npm - @open-mercato/core - Versions diffs - 0.6.8-develop.6998.1.d2bc46c56c → 0.6.8-develop.7000.1.0ae682bad1 - Mend

@open-mercato/core 0.6.8-develop.6998.1.d2bc46c56c → 0.6.8-develop.7000.1.0ae682bad1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (636) hide show

package/dist/modules/data_sync/lib/sync-engine.js.map CHANGED Viewed

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/data_sync/lib/sync-engine.ts"],
-  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport { getIntegration } from '@open-mercato/shared/modules/integrations/types'\nimport type { CredentialsService } from '../../integrations/lib/credentials-service'\nimport type { IntegrationLogService } from '../../integrations/lib/log-service'\nimport type { IntegrationStateService } from '../../integrations/lib/state-service'\nimport type { ProgressService } from '../../progress/lib/progressService'\nimport { STALE_JOB_TIMEOUT_SECONDS } from '../../progress/lib/progressService'\nimport { refreshCoverageSnapshot } from '../../query_index/lib/coverage'\nimport { emitDataSyncEvent } from '../events'\nimport type { DataSyncAdapter, DataMapping, ExportBatch, ImportBatch, RunParameterValue } from './adapter'\nimport { getDataSyncAdapter, resolveProviderKey } from './adapter-registry'\nimport type { SyncRunService } from './sync-run-service'\nimport { SyncRunOwnershipConflictError } from './sync-run-service'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('data_sync').child({ component: 'sync-engine' })\n\ntype RunParameters = Record<string, RunParameterValue>\n\ntype SyncScope = {\n  organizationId: string\n  tenantId: string\n  userId?: string | null\n}\n\ntype EngineDeps = {\n  em: EntityManager\n  syncRunService: SyncRunService\n  integrationCredentialsService: CredentialsService\n  integrationLogService: IntegrationLogService\n  integrationStateService?: IntegrationStateService\n  progressService: ProgressService\n}\n\nfunction applyImportCounters(batch: ImportBatch): Pick<Required<SyncCounterDelta>, 'createdCount' | 'updatedCount' | 'skippedCount' | 'failedCount'> {\n  let createdCount = 0\n  let updatedCount = 0\n  let skippedCount = 0\n  let failedCount = 0\n\n  for (const item of batch.items) {\n    if (item.action === 'create') createdCount += 1\n    else if (item.action === 'update') updatedCount += 1\n    else if (item.action === 'failed') failedCount += 1\n    else skippedCount += 1\n  }\n\n  return { createdCount, updatedCount, skippedCount, failedCount }\n}\n\ntype SyncCounterDelta = {\n  createdCount?: number\n  updatedCount?: number\n  skippedCount?: number\n  failedCount?: number\n  processedCount: number\n}\n\nfunction applyExportCounters(batch: ExportBatch): SyncCounterDelta {\n  let failedCount = 0\n  let skippedCount = 0\n  let updatedCount = 0\n\n  for (const result of batch.results) {\n    if (result.status === 'error') failedCount += 1\n    else if (result.status === 'skipped') skippedCount += 1\n    else updatedCount += 1\n  }\n\n  return {\n    failedCount,\n    skippedCount,\n    updatedCount,\n    processedCount: batch.results.length,\n  }\n}\n\n// Adapter batches can legitimately outlast the stale-job sweep window (slow upstream\n// APIs), so the engine must heartbeat while a batch is still being produced.\nconst HEARTBEAT_TICK_MS = (STALE_JOB_TIMEOUT_SECONDS * 1000) / 4\n\n// Runs `tick` on an interval only while the source iterator is pending, so heartbeats\n// stop the moment the producer dies and genuinely stale jobs still get swept. The outer\n// finally closes the adapter generator on early exits (cancellation, ownership conflict).\nasync function* withHeartbeat<T>(source: AsyncIterable<T>, tick: () => void, intervalMs: number): AsyncGenerator<T, void, undefined> {\n  const iterator = source[Symbol.asyncIterator]()\n  try {\n    while (true) {\n      const timer = setInterval(tick, intervalMs)\n      let result: IteratorResult<T>\n      try {\n        result = await iterator.next()\n      } finally {\n        clearInterval(timer)\n      }\n      if (result.done) return\n      yield result.value\n    }\n  } finally {\n    await iterator.return?.()\n  }\n}\n\nexport function createSyncEngine(deps: EngineDeps) {\n  const { syncRunService, integrationCredentialsService, integrationLogService, integrationStateService, progressService } = deps\n\n  async function resolveMapping(adapter: DataSyncAdapter, entityType: string, scope: SyncScope): Promise<DataMapping> {\n    return adapter.getMapping({\n      entityType,\n      scope: { organizationId: scope.organizationId, tenantId: scope.tenantId },\n    })\n  }\n\n  async function updateProgress(progressJobId: string | null | undefined, processedCount: number, totalCount: number | null, scope: SyncScope): Promise<void> {\n    if (!progressJobId) return\n\n    await progressService.updateProgress(\n      progressJobId,\n      {\n        processedCount,\n        totalCount: totalCount ?? undefined,\n      },\n      {\n        tenantId: scope.tenantId,\n        organizationId: scope.organizationId,\n        userId: scope.userId,\n      },\n    )\n  }\n\n  // On redelivery the progress counter must resume where the last delivery left off the\n  // same way committedBatches does \u2014 updateProgress writes absolute counts, so starting at\n  // zero would regress the visible count. The progress job's own processedCount is the only\n  // persisted value already in the engine's unit: `batch.processedCount ?? items.length`,\n  // i.e. source records. The run's created/updated/skipped/failed counters count emitted\n  // items, which adapters may explode several-per-source-record (Akeneo yields a product\n  // plus its variants), so seeding from them would overshoot the total and pin the bar.\n  async function seedProcessedCount(progressJobId: string | null | undefined, scope: SyncScope): Promise<number> {\n    if (!progressJobId) return 0\n    const job = await progressService.getJob(progressJobId, {\n      tenantId: scope.tenantId,\n      organizationId: scope.organizationId,\n      userId: scope.userId,\n    })\n    return job?.processedCount ?? 0\n  }\n\n  function makeHeartbeatTick(progressJobId: string | null | undefined, scope: SyncScope): () => void {\n    const touchJobHeartbeat = progressService.touchJobHeartbeat?.bind(progressService)\n    if (!progressJobId || !touchJobHeartbeat) return () => {}\n    let inFlight = false\n    return () => {\n      if (inFlight) return\n      inFlight = true\n      touchJobHeartbeat(progressJobId, {\n        tenantId: scope.tenantId,\n        organizationId: scope.organizationId,\n        userId: scope.userId,\n      })\n        .catch((error) => {\n          logger.warn('Progress heartbeat failed', {\n            progressJobId,\n            error: error instanceof Error ? error.message : String(error),\n          })\n        })\n        .finally(() => {\n          inFlight = false\n        })\n    }\n  }\n\n  async function refreshCoverageSnapshots(entityTypes: string[] | undefined, scope: SyncScope): Promise<void> {\n    if (!entityTypes || entityTypes.length === 0) return\n\n    await Promise.allSettled(\n      Array.from(new Set(entityTypes.filter((value) => typeof value === 'string' && value.trim().length > 0)))\n        .map((entityType) => refreshCoverageSnapshot(deps.em, {\n          entityType,\n          tenantId: scope.tenantId,\n          organizationId: scope.organizationId,\n        })),\n    )\n  }\n\n  async function logImportItemFailures(\n    runId: string,\n    integrationId: string,\n    items: ImportBatch['items'],\n    scope: SyncScope,\n  ): Promise<void> {\n    const failedItems = items.filter((item) => item.action === 'failed')\n    for (const item of failedItems) {\n      const errorMessage = typeof item.data.errorMessage === 'string' && item.data.errorMessage.trim().length > 0\n        ? item.data.errorMessage.trim()\n        : 'Import item failed'\n      const sourceProductUuid = typeof item.data.sourceProductUuid === 'string' && item.data.sourceProductUuid.trim().length > 0\n        ? item.data.sourceProductUuid.trim()\n        : null\n      const sourceIdentifier = typeof item.data.sourceIdentifier === 'string' && item.data.sourceIdentifier.trim().length > 0\n        ? item.data.sourceIdentifier.trim()\n        : null\n      const message = [\n        `Failed to import item ${item.externalId}`,\n        sourceProductUuid ? `(uuid: ${sourceProductUuid})` : null,\n        sourceIdentifier ? `(identifier: ${sourceIdentifier})` : null,\n        `: ${errorMessage}`,\n      ].filter((part) => part !== null).join(' ')\n\n      await integrationLogService.write(\n        {\n          integrationId,\n          runId,\n          level: 'error',\n          message,\n          payload: item.data,\n        },\n        scope,\n      )\n    }\n  }\n\n  async function logExportItemFailures(\n    runId: string,\n    integrationId: string,\n    results: ExportBatch['results'],\n    scope: SyncScope,\n  ): Promise<void> {\n    const failedResults = results.filter((result) => result.status === 'error' && result.error)\n    for (const result of failedResults) {\n      const label = result.externalId ? `${result.externalId} (id: ${result.localId})` : result.localId\n      const errorMessage = result.error!.split('\\n')[0]\n      const message = `Failed to export item ${label}: ${errorMessage}`\n\n      await integrationLogService.write(\n        {\n          integrationId,\n          runId,\n          level: 'error',\n          message,\n          payload: { kind: 'export-item-failure', summary: result.error },\n        },\n        scope,\n      )\n    }\n  }\n\n  async function writeOperationalLog(params: {\n    integrationId: string\n    runId: string\n    level: 'info' | 'warn' | 'error'\n    message: string\n    scope: SyncScope\n    enabled: boolean\n    payload?: Record<string, unknown>\n  }): Promise<void> {\n    if (!params.enabled) return\n\n    await integrationLogService.write(\n      {\n        integrationId: params.integrationId,\n        runId: params.runId,\n        level: params.level,\n        message: params.message,\n        payload: params.payload,\n      },\n      params.scope,\n    )\n  }\n\n  async function updateOperationalState(params: {\n    integrationId: string\n    status: 'healthy' | 'degraded' | 'unhealthy'\n    scope: SyncScope\n    enabled: boolean\n  }): Promise<void> {\n    if (!params.enabled || !integrationStateService) return\n\n    await integrationStateService.upsert(\n      params.integrationId,\n      {\n        lastHealthStatus: params.status,\n        lastHealthCheckedAt: new Date(),\n      },\n      params.scope,\n    )\n  }\n\n  async function finalizeRun(\n    runId: string,\n    status: 'completed' | 'failed' | 'cancelled',\n    scope: SyncScope,\n    error?: string,\n    operationalTelemetry = false,\n  ): Promise<void> {\n    const existingRun = await syncRunService.getRun(runId, scope)\n    const alreadyFinalizedWithSameStatus = existingRun?.status === status\n      && (status === 'completed' || status === 'failed' || status === 'cancelled')\n\n    const run = await syncRunService.markStatus(runId, status, scope, error)\n    if (!run) return\n\n    if (alreadyFinalizedWithSameStatus) {\n      return\n    }\n\n    if (run.status !== status) {\n      // `markStatus` refuses a terminal -> different-terminal transition and\n      // returns the row unchanged, so the run is already finished under another\n      // delivery of this job. Everything below \u2014 the progress job, the\n      // operational log and the lifecycle event \u2014 would describe the wrong\n      // outcome, and `data_sync.run.failed` is dispatched to tenant webhooks.\n      // A displaced worker stays silent instead.\n      logger.warn('Skipping finalization of a sync run another worker already finalized', {\n        runId,\n        requestedStatus: status,\n        actualStatus: run.status,\n      })\n      return\n    }\n\n    if (run.progressJobId) {\n      if (status === 'completed') {\n        await progressService.completeJob(\n          run.progressJobId,\n          {\n            resultSummary: {\n              createdCount: run.createdCount,\n              updatedCount: run.updatedCount,\n              skippedCount: run.skippedCount,\n              failedCount: run.failedCount,\n              batchesCompleted: run.batchesCompleted,\n            },\n          },\n          {\n            tenantId: scope.tenantId,\n            organizationId: scope.organizationId,\n            userId: scope.userId,\n          },\n        )\n      } else if (status === 'failed') {\n        await progressService.failJob(\n          run.progressJobId,\n          {\n            errorMessage: error ?? 'Sync run failed',\n          },\n          {\n            tenantId: scope.tenantId,\n            organizationId: scope.organizationId,\n            userId: scope.userId,\n          },\n        )\n      } else if (status === 'cancelled') {\n        await progressService.markCancelled(\n          run.progressJobId,\n          {\n            tenantId: scope.tenantId,\n            organizationId: scope.organizationId,\n            userId: scope.userId,\n          },\n        )\n      }\n    }\n\n    if (status === 'completed') {\n      await updateOperationalState({\n        integrationId: run.integrationId,\n        status: 'healthy',\n        scope,\n        enabled: operationalTelemetry,\n      })\n      await writeOperationalLog({\n        integrationId: run.integrationId,\n        runId: run.id,\n        level: 'info',\n        message: 'Sync run completed',\n        scope,\n        enabled: operationalTelemetry,\n        payload: {\n          operationalStatus: 'completed',\n          summary: `Sync completed with ${run.createdCount} created, ${run.updatedCount} updated, ${run.failedCount} failed.`,\n          createdCount: run.createdCount,\n          updatedCount: run.updatedCount,\n          skippedCount: run.skippedCount,\n          failedCount: run.failedCount,\n          batchesCompleted: run.batchesCompleted,\n        },\n      })\n    } else if (status === 'cancelled') {\n      await updateOperationalState({\n        integrationId: run.integrationId,\n        status: 'degraded',\n        scope,\n        enabled: operationalTelemetry,\n      })\n      await writeOperationalLog({\n        integrationId: run.integrationId,\n        runId: run.id,\n        level: 'warn',\n        message: 'Sync run cancelled',\n        scope,\n        enabled: operationalTelemetry,\n        payload: {\n          operationalStatus: 'cancelled',\n          summary: 'The sync run was cancelled before completion.',\n        },\n      })\n    } else {\n      await updateOperationalState({\n        integrationId: run.integrationId,\n        status: 'unhealthy',\n        scope,\n        enabled: operationalTelemetry,\n      })\n      await writeOperationalLog({\n        integrationId: run.integrationId,\n        runId: run.id,\n        level: 'error',\n        message: error ?? 'Sync run failed',\n        scope,\n        enabled: operationalTelemetry,\n        payload: {\n          operationalStatus: 'failed',\n          summary: error ?? 'The sync run failed.',\n        },\n      })\n    }\n\n    if (status === 'completed') {\n      await emitDataSyncEvent('data_sync.run.completed', {\n        runId,\n        integrationId: run.integrationId,\n        entityType: run.entityType,\n        direction: run.direction,\n        tenantId: scope.tenantId,\n        organizationId: scope.organizationId,\n      })\n      return\n    }\n\n    if (status === 'cancelled') {\n      await emitDataSyncEvent('data_sync.run.cancelled', {\n        runId,\n        integrationId: run.integrationId,\n        entityType: run.entityType,\n        direction: run.direction,\n        tenantId: scope.tenantId,\n        organizationId: scope.organizationId,\n      })\n      return\n    }\n\n    await emitDataSyncEvent('data_sync.run.failed', {\n      runId,\n      integrationId: run.integrationId,\n      entityType: run.entityType,\n      direction: run.direction,\n      error: error ?? null,\n      tenantId: scope.tenantId,\n      organizationId: scope.organizationId,\n    })\n  }\n\n  return {\n    async runImport(runId: string, batchSize: number, scope: SyncScope): Promise<void> {\n      const run = await syncRunService.getRun(runId, scope)\n      if (!run) {\n        logger.warn('Skipping stale import job for missing run', { runId })\n        return\n      }\n      if (run.status === 'cancelled') {\n        if (run.progressJobId) {\n          await progressService.markCancelled(run.progressJobId, {\n            tenantId: scope.tenantId,\n            organizationId: scope.organizationId,\n            userId: scope.userId,\n          })\n        }\n        return\n      }\n\n      const providerKey = resolveProviderKey(run.integrationId)\n      const adapter = getDataSyncAdapter(providerKey)\n      if (!adapter?.streamImport) {\n        throw new Error(`No import adapter registered for provider ${providerKey}`)\n      }\n      const operationalTelemetry = adapter.operationalTelemetry === true\n      const persistSharedCursor = adapter.persistsSharedCursor?.(run.entityType) ?? true\n\n      const credentials = await integrationCredentialsService.resolve(run.integrationId, scope)\n      if (!credentials) {\n        throw new Error(`Integration ${run.integrationId} is missing credentials`)\n      }\n\n      // A run already `running` means a stalled job was redelivered, so this is\n      // a resume rather than a first start. Consumers see one `started` event per\n      // delivery either way; the flag is what lets them tell the two apart.\n      const resumed = run.status === 'running'\n      const activeRun = await syncRunService.markStatus(run.id, 'running', scope)\n      if (!activeRun || activeRun.status !== 'running') {\n        return\n      }\n      await emitDataSyncEvent('data_sync.run.started', {\n        runId: run.id,\n        integrationId: run.integrationId,\n        entityType: run.entityType,\n        direction: run.direction,\n        resumed,\n        tenantId: scope.tenantId,\n        organizationId: scope.organizationId,\n      })\n      await updateOperationalState({\n        integrationId: run.integrationId,\n        status: 'degraded',\n        scope,\n        enabled: operationalTelemetry,\n      })\n      await writeOperationalLog({\n        integrationId: run.integrationId,\n        runId: run.id,\n        level: 'info',\n        message: 'Sync run started',\n        scope,\n        enabled: operationalTelemetry,\n        payload: {\n          operationalStatus: 'running',\n          summary: `Import run started for ${run.entityType}.`,\n          entityType: run.entityType,\n          direction: run.direction,\n        },\n      })\n\n      if (run.progressJobId) {\n        await progressService.startJob(run.progressJobId, {\n          tenantId: scope.tenantId,\n          organizationId: scope.organizationId,\n          userId: scope.userId,\n        })\n      }\n\n      const mapping = await resolveMapping(adapter, run.entityType, scope)\n      let processedCount = await seedProcessedCount(run.progressJobId, scope)\n      let totalCount: number | null = null\n      let committedBatches = activeRun.batchesCompleted ?? 0\n\n      try {\n        for await (const batch of withHeartbeat(\n          adapter.streamImport({\n            entityType: run.entityType,\n            cursor: run.cursor ?? undefined,\n            batchSize,\n            credentials,\n            mapping,\n            scope: { organizationId: scope.organizationId, tenantId: scope.tenantId },\n            runId: run.id,\n            parameters: (run.parameters ?? {}) as RunParameters,\n          }),\n          makeHeartbeatTick(run.progressJobId, scope),\n          HEARTBEAT_TICK_MS,\n        )) {\n          if (run.progressJobId && await progressService.isCancellationRequested(run.progressJobId, scope.tenantId, scope.organizationId)) {\n            await finalizeRun(run.id, 'cancelled', scope, undefined, operationalTelemetry)\n            return\n          }\n\n          const delta = applyImportCounters(batch)\n          const processedBatchCount = batch.processedCount ?? batch.items.length\n          processedCount += processedBatchCount\n          totalCount = batch.totalEstimate ?? totalCount\n\n          await syncRunService.commitBatchProgress(\n            run.id,\n            {\n              ...delta,\n              batchesCompleted: 1,\n            },\n            batch.cursor,\n            scope,\n            { expectedBatchesCompleted: committedBatches, persistSharedCursor },\n          )\n          committedBatches += 1\n\n          await updateProgress(run.progressJobId, processedCount, totalCount, scope)\n          await refreshCoverageSnapshots(batch.refreshCoverageEntityTypes, scope)\n          await logImportItemFailures(run.id, run.integrationId, batch.items, scope)\n\n          await writeOperationalLog({\n            integrationId: run.integrationId,\n            runId: run.id,\n            level: 'info',\n            message: batch.message?.trim().length\n              ? batch.message.trim()\n              : `Processed import batch ${batch.batchIndex}`,\n            scope,\n            enabled: operationalTelemetry,\n            payload: {\n              operationalStatus: 'running',\n              summary: `Processed ${processedCount}${totalCount ? ` of ${totalCount}` : ''} rows so far.`,\n              processedCount,\n              batchSize: batch.items.length,\n              processedBatchCount,\n              cursor: batch.cursor,\n            },\n          })\n        }\n      } catch (error) {\n        if (error instanceof SyncRunOwnershipConflictError) {\n          logger.warn('Yielding import run to a concurrent worker that already advanced it', {\n            runId: run.id,\n            expectedBatchesCompleted: error.expectedBatchesCompleted,\n          })\n          return\n        }\n        const message = error instanceof Error ? error.message : 'Sync import failed'\n        await integrationLogService.write(\n          {\n            integrationId: run.integrationId,\n            runId: run.id,\n            level: 'error',\n            message,\n          },\n          scope,\n        )\n        await finalizeRun(run.id, 'failed', scope, message, operationalTelemetry)\n        return\n      }\n\n      await finalizeRun(run.id, 'completed', scope, undefined, operationalTelemetry)\n    },\n\n    async runExport(runId: string, batchSize: number, scope: SyncScope): Promise<void> {\n      const run = await syncRunService.getRun(runId, scope)\n      if (!run) {\n        logger.warn('Skipping stale export job for missing run', { runId })\n        return\n      }\n      if (run.status === 'cancelled') {\n        if (run.progressJobId) {\n          await progressService.markCancelled(run.progressJobId, {\n            tenantId: scope.tenantId,\n            organizationId: scope.organizationId,\n            userId: scope.userId,\n          })\n        }\n        return\n      }\n\n      const providerKey = resolveProviderKey(run.integrationId)\n      const adapter = getDataSyncAdapter(providerKey)\n      if (!adapter?.streamExport) {\n        throw new Error(`No export adapter registered for provider ${providerKey}`)\n      }\n      const operationalTelemetry = adapter.operationalTelemetry === true\n      const persistSharedCursor = adapter.persistsSharedCursor?.(run.entityType) ?? true\n\n      const credentials = await integrationCredentialsService.resolve(run.integrationId, scope)\n      if (!credentials) {\n        throw new Error(`Integration ${run.integrationId} is missing credentials`)\n      }\n\n      // A run already `running` means a stalled job was redelivered, so this is\n      // a resume rather than a first start. Consumers see one `started` event per\n      // delivery either way; the flag is what lets them tell the two apart.\n      const resumed = run.status === 'running'\n      const activeRun = await syncRunService.markStatus(run.id, 'running', scope)\n      if (!activeRun || activeRun.status !== 'running') {\n        return\n      }\n      await emitDataSyncEvent('data_sync.run.started', {\n        runId: run.id,\n        integrationId: run.integrationId,\n        entityType: run.entityType,\n        direction: run.direction,\n        resumed,\n        tenantId: scope.tenantId,\n        organizationId: scope.organizationId,\n      })\n      await updateOperationalState({\n        integrationId: run.integrationId,\n        status: 'degraded',\n        scope,\n        enabled: operationalTelemetry,\n      })\n      await writeOperationalLog({\n        integrationId: run.integrationId,\n        runId: run.id,\n        level: 'info',\n        message: 'Sync run started',\n        scope,\n        enabled: operationalTelemetry,\n        payload: {\n          operationalStatus: 'running',\n          summary: `Export run started for ${run.entityType}.`,\n          entityType: run.entityType,\n          direction: run.direction,\n        },\n      })\n\n      if (run.progressJobId) {\n        await progressService.startJob(run.progressJobId, {\n          tenantId: scope.tenantId,\n          organizationId: scope.organizationId,\n          userId: scope.userId,\n        })\n      }\n\n      const mapping = await resolveMapping(adapter, run.entityType, scope)\n      let processedCount = await seedProcessedCount(run.progressJobId, scope)\n      let committedBatches = activeRun.batchesCompleted ?? 0\n\n      try {\n        for await (const batch of withHeartbeat(\n          adapter.streamExport({\n            entityType: run.entityType,\n            cursor: run.cursor ?? undefined,\n            batchSize,\n            credentials,\n            mapping,\n            scope: { organizationId: scope.organizationId, tenantId: scope.tenantId },\n            runId: run.id,\n            parameters: (run.parameters ?? {}) as RunParameters,\n          }),\n          makeHeartbeatTick(run.progressJobId, scope),\n          HEARTBEAT_TICK_MS,\n        )) {\n          if (run.progressJobId && await progressService.isCancellationRequested(run.progressJobId, scope.tenantId, scope.organizationId)) {\n            await finalizeRun(run.id, 'cancelled', scope, undefined, operationalTelemetry)\n            return\n          }\n\n          const delta = applyExportCounters(batch)\n          processedCount += delta.processedCount\n\n          await syncRunService.commitBatchProgress(\n            run.id,\n            {\n              createdCount: 0,\n              updatedCount: delta.updatedCount,\n              skippedCount: delta.skippedCount,\n              failedCount: delta.failedCount,\n              batchesCompleted: 1,\n            },\n            batch.cursor,\n            scope,\n            { expectedBatchesCompleted: committedBatches, persistSharedCursor },\n          )\n          committedBatches += 1\n          await updateProgress(run.progressJobId, processedCount, null, scope)\n          await logExportItemFailures(run.id, run.integrationId, batch.results, scope)\n\n          await writeOperationalLog({\n            integrationId: run.integrationId,\n            runId: run.id,\n            level: 'info',\n            message: `Processed export batch ${batch.batchIndex}`,\n            scope,\n            enabled: operationalTelemetry,\n            payload: {\n              operationalStatus: 'running',\n              summary: `Processed ${processedCount} export items so far.`,\n              processedCount,\n              batchSize: batch.results.length,\n              cursor: batch.cursor,\n            },\n          })\n        }\n      } catch (error) {\n        if (error instanceof SyncRunOwnershipConflictError) {\n          logger.warn('Yielding export run to a concurrent worker that already advanced it', {\n            runId: run.id,\n            expectedBatchesCompleted: error.expectedBatchesCompleted,\n          })\n          return\n        }\n        const message = error instanceof Error ? error.message : 'Sync export failed'\n        await integrationLogService.write(\n          {\n            integrationId: run.integrationId,\n            runId: run.id,\n            level: 'error',\n            message,\n          },\n          scope,\n        )\n        await finalizeRun(run.id, 'failed', scope, message, operationalTelemetry)\n        return\n      }\n\n      await finalizeRun(run.id, 'completed', scope, undefined, operationalTelemetry)\n    },\n  }\n}\n\nexport type SyncEngine = ReturnType<typeof createSyncEngine>\n"],
-  "mappings": "AAMA,SAAS,iCAAiC;AAC1C,SAAS,+BAA+B;AACxC,SAAS,yBAAyB;AAElC,SAAS,oBAAoB,0BAA0B;AAEvD,SAAS,qCAAqC;AAC9C,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,WAAW,EAAE,MAAM,EAAE,WAAW,cAAc,CAAC;AAmB3E,SAAS,oBAAoB,OAAwH;AACnJ,MAAI,eAAe;AACnB,MAAI,eAAe;AACnB,MAAI,eAAe;AACnB,MAAI,cAAc;AAElB,aAAW,QAAQ,MAAM,OAAO;AAC9B,QAAI,KAAK,WAAW,SAAU,iBAAgB;AAAA,aACrC,KAAK,WAAW,SAAU,iBAAgB;AAAA,aAC1C,KAAK,WAAW,SAAU,gBAAe;AAAA,QAC7C,iBAAgB;AAAA,EACvB;AAEA,SAAO,EAAE,cAAc,cAAc,cAAc,YAAY;AACjE;AAUA,SAAS,oBAAoB,OAAsC;AACjE,MAAI,cAAc;AAClB,MAAI,eAAe;AACnB,MAAI,eAAe;AAEnB,aAAW,UAAU,MAAM,SAAS;AAClC,QAAI,OAAO,WAAW,QAAS,gBAAe;AAAA,aACrC,OAAO,WAAW,UAAW,iBAAgB;AAAA,QACjD,iBAAgB;AAAA,EACvB;AAEA,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA,gBAAgB,MAAM,QAAQ;AAAA,EAChC;AACF;AAIA,MAAM,oBAAqB,4BAA4B,MAAQ;AAK/D,gBAAgB,cAAiB,QAA0B,MAAkB,YAAwD;AACnI,QAAM,WAAW,OAAO,OAAO,aAAa,EAAE;AAC9C,MAAI;AACF,WAAO,MAAM;AACX,YAAM,QAAQ,YAAY,MAAM,UAAU;AAC1C,UAAI;AACJ,UAAI;AACF,iBAAS,MAAM,SAAS,KAAK;AAAA,MAC/B,UAAE;AACA,sBAAc,KAAK;AAAA,MACrB;AACA,UAAI,OAAO,KAAM;AACjB,YAAM,OAAO;AAAA,IACf;AAAA,EACF,UAAE;AACA,UAAM,SAAS,SAAS;AAAA,EAC1B;AACF;AAEO,SAAS,iBAAiB,MAAkB;AACjD,QAAM,EAAE,gBAAgB,+BAA+B,uBAAuB,yBAAyB,gBAAgB,IAAI;AAE3H,iBAAe,eAAe,SAA0B,YAAoB,OAAwC;AAClH,WAAO,QAAQ,WAAW;AAAA,MACxB;AAAA,MACA,OAAO,EAAE,gBAAgB,MAAM,gBAAgB,UAAU,MAAM,SAAS;AAAA,IAC1E,CAAC;AAAA,EACH;AAEA,iBAAe,eAAe,eAA0C,gBAAwB,YAA2B,OAAiC;AAC1J,QAAI,CAAC,cAAe;AAEpB,UAAM,gBAAgB;AAAA,MACpB;AAAA,MACA;AAAA,QACE;AAAA,QACA,YAAY,cAAc;AAAA,MAC5B;AAAA,MACA;AAAA,QACE,UAAU,MAAM;AAAA,QAChB,gBAAgB,MAAM;AAAA,QACtB,QAAQ,MAAM;AAAA,MAChB;AAAA,IACF;AAAA,EACF;AASA,iBAAe,mBAAmB,eAA0C,OAAmC;AAC7G,QAAI,CAAC,cAAe,QAAO;AAC3B,UAAM,MAAM,MAAM,gBAAgB,OAAO,eAAe;AAAA,MACtD,UAAU,MAAM;AAAA,MAChB,gBAAgB,MAAM;AAAA,MACtB,QAAQ,MAAM;AAAA,IAChB,CAAC;AACD,WAAO,KAAK,kBAAkB;AAAA,EAChC;AAEA,WAAS,kBAAkB,eAA0C,OAA8B;AACjG,UAAM,oBAAoB,gBAAgB,mBAAmB,KAAK,eAAe;AACjF,QAAI,CAAC,iBAAiB,CAAC,kBAAmB,QAAO,MAAM;AAAA,IAAC;AACxD,QAAI,WAAW;AACf,WAAO,MAAM;AACX,UAAI,SAAU;AACd,iBAAW;AACX,wBAAkB,eAAe;AAAA,QAC/B,UAAU,MAAM;AAAA,QAChB,gBAAgB,MAAM;AAAA,QACtB,QAAQ,MAAM;AAAA,MAChB,CAAC,EACE,MAAM,CAAC,UAAU;AAChB,eAAO,KAAK,6BAA6B;AAAA,UACvC;AAAA,UACA,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AAAA,QAC9D,CAAC;AAAA,MACH,CAAC,EACA,QAAQ,MAAM;AACb,mBAAW;AAAA,MACb,CAAC;AAAA,IACL;AAAA,EACF;AAEA,iBAAe,yBAAyB,aAAmC,OAAiC;AAC1G,QAAI,CAAC,eAAe,YAAY,WAAW,EAAG;AAE9C,UAAM,QAAQ;AAAA,MACZ,MAAM,KAAK,IAAI,IAAI,YAAY,OAAO,CAAC,UAAU,OAAO,UAAU,YAAY,MAAM,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,EACpG,IAAI,CAAC,eAAe,wBAAwB,KAAK,IAAI;AAAA,QACpD;AAAA,QACA,UAAU,MAAM;AAAA,QAChB,gBAAgB,MAAM;AAAA,MACxB,CAAC,CAAC;AAAA,IACN;AAAA,EACF;AAEA,iBAAe,sBACb,OACA,eACA,OACA,OACe;AACf,UAAM,cAAc,MAAM,OAAO,CAAC,SAAS,KAAK,WAAW,QAAQ;AACnE,eAAW,QAAQ,aAAa;AAC9B,YAAM,eAAe,OAAO,KAAK,KAAK,iBAAiB,YAAY,KAAK,KAAK,aAAa,KAAK,EAAE,SAAS,IACtG,KAAK,KAAK,aAAa,KAAK,IAC5B;AACJ,YAAM,oBAAoB,OAAO,KAAK,KAAK,sBAAsB,YAAY,KAAK,KAAK,kBAAkB,KAAK,EAAE,SAAS,IACrH,KAAK,KAAK,kBAAkB,KAAK,IACjC;AACJ,YAAM,mBAAmB,OAAO,KAAK,KAAK,qBAAqB,YAAY,KAAK,KAAK,iBAAiB,KAAK,EAAE,SAAS,IAClH,KAAK,KAAK,iBAAiB,KAAK,IAChC;AACJ,YAAM,UAAU;AAAA,QACd,yBAAyB,KAAK,UAAU;AAAA,QACxC,oBAAoB,UAAU,iBAAiB,MAAM;AAAA,QACrD,mBAAmB,gBAAgB,gBAAgB,MAAM;AAAA,QACzD,KAAK,YAAY;AAAA,MACnB,EAAE,OAAO,CAAC,SAAS,SAAS,IAAI,EAAE,KAAK,GAAG;AAE1C,YAAM,sBAAsB;AAAA,QAC1B;AAAA,UACE;AAAA,UACA;AAAA,UACA,OAAO;AAAA,UACP;AAAA,UACA,SAAS,KAAK;AAAA,QAChB;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA,iBAAe,sBACb,OACA,eACA,SACA,OACe;AACf,UAAM,gBAAgB,QAAQ,OAAO,CAAC,WAAW,OAAO,WAAW,WAAW,OAAO,KAAK;AAC1F,eAAW,UAAU,eAAe;AAClC,YAAM,QAAQ,OAAO,aAAa,GAAG,OAAO,UAAU,SAAS,OAAO,OAAO,MAAM,OAAO;AAC1F,YAAM,eAAe,OAAO,MAAO,MAAM,IAAI,EAAE,CAAC;AAChD,YAAM,UAAU,yBAAyB,KAAK,KAAK,YAAY;AAE/D,YAAM,sBAAsB;AAAA,QAC1B;AAAA,UACE;AAAA,UACA;AAAA,UACA,OAAO;AAAA,UACP;AAAA,UACA,SAAS,EAAE,MAAM,uBAAuB,SAAS,OAAO,MAAM;AAAA,QAChE;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA,iBAAe,oBAAoB,QAQjB;AAChB,QAAI,CAAC,OAAO,QAAS;AAErB,UAAM,sBAAsB;AAAA,MAC1B;AAAA,QACE,eAAe,OAAO;AAAA,QACtB,OAAO,OAAO;AAAA,QACd,OAAO,OAAO;AAAA,QACd,SAAS,OAAO;AAAA,QAChB,SAAS,OAAO;AAAA,MAClB;AAAA,MACA,OAAO;AAAA,IACT;AAAA,EACF;AAEA,iBAAe,uBAAuB,QAKpB;AAChB,QAAI,CAAC,OAAO,WAAW,CAAC,wBAAyB;AAEjD,UAAM,wBAAwB;AAAA,MAC5B,OAAO;AAAA,MACP;AAAA,QACE,kBAAkB,OAAO;AAAA,QACzB,qBAAqB,oBAAI,KAAK;AAAA,MAChC;AAAA,MACA,OAAO;AAAA,IACT;AAAA,EACF;AAEA,iBAAe,YACb,OACA,QACA,OACA,OACA,uBAAuB,OACR;AACf,UAAM,cAAc,MAAM,eAAe,OAAO,OAAO,KAAK;AAC5D,UAAM,iCAAiC,aAAa,WAAW,WACzD,WAAW,eAAe,WAAW,YAAY,WAAW;AAElE,UAAM,MAAM,MAAM,eAAe,WAAW,OAAO,QAAQ,OAAO,KAAK;AACvE,QAAI,CAAC,IAAK;AAEV,QAAI,gCAAgC;AAClC;AAAA,IACF;AAEA,QAAI,IAAI,WAAW,QAAQ;AAOzB,aAAO,KAAK,wEAAwE;AAAA,QAClF;AAAA,QACA,iBAAiB;AAAA,QACjB,cAAc,IAAI;AAAA,MACpB,CAAC;AACD;AAAA,IACF;AAEA,QAAI,IAAI,eAAe;AACrB,UAAI,WAAW,aAAa;AAC1B,cAAM,gBAAgB;AAAA,UACpB,IAAI;AAAA,UACJ;AAAA,YACE,eAAe;AAAA,cACb,cAAc,IAAI;AAAA,cAClB,cAAc,IAAI;AAAA,cAClB,cAAc,IAAI;AAAA,cAClB,aAAa,IAAI;AAAA,cACjB,kBAAkB,IAAI;AAAA,YACxB;AAAA,UACF;AAAA,UACA;AAAA,YACE,UAAU,MAAM;AAAA,YAChB,gBAAgB,MAAM;AAAA,YACtB,QAAQ,MAAM;AAAA,UAChB;AAAA,QACF;AAAA,MACF,WAAW,WAAW,UAAU;AAC9B,cAAM,gBAAgB;AAAA,UACpB,IAAI;AAAA,UACJ;AAAA,YACE,cAAc,SAAS;AAAA,UACzB;AAAA,UACA;AAAA,YACE,UAAU,MAAM;AAAA,YAChB,gBAAgB,MAAM;AAAA,YACtB,QAAQ,MAAM;AAAA,UAChB;AAAA,QACF;AAAA,MACF,WAAW,WAAW,aAAa;AACjC,cAAM,gBAAgB;AAAA,UACpB,IAAI;AAAA,UACJ;AAAA,YACE,UAAU,MAAM;AAAA,YAChB,gBAAgB,MAAM;AAAA,YACtB,QAAQ,MAAM;AAAA,UAChB;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAEA,QAAI,WAAW,aAAa;AAC1B,YAAM,uBAAuB;AAAA,QAC3B,eAAe,IAAI;AAAA,QACnB,QAAQ;AAAA,QACR;AAAA,QACA,SAAS;AAAA,MACX,CAAC;AACD,YAAM,oBAAoB;AAAA,QACxB,eAAe,IAAI;AAAA,QACnB,OAAO,IAAI;AAAA,QACX,OAAO;AAAA,QACP,SAAS;AAAA,QACT;AAAA,QACA,SAAS;AAAA,QACT,SAAS;AAAA,UACP,mBAAmB;AAAA,UACnB,SAAS,uBAAuB,IAAI,YAAY,aAAa,IAAI,YAAY,aAAa,IAAI,WAAW;AAAA,UACzG,cAAc,IAAI;AAAA,UAClB,cAAc,IAAI;AAAA,UAClB,cAAc,IAAI;AAAA,UAClB,aAAa,IAAI;AAAA,UACjB,kBAAkB,IAAI;AAAA,QACxB;AAAA,MACF,CAAC;AAAA,IACH,WAAW,WAAW,aAAa;AACjC,YAAM,uBAAuB;AAAA,QAC3B,eAAe,IAAI;AAAA,QACnB,QAAQ;AAAA,QACR;AAAA,QACA,SAAS;AAAA,MACX,CAAC;AACD,YAAM,oBAAoB;AAAA,QACxB,eAAe,IAAI;AAAA,QACnB,OAAO,IAAI;AAAA,QACX,OAAO;AAAA,QACP,SAAS;AAAA,QACT;AAAA,QACA,SAAS;AAAA,QACT,SAAS;AAAA,UACP,mBAAmB;AAAA,UACnB,SAAS;AAAA,QACX;AAAA,MACF,CAAC;AAAA,IACH,OAAO;AACL,YAAM,uBAAuB;AAAA,QAC3B,eAAe,IAAI;AAAA,QACnB,QAAQ;AAAA,QACR;AAAA,QACA,SAAS;AAAA,MACX,CAAC;AACD,YAAM,oBAAoB;AAAA,QACxB,eAAe,IAAI;AAAA,QACnB,OAAO,IAAI;AAAA,QACX,OAAO;AAAA,QACP,SAAS,SAAS;AAAA,QAClB;AAAA,QACA,SAAS;AAAA,QACT,SAAS;AAAA,UACP,mBAAmB;AAAA,UACnB,SAAS,SAAS;AAAA,QACpB;AAAA,MACF,CAAC;AAAA,IACH;AAEA,QAAI,WAAW,aAAa;AAC1B,YAAM,kBAAkB,2BAA2B;AAAA,QACjD;AAAA,QACA,eAAe,IAAI;AAAA,QACnB,YAAY,IAAI;AAAA,QAChB,WAAW,IAAI;AAAA,QACf,UAAU,MAAM;AAAA,QAChB,gBAAgB,MAAM;AAAA,MACxB,CAAC;AACD;AAAA,IACF;AAEA,QAAI,WAAW,aAAa;AAC1B,YAAM,kBAAkB,2BAA2B;AAAA,QACjD;AAAA,QACA,eAAe,IAAI;AAAA,QACnB,YAAY,IAAI;AAAA,QAChB,WAAW,IAAI;AAAA,QACf,UAAU,MAAM;AAAA,QAChB,gBAAgB,MAAM;AAAA,MACxB,CAAC;AACD;AAAA,IACF;AAEA,UAAM,kBAAkB,wBAAwB;AAAA,MAC9C;AAAA,MACA,eAAe,IAAI;AAAA,MACnB,YAAY,IAAI;AAAA,MAChB,WAAW,IAAI;AAAA,MACf,OAAO,SAAS;AAAA,MAChB,UAAU,MAAM;AAAA,MAChB,gBAAgB,MAAM;AAAA,IACxB,CAAC;AAAA,EACH;AAEA,SAAO;AAAA,IACL,MAAM,UAAU,OAAe,WAAmB,OAAiC;AACjF,YAAM,MAAM,MAAM,eAAe,OAAO,OAAO,KAAK;AACpD,UAAI,CAAC,KAAK;AACR,eAAO,KAAK,6CAA6C,EAAE,MAAM,CAAC;AAClE;AAAA,MACF;AACA,UAAI,IAAI,WAAW,aAAa;AAC9B,YAAI,IAAI,eAAe;AACrB,gBAAM,gBAAgB,cAAc,IAAI,eAAe;AAAA,YACrD,UAAU,MAAM;AAAA,YAChB,gBAAgB,MAAM;AAAA,YACtB,QAAQ,MAAM;AAAA,UAChB,CAAC;AAAA,QACH;AACA;AAAA,MACF;AAEA,YAAM,cAAc,mBAAmB,IAAI,aAAa;AACxD,YAAM,UAAU,mBAAmB,WAAW;AAC9C,UAAI,CAAC,SAAS,cAAc;AAC1B,cAAM,IAAI,MAAM,6CAA6C,WAAW,EAAE;AAAA,MAC5E;AACA,YAAM,uBAAuB,QAAQ,yBAAyB;AAC9D,YAAM,sBAAsB,QAAQ,uBAAuB,IAAI,UAAU,KAAK;AAE9E,YAAM,cAAc,MAAM,8BAA8B,QAAQ,IAAI,eAAe,KAAK;AACxF,UAAI,CAAC,aAAa;AAChB,cAAM,IAAI,MAAM,eAAe,IAAI,aAAa,yBAAyB;AAAA,MAC3E;AAKA,YAAM,UAAU,IAAI,WAAW;AAC/B,YAAM,YAAY,MAAM,eAAe,WAAW,IAAI,IAAI,WAAW,KAAK;AAC1E,UAAI,CAAC,aAAa,UAAU,WAAW,WAAW;AAChD;AAAA,MACF;AACA,YAAM,kBAAkB,yBAAyB;AAAA,QAC/C,OAAO,IAAI;AAAA,QACX,eAAe,IAAI;AAAA,QACnB,YAAY,IAAI;AAAA,QAChB,WAAW,IAAI;AAAA,QACf;AAAA,QACA,UAAU,MAAM;AAAA,QAChB,gBAAgB,MAAM;AAAA,MACxB,CAAC;AACD,YAAM,uBAAuB;AAAA,QAC3B,eAAe,IAAI;AAAA,QACnB,QAAQ;AAAA,QACR;AAAA,QACA,SAAS;AAAA,MACX,CAAC;AACD,YAAM,oBAAoB;AAAA,QACxB,eAAe,IAAI;AAAA,QACnB,OAAO,IAAI;AAAA,QACX,OAAO;AAAA,QACP,SAAS;AAAA,QACT;AAAA,QACA,SAAS;AAAA,QACT,SAAS;AAAA,UACP,mBAAmB;AAAA,UACnB,SAAS,0BAA0B,IAAI,UAAU;AAAA,UACjD,YAAY,IAAI;AAAA,UAChB,WAAW,IAAI;AAAA,QACjB;AAAA,MACF,CAAC;AAED,UAAI,IAAI,eAAe;AACrB,cAAM,gBAAgB,SAAS,IAAI,eAAe;AAAA,UAChD,UAAU,MAAM;AAAA,UAChB,gBAAgB,MAAM;AAAA,UACtB,QAAQ,MAAM;AAAA,QAChB,CAAC;AAAA,MACH;AAEA,YAAM,UAAU,MAAM,eAAe,SAAS,IAAI,YAAY,KAAK;AACnE,UAAI,iBAAiB,MAAM,mBAAmB,IAAI,eAAe,KAAK;AACtE,UAAI,aAA4B;AAChC,UAAI,mBAAmB,UAAU,oBAAoB;AAErD,UAAI;AACF,yBAAiB,SAAS;AAAA,UACxB,QAAQ,aAAa;AAAA,YACnB,YAAY,IAAI;AAAA,YAChB,QAAQ,IAAI,UAAU;AAAA,YACtB;AAAA,YACA;AAAA,YACA;AAAA,YACA,OAAO,EAAE,gBAAgB,MAAM,gBAAgB,UAAU,MAAM,SAAS;AAAA,YACxE,OAAO,IAAI;AAAA,YACX,YAAa,IAAI,cAAc,CAAC;AAAA,UAClC,CAAC;AAAA,UACD,kBAAkB,IAAI,eAAe,KAAK;AAAA,UAC1C;AAAA,QACF,GAAG;AACD,cAAI,IAAI,iBAAiB,MAAM,gBAAgB,wBAAwB,IAAI,eAAe,MAAM,UAAU,MAAM,cAAc,GAAG;AAC/H,kBAAM,YAAY,IAAI,IAAI,aAAa,OAAO,QAAW,oBAAoB;AAC7E;AAAA,UACF;AAEA,gBAAM,QAAQ,oBAAoB,KAAK;AACvC,gBAAM,sBAAsB,MAAM,kBAAkB,MAAM,MAAM;AAChE,4BAAkB;AAClB,uBAAa,MAAM,iBAAiB;AAEpC,gBAAM,eAAe;AAAA,YACnB,IAAI;AAAA,YACJ;AAAA,cACE,GAAG;AAAA,cACH,kBAAkB;AAAA,YACpB;AAAA,YACA,MAAM;AAAA,YACN;AAAA,YACA,EAAE,0BAA0B,kBAAkB,oBAAoB;AAAA,UACpE;AACA,8BAAoB;AAEpB,gBAAM,eAAe,IAAI,eAAe,gBAAgB,YAAY,KAAK;AACzE,gBAAM,yBAAyB,MAAM,4BAA4B,KAAK;AACtE,gBAAM,sBAAsB,IAAI,IAAI,IAAI,eAAe,MAAM,OAAO,KAAK;AAEzE,gBAAM,oBAAoB;AAAA,YACxB,eAAe,IAAI;AAAA,YACnB,OAAO,IAAI;AAAA,YACX,OAAO;AAAA,YACP,SAAS,MAAM,SAAS,KAAK,EAAE,SAC3B,MAAM,QAAQ,KAAK,IACnB,0BAA0B,MAAM,UAAU;AAAA,YAC9C;AAAA,YACA,SAAS;AAAA,YACT,SAAS;AAAA,cACP,mBAAmB;AAAA,cACnB,SAAS,aAAa,cAAc,GAAG,aAAa,OAAO,UAAU,KAAK,EAAE;AAAA,cAC5E;AAAA,cACA,WAAW,MAAM,MAAM;AAAA,cACvB;AAAA,cACA,QAAQ,MAAM;AAAA,YAChB;AAAA,UACF,CAAC;AAAA,QACH;AAAA,MACF,SAAS,OAAO;AACd,YAAI,iBAAiB,+BAA+B;AAClD,iBAAO,KAAK,uEAAuE;AAAA,YACjF,OAAO,IAAI;AAAA,YACX,0BAA0B,MAAM;AAAA,UAClC,CAAC;AACD;AAAA,QACF;AACA,cAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU;AACzD,cAAM,sBAAsB;AAAA,UAC1B;AAAA,YACE,eAAe,IAAI;AAAA,YACnB,OAAO,IAAI;AAAA,YACX,OAAO;AAAA,YACP;AAAA,UACF;AAAA,UACA;AAAA,QACF;AACA,cAAM,YAAY,IAAI,IAAI,UAAU,OAAO,SAAS,oBAAoB;AACxE;AAAA,MACF;AAEA,YAAM,YAAY,IAAI,IAAI,aAAa,OAAO,QAAW,oBAAoB;AAAA,IAC/E;AAAA,IAEA,MAAM,UAAU,OAAe,WAAmB,OAAiC;AACjF,YAAM,MAAM,MAAM,eAAe,OAAO,OAAO,KAAK;AACpD,UAAI,CAAC,KAAK;AACR,eAAO,KAAK,6CAA6C,EAAE,MAAM,CAAC;AAClE;AAAA,MACF;AACA,UAAI,IAAI,WAAW,aAAa;AAC9B,YAAI,IAAI,eAAe;AACrB,gBAAM,gBAAgB,cAAc,IAAI,eAAe;AAAA,YACrD,UAAU,MAAM;AAAA,YAChB,gBAAgB,MAAM;AAAA,YACtB,QAAQ,MAAM;AAAA,UAChB,CAAC;AAAA,QACH;AACA;AAAA,MACF;AAEA,YAAM,cAAc,mBAAmB,IAAI,aAAa;AACxD,YAAM,UAAU,mBAAmB,WAAW;AAC9C,UAAI,CAAC,SAAS,cAAc;AAC1B,cAAM,IAAI,MAAM,6CAA6C,WAAW,EAAE;AAAA,MAC5E;AACA,YAAM,uBAAuB,QAAQ,yBAAyB;AAC9D,YAAM,sBAAsB,QAAQ,uBAAuB,IAAI,UAAU,KAAK;AAE9E,YAAM,cAAc,MAAM,8BAA8B,QAAQ,IAAI,eAAe,KAAK;AACxF,UAAI,CAAC,aAAa;AAChB,cAAM,IAAI,MAAM,eAAe,IAAI,aAAa,yBAAyB;AAAA,MAC3E;AAKA,YAAM,UAAU,IAAI,WAAW;AAC/B,YAAM,YAAY,MAAM,eAAe,WAAW,IAAI,IAAI,WAAW,KAAK;AAC1E,UAAI,CAAC,aAAa,UAAU,WAAW,WAAW;AAChD;AAAA,MACF;AACA,YAAM,kBAAkB,yBAAyB;AAAA,QAC/C,OAAO,IAAI;AAAA,QACX,eAAe,IAAI;AAAA,QACnB,YAAY,IAAI;AAAA,QAChB,WAAW,IAAI;AAAA,QACf;AAAA,QACA,UAAU,MAAM;AAAA,QAChB,gBAAgB,MAAM;AAAA,MACxB,CAAC;AACD,YAAM,uBAAuB;AAAA,QAC3B,eAAe,IAAI;AAAA,QACnB,QAAQ;AAAA,QACR;AAAA,QACA,SAAS;AAAA,MACX,CAAC;AACD,YAAM,oBAAoB;AAAA,QACxB,eAAe,IAAI;AAAA,QACnB,OAAO,IAAI;AAAA,QACX,OAAO;AAAA,QACP,SAAS;AAAA,QACT;AAAA,QACA,SAAS;AAAA,QACT,SAAS;AAAA,UACP,mBAAmB;AAAA,UACnB,SAAS,0BAA0B,IAAI,UAAU;AAAA,UACjD,YAAY,IAAI;AAAA,UAChB,WAAW,IAAI;AAAA,QACjB;AAAA,MACF,CAAC;AAED,UAAI,IAAI,eAAe;AACrB,cAAM,gBAAgB,SAAS,IAAI,eAAe;AAAA,UAChD,UAAU,MAAM;AAAA,UAChB,gBAAgB,MAAM;AAAA,UACtB,QAAQ,MAAM;AAAA,QAChB,CAAC;AAAA,MACH;AAEA,YAAM,UAAU,MAAM,eAAe,SAAS,IAAI,YAAY,KAAK;AACnE,UAAI,iBAAiB,MAAM,mBAAmB,IAAI,eAAe,KAAK;AACtE,UAAI,mBAAmB,UAAU,oBAAoB;AAErD,UAAI;AACF,yBAAiB,SAAS;AAAA,UACxB,QAAQ,aAAa;AAAA,YACnB,YAAY,IAAI;AAAA,YAChB,QAAQ,IAAI,UAAU;AAAA,YACtB;AAAA,YACA;AAAA,YACA;AAAA,YACA,OAAO,EAAE,gBAAgB,MAAM,gBAAgB,UAAU,MAAM,SAAS;AAAA,YACxE,OAAO,IAAI;AAAA,YACX,YAAa,IAAI,cAAc,CAAC;AAAA,UAClC,CAAC;AAAA,UACD,kBAAkB,IAAI,eAAe,KAAK;AAAA,UAC1C;AAAA,QACF,GAAG;AACD,cAAI,IAAI,iBAAiB,MAAM,gBAAgB,wBAAwB,IAAI,eAAe,MAAM,UAAU,MAAM,cAAc,GAAG;AAC/H,kBAAM,YAAY,IAAI,IAAI,aAAa,OAAO,QAAW,oBAAoB;AAC7E;AAAA,UACF;AAEA,gBAAM,QAAQ,oBAAoB,KAAK;AACvC,4BAAkB,MAAM;AAExB,gBAAM,eAAe;AAAA,YACnB,IAAI;AAAA,YACJ;AAAA,cACE,cAAc;AAAA,cACd,cAAc,MAAM;AAAA,cACpB,cAAc,MAAM;AAAA,cACpB,aAAa,MAAM;AAAA,cACnB,kBAAkB;AAAA,YACpB;AAAA,YACA,MAAM;AAAA,YACN;AAAA,YACA,EAAE,0BAA0B,kBAAkB,oBAAoB;AAAA,UACpE;AACA,8BAAoB;AACpB,gBAAM,eAAe,IAAI,eAAe,gBAAgB,MAAM,KAAK;AACnE,gBAAM,sBAAsB,IAAI,IAAI,IAAI,eAAe,MAAM,SAAS,KAAK;AAE3E,gBAAM,oBAAoB;AAAA,YACxB,eAAe,IAAI;AAAA,YACnB,OAAO,IAAI;AAAA,YACX,OAAO;AAAA,YACP,SAAS,0BAA0B,MAAM,UAAU;AAAA,YACnD;AAAA,YACA,SAAS;AAAA,YACT,SAAS;AAAA,cACP,mBAAmB;AAAA,cACnB,SAAS,aAAa,cAAc;AAAA,cACpC;AAAA,cACA,WAAW,MAAM,QAAQ;AAAA,cACzB,QAAQ,MAAM;AAAA,YAChB;AAAA,UACF,CAAC;AAAA,QACH;AAAA,MACF,SAAS,OAAO;AACd,YAAI,iBAAiB,+BAA+B;AAClD,iBAAO,KAAK,uEAAuE;AAAA,YACjF,OAAO,IAAI;AAAA,YACX,0BAA0B,MAAM;AAAA,UAClC,CAAC;AACD;AAAA,QACF;AACA,cAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU;AACzD,cAAM,sBAAsB;AAAA,UAC1B;AAAA,YACE,eAAe,IAAI;AAAA,YACnB,OAAO,IAAI;AAAA,YACX,OAAO;AAAA,YACP;AAAA,UACF;AAAA,UACA;AAAA,QACF;AACA,cAAM,YAAY,IAAI,IAAI,UAAU,OAAO,SAAS,oBAAoB;AACxE;AAAA,MACF;AAEA,YAAM,YAAY,IAAI,IAAI,aAAa,OAAO,QAAW,oBAAoB;AAAA,IAC/E;AAAA,EACF;AACF;",
+  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport type { CredentialsService } from '../../integrations/lib/credentials-service'\nimport type { IntegrationLogService } from '../../integrations/lib/log-service'\nimport type { IntegrationStateService } from '../../integrations/lib/state-service'\nimport type { ProgressService } from '../../progress/lib/progressService'\nimport { STALE_JOB_TIMEOUT_SECONDS } from '../../progress/lib/progressService'\nimport { refreshCoverageSnapshot } from '../../query_index/lib/coverage'\nimport { emitDataSyncEvent } from '../events'\nimport type { DataSyncAdapter, DataMapping, ExportBatch, ImportBatch, RunParameterValue } from './adapter'\nimport { getDataSyncAdapter, resolveProviderKey } from './adapter-registry'\nimport type { SyncRunService } from './sync-run-service'\nimport { SyncRunOwnershipConflictError } from './sync-run-service'\nimport { forEachBatch } from './batch-stream'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\nimport {\n  captureTelemetryTrace,\n  type TelemetrySpanAttributes,\n} from '@open-mercato/shared/lib/telemetry/runtime'\nimport type { SyncRun } from '../data/entities'\n\nconst logger = createLogger('data_sync').child({ component: 'sync-engine' })\n\ntype RunParameters = Record<string, RunParameterValue>\n\ntype SyncScope = {\n  organizationId: string\n  tenantId: string\n  userId?: string | null\n}\n\ntype EngineDeps = {\n  em: EntityManager\n  syncRunService: SyncRunService\n  integrationCredentialsService: CredentialsService\n  integrationLogService: IntegrationLogService\n  integrationStateService?: IntegrationStateService\n  progressService: ProgressService\n}\n\n/** Repeated on every batch span so a rooted batch trace identifies its run on its own. */\nfunction runSpanAttributes(run: SyncRun, providerKey: string, scope: SyncScope): TelemetrySpanAttributes {\n  return {\n    'data_sync.run_id': run.id,\n    'data_sync.integration_id': run.integrationId,\n    'data_sync.provider_key': providerKey,\n    'data_sync.entity_type': run.entityType,\n    'data_sync.direction': run.direction,\n    'om.tenant_id': scope.tenantId,\n    'om.organization_id': scope.organizationId,\n  }\n}\n\nfunction applyImportCounters(batch: ImportBatch): Pick<Required<SyncCounterDelta>, 'createdCount' | 'updatedCount' | 'skippedCount' | 'failedCount'> {\n  let createdCount = 0\n  let updatedCount = 0\n  let skippedCount = 0\n  let failedCount = 0\n\n  for (const item of batch.items) {\n    if (item.action === 'create') createdCount += 1\n    else if (item.action === 'update') updatedCount += 1\n    else if (item.action === 'failed') failedCount += 1\n    else skippedCount += 1\n  }\n\n  return { createdCount, updatedCount, skippedCount, failedCount }\n}\n\ntype SyncCounterDelta = {\n  createdCount?: number\n  updatedCount?: number\n  skippedCount?: number\n  failedCount?: number\n  processedCount: number\n}\n\nfunction applyExportCounters(batch: ExportBatch): SyncCounterDelta {\n  let failedCount = 0\n  let skippedCount = 0\n  let updatedCount = 0\n\n  for (const result of batch.results) {\n    if (result.status === 'error') failedCount += 1\n    else if (result.status === 'skipped') skippedCount += 1\n    else updatedCount += 1\n  }\n\n  return {\n    failedCount,\n    skippedCount,\n    updatedCount,\n    processedCount: batch.results.length,\n  }\n}\n\n// Adapter batches can legitimately outlast the stale-job sweep window (slow upstream\n// APIs), so the engine must heartbeat while a batch is still being produced.\nconst HEARTBEAT_TICK_MS = (STALE_JOB_TIMEOUT_SECONDS * 1000) / 4\n\n// Runs `tick` on an interval only while the source iterator is pending, so heartbeats\n// stop the moment the producer dies and genuinely stale jobs still get swept. The outer\n// finally closes the adapter generator on early exits (cancellation, ownership conflict).\nasync function* withHeartbeat<T>(source: AsyncIterable<T>, tick: () => void, intervalMs: number): AsyncGenerator<T, void, undefined> {\n  const iterator = source[Symbol.asyncIterator]()\n  try {\n    while (true) {\n      const timer = setInterval(tick, intervalMs)\n      let result: IteratorResult<T>\n      try {\n        result = await iterator.next()\n      } finally {\n        clearInterval(timer)\n      }\n      if (result.done) return\n      yield result.value\n    }\n  } finally {\n    await iterator.return?.()\n  }\n}\n\nexport function createSyncEngine(deps: EngineDeps) {\n  const { syncRunService, integrationCredentialsService, integrationLogService, integrationStateService, progressService } = deps\n\n  async function resolveMapping(adapter: DataSyncAdapter, entityType: string, scope: SyncScope): Promise<DataMapping> {\n    return adapter.getMapping({\n      entityType,\n      scope: { organizationId: scope.organizationId, tenantId: scope.tenantId },\n    })\n  }\n\n  async function updateProgress(progressJobId: string | null | undefined, processedCount: number, totalCount: number | null, scope: SyncScope): Promise<void> {\n    if (!progressJobId) return\n\n    await progressService.updateProgress(\n      progressJobId,\n      {\n        processedCount,\n        totalCount: totalCount ?? undefined,\n      },\n      {\n        tenantId: scope.tenantId,\n        organizationId: scope.organizationId,\n        userId: scope.userId,\n      },\n    )\n  }\n\n  // On redelivery the progress counter must resume where the last delivery left off the\n  // same way committedBatches does \u2014 updateProgress writes absolute counts, so starting at\n  // zero would regress the visible count. The progress job's own processedCount is the only\n  // persisted value already in the engine's unit: `batch.processedCount ?? items.length`,\n  // i.e. source records. The run's created/updated/skipped/failed counters count emitted\n  // items, which adapters may explode several-per-source-record (Akeneo yields a product\n  // plus its variants), so seeding from them would overshoot the total and pin the bar.\n  async function seedProcessedCount(progressJobId: string | null | undefined, scope: SyncScope): Promise<number> {\n    if (!progressJobId) return 0\n    const job = await progressService.getJob(progressJobId, {\n      tenantId: scope.tenantId,\n      organizationId: scope.organizationId,\n      userId: scope.userId,\n    })\n    return job?.processedCount ?? 0\n  }\n\n  function makeHeartbeatTick(progressJobId: string | null | undefined, scope: SyncScope): () => void {\n    const touchJobHeartbeat = progressService.touchJobHeartbeat?.bind(progressService)\n    if (!progressJobId || !touchJobHeartbeat) return () => {}\n    let inFlight = false\n    return () => {\n      if (inFlight) return\n      inFlight = true\n      touchJobHeartbeat(progressJobId, {\n        tenantId: scope.tenantId,\n        organizationId: scope.organizationId,\n        userId: scope.userId,\n      })\n        .catch((error) => {\n          logger.warn('Progress heartbeat failed', {\n            progressJobId,\n            error: error instanceof Error ? error.message : String(error),\n          })\n        })\n        .finally(() => {\n          inFlight = false\n        })\n    }\n  }\n\n  async function refreshCoverageSnapshots(entityTypes: string[] | undefined, scope: SyncScope): Promise<void> {\n    if (!entityTypes || entityTypes.length === 0) return\n\n    await Promise.allSettled(\n      Array.from(new Set(entityTypes.filter((value) => typeof value === 'string' && value.trim().length > 0)))\n        .map((entityType) => refreshCoverageSnapshot(deps.em, {\n          entityType,\n          tenantId: scope.tenantId,\n          organizationId: scope.organizationId,\n        })),\n    )\n  }\n\n  async function logImportItemFailures(\n    runId: string,\n    integrationId: string,\n    items: ImportBatch['items'],\n    scope: SyncScope,\n  ): Promise<void> {\n    const failedItems = items.filter((item) => item.action === 'failed')\n    for (const item of failedItems) {\n      const errorMessage = typeof item.data.errorMessage === 'string' && item.data.errorMessage.trim().length > 0\n        ? item.data.errorMessage.trim()\n        : 'Import item failed'\n      const sourceProductUuid = typeof item.data.sourceProductUuid === 'string' && item.data.sourceProductUuid.trim().length > 0\n        ? item.data.sourceProductUuid.trim()\n        : null\n      const sourceIdentifier = typeof item.data.sourceIdentifier === 'string' && item.data.sourceIdentifier.trim().length > 0\n        ? item.data.sourceIdentifier.trim()\n        : null\n      const message = [\n        `Failed to import item ${item.externalId}`,\n        sourceProductUuid ? `(uuid: ${sourceProductUuid})` : null,\n        sourceIdentifier ? `(identifier: ${sourceIdentifier})` : null,\n        `: ${errorMessage}`,\n      ].filter((part) => part !== null).join(' ')\n\n      await integrationLogService.write(\n        {\n          integrationId,\n          runId,\n          level: 'error',\n          message,\n          payload: item.data,\n        },\n        scope,\n      )\n    }\n  }\n\n  async function logExportItemFailures(\n    runId: string,\n    integrationId: string,\n    results: ExportBatch['results'],\n    scope: SyncScope,\n  ): Promise<void> {\n    const failedResults = results.filter((result) => result.status === 'error' && result.error)\n    for (const result of failedResults) {\n      const label = result.externalId ? `${result.externalId} (id: ${result.localId})` : result.localId\n      const errorMessage = result.error!.split('\\n')[0]\n      const message = `Failed to export item ${label}: ${errorMessage}`\n\n      await integrationLogService.write(\n        {\n          integrationId,\n          runId,\n          level: 'error',\n          message,\n          payload: { kind: 'export-item-failure', summary: result.error },\n        },\n        scope,\n      )\n    }\n  }\n\n  async function writeOperationalLog(params: {\n    integrationId: string\n    runId: string\n    level: 'info' | 'warn' | 'error'\n    message: string\n    scope: SyncScope\n    enabled: boolean\n    payload?: Record<string, unknown>\n  }): Promise<void> {\n    if (!params.enabled) return\n\n    await integrationLogService.write(\n      {\n        integrationId: params.integrationId,\n        runId: params.runId,\n        level: params.level,\n        message: params.message,\n        payload: params.payload,\n      },\n      params.scope,\n    )\n  }\n\n  async function updateOperationalState(params: {\n    integrationId: string\n    status: 'healthy' | 'degraded' | 'unhealthy'\n    scope: SyncScope\n    enabled: boolean\n  }): Promise<void> {\n    if (!params.enabled || !integrationStateService) return\n\n    await integrationStateService.upsert(\n      params.integrationId,\n      {\n        lastHealthStatus: params.status,\n        lastHealthCheckedAt: new Date(),\n      },\n      params.scope,\n    )\n  }\n\n  async function finalizeRun(\n    runId: string,\n    status: 'completed' | 'failed' | 'cancelled',\n    scope: SyncScope,\n    error?: string,\n    operationalTelemetry = false,\n  ): Promise<void> {\n    const existingRun = await syncRunService.getRun(runId, scope)\n    const alreadyFinalizedWithSameStatus = existingRun?.status === status\n      && (status === 'completed' || status === 'failed' || status === 'cancelled')\n\n    const run = await syncRunService.markStatus(runId, status, scope, error)\n    if (!run) return\n\n    if (alreadyFinalizedWithSameStatus) {\n      return\n    }\n\n    if (run.status !== status) {\n      // `markStatus` refuses a terminal -> different-terminal transition and\n      // returns the row unchanged, so the run is already finished under another\n      // delivery of this job. Everything below \u2014 the progress job, the\n      // operational log and the lifecycle event \u2014 would describe the wrong\n      // outcome, and `data_sync.run.failed` is dispatched to tenant webhooks.\n      // A displaced worker stays silent instead.\n      logger.warn('Skipping finalization of a sync run another worker already finalized', {\n        runId,\n        requestedStatus: status,\n        actualStatus: run.status,\n      })\n      return\n    }\n\n    if (run.progressJobId) {\n      if (status === 'completed') {\n        await progressService.completeJob(\n          run.progressJobId,\n          {\n            resultSummary: {\n              createdCount: run.createdCount,\n              updatedCount: run.updatedCount,\n              skippedCount: run.skippedCount,\n              failedCount: run.failedCount,\n              batchesCompleted: run.batchesCompleted,\n            },\n          },\n          {\n            tenantId: scope.tenantId,\n            organizationId: scope.organizationId,\n            userId: scope.userId,\n          },\n        )\n      } else if (status === 'failed') {\n        await progressService.failJob(\n          run.progressJobId,\n          {\n            errorMessage: error ?? 'Sync run failed',\n          },\n          {\n            tenantId: scope.tenantId,\n            organizationId: scope.organizationId,\n            userId: scope.userId,\n          },\n        )\n      } else if (status === 'cancelled') {\n        await progressService.markCancelled(\n          run.progressJobId,\n          {\n            tenantId: scope.tenantId,\n            organizationId: scope.organizationId,\n            userId: scope.userId,\n          },\n        )\n      }\n    }\n\n    if (status === 'completed') {\n      await updateOperationalState({\n        integrationId: run.integrationId,\n        status: 'healthy',\n        scope,\n        enabled: operationalTelemetry,\n      })\n      await writeOperationalLog({\n        integrationId: run.integrationId,\n        runId: run.id,\n        level: 'info',\n        message: 'Sync run completed',\n        scope,\n        enabled: operationalTelemetry,\n        payload: {\n          operationalStatus: 'completed',\n          summary: `Sync completed with ${run.createdCount} created, ${run.updatedCount} updated, ${run.failedCount} failed.`,\n          createdCount: run.createdCount,\n          updatedCount: run.updatedCount,\n          skippedCount: run.skippedCount,\n          failedCount: run.failedCount,\n          batchesCompleted: run.batchesCompleted,\n        },\n      })\n    } else if (status === 'cancelled') {\n      await updateOperationalState({\n        integrationId: run.integrationId,\n        status: 'degraded',\n        scope,\n        enabled: operationalTelemetry,\n      })\n      await writeOperationalLog({\n        integrationId: run.integrationId,\n        runId: run.id,\n        level: 'warn',\n        message: 'Sync run cancelled',\n        scope,\n        enabled: operationalTelemetry,\n        payload: {\n          operationalStatus: 'cancelled',\n          summary: 'The sync run was cancelled before completion.',\n        },\n      })\n    } else {\n      await updateOperationalState({\n        integrationId: run.integrationId,\n        status: 'unhealthy',\n        scope,\n        enabled: operationalTelemetry,\n      })\n      await writeOperationalLog({\n        integrationId: run.integrationId,\n        runId: run.id,\n        level: 'error',\n        message: error ?? 'Sync run failed',\n        scope,\n        enabled: operationalTelemetry,\n        payload: {\n          operationalStatus: 'failed',\n          summary: error ?? 'The sync run failed.',\n        },\n      })\n    }\n\n    if (status === 'completed') {\n      await emitDataSyncEvent('data_sync.run.completed', {\n        runId,\n        integrationId: run.integrationId,\n        entityType: run.entityType,\n        direction: run.direction,\n        tenantId: scope.tenantId,\n        organizationId: scope.organizationId,\n      })\n      return\n    }\n\n    if (status === 'cancelled') {\n      await emitDataSyncEvent('data_sync.run.cancelled', {\n        runId,\n        integrationId: run.integrationId,\n        entityType: run.entityType,\n        direction: run.direction,\n        tenantId: scope.tenantId,\n        organizationId: scope.organizationId,\n      })\n      return\n    }\n\n    await emitDataSyncEvent('data_sync.run.failed', {\n      runId,\n      integrationId: run.integrationId,\n      entityType: run.entityType,\n      direction: run.direction,\n      error: error ?? null,\n      tenantId: scope.tenantId,\n      organizationId: scope.organizationId,\n    })\n  }\n\n  return {\n    async runImport(runId: string, batchSize: number, scope: SyncScope): Promise<void> {\n      const run = await syncRunService.getRun(runId, scope)\n      if (!run) {\n        logger.warn('Skipping stale import job for missing run', { runId })\n        return\n      }\n      if (run.status === 'cancelled') {\n        if (run.progressJobId) {\n          await progressService.markCancelled(run.progressJobId, {\n            tenantId: scope.tenantId,\n            organizationId: scope.organizationId,\n            userId: scope.userId,\n          })\n        }\n        return\n      }\n\n      const providerKey = resolveProviderKey(run.integrationId)\n      const adapter = getDataSyncAdapter(providerKey)\n      if (!adapter?.streamImport) {\n        throw new Error(`No import adapter registered for provider ${providerKey}`)\n      }\n      const operationalTelemetry = adapter.operationalTelemetry === true\n      const persistSharedCursor = adapter.persistsSharedCursor?.(run.entityType) ?? true\n\n      const credentials = await integrationCredentialsService.resolve(run.integrationId, scope)\n      if (!credentials) {\n        throw new Error(`Integration ${run.integrationId} is missing credentials`)\n      }\n\n      // A run already `running` means a stalled job was redelivered, so this is\n      // a resume rather than a first start. Consumers see one `started` event per\n      // delivery either way; the flag is what lets them tell the two apart.\n      const resumed = run.status === 'running'\n      const activeRun = await syncRunService.markStatus(run.id, 'running', scope)\n      if (!activeRun || activeRun.status !== 'running') {\n        return\n      }\n      await emitDataSyncEvent('data_sync.run.started', {\n        runId: run.id,\n        integrationId: run.integrationId,\n        entityType: run.entityType,\n        direction: run.direction,\n        resumed,\n        tenantId: scope.tenantId,\n        organizationId: scope.organizationId,\n      })\n      await updateOperationalState({\n        integrationId: run.integrationId,\n        status: 'degraded',\n        scope,\n        enabled: operationalTelemetry,\n      })\n      await writeOperationalLog({\n        integrationId: run.integrationId,\n        runId: run.id,\n        level: 'info',\n        message: 'Sync run started',\n        scope,\n        enabled: operationalTelemetry,\n        payload: {\n          operationalStatus: 'running',\n          summary: `Import run started for ${run.entityType}.`,\n          entityType: run.entityType,\n          direction: run.direction,\n        },\n      })\n\n      if (run.progressJobId) {\n        await progressService.startJob(run.progressJobId, {\n          tenantId: scope.tenantId,\n          organizationId: scope.organizationId,\n          userId: scope.userId,\n        })\n      }\n\n      const mapping = await resolveMapping(adapter, run.entityType, scope)\n      let processedCount = await seedProcessedCount(run.progressJobId, scope)\n      let totalCount: number | null = null\n      let committedBatches = activeRun.batchesCompleted ?? 0\n      // Captured while the triggering job's span is still the active one, so\n      // every rooted batch trace can link back to it.\n      const runTrace = captureTelemetryTrace()\n      const spanAttributes = runSpanAttributes(run, providerKey, scope)\n\n      try {\n        const streamResult = await forEachBatch(\n          withHeartbeat(\n            adapter.streamImport({\n              entityType: run.entityType,\n              cursor: run.cursor ?? undefined,\n              batchSize,\n              credentials,\n              mapping,\n              scope: { organizationId: scope.organizationId, tenantId: scope.tenantId },\n              runId: run.id,\n              parameters: (run.parameters ?? {}) as RunParameters,\n            }),\n            makeHeartbeatTick(run.progressJobId, scope),\n            HEARTBEAT_TICK_MS,\n          ),\n          {\n            spanName: 'data_sync.import.batch',\n            drainSpanName: 'data_sync.import.drain',\n            attributes: spanAttributes,\n            linkTo: runTrace,\n          },\n          async (batch, span) => {\n            span.setAttributes({\n              'data_sync.batch_index': batch.batchIndex,\n              'data_sync.batch_size': batch.items.length,\n            })\n\n            if (run.progressJobId && await progressService.isCancellationRequested(run.progressJobId, scope.tenantId, scope.organizationId)) {\n              await finalizeRun(run.id, 'cancelled', scope, undefined, operationalTelemetry)\n              return 'stop'\n            }\n\n            const delta = applyImportCounters(batch)\n            const processedBatchCount = batch.processedCount ?? batch.items.length\n            processedCount += processedBatchCount\n            totalCount = batch.totalEstimate ?? totalCount\n\n            span.setAttributes({\n              'data_sync.processed_count': processedBatchCount,\n              'data_sync.created_count': delta.createdCount,\n              'data_sync.updated_count': delta.updatedCount,\n              'data_sync.skipped_count': delta.skippedCount,\n              'data_sync.failed_count': delta.failedCount,\n            })\n\n            await syncRunService.commitBatchProgress(\n              run.id,\n              {\n                ...delta,\n                batchesCompleted: 1,\n              },\n              batch.cursor,\n              scope,\n              { expectedBatchesCompleted: committedBatches, persistSharedCursor },\n            )\n            committedBatches += 1\n\n            await updateProgress(run.progressJobId, processedCount, totalCount, scope)\n            await refreshCoverageSnapshots(batch.refreshCoverageEntityTypes, scope)\n            await logImportItemFailures(run.id, run.integrationId, batch.items, scope)\n\n            await writeOperationalLog({\n              integrationId: run.integrationId,\n              runId: run.id,\n              level: 'info',\n              message: batch.message?.trim().length\n                ? batch.message.trim()\n                : `Processed import batch ${batch.batchIndex}`,\n              scope,\n              enabled: operationalTelemetry,\n              payload: {\n                operationalStatus: 'running',\n                summary: `Processed ${processedCount}${totalCount ? ` of ${totalCount}` : ''} rows so far.`,\n                processedCount,\n                batchSize: batch.items.length,\n                processedBatchCount,\n                cursor: batch.cursor,\n              },\n            })\n\n            return 'continue'\n          },\n        )\n        if (streamResult === 'stopped') return\n      } catch (error) {\n        if (error instanceof SyncRunOwnershipConflictError) {\n          logger.warn('Yielding import run to a concurrent worker that already advanced it', {\n            runId: run.id,\n            expectedBatchesCompleted: error.expectedBatchesCompleted,\n          })\n          return\n        }\n        const message = error instanceof Error ? error.message : 'Sync import failed'\n        await integrationLogService.write(\n          {\n            integrationId: run.integrationId,\n            runId: run.id,\n            level: 'error',\n            message,\n          },\n          scope,\n        )\n        await finalizeRun(run.id, 'failed', scope, message, operationalTelemetry)\n        return\n      }\n\n      await finalizeRun(run.id, 'completed', scope, undefined, operationalTelemetry)\n    },\n\n    async runExport(runId: string, batchSize: number, scope: SyncScope): Promise<void> {\n      const run = await syncRunService.getRun(runId, scope)\n      if (!run) {\n        logger.warn('Skipping stale export job for missing run', { runId })\n        return\n      }\n      if (run.status === 'cancelled') {\n        if (run.progressJobId) {\n          await progressService.markCancelled(run.progressJobId, {\n            tenantId: scope.tenantId,\n            organizationId: scope.organizationId,\n            userId: scope.userId,\n          })\n        }\n        return\n      }\n\n      const providerKey = resolveProviderKey(run.integrationId)\n      const adapter = getDataSyncAdapter(providerKey)\n      if (!adapter?.streamExport) {\n        throw new Error(`No export adapter registered for provider ${providerKey}`)\n      }\n      const operationalTelemetry = adapter.operationalTelemetry === true\n      const persistSharedCursor = adapter.persistsSharedCursor?.(run.entityType) ?? true\n\n      const credentials = await integrationCredentialsService.resolve(run.integrationId, scope)\n      if (!credentials) {\n        throw new Error(`Integration ${run.integrationId} is missing credentials`)\n      }\n\n      // A run already `running` means a stalled job was redelivered, so this is\n      // a resume rather than a first start. Consumers see one `started` event per\n      // delivery either way; the flag is what lets them tell the two apart.\n      const resumed = run.status === 'running'\n      const activeRun = await syncRunService.markStatus(run.id, 'running', scope)\n      if (!activeRun || activeRun.status !== 'running') {\n        return\n      }\n      await emitDataSyncEvent('data_sync.run.started', {\n        runId: run.id,\n        integrationId: run.integrationId,\n        entityType: run.entityType,\n        direction: run.direction,\n        resumed,\n        tenantId: scope.tenantId,\n        organizationId: scope.organizationId,\n      })\n      await updateOperationalState({\n        integrationId: run.integrationId,\n        status: 'degraded',\n        scope,\n        enabled: operationalTelemetry,\n      })\n      await writeOperationalLog({\n        integrationId: run.integrationId,\n        runId: run.id,\n        level: 'info',\n        message: 'Sync run started',\n        scope,\n        enabled: operationalTelemetry,\n        payload: {\n          operationalStatus: 'running',\n          summary: `Export run started for ${run.entityType}.`,\n          entityType: run.entityType,\n          direction: run.direction,\n        },\n      })\n\n      if (run.progressJobId) {\n        await progressService.startJob(run.progressJobId, {\n          tenantId: scope.tenantId,\n          organizationId: scope.organizationId,\n          userId: scope.userId,\n        })\n      }\n\n      const mapping = await resolveMapping(adapter, run.entityType, scope)\n      let processedCount = await seedProcessedCount(run.progressJobId, scope)\n      let committedBatches = activeRun.batchesCompleted ?? 0\n      // Captured while the triggering job's span is still the active one, so\n      // every rooted batch trace can link back to it.\n      const runTrace = captureTelemetryTrace()\n      const spanAttributes = runSpanAttributes(run, providerKey, scope)\n\n      try {\n        const streamResult = await forEachBatch(\n          withHeartbeat(\n            adapter.streamExport({\n              entityType: run.entityType,\n              cursor: run.cursor ?? undefined,\n              batchSize,\n              credentials,\n              mapping,\n              scope: { organizationId: scope.organizationId, tenantId: scope.tenantId },\n              runId: run.id,\n              parameters: (run.parameters ?? {}) as RunParameters,\n            }),\n            makeHeartbeatTick(run.progressJobId, scope),\n            HEARTBEAT_TICK_MS,\n          ),\n          {\n            spanName: 'data_sync.export.batch',\n            drainSpanName: 'data_sync.export.drain',\n            attributes: spanAttributes,\n            linkTo: runTrace,\n          },\n          async (batch, span) => {\n            span.setAttributes({\n              'data_sync.batch_index': batch.batchIndex,\n              'data_sync.batch_size': batch.results.length,\n            })\n\n            if (run.progressJobId && await progressService.isCancellationRequested(run.progressJobId, scope.tenantId, scope.organizationId)) {\n              await finalizeRun(run.id, 'cancelled', scope, undefined, operationalTelemetry)\n              return 'stop'\n            }\n\n            const delta = applyExportCounters(batch)\n            processedCount += delta.processedCount\n\n            span.setAttributes({\n              'data_sync.processed_count': delta.processedCount,\n              'data_sync.updated_count': delta.updatedCount,\n              'data_sync.skipped_count': delta.skippedCount,\n              'data_sync.failed_count': delta.failedCount,\n            })\n\n            await syncRunService.commitBatchProgress(\n              run.id,\n              {\n                createdCount: 0,\n                updatedCount: delta.updatedCount,\n                skippedCount: delta.skippedCount,\n                failedCount: delta.failedCount,\n                batchesCompleted: 1,\n              },\n              batch.cursor,\n              scope,\n              { expectedBatchesCompleted: committedBatches, persistSharedCursor },\n            )\n            committedBatches += 1\n            await updateProgress(run.progressJobId, processedCount, null, scope)\n            await logExportItemFailures(run.id, run.integrationId, batch.results, scope)\n\n            await writeOperationalLog({\n              integrationId: run.integrationId,\n              runId: run.id,\n              level: 'info',\n              message: `Processed export batch ${batch.batchIndex}`,\n              scope,\n              enabled: operationalTelemetry,\n              payload: {\n                operationalStatus: 'running',\n                summary: `Processed ${processedCount} export items so far.`,\n                processedCount,\n                batchSize: batch.results.length,\n                cursor: batch.cursor,\n              },\n            })\n\n            return 'continue'\n          },\n        )\n        if (streamResult === 'stopped') return\n      } catch (error) {\n        if (error instanceof SyncRunOwnershipConflictError) {\n          logger.warn('Yielding export run to a concurrent worker that already advanced it', {\n            runId: run.id,\n            expectedBatchesCompleted: error.expectedBatchesCompleted,\n          })\n          return\n        }\n        const message = error instanceof Error ? error.message : 'Sync export failed'\n        await integrationLogService.write(\n          {\n            integrationId: run.integrationId,\n            runId: run.id,\n            level: 'error',\n            message,\n          },\n          scope,\n        )\n        await finalizeRun(run.id, 'failed', scope, message, operationalTelemetry)\n        return\n      }\n\n      await finalizeRun(run.id, 'completed', scope, undefined, operationalTelemetry)\n    },\n  }\n}\n\nexport type SyncEngine = ReturnType<typeof createSyncEngine>\n"],
+  "mappings": "AAKA,SAAS,iCAAiC;AAC1C,SAAS,+BAA+B;AACxC,SAAS,yBAAyB;AAElC,SAAS,oBAAoB,0BAA0B;AAEvD,SAAS,qCAAqC;AAC9C,SAAS,oBAAoB;AAC7B,SAAS,oBAAoB;AAC7B;AAAA,EACE;AAAA,OAEK;AAGP,MAAM,SAAS,aAAa,WAAW,EAAE,MAAM,EAAE,WAAW,cAAc,CAAC;AAoB3E,SAAS,kBAAkB,KAAc,aAAqB,OAA2C;AACvG,SAAO;AAAA,IACL,oBAAoB,IAAI;AAAA,IACxB,4BAA4B,IAAI;AAAA,IAChC,0BAA0B;AAAA,IAC1B,yBAAyB,IAAI;AAAA,IAC7B,uBAAuB,IAAI;AAAA,IAC3B,gBAAgB,MAAM;AAAA,IACtB,sBAAsB,MAAM;AAAA,EAC9B;AACF;AAEA,SAAS,oBAAoB,OAAwH;AACnJ,MAAI,eAAe;AACnB,MAAI,eAAe;AACnB,MAAI,eAAe;AACnB,MAAI,cAAc;AAElB,aAAW,QAAQ,MAAM,OAAO;AAC9B,QAAI,KAAK,WAAW,SAAU,iBAAgB;AAAA,aACrC,KAAK,WAAW,SAAU,iBAAgB;AAAA,aAC1C,KAAK,WAAW,SAAU,gBAAe;AAAA,QAC7C,iBAAgB;AAAA,EACvB;AAEA,SAAO,EAAE,cAAc,cAAc,cAAc,YAAY;AACjE;AAUA,SAAS,oBAAoB,OAAsC;AACjE,MAAI,cAAc;AAClB,MAAI,eAAe;AACnB,MAAI,eAAe;AAEnB,aAAW,UAAU,MAAM,SAAS;AAClC,QAAI,OAAO,WAAW,QAAS,gBAAe;AAAA,aACrC,OAAO,WAAW,UAAW,iBAAgB;AAAA,QACjD,iBAAgB;AAAA,EACvB;AAEA,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA,gBAAgB,MAAM,QAAQ;AAAA,EAChC;AACF;AAIA,MAAM,oBAAqB,4BAA4B,MAAQ;AAK/D,gBAAgB,cAAiB,QAA0B,MAAkB,YAAwD;AACnI,QAAM,WAAW,OAAO,OAAO,aAAa,EAAE;AAC9C,MAAI;AACF,WAAO,MAAM;AACX,YAAM,QAAQ,YAAY,MAAM,UAAU;AAC1C,UAAI;AACJ,UAAI;AACF,iBAAS,MAAM,SAAS,KAAK;AAAA,MAC/B,UAAE;AACA,sBAAc,KAAK;AAAA,MACrB;AACA,UAAI,OAAO,KAAM;AACjB,YAAM,OAAO;AAAA,IACf;AAAA,EACF,UAAE;AACA,UAAM,SAAS,SAAS;AAAA,EAC1B;AACF;AAEO,SAAS,iBAAiB,MAAkB;AACjD,QAAM,EAAE,gBAAgB,+BAA+B,uBAAuB,yBAAyB,gBAAgB,IAAI;AAE3H,iBAAe,eAAe,SAA0B,YAAoB,OAAwC;AAClH,WAAO,QAAQ,WAAW;AAAA,MACxB;AAAA,MACA,OAAO,EAAE,gBAAgB,MAAM,gBAAgB,UAAU,MAAM,SAAS;AAAA,IAC1E,CAAC;AAAA,EACH;AAEA,iBAAe,eAAe,eAA0C,gBAAwB,YAA2B,OAAiC;AAC1J,QAAI,CAAC,cAAe;AAEpB,UAAM,gBAAgB;AAAA,MACpB;AAAA,MACA;AAAA,QACE;AAAA,QACA,YAAY,cAAc;AAAA,MAC5B;AAAA,MACA;AAAA,QACE,UAAU,MAAM;AAAA,QAChB,gBAAgB,MAAM;AAAA,QACtB,QAAQ,MAAM;AAAA,MAChB;AAAA,IACF;AAAA,EACF;AASA,iBAAe,mBAAmB,eAA0C,OAAmC;AAC7G,QAAI,CAAC,cAAe,QAAO;AAC3B,UAAM,MAAM,MAAM,gBAAgB,OAAO,eAAe;AAAA,MACtD,UAAU,MAAM;AAAA,MAChB,gBAAgB,MAAM;AAAA,MACtB,QAAQ,MAAM;AAAA,IAChB,CAAC;AACD,WAAO,KAAK,kBAAkB;AAAA,EAChC;AAEA,WAAS,kBAAkB,eAA0C,OAA8B;AACjG,UAAM,oBAAoB,gBAAgB,mBAAmB,KAAK,eAAe;AACjF,QAAI,CAAC,iBAAiB,CAAC,kBAAmB,QAAO,MAAM;AAAA,IAAC;AACxD,QAAI,WAAW;AACf,WAAO,MAAM;AACX,UAAI,SAAU;AACd,iBAAW;AACX,wBAAkB,eAAe;AAAA,QAC/B,UAAU,MAAM;AAAA,QAChB,gBAAgB,MAAM;AAAA,QACtB,QAAQ,MAAM;AAAA,MAChB,CAAC,EACE,MAAM,CAAC,UAAU;AAChB,eAAO,KAAK,6BAA6B;AAAA,UACvC;AAAA,UACA,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AAAA,QAC9D,CAAC;AAAA,MACH,CAAC,EACA,QAAQ,MAAM;AACb,mBAAW;AAAA,MACb,CAAC;AAAA,IACL;AAAA,EACF;AAEA,iBAAe,yBAAyB,aAAmC,OAAiC;AAC1G,QAAI,CAAC,eAAe,YAAY,WAAW,EAAG;AAE9C,UAAM,QAAQ;AAAA,MACZ,MAAM,KAAK,IAAI,IAAI,YAAY,OAAO,CAAC,UAAU,OAAO,UAAU,YAAY,MAAM,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,EACpG,IAAI,CAAC,eAAe,wBAAwB,KAAK,IAAI;AAAA,QACpD;AAAA,QACA,UAAU,MAAM;AAAA,QAChB,gBAAgB,MAAM;AAAA,MACxB,CAAC,CAAC;AAAA,IACN;AAAA,EACF;AAEA,iBAAe,sBACb,OACA,eACA,OACA,OACe;AACf,UAAM,cAAc,MAAM,OAAO,CAAC,SAAS,KAAK,WAAW,QAAQ;AACnE,eAAW,QAAQ,aAAa;AAC9B,YAAM,eAAe,OAAO,KAAK,KAAK,iBAAiB,YAAY,KAAK,KAAK,aAAa,KAAK,EAAE,SAAS,IACtG,KAAK,KAAK,aAAa,KAAK,IAC5B;AACJ,YAAM,oBAAoB,OAAO,KAAK,KAAK,sBAAsB,YAAY,KAAK,KAAK,kBAAkB,KAAK,EAAE,SAAS,IACrH,KAAK,KAAK,kBAAkB,KAAK,IACjC;AACJ,YAAM,mBAAmB,OAAO,KAAK,KAAK,qBAAqB,YAAY,KAAK,KAAK,iBAAiB,KAAK,EAAE,SAAS,IAClH,KAAK,KAAK,iBAAiB,KAAK,IAChC;AACJ,YAAM,UAAU;AAAA,QACd,yBAAyB,KAAK,UAAU;AAAA,QACxC,oBAAoB,UAAU,iBAAiB,MAAM;AAAA,QACrD,mBAAmB,gBAAgB,gBAAgB,MAAM;AAAA,QACzD,KAAK,YAAY;AAAA,MACnB,EAAE,OAAO,CAAC,SAAS,SAAS,IAAI,EAAE,KAAK,GAAG;AAE1C,YAAM,sBAAsB;AAAA,QAC1B;AAAA,UACE;AAAA,UACA;AAAA,UACA,OAAO;AAAA,UACP;AAAA,UACA,SAAS,KAAK;AAAA,QAChB;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA,iBAAe,sBACb,OACA,eACA,SACA,OACe;AACf,UAAM,gBAAgB,QAAQ,OAAO,CAAC,WAAW,OAAO,WAAW,WAAW,OAAO,KAAK;AAC1F,eAAW,UAAU,eAAe;AAClC,YAAM,QAAQ,OAAO,aAAa,GAAG,OAAO,UAAU,SAAS,OAAO,OAAO,MAAM,OAAO;AAC1F,YAAM,eAAe,OAAO,MAAO,MAAM,IAAI,EAAE,CAAC;AAChD,YAAM,UAAU,yBAAyB,KAAK,KAAK,YAAY;AAE/D,YAAM,sBAAsB;AAAA,QAC1B;AAAA,UACE;AAAA,UACA;AAAA,UACA,OAAO;AAAA,UACP;AAAA,UACA,SAAS,EAAE,MAAM,uBAAuB,SAAS,OAAO,MAAM;AAAA,QAChE;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA,iBAAe,oBAAoB,QAQjB;AAChB,QAAI,CAAC,OAAO,QAAS;AAErB,UAAM,sBAAsB;AAAA,MAC1B;AAAA,QACE,eAAe,OAAO;AAAA,QACtB,OAAO,OAAO;AAAA,QACd,OAAO,OAAO;AAAA,QACd,SAAS,OAAO;AAAA,QAChB,SAAS,OAAO;AAAA,MAClB;AAAA,MACA,OAAO;AAAA,IACT;AAAA,EACF;AAEA,iBAAe,uBAAuB,QAKpB;AAChB,QAAI,CAAC,OAAO,WAAW,CAAC,wBAAyB;AAEjD,UAAM,wBAAwB;AAAA,MAC5B,OAAO;AAAA,MACP;AAAA,QACE,kBAAkB,OAAO;AAAA,QACzB,qBAAqB,oBAAI,KAAK;AAAA,MAChC;AAAA,MACA,OAAO;AAAA,IACT;AAAA,EACF;AAEA,iBAAe,YACb,OACA,QACA,OACA,OACA,uBAAuB,OACR;AACf,UAAM,cAAc,MAAM,eAAe,OAAO,OAAO,KAAK;AAC5D,UAAM,iCAAiC,aAAa,WAAW,WACzD,WAAW,eAAe,WAAW,YAAY,WAAW;AAElE,UAAM,MAAM,MAAM,eAAe,WAAW,OAAO,QAAQ,OAAO,KAAK;AACvE,QAAI,CAAC,IAAK;AAEV,QAAI,gCAAgC;AAClC;AAAA,IACF;AAEA,QAAI,IAAI,WAAW,QAAQ;AAOzB,aAAO,KAAK,wEAAwE;AAAA,QAClF;AAAA,QACA,iBAAiB;AAAA,QACjB,cAAc,IAAI;AAAA,MACpB,CAAC;AACD;AAAA,IACF;AAEA,QAAI,IAAI,eAAe;AACrB,UAAI,WAAW,aAAa;AAC1B,cAAM,gBAAgB;AAAA,UACpB,IAAI;AAAA,UACJ;AAAA,YACE,eAAe;AAAA,cACb,cAAc,IAAI;AAAA,cAClB,cAAc,IAAI;AAAA,cAClB,cAAc,IAAI;AAAA,cAClB,aAAa,IAAI;AAAA,cACjB,kBAAkB,IAAI;AAAA,YACxB;AAAA,UACF;AAAA,UACA;AAAA,YACE,UAAU,MAAM;AAAA,YAChB,gBAAgB,MAAM;AAAA,YACtB,QAAQ,MAAM;AAAA,UAChB;AAAA,QACF;AAAA,MACF,WAAW,WAAW,UAAU;AAC9B,cAAM,gBAAgB;AAAA,UACpB,IAAI;AAAA,UACJ;AAAA,YACE,cAAc,SAAS;AAAA,UACzB;AAAA,UACA;AAAA,YACE,UAAU,MAAM;AAAA,YAChB,gBAAgB,MAAM;AAAA,YACtB,QAAQ,MAAM;AAAA,UAChB;AAAA,QACF;AAAA,MACF,WAAW,WAAW,aAAa;AACjC,cAAM,gBAAgB;AAAA,UACpB,IAAI;AAAA,UACJ;AAAA,YACE,UAAU,MAAM;AAAA,YAChB,gBAAgB,MAAM;AAAA,YACtB,QAAQ,MAAM;AAAA,UAChB;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAEA,QAAI,WAAW,aAAa;AAC1B,YAAM,uBAAuB;AAAA,QAC3B,eAAe,IAAI;AAAA,QACnB,QAAQ;AAAA,QACR;AAAA,QACA,SAAS;AAAA,MACX,CAAC;AACD,YAAM,oBAAoB;AAAA,QACxB,eAAe,IAAI;AAAA,QACnB,OAAO,IAAI;AAAA,QACX,OAAO;AAAA,QACP,SAAS;AAAA,QACT;AAAA,QACA,SAAS;AAAA,QACT,SAAS;AAAA,UACP,mBAAmB;AAAA,UACnB,SAAS,uBAAuB,IAAI,YAAY,aAAa,IAAI,YAAY,aAAa,IAAI,WAAW;AAAA,UACzG,cAAc,IAAI;AAAA,UAClB,cAAc,IAAI;AAAA,UAClB,cAAc,IAAI;AAAA,UAClB,aAAa,IAAI;AAAA,UACjB,kBAAkB,IAAI;AAAA,QACxB;AAAA,MACF,CAAC;AAAA,IACH,WAAW,WAAW,aAAa;AACjC,YAAM,uBAAuB;AAAA,QAC3B,eAAe,IAAI;AAAA,QACnB,QAAQ;AAAA,QACR;AAAA,QACA,SAAS;AAAA,MACX,CAAC;AACD,YAAM,oBAAoB;AAAA,QACxB,eAAe,IAAI;AAAA,QACnB,OAAO,IAAI;AAAA,QACX,OAAO;AAAA,QACP,SAAS;AAAA,QACT;AAAA,QACA,SAAS;AAAA,QACT,SAAS;AAAA,UACP,mBAAmB;AAAA,UACnB,SAAS;AAAA,QACX;AAAA,MACF,CAAC;AAAA,IACH,OAAO;AACL,YAAM,uBAAuB;AAAA,QAC3B,eAAe,IAAI;AAAA,QACnB,QAAQ;AAAA,QACR;AAAA,QACA,SAAS;AAAA,MACX,CAAC;AACD,YAAM,oBAAoB;AAAA,QACxB,eAAe,IAAI;AAAA,QACnB,OAAO,IAAI;AAAA,QACX,OAAO;AAAA,QACP,SAAS,SAAS;AAAA,QAClB;AAAA,QACA,SAAS;AAAA,QACT,SAAS;AAAA,UACP,mBAAmB;AAAA,UACnB,SAAS,SAAS;AAAA,QACpB;AAAA,MACF,CAAC;AAAA,IACH;AAEA,QAAI,WAAW,aAAa;AAC1B,YAAM,kBAAkB,2BAA2B;AAAA,QACjD;AAAA,QACA,eAAe,IAAI;AAAA,QACnB,YAAY,IAAI;AAAA,QAChB,WAAW,IAAI;AAAA,QACf,UAAU,MAAM;AAAA,QAChB,gBAAgB,MAAM;AAAA,MACxB,CAAC;AACD;AAAA,IACF;AAEA,QAAI,WAAW,aAAa;AAC1B,YAAM,kBAAkB,2BAA2B;AAAA,QACjD;AAAA,QACA,eAAe,IAAI;AAAA,QACnB,YAAY,IAAI;AAAA,QAChB,WAAW,IAAI;AAAA,QACf,UAAU,MAAM;AAAA,QAChB,gBAAgB,MAAM;AAAA,MACxB,CAAC;AACD;AAAA,IACF;AAEA,UAAM,kBAAkB,wBAAwB;AAAA,MAC9C;AAAA,MACA,eAAe,IAAI;AAAA,MACnB,YAAY,IAAI;AAAA,MAChB,WAAW,IAAI;AAAA,MACf,OAAO,SAAS;AAAA,MAChB,UAAU,MAAM;AAAA,MAChB,gBAAgB,MAAM;AAAA,IACxB,CAAC;AAAA,EACH;AAEA,SAAO;AAAA,IACL,MAAM,UAAU,OAAe,WAAmB,OAAiC;AACjF,YAAM,MAAM,MAAM,eAAe,OAAO,OAAO,KAAK;AACpD,UAAI,CAAC,KAAK;AACR,eAAO,KAAK,6CAA6C,EAAE,MAAM,CAAC;AAClE;AAAA,MACF;AACA,UAAI,IAAI,WAAW,aAAa;AAC9B,YAAI,IAAI,eAAe;AACrB,gBAAM,gBAAgB,cAAc,IAAI,eAAe;AAAA,YACrD,UAAU,MAAM;AAAA,YAChB,gBAAgB,MAAM;AAAA,YACtB,QAAQ,MAAM;AAAA,UAChB,CAAC;AAAA,QACH;AACA;AAAA,MACF;AAEA,YAAM,cAAc,mBAAmB,IAAI,aAAa;AACxD,YAAM,UAAU,mBAAmB,WAAW;AAC9C,UAAI,CAAC,SAAS,cAAc;AAC1B,cAAM,IAAI,MAAM,6CAA6C,WAAW,EAAE;AAAA,MAC5E;AACA,YAAM,uBAAuB,QAAQ,yBAAyB;AAC9D,YAAM,sBAAsB,QAAQ,uBAAuB,IAAI,UAAU,KAAK;AAE9E,YAAM,cAAc,MAAM,8BAA8B,QAAQ,IAAI,eAAe,KAAK;AACxF,UAAI,CAAC,aAAa;AAChB,cAAM,IAAI,MAAM,eAAe,IAAI,aAAa,yBAAyB;AAAA,MAC3E;AAKA,YAAM,UAAU,IAAI,WAAW;AAC/B,YAAM,YAAY,MAAM,eAAe,WAAW,IAAI,IAAI,WAAW,KAAK;AAC1E,UAAI,CAAC,aAAa,UAAU,WAAW,WAAW;AAChD;AAAA,MACF;AACA,YAAM,kBAAkB,yBAAyB;AAAA,QAC/C,OAAO,IAAI;AAAA,QACX,eAAe,IAAI;AAAA,QACnB,YAAY,IAAI;AAAA,QAChB,WAAW,IAAI;AAAA,QACf;AAAA,QACA,UAAU,MAAM;AAAA,QAChB,gBAAgB,MAAM;AAAA,MACxB,CAAC;AACD,YAAM,uBAAuB;AAAA,QAC3B,eAAe,IAAI;AAAA,QACnB,QAAQ;AAAA,QACR;AAAA,QACA,SAAS;AAAA,MACX,CAAC;AACD,YAAM,oBAAoB;AAAA,QACxB,eAAe,IAAI;AAAA,QACnB,OAAO,IAAI;AAAA,QACX,OAAO;AAAA,QACP,SAAS;AAAA,QACT;AAAA,QACA,SAAS;AAAA,QACT,SAAS;AAAA,UACP,mBAAmB;AAAA,UACnB,SAAS,0BAA0B,IAAI,UAAU;AAAA,UACjD,YAAY,IAAI;AAAA,UAChB,WAAW,IAAI;AAAA,QACjB;AAAA,MACF,CAAC;AAED,UAAI,IAAI,eAAe;AACrB,cAAM,gBAAgB,SAAS,IAAI,eAAe;AAAA,UAChD,UAAU,MAAM;AAAA,UAChB,gBAAgB,MAAM;AAAA,UACtB,QAAQ,MAAM;AAAA,QAChB,CAAC;AAAA,MACH;AAEA,YAAM,UAAU,MAAM,eAAe,SAAS,IAAI,YAAY,KAAK;AACnE,UAAI,iBAAiB,MAAM,mBAAmB,IAAI,eAAe,KAAK;AACtE,UAAI,aAA4B;AAChC,UAAI,mBAAmB,UAAU,oBAAoB;AAGrD,YAAM,WAAW,sBAAsB;AACvC,YAAM,iBAAiB,kBAAkB,KAAK,aAAa,KAAK;AAEhE,UAAI;AACF,cAAM,eAAe,MAAM;AAAA,UACzB;AAAA,YACE,QAAQ,aAAa;AAAA,cACnB,YAAY,IAAI;AAAA,cAChB,QAAQ,IAAI,UAAU;AAAA,cACtB;AAAA,cACA;AAAA,cACA;AAAA,cACA,OAAO,EAAE,gBAAgB,MAAM,gBAAgB,UAAU,MAAM,SAAS;AAAA,cACxE,OAAO,IAAI;AAAA,cACX,YAAa,IAAI,cAAc,CAAC;AAAA,YAClC,CAAC;AAAA,YACD,kBAAkB,IAAI,eAAe,KAAK;AAAA,YAC1C;AAAA,UACF;AAAA,UACA;AAAA,YACE,UAAU;AAAA,YACV,eAAe;AAAA,YACf,YAAY;AAAA,YACZ,QAAQ;AAAA,UACV;AAAA,UACA,OAAO,OAAO,SAAS;AACrB,iBAAK,cAAc;AAAA,cACjB,yBAAyB,MAAM;AAAA,cAC/B,wBAAwB,MAAM,MAAM;AAAA,YACtC,CAAC;AAED,gBAAI,IAAI,iBAAiB,MAAM,gBAAgB,wBAAwB,IAAI,eAAe,MAAM,UAAU,MAAM,cAAc,GAAG;AAC/H,oBAAM,YAAY,IAAI,IAAI,aAAa,OAAO,QAAW,oBAAoB;AAC7E,qBAAO;AAAA,YACT;AAEA,kBAAM,QAAQ,oBAAoB,KAAK;AACvC,kBAAM,sBAAsB,MAAM,kBAAkB,MAAM,MAAM;AAChE,8BAAkB;AAClB,yBAAa,MAAM,iBAAiB;AAEpC,iBAAK,cAAc;AAAA,cACjB,6BAA6B;AAAA,cAC7B,2BAA2B,MAAM;AAAA,cACjC,2BAA2B,MAAM;AAAA,cACjC,2BAA2B,MAAM;AAAA,cACjC,0BAA0B,MAAM;AAAA,YAClC,CAAC;AAED,kBAAM,eAAe;AAAA,cACnB,IAAI;AAAA,cACJ;AAAA,gBACE,GAAG;AAAA,gBACH,kBAAkB;AAAA,cACpB;AAAA,cACA,MAAM;AAAA,cACN;AAAA,cACA,EAAE,0BAA0B,kBAAkB,oBAAoB;AAAA,YACpE;AACA,gCAAoB;AAEpB,kBAAM,eAAe,IAAI,eAAe,gBAAgB,YAAY,KAAK;AACzE,kBAAM,yBAAyB,MAAM,4BAA4B,KAAK;AACtE,kBAAM,sBAAsB,IAAI,IAAI,IAAI,eAAe,MAAM,OAAO,KAAK;AAEzE,kBAAM,oBAAoB;AAAA,cACxB,eAAe,IAAI;AAAA,cACnB,OAAO,IAAI;AAAA,cACX,OAAO;AAAA,cACP,SAAS,MAAM,SAAS,KAAK,EAAE,SAC3B,MAAM,QAAQ,KAAK,IACnB,0BAA0B,MAAM,UAAU;AAAA,cAC9C;AAAA,cACA,SAAS;AAAA,cACT,SAAS;AAAA,gBACP,mBAAmB;AAAA,gBACnB,SAAS,aAAa,cAAc,GAAG,aAAa,OAAO,UAAU,KAAK,EAAE;AAAA,gBAC5E;AAAA,gBACA,WAAW,MAAM,MAAM;AAAA,gBACvB;AAAA,gBACA,QAAQ,MAAM;AAAA,cAChB;AAAA,YACF,CAAC;AAED,mBAAO;AAAA,UACT;AAAA,QACF;AACA,YAAI,iBAAiB,UAAW;AAAA,MAClC,SAAS,OAAO;AACd,YAAI,iBAAiB,+BAA+B;AAClD,iBAAO,KAAK,uEAAuE;AAAA,YACjF,OAAO,IAAI;AAAA,YACX,0BAA0B,MAAM;AAAA,UAClC,CAAC;AACD;AAAA,QACF;AACA,cAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU;AACzD,cAAM,sBAAsB;AAAA,UAC1B;AAAA,YACE,eAAe,IAAI;AAAA,YACnB,OAAO,IAAI;AAAA,YACX,OAAO;AAAA,YACP;AAAA,UACF;AAAA,UACA;AAAA,QACF;AACA,cAAM,YAAY,IAAI,IAAI,UAAU,OAAO,SAAS,oBAAoB;AACxE;AAAA,MACF;AAEA,YAAM,YAAY,IAAI,IAAI,aAAa,OAAO,QAAW,oBAAoB;AAAA,IAC/E;AAAA,IAEA,MAAM,UAAU,OAAe,WAAmB,OAAiC;AACjF,YAAM,MAAM,MAAM,eAAe,OAAO,OAAO,KAAK;AACpD,UAAI,CAAC,KAAK;AACR,eAAO,KAAK,6CAA6C,EAAE,MAAM,CAAC;AAClE;AAAA,MACF;AACA,UAAI,IAAI,WAAW,aAAa;AAC9B,YAAI,IAAI,eAAe;AACrB,gBAAM,gBAAgB,cAAc,IAAI,eAAe;AAAA,YACrD,UAAU,MAAM;AAAA,YAChB,gBAAgB,MAAM;AAAA,YACtB,QAAQ,MAAM;AAAA,UAChB,CAAC;AAAA,QACH;AACA;AAAA,MACF;AAEA,YAAM,cAAc,mBAAmB,IAAI,aAAa;AACxD,YAAM,UAAU,mBAAmB,WAAW;AAC9C,UAAI,CAAC,SAAS,cAAc;AAC1B,cAAM,IAAI,MAAM,6CAA6C,WAAW,EAAE;AAAA,MAC5E;AACA,YAAM,uBAAuB,QAAQ,yBAAyB;AAC9D,YAAM,sBAAsB,QAAQ,uBAAuB,IAAI,UAAU,KAAK;AAE9E,YAAM,cAAc,MAAM,8BAA8B,QAAQ,IAAI,eAAe,KAAK;AACxF,UAAI,CAAC,aAAa;AAChB,cAAM,IAAI,MAAM,eAAe,IAAI,aAAa,yBAAyB;AAAA,MAC3E;AAKA,YAAM,UAAU,IAAI,WAAW;AAC/B,YAAM,YAAY,MAAM,eAAe,WAAW,IAAI,IAAI,WAAW,KAAK;AAC1E,UAAI,CAAC,aAAa,UAAU,WAAW,WAAW;AAChD;AAAA,MACF;AACA,YAAM,kBAAkB,yBAAyB;AAAA,QAC/C,OAAO,IAAI;AAAA,QACX,eAAe,IAAI;AAAA,QACnB,YAAY,IAAI;AAAA,QAChB,WAAW,IAAI;AAAA,QACf;AAAA,QACA,UAAU,MAAM;AAAA,QAChB,gBAAgB,MAAM;AAAA,MACxB,CAAC;AACD,YAAM,uBAAuB;AAAA,QAC3B,eAAe,IAAI;AAAA,QACnB,QAAQ;AAAA,QACR;AAAA,QACA,SAAS;AAAA,MACX,CAAC;AACD,YAAM,oBAAoB;AAAA,QACxB,eAAe,IAAI;AAAA,QACnB,OAAO,IAAI;AAAA,QACX,OAAO;AAAA,QACP,SAAS;AAAA,QACT;AAAA,QACA,SAAS;AAAA,QACT,SAAS;AAAA,UACP,mBAAmB;AAAA,UACnB,SAAS,0BAA0B,IAAI,UAAU;AAAA,UACjD,YAAY,IAAI;AAAA,UAChB,WAAW,IAAI;AAAA,QACjB;AAAA,MACF,CAAC;AAED,UAAI,IAAI,eAAe;AACrB,cAAM,gBAAgB,SAAS,IAAI,eAAe;AAAA,UAChD,UAAU,MAAM;AAAA,UAChB,gBAAgB,MAAM;AAAA,UACtB,QAAQ,MAAM;AAAA,QAChB,CAAC;AAAA,MACH;AAEA,YAAM,UAAU,MAAM,eAAe,SAAS,IAAI,YAAY,KAAK;AACnE,UAAI,iBAAiB,MAAM,mBAAmB,IAAI,eAAe,KAAK;AACtE,UAAI,mBAAmB,UAAU,oBAAoB;AAGrD,YAAM,WAAW,sBAAsB;AACvC,YAAM,iBAAiB,kBAAkB,KAAK,aAAa,KAAK;AAEhE,UAAI;AACF,cAAM,eAAe,MAAM;AAAA,UACzB;AAAA,YACE,QAAQ,aAAa;AAAA,cACnB,YAAY,IAAI;AAAA,cAChB,QAAQ,IAAI,UAAU;AAAA,cACtB;AAAA,cACA;AAAA,cACA;AAAA,cACA,OAAO,EAAE,gBAAgB,MAAM,gBAAgB,UAAU,MAAM,SAAS;AAAA,cACxE,OAAO,IAAI;AAAA,cACX,YAAa,IAAI,cAAc,CAAC;AAAA,YAClC,CAAC;AAAA,YACD,kBAAkB,IAAI,eAAe,KAAK;AAAA,YAC1C;AAAA,UACF;AAAA,UACA;AAAA,YACE,UAAU;AAAA,YACV,eAAe;AAAA,YACf,YAAY;AAAA,YACZ,QAAQ;AAAA,UACV;AAAA,UACA,OAAO,OAAO,SAAS;AACrB,iBAAK,cAAc;AAAA,cACjB,yBAAyB,MAAM;AAAA,cAC/B,wBAAwB,MAAM,QAAQ;AAAA,YACxC,CAAC;AAED,gBAAI,IAAI,iBAAiB,MAAM,gBAAgB,wBAAwB,IAAI,eAAe,MAAM,UAAU,MAAM,cAAc,GAAG;AAC/H,oBAAM,YAAY,IAAI,IAAI,aAAa,OAAO,QAAW,oBAAoB;AAC7E,qBAAO;AAAA,YACT;AAEA,kBAAM,QAAQ,oBAAoB,KAAK;AACvC,8BAAkB,MAAM;AAExB,iBAAK,cAAc;AAAA,cACjB,6BAA6B,MAAM;AAAA,cACnC,2BAA2B,MAAM;AAAA,cACjC,2BAA2B,MAAM;AAAA,cACjC,0BAA0B,MAAM;AAAA,YAClC,CAAC;AAED,kBAAM,eAAe;AAAA,cACnB,IAAI;AAAA,cACJ;AAAA,gBACE,cAAc;AAAA,gBACd,cAAc,MAAM;AAAA,gBACpB,cAAc,MAAM;AAAA,gBACpB,aAAa,MAAM;AAAA,gBACnB,kBAAkB;AAAA,cACpB;AAAA,cACA,MAAM;AAAA,cACN;AAAA,cACA,EAAE,0BAA0B,kBAAkB,oBAAoB;AAAA,YACpE;AACA,gCAAoB;AACpB,kBAAM,eAAe,IAAI,eAAe,gBAAgB,MAAM,KAAK;AACnE,kBAAM,sBAAsB,IAAI,IAAI,IAAI,eAAe,MAAM,SAAS,KAAK;AAE3E,kBAAM,oBAAoB;AAAA,cACxB,eAAe,IAAI;AAAA,cACnB,OAAO,IAAI;AAAA,cACX,OAAO;AAAA,cACP,SAAS,0BAA0B,MAAM,UAAU;AAAA,cACnD;AAAA,cACA,SAAS;AAAA,cACT,SAAS;AAAA,gBACP,mBAAmB;AAAA,gBACnB,SAAS,aAAa,cAAc;AAAA,gBACpC;AAAA,gBACA,WAAW,MAAM,QAAQ;AAAA,gBACzB,QAAQ,MAAM;AAAA,cAChB;AAAA,YACF,CAAC;AAED,mBAAO;AAAA,UACT;AAAA,QACF;AACA,YAAI,iBAAiB,UAAW;AAAA,MAClC,SAAS,OAAO;AACd,YAAI,iBAAiB,+BAA+B;AAClD,iBAAO,KAAK,uEAAuE;AAAA,YACjF,OAAO,IAAI;AAAA,YACX,0BAA0B,MAAM;AAAA,UAClC,CAAC;AACD;AAAA,QACF;AACA,cAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU;AACzD,cAAM,sBAAsB;AAAA,UAC1B;AAAA,YACE,eAAe,IAAI;AAAA,YACnB,OAAO,IAAI;AAAA,YACX,OAAO;AAAA,YACP;AAAA,UACF;AAAA,UACA;AAAA,QACF;AACA,cAAM,YAAY,IAAI,IAAI,UAAU,OAAO,SAAS,oBAAoB;AACxE;AAAA,MACF;AAEA,YAAM,YAAY,IAAI,IAAI,aAAa,OAAO,QAAW,oBAAoB;AAAA,IAC/E;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/modules/inbox_ops/api/emails/[id]/reprocess/route.js CHANGED Viewed

@@ -63,6 +63,10 @@ async function POST(req) {
         organizationId: email.organizationId,
         forwardedByAddress: email.forwardedByAddress,
         subject: email.subject
+      }, {
+        persistent: true,
+        tenantId: email.tenantId,
+        organizationId: email.organizationId
       });
     } catch (eventError) {
       logger.error("Failed to emit events", { err: eventError });

package/dist/modules/inbox_ops/api/emails/[id]/reprocess/route.js.map CHANGED Viewed

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../../src/modules/inbox_ops/api/emails/%5Bid%5D/reprocess/route.ts"],
-  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { findOneWithDecryption, findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { withAtomicFlush } from '@open-mercato/shared/lib/commands/flush'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { InboxDiscrepancy, InboxEmail, InboxProposal, InboxProposalAction } from '../../../../data/entities'\nimport { emitInboxOpsEvent } from '../../../../events'\nimport {\n  resolveRequestContext,\n  extractPathSegment,\n  UnauthorizedError,\n} from '../../../routeHelpers'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('inbox_ops').child({ component: 'email-reprocess' })\n\nexport const metadata = {\n  POST: { requireAuth: true, requireFeatures: ['inbox_ops.proposals.manage'] },\n}\n\nclass ReprocessConflictError extends Error {}\n\nexport async function POST(req: Request) {\n  try {\n    const url = new URL(req.url)\n    const id = extractPathSegment(url, 'emails')\n\n    if (!id) {\n      return NextResponse.json({ error: 'Missing email ID' }, { status: 400 })\n    }\n\n    const ctx = await resolveRequestContext(req)\n\n    const email = await findOneWithDecryption(\n      ctx.em,\n      InboxEmail,\n      {\n        id,\n        organizationId: ctx.organizationId,\n        tenantId: ctx.tenantId,\n        deletedAt: null,\n      },\n      undefined,\n      ctx.scope,\n    )\n\n    if (!email) {\n      return NextResponse.json({ error: 'Email not found' }, { status: 404 })\n    }\n\n    if (email.status === 'received' || email.status === 'processing') {\n      return NextResponse.json({ error: 'Email is already queued for processing' }, { status: 409 })\n    }\n\n    let retiredCounts = { retiredProposalCount: 0, retiredActionCount: 0 }\n    await withAtomicFlush(ctx.em, [\n      async () => {\n        retiredCounts = await retireActiveProposalsForEmail(ctx.em, email.id, ctx.userId, ctx.scope)\n      },\n      () => {\n        email.status = 'received'\n        email.processingError = null\n      },\n    ], { transaction: true })\n\n    try {\n      await emitInboxOpsEvent('inbox_ops.email.reprocessed', {\n        emailId: email.id,\n        tenantId: email.tenantId,\n        organizationId: email.organizationId,\n      })\n      await emitInboxOpsEvent('inbox_ops.email.received', {\n        emailId: email.id,\n        tenantId: email.tenantId,\n        organizationId: email.organizationId,\n        forwardedByAddress: email.forwardedByAddress,\n        subject: email.subject,\n      })\n    } catch (eventError) {\n      logger.error('Failed to emit events', { err: eventError })\n    }\n\n    return NextResponse.json({ ok: true, ...retiredCounts })\n  } catch (err) {\n    if (err instanceof UnauthorizedError) {\n      return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n    }\n    if (err instanceof ReprocessConflictError) {\n      return NextResponse.json({ error: err.message }, { status: 409 })\n    }\n\n    logger.error('Reprocess failed', { err })\n    return NextResponse.json({ error: 'Failed to reprocess email' }, { status: 500 })\n  }\n}\n\nasync function retireActiveProposalsForEmail(\n  em: EntityManager,\n  emailId: string,\n  userId: string,\n  scope: { tenantId: string; organizationId: string },\n): Promise<{ retiredProposalCount: number; retiredActionCount: number }> {\n  const proposals = await findWithDecryption(\n    em,\n    InboxProposal,\n    {\n      inboxEmailId: emailId,\n      isActive: true,\n      deletedAt: null,\n    },\n    undefined,\n    scope,\n  )\n\n  if (proposals.length === 0) {\n    return { retiredProposalCount: 0, retiredActionCount: 0 }\n  }\n\n  const proposalIds = proposals.map((proposal) => proposal.id)\n  const actions = await findWithDecryption(\n    em,\n    InboxProposalAction,\n    {\n      proposalId: { $in: proposalIds },\n      deletedAt: null,\n    },\n    undefined,\n    scope,\n  )\n\n  if (actions.some((action) => action.status === 'accepted' || action.status === 'executed' || action.status === 'processing')) {\n    throw new ReprocessConflictError('Cannot reprocess after actions were already executed. Open the latest proposal instead.')\n  }\n\n  // Resolve every read before mutating: a query issued between a scalar\n  // mutation and the flush can silently reset the Unit of Work (SPEC-018\n  // Problem 1). withAtomicFlush flushes once at the end, so ordering is ours.\n  const discrepancies = await findWithDecryption(\n    em,\n    InboxDiscrepancy,\n    {\n      proposalId: { $in: proposalIds },\n      resolved: false,\n      deletedAt: null,\n    },\n    undefined,\n    scope,\n  )\n\n  const now = new Date()\n  const supersededAt = now.toISOString()\n  for (const proposal of proposals) {\n    const previousMetadata = proposal.metadata && typeof proposal.metadata === 'object'\n      ? proposal.metadata\n      : {}\n    proposal.isActive = false\n    proposal.status = proposal.status === 'accepted' ? proposal.status : 'rejected'\n    proposal.reviewedAt = now\n    proposal.reviewedByUserId = userId\n    proposal.metadata = {\n      ...previousMetadata,\n      supersededAt,\n      supersededByUserId: userId,\n      supersededReason: 'email_reprocessed',\n    }\n  }\n\n  let retiredActionCount = 0\n  for (const action of actions) {\n    if (action.status !== 'pending' && action.status !== 'failed') {\n      continue\n    }\n    action.status = 'rejected'\n    action.executedAt = now\n    action.executedByUserId = userId\n    action.executionError = action.executionError || 'Superseded by email reprocess'\n    retiredActionCount += 1\n  }\n\n  for (const discrepancy of discrepancies) {\n    discrepancy.resolved = true\n  }\n\n  return {\n    retiredProposalCount: proposals.length,\n    retiredActionCount,\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'InboxOps',\n  summary: 'Reprocess email',\n  methods: {\n    POST: {\n      summary: 'Re-trigger LLM extraction on a failed or low-confidence email',\n      responses: [\n        { status: 200, description: 'Email queued for reprocessing' },\n        { status: 404, description: 'Email not found' },\n        { status: 409, description: 'Email is already processing or proposal cannot be superseded safely' },\n      ],\n    },\n  },\n}\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAE7B,SAAS,uBAAuB,0BAA0B;AAC1D,SAAS,uBAAuB;AAEhC,SAAS,kBAAkB,YAAY,eAAe,2BAA2B;AACjF,SAAS,yBAAyB;AAClC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,WAAW,EAAE,MAAM,EAAE,WAAW,kBAAkB,CAAC;AAExE,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,4BAA4B,EAAE;AAC7E;AAEA,MAAM,+BAA+B,MAAM;AAAC;AAE5C,eAAsB,KAAK,KAAc;AACvC,MAAI;AACF,UAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAC3B,UAAM,KAAK,mBAAmB,KAAK,QAAQ;AAE3C,QAAI,CAAC,IAAI;AACP,aAAO,aAAa,KAAK,EAAE,OAAO,mBAAmB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACzE;AAEA,UAAM,MAAM,MAAM,sBAAsB,GAAG;AAE3C,UAAM,QAAQ,MAAM;AAAA,MAClB,IAAI;AAAA,MACJ;AAAA,MACA;AAAA,QACE;AAAA,QACA,gBAAgB,IAAI;AAAA,QACpB,UAAU,IAAI;AAAA,QACd,WAAW;AAAA,MACb;AAAA,MACA;AAAA,MACA,IAAI;AAAA,IACN;AAEA,QAAI,CAAC,OAAO;AACV,aAAO,aAAa,KAAK,EAAE,OAAO,kBAAkB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACxE;AAEA,QAAI,MAAM,WAAW,cAAc,MAAM,WAAW,cAAc;AAChE,aAAO,aAAa,KAAK,EAAE,OAAO,yCAAyC,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC/F;AAEA,QAAI,gBAAgB,EAAE,sBAAsB,GAAG,oBAAoB,EAAE;AACrE,UAAM,gBAAgB,IAAI,IAAI;AAAA,MAC5B,YAAY;AACV,wBAAgB,MAAM,8BAA8B,IAAI,IAAI,MAAM,IAAI,IAAI,QAAQ,IAAI,KAAK;AAAA,MAC7F;AAAA,MACA,MAAM;AACJ,cAAM,SAAS;AACf,cAAM,kBAAkB;AAAA,MAC1B;AAAA,IACF,GAAG,EAAE,aAAa,KAAK,CAAC;AAExB,QAAI;AACF,YAAM,kBAAkB,+BAA+B;AAAA,QACrD,SAAS,MAAM;AAAA,QACf,UAAU,MAAM;AAAA,QAChB,gBAAgB,MAAM;AAAA,MACxB,CAAC;AACD,YAAM,kBAAkB,4BAA4B;AAAA,QAClD,SAAS,MAAM;AAAA,QACf,UAAU,MAAM;AAAA,QAChB,gBAAgB,MAAM;AAAA,QACtB,oBAAoB,MAAM;AAAA,QAC1B,SAAS,MAAM;AAAA,MACjB,CAAC;AAAA,IACH,SAAS,YAAY;AACnB,aAAO,MAAM,yBAAyB,EAAE,KAAK,WAAW,CAAC;AAAA,IAC3D;AAEA,WAAO,aAAa,KAAK,EAAE,IAAI,MAAM,GAAG,cAAc,CAAC;AAAA,EACzD,SAAS,KAAK;AACZ,QAAI,eAAe,mBAAmB;AACpC,aAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACrE;AACA,QAAI,eAAe,wBAAwB;AACzC,aAAO,aAAa,KAAK,EAAE,OAAO,IAAI,QAAQ,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAClE;AAEA,WAAO,MAAM,oBAAoB,EAAE,IAAI,CAAC;AACxC,WAAO,aAAa,KAAK,EAAE,OAAO,4BAA4B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAClF;AACF;AAEA,eAAe,8BACb,IACA,SACA,QACA,OACuE;AACvE,QAAM,YAAY,MAAM;AAAA,IACtB;AAAA,IACA;AAAA,IACA;AAAA,MACE,cAAc;AAAA,MACd,UAAU;AAAA,MACV,WAAW;AAAA,IACb;AAAA,IACA;AAAA,IACA;AAAA,EACF;AAEA,MAAI,UAAU,WAAW,GAAG;AAC1B,WAAO,EAAE,sBAAsB,GAAG,oBAAoB,EAAE;AAAA,EAC1D;AAEA,QAAM,cAAc,UAAU,IAAI,CAAC,aAAa,SAAS,EAAE;AAC3D,QAAM,UAAU,MAAM;AAAA,IACpB;AAAA,IACA;AAAA,IACA;AAAA,MACE,YAAY,EAAE,KAAK,YAAY;AAAA,MAC/B,WAAW;AAAA,IACb;AAAA,IACA;AAAA,IACA;AAAA,EACF;AAEA,MAAI,QAAQ,KAAK,CAAC,WAAW,OAAO,WAAW,cAAc,OAAO,WAAW,cAAc,OAAO,WAAW,YAAY,GAAG;AAC5H,UAAM,IAAI,uBAAuB,yFAAyF;AAAA,EAC5H;AAKA,QAAM,gBAAgB,MAAM;AAAA,IAC1B;AAAA,IACA;AAAA,IACA;AAAA,MACE,YAAY,EAAE,KAAK,YAAY;AAAA,MAC/B,UAAU;AAAA,MACV,WAAW;AAAA,IACb;AAAA,IACA;AAAA,IACA;AAAA,EACF;AAEA,QAAM,MAAM,oBAAI,KAAK;AACrB,QAAM,eAAe,IAAI,YAAY;AACrC,aAAW,YAAY,WAAW;AAChC,UAAM,mBAAmB,SAAS,YAAY,OAAO,SAAS,aAAa,WACvE,SAAS,WACT,CAAC;AACL,aAAS,WAAW;AACpB,aAAS,SAAS,SAAS,WAAW,aAAa,SAAS,SAAS;AACrE,aAAS,aAAa;AACtB,aAAS,mBAAmB;AAC5B,aAAS,WAAW;AAAA,MAClB,GAAG;AAAA,MACH;AAAA,MACA,oBAAoB;AAAA,MACpB,kBAAkB;AAAA,IACpB;AAAA,EACF;AAEA,MAAI,qBAAqB;AACzB,aAAW,UAAU,SAAS;AAC5B,QAAI,OAAO,WAAW,aAAa,OAAO,WAAW,UAAU;AAC7D;AAAA,IACF;AACA,WAAO,SAAS;AAChB,WAAO,aAAa;AACpB,WAAO,mBAAmB;AAC1B,WAAO,iBAAiB,OAAO,kBAAkB;AACjD,0BAAsB;AAAA,EACxB;AAEA,aAAW,eAAe,eAAe;AACvC,gBAAY,WAAW;AAAA,EACzB;AAEA,SAAO;AAAA,IACL,sBAAsB,UAAU;AAAA,IAChC;AAAA,EACF;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,gCAAgC;AAAA,QAC5D,EAAE,QAAQ,KAAK,aAAa,kBAAkB;AAAA,QAC9C,EAAE,QAAQ,KAAK,aAAa,sEAAsE;AAAA,MACpG;AAAA,IACF;AAAA,EACF;AACF;",
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { findOneWithDecryption, findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { withAtomicFlush } from '@open-mercato/shared/lib/commands/flush'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { InboxDiscrepancy, InboxEmail, InboxProposal, InboxProposalAction } from '../../../../data/entities'\nimport { emitInboxOpsEvent } from '../../../../events'\nimport {\n  resolveRequestContext,\n  extractPathSegment,\n  UnauthorizedError,\n} from '../../../routeHelpers'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('inbox_ops').child({ component: 'email-reprocess' })\n\nexport const metadata = {\n  POST: { requireAuth: true, requireFeatures: ['inbox_ops.proposals.manage'] },\n}\n\nclass ReprocessConflictError extends Error {}\n\nexport async function POST(req: Request) {\n  try {\n    const url = new URL(req.url)\n    const id = extractPathSegment(url, 'emails')\n\n    if (!id) {\n      return NextResponse.json({ error: 'Missing email ID' }, { status: 400 })\n    }\n\n    const ctx = await resolveRequestContext(req)\n\n    const email = await findOneWithDecryption(\n      ctx.em,\n      InboxEmail,\n      {\n        id,\n        organizationId: ctx.organizationId,\n        tenantId: ctx.tenantId,\n        deletedAt: null,\n      },\n      undefined,\n      ctx.scope,\n    )\n\n    if (!email) {\n      return NextResponse.json({ error: 'Email not found' }, { status: 404 })\n    }\n\n    if (email.status === 'received' || email.status === 'processing') {\n      return NextResponse.json({ error: 'Email is already queued for processing' }, { status: 409 })\n    }\n\n    let retiredCounts = { retiredProposalCount: 0, retiredActionCount: 0 }\n    await withAtomicFlush(ctx.em, [\n      async () => {\n        retiredCounts = await retireActiveProposalsForEmail(ctx.em, email.id, ctx.userId, ctx.scope)\n      },\n      () => {\n        email.status = 'received'\n        email.processingError = null\n      },\n    ], { transaction: true })\n\n    try {\n      await emitInboxOpsEvent('inbox_ops.email.reprocessed', {\n        emailId: email.id,\n        tenantId: email.tenantId,\n        organizationId: email.organizationId,\n      })\n      await emitInboxOpsEvent('inbox_ops.email.received', {\n        emailId: email.id,\n        tenantId: email.tenantId,\n        organizationId: email.organizationId,\n        forwardedByAddress: email.forwardedByAddress,\n        subject: email.subject,\n      }, {\n        persistent: true,\n        tenantId: email.tenantId,\n        organizationId: email.organizationId,\n      })\n    } catch (eventError) {\n      logger.error('Failed to emit events', { err: eventError })\n    }\n\n    return NextResponse.json({ ok: true, ...retiredCounts })\n  } catch (err) {\n    if (err instanceof UnauthorizedError) {\n      return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n    }\n    if (err instanceof ReprocessConflictError) {\n      return NextResponse.json({ error: err.message }, { status: 409 })\n    }\n\n    logger.error('Reprocess failed', { err })\n    return NextResponse.json({ error: 'Failed to reprocess email' }, { status: 500 })\n  }\n}\n\nasync function retireActiveProposalsForEmail(\n  em: EntityManager,\n  emailId: string,\n  userId: string,\n  scope: { tenantId: string; organizationId: string },\n): Promise<{ retiredProposalCount: number; retiredActionCount: number }> {\n  const proposals = await findWithDecryption(\n    em,\n    InboxProposal,\n    {\n      inboxEmailId: emailId,\n      isActive: true,\n      deletedAt: null,\n    },\n    undefined,\n    scope,\n  )\n\n  if (proposals.length === 0) {\n    return { retiredProposalCount: 0, retiredActionCount: 0 }\n  }\n\n  const proposalIds = proposals.map((proposal) => proposal.id)\n  const actions = await findWithDecryption(\n    em,\n    InboxProposalAction,\n    {\n      proposalId: { $in: proposalIds },\n      deletedAt: null,\n    },\n    undefined,\n    scope,\n  )\n\n  if (actions.some((action) => action.status === 'accepted' || action.status === 'executed' || action.status === 'processing')) {\n    throw new ReprocessConflictError('Cannot reprocess after actions were already executed. Open the latest proposal instead.')\n  }\n\n  // Resolve every read before mutating: a query issued between a scalar\n  // mutation and the flush can silently reset the Unit of Work (SPEC-018\n  // Problem 1). withAtomicFlush flushes once at the end, so ordering is ours.\n  const discrepancies = await findWithDecryption(\n    em,\n    InboxDiscrepancy,\n    {\n      proposalId: { $in: proposalIds },\n      resolved: false,\n      deletedAt: null,\n    },\n    undefined,\n    scope,\n  )\n\n  const now = new Date()\n  const supersededAt = now.toISOString()\n  for (const proposal of proposals) {\n    const previousMetadata = proposal.metadata && typeof proposal.metadata === 'object'\n      ? proposal.metadata\n      : {}\n    proposal.isActive = false\n    proposal.status = proposal.status === 'accepted' ? proposal.status : 'rejected'\n    proposal.reviewedAt = now\n    proposal.reviewedByUserId = userId\n    proposal.metadata = {\n      ...previousMetadata,\n      supersededAt,\n      supersededByUserId: userId,\n      supersededReason: 'email_reprocessed',\n    }\n  }\n\n  let retiredActionCount = 0\n  for (const action of actions) {\n    if (action.status !== 'pending' && action.status !== 'failed') {\n      continue\n    }\n    action.status = 'rejected'\n    action.executedAt = now\n    action.executedByUserId = userId\n    action.executionError = action.executionError || 'Superseded by email reprocess'\n    retiredActionCount += 1\n  }\n\n  for (const discrepancy of discrepancies) {\n    discrepancy.resolved = true\n  }\n\n  return {\n    retiredProposalCount: proposals.length,\n    retiredActionCount,\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'InboxOps',\n  summary: 'Reprocess email',\n  methods: {\n    POST: {\n      summary: 'Re-trigger LLM extraction on a failed or low-confidence email',\n      responses: [\n        { status: 200, description: 'Email queued for reprocessing' },\n        { status: 404, description: 'Email not found' },\n        { status: 409, description: 'Email is already processing or proposal cannot be superseded safely' },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAE7B,SAAS,uBAAuB,0BAA0B;AAC1D,SAAS,uBAAuB;AAEhC,SAAS,kBAAkB,YAAY,eAAe,2BAA2B;AACjF,SAAS,yBAAyB;AAClC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,WAAW,EAAE,MAAM,EAAE,WAAW,kBAAkB,CAAC;AAExE,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,4BAA4B,EAAE;AAC7E;AAEA,MAAM,+BAA+B,MAAM;AAAC;AAE5C,eAAsB,KAAK,KAAc;AACvC,MAAI;AACF,UAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAC3B,UAAM,KAAK,mBAAmB,KAAK,QAAQ;AAE3C,QAAI,CAAC,IAAI;AACP,aAAO,aAAa,KAAK,EAAE,OAAO,mBAAmB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACzE;AAEA,UAAM,MAAM,MAAM,sBAAsB,GAAG;AAE3C,UAAM,QAAQ,MAAM;AAAA,MAClB,IAAI;AAAA,MACJ;AAAA,MACA;AAAA,QACE;AAAA,QACA,gBAAgB,IAAI;AAAA,QACpB,UAAU,IAAI;AAAA,QACd,WAAW;AAAA,MACb;AAAA,MACA;AAAA,MACA,IAAI;AAAA,IACN;AAEA,QAAI,CAAC,OAAO;AACV,aAAO,aAAa,KAAK,EAAE,OAAO,kBAAkB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACxE;AAEA,QAAI,MAAM,WAAW,cAAc,MAAM,WAAW,cAAc;AAChE,aAAO,aAAa,KAAK,EAAE,OAAO,yCAAyC,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC/F;AAEA,QAAI,gBAAgB,EAAE,sBAAsB,GAAG,oBAAoB,EAAE;AACrE,UAAM,gBAAgB,IAAI,IAAI;AAAA,MAC5B,YAAY;AACV,wBAAgB,MAAM,8BAA8B,IAAI,IAAI,MAAM,IAAI,IAAI,QAAQ,IAAI,KAAK;AAAA,MAC7F;AAAA,MACA,MAAM;AACJ,cAAM,SAAS;AACf,cAAM,kBAAkB;AAAA,MAC1B;AAAA,IACF,GAAG,EAAE,aAAa,KAAK,CAAC;AAExB,QAAI;AACF,YAAM,kBAAkB,+BAA+B;AAAA,QACrD,SAAS,MAAM;AAAA,QACf,UAAU,MAAM;AAAA,QAChB,gBAAgB,MAAM;AAAA,MACxB,CAAC;AACD,YAAM,kBAAkB,4BAA4B;AAAA,QAClD,SAAS,MAAM;AAAA,QACf,UAAU,MAAM;AAAA,QAChB,gBAAgB,MAAM;AAAA,QACtB,oBAAoB,MAAM;AAAA,QAC1B,SAAS,MAAM;AAAA,MACjB,GAAG;AAAA,QACD,YAAY;AAAA,QACZ,UAAU,MAAM;AAAA,QAChB,gBAAgB,MAAM;AAAA,MACxB,CAAC;AAAA,IACH,SAAS,YAAY;AACnB,aAAO,MAAM,yBAAyB,EAAE,KAAK,WAAW,CAAC;AAAA,IAC3D;AAEA,WAAO,aAAa,KAAK,EAAE,IAAI,MAAM,GAAG,cAAc,CAAC;AAAA,EACzD,SAAS,KAAK;AACZ,QAAI,eAAe,mBAAmB;AACpC,aAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACrE;AACA,QAAI,eAAe,wBAAwB;AACzC,aAAO,aAAa,KAAK,EAAE,OAAO,IAAI,QAAQ,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAClE;AAEA,WAAO,MAAM,oBAAoB,EAAE,IAAI,CAAC;AACxC,WAAO,aAAa,KAAK,EAAE,OAAO,4BAA4B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAClF;AACF;AAEA,eAAe,8BACb,IACA,SACA,QACA,OACuE;AACvE,QAAM,YAAY,MAAM;AAAA,IACtB;AAAA,IACA;AAAA,IACA;AAAA,MACE,cAAc;AAAA,MACd,UAAU;AAAA,MACV,WAAW;AAAA,IACb;AAAA,IACA;AAAA,IACA;AAAA,EACF;AAEA,MAAI,UAAU,WAAW,GAAG;AAC1B,WAAO,EAAE,sBAAsB,GAAG,oBAAoB,EAAE;AAAA,EAC1D;AAEA,QAAM,cAAc,UAAU,IAAI,CAAC,aAAa,SAAS,EAAE;AAC3D,QAAM,UAAU,MAAM;AAAA,IACpB;AAAA,IACA;AAAA,IACA;AAAA,MACE,YAAY,EAAE,KAAK,YAAY;AAAA,MAC/B,WAAW;AAAA,IACb;AAAA,IACA;AAAA,IACA;AAAA,EACF;AAEA,MAAI,QAAQ,KAAK,CAAC,WAAW,OAAO,WAAW,cAAc,OAAO,WAAW,cAAc,OAAO,WAAW,YAAY,GAAG;AAC5H,UAAM,IAAI,uBAAuB,yFAAyF;AAAA,EAC5H;AAKA,QAAM,gBAAgB,MAAM;AAAA,IAC1B;AAAA,IACA;AAAA,IACA;AAAA,MACE,YAAY,EAAE,KAAK,YAAY;AAAA,MAC/B,UAAU;AAAA,MACV,WAAW;AAAA,IACb;AAAA,IACA;AAAA,IACA;AAAA,EACF;AAEA,QAAM,MAAM,oBAAI,KAAK;AACrB,QAAM,eAAe,IAAI,YAAY;AACrC,aAAW,YAAY,WAAW;AAChC,UAAM,mBAAmB,SAAS,YAAY,OAAO,SAAS,aAAa,WACvE,SAAS,WACT,CAAC;AACL,aAAS,WAAW;AACpB,aAAS,SAAS,SAAS,WAAW,aAAa,SAAS,SAAS;AACrE,aAAS,aAAa;AACtB,aAAS,mBAAmB;AAC5B,aAAS,WAAW;AAAA,MAClB,GAAG;AAAA,MACH;AAAA,MACA,oBAAoB;AAAA,MACpB,kBAAkB;AAAA,IACpB;AAAA,EACF;AAEA,MAAI,qBAAqB;AACzB,aAAW,UAAU,SAAS;AAC5B,QAAI,OAAO,WAAW,aAAa,OAAO,WAAW,UAAU;AAC7D;AAAA,IACF;AACA,WAAO,SAAS;AAChB,WAAO,aAAa;AACpB,WAAO,mBAAmB;AAC1B,WAAO,iBAAiB,OAAO,kBAAkB;AACjD,0BAAsB;AAAA,EACxB;AAEA,aAAW,eAAe,eAAe;AACvC,gBAAY,WAAW;AAAA,EACzB;AAEA,SAAO;AAAA,IACL,sBAAsB,UAAU;AAAA,IAChC;AAAA,EACF;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,gCAAgC;AAAA,QAC5D,EAAE,QAAQ,KAAK,aAAa,kBAAkB;AAAA,QAC9C,EAAE,QAAQ,KAAK,aAAa,sEAAsE;AAAA,MACpG;AAAA,IACF;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/modules/inbox_ops/api/extract/route.js CHANGED Viewed

@@ -58,6 +58,10 @@ async function POST(req) {
         organizationId: ctx.organizationId,
         forwardedByAddress: submitterEmail,
         subject: title || "Text extraction"
+      }, {
+        persistent: true,
+        tenantId: ctx.tenantId,
+        organizationId: ctx.organizationId
       });
     } catch (eventError) {
       logger.error("Failed to emit email.received event", { err: eventError });

package/dist/modules/inbox_ops/api/extract/route.js.map CHANGED Viewed

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../src/modules/inbox_ops/api/extract/route.ts"],
-  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { InboxEmail } from '../../data/entities'\nimport { emitInboxOpsEvent } from '../../events'\nimport { resolveRequestContext, handleRouteError } from '../routeHelpers'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('inbox_ops').child({ component: 'extract' })\n\nexport const metadata = {\n  POST: { requireAuth: true, requireFeatures: ['inbox_ops.proposals.manage'] },\n}\n\nconst extractRequestSchema = z.object({\n  text: z.string().min(1, 'Text is required').max(100_000, 'Text exceeds maximum length'),\n  title: z.string().max(500).optional(),\n  metadata: z.record(z.string(), z.unknown()).optional(),\n})\n\nexport async function POST(req: Request) {\n  try {\n    const ctx = await resolveRequestContext(req)\n\n    let body: unknown\n    try {\n      body = await req.json()\n    } catch {\n      return NextResponse.json({ error: 'Invalid JSON body' }, { status: 400 })\n    }\n\n    const parsed = extractRequestSchema.safeParse(body)\n    if (!parsed.success) {\n      const errors = parsed.error.issues.map((i) => `${i.path.join('.')}: ${i.message}`).join('; ')\n      return NextResponse.json({ error: errors }, { status: 400 })\n    }\n\n    const { text, title, metadata: inputMetadata } = parsed.data\n\n    const maxTextSize = parseInt(process.env.INBOX_OPS_MAX_TEXT_SIZE || '204800', 10)\n    const truncatedText = text.slice(0, maxTextSize)\n\n    const submitterEmail = ctx.auth?.email || ctx.userId\n    const email = ctx.em.create(InboxEmail, {\n      forwardedByAddress: submitterEmail,\n      forwardedByName: null,\n      toAddress: 'text-extract',\n      subject: title || 'Text extraction',\n      cleanedText: truncatedText,\n      rawText: truncatedText,\n      receivedAt: new Date(),\n      status: 'received' as const,\n      isActive: true,\n      organizationId: ctx.organizationId,\n      tenantId: ctx.tenantId,\n      metadata: {\n        ...inputMetadata,\n        source: 'text_extract',\n        submittedByUserId: ctx.userId,\n      },\n    })\n\n    ctx.em.persist(email)\n    await ctx.em.flush()\n\n    try {\n      await emitInboxOpsEvent('inbox_ops.email.received', {\n        emailId: email.id,\n        tenantId: ctx.tenantId,\n        organizationId: ctx.organizationId,\n        forwardedByAddress: submitterEmail,\n        subject: title || 'Text extraction',\n      })\n    } catch (eventError) {\n      logger.error('Failed to emit email.received event', { err: eventError })\n    }\n\n    return NextResponse.json({ ok: true, emailId: email.id })\n  } catch (err) {\n    return handleRouteError(err, 'extract text')\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'InboxOps',\n  summary: 'Extract actions from raw text',\n  methods: {\n    POST: {\n      summary: 'Submit raw text for LLM extraction',\n      description: 'Creates an InboxEmail record from raw text and triggers the extraction pipeline. The extraction runs asynchronously.',\n      responses: [\n        { status: 200, description: 'Extraction queued successfully' },\n        { status: 400, description: 'Invalid request body' },\n        { status: 401, description: 'Unauthorized' },\n      ],\n    },\n  },\n}\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAElB,SAAS,kBAAkB;AAC3B,SAAS,yBAAyB;AAClC,SAAS,uBAAuB,wBAAwB;AACxD,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,WAAW,EAAE,MAAM,EAAE,WAAW,UAAU,CAAC;AAEhE,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,4BAA4B,EAAE;AAC7E;AAEA,MAAM,uBAAuB,EAAE,OAAO;AAAA,EACpC,MAAM,EAAE,OAAO,EAAE,IAAI,GAAG,kBAAkB,EAAE,IAAI,KAAS,6BAA6B;AAAA,EACtF,OAAO,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EACpC,UAAU,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,EAAE,SAAS;AACvD,CAAC;AAED,eAAsB,KAAK,KAAc;AACvC,MAAI;AACF,UAAM,MAAM,MAAM,sBAAsB,GAAG;AAE3C,QAAI;AACJ,QAAI;AACF,aAAO,MAAM,IAAI,KAAK;AAAA,IACxB,QAAQ;AACN,aAAO,aAAa,KAAK,EAAE,OAAO,oBAAoB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC1E;AAEA,UAAM,SAAS,qBAAqB,UAAU,IAAI;AAClD,QAAI,CAAC,OAAO,SAAS;AACnB,YAAM,SAAS,OAAO,MAAM,OAAO,IAAI,CAAC,MAAM,GAAG,EAAE,KAAK,KAAK,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,KAAK,IAAI;AAC5F,aAAO,aAAa,KAAK,EAAE,OAAO,OAAO,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC7D;AAEA,UAAM,EAAE,MAAM,OAAO,UAAU,cAAc,IAAI,OAAO;AAExD,UAAM,cAAc,SAAS,QAAQ,IAAI,2BAA2B,UAAU,EAAE;AAChF,UAAM,gBAAgB,KAAK,MAAM,GAAG,WAAW;AAE/C,UAAM,iBAAiB,IAAI,MAAM,SAAS,IAAI;AAC9C,UAAM,QAAQ,IAAI,GAAG,OAAO,YAAY;AAAA,MACtC,oBAAoB;AAAA,MACpB,iBAAiB;AAAA,MACjB,WAAW;AAAA,MACX,SAAS,SAAS;AAAA,MAClB,aAAa;AAAA,MACb,SAAS;AAAA,MACT,YAAY,oBAAI,KAAK;AAAA,MACrB,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,gBAAgB,IAAI;AAAA,MACpB,UAAU,IAAI;AAAA,MACd,UAAU;AAAA,QACR,GAAG;AAAA,QACH,QAAQ;AAAA,QACR,mBAAmB,IAAI;AAAA,MACzB;AAAA,IACF,CAAC;AAED,QAAI,GAAG,QAAQ,KAAK;AACpB,UAAM,IAAI,GAAG,MAAM;AAEnB,QAAI;AACF,YAAM,kBAAkB,4BAA4B;AAAA,QAClD,SAAS,MAAM;AAAA,QACf,UAAU,IAAI;AAAA,QACd,gBAAgB,IAAI;AAAA,QACpB,oBAAoB;AAAA,QACpB,SAAS,SAAS;AAAA,MACpB,CAAC;AAAA,IACH,SAAS,YAAY;AACnB,aAAO,MAAM,uCAAuC,EAAE,KAAK,WAAW,CAAC;AAAA,IACzE;AAEA,WAAO,aAAa,KAAK,EAAE,IAAI,MAAM,SAAS,MAAM,GAAG,CAAC;AAAA,EAC1D,SAAS,KAAK;AACZ,WAAO,iBAAiB,KAAK,cAAc;AAAA,EAC7C;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aAAa;AAAA,MACb,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,iCAAiC;AAAA,QAC7D,EAAE,QAAQ,KAAK,aAAa,uBAAuB;AAAA,QACnD,EAAE,QAAQ,KAAK,aAAa,eAAe;AAAA,MAC7C;AAAA,IACF;AAAA,EACF;AACF;",
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { InboxEmail } from '../../data/entities'\nimport { emitInboxOpsEvent } from '../../events'\nimport { resolveRequestContext, handleRouteError } from '../routeHelpers'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('inbox_ops').child({ component: 'extract' })\n\nexport const metadata = {\n  POST: { requireAuth: true, requireFeatures: ['inbox_ops.proposals.manage'] },\n}\n\nconst extractRequestSchema = z.object({\n  text: z.string().min(1, 'Text is required').max(100_000, 'Text exceeds maximum length'),\n  title: z.string().max(500).optional(),\n  metadata: z.record(z.string(), z.unknown()).optional(),\n})\n\nexport async function POST(req: Request) {\n  try {\n    const ctx = await resolveRequestContext(req)\n\n    let body: unknown\n    try {\n      body = await req.json()\n    } catch {\n      return NextResponse.json({ error: 'Invalid JSON body' }, { status: 400 })\n    }\n\n    const parsed = extractRequestSchema.safeParse(body)\n    if (!parsed.success) {\n      const errors = parsed.error.issues.map((i) => `${i.path.join('.')}: ${i.message}`).join('; ')\n      return NextResponse.json({ error: errors }, { status: 400 })\n    }\n\n    const { text, title, metadata: inputMetadata } = parsed.data\n\n    const maxTextSize = parseInt(process.env.INBOX_OPS_MAX_TEXT_SIZE || '204800', 10)\n    const truncatedText = text.slice(0, maxTextSize)\n\n    const submitterEmail = ctx.auth?.email || ctx.userId\n    const email = ctx.em.create(InboxEmail, {\n      forwardedByAddress: submitterEmail,\n      forwardedByName: null,\n      toAddress: 'text-extract',\n      subject: title || 'Text extraction',\n      cleanedText: truncatedText,\n      rawText: truncatedText,\n      receivedAt: new Date(),\n      status: 'received' as const,\n      isActive: true,\n      organizationId: ctx.organizationId,\n      tenantId: ctx.tenantId,\n      metadata: {\n        ...inputMetadata,\n        source: 'text_extract',\n        submittedByUserId: ctx.userId,\n      },\n    })\n\n    ctx.em.persist(email)\n    await ctx.em.flush()\n\n    try {\n      await emitInboxOpsEvent('inbox_ops.email.received', {\n        emailId: email.id,\n        tenantId: ctx.tenantId,\n        organizationId: ctx.organizationId,\n        forwardedByAddress: submitterEmail,\n        subject: title || 'Text extraction',\n      }, {\n        persistent: true,\n        tenantId: ctx.tenantId,\n        organizationId: ctx.organizationId,\n      })\n    } catch (eventError) {\n      logger.error('Failed to emit email.received event', { err: eventError })\n    }\n\n    return NextResponse.json({ ok: true, emailId: email.id })\n  } catch (err) {\n    return handleRouteError(err, 'extract text')\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'InboxOps',\n  summary: 'Extract actions from raw text',\n  methods: {\n    POST: {\n      summary: 'Submit raw text for LLM extraction',\n      description: 'Creates an InboxEmail record from raw text and triggers the extraction pipeline. The extraction runs asynchronously.',\n      responses: [\n        { status: 200, description: 'Extraction queued successfully' },\n        { status: 400, description: 'Invalid request body' },\n        { status: 401, description: 'Unauthorized' },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAElB,SAAS,kBAAkB;AAC3B,SAAS,yBAAyB;AAClC,SAAS,uBAAuB,wBAAwB;AACxD,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,WAAW,EAAE,MAAM,EAAE,WAAW,UAAU,CAAC;AAEhE,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,4BAA4B,EAAE;AAC7E;AAEA,MAAM,uBAAuB,EAAE,OAAO;AAAA,EACpC,MAAM,EAAE,OAAO,EAAE,IAAI,GAAG,kBAAkB,EAAE,IAAI,KAAS,6BAA6B;AAAA,EACtF,OAAO,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EACpC,UAAU,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,EAAE,SAAS;AACvD,CAAC;AAED,eAAsB,KAAK,KAAc;AACvC,MAAI;AACF,UAAM,MAAM,MAAM,sBAAsB,GAAG;AAE3C,QAAI;AACJ,QAAI;AACF,aAAO,MAAM,IAAI,KAAK;AAAA,IACxB,QAAQ;AACN,aAAO,aAAa,KAAK,EAAE,OAAO,oBAAoB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC1E;AAEA,UAAM,SAAS,qBAAqB,UAAU,IAAI;AAClD,QAAI,CAAC,OAAO,SAAS;AACnB,YAAM,SAAS,OAAO,MAAM,OAAO,IAAI,CAAC,MAAM,GAAG,EAAE,KAAK,KAAK,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,KAAK,IAAI;AAC5F,aAAO,aAAa,KAAK,EAAE,OAAO,OAAO,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC7D;AAEA,UAAM,EAAE,MAAM,OAAO,UAAU,cAAc,IAAI,OAAO;AAExD,UAAM,cAAc,SAAS,QAAQ,IAAI,2BAA2B,UAAU,EAAE;AAChF,UAAM,gBAAgB,KAAK,MAAM,GAAG,WAAW;AAE/C,UAAM,iBAAiB,IAAI,MAAM,SAAS,IAAI;AAC9C,UAAM,QAAQ,IAAI,GAAG,OAAO,YAAY;AAAA,MACtC,oBAAoB;AAAA,MACpB,iBAAiB;AAAA,MACjB,WAAW;AAAA,MACX,SAAS,SAAS;AAAA,MAClB,aAAa;AAAA,MACb,SAAS;AAAA,MACT,YAAY,oBAAI,KAAK;AAAA,MACrB,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,gBAAgB,IAAI;AAAA,MACpB,UAAU,IAAI;AAAA,MACd,UAAU;AAAA,QACR,GAAG;AAAA,QACH,QAAQ;AAAA,QACR,mBAAmB,IAAI;AAAA,MACzB;AAAA,IACF,CAAC;AAED,QAAI,GAAG,QAAQ,KAAK;AACpB,UAAM,IAAI,GAAG,MAAM;AAEnB,QAAI;AACF,YAAM,kBAAkB,4BAA4B;AAAA,QAClD,SAAS,MAAM;AAAA,QACf,UAAU,IAAI;AAAA,QACd,gBAAgB,IAAI;AAAA,QACpB,oBAAoB;AAAA,QACpB,SAAS,SAAS;AAAA,MACpB,GAAG;AAAA,QACD,YAAY;AAAA,QACZ,UAAU,IAAI;AAAA,QACd,gBAAgB,IAAI;AAAA,MACtB,CAAC;AAAA,IACH,SAAS,YAAY;AACnB,aAAO,MAAM,uCAAuC,EAAE,KAAK,WAAW,CAAC;AAAA,IACzE;AAEA,WAAO,aAAa,KAAK,EAAE,IAAI,MAAM,SAAS,MAAM,GAAG,CAAC;AAAA,EAC1D,SAAS,KAAK;AACZ,WAAO,iBAAiB,KAAK,cAAc;AAAA,EAC7C;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aAAa;AAAA,MACb,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,iCAAiC;AAAA,QAC7D,EAAE,QAAQ,KAAK,aAAa,uBAAuB;AAAA,QACnD,EAAE,QAAQ,KAAK,aAAa,eAAe;AAAA,MAC7C;AAAA,IACF;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/modules/inbox_ops/api/webhook/inbound.js CHANGED Viewed

@@ -287,6 +287,10 @@ async function POST(req) {
       organizationId: settings.organizationId,
       forwardedByAddress: parsed.from.email,
       subject: parsed.subject
+    }, {
+      persistent: true,
+      tenantId: settings.tenantId,
+      organizationId: settings.organizationId
     });
   } catch (eventError) {
     logger.error("Failed to emit email.received event", { err: eventError });

package/dist/modules/inbox_ops/api/webhook/inbound.js.map CHANGED Viewed

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../src/modules/inbox_ops/api/webhook/inbound.ts"],
-  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { createHmac, timingSafeEqual } from 'node:crypto'\nimport { z } from 'zod'\nimport { Webhook } from 'svix'\nimport { Resend } from 'resend'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport type { CacheStrategy } from '@open-mercato/cache'\nimport { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { InboxSettings, InboxEmail } from '../../data/entities'\nimport { parseInboundEmail } from '../../lib/emailParser'\nimport { checkRateLimit } from '../../lib/rateLimiter'\nimport { emitInboxOpsEvent } from '../../events'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\nimport {\n  readBoundedRequestBody,\n  resolveWebhookBodyLimitBytes,\n  WebhookBodyTooLargeError,\n} from '@open-mercato/shared/lib/webhooks'\n\nconst logger = createLogger('inbox_ops').child({ component: 'webhook' })\n\nexport const metadata = {\n  POST: { requireAuth: false },\n}\n\nconst MAX_PAYLOAD_SIZE = resolveWebhookBodyLimitBytes(\n  process.env.INBOX_OPS_WEBHOOK_MAX_BODY_BYTES ?? process.env.OM_WEBHOOK_MAX_BODY_BYTES,\n  2 * 1024 * 1024,\n)\nconst REPLAY_WINDOW_MS = 5 * 60 * 1000 // 5 minutes\n\nfunction isTimestampFresh(timestamp: string): boolean {\n  if (!timestamp) return false\n  const timestampMs = parseInt(timestamp, 10) * 1000\n  if (isNaN(timestampMs)) return false\n  return Math.abs(Date.now() - timestampMs) <= REPLAY_WINDOW_MS\n}\n\nfunction verifyHmacSignature(\n  payload: string,\n  signature: string,\n  timestamp: string,\n  secret: string,\n): boolean {\n  if (!signature || !timestamp || !secret) return false\n\n  if (!isTimestampFresh(timestamp)) return false\n\n  const expected = createHmac('sha256', secret)\n    .update(`${timestamp}.${payload}`)\n    .digest('hex')\n  const received = signature.startsWith('sha256=')\n    ? signature.slice('sha256='.length)\n    : signature\n\n  try {\n    if (received.length !== expected.length) return false\n    return timingSafeEqual(\n      Buffer.from(received, 'hex'),\n      Buffer.from(expected, 'hex'),\n    )\n  } catch {\n    return false\n  }\n}\n\n// True when the signature verifies against ANY of the candidate secrets. Used\n// to bind the inbound signature to the resolved tenant: once the target inbox\n// declares its own per-tenant secret, the global INBOX_OPS_WEBHOOK_SECRET is no\n// longer accepted for that inbox, so a holder of the global key alone cannot\n// forge mail into a tenant that opted into a dedicated secret.\nfunction verifyHmacAgainstAny(\n  payload: string,\n  signature: string,\n  timestamp: string,\n  secrets: string[],\n): boolean {\n  for (const secret of secrets) {\n    if (secret && verifyHmacSignature(payload, signature, timestamp, secret)) return true\n  }\n  return false\n}\n\n// Stable, non-reversible identifier for the pre-DB global rate-limit bucket.\n// Keying on the configured signing secret (rather than the attacker-set `to` or\n// the per-request signature) means the bucket is request-invariant for a given\n// secret, so rotating recipients or mutating the body cannot dilute the limit.\nfunction secretFingerprint(secret: string): string {\n  return createHmac('sha256', 'inbox_ops:rate_limit:salt').update(secret).digest('hex').slice(0, 32)\n}\n\nfunction verifySvixSignature(\n  rawBody: string,\n  headers: Record<string, string>,\n  secret: string,\n): boolean {\n  try {\n    const wh = new Webhook(secret)\n    wh.verify(rawBody, {\n      'svix-id': headers['svix-id'],\n      'svix-timestamp': headers['svix-timestamp'],\n      'svix-signature': headers['svix-signature'],\n    })\n    return true\n  } catch {\n    return false\n  }\n}\n\nasync function fetchResendEmail(emailId: string): Promise<{\n  from?: string\n  to?: string[]\n  subject?: string\n  text?: string\n  html?: string\n  messageId?: string\n  replyTo?: string\n  inReplyTo?: string\n  references?: string[]\n}> {\n  const apiKey = process.env.RESEND_API_KEY\n  if (!apiKey) throw new Error('RESEND_API_KEY is required to fetch Resend inbound emails')\n\n  const resend = new Resend(apiKey)\n  const { data, error } = await resend.emails.receiving.get(emailId)\n  if (error || !data) {\n    throw new Error(`Failed to fetch Resend email ${emailId}: ${error?.message || 'unknown error'}`)\n  }\n\n  return {\n    from: data.from,\n    to: data.to,\n    subject: data.subject,\n    text: data.text ?? undefined,\n    html: data.html ?? undefined,\n    messageId: data.message_id,\n    replyTo: data.reply_to?.[0] ?? undefined,\n    inReplyTo: data.headers?.['in-reply-to'] ?? undefined,\n    references: data.headers?.['references']?.split(/\\s+/).filter(Boolean),\n  }\n}\n\ntype VerifiedPayload =\n  | { kind: 'custom'; payload: Record<string, unknown>; signature: string; timestamp: string }\n  | { kind: 'resend'; emailFields: Awaited<ReturnType<typeof fetchResendEmail>>; to: string[] }\n\nasync function verifyAndParse(req: Request, rawBody: string): Promise<\n  | { ok: true; data: VerifiedPayload }\n  | { ok: false; response: NextResponse }\n> {\n  const customSig = req.headers.get('x-webhook-signature')\n  const svixId = req.headers.get('svix-id')\n\n  if (customSig) {\n    const webhookSecret = process.env.INBOX_OPS_WEBHOOK_SECRET\n    if (!webhookSecret) {\n      logger.error('INBOX_OPS_WEBHOOK_SECRET not configured')\n      return { ok: false, response: NextResponse.json({ error: 'Service unavailable' }, { status: 503 }) }\n    }\n    const timestamp = req.headers.get('x-webhook-timestamp') || ''\n    // Cheap, secret-independent gate first: reject replayed/stale requests\n    // before parsing. The HMAC itself is verified later, against the secret\n    // bound to the resolved inbox (see the POST handler), so a holder of the\n    // global secret cannot inject into a tenant that owns its own secret.\n    if (!isTimestampFresh(timestamp)) {\n      return { ok: false, response: NextResponse.json({ error: 'Invalid signature' }, { status: 400 }) }\n    }\n    let payload: Record<string, unknown>\n    try {\n      payload = JSON.parse(rawBody)\n    } catch {\n      return { ok: false, response: NextResponse.json({ error: 'Invalid JSON' }, { status: 400 }) }\n    }\n    return { ok: true, data: { kind: 'custom', payload, signature: customSig, timestamp } }\n  }\n\n  if (svixId) {\n    const signingSecret = process.env.RESEND_WEBHOOK_SIGNING_SECRET\n    if (!signingSecret) {\n      logger.error('RESEND_WEBHOOK_SIGNING_SECRET not configured')\n      return { ok: false, response: NextResponse.json({ error: 'Service unavailable' }, { status: 503 }) }\n    }\n    const headers: Record<string, string> = {\n      'svix-id': svixId,\n      'svix-timestamp': req.headers.get('svix-timestamp') || '',\n      'svix-signature': req.headers.get('svix-signature') || '',\n    }\n    if (!verifySvixSignature(rawBody, headers, signingSecret)) {\n      return { ok: false, response: NextResponse.json({ error: 'Invalid signature' }, { status: 400 }) }\n    }\n    let envelope: { type?: string; data?: { email_id?: string; from?: string; to?: string[] } }\n    try {\n      envelope = JSON.parse(rawBody)\n    } catch {\n      return { ok: false, response: NextResponse.json({ error: 'Invalid JSON' }, { status: 400 }) }\n    }\n    if (envelope.type !== 'email.received') {\n      return { ok: false, response: NextResponse.json({ ok: true }) }\n    }\n    const emailId = envelope.data?.email_id\n    if (!emailId) {\n      return { ok: false, response: NextResponse.json({ error: 'Missing email_id in Resend payload' }, { status: 400 }) }\n    }\n    const emailFields = await fetchResendEmail(emailId)\n    const to = emailFields.to || envelope.data?.to || []\n    return { ok: true, data: { kind: 'resend', emailFields, to } }\n  }\n\n  return { ok: false, response: NextResponse.json({ error: 'Missing signature headers' }, { status: 400 }) }\n}\n\nexport async function POST(req: Request) {\n  const hasCustomSecret = Boolean(process.env.INBOX_OPS_WEBHOOK_SECRET)\n  const hasResendSecret = Boolean(process.env.RESEND_WEBHOOK_SIGNING_SECRET)\n  if (!hasCustomSecret && !hasResendSecret) {\n    logger.error('Neither INBOX_OPS_WEBHOOK_SECRET nor RESEND_WEBHOOK_SIGNING_SECRET is configured')\n    return NextResponse.json({ error: 'Service unavailable' }, { status: 503 })\n  }\n\n  let rawBody: string\n  try {\n    rawBody = await readBoundedRequestBody(req, { maxBytes: MAX_PAYLOAD_SIZE })\n  } catch (error) {\n    if (error instanceof WebhookBodyTooLargeError) {\n      return NextResponse.json({ error: 'Payload too large' }, { status: 413 })\n    }\n    return NextResponse.json({ error: 'Bad request' }, { status: 400 })\n  }\n\n  const verified = await verifyAndParse(req, rawBody)\n  if (!verified.ok) {\n    return verified.response\n  }\n\n  let toAddress: string | null\n  let emailInput: Parameters<typeof parseInboundEmail>[0]\n\n  if (verified.data.kind === 'custom') {\n    const payload = verified.data.payload\n    toAddress = extractToAddress(payload)\n    emailInput = {\n      from: payload.from as string | undefined,\n      to: payload.to as string | string[] | undefined,\n      subject: payload.subject as string | undefined,\n      text: payload.text as string | undefined,\n      html: payload.html as string | undefined,\n      messageId: payload.messageId as string | undefined,\n      replyTo: payload.replyTo as string | undefined,\n      inReplyTo: payload.inReplyTo as string | undefined,\n      references: payload.references as string | string[] | undefined,\n    }\n  } else {\n    const { emailFields, to } = verified.data\n    toAddress = to.length > 0 ? to[0].toLowerCase() : null\n    emailInput = {\n      from: emailFields.from,\n      to: emailFields.to,\n      subject: emailFields.subject,\n      text: emailFields.text,\n      html: emailFields.html,\n      messageId: emailFields.messageId,\n      replyTo: emailFields.replyTo,\n      inReplyTo: emailFields.inReplyTo,\n      references: emailFields.references,\n    }\n  }\n\n  if (!toAddress) {\n    return NextResponse.json({ error: 'Missing recipient address' }, { status: 400 })\n  }\n\n  const container = await createRequestContainer()\n\n  let cache: CacheStrategy | null = null\n  try {\n    cache = container.resolve('cache') as CacheStrategy\n  } catch {\n    // Cache not available \u2014 the limiter now fails closed with a process-local\n    // bucket instead of waving the request through.\n  }\n\n  // Pre-DB global bucket keyed on the configured signing secret (custom) or the\n  // static Resend path, NOT on the attacker-controllable `to` and NOT on the\n  // per-request signature (which mutates with timestamp/body, so it would mint a\n  // fresh bucket every request and never throttle). The per-tenant secret lives\n  // behind the encrypted-column lookup, so the only secret available here without\n  // a DB hit is the global one \u2014 keying on it caps total inbound volume for the\n  // custom path and runs BEFORE the lookup so a flood cannot amplify DB work.\n  const globalBucketKey = verified.data.kind === 'custom'\n    ? `webhook:secret:${secretFingerprint(process.env.INBOX_OPS_WEBHOOK_SECRET || '')}`\n    : 'webhook:resend'\n  const globalRateCheck = await checkRateLimit(cache, globalBucketKey)\n  if (!globalRateCheck.allowed) {\n    return rateLimitedResponse(globalRateCheck.retryAfterSeconds)\n  }\n\n  const em = (container.resolve('em') as EntityManager).fork()\n\n  // No explicit scope: decryptEntitiesWithFallbackScope reads tenant/org off the\n  // resolved row, which is exactly what binds webhook_secret to its own tenant.\n  const settings = await findOneWithDecryption(\n    em,\n    InboxSettings,\n    {\n      inboxAddress: toAddress.toLowerCase(),\n      isActive: true,\n      deletedAt: null,\n    },\n  )\n\n  // Final HMAC verification for the custom provider path: bind the signature to\n  // the resolved tenant. When the inbox declares its own secret, ONLY that\n  // secret is accepted; otherwise the global secret is accepted (back-compat).\n  // For an unknown `to` we still require the global secret so the endpoint never\n  // behaves as an unauthenticated probe oracle.\n  if (verified.data.kind === 'custom') {\n    const globalSecret = process.env.INBOX_OPS_WEBHOOK_SECRET || ''\n    const inboxSecret = settings?.webhookSecret || ''\n    const acceptableSecrets = inboxSecret ? [inboxSecret] : [globalSecret]\n    const signatureValid = verifyHmacAgainstAny(\n      rawBody,\n      verified.data.signature,\n      verified.data.timestamp,\n      acceptableSecrets,\n    )\n    if (!signatureValid) {\n      return NextResponse.json({ error: 'Invalid signature' }, { status: 400 })\n    }\n  }\n\n  if (!settings) {\n    return NextResponse.json({ ok: true })\n  }\n\n  // Per-tenant bucket keyed on the RESOLVED tenant (not the raw `to`), so it\n  // cannot be diluted by alias addresses that map to the same inbox.\n  const tenantRateCheck = await checkRateLimit(\n    cache,\n    `webhook:tenant:${settings.tenantId}`,\n    settings.tenantId,\n  )\n  if (!tenantRateCheck.allowed) {\n    return rateLimitedResponse(tenantRateCheck.retryAfterSeconds)\n  }\n\n  const parsed = parseInboundEmail(emailInput)\n\n  const isDuplicate = await checkDuplicate(em, settings, parsed.messageId, parsed.contentHash)\n  if (isDuplicate) {\n    try {\n      await emitInboxOpsEvent('inbox_ops.email.deduplicated', {\n        tenantId: settings.tenantId,\n        organizationId: settings.organizationId,\n        toAddress,\n      })\n    } catch (eventError) {\n      logger.error('Failed to emit deduplicated event', { err: eventError })\n    }\n    return NextResponse.json({ ok: true })\n  }\n\n  const maxTextSize = parseInt(process.env.INBOX_OPS_MAX_TEXT_SIZE || '204800', 10)\n  const cleanedText = parsed.cleanedText.slice(0, maxTextSize)\n\n  const email = em.create(InboxEmail, {\n    messageId: parsed.messageId,\n    contentHash: parsed.contentHash,\n    forwardedByAddress: parsed.from.email,\n    forwardedByName: parsed.from.name || null,\n    toAddress,\n    subject: parsed.subject,\n    replyTo: parsed.replyTo,\n    inReplyTo: parsed.inReplyTo,\n    emailReferences: parsed.references,\n    rawText: parsed.rawText,\n    rawHtml: parsed.rawHtml,\n    cleanedText,\n    threadMessages: parsed.threadMessages,\n    detectedLanguage: parsed.detectedLanguage,\n    receivedAt: new Date(),\n    status: 'received' as const,\n    isActive: true,\n    organizationId: settings.organizationId,\n    tenantId: settings.tenantId,\n  })\n\n  em.persist(email)\n  await em.flush()\n\n  try {\n    await emitInboxOpsEvent('inbox_ops.email.received', {\n      emailId: email.id,\n      tenantId: settings.tenantId,\n      organizationId: settings.organizationId,\n      forwardedByAddress: parsed.from.email,\n      subject: parsed.subject,\n    })\n  } catch (eventError) {\n    logger.error('Failed to emit email.received event', { err: eventError })\n  }\n\n  return NextResponse.json({ ok: true })\n}\n\nfunction rateLimitedResponse(retryAfterSeconds?: number): NextResponse {\n  return NextResponse.json(\n    { error: 'Rate limit exceeded' },\n    {\n      status: 429,\n      headers: retryAfterSeconds ? { 'Retry-After': String(retryAfterSeconds) } : undefined,\n    },\n  )\n}\n\nfunction extractToAddress(payload: Record<string, unknown>): string | null {\n  const to = payload.to\n  if (typeof to === 'string') {\n    const match = to.match(/<([^>]+)>/)\n    return match ? match[1].toLowerCase() : to.trim().toLowerCase()\n  }\n  if (Array.isArray(to) && to.length > 0) {\n    const first = to[0]\n    if (typeof first === 'string') {\n      const match = first.match(/<([^>]+)>/)\n      return match ? match[1].toLowerCase() : first.trim().toLowerCase()\n    }\n  }\n  return null\n}\n\nasync function checkDuplicate(\n  em: EntityManager,\n  settings: InboxSettings,\n  messageId: string | null | undefined,\n  contentHash: string | null | undefined,\n): Promise<boolean> {\n  const encScope = {\n    tenantId: settings.tenantId,\n    organizationId: settings.organizationId,\n  }\n  const whereBase = {\n    organizationId: settings.organizationId,\n    tenantId: settings.tenantId,\n    deletedAt: null,\n  }\n\n  if (messageId) {\n    const byMessageId = await findOneWithDecryption(em, InboxEmail, { ...whereBase, messageId }, undefined, encScope)\n    if (byMessageId) return true\n  }\n\n  if (contentHash) {\n    const byHash = await findOneWithDecryption(em, InboxEmail, { ...whereBase, contentHash }, undefined, encScope)\n    if (byHash) return true\n  }\n\n  return false\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'InboxOps',\n  summary: 'Inbound email webhook',\n  methods: {\n    POST: {\n      summary: 'Receive forwarded email from provider webhook',\n      description: 'Public endpoint \u2014 validated by provider HMAC signature or Resend/Svix signature. Rate limited per tenant.',\n      requestBody: {\n        contentType: 'application/json',\n        schema: z.object({\n          from: z.string().optional(),\n          to: z.union([z.string(), z.array(z.string())]).optional(),\n          subject: z.string().optional(),\n          text: z.string().optional(),\n          html: z.string().optional(),\n          messageId: z.string().optional(),\n          replyTo: z.string().optional(),\n          inReplyTo: z.string().optional(),\n          references: z.union([z.string(), z.array(z.string())]).optional(),\n        }),\n      },\n      responses: [\n        { status: 200, description: 'Email received and queued for processing' },\n        { status: 400, description: 'Invalid payload or signature' },\n        { status: 413, description: 'Payload too large' },\n        { status: 429, description: 'Rate limit exceeded' },\n        { status: 503, description: 'Webhook secret not configured' },\n      ],\n    },\n  },\n}\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,YAAY,uBAAuB;AAC5C,SAAS,SAAS;AAClB,SAAS,eAAe;AACxB,SAAS,cAAc;AACvB,SAAS,8BAA8B;AAIvC,SAAS,6BAA6B;AACtC,SAAS,eAAe,kBAAkB;AAC1C,SAAS,yBAAyB;AAClC,SAAS,sBAAsB;AAC/B,SAAS,yBAAyB;AAClC,SAAS,oBAAoB;AAC7B;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEP,MAAM,SAAS,aAAa,WAAW,EAAE,MAAM,EAAE,WAAW,UAAU,CAAC;AAEhE,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,MAAM;AAC7B;AAEA,MAAM,mBAAmB;AAAA,EACvB,QAAQ,IAAI,oCAAoC,QAAQ,IAAI;AAAA,EAC5D,IAAI,OAAO;AACb;AACA,MAAM,mBAAmB,IAAI,KAAK;AAElC,SAAS,iBAAiB,WAA4B;AACpD,MAAI,CAAC,UAAW,QAAO;AACvB,QAAM,cAAc,SAAS,WAAW,EAAE,IAAI;AAC9C,MAAI,MAAM,WAAW,EAAG,QAAO;AAC/B,SAAO,KAAK,IAAI,KAAK,IAAI,IAAI,WAAW,KAAK;AAC/C;AAEA,SAAS,oBACP,SACA,WACA,WACA,QACS;AACT,MAAI,CAAC,aAAa,CAAC,aAAa,CAAC,OAAQ,QAAO;AAEhD,MAAI,CAAC,iBAAiB,SAAS,EAAG,QAAO;AAEzC,QAAM,WAAW,WAAW,UAAU,MAAM,EACzC,OAAO,GAAG,SAAS,IAAI,OAAO,EAAE,EAChC,OAAO,KAAK;AACf,QAAM,WAAW,UAAU,WAAW,SAAS,IAC3C,UAAU,MAAM,UAAU,MAAM,IAChC;AAEJ,MAAI;AACF,QAAI,SAAS,WAAW,SAAS,OAAQ,QAAO;AAChD,WAAO;AAAA,MACL,OAAO,KAAK,UAAU,KAAK;AAAA,MAC3B,OAAO,KAAK,UAAU,KAAK;AAAA,IAC7B;AAAA,EACF,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAOA,SAAS,qBACP,SACA,WACA,WACA,SACS;AACT,aAAW,UAAU,SAAS;AAC5B,QAAI,UAAU,oBAAoB,SAAS,WAAW,WAAW,MAAM,EAAG,QAAO;AAAA,EACnF;AACA,SAAO;AACT;AAMA,SAAS,kBAAkB,QAAwB;AACjD,SAAO,WAAW,UAAU,2BAA2B,EAAE,OAAO,MAAM,EAAE,OAAO,KAAK,EAAE,MAAM,GAAG,EAAE;AACnG;AAEA,SAAS,oBACP,SACA,SACA,QACS;AACT,MAAI;AACF,UAAM,KAAK,IAAI,QAAQ,MAAM;AAC7B,OAAG,OAAO,SAAS;AAAA,MACjB,WAAW,QAAQ,SAAS;AAAA,MAC5B,kBAAkB,QAAQ,gBAAgB;AAAA,MAC1C,kBAAkB,QAAQ,gBAAgB;AAAA,IAC5C,CAAC;AACD,WAAO;AAAA,EACT,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,eAAe,iBAAiB,SAU7B;AACD,QAAM,SAAS,QAAQ,IAAI;AAC3B,MAAI,CAAC,OAAQ,OAAM,IAAI,MAAM,2DAA2D;AAExF,QAAM,SAAS,IAAI,OAAO,MAAM;AAChC,QAAM,EAAE,MAAM,MAAM,IAAI,MAAM,OAAO,OAAO,UAAU,IAAI,OAAO;AACjE,MAAI,SAAS,CAAC,MAAM;AAClB,UAAM,IAAI,MAAM,gCAAgC,OAAO,KAAK,OAAO,WAAW,eAAe,EAAE;AAAA,EACjG;AAEA,SAAO;AAAA,IACL,MAAM,KAAK;AAAA,IACX,IAAI,KAAK;AAAA,IACT,SAAS,KAAK;AAAA,IACd,MAAM,KAAK,QAAQ;AAAA,IACnB,MAAM,KAAK,QAAQ;AAAA,IACnB,WAAW,KAAK;AAAA,IAChB,SAAS,KAAK,WAAW,CAAC,KAAK;AAAA,IAC/B,WAAW,KAAK,UAAU,aAAa,KAAK;AAAA,IAC5C,YAAY,KAAK,UAAU,YAAY,GAAG,MAAM,KAAK,EAAE,OAAO,OAAO;AAAA,EACvE;AACF;AAMA,eAAe,eAAe,KAAc,SAG1C;AACA,QAAM,YAAY,IAAI,QAAQ,IAAI,qBAAqB;AACvD,QAAM,SAAS,IAAI,QAAQ,IAAI,SAAS;AAExC,MAAI,WAAW;AACb,UAAM,gBAAgB,QAAQ,IAAI;AAClC,QAAI,CAAC,eAAe;AAClB,aAAO,MAAM,yCAAyC;AACtD,aAAO,EAAE,IAAI,OAAO,UAAU,aAAa,KAAK,EAAE,OAAO,sBAAsB,GAAG,EAAE,QAAQ,IAAI,CAAC,EAAE;AAAA,IACrG;AACA,UAAM,YAAY,IAAI,QAAQ,IAAI,qBAAqB,KAAK;AAK5D,QAAI,CAAC,iBAAiB,SAAS,GAAG;AAChC,aAAO,EAAE,IAAI,OAAO,UAAU,aAAa,KAAK,EAAE,OAAO,oBAAoB,GAAG,EAAE,QAAQ,IAAI,CAAC,EAAE;AAAA,IACnG;AACA,QAAI;AACJ,QAAI;AACF,gBAAU,KAAK,MAAM,OAAO;AAAA,IAC9B,QAAQ;AACN,aAAO,EAAE,IAAI,OAAO,UAAU,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC,EAAE;AAAA,IAC9F;AACA,WAAO,EAAE,IAAI,MAAM,MAAM,EAAE,MAAM,UAAU,SAAS,WAAW,WAAW,UAAU,EAAE;AAAA,EACxF;AAEA,MAAI,QAAQ;AACV,UAAM,gBAAgB,QAAQ,IAAI;AAClC,QAAI,CAAC,eAAe;AAClB,aAAO,MAAM,8CAA8C;AAC3D,aAAO,EAAE,IAAI,OAAO,UAAU,aAAa,KAAK,EAAE,OAAO,sBAAsB,GAAG,EAAE,QAAQ,IAAI,CAAC,EAAE;AAAA,IACrG;AACA,UAAM,UAAkC;AAAA,MACtC,WAAW;AAAA,MACX,kBAAkB,IAAI,QAAQ,IAAI,gBAAgB,KAAK;AAAA,MACvD,kBAAkB,IAAI,QAAQ,IAAI,gBAAgB,KAAK;AAAA,IACzD;AACA,QAAI,CAAC,oBAAoB,SAAS,SAAS,aAAa,GAAG;AACzD,aAAO,EAAE,IAAI,OAAO,UAAU,aAAa,KAAK,EAAE,OAAO,oBAAoB,GAAG,EAAE,QAAQ,IAAI,CAAC,EAAE;AAAA,IACnG;AACA,QAAI;AACJ,QAAI;AACF,iBAAW,KAAK,MAAM,OAAO;AAAA,IAC/B,QAAQ;AACN,aAAO,EAAE,IAAI,OAAO,UAAU,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC,EAAE;AAAA,IAC9F;AACA,QAAI,SAAS,SAAS,kBAAkB;AACtC,aAAO,EAAE,IAAI,OAAO,UAAU,aAAa,KAAK,EAAE,IAAI,KAAK,CAAC,EAAE;AAAA,IAChE;AACA,UAAM,UAAU,SAAS,MAAM;AAC/B,QAAI,CAAC,SAAS;AACZ,aAAO,EAAE,IAAI,OAAO,UAAU,aAAa,KAAK,EAAE,OAAO,qCAAqC,GAAG,EAAE,QAAQ,IAAI,CAAC,EAAE;AAAA,IACpH;AACA,UAAM,cAAc,MAAM,iBAAiB,OAAO;AAClD,UAAM,KAAK,YAAY,MAAM,SAAS,MAAM,MAAM,CAAC;AACnD,WAAO,EAAE,IAAI,MAAM,MAAM,EAAE,MAAM,UAAU,aAAa,GAAG,EAAE;AAAA,EAC/D;AAEA,SAAO,EAAE,IAAI,OAAO,UAAU,aAAa,KAAK,EAAE,OAAO,4BAA4B,GAAG,EAAE,QAAQ,IAAI,CAAC,EAAE;AAC3G;AAEA,eAAsB,KAAK,KAAc;AACvC,QAAM,kBAAkB,QAAQ,QAAQ,IAAI,wBAAwB;AACpE,QAAM,kBAAkB,QAAQ,QAAQ,IAAI,6BAA6B;AACzE,MAAI,CAAC,mBAAmB,CAAC,iBAAiB;AACxC,WAAO,MAAM,kFAAkF;AAC/F,WAAO,aAAa,KAAK,EAAE,OAAO,sBAAsB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC5E;AAEA,MAAI;AACJ,MAAI;AACF,cAAU,MAAM,uBAAuB,KAAK,EAAE,UAAU,iBAAiB,CAAC;AAAA,EAC5E,SAAS,OAAO;AACd,QAAI,iBAAiB,0BAA0B;AAC7C,aAAO,aAAa,KAAK,EAAE,OAAO,oBAAoB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC1E;AACA,WAAO,aAAa,KAAK,EAAE,OAAO,cAAc,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACpE;AAEA,QAAM,WAAW,MAAM,eAAe,KAAK,OAAO;AAClD,MAAI,CAAC,SAAS,IAAI;AAChB,WAAO,SAAS;AAAA,EAClB;AAEA,MAAI;AACJ,MAAI;AAEJ,MAAI,SAAS,KAAK,SAAS,UAAU;AACnC,UAAM,UAAU,SAAS,KAAK;AAC9B,gBAAY,iBAAiB,OAAO;AACpC,iBAAa;AAAA,MACX,MAAM,QAAQ;AAAA,MACd,IAAI,QAAQ;AAAA,MACZ,SAAS,QAAQ;AAAA,MACjB,MAAM,QAAQ;AAAA,MACd,MAAM,QAAQ;AAAA,MACd,WAAW,QAAQ;AAAA,MACnB,SAAS,QAAQ;AAAA,MACjB,WAAW,QAAQ;AAAA,MACnB,YAAY,QAAQ;AAAA,IACtB;AAAA,EACF,OAAO;AACL,UAAM,EAAE,aAAa,GAAG,IAAI,SAAS;AACrC,gBAAY,GAAG,SAAS,IAAI,GAAG,CAAC,EAAE,YAAY,IAAI;AAClD,iBAAa;AAAA,MACX,MAAM,YAAY;AAAA,MAClB,IAAI,YAAY;AAAA,MAChB,SAAS,YAAY;AAAA,MACrB,MAAM,YAAY;AAAA,MAClB,MAAM,YAAY;AAAA,MAClB,WAAW,YAAY;AAAA,MACvB,SAAS,YAAY;AAAA,MACrB,WAAW,YAAY;AAAA,MACvB,YAAY,YAAY;AAAA,IAC1B;AAAA,EACF;AAEA,MAAI,CAAC,WAAW;AACd,WAAO,aAAa,KAAK,EAAE,OAAO,4BAA4B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAClF;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAE/C,MAAI,QAA8B;AAClC,MAAI;AACF,YAAQ,UAAU,QAAQ,OAAO;AAAA,EACnC,QAAQ;AAAA,EAGR;AASA,QAAM,kBAAkB,SAAS,KAAK,SAAS,WAC3C,kBAAkB,kBAAkB,QAAQ,IAAI,4BAA4B,EAAE,CAAC,KAC/E;AACJ,QAAM,kBAAkB,MAAM,eAAe,OAAO,eAAe;AACnE,MAAI,CAAC,gBAAgB,SAAS;AAC5B,WAAO,oBAAoB,gBAAgB,iBAAiB;AAAA,EAC9D;AAEA,QAAM,KAAM,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAI3D,QAAM,WAAW,MAAM;AAAA,IACrB;AAAA,IACA;AAAA,IACA;AAAA,MACE,cAAc,UAAU,YAAY;AAAA,MACpC,UAAU;AAAA,MACV,WAAW;AAAA,IACb;AAAA,EACF;AAOA,MAAI,SAAS,KAAK,SAAS,UAAU;AACnC,UAAM,eAAe,QAAQ,IAAI,4BAA4B;AAC7D,UAAM,cAAc,UAAU,iBAAiB;AAC/C,UAAM,oBAAoB,cAAc,CAAC,WAAW,IAAI,CAAC,YAAY;AACrE,UAAM,iBAAiB;AAAA,MACrB;AAAA,MACA,SAAS,KAAK;AAAA,MACd,SAAS,KAAK;AAAA,MACd;AAAA,IACF;AACA,QAAI,CAAC,gBAAgB;AACnB,aAAO,aAAa,KAAK,EAAE,OAAO,oBAAoB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC1E;AAAA,EACF;AAEA,MAAI,CAAC,UAAU;AACb,WAAO,aAAa,KAAK,EAAE,IAAI,KAAK,CAAC;AAAA,EACvC;AAIA,QAAM,kBAAkB,MAAM;AAAA,IAC5B;AAAA,IACA,kBAAkB,SAAS,QAAQ;AAAA,IACnC,SAAS;AAAA,EACX;AACA,MAAI,CAAC,gBAAgB,SAAS;AAC5B,WAAO,oBAAoB,gBAAgB,iBAAiB;AAAA,EAC9D;AAEA,QAAM,SAAS,kBAAkB,UAAU;AAE3C,QAAM,cAAc,MAAM,eAAe,IAAI,UAAU,OAAO,WAAW,OAAO,WAAW;AAC3F,MAAI,aAAa;AACf,QAAI;AACF,YAAM,kBAAkB,gCAAgC;AAAA,QACtD,UAAU,SAAS;AAAA,QACnB,gBAAgB,SAAS;AAAA,QACzB;AAAA,MACF,CAAC;AAAA,IACH,SAAS,YAAY;AACnB,aAAO,MAAM,qCAAqC,EAAE,KAAK,WAAW,CAAC;AAAA,IACvE;AACA,WAAO,aAAa,KAAK,EAAE,IAAI,KAAK,CAAC;AAAA,EACvC;AAEA,QAAM,cAAc,SAAS,QAAQ,IAAI,2BAA2B,UAAU,EAAE;AAChF,QAAM,cAAc,OAAO,YAAY,MAAM,GAAG,WAAW;AAE3D,QAAM,QAAQ,GAAG,OAAO,YAAY;AAAA,IAClC,WAAW,OAAO;AAAA,IAClB,aAAa,OAAO;AAAA,IACpB,oBAAoB,OAAO,KAAK;AAAA,IAChC,iBAAiB,OAAO,KAAK,QAAQ;AAAA,IACrC;AAAA,IACA,SAAS,OAAO;AAAA,IAChB,SAAS,OAAO;AAAA,IAChB,WAAW,OAAO;AAAA,IAClB,iBAAiB,OAAO;AAAA,IACxB,SAAS,OAAO;AAAA,IAChB,SAAS,OAAO;AAAA,IAChB;AAAA,IACA,gBAAgB,OAAO;AAAA,IACvB,kBAAkB,OAAO;AAAA,IACzB,YAAY,oBAAI,KAAK;AAAA,IACrB,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,gBAAgB,SAAS;AAAA,IACzB,UAAU,SAAS;AAAA,EACrB,CAAC;AAED,KAAG,QAAQ,KAAK;AAChB,QAAM,GAAG,MAAM;AAEf,MAAI;AACF,UAAM,kBAAkB,4BAA4B;AAAA,MAClD,SAAS,MAAM;AAAA,MACf,UAAU,SAAS;AAAA,MACnB,gBAAgB,SAAS;AAAA,MACzB,oBAAoB,OAAO,KAAK;AAAA,MAChC,SAAS,OAAO;AAAA,IAClB,CAAC;AAAA,EACH,SAAS,YAAY;AACnB,WAAO,MAAM,uCAAuC,EAAE,KAAK,WAAW,CAAC;AAAA,EACzE;AAEA,SAAO,aAAa,KAAK,EAAE,IAAI,KAAK,CAAC;AACvC;AAEA,SAAS,oBAAoB,mBAA0C;AACrE,SAAO,aAAa;AAAA,IAClB,EAAE,OAAO,sBAAsB;AAAA,IAC/B;AAAA,MACE,QAAQ;AAAA,MACR,SAAS,oBAAoB,EAAE,eAAe,OAAO,iBAAiB,EAAE,IAAI;AAAA,IAC9E;AAAA,EACF;AACF;AAEA,SAAS,iBAAiB,SAAiD;AACzE,QAAM,KAAK,QAAQ;AACnB,MAAI,OAAO,OAAO,UAAU;AAC1B,UAAM,QAAQ,GAAG,MAAM,WAAW;AAClC,WAAO,QAAQ,MAAM,CAAC,EAAE,YAAY,IAAI,GAAG,KAAK,EAAE,YAAY;AAAA,EAChE;AACA,MAAI,MAAM,QAAQ,EAAE,KAAK,GAAG,SAAS,GAAG;AACtC,UAAM,QAAQ,GAAG,CAAC;AAClB,QAAI,OAAO,UAAU,UAAU;AAC7B,YAAM,QAAQ,MAAM,MAAM,WAAW;AACrC,aAAO,QAAQ,MAAM,CAAC,EAAE,YAAY,IAAI,MAAM,KAAK,EAAE,YAAY;AAAA,IACnE;AAAA,EACF;AACA,SAAO;AACT;AAEA,eAAe,eACb,IACA,UACA,WACA,aACkB;AAClB,QAAM,WAAW;AAAA,IACf,UAAU,SAAS;AAAA,IACnB,gBAAgB,SAAS;AAAA,EAC3B;AACA,QAAM,YAAY;AAAA,IAChB,gBAAgB,SAAS;AAAA,IACzB,UAAU,SAAS;AAAA,IACnB,WAAW;AAAA,EACb;AAEA,MAAI,WAAW;AACb,UAAM,cAAc,MAAM,sBAAsB,IAAI,YAAY,EAAE,GAAG,WAAW,UAAU,GAAG,QAAW,QAAQ;AAChH,QAAI,YAAa,QAAO;AAAA,EAC1B;AAEA,MAAI,aAAa;AACf,UAAM,SAAS,MAAM,sBAAsB,IAAI,YAAY,EAAE,GAAG,WAAW,YAAY,GAAG,QAAW,QAAQ;AAC7G,QAAI,OAAQ,QAAO;AAAA,EACrB;AAEA,SAAO;AACT;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aAAa;AAAA,MACb,aAAa;AAAA,QACX,aAAa;AAAA,QACb,QAAQ,EAAE,OAAO;AAAA,UACf,MAAM,EAAE,OAAO,EAAE,SAAS;AAAA,UAC1B,IAAI,EAAE,MAAM,CAAC,EAAE,OAAO,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,SAAS;AAAA,UACxD,SAAS,EAAE,OAAO,EAAE,SAAS;AAAA,UAC7B,MAAM,EAAE,OAAO,EAAE,SAAS;AAAA,UAC1B,MAAM,EAAE,OAAO,EAAE,SAAS;AAAA,UAC1B,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,UAC/B,SAAS,EAAE,OAAO,EAAE,SAAS;AAAA,UAC7B,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,UAC/B,YAAY,EAAE,MAAM,CAAC,EAAE,OAAO,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,SAAS;AAAA,QAClE,CAAC;AAAA,MACH;AAAA,MACA,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,2CAA2C;AAAA,QACvE,EAAE,QAAQ,KAAK,aAAa,+BAA+B;AAAA,QAC3D,EAAE,QAAQ,KAAK,aAAa,oBAAoB;AAAA,QAChD,EAAE,QAAQ,KAAK,aAAa,sBAAsB;AAAA,QAClD,EAAE,QAAQ,KAAK,aAAa,gCAAgC;AAAA,MAC9D;AAAA,IACF;AAAA,EACF;AACF;",
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { createHmac, timingSafeEqual } from 'node:crypto'\nimport { z } from 'zod'\nimport { Webhook } from 'svix'\nimport { Resend } from 'resend'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport type { CacheStrategy } from '@open-mercato/cache'\nimport { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { InboxSettings, InboxEmail } from '../../data/entities'\nimport { parseInboundEmail } from '../../lib/emailParser'\nimport { checkRateLimit } from '../../lib/rateLimiter'\nimport { emitInboxOpsEvent } from '../../events'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\nimport {\n  readBoundedRequestBody,\n  resolveWebhookBodyLimitBytes,\n  WebhookBodyTooLargeError,\n} from '@open-mercato/shared/lib/webhooks'\n\nconst logger = createLogger('inbox_ops').child({ component: 'webhook' })\n\nexport const metadata = {\n  POST: { requireAuth: false },\n}\n\nconst MAX_PAYLOAD_SIZE = resolveWebhookBodyLimitBytes(\n  process.env.INBOX_OPS_WEBHOOK_MAX_BODY_BYTES ?? process.env.OM_WEBHOOK_MAX_BODY_BYTES,\n  2 * 1024 * 1024,\n)\nconst REPLAY_WINDOW_MS = 5 * 60 * 1000 // 5 minutes\n\nfunction isTimestampFresh(timestamp: string): boolean {\n  if (!timestamp) return false\n  const timestampMs = parseInt(timestamp, 10) * 1000\n  if (isNaN(timestampMs)) return false\n  return Math.abs(Date.now() - timestampMs) <= REPLAY_WINDOW_MS\n}\n\nfunction verifyHmacSignature(\n  payload: string,\n  signature: string,\n  timestamp: string,\n  secret: string,\n): boolean {\n  if (!signature || !timestamp || !secret) return false\n\n  if (!isTimestampFresh(timestamp)) return false\n\n  const expected = createHmac('sha256', secret)\n    .update(`${timestamp}.${payload}`)\n    .digest('hex')\n  const received = signature.startsWith('sha256=')\n    ? signature.slice('sha256='.length)\n    : signature\n\n  try {\n    if (received.length !== expected.length) return false\n    return timingSafeEqual(\n      Buffer.from(received, 'hex'),\n      Buffer.from(expected, 'hex'),\n    )\n  } catch {\n    return false\n  }\n}\n\n// True when the signature verifies against ANY of the candidate secrets. Used\n// to bind the inbound signature to the resolved tenant: once the target inbox\n// declares its own per-tenant secret, the global INBOX_OPS_WEBHOOK_SECRET is no\n// longer accepted for that inbox, so a holder of the global key alone cannot\n// forge mail into a tenant that opted into a dedicated secret.\nfunction verifyHmacAgainstAny(\n  payload: string,\n  signature: string,\n  timestamp: string,\n  secrets: string[],\n): boolean {\n  for (const secret of secrets) {\n    if (secret && verifyHmacSignature(payload, signature, timestamp, secret)) return true\n  }\n  return false\n}\n\n// Stable, non-reversible identifier for the pre-DB global rate-limit bucket.\n// Keying on the configured signing secret (rather than the attacker-set `to` or\n// the per-request signature) means the bucket is request-invariant for a given\n// secret, so rotating recipients or mutating the body cannot dilute the limit.\nfunction secretFingerprint(secret: string): string {\n  return createHmac('sha256', 'inbox_ops:rate_limit:salt').update(secret).digest('hex').slice(0, 32)\n}\n\nfunction verifySvixSignature(\n  rawBody: string,\n  headers: Record<string, string>,\n  secret: string,\n): boolean {\n  try {\n    const wh = new Webhook(secret)\n    wh.verify(rawBody, {\n      'svix-id': headers['svix-id'],\n      'svix-timestamp': headers['svix-timestamp'],\n      'svix-signature': headers['svix-signature'],\n    })\n    return true\n  } catch {\n    return false\n  }\n}\n\nasync function fetchResendEmail(emailId: string): Promise<{\n  from?: string\n  to?: string[]\n  subject?: string\n  text?: string\n  html?: string\n  messageId?: string\n  replyTo?: string\n  inReplyTo?: string\n  references?: string[]\n}> {\n  const apiKey = process.env.RESEND_API_KEY\n  if (!apiKey) throw new Error('RESEND_API_KEY is required to fetch Resend inbound emails')\n\n  const resend = new Resend(apiKey)\n  const { data, error } = await resend.emails.receiving.get(emailId)\n  if (error || !data) {\n    throw new Error(`Failed to fetch Resend email ${emailId}: ${error?.message || 'unknown error'}`)\n  }\n\n  return {\n    from: data.from,\n    to: data.to,\n    subject: data.subject,\n    text: data.text ?? undefined,\n    html: data.html ?? undefined,\n    messageId: data.message_id,\n    replyTo: data.reply_to?.[0] ?? undefined,\n    inReplyTo: data.headers?.['in-reply-to'] ?? undefined,\n    references: data.headers?.['references']?.split(/\\s+/).filter(Boolean),\n  }\n}\n\ntype VerifiedPayload =\n  | { kind: 'custom'; payload: Record<string, unknown>; signature: string; timestamp: string }\n  | { kind: 'resend'; emailFields: Awaited<ReturnType<typeof fetchResendEmail>>; to: string[] }\n\nasync function verifyAndParse(req: Request, rawBody: string): Promise<\n  | { ok: true; data: VerifiedPayload }\n  | { ok: false; response: NextResponse }\n> {\n  const customSig = req.headers.get('x-webhook-signature')\n  const svixId = req.headers.get('svix-id')\n\n  if (customSig) {\n    const webhookSecret = process.env.INBOX_OPS_WEBHOOK_SECRET\n    if (!webhookSecret) {\n      logger.error('INBOX_OPS_WEBHOOK_SECRET not configured')\n      return { ok: false, response: NextResponse.json({ error: 'Service unavailable' }, { status: 503 }) }\n    }\n    const timestamp = req.headers.get('x-webhook-timestamp') || ''\n    // Cheap, secret-independent gate first: reject replayed/stale requests\n    // before parsing. The HMAC itself is verified later, against the secret\n    // bound to the resolved inbox (see the POST handler), so a holder of the\n    // global secret cannot inject into a tenant that owns its own secret.\n    if (!isTimestampFresh(timestamp)) {\n      return { ok: false, response: NextResponse.json({ error: 'Invalid signature' }, { status: 400 }) }\n    }\n    let payload: Record<string, unknown>\n    try {\n      payload = JSON.parse(rawBody)\n    } catch {\n      return { ok: false, response: NextResponse.json({ error: 'Invalid JSON' }, { status: 400 }) }\n    }\n    return { ok: true, data: { kind: 'custom', payload, signature: customSig, timestamp } }\n  }\n\n  if (svixId) {\n    const signingSecret = process.env.RESEND_WEBHOOK_SIGNING_SECRET\n    if (!signingSecret) {\n      logger.error('RESEND_WEBHOOK_SIGNING_SECRET not configured')\n      return { ok: false, response: NextResponse.json({ error: 'Service unavailable' }, { status: 503 }) }\n    }\n    const headers: Record<string, string> = {\n      'svix-id': svixId,\n      'svix-timestamp': req.headers.get('svix-timestamp') || '',\n      'svix-signature': req.headers.get('svix-signature') || '',\n    }\n    if (!verifySvixSignature(rawBody, headers, signingSecret)) {\n      return { ok: false, response: NextResponse.json({ error: 'Invalid signature' }, { status: 400 }) }\n    }\n    let envelope: { type?: string; data?: { email_id?: string; from?: string; to?: string[] } }\n    try {\n      envelope = JSON.parse(rawBody)\n    } catch {\n      return { ok: false, response: NextResponse.json({ error: 'Invalid JSON' }, { status: 400 }) }\n    }\n    if (envelope.type !== 'email.received') {\n      return { ok: false, response: NextResponse.json({ ok: true }) }\n    }\n    const emailId = envelope.data?.email_id\n    if (!emailId) {\n      return { ok: false, response: NextResponse.json({ error: 'Missing email_id in Resend payload' }, { status: 400 }) }\n    }\n    const emailFields = await fetchResendEmail(emailId)\n    const to = emailFields.to || envelope.data?.to || []\n    return { ok: true, data: { kind: 'resend', emailFields, to } }\n  }\n\n  return { ok: false, response: NextResponse.json({ error: 'Missing signature headers' }, { status: 400 }) }\n}\n\nexport async function POST(req: Request) {\n  const hasCustomSecret = Boolean(process.env.INBOX_OPS_WEBHOOK_SECRET)\n  const hasResendSecret = Boolean(process.env.RESEND_WEBHOOK_SIGNING_SECRET)\n  if (!hasCustomSecret && !hasResendSecret) {\n    logger.error('Neither INBOX_OPS_WEBHOOK_SECRET nor RESEND_WEBHOOK_SIGNING_SECRET is configured')\n    return NextResponse.json({ error: 'Service unavailable' }, { status: 503 })\n  }\n\n  let rawBody: string\n  try {\n    rawBody = await readBoundedRequestBody(req, { maxBytes: MAX_PAYLOAD_SIZE })\n  } catch (error) {\n    if (error instanceof WebhookBodyTooLargeError) {\n      return NextResponse.json({ error: 'Payload too large' }, { status: 413 })\n    }\n    return NextResponse.json({ error: 'Bad request' }, { status: 400 })\n  }\n\n  const verified = await verifyAndParse(req, rawBody)\n  if (!verified.ok) {\n    return verified.response\n  }\n\n  let toAddress: string | null\n  let emailInput: Parameters<typeof parseInboundEmail>[0]\n\n  if (verified.data.kind === 'custom') {\n    const payload = verified.data.payload\n    toAddress = extractToAddress(payload)\n    emailInput = {\n      from: payload.from as string | undefined,\n      to: payload.to as string | string[] | undefined,\n      subject: payload.subject as string | undefined,\n      text: payload.text as string | undefined,\n      html: payload.html as string | undefined,\n      messageId: payload.messageId as string | undefined,\n      replyTo: payload.replyTo as string | undefined,\n      inReplyTo: payload.inReplyTo as string | undefined,\n      references: payload.references as string | string[] | undefined,\n    }\n  } else {\n    const { emailFields, to } = verified.data\n    toAddress = to.length > 0 ? to[0].toLowerCase() : null\n    emailInput = {\n      from: emailFields.from,\n      to: emailFields.to,\n      subject: emailFields.subject,\n      text: emailFields.text,\n      html: emailFields.html,\n      messageId: emailFields.messageId,\n      replyTo: emailFields.replyTo,\n      inReplyTo: emailFields.inReplyTo,\n      references: emailFields.references,\n    }\n  }\n\n  if (!toAddress) {\n    return NextResponse.json({ error: 'Missing recipient address' }, { status: 400 })\n  }\n\n  const container = await createRequestContainer()\n\n  let cache: CacheStrategy | null = null\n  try {\n    cache = container.resolve('cache') as CacheStrategy\n  } catch {\n    // Cache not available \u2014 the limiter now fails closed with a process-local\n    // bucket instead of waving the request through.\n  }\n\n  // Pre-DB global bucket keyed on the configured signing secret (custom) or the\n  // static Resend path, NOT on the attacker-controllable `to` and NOT on the\n  // per-request signature (which mutates with timestamp/body, so it would mint a\n  // fresh bucket every request and never throttle). The per-tenant secret lives\n  // behind the encrypted-column lookup, so the only secret available here without\n  // a DB hit is the global one \u2014 keying on it caps total inbound volume for the\n  // custom path and runs BEFORE the lookup so a flood cannot amplify DB work.\n  const globalBucketKey = verified.data.kind === 'custom'\n    ? `webhook:secret:${secretFingerprint(process.env.INBOX_OPS_WEBHOOK_SECRET || '')}`\n    : 'webhook:resend'\n  const globalRateCheck = await checkRateLimit(cache, globalBucketKey)\n  if (!globalRateCheck.allowed) {\n    return rateLimitedResponse(globalRateCheck.retryAfterSeconds)\n  }\n\n  const em = (container.resolve('em') as EntityManager).fork()\n\n  // No explicit scope: decryptEntitiesWithFallbackScope reads tenant/org off the\n  // resolved row, which is exactly what binds webhook_secret to its own tenant.\n  const settings = await findOneWithDecryption(\n    em,\n    InboxSettings,\n    {\n      inboxAddress: toAddress.toLowerCase(),\n      isActive: true,\n      deletedAt: null,\n    },\n  )\n\n  // Final HMAC verification for the custom provider path: bind the signature to\n  // the resolved tenant. When the inbox declares its own secret, ONLY that\n  // secret is accepted; otherwise the global secret is accepted (back-compat).\n  // For an unknown `to` we still require the global secret so the endpoint never\n  // behaves as an unauthenticated probe oracle.\n  if (verified.data.kind === 'custom') {\n    const globalSecret = process.env.INBOX_OPS_WEBHOOK_SECRET || ''\n    const inboxSecret = settings?.webhookSecret || ''\n    const acceptableSecrets = inboxSecret ? [inboxSecret] : [globalSecret]\n    const signatureValid = verifyHmacAgainstAny(\n      rawBody,\n      verified.data.signature,\n      verified.data.timestamp,\n      acceptableSecrets,\n    )\n    if (!signatureValid) {\n      return NextResponse.json({ error: 'Invalid signature' }, { status: 400 })\n    }\n  }\n\n  if (!settings) {\n    return NextResponse.json({ ok: true })\n  }\n\n  // Per-tenant bucket keyed on the RESOLVED tenant (not the raw `to`), so it\n  // cannot be diluted by alias addresses that map to the same inbox.\n  const tenantRateCheck = await checkRateLimit(\n    cache,\n    `webhook:tenant:${settings.tenantId}`,\n    settings.tenantId,\n  )\n  if (!tenantRateCheck.allowed) {\n    return rateLimitedResponse(tenantRateCheck.retryAfterSeconds)\n  }\n\n  const parsed = parseInboundEmail(emailInput)\n\n  const isDuplicate = await checkDuplicate(em, settings, parsed.messageId, parsed.contentHash)\n  if (isDuplicate) {\n    try {\n      await emitInboxOpsEvent('inbox_ops.email.deduplicated', {\n        tenantId: settings.tenantId,\n        organizationId: settings.organizationId,\n        toAddress,\n      })\n    } catch (eventError) {\n      logger.error('Failed to emit deduplicated event', { err: eventError })\n    }\n    return NextResponse.json({ ok: true })\n  }\n\n  const maxTextSize = parseInt(process.env.INBOX_OPS_MAX_TEXT_SIZE || '204800', 10)\n  const cleanedText = parsed.cleanedText.slice(0, maxTextSize)\n\n  const email = em.create(InboxEmail, {\n    messageId: parsed.messageId,\n    contentHash: parsed.contentHash,\n    forwardedByAddress: parsed.from.email,\n    forwardedByName: parsed.from.name || null,\n    toAddress,\n    subject: parsed.subject,\n    replyTo: parsed.replyTo,\n    inReplyTo: parsed.inReplyTo,\n    emailReferences: parsed.references,\n    rawText: parsed.rawText,\n    rawHtml: parsed.rawHtml,\n    cleanedText,\n    threadMessages: parsed.threadMessages,\n    detectedLanguage: parsed.detectedLanguage,\n    receivedAt: new Date(),\n    status: 'received' as const,\n    isActive: true,\n    organizationId: settings.organizationId,\n    tenantId: settings.tenantId,\n  })\n\n  em.persist(email)\n  await em.flush()\n\n  try {\n    await emitInboxOpsEvent('inbox_ops.email.received', {\n      emailId: email.id,\n      tenantId: settings.tenantId,\n      organizationId: settings.organizationId,\n      forwardedByAddress: parsed.from.email,\n      subject: parsed.subject,\n    }, {\n      persistent: true,\n      tenantId: settings.tenantId,\n      organizationId: settings.organizationId,\n    })\n  } catch (eventError) {\n    logger.error('Failed to emit email.received event', { err: eventError })\n  }\n\n  return NextResponse.json({ ok: true })\n}\n\nfunction rateLimitedResponse(retryAfterSeconds?: number): NextResponse {\n  return NextResponse.json(\n    { error: 'Rate limit exceeded' },\n    {\n      status: 429,\n      headers: retryAfterSeconds ? { 'Retry-After': String(retryAfterSeconds) } : undefined,\n    },\n  )\n}\n\nfunction extractToAddress(payload: Record<string, unknown>): string | null {\n  const to = payload.to\n  if (typeof to === 'string') {\n    const match = to.match(/<([^>]+)>/)\n    return match ? match[1].toLowerCase() : to.trim().toLowerCase()\n  }\n  if (Array.isArray(to) && to.length > 0) {\n    const first = to[0]\n    if (typeof first === 'string') {\n      const match = first.match(/<([^>]+)>/)\n      return match ? match[1].toLowerCase() : first.trim().toLowerCase()\n    }\n  }\n  return null\n}\n\nasync function checkDuplicate(\n  em: EntityManager,\n  settings: InboxSettings,\n  messageId: string | null | undefined,\n  contentHash: string | null | undefined,\n): Promise<boolean> {\n  const encScope = {\n    tenantId: settings.tenantId,\n    organizationId: settings.organizationId,\n  }\n  const whereBase = {\n    organizationId: settings.organizationId,\n    tenantId: settings.tenantId,\n    deletedAt: null,\n  }\n\n  if (messageId) {\n    const byMessageId = await findOneWithDecryption(em, InboxEmail, { ...whereBase, messageId }, undefined, encScope)\n    if (byMessageId) return true\n  }\n\n  if (contentHash) {\n    const byHash = await findOneWithDecryption(em, InboxEmail, { ...whereBase, contentHash }, undefined, encScope)\n    if (byHash) return true\n  }\n\n  return false\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'InboxOps',\n  summary: 'Inbound email webhook',\n  methods: {\n    POST: {\n      summary: 'Receive forwarded email from provider webhook',\n      description: 'Public endpoint \u2014 validated by provider HMAC signature or Resend/Svix signature. Rate limited per tenant.',\n      requestBody: {\n        contentType: 'application/json',\n        schema: z.object({\n          from: z.string().optional(),\n          to: z.union([z.string(), z.array(z.string())]).optional(),\n          subject: z.string().optional(),\n          text: z.string().optional(),\n          html: z.string().optional(),\n          messageId: z.string().optional(),\n          replyTo: z.string().optional(),\n          inReplyTo: z.string().optional(),\n          references: z.union([z.string(), z.array(z.string())]).optional(),\n        }),\n      },\n      responses: [\n        { status: 200, description: 'Email received and queued for processing' },\n        { status: 400, description: 'Invalid payload or signature' },\n        { status: 413, description: 'Payload too large' },\n        { status: 429, description: 'Rate limit exceeded' },\n        { status: 503, description: 'Webhook secret not configured' },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,YAAY,uBAAuB;AAC5C,SAAS,SAAS;AAClB,SAAS,eAAe;AACxB,SAAS,cAAc;AACvB,SAAS,8BAA8B;AAIvC,SAAS,6BAA6B;AACtC,SAAS,eAAe,kBAAkB;AAC1C,SAAS,yBAAyB;AAClC,SAAS,sBAAsB;AAC/B,SAAS,yBAAyB;AAClC,SAAS,oBAAoB;AAC7B;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEP,MAAM,SAAS,aAAa,WAAW,EAAE,MAAM,EAAE,WAAW,UAAU,CAAC;AAEhE,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,MAAM;AAC7B;AAEA,MAAM,mBAAmB;AAAA,EACvB,QAAQ,IAAI,oCAAoC,QAAQ,IAAI;AAAA,EAC5D,IAAI,OAAO;AACb;AACA,MAAM,mBAAmB,IAAI,KAAK;AAElC,SAAS,iBAAiB,WAA4B;AACpD,MAAI,CAAC,UAAW,QAAO;AACvB,QAAM,cAAc,SAAS,WAAW,EAAE,IAAI;AAC9C,MAAI,MAAM,WAAW,EAAG,QAAO;AAC/B,SAAO,KAAK,IAAI,KAAK,IAAI,IAAI,WAAW,KAAK;AAC/C;AAEA,SAAS,oBACP,SACA,WACA,WACA,QACS;AACT,MAAI,CAAC,aAAa,CAAC,aAAa,CAAC,OAAQ,QAAO;AAEhD,MAAI,CAAC,iBAAiB,SAAS,EAAG,QAAO;AAEzC,QAAM,WAAW,WAAW,UAAU,MAAM,EACzC,OAAO,GAAG,SAAS,IAAI,OAAO,EAAE,EAChC,OAAO,KAAK;AACf,QAAM,WAAW,UAAU,WAAW,SAAS,IAC3C,UAAU,MAAM,UAAU,MAAM,IAChC;AAEJ,MAAI;AACF,QAAI,SAAS,WAAW,SAAS,OAAQ,QAAO;AAChD,WAAO;AAAA,MACL,OAAO,KAAK,UAAU,KAAK;AAAA,MAC3B,OAAO,KAAK,UAAU,KAAK;AAAA,IAC7B;AAAA,EACF,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAOA,SAAS,qBACP,SACA,WACA,WACA,SACS;AACT,aAAW,UAAU,SAAS;AAC5B,QAAI,UAAU,oBAAoB,SAAS,WAAW,WAAW,MAAM,EAAG,QAAO;AAAA,EACnF;AACA,SAAO;AACT;AAMA,SAAS,kBAAkB,QAAwB;AACjD,SAAO,WAAW,UAAU,2BAA2B,EAAE,OAAO,MAAM,EAAE,OAAO,KAAK,EAAE,MAAM,GAAG,EAAE;AACnG;AAEA,SAAS,oBACP,SACA,SACA,QACS;AACT,MAAI;AACF,UAAM,KAAK,IAAI,QAAQ,MAAM;AAC7B,OAAG,OAAO,SAAS;AAAA,MACjB,WAAW,QAAQ,SAAS;AAAA,MAC5B,kBAAkB,QAAQ,gBAAgB;AAAA,MAC1C,kBAAkB,QAAQ,gBAAgB;AAAA,IAC5C,CAAC;AACD,WAAO;AAAA,EACT,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,eAAe,iBAAiB,SAU7B;AACD,QAAM,SAAS,QAAQ,IAAI;AAC3B,MAAI,CAAC,OAAQ,OAAM,IAAI,MAAM,2DAA2D;AAExF,QAAM,SAAS,IAAI,OAAO,MAAM;AAChC,QAAM,EAAE,MAAM,MAAM,IAAI,MAAM,OAAO,OAAO,UAAU,IAAI,OAAO;AACjE,MAAI,SAAS,CAAC,MAAM;AAClB,UAAM,IAAI,MAAM,gCAAgC,OAAO,KAAK,OAAO,WAAW,eAAe,EAAE;AAAA,EACjG;AAEA,SAAO;AAAA,IACL,MAAM,KAAK;AAAA,IACX,IAAI,KAAK;AAAA,IACT,SAAS,KAAK;AAAA,IACd,MAAM,KAAK,QAAQ;AAAA,IACnB,MAAM,KAAK,QAAQ;AAAA,IACnB,WAAW,KAAK;AAAA,IAChB,SAAS,KAAK,WAAW,CAAC,KAAK;AAAA,IAC/B,WAAW,KAAK,UAAU,aAAa,KAAK;AAAA,IAC5C,YAAY,KAAK,UAAU,YAAY,GAAG,MAAM,KAAK,EAAE,OAAO,OAAO;AAAA,EACvE;AACF;AAMA,eAAe,eAAe,KAAc,SAG1C;AACA,QAAM,YAAY,IAAI,QAAQ,IAAI,qBAAqB;AACvD,QAAM,SAAS,IAAI,QAAQ,IAAI,SAAS;AAExC,MAAI,WAAW;AACb,UAAM,gBAAgB,QAAQ,IAAI;AAClC,QAAI,CAAC,eAAe;AAClB,aAAO,MAAM,yCAAyC;AACtD,aAAO,EAAE,IAAI,OAAO,UAAU,aAAa,KAAK,EAAE,OAAO,sBAAsB,GAAG,EAAE,QAAQ,IAAI,CAAC,EAAE;AAAA,IACrG;AACA,UAAM,YAAY,IAAI,QAAQ,IAAI,qBAAqB,KAAK;AAK5D,QAAI,CAAC,iBAAiB,SAAS,GAAG;AAChC,aAAO,EAAE,IAAI,OAAO,UAAU,aAAa,KAAK,EAAE,OAAO,oBAAoB,GAAG,EAAE,QAAQ,IAAI,CAAC,EAAE;AAAA,IACnG;AACA,QAAI;AACJ,QAAI;AACF,gBAAU,KAAK,MAAM,OAAO;AAAA,IAC9B,QAAQ;AACN,aAAO,EAAE,IAAI,OAAO,UAAU,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC,EAAE;AAAA,IAC9F;AACA,WAAO,EAAE,IAAI,MAAM,MAAM,EAAE,MAAM,UAAU,SAAS,WAAW,WAAW,UAAU,EAAE;AAAA,EACxF;AAEA,MAAI,QAAQ;AACV,UAAM,gBAAgB,QAAQ,IAAI;AAClC,QAAI,CAAC,eAAe;AAClB,aAAO,MAAM,8CAA8C;AAC3D,aAAO,EAAE,IAAI,OAAO,UAAU,aAAa,KAAK,EAAE,OAAO,sBAAsB,GAAG,EAAE,QAAQ,IAAI,CAAC,EAAE;AAAA,IACrG;AACA,UAAM,UAAkC;AAAA,MACtC,WAAW;AAAA,MACX,kBAAkB,IAAI,QAAQ,IAAI,gBAAgB,KAAK;AAAA,MACvD,kBAAkB,IAAI,QAAQ,IAAI,gBAAgB,KAAK;AAAA,IACzD;AACA,QAAI,CAAC,oBAAoB,SAAS,SAAS,aAAa,GAAG;AACzD,aAAO,EAAE,IAAI,OAAO,UAAU,aAAa,KAAK,EAAE,OAAO,oBAAoB,GAAG,EAAE,QAAQ,IAAI,CAAC,EAAE;AAAA,IACnG;AACA,QAAI;AACJ,QAAI;AACF,iBAAW,KAAK,MAAM,OAAO;AAAA,IAC/B,QAAQ;AACN,aAAO,EAAE,IAAI,OAAO,UAAU,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC,EAAE;AAAA,IAC9F;AACA,QAAI,SAAS,SAAS,kBAAkB;AACtC,aAAO,EAAE,IAAI,OAAO,UAAU,aAAa,KAAK,EAAE,IAAI,KAAK,CAAC,EAAE;AAAA,IAChE;AACA,UAAM,UAAU,SAAS,MAAM;AAC/B,QAAI,CAAC,SAAS;AACZ,aAAO,EAAE,IAAI,OAAO,UAAU,aAAa,KAAK,EAAE,OAAO,qCAAqC,GAAG,EAAE,QAAQ,IAAI,CAAC,EAAE;AAAA,IACpH;AACA,UAAM,cAAc,MAAM,iBAAiB,OAAO;AAClD,UAAM,KAAK,YAAY,MAAM,SAAS,MAAM,MAAM,CAAC;AACnD,WAAO,EAAE,IAAI,MAAM,MAAM,EAAE,MAAM,UAAU,aAAa,GAAG,EAAE;AAAA,EAC/D;AAEA,SAAO,EAAE,IAAI,OAAO,UAAU,aAAa,KAAK,EAAE,OAAO,4BAA4B,GAAG,EAAE,QAAQ,IAAI,CAAC,EAAE;AAC3G;AAEA,eAAsB,KAAK,KAAc;AACvC,QAAM,kBAAkB,QAAQ,QAAQ,IAAI,wBAAwB;AACpE,QAAM,kBAAkB,QAAQ,QAAQ,IAAI,6BAA6B;AACzE,MAAI,CAAC,mBAAmB,CAAC,iBAAiB;AACxC,WAAO,MAAM,kFAAkF;AAC/F,WAAO,aAAa,KAAK,EAAE,OAAO,sBAAsB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC5E;AAEA,MAAI;AACJ,MAAI;AACF,cAAU,MAAM,uBAAuB,KAAK,EAAE,UAAU,iBAAiB,CAAC;AAAA,EAC5E,SAAS,OAAO;AACd,QAAI,iBAAiB,0BAA0B;AAC7C,aAAO,aAAa,KAAK,EAAE,OAAO,oBAAoB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC1E;AACA,WAAO,aAAa,KAAK,EAAE,OAAO,cAAc,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACpE;AAEA,QAAM,WAAW,MAAM,eAAe,KAAK,OAAO;AAClD,MAAI,CAAC,SAAS,IAAI;AAChB,WAAO,SAAS;AAAA,EAClB;AAEA,MAAI;AACJ,MAAI;AAEJ,MAAI,SAAS,KAAK,SAAS,UAAU;AACnC,UAAM,UAAU,SAAS,KAAK;AAC9B,gBAAY,iBAAiB,OAAO;AACpC,iBAAa;AAAA,MACX,MAAM,QAAQ;AAAA,MACd,IAAI,QAAQ;AAAA,MACZ,SAAS,QAAQ;AAAA,MACjB,MAAM,QAAQ;AAAA,MACd,MAAM,QAAQ;AAAA,MACd,WAAW,QAAQ;AAAA,MACnB,SAAS,QAAQ;AAAA,MACjB,WAAW,QAAQ;AAAA,MACnB,YAAY,QAAQ;AAAA,IACtB;AAAA,EACF,OAAO;AACL,UAAM,EAAE,aAAa,GAAG,IAAI,SAAS;AACrC,gBAAY,GAAG,SAAS,IAAI,GAAG,CAAC,EAAE,YAAY,IAAI;AAClD,iBAAa;AAAA,MACX,MAAM,YAAY;AAAA,MAClB,IAAI,YAAY;AAAA,MAChB,SAAS,YAAY;AAAA,MACrB,MAAM,YAAY;AAAA,MAClB,MAAM,YAAY;AAAA,MAClB,WAAW,YAAY;AAAA,MACvB,SAAS,YAAY;AAAA,MACrB,WAAW,YAAY;AAAA,MACvB,YAAY,YAAY;AAAA,IAC1B;AAAA,EACF;AAEA,MAAI,CAAC,WAAW;AACd,WAAO,aAAa,KAAK,EAAE,OAAO,4BAA4B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAClF;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAE/C,MAAI,QAA8B;AAClC,MAAI;AACF,YAAQ,UAAU,QAAQ,OAAO;AAAA,EACnC,QAAQ;AAAA,EAGR;AASA,QAAM,kBAAkB,SAAS,KAAK,SAAS,WAC3C,kBAAkB,kBAAkB,QAAQ,IAAI,4BAA4B,EAAE,CAAC,KAC/E;AACJ,QAAM,kBAAkB,MAAM,eAAe,OAAO,eAAe;AACnE,MAAI,CAAC,gBAAgB,SAAS;AAC5B,WAAO,oBAAoB,gBAAgB,iBAAiB;AAAA,EAC9D;AAEA,QAAM,KAAM,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAI3D,QAAM,WAAW,MAAM;AAAA,IACrB;AAAA,IACA;AAAA,IACA;AAAA,MACE,cAAc,UAAU,YAAY;AAAA,MACpC,UAAU;AAAA,MACV,WAAW;AAAA,IACb;AAAA,EACF;AAOA,MAAI,SAAS,KAAK,SAAS,UAAU;AACnC,UAAM,eAAe,QAAQ,IAAI,4BAA4B;AAC7D,UAAM,cAAc,UAAU,iBAAiB;AAC/C,UAAM,oBAAoB,cAAc,CAAC,WAAW,IAAI,CAAC,YAAY;AACrE,UAAM,iBAAiB;AAAA,MACrB;AAAA,MACA,SAAS,KAAK;AAAA,MACd,SAAS,KAAK;AAAA,MACd;AAAA,IACF;AACA,QAAI,CAAC,gBAAgB;AACnB,aAAO,aAAa,KAAK,EAAE,OAAO,oBAAoB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC1E;AAAA,EACF;AAEA,MAAI,CAAC,UAAU;AACb,WAAO,aAAa,KAAK,EAAE,IAAI,KAAK,CAAC;AAAA,EACvC;AAIA,QAAM,kBAAkB,MAAM;AAAA,IAC5B;AAAA,IACA,kBAAkB,SAAS,QAAQ;AAAA,IACnC,SAAS;AAAA,EACX;AACA,MAAI,CAAC,gBAAgB,SAAS;AAC5B,WAAO,oBAAoB,gBAAgB,iBAAiB;AAAA,EAC9D;AAEA,QAAM,SAAS,kBAAkB,UAAU;AAE3C,QAAM,cAAc,MAAM,eAAe,IAAI,UAAU,OAAO,WAAW,OAAO,WAAW;AAC3F,MAAI,aAAa;AACf,QAAI;AACF,YAAM,kBAAkB,gCAAgC;AAAA,QACtD,UAAU,SAAS;AAAA,QACnB,gBAAgB,SAAS;AAAA,QACzB;AAAA,MACF,CAAC;AAAA,IACH,SAAS,YAAY;AACnB,aAAO,MAAM,qCAAqC,EAAE,KAAK,WAAW,CAAC;AAAA,IACvE;AACA,WAAO,aAAa,KAAK,EAAE,IAAI,KAAK,CAAC;AAAA,EACvC;AAEA,QAAM,cAAc,SAAS,QAAQ,IAAI,2BAA2B,UAAU,EAAE;AAChF,QAAM,cAAc,OAAO,YAAY,MAAM,GAAG,WAAW;AAE3D,QAAM,QAAQ,GAAG,OAAO,YAAY;AAAA,IAClC,WAAW,OAAO;AAAA,IAClB,aAAa,OAAO;AAAA,IACpB,oBAAoB,OAAO,KAAK;AAAA,IAChC,iBAAiB,OAAO,KAAK,QAAQ;AAAA,IACrC;AAAA,IACA,SAAS,OAAO;AAAA,IAChB,SAAS,OAAO;AAAA,IAChB,WAAW,OAAO;AAAA,IAClB,iBAAiB,OAAO;AAAA,IACxB,SAAS,OAAO;AAAA,IAChB,SAAS,OAAO;AAAA,IAChB;AAAA,IACA,gBAAgB,OAAO;AAAA,IACvB,kBAAkB,OAAO;AAAA,IACzB,YAAY,oBAAI,KAAK;AAAA,IACrB,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,gBAAgB,SAAS;AAAA,IACzB,UAAU,SAAS;AAAA,EACrB,CAAC;AAED,KAAG,QAAQ,KAAK;AAChB,QAAM,GAAG,MAAM;AAEf,MAAI;AACF,UAAM,kBAAkB,4BAA4B;AAAA,MAClD,SAAS,MAAM;AAAA,MACf,UAAU,SAAS;AAAA,MACnB,gBAAgB,SAAS;AAAA,MACzB,oBAAoB,OAAO,KAAK;AAAA,MAChC,SAAS,OAAO;AAAA,IAClB,GAAG;AAAA,MACD,YAAY;AAAA,MACZ,UAAU,SAAS;AAAA,MACnB,gBAAgB,SAAS;AAAA,IAC3B,CAAC;AAAA,EACH,SAAS,YAAY;AACnB,WAAO,MAAM,uCAAuC,EAAE,KAAK,WAAW,CAAC;AAAA,EACzE;AAEA,SAAO,aAAa,KAAK,EAAE,IAAI,KAAK,CAAC;AACvC;AAEA,SAAS,oBAAoB,mBAA0C;AACrE,SAAO,aAAa;AAAA,IAClB,EAAE,OAAO,sBAAsB;AAAA,IAC/B;AAAA,MACE,QAAQ;AAAA,MACR,SAAS,oBAAoB,EAAE,eAAe,OAAO,iBAAiB,EAAE,IAAI;AAAA,IAC9E;AAAA,EACF;AACF;AAEA,SAAS,iBAAiB,SAAiD;AACzE,QAAM,KAAK,QAAQ;AACnB,MAAI,OAAO,OAAO,UAAU;AAC1B,UAAM,QAAQ,GAAG,MAAM,WAAW;AAClC,WAAO,QAAQ,MAAM,CAAC,EAAE,YAAY,IAAI,GAAG,KAAK,EAAE,YAAY;AAAA,EAChE;AACA,MAAI,MAAM,QAAQ,EAAE,KAAK,GAAG,SAAS,GAAG;AACtC,UAAM,QAAQ,GAAG,CAAC;AAClB,QAAI,OAAO,UAAU,UAAU;AAC7B,YAAM,QAAQ,MAAM,MAAM,WAAW;AACrC,aAAO,QAAQ,MAAM,CAAC,EAAE,YAAY,IAAI,MAAM,KAAK,EAAE,YAAY;AAAA,IACnE;AAAA,EACF;AACA,SAAO;AACT;AAEA,eAAe,eACb,IACA,UACA,WACA,aACkB;AAClB,QAAM,WAAW;AAAA,IACf,UAAU,SAAS;AAAA,IACnB,gBAAgB,SAAS;AAAA,EAC3B;AACA,QAAM,YAAY;AAAA,IAChB,gBAAgB,SAAS;AAAA,IACzB,UAAU,SAAS;AAAA,IACnB,WAAW;AAAA,EACb;AAEA,MAAI,WAAW;AACb,UAAM,cAAc,MAAM,sBAAsB,IAAI,YAAY,EAAE,GAAG,WAAW,UAAU,GAAG,QAAW,QAAQ;AAChH,QAAI,YAAa,QAAO;AAAA,EAC1B;AAEA,MAAI,aAAa;AACf,UAAM,SAAS,MAAM,sBAAsB,IAAI,YAAY,EAAE,GAAG,WAAW,YAAY,GAAG,QAAW,QAAQ;AAC7G,QAAI,OAAQ,QAAO;AAAA,EACrB;AAEA,SAAO;AACT;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aAAa;AAAA,MACb,aAAa;AAAA,QACX,aAAa;AAAA,QACb,QAAQ,EAAE,OAAO;AAAA,UACf,MAAM,EAAE,OAAO,EAAE,SAAS;AAAA,UAC1B,IAAI,EAAE,MAAM,CAAC,EAAE,OAAO,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,SAAS;AAAA,UACxD,SAAS,EAAE,OAAO,EAAE,SAAS;AAAA,UAC7B,MAAM,EAAE,OAAO,EAAE,SAAS;AAAA,UAC1B,MAAM,EAAE,OAAO,EAAE,SAAS;AAAA,UAC1B,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,UAC/B,SAAS,EAAE,OAAO,EAAE,SAAS;AAAA,UAC7B,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,UAC/B,YAAY,EAAE,MAAM,CAAC,EAAE,OAAO,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,SAAS;AAAA,QAClE,CAAC;AAAA,MACH;AAAA,MACA,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,2CAA2C;AAAA,QACvE,EAAE,QAAQ,KAAK,aAAa,+BAA+B;AAAA,QAC3D,EAAE,QAAQ,KAAK,aAAa,oBAAoB;AAAA,QAChD,EAAE,QAAQ,KAAK,aAAa,sBAAsB;AAAA,QAClD,EAAE,QAAQ,KAAK,aAAa,gCAAgC;AAAA,MAC9D;AAAA,IACF;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/modules/sales/commands/documents.js CHANGED Viewed

@@ -1299,8 +1299,8 @@ async function loadCreditMemoSnapshot(em, id) {
       organizationId: creditMemo.organizationId,
       tenantId: creditMemo.tenantId,
       creditMemoNumber: creditMemo.creditMemoNumber,
-      orderId: creditMemo.orderId ?? null,
-      invoiceId: creditMemo.invoiceId ?? null,
+      orderId: creditMemo.order?.id ?? null,
+      invoiceId: creditMemo.invoice?.id ?? null,
       statusEntryId: creditMemo.statusEntryId ?? null,
       status: creditMemo.status ?? null,
       reason: creditMemo.reason ?? null,
@@ -7317,8 +7317,8 @@ const createCreditMemoCommand = {
       organizationId: parsed.organizationId,
       tenantId: parsed.tenantId,
       creditMemoNumber: ensuredCreditMemoNumber,
-      orderId: parsed.orderId ?? null,
-      invoiceId: parsed.invoiceId ?? null,
+      order: parsed.orderId ? em.getReference(SalesOrder, parsed.orderId) : null,
+      invoice: parsed.invoiceId ? em.getReference(SalesInvoice, parsed.invoiceId) : null,
       statusEntryId: parsed.statusEntryId ?? null,
       status,
       reason: parsed.reason ?? null,
@@ -7549,8 +7549,8 @@ const updateCreditMemoCommand = {
     ensureOrganizationScope(ctx, creditMemo.organizationId);
     ensureTenantScope(ctx, creditMemo.tenantId);
     creditMemo.creditMemoNumber = before.creditMemo.creditMemoNumber;
-    creditMemo.orderId = before.creditMemo.orderId;
-    creditMemo.invoiceId = before.creditMemo.invoiceId;
+    creditMemo.order = before.creditMemo.orderId ? em.getReference(SalesOrder, before.creditMemo.orderId) : null;
+    creditMemo.invoice = before.creditMemo.invoiceId ? em.getReference(SalesInvoice, before.creditMemo.invoiceId) : null;
     creditMemo.statusEntryId = before.creditMemo.statusEntryId;
     creditMemo.status = before.creditMemo.status;
     creditMemo.reason = before.creditMemo.reason;
@@ -7646,8 +7646,8 @@ const deleteCreditMemoCommand = {
       organizationId: before.creditMemo.organizationId,
       tenantId: before.creditMemo.tenantId,
       creditMemoNumber: before.creditMemo.creditMemoNumber,
-      orderId: before.creditMemo.orderId,
-      invoiceId: before.creditMemo.invoiceId,
+      order: before.creditMemo.orderId ? em.getReference(SalesOrder, before.creditMemo.orderId) : null,
+      invoice: before.creditMemo.invoiceId ? em.getReference(SalesInvoice, before.creditMemo.invoiceId) : null,
       statusEntryId: before.creditMemo.statusEntryId,
       status: before.creditMemo.status,
       reason: before.creditMemo.reason,