AAAA,QACnD,IAAI,IAAI,GAAG,UAA+B;AAAA,QAC1C,YAAY,EAAE,UAAU;AAAA,QACxB,OAAO,MAAM;AAAA,QACb,QAAQ,CAAC,SAAS;AAAA,QAClB,OAAO,EAAE,UAAU,IAAI,UAAU,gBAAgB,IAAI,eAAe;AAAA,MACtE,CAAC;AACD,UAAI,WAAW,WAAW,WAAW,IAAI,QAAQ;AAC/C,iBAAS,KAAK,EAAE,IAAI,EAAE,KAAK,WAAW,IAAI,EAAE,CAAC;AAAA,MAC/C;AACA,YAAM,MAAM;AAAA,IACd;AAEA,UAAM,UAAU,MAAM,OAAO,KAAK,MAAM;AAExC,UAAM,CAAC,OAAO,KAAK,IAAI,MAAM;AAAA,MAC3B,IAAI;AAAA,MACJ;AAAA,MACA;AAAA,MACA;AAAA,QACE,OAAO,MAAM;AAAA,QACb;AAAA,QACA,SAAS,EAAE,WAAW,OAAO;AAAA,MAC/B;AAAA,MACA,IAAI;AAAA,IACN;AAGA,UAAM,cAAc,MAAM,IAAI,CAAC,MAAM,EAAE,EAAE;AACzC,UAAM,WAAW,CAAC,GAAG,IAAI,IAAI,MAAM,IAAI,CAAC,MAAM,EAAE,YAAY,EAAE,OAAO,OAAO,CAAC,CAAC;AAE9E,UAAM,CAAC,QAAQ,YAAY,gBAAgB,IAAI,MAAM,QAAQ,IAAI;AAAA,MAC/D,SAAS,SAAS,IACd,mBAAmB,IAAI,IAAI,YAAY,EAAE,IAAI,EAAE,KAAK,SAAS,GAAG,gBAAgB,IAAI,gBAAgB,UAAU,IAAI,SAAS,GAAG,CAAC,GAAG,IAAI,KAAK,IAC3I,QAAQ,QAAQ,CAAC,CAAiB;AAAA,MACtC,YAAY,SAAS,IACjB,mBAAmB,IAAI,IAAI,qBAAqB,EAAE,YAAY,EAAE,KAAK,YAAY,GAAG,gBAAgB,IAAI,gBAAgB,UAAU,IAAI,UAAU,WAAW,KAAK,GAAG,CAAC,GAAG,IAAI,KAAK,IAChL,QAAQ,QAAQ,CAAC,CAA0B;AAAA,MAC/C,YAAY,SAAS,IACjB,mBAAmB,IAAI,IAAI,kBAAkB,EAAE,YAAY,EAAE,KAAK,YAAY,GAAG,gBAAgB,IAAI,gBAAgB,UAAU,IAAI,UAAU,UAAU,MAAM,GAAG,CAAC,GAAG,IAAI,KAAK,IAC7K,QAAQ,QAAQ,CAAC,CAAuB;AAAA,IAC9C,CAAC;AAED,UAAM,WAAW,IAAI,IAAI,OAAO,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;AAErD,UAAM,gBAAgB,MAAM,IAAI,CAAC,aAAa;AAC5C,YAAM,QAAQ,SAAS,IAAI,SAAS,YAAY;AAChD,YAAM,kBAAkB,WAAW,OAAO,CAAC,MAAM,EAAE,eAAe,SAAS,EAAE;AAC7E,YAAM,wBAAwB,iBAAiB,OAAO,CAAC,MAAM,EAAE,eAAe,SAAS,EAAE;AAEzF,aAAO;AAAA,QACL,GAAG;AAAA,QACH,aAAa,gBAAgB;AAAA,QAC7B,oBAAoB,gBAAgB,OAAO,CAAC,MAAM,EAAE,WAAW,SAAS,EAAE;AAAA,QAC1E,kBAAkB,sBAAsB;AAAA,QACxC,cAAc,OAAO,WAAW;AAAA,QAChC,WAAW,OAAO,mBAAmB,OAAO,sBAAsB;AAAA,QAClE,YAAY,OAAO,cAAc,SAAS;AAAA,MAC5C;AAAA,IACF,CAAC;AAED,WAAO,aAAa,KAAK;AAAA,MACvB,OAAO;AAAA,MACP;AAAA,MACA,MAAM,MAAM;AAAA,MACZ,UAAU,MAAM;AAAA,MAChB,YAAY,KAAK,KAAK,QAAQ,MAAM,QAAQ;AAAA,IAC9C,CAAC;AAAA,EACH,SAAS,KAAK;AACZ,QAAI,eAAe,UAAU;AAC3B,aAAO,aAAa,KAAK,EAAE,OAAO,2BAA2B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACjF;AACA,QAAI,eAAe,mBAAmB;AACpC,aAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACrE;AACA,WAAO,MAAM,4BAA4B,EAAE,IAAI,CAAC;AAChD,WAAO,aAAa,KAAK,EAAE,OAAO,2BAA2B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACjF;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,aAAa;AAAA,MACb,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,8BAA8B;AAAA,QAC1D,EAAE,QAAQ,KAAK,aAAa,eAAe;AAAA,MAC7C;AAAA,IACF;AAAA,EACF;AACF;",
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { ZodError } from 'zod'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport type { FilterQuery } from '@mikro-orm/postgresql'\nimport { findAndCountWithDecryption, findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { escapeLikePattern } from '@open-mercato/shared/lib/db/escapeLikePattern'\nimport { InboxProposal, InboxEmail, InboxProposalAction, InboxDiscrepancy, type InboxProposalCategory } from '../../data/entities'\nimport { proposalListQuerySchema } from '../../data/validators'\nimport { resolveRequestContext, UnauthorizedError } from '../routeHelpers'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('inbox_ops').child({ component: 'proposals' })\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['inbox_ops.proposals.view'] },\n}\n\nexport async function GET(req: Request) {\n  try {\n    const url = new URL(req.url)\n    const query = proposalListQuerySchema.parse({\n      status: url.searchParams.get('status') || undefined,\n      category: url.searchParams.get('category') || undefined,\n      search: url.searchParams.get('search') || undefined,\n      page: url.searchParams.get('page') || undefined,\n      pageSize: url.searchParams.get('pageSize') || undefined,\n    })\n\n    const ctx = await resolveRequestContext(req)\n\n    const where: FilterQuery<InboxProposal> = {\n      organizationId: ctx.organizationId,\n      tenantId: ctx.tenantId,\n      deletedAt: null,\n      isActive: true,\n    }\n\n    if (query.status) {\n      where.status = query.status\n    }\n    if (query.category) {\n      const categories = query.category.split(',').map((c) => c.trim()).filter(Boolean) as InboxProposalCategory[]\n      if (categories.length === 1) {\n        where.category = categories[0]\n      } else if (categories.length > 1) {\n        where.category = { $in: categories }\n      }\n    }\n    if (query.search) {\n      where.summary = { $ilike: `%${escapeLikePattern(query.search)}%` }\n    }\n\n    const offset = (query.page - 1) * query.pageSize\n\n    const [items, total] = await findAndCountWithDecryption(\n      ctx.em,\n      InboxProposal,\n      where,\n      {\n        limit: query.pageSize,\n        offset,\n        orderBy: { createdAt: 'DESC' },\n      },\n      ctx.scope,\n    )\n\n    // Enrich proposals with email, action, and discrepancy data\n    const proposalIds = items.map((p) => p.id)\n    const emailIds = [...new Set(items.map((p) => p.inboxEmailId).filter(Boolean))]\n\n    const [emails, allActions, allDiscrepancies] = await Promise.all([\n      emailIds.length > 0\n        ? findWithDecryption(ctx.em, InboxEmail, { id: { $in: emailIds }, organizationId: ctx.organizationId, tenantId: ctx.tenantId }, {}, ctx.scope)\n        : Promise.resolve([] as InboxEmail[]),\n      proposalIds.length > 0\n        ? findWithDecryption(ctx.em, InboxProposalAction, { proposalId: { $in: proposalIds }, organizationId: ctx.organizationId, tenantId: ctx.tenantId, deletedAt: null }, {}, ctx.scope)\n        : Promise.resolve([] as InboxProposalAction[]),\n      proposalIds.length > 0\n        ? findWithDecryption(ctx.em, InboxDiscrepancy, { proposalId: { $in: proposalIds }, organizationId: ctx.organizationId, tenantId: ctx.tenantId, resolved: false }, {}, ctx.scope)\n        : Promise.resolve([] as InboxDiscrepancy[]),\n    ])\n\n    const emailMap = new Map(emails.map((e) => [e.id, e]))\n\n    const enrichedItems = items.map((proposal) => {\n      const email = emailMap.get(proposal.inboxEmailId)\n      const proposalActions = allActions.filter((a) => a.proposalId === proposal.id)\n      const proposalDiscrepancies = allDiscrepancies.filter((d) => d.proposalId === proposal.id)\n\n      return {\n        ...proposal,\n        actionCount: proposalActions.length,\n        pendingActionCount: proposalActions.filter((a) => a.status === 'pending').length,\n        discrepancyCount: proposalDiscrepancies.length,\n        emailSubject: email?.subject || null,\n        emailFrom: email?.forwardedByName || email?.forwardedByAddress || null,\n        receivedAt: email?.receivedAt || proposal.createdAt,\n      }\n    })\n\n    return NextResponse.json({\n      items: enrichedItems,\n      total,\n      page: query.page,\n      pageSize: query.pageSize,\n      totalPages: Math.ceil(total / query.pageSize),\n    })\n  } catch (err) {\n    if (err instanceof ZodError) {\n      return NextResponse.json({ error: 'Invalid query parameters' }, { status: 400 })\n    }\n    if (err instanceof UnauthorizedError) {\n      return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n    }\n    logger.error('Failed to list proposals', { err })\n    return NextResponse.json({ error: 'Failed to list proposals' }, { status: 500 })\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'InboxOps',\n  summary: 'Proposals',\n  methods: {\n    GET: {\n      summary: 'List proposals',\n      description: 'List inbox proposals with optional status filter and pagination',\n      responses: [\n        { status: 200, description: 'Paginated list of proposals' },\n        { status: 401, description: 'Unauthorized' },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,gBAAgB;AAGzB,SAAS,4BAA4B,0BAA0B;AAC/D,SAAS,yBAAyB;AAClC,SAAS,eAAe,YAAY,qBAAqB,wBAAoD;AAC7G,SAAS,+BAA+B;AACxC,SAAS,uBAAuB,yBAAyB;AACzD,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,WAAW,EAAE,MAAM,EAAE,WAAW,YAAY,CAAC;AAElE,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,0BAA0B,EAAE;AAC1E;AAEA,eAAsB,IAAI,KAAc;AACtC,MAAI;AACF,UAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAC3B,UAAM,QAAQ,wBAAwB,MAAM;AAAA,MAC1C,QAAQ,IAAI,aAAa,IAAI,QAAQ,KAAK;AAAA,MAC1C,UAAU,IAAI,aAAa,IAAI,UAAU,KAAK;AAAA,MAC9C,QAAQ,IAAI,aAAa,IAAI,QAAQ,KAAK;AAAA,MAC1C,MAAM,IAAI,aAAa,IAAI,MAAM,KAAK;AAAA,MACtC,UAAU,IAAI,aAAa,IAAI,UAAU,KAAK;AAAA,IAChD,CAAC;AAED,UAAM,MAAM,MAAM,sBAAsB,GAAG;AAE3C,UAAM,QAAoC;AAAA,MACxC,gBAAgB,IAAI;AAAA,MACpB,UAAU,IAAI;AAAA,MACd,WAAW;AAAA,MACX,UAAU;AAAA,IACZ;AAEA,QAAI,MAAM,QAAQ;AAChB,YAAM,SAAS,MAAM;AAAA,IACvB;AACA,QAAI,MAAM,UAAU;AAClB,YAAM,aAAa,MAAM,SAAS,MAAM,GAAG,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO,OAAO;AAChF,UAAI,WAAW,WAAW,GAAG;AAC3B,cAAM,WAAW,WAAW,CAAC;AAAA,MAC/B,WAAW,WAAW,SAAS,GAAG;AAChC,cAAM,WAAW,EAAE,KAAK,WAAW;AAAA,MACrC;AAAA,IACF;AACA,QAAI,MAAM,QAAQ;AAChB,YAAM,UAAU,EAAE,QAAQ,IAAI,kBAAkB,MAAM,MAAM,CAAC,IAAI;AAAA,IACnE;AAEA,UAAM,UAAU,MAAM,OAAO,KAAK,MAAM;AAExC,UAAM,CAAC,OAAO,KAAK,IAAI,MAAM;AAAA,MAC3B,IAAI;AAAA,MACJ;AAAA,MACA;AAAA,MACA;AAAA,QACE,OAAO,MAAM;AAAA,QACb;AAAA,QACA,SAAS,EAAE,WAAW,OAAO;AAAA,MAC/B;AAAA,MACA,IAAI;AAAA,IACN;AAGA,UAAM,cAAc,MAAM,IAAI,CAAC,MAAM,EAAE,EAAE;AACzC,UAAM,WAAW,CAAC,GAAG,IAAI,IAAI,MAAM,IAAI,CAAC,MAAM,EAAE,YAAY,EAAE,OAAO,OAAO,CAAC,CAAC;AAE9E,UAAM,CAAC,QAAQ,YAAY,gBAAgB,IAAI,MAAM,QAAQ,IAAI;AAAA,MAC/D,SAAS,SAAS,IACd,mBAAmB,IAAI,IAAI,YAAY,EAAE,IAAI,EAAE,KAAK,SAAS,GAAG,gBAAgB,IAAI,gBAAgB,UAAU,IAAI,SAAS,GAAG,CAAC,GAAG,IAAI,KAAK,IAC3I,QAAQ,QAAQ,CAAC,CAAiB;AAAA,MACtC,YAAY,SAAS,IACjB,mBAAmB,IAAI,IAAI,qBAAqB,EAAE,YAAY,EAAE,KAAK,YAAY,GAAG,gBAAgB,IAAI,gBAAgB,UAAU,IAAI,UAAU,WAAW,KAAK,GAAG,CAAC,GAAG,IAAI,KAAK,IAChL,QAAQ,QAAQ,CAAC,CAA0B;AAAA,MAC/C,YAAY,SAAS,IACjB,mBAAmB,IAAI,IAAI,kBAAkB,EAAE,YAAY,EAAE,KAAK,YAAY,GAAG,gBAAgB,IAAI,gBAAgB,UAAU,IAAI,UAAU,UAAU,MAAM,GAAG,CAAC,GAAG,IAAI,KAAK,IAC7K,QAAQ,QAAQ,CAAC,CAAuB;AAAA,IAC9C,CAAC;AAED,UAAM,WAAW,IAAI,IAAI,OAAO,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;AAErD,UAAM,gBAAgB,MAAM,IAAI,CAAC,aAAa;AAC5C,YAAM,QAAQ,SAAS,IAAI,SAAS,YAAY;AAChD,YAAM,kBAAkB,WAAW,OAAO,CAAC,MAAM,EAAE,eAAe,SAAS,EAAE;AAC7E,YAAM,wBAAwB,iBAAiB,OAAO,CAAC,MAAM,EAAE,eAAe,SAAS,EAAE;AAEzF,aAAO;AAAA,QACL,GAAG;AAAA,QACH,aAAa,gBAAgB;AAAA,QAC7B,oBAAoB,gBAAgB,OAAO,CAAC,MAAM,EAAE,WAAW,SAAS,EAAE;AAAA,QAC1E,kBAAkB,sBAAsB;AAAA,QACxC,cAAc,OAAO,WAAW;AAAA,QAChC,WAAW,OAAO,mBAAmB,OAAO,sBAAsB;AAAA,QAClE,YAAY,OAAO,cAAc,SAAS;AAAA,MAC5C;AAAA,IACF,CAAC;AAED,WAAO,aAAa,KAAK;AAAA,MACvB,OAAO;AAAA,MACP;AAAA,MACA,MAAM,MAAM;AAAA,MACZ,UAAU,MAAM;AAAA,MAChB,YAAY,KAAK,KAAK,QAAQ,MAAM,QAAQ;AAAA,IAC9C,CAAC;AAAA,EACH,SAAS,KAAK;AACZ,QAAI,eAAe,UAAU;AAC3B,aAAO,aAAa,KAAK,EAAE,OAAO,2BAA2B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACjF;AACA,QAAI,eAAe,mBAAmB;AACpC,aAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACrE;AACA,WAAO,MAAM,4BAA4B,EAAE,IAAI,CAAC;AAChD,WAAO,aAAa,KAAK,EAAE,OAAO,2BAA2B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACjF;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,aAAa;AAAA,MACb,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,8BAA8B;AAAA,QAC1D,EAAE,QAAQ,KAAK,aAAa,eAAe;AAAA,MAC7C;AAAA,IACF;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/modules/inbox_ops/api/webhook/inbound.js

@@ -10,19 +10,11 @@ import { parseInboundEmail } from "../../lib/emailParser.js";
 import { checkRateLimit } from "../../lib/rateLimiter.js";
 import { emitInboxOpsEvent } from "../../events.js";
 import { createLogger } from "@open-mercato/shared/lib/logger";
-import {
-  readBoundedRequestBody,
-  resolveWebhookBodyLimitBytes,
-  WebhookBodyTooLargeError
-} from "@open-mercato/shared/lib/webhooks";
 const logger = createLogger("inbox_ops").child({ component: "webhook" });
 const metadata = {
   POST: { requireAuth: false }
 };
-const MAX_PAYLOAD_SIZE = resolveWebhookBodyLimitBytes(
-  process.env.INBOX_OPS_WEBHOOK_MAX_BODY_BYTES ?? process.env.OM_WEBHOOK_MAX_BODY_BYTES,
-  2 * 1024 * 1024
-);
+const MAX_PAYLOAD_SIZE = 2 * 1024 * 1024;
 const REPLAY_WINDOW_MS = 5 * 60 * 1e3;
 function isTimestampFresh(timestamp) {
   if (!timestamp) return false;
@@ -148,15 +140,19 @@ async function POST(req) {
     logger.error("Neither INBOX_OPS_WEBHOOK_SECRET nor RESEND_WEBHOOK_SIGNING_SECRET is configured");
     return NextResponse.json({ error: "Service unavailable" }, { status: 503 });
   }
+  const contentLength = parseInt(req.headers.get("content-length") || "0", 10);
+  if (contentLength > MAX_PAYLOAD_SIZE) {
+    return NextResponse.json({ error: "Payload too large" }, { status: 413 });
+  }
   let rawBody;
   try {
-    rawBody = await readBoundedRequestBody(req, { maxBytes: MAX_PAYLOAD_SIZE });
-  } catch (error) {
-    if (error instanceof WebhookBodyTooLargeError) {
-      return NextResponse.json({ error: "Payload too large" }, { status: 413 });
-    }
+    rawBody = await req.text();
+  } catch {
     return NextResponse.json({ error: "Bad request" }, { status: 400 });
   }
+  if (rawBody.length > MAX_PAYLOAD_SIZE) {
+    return NextResponse.json({ error: "Payload too large" }, { status: 413 });
+  }
   const verified = await verifyAndParse(req, rawBody);
   if (!verified.ok) {
     return verified.response;