@open-mercato/core 0.8.1-develop.7296.1.2111d779db → 0.9.0

package/dist/modules/catalog/lib/seeds.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/catalog/lib/seeds.ts"],
-  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport type { AwilixContainer } from 'awilix'\nimport { Dictionary, DictionaryEntry, type DictionaryManagerVisibility } from '@open-mercato/core/modules/dictionaries/data/entities'\nimport { CatalogPriceKind } from '../data/entities'\nimport { seedCatalogExamples } from '../seed/examples'\n\nexport type CatalogSeedScope = { tenantId: string; organizationId: string }\n\nconst UNIT_DEFAULTS: Array<{ value: string; label: string; description?: string }> = [\n  { value: 'pc', label: 'Piece (piece)' },\n  { value: 'set', label: 'Set (piece)' },\n  { value: 'pkg', label: 'Package (piece)' },\n  { value: 'box', label: 'Box (piece)' },\n  { value: 'roll', label: 'Roll (piece)' },\n  { value: 'pair', label: 'Pair (piece)' },\n  { value: 'dozen', label: 'Dozen (piece)' },\n  { value: 'unit', label: 'Unit (piece)' },\n  { value: 'g', label: 'Gram (weight)' },\n  { value: 'kg', label: 'Kilogram (weight)' },\n  { value: 'mg', label: 'Milligram (weight)' },\n  { value: 'lb', label: 'Pound (weight)' },\n  { value: 'oz', label: 'Ounce (weight)' },\n  { value: 'ml', label: 'Milliliter (volume)' },\n  { value: 'l', label: 'Liter (volume)' },\n  { value: 'cl', label: 'Centiliter (volume)' },\n  { value: 'm3', label: 'Cubic Meter (volume)' },\n  { value: 'mm', label: 'Millimeter (length)' },\n  { value: 'cm', label: 'Centimeter (length)' },\n  { value: 'm', label: 'Meter (length)' },\n  { value: 'km', label: 'Kilometer (length)' },\n  { value: 'in', label: 'Inch (length)' },\n  { value: 'ft', label: 'Foot (length)' },\n  { value: 'm2', label: 'Square Meter (area)' },\n  { value: 'cm2', label: 'Square Centimeter (area)' },\n  { value: 'ft2', label: 'Square Foot (area)' },\n  { value: 'gb', label: 'Gigabyte (digital)' },\n  { value: 'mb', label: 'Megabyte (digital)' },\n  { value: 'tb', label: 'Terabyte (digital)' },\n  { value: 'license', label: 'License (digital)' },\n  { value: 'seat', label: 'Seat (digital)' },\n  { value: 'sec', label: 'Second (time)' },\n  { value: 'min', label: 'Minute (time)' },\n  { value: 'hour', label: 'Hour (time)' },\n  { value: 'day', label: 'Day (time)' },\n  { value: 'week', label: 'Week (time)' },\n  { value: 'month', label: 'Month (time)' },\n  { value: 'year', label: 'Year (time)' },\n  { value: 'kwh', label: 'Kilowatt Hour (energy)' },\n]\n\nconst PRICE_KIND_DEFAULTS = [\n  { code: 'regular', title: 'Regular', isPromotion: false, displayMode: 'including-tax' as const, currencyCode: 'USD' as const },\n  { code: 'sale', title: 'Sale', isPromotion: true, displayMode: 'including-tax' as const, currencyCode: 'USD' as const },\n] as const\n\nexport async function seedCatalogUnits(\n  em: EntityManager,\n  scope: CatalogSeedScope,\n) {\n  let dictionary = await em.findOne(Dictionary, {\n    tenantId: scope.tenantId,\n    organizationId: scope.organizationId,\n    key: 'unit',\n    deletedAt: null,\n  })\n  if (!dictionary) {\n    dictionary = em.create(Dictionary, {\n      key: 'unit',\n      name: 'Units of measure',\n      description: 'Reusable units for catalog products and pricing.',\n      tenantId: scope.tenantId,\n      organizationId: scope.organizationId,\n      isSystem: true,\n      isActive: true,\n      managerVisibility: 'default' satisfies DictionaryManagerVisibility,\n      createdAt: new Date(),\n      updatedAt: new Date(),\n    })\n    em.persist(dictionary)\n    await em.flush()\n  }\n  const existingEntries = await em.find(DictionaryEntry, {\n    dictionary,\n    tenantId: scope.tenantId,\n    organizationId: scope.organizationId,\n  })\n  const existingMap = new Map(existingEntries.map((entry) => [entry.value.toLowerCase(), entry]))\n  for (const unit of UNIT_DEFAULTS) {\n    const key = unit.value.toLowerCase()\n    if (existingMap.has(key)) continue\n    const entry = em.create(DictionaryEntry, {\n      dictionary,\n      tenantId: scope.tenantId,\n      organizationId: scope.organizationId,\n      value: unit.value,\n      normalizedValue: key,\n      label: unit.label,\n      color: null,\n      icon: null,\n      createdAt: new Date(),\n      updatedAt: new Date(),\n    })\n    em.persist(entry)\n  }\n  await em.flush()\n}\n\nexport async function seedCatalogPriceKinds(\n  em: EntityManager,\n  scope: Omit<CatalogSeedScope, 'organizationId'> & { organizationId?: string | null },\n) {\n  const existing = await em.find(CatalogPriceKind, {\n    tenantId: scope.tenantId,\n  })\n  const defaultsByCode = new Map(PRICE_KIND_DEFAULTS.map((def) => [def.code.toLowerCase(), def]))\n  const now = new Date()\n  const seen = new Set<string>()\n  const targetOrganizationId = scope.organizationId ?? null\n\n  for (const record of existing) {\n    const key = record.code.toLowerCase()\n    if (seen.has(key)) {\n      record.deletedAt = now\n      record.isActive = false\n      record.updatedAt = now\n      continue\n    }\n    const def = defaultsByCode.get(key)\n    if (!def) {\n      if (record.deletedAt == null) {\n        record.deletedAt = now\n        record.isActive = false\n        record.updatedAt = now\n      }\n      continue\n    }\n    record.organizationId = targetOrganizationId\n    record.title = def.title\n    record.displayMode = def.displayMode ?? 'including-tax'\n    record.currencyCode = def.currencyCode ?? null\n    record.isPromotion = def.isPromotion\n    record.isActive = true\n    record.deletedAt = null\n    record.updatedAt = now\n    seen.add(key)\n  }\n\n  for (const def of PRICE_KIND_DEFAULTS) {\n    const key = def.code.toLowerCase()\n    if (seen.has(key)) continue\n    const record = em.create(CatalogPriceKind, {\n      organizationId: targetOrganizationId,\n      tenantId: scope.tenantId,\n      code: def.code,\n      title: def.title,\n      displayMode: def.displayMode ?? 'including-tax',\n      currencyCode: def.currencyCode ?? null,\n      isPromotion: def.isPromotion,\n      isActive: true,\n      createdAt: now,\n      updatedAt: now,\n      deletedAt: null,\n    })\n    em.persist(record)\n  }\n  await em.flush()\n}\n\nexport async function seedCatalogExamplesForScope(\n  em: EntityManager,\n  container: AwilixContainer,\n  scope: CatalogSeedScope,\n): Promise<boolean> {\n  return seedCatalogExamples(em, container, scope)\n}\n\nexport async function installExampleCatalogData(\n  container: AwilixContainer,\n  scope: CatalogSeedScope,\n  em?: EntityManager,\n): Promise<{ seededExamples: boolean }> {\n  const manager = em ?? container.resolve<EntityManager>('em')\n  await seedCatalogUnits(manager, scope)\n  await seedCatalogPriceKinds(manager, scope)\n  const seededExamples = await seedCatalogExamples(manager, container, scope)\n  return { seededExamples }\n}\n"],
-  "mappings": "AAEA,SAAS,YAAY,uBAAyD;AAC9E,SAAS,wBAAwB;AACjC,SAAS,2BAA2B;AAIpC,MAAM,gBAA+E;AAAA,EACnF,EAAE,OAAO,MAAM,OAAO,gBAAgB;AAAA,EACtC,EAAE,OAAO,OAAO,OAAO,cAAc;AAAA,EACrC,EAAE,OAAO,OAAO,OAAO,kBAAkB;AAAA,EACzC,EAAE,OAAO,OAAO,OAAO,cAAc;AAAA,EACrC,EAAE,OAAO,QAAQ,OAAO,eAAe;AAAA,EACvC,EAAE,OAAO,QAAQ,OAAO,eAAe;AAAA,EACvC,EAAE,OAAO,SAAS,OAAO,gBAAgB;AAAA,EACzC,EAAE,OAAO,QAAQ,OAAO,eAAe;AAAA,EACvC,EAAE,OAAO,KAAK,OAAO,gBAAgB;AAAA,EACrC,EAAE,OAAO,MAAM,OAAO,oBAAoB;AAAA,EAC1C,EAAE,OAAO,MAAM,OAAO,qBAAqB;AAAA,EAC3C,EAAE,OAAO,MAAM,OAAO,iBAAiB;AAAA,EACvC,EAAE,OAAO,MAAM,OAAO,iBAAiB;AAAA,EACvC,EAAE,OAAO,MAAM,OAAO,sBAAsB;AAAA,EAC5C,EAAE,OAAO,KAAK,OAAO,iBAAiB;AAAA,EACtC,EAAE,OAAO,MAAM,OAAO,sBAAsB;AAAA,EAC5C,EAAE,OAAO,MAAM,OAAO,uBAAuB;AAAA,EAC7C,EAAE,OAAO,MAAM,OAAO,sBAAsB;AAAA,EAC5C,EAAE,OAAO,MAAM,OAAO,sBAAsB;AAAA,EAC5C,EAAE,OAAO,KAAK,OAAO,iBAAiB;AAAA,EACtC,EAAE,OAAO,MAAM,OAAO,qBAAqB;AAAA,EAC3C,EAAE,OAAO,MAAM,OAAO,gBAAgB;AAAA,EACtC,EAAE,OAAO,MAAM,OAAO,gBAAgB;AAAA,EACtC,EAAE,OAAO,MAAM,OAAO,sBAAsB;AAAA,EAC5C,EAAE,OAAO,OAAO,OAAO,2BAA2B;AAAA,EAClD,EAAE,OAAO,OAAO,OAAO,qBAAqB;AAAA,EAC5C,EAAE,OAAO,MAAM,OAAO,qBAAqB;AAAA,EAC3C,EAAE,OAAO,MAAM,OAAO,qBAAqB;AAAA,EAC3C,EAAE,OAAO,MAAM,OAAO,qBAAqB;AAAA,EAC3C,EAAE,OAAO,WAAW,OAAO,oBAAoB;AAAA,EAC/C,EAAE,OAAO,QAAQ,OAAO,iBAAiB;AAAA,EACzC,EAAE,OAAO,OAAO,OAAO,gBAAgB;AAAA,EACvC,EAAE,OAAO,OAAO,OAAO,gBAAgB;AAAA,EACvC,EAAE,OAAO,QAAQ,OAAO,cAAc;AAAA,EACtC,EAAE,OAAO,OAAO,OAAO,aAAa;AAAA,EACpC,EAAE,OAAO,QAAQ,OAAO,cAAc;AAAA,EACtC,EAAE,OAAO,SAAS,OAAO,eAAe;AAAA,EACxC,EAAE,OAAO,QAAQ,OAAO,cAAc;AAAA,EACtC,EAAE,OAAO,OAAO,OAAO,yBAAyB;AAClD;AAEA,MAAM,sBAAsB;AAAA,EAC1B,EAAE,MAAM,WAAW,OAAO,WAAW,aAAa,OAAO,aAAa,iBAA0B,cAAc,MAAe;AAAA,EAC7H,EAAE,MAAM,QAAQ,OAAO,QAAQ,aAAa,MAAM,aAAa,iBAA0B,cAAc,MAAe;AACxH;AAEA,eAAsB,iBACpB,IACA,OACA;AACA,MAAI,aAAa,MAAM,GAAG,QAAQ,YAAY;AAAA,IAC5C,UAAU,MAAM;AAAA,IAChB,gBAAgB,MAAM;AAAA,IACtB,KAAK;AAAA,IACL,WAAW;AAAA,EACb,CAAC;AACD,MAAI,CAAC,YAAY;AACf,iBAAa,GAAG,OAAO,YAAY;AAAA,MACjC,KAAK;AAAA,MACL,MAAM;AAAA,MACN,aAAa;AAAA,MACb,UAAU,MAAM;AAAA,MAChB,gBAAgB,MAAM;AAAA,MACtB,UAAU;AAAA,MACV,UAAU;AAAA,MACV,mBAAmB;AAAA,MACnB,WAAW,oBAAI,KAAK;AAAA,MACpB,WAAW,oBAAI,KAAK;AAAA,IACtB,CAAC;AACD,OAAG,QAAQ,UAAU;AACrB,UAAM,GAAG,MAAM;AAAA,EACjB;AACA,QAAM,kBAAkB,MAAM,GAAG,KAAK,iBAAiB;AAAA,IACrD;AAAA,IACA,UAAU,MAAM;AAAA,IAChB,gBAAgB,MAAM;AAAA,EACxB,CAAC;AACD,QAAM,cAAc,IAAI,IAAI,gBAAgB,IAAI,CAAC,UAAU,CAAC,MAAM,MAAM,YAAY,GAAG,KAAK,CAAC,CAAC;AAC9F,aAAW,QAAQ,eAAe;AAChC,UAAM,MAAM,KAAK,MAAM,YAAY;AACnC,QAAI,YAAY,IAAI,GAAG,EAAG;AAC1B,UAAM,QAAQ,GAAG,OAAO,iBAAiB;AAAA,MACvC;AAAA,MACA,UAAU,MAAM;AAAA,MAChB,gBAAgB,MAAM;AAAA,MACtB,OAAO,KAAK;AAAA,MACZ,iBAAiB;AAAA,MACjB,OAAO,KAAK;AAAA,MACZ,OAAO;AAAA,MACP,MAAM;AAAA,MACN,WAAW,oBAAI,KAAK;AAAA,MACpB,WAAW,oBAAI,KAAK;AAAA,IACtB,CAAC;AACD,OAAG,QAAQ,KAAK;AAAA,EAClB;AACA,QAAM,GAAG,MAAM;AACjB;AAEA,eAAsB,sBACpB,IACA,OACA;AACA,QAAM,WAAW,MAAM,GAAG,KAAK,kBAAkB;AAAA,IAC/C,UAAU,MAAM;AAAA,EAClB,CAAC;AACD,QAAM,iBAAiB,IAAI,IAAI,oBAAoB,IAAI,CAAC,QAAQ,CAAC,IAAI,KAAK,YAAY,GAAG,GAAG,CAAC,CAAC;AAC9F,QAAM,MAAM,oBAAI,KAAK;AACrB,QAAM,OAAO,oBAAI,IAAY;AAC7B,QAAM,uBAAuB,MAAM,kBAAkB;AAErD,aAAW,UAAU,UAAU;AAC7B,UAAM,MAAM,OAAO,KAAK,YAAY;AACpC,QAAI,KAAK,IAAI,GAAG,GAAG;AACjB,aAAO,YAAY;AACnB,aAAO,WAAW;AAClB,aAAO,YAAY;AACnB;AAAA,IACF;AACA,UAAM,MAAM,eAAe,IAAI,GAAG;AAClC,QAAI,CAAC,KAAK;AACR,UAAI,OAAO,aAAa,MAAM;AAC5B,eAAO,YAAY;AACnB,eAAO,WAAW;AAClB,eAAO,YAAY;AAAA,MACrB;AACA;AAAA,IACF;AACA,WAAO,iBAAiB;AACxB,WAAO,QAAQ,IAAI;AACnB,WAAO,cAAc,IAAI,eAAe;AACxC,WAAO,eAAe,IAAI,gBAAgB;AAC1C,WAAO,cAAc,IAAI;AACzB,WAAO,WAAW;AAClB,WAAO,YAAY;AACnB,WAAO,YAAY;AACnB,SAAK,IAAI,GAAG;AAAA,EACd;AAEA,aAAW,OAAO,qBAAqB;AACrC,UAAM,MAAM,IAAI,KAAK,YAAY;AACjC,QAAI,KAAK,IAAI,GAAG,EAAG;AACnB,UAAM,SAAS,GAAG,OAAO,kBAAkB;AAAA,MACzC,gBAAgB;AAAA,MAChB,UAAU,MAAM;AAAA,MAChB,MAAM,IAAI;AAAA,MACV,OAAO,IAAI;AAAA,MACX,aAAa,IAAI,eAAe;AAAA,MAChC,cAAc,IAAI,gBAAgB;AAAA,MAClC,aAAa,IAAI;AAAA,MACjB,UAAU;AAAA,MACV,WAAW;AAAA,MACX,WAAW;AAAA,MACX,WAAW;AAAA,IACb,CAAC;AACD,OAAG,QAAQ,MAAM;AAAA,EACnB;AACA,QAAM,GAAG,MAAM;AACjB;AAEA,eAAsB,4BACpB,IACA,WACA,OACkB;AAClB,SAAO,oBAAoB,IAAI,WAAW,KAAK;AACjD;AAEA,eAAsB,0BACpB,WACA,OACA,IACsC;AACtC,QAAM,UAAU,MAAM,UAAU,QAAuB,IAAI;AAC3D,QAAM,iBAAiB,SAAS,KAAK;AACrC,QAAM,sBAAsB,SAAS,KAAK;AAC1C,QAAM,iBAAiB,MAAM,oBAAoB,SAAS,WAAW,KAAK;AAC1E,SAAO,EAAE,eAAe;AAC1B;",
+  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport type { AwilixContainer } from 'awilix'\nimport { Dictionary, DictionaryEntry, type DictionaryManagerVisibility } from '@open-mercato/core/modules/dictionaries/data/entities'\nimport { CatalogPriceKind } from '../data/entities'\nimport { seedCatalogExamples } from '../seed/examples'\nimport { CATALOG_UNIT_DEFAULTS } from './unitLabels'\n\nexport type CatalogSeedScope = { tenantId: string; organizationId: string }\n\nconst PRICE_KIND_DEFAULTS = [\n  { code: 'regular', title: 'Regular', isPromotion: false, displayMode: 'including-tax' as const, currencyCode: 'USD' as const },\n  { code: 'sale', title: 'Sale', isPromotion: true, displayMode: 'including-tax' as const, currencyCode: 'USD' as const },\n] as const\n\nexport async function seedCatalogUnits(\n  em: EntityManager,\n  scope: CatalogSeedScope,\n) {\n  let dictionary = await em.findOne(Dictionary, {\n    tenantId: scope.tenantId,\n    organizationId: scope.organizationId,\n    key: 'unit',\n    deletedAt: null,\n  })\n  if (!dictionary) {\n    dictionary = em.create(Dictionary, {\n      key: 'unit',\n      name: 'Units of measure',\n      description: 'Reusable units for catalog products and pricing.',\n      tenantId: scope.tenantId,\n      organizationId: scope.organizationId,\n      isSystem: true,\n      isActive: true,\n      managerVisibility: 'default' satisfies DictionaryManagerVisibility,\n      createdAt: new Date(),\n      updatedAt: new Date(),\n    })\n    em.persist(dictionary)\n    await em.flush()\n  }\n  const existingEntries = await em.find(DictionaryEntry, {\n    dictionary,\n    tenantId: scope.tenantId,\n    organizationId: scope.organizationId,\n  })\n  const existingMap = new Map(existingEntries.map((entry) => [entry.value.toLowerCase(), entry]))\n  for (const unit of CATALOG_UNIT_DEFAULTS) {\n    const key = unit.value.toLowerCase()\n    if (existingMap.has(key)) continue\n    const entry = em.create(DictionaryEntry, {\n      dictionary,\n      tenantId: scope.tenantId,\n      organizationId: scope.organizationId,\n      value: unit.value,\n      normalizedValue: key,\n      label: unit.label,\n      color: null,\n      icon: null,\n      createdAt: new Date(),\n      updatedAt: new Date(),\n    })\n    em.persist(entry)\n  }\n  await em.flush()\n}\n\nexport async function seedCatalogPriceKinds(\n  em: EntityManager,\n  scope: Omit<CatalogSeedScope, 'organizationId'> & { organizationId?: string | null },\n) {\n  const existing = await em.find(CatalogPriceKind, {\n    tenantId: scope.tenantId,\n  })\n  const defaultsByCode = new Map(PRICE_KIND_DEFAULTS.map((def) => [def.code.toLowerCase(), def]))\n  const now = new Date()\n  const seen = new Set<string>()\n  const targetOrganizationId = scope.organizationId ?? null\n\n  for (const record of existing) {\n    const key = record.code.toLowerCase()\n    if (seen.has(key)) {\n      record.deletedAt = now\n      record.isActive = false\n      record.updatedAt = now\n      continue\n    }\n    const def = defaultsByCode.get(key)\n    if (!def) {\n      if (record.deletedAt == null) {\n        record.deletedAt = now\n        record.isActive = false\n        record.updatedAt = now\n      }\n      continue\n    }\n    record.organizationId = targetOrganizationId\n    record.title = def.title\n    record.displayMode = def.displayMode ?? 'including-tax'\n    record.currencyCode = def.currencyCode ?? null\n    record.isPromotion = def.isPromotion\n    record.isActive = true\n    record.deletedAt = null\n    record.updatedAt = now\n    seen.add(key)\n  }\n\n  for (const def of PRICE_KIND_DEFAULTS) {\n    const key = def.code.toLowerCase()\n    if (seen.has(key)) continue\n    const record = em.create(CatalogPriceKind, {\n      organizationId: targetOrganizationId,\n      tenantId: scope.tenantId,\n      code: def.code,\n      title: def.title,\n      displayMode: def.displayMode ?? 'including-tax',\n      currencyCode: def.currencyCode ?? null,\n      isPromotion: def.isPromotion,\n      isActive: true,\n      createdAt: now,\n      updatedAt: now,\n      deletedAt: null,\n    })\n    em.persist(record)\n  }\n  await em.flush()\n}\n\nexport async function seedCatalogExamplesForScope(\n  em: EntityManager,\n  container: AwilixContainer,\n  scope: CatalogSeedScope,\n): Promise<boolean> {\n  return seedCatalogExamples(em, container, scope)\n}\n\nexport async function installExampleCatalogData(\n  container: AwilixContainer,\n  scope: CatalogSeedScope,\n  em?: EntityManager,\n): Promise<{ seededExamples: boolean }> {\n  const manager = em ?? container.resolve<EntityManager>('em')\n  await seedCatalogUnits(manager, scope)\n  await seedCatalogPriceKinds(manager, scope)\n  const seededExamples = await seedCatalogExamples(manager, container, scope)\n  return { seededExamples }\n}\n"],
+  "mappings": "AAEA,SAAS,YAAY,uBAAyD;AAC9E,SAAS,wBAAwB;AACjC,SAAS,2BAA2B;AACpC,SAAS,6BAA6B;AAItC,MAAM,sBAAsB;AAAA,EAC1B,EAAE,MAAM,WAAW,OAAO,WAAW,aAAa,OAAO,aAAa,iBAA0B,cAAc,MAAe;AAAA,EAC7H,EAAE,MAAM,QAAQ,OAAO,QAAQ,aAAa,MAAM,aAAa,iBAA0B,cAAc,MAAe;AACxH;AAEA,eAAsB,iBACpB,IACA,OACA;AACA,MAAI,aAAa,MAAM,GAAG,QAAQ,YAAY;AAAA,IAC5C,UAAU,MAAM;AAAA,IAChB,gBAAgB,MAAM;AAAA,IACtB,KAAK;AAAA,IACL,WAAW;AAAA,EACb,CAAC;AACD,MAAI,CAAC,YAAY;AACf,iBAAa,GAAG,OAAO,YAAY;AAAA,MACjC,KAAK;AAAA,MACL,MAAM;AAAA,MACN,aAAa;AAAA,MACb,UAAU,MAAM;AAAA,MAChB,gBAAgB,MAAM;AAAA,MACtB,UAAU;AAAA,MACV,UAAU;AAAA,MACV,mBAAmB;AAAA,MACnB,WAAW,oBAAI,KAAK;AAAA,MACpB,WAAW,oBAAI,KAAK;AAAA,IACtB,CAAC;AACD,OAAG,QAAQ,UAAU;AACrB,UAAM,GAAG,MAAM;AAAA,EACjB;AACA,QAAM,kBAAkB,MAAM,GAAG,KAAK,iBAAiB;AAAA,IACrD;AAAA,IACA,UAAU,MAAM;AAAA,IAChB,gBAAgB,MAAM;AAAA,EACxB,CAAC;AACD,QAAM,cAAc,IAAI,IAAI,gBAAgB,IAAI,CAAC,UAAU,CAAC,MAAM,MAAM,YAAY,GAAG,KAAK,CAAC,CAAC;AAC9F,aAAW,QAAQ,uBAAuB;AACxC,UAAM,MAAM,KAAK,MAAM,YAAY;AACnC,QAAI,YAAY,IAAI,GAAG,EAAG;AAC1B,UAAM,QAAQ,GAAG,OAAO,iBAAiB;AAAA,MACvC;AAAA,MACA,UAAU,MAAM;AAAA,MAChB,gBAAgB,MAAM;AAAA,MACtB,OAAO,KAAK;AAAA,MACZ,iBAAiB;AAAA,MACjB,OAAO,KAAK;AAAA,MACZ,OAAO;AAAA,MACP,MAAM;AAAA,MACN,WAAW,oBAAI,KAAK;AAAA,MACpB,WAAW,oBAAI,KAAK;AAAA,IACtB,CAAC;AACD,OAAG,QAAQ,KAAK;AAAA,EAClB;AACA,QAAM,GAAG,MAAM;AACjB;AAEA,eAAsB,sBACpB,IACA,OACA;AACA,QAAM,WAAW,MAAM,GAAG,KAAK,kBAAkB;AAAA,IAC/C,UAAU,MAAM;AAAA,EAClB,CAAC;AACD,QAAM,iBAAiB,IAAI,IAAI,oBAAoB,IAAI,CAAC,QAAQ,CAAC,IAAI,KAAK,YAAY,GAAG,GAAG,CAAC,CAAC;AAC9F,QAAM,MAAM,oBAAI,KAAK;AACrB,QAAM,OAAO,oBAAI,IAAY;AAC7B,QAAM,uBAAuB,MAAM,kBAAkB;AAErD,aAAW,UAAU,UAAU;AAC7B,UAAM,MAAM,OAAO,KAAK,YAAY;AACpC,QAAI,KAAK,IAAI,GAAG,GAAG;AACjB,aAAO,YAAY;AACnB,aAAO,WAAW;AAClB,aAAO,YAAY;AACnB;AAAA,IACF;AACA,UAAM,MAAM,eAAe,IAAI,GAAG;AAClC,QAAI,CAAC,KAAK;AACR,UAAI,OAAO,aAAa,MAAM;AAC5B,eAAO,YAAY;AACnB,eAAO,WAAW;AAClB,eAAO,YAAY;AAAA,MACrB;AACA;AAAA,IACF;AACA,WAAO,iBAAiB;AACxB,WAAO,QAAQ,IAAI;AACnB,WAAO,cAAc,IAAI,eAAe;AACxC,WAAO,eAAe,IAAI,gBAAgB;AAC1C,WAAO,cAAc,IAAI;AACzB,WAAO,WAAW;AAClB,WAAO,YAAY;AACnB,WAAO,YAAY;AACnB,SAAK,IAAI,GAAG;AAAA,EACd;AAEA,aAAW,OAAO,qBAAqB;AACrC,UAAM,MAAM,IAAI,KAAK,YAAY;AACjC,QAAI,KAAK,IAAI,GAAG,EAAG;AACnB,UAAM,SAAS,GAAG,OAAO,kBAAkB;AAAA,MACzC,gBAAgB;AAAA,MAChB,UAAU,MAAM;AAAA,MAChB,MAAM,IAAI;AAAA,MACV,OAAO,IAAI;AAAA,MACX,aAAa,IAAI,eAAe;AAAA,MAChC,cAAc,IAAI,gBAAgB;AAAA,MAClC,aAAa,IAAI;AAAA,MACjB,UAAU;AAAA,MACV,WAAW;AAAA,MACX,WAAW;AAAA,MACX,WAAW;AAAA,IACb,CAAC;AACD,OAAG,QAAQ,MAAM;AAAA,EACnB;AACA,QAAM,GAAG,MAAM;AACjB;AAEA,eAAsB,4BACpB,IACA,WACA,OACkB;AAClB,SAAO,oBAAoB,IAAI,WAAW,KAAK;AACjD;AAEA,eAAsB,0BACpB,WACA,OACA,IACsC;AACtC,QAAM,UAAU,MAAM,UAAU,QAAuB,IAAI;AAC3D,QAAM,iBAAiB,SAAS,KAAK;AACrC,QAAM,sBAAsB,SAAS,KAAK;AAC1C,QAAM,iBAAiB,MAAM,oBAAoB,SAAS,WAAW,KAAK;AAC1E,SAAO,EAAE,eAAe;AAC1B;",
   "names": []
 }

package/dist/modules/catalog/lib/unitLabels.js

@@ -0,0 +1,53 @@
+const CATALOG_UNIT_DEFAULTS = [
+  { value: "pc", label: "Piece (piece)", labelKey: "catalog.units.pc" },
+  { value: "set", label: "Set (piece)", labelKey: "catalog.units.set" },
+  { value: "pkg", label: "Package (piece)", labelKey: "catalog.units.pkg" },
+  { value: "box", label: "Box (piece)", labelKey: "catalog.units.box" },
+  { value: "roll", label: "Roll (piece)", labelKey: "catalog.units.roll" },
+  { value: "pair", label: "Pair (piece)", labelKey: "catalog.units.pair" },
+  { value: "dozen", label: "Dozen (piece)", labelKey: "catalog.units.dozen" },
+  { value: "unit", label: "Unit (piece)", labelKey: "catalog.units.unit" },
+  { value: "g", label: "Gram (weight)", labelKey: "catalog.units.g" },
+  { value: "kg", label: "Kilogram (weight)", labelKey: "catalog.units.kg" },
+  { value: "mg", label: "Milligram (weight)", labelKey: "catalog.units.mg" },
+  { value: "lb", label: "Pound (weight)", labelKey: "catalog.units.lb" },
+  { value: "oz", label: "Ounce (weight)", labelKey: "catalog.units.oz" },
+  { value: "ml", label: "Milliliter (volume)", labelKey: "catalog.units.ml" },
+  { value: "l", label: "Liter (volume)", labelKey: "catalog.units.l" },
+  { value: "cl", label: "Centiliter (volume)", labelKey: "catalog.units.cl" },
+  { value: "m3", label: "Cubic Meter (volume)", labelKey: "catalog.units.m3" },
+  { value: "mm", label: "Millimeter (length)", labelKey: "catalog.units.mm" },
+  { value: "cm", label: "Centimeter (length)", labelKey: "catalog.units.cm" },
+  { value: "m", label: "Meter (length)", labelKey: "catalog.units.m" },
+  { value: "km", label: "Kilometer (length)", labelKey: "catalog.units.km" },
+  { value: "in", label: "Inch (length)", labelKey: "catalog.units.in" },
+  { value: "ft", label: "Foot (length)", labelKey: "catalog.units.ft" },
+  { value: "m2", label: "Square Meter (area)", labelKey: "catalog.units.m2" },
+  { value: "cm2", label: "Square Centimeter (area)", labelKey: "catalog.units.cm2" },
+  { value: "ft2", label: "Square Foot (area)", labelKey: "catalog.units.ft2" },
+  { value: "gb", label: "Gigabyte (digital)", labelKey: "catalog.units.gb" },
+  { value: "mb", label: "Megabyte (digital)", labelKey: "catalog.units.mb" },
+  { value: "tb", label: "Terabyte (digital)", labelKey: "catalog.units.tb" },
+  { value: "license", label: "License (digital)", labelKey: "catalog.units.license" },
+  { value: "seat", label: "Seat (digital)", labelKey: "catalog.units.seat" },
+  { value: "sec", label: "Second (time)", labelKey: "catalog.units.sec" },
+  { value: "min", label: "Minute (time)", labelKey: "catalog.units.min" },
+  { value: "hour", label: "Hour (time)", labelKey: "catalog.units.hour" },
+  { value: "day", label: "Day (time)", labelKey: "catalog.units.day" },
+  { value: "week", label: "Week (time)", labelKey: "catalog.units.week" },
+  { value: "month", label: "Month (time)", labelKey: "catalog.units.month" },
+  { value: "year", label: "Year (time)", labelKey: "catalog.units.year" },
+  { value: "kwh", label: "Kilowatt Hour (energy)", labelKey: "catalog.units.kwh" }
+];
+const defaultsByCode = new Map(
+  CATALOG_UNIT_DEFAULTS.map((unit) => [unit.value, unit])
+);
+function translateCatalogUnitLabel(value, label, t) {
+  const unit = defaultsByCode.get(value.toLowerCase());
+  return unit && label === unit.label ? t(unit.labelKey, label) : label;
+}
+export {
+  CATALOG_UNIT_DEFAULTS,
+  translateCatalogUnitLabel
+};
+//# sourceMappingURL=unitLabels.js.map

package/dist/modules/catalog/lib/unitLabels.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/catalog/lib/unitLabels.ts"],
+  "sourcesContent": ["import type { TranslateFn } from '@open-mercato/shared/lib/i18n/context'\n\nexport const CATALOG_UNIT_DEFAULTS = [\n  { value: 'pc', label: 'Piece (piece)', labelKey: 'catalog.units.pc' },\n  { value: 'set', label: 'Set (piece)', labelKey: 'catalog.units.set' },\n  { value: 'pkg', label: 'Package (piece)', labelKey: 'catalog.units.pkg' },\n  { value: 'box', label: 'Box (piece)', labelKey: 'catalog.units.box' },\n  { value: 'roll', label: 'Roll (piece)', labelKey: 'catalog.units.roll' },\n  { value: 'pair', label: 'Pair (piece)', labelKey: 'catalog.units.pair' },\n  { value: 'dozen', label: 'Dozen (piece)', labelKey: 'catalog.units.dozen' },\n  { value: 'unit', label: 'Unit (piece)', labelKey: 'catalog.units.unit' },\n  { value: 'g', label: 'Gram (weight)', labelKey: 'catalog.units.g' },\n  { value: 'kg', label: 'Kilogram (weight)', labelKey: 'catalog.units.kg' },\n  { value: 'mg', label: 'Milligram (weight)', labelKey: 'catalog.units.mg' },\n  { value: 'lb', label: 'Pound (weight)', labelKey: 'catalog.units.lb' },\n  { value: 'oz', label: 'Ounce (weight)', labelKey: 'catalog.units.oz' },\n  { value: 'ml', label: 'Milliliter (volume)', labelKey: 'catalog.units.ml' },\n  { value: 'l', label: 'Liter (volume)', labelKey: 'catalog.units.l' },\n  { value: 'cl', label: 'Centiliter (volume)', labelKey: 'catalog.units.cl' },\n  { value: 'm3', label: 'Cubic Meter (volume)', labelKey: 'catalog.units.m3' },\n  { value: 'mm', label: 'Millimeter (length)', labelKey: 'catalog.units.mm' },\n  { value: 'cm', label: 'Centimeter (length)', labelKey: 'catalog.units.cm' },\n  { value: 'm', label: 'Meter (length)', labelKey: 'catalog.units.m' },\n  { value: 'km', label: 'Kilometer (length)', labelKey: 'catalog.units.km' },\n  { value: 'in', label: 'Inch (length)', labelKey: 'catalog.units.in' },\n  { value: 'ft', label: 'Foot (length)', labelKey: 'catalog.units.ft' },\n  { value: 'm2', label: 'Square Meter (area)', labelKey: 'catalog.units.m2' },\n  { value: 'cm2', label: 'Square Centimeter (area)', labelKey: 'catalog.units.cm2' },\n  { value: 'ft2', label: 'Square Foot (area)', labelKey: 'catalog.units.ft2' },\n  { value: 'gb', label: 'Gigabyte (digital)', labelKey: 'catalog.units.gb' },\n  { value: 'mb', label: 'Megabyte (digital)', labelKey: 'catalog.units.mb' },\n  { value: 'tb', label: 'Terabyte (digital)', labelKey: 'catalog.units.tb' },\n  { value: 'license', label: 'License (digital)', labelKey: 'catalog.units.license' },\n  { value: 'seat', label: 'Seat (digital)', labelKey: 'catalog.units.seat' },\n  { value: 'sec', label: 'Second (time)', labelKey: 'catalog.units.sec' },\n  { value: 'min', label: 'Minute (time)', labelKey: 'catalog.units.min' },\n  { value: 'hour', label: 'Hour (time)', labelKey: 'catalog.units.hour' },\n  { value: 'day', label: 'Day (time)', labelKey: 'catalog.units.day' },\n  { value: 'week', label: 'Week (time)', labelKey: 'catalog.units.week' },\n  { value: 'month', label: 'Month (time)', labelKey: 'catalog.units.month' },\n  { value: 'year', label: 'Year (time)', labelKey: 'catalog.units.year' },\n  { value: 'kwh', label: 'Kilowatt Hour (energy)', labelKey: 'catalog.units.kwh' },\n] as const\n\nconst defaultsByCode = new Map<string, (typeof CATALOG_UNIT_DEFAULTS)[number]>(\n  CATALOG_UNIT_DEFAULTS.map((unit) => [unit.value, unit]),\n)\n\nexport function translateCatalogUnitLabel(value: string, label: string, t: TranslateFn): string {\n  const unit = defaultsByCode.get(value.toLowerCase())\n  return unit && label === unit.label ? t(unit.labelKey, label) : label\n}\n"],
+  "mappings": "AAEO,MAAM,wBAAwB;AAAA,EACnC,EAAE,OAAO,MAAM,OAAO,iBAAiB,UAAU,mBAAmB;AAAA,EACpE,EAAE,OAAO,OAAO,OAAO,eAAe,UAAU,oBAAoB;AAAA,EACpE,EAAE,OAAO,OAAO,OAAO,mBAAmB,UAAU,oBAAoB;AAAA,EACxE,EAAE,OAAO,OAAO,OAAO,eAAe,UAAU,oBAAoB;AAAA,EACpE,EAAE,OAAO,QAAQ,OAAO,gBAAgB,UAAU,qBAAqB;AAAA,EACvE,EAAE,OAAO,QAAQ,OAAO,gBAAgB,UAAU,qBAAqB;AAAA,EACvE,EAAE,OAAO,SAAS,OAAO,iBAAiB,UAAU,sBAAsB;AAAA,EAC1E,EAAE,OAAO,QAAQ,OAAO,gBAAgB,UAAU,qBAAqB;AAAA,EACvE,EAAE,OAAO,KAAK,OAAO,iBAAiB,UAAU,kBAAkB;AAAA,EAClE,EAAE,OAAO,MAAM,OAAO,qBAAqB,UAAU,mBAAmB;AAAA,EACxE,EAAE,OAAO,MAAM,OAAO,sBAAsB,UAAU,mBAAmB;AAAA,EACzE,EAAE,OAAO,MAAM,OAAO,kBAAkB,UAAU,mBAAmB;AAAA,EACrE,EAAE,OAAO,MAAM,OAAO,kBAAkB,UAAU,mBAAmB;AAAA,EACrE,EAAE,OAAO,MAAM,OAAO,uBAAuB,UAAU,mBAAmB;AAAA,EAC1E,EAAE,OAAO,KAAK,OAAO,kBAAkB,UAAU,kBAAkB;AAAA,EACnE,EAAE,OAAO,MAAM,OAAO,uBAAuB,UAAU,mBAAmB;AAAA,EAC1E,EAAE,OAAO,MAAM,OAAO,wBAAwB,UAAU,mBAAmB;AAAA,EAC3E,EAAE,OAAO,MAAM,OAAO,uBAAuB,UAAU,mBAAmB;AAAA,EAC1E,EAAE,OAAO,MAAM,OAAO,uBAAuB,UAAU,mBAAmB;AAAA,EAC1E,EAAE,OAAO,KAAK,OAAO,kBAAkB,UAAU,kBAAkB;AAAA,EACnE,EAAE,OAAO,MAAM,OAAO,sBAAsB,UAAU,mBAAmB;AAAA,EACzE,EAAE,OAAO,MAAM,OAAO,iBAAiB,UAAU,mBAAmB;AAAA,EACpE,EAAE,OAAO,MAAM,OAAO,iBAAiB,UAAU,mBAAmB;AAAA,EACpE,EAAE,OAAO,MAAM,OAAO,uBAAuB,UAAU,mBAAmB;AAAA,EAC1E,EAAE,OAAO,OAAO,OAAO,4BAA4B,UAAU,oBAAoB;AAAA,EACjF,EAAE,OAAO,OAAO,OAAO,sBAAsB,UAAU,oBAAoB;AAAA,EAC3E,EAAE,OAAO,MAAM,OAAO,sBAAsB,UAAU,mBAAmB;AAAA,EACzE,EAAE,OAAO,MAAM,OAAO,sBAAsB,UAAU,mBAAmB;AAAA,EACzE,EAAE,OAAO,MAAM,OAAO,sBAAsB,UAAU,mBAAmB;AAAA,EACzE,EAAE,OAAO,WAAW,OAAO,qBAAqB,UAAU,wBAAwB;AAAA,EAClF,EAAE,OAAO,QAAQ,OAAO,kBAAkB,UAAU,qBAAqB;AAAA,EACzE,EAAE,OAAO,OAAO,OAAO,iBAAiB,UAAU,oBAAoB;AAAA,EACtE,EAAE,OAAO,OAAO,OAAO,iBAAiB,UAAU,oBAAoB;AAAA,EACtE,EAAE,OAAO,QAAQ,OAAO,eAAe,UAAU,qBAAqB;AAAA,EACtE,EAAE,OAAO,OAAO,OAAO,cAAc,UAAU,oBAAoB;AAAA,EACnE,EAAE,OAAO,QAAQ,OAAO,eAAe,UAAU,qBAAqB;AAAA,EACtE,EAAE,OAAO,SAAS,OAAO,gBAAgB,UAAU,sBAAsB;AAAA,EACzE,EAAE,OAAO,QAAQ,OAAO,eAAe,UAAU,qBAAqB;AAAA,EACtE,EAAE,OAAO,OAAO,OAAO,0BAA0B,UAAU,oBAAoB;AACjF;AAEA,MAAM,iBAAiB,IAAI;AAAA,EACzB,sBAAsB,IAAI,CAAC,SAAS,CAAC,KAAK,OAAO,IAAI,CAAC;AACxD;AAEO,SAAS,0BAA0B,OAAe,OAAe,GAAwB;AAC9F,QAAM,OAAO,eAAe,IAAI,MAAM,YAAY,CAAC;AACnD,SAAO,QAAQ,UAAU,KAAK,QAAQ,EAAE,KAAK,UAAU,KAAK,IAAI;AAClE;",
+  "names": []
+}

package/dist/modules/catalog/migrations/Migration20260914120000.js

@@ -0,0 +1,29 @@
+import { Migration } from "@mikro-orm/migrations";
+const ensureExtensionSql = (extension) => `
+  do $$
+  begin
+    if not exists (select 1 from pg_extension where extname = '${extension}') then
+      begin
+        execute 'create extension if not exists "${extension}" schema public';
+      exception when insufficient_privilege or feature_not_supported then
+        raise exception using
+          errcode = 'insufficient_privilege',
+          message = 'Open Mercato requires the PostgreSQL "${extension}" extension for accent-insensitive catalog search, and this role may not create it.',
+          hint = 'Connect as a superuser (or allowlist the extension on managed PostgreSQL) and run: CREATE EXTENSION IF NOT EXISTS "${extension}" SCHEMA public; then re-run yarn db:migrate.';
+      end;
+    end if;
+  end
+  $$;
+`;
+class Migration20260914120000 extends Migration {
+  async up() {
+    this.addSql(ensureExtensionSql("unaccent"));
+    this.addSql(ensureExtensionSql("pg_trgm"));
+  }
+  async down() {
+  }
+}
+export {
+  Migration20260914120000
+};
+//# sourceMappingURL=Migration20260914120000.js.map

package/dist/modules/catalog/migrations/Migration20260914120000.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/catalog/migrations/Migration20260914120000.ts"],
+  "sourcesContent": ["import { Migration } from '@mikro-orm/migrations';\n\n// Installs the two PostgreSQL extensions accent-insensitive product search needs\n// (see Migration20260914120100, which creates the wrapper function and the index\n// on top of them). They are separate migrations on purpose: `unaccent` must be a\n// committed extension before a function body can pin its dictionary with\n// `'public.unaccent'::regdictionary`, and the index is built CONCURRENTLY, which\n// cannot run inside a transaction.\n//\n// `create extension` needs CREATE on the database, which the application role\n// does not always hold on managed PostgreSQL. Failing here aborts the whole\n// `yarn db:migrate` run \u2014 every later module's migrations included \u2014 so the bare\n// permission error is turned into a message that names what to grant. The check\n// runs only when the extension is actually missing, so an instance where an\n// operator pre-created them needs no extra privilege.\n//\n// Two distinct SQLSTATEs cover the ways this can fail: `insufficient_privilege`\n// (42501) when the role itself lacks CREATE, and `feature_not_supported`\n// (0A000) on managed providers (e.g. RDS) that reject an extension outright for\n// not being on their allowlist, independent of the role's own privileges.\nconst ensureExtensionSql = (extension: string): string => `\n  do $$\n  begin\n    if not exists (select 1 from pg_extension where extname = '${extension}') then\n      begin\n        execute 'create extension if not exists \"${extension}\" schema public';\n      exception when insufficient_privilege or feature_not_supported then\n        raise exception using\n          errcode = 'insufficient_privilege',\n          message = 'Open Mercato requires the PostgreSQL \"${extension}\" extension for accent-insensitive catalog search, and this role may not create it.',\n          hint = 'Connect as a superuser (or allowlist the extension on managed PostgreSQL) and run: CREATE EXTENSION IF NOT EXISTS \"${extension}\" SCHEMA public; then re-run yarn db:migrate.';\n      end;\n    end if;\n  end\n  $$;\n`;\n\nexport class Migration20260914120000 extends Migration {\n\n  override async up(): Promise<void> {\n    this.addSql(ensureExtensionSql('unaccent'));\n    this.addSql(ensureExtensionSql('pg_trgm'));\n  }\n\n  override async down(): Promise<void> {\n    // The extensions are deliberately left in place: other schemas may have come\n    // to depend on them, and dropping an extension cascades to everything built\n    // on it. Migration20260914120100 removes what this module actually owns.\n  }\n\n}\n"],
+  "mappings": "AAAA,SAAS,iBAAiB;AAoB1B,MAAM,qBAAqB,CAAC,cAA8B;AAAA;AAAA;AAAA,iEAGO,SAAS;AAAA;AAAA,mDAEvB,SAAS;AAAA;AAAA;AAAA;AAAA,6DAIC,SAAS;AAAA,uIACiE,SAAS;AAAA;AAAA;AAAA;AAAA;AAAA;AAOzI,MAAM,gCAAgC,UAAU;AAAA,EAErD,MAAe,KAAoB;AACjC,SAAK,OAAO,mBAAmB,UAAU,CAAC;AAC1C,SAAK,OAAO,mBAAmB,SAAS,CAAC;AAAA,EAC3C;AAAA,EAEA,MAAe,OAAsB;AAAA,EAIrC;AAEF;",
+  "names": []
+}

package/dist/modules/catalog/migrations/Migration20260914120100.js

@@ -0,0 +1,28 @@
+import { Migration } from "@mikro-orm/migrations";
+import {
+  IMMUTABLE_UNACCENT_FUNCTION,
+  buildImmutableUnaccentFunctionSql
+} from "@open-mercato/shared/lib/db/accentInsensitiveSearch";
+import { PRODUCT_SEARCH_EXPRESSION_SQL } from "../lib/productSearch.js";
+const CATALOG_PRODUCT_SEARCH_INDEX = "catalog_products_search_trgm_idx";
+class Migration20260914120100 extends Migration {
+  isTransactional() {
+    return false;
+  }
+  async up() {
+    this.addSql(buildImmutableUnaccentFunctionSql());
+    this.addSql(`drop index concurrently if exists "${CATALOG_PRODUCT_SEARCH_INDEX}";`);
+    this.addSql(
+      `create index concurrently "${CATALOG_PRODUCT_SEARCH_INDEX}" on "catalog_products" using gin (${PRODUCT_SEARCH_EXPRESSION_SQL} gin_trgm_ops);`
+    );
+  }
+  async down() {
+    this.addSql(`drop index concurrently if exists "${CATALOG_PRODUCT_SEARCH_INDEX}";`);
+    this.addSql(`drop function if exists ${IMMUTABLE_UNACCENT_FUNCTION}(text);`);
+  }
+}
+export {
+  CATALOG_PRODUCT_SEARCH_INDEX,
+  Migration20260914120100
+};
+//# sourceMappingURL=Migration20260914120100.js.map

package/dist/modules/catalog/migrations/Migration20260914120100.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/catalog/migrations/Migration20260914120100.ts"],
+  "sourcesContent": ["import { Migration } from '@mikro-orm/migrations';\nimport {\n  IMMUTABLE_UNACCENT_FUNCTION,\n  buildImmutableUnaccentFunctionSql,\n} from '@open-mercato/shared/lib/db/accentInsensitiveSearch';\nimport { PRODUCT_SEARCH_EXPRESSION_SQL } from '../lib/productSearch';\n\nexport const CATALOG_PRODUCT_SEARCH_INDEX = 'catalog_products_search_trgm_idx';\n\n// Accent-insensitive product search (#6074). The wrapper function and the GIN\n// trigram index are built from the same expression builder the query uses\n// (lib/productSearch.ts), because PostgreSQL only uses an expression index when\n// the predicate is spelled identically \u2014 a drift here degrades silently to a\n// sequential scan rather than failing.\n//\n// The extensions come from Migration20260914120000, already committed by the\n// time this runs, so the function body can pin the dictionary with\n// `'public.unaccent'::regdictionary` instead of resolving it through search_path.\n//\n// catalog_products is high-churn and this index covers the concatenation of five\n// text columns including the full description, so the build is slow enough that\n// a plain CREATE INDEX would hold its SHARE lock \u2014 blocking every product write\n// \u2014 for the length of a deploy. It is therefore built CONCURRENTLY, which cannot\n// run inside a transaction, hence isTransactional() => false; the migration\n// runner applies migrations one-by-one, so this opt-out is safe. Drop first so\n// retrying an interrupted concurrent build removes PostgreSQL's INVALID index\n// stub instead of letting IF NOT EXISTS report success over an unusable index.\n// Same shape as sales/Migration20260821120000 and\n// query_index/Migration20260731105052.\nexport class Migration20260914120100 extends Migration {\n\n  override isTransactional(): boolean {\n    return false;\n  }\n\n  override async up(): Promise<void> {\n    this.addSql(buildImmutableUnaccentFunctionSql());\n    this.addSql(`drop index concurrently if exists \"${CATALOG_PRODUCT_SEARCH_INDEX}\";`);\n    this.addSql(\n      `create index concurrently \"${CATALOG_PRODUCT_SEARCH_INDEX}\" on \"catalog_products\" using gin (${PRODUCT_SEARCH_EXPRESSION_SQL} gin_trgm_ops);`,\n    );\n  }\n\n  override async down(): Promise<void> {\n    // The index depends on the function, so it must go first.\n    this.addSql(`drop index concurrently if exists \"${CATALOG_PRODUCT_SEARCH_INDEX}\";`);\n    this.addSql(`drop function if exists ${IMMUTABLE_UNACCENT_FUNCTION}(text);`);\n  }\n\n}\n"],
+  "mappings": "AAAA,SAAS,iBAAiB;AAC1B;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAS,qCAAqC;AAEvC,MAAM,+BAA+B;AAsBrC,MAAM,gCAAgC,UAAU;AAAA,EAE5C,kBAA2B;AAClC,WAAO;AAAA,EACT;AAAA,EAEA,MAAe,KAAoB;AACjC,SAAK,OAAO,kCAAkC,CAAC;AAC/C,SAAK,OAAO,sCAAsC,4BAA4B,IAAI;AAClF,SAAK;AAAA,MACH,8BAA8B,4BAA4B,sCAAsC,6BAA6B;AAAA,IAC/H;AAAA,EACF;AAAA,EAEA,MAAe,OAAsB;AAEnC,SAAK,OAAO,sCAAsC,4BAA4B,IAAI;AAClF,SAAK,OAAO,2BAA2B,2BAA2B,SAAS;AAAA,EAC7E;AAEF;",
+  "names": []
+}

package/dist/modules/catalog/workers/catalog-category-bulk-create.js

@@ -0,0 +1,40 @@
+import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
+import {
+  CATALOG_CATEGORY_BULK_CREATE_QUEUE,
+  createCatalogCategoriesWithProgress
+} from "../lib/bulkCreateCategories.js";
+const metadata = {
+  queue: CATALOG_CATEGORY_BULK_CREATE_QUEUE,
+  id: "catalog:category-bulk-create",
+  concurrency: 1
+};
+async function handle(job, _ctx) {
+  const container = await createRequestContainer();
+  try {
+    await createCatalogCategoriesWithProgress({
+      container,
+      progressJobId: job.payload.progressJobId,
+      items: job.payload.items,
+      scope: job.payload.scope
+    });
+  } catch (error) {
+    const progressService = container.resolve("progressService");
+    await progressService.failJob(
+      job.payload.progressJobId,
+      {
+        errorMessage: error instanceof Error ? error.message : "Bulk category creation failed"
+      },
+      {
+        tenantId: job.payload.scope.tenantId,
+        organizationId: job.payload.scope.organizationId,
+        userId: job.payload.scope.userId
+      }
+    );
+    throw error;
+  }
+}
+export {
+  handle as default,
+  metadata
+};
+//# sourceMappingURL=catalog-category-bulk-create.js.map

package/dist/modules/catalog/workers/catalog-category-bulk-create.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/catalog/workers/catalog-category-bulk-create.ts"],
+  "sourcesContent": ["import type { JobContext, QueuedJob, WorkerMeta } from '@open-mercato/queue'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport type { ProgressService } from '../../progress/lib/progressService'\nimport {\n  CATALOG_CATEGORY_BULK_CREATE_QUEUE,\n  createCatalogCategoriesWithProgress,\n  type CatalogCategoryBulkCreateJobPayload,\n} from '../lib/bulkCreateCategories'\n\ntype HandlerContext = JobContext & {\n  resolve: <T = unknown>(name: string) => T\n}\n\nexport const metadata: WorkerMeta = {\n  queue: CATALOG_CATEGORY_BULK_CREATE_QUEUE,\n  id: 'catalog:category-bulk-create',\n  concurrency: 1,\n}\n\nexport default async function handle(\n  job: QueuedJob<CatalogCategoryBulkCreateJobPayload>,\n  _ctx: HandlerContext,\n): Promise<void> {\n  const container = await createRequestContainer()\n\n  try {\n    await createCatalogCategoriesWithProgress({\n      container,\n      progressJobId: job.payload.progressJobId,\n      items: job.payload.items,\n      scope: job.payload.scope,\n    })\n  } catch (error) {\n    const progressService = container.resolve('progressService') as ProgressService\n    await progressService.failJob(\n      job.payload.progressJobId,\n      {\n        errorMessage: error instanceof Error ? error.message : 'Bulk category creation failed',\n      },\n      {\n        tenantId: job.payload.scope.tenantId,\n        organizationId: job.payload.scope.organizationId,\n        userId: job.payload.scope.userId,\n      },\n    )\n    throw error\n  }\n}\n"],
+  "mappings": "AACA,SAAS,8BAA8B;AAEvC;AAAA,EACE;AAAA,EACA;AAAA,OAEK;AAMA,MAAM,WAAuB;AAAA,EAClC,OAAO;AAAA,EACP,IAAI;AAAA,EACJ,aAAa;AACf;AAEA,eAAO,OACL,KACA,MACe;AACf,QAAM,YAAY,MAAM,uBAAuB;AAE/C,MAAI;AACF,UAAM,oCAAoC;AAAA,MACxC;AAAA,MACA,eAAe,IAAI,QAAQ;AAAA,MAC3B,OAAO,IAAI,QAAQ;AAAA,MACnB,OAAO,IAAI,QAAQ;AAAA,IACrB,CAAC;AAAA,EACH,SAAS,OAAO;AACd,UAAM,kBAAkB,UAAU,QAAQ,iBAAiB;AAC3D,UAAM,gBAAgB;AAAA,MACpB,IAAI,QAAQ;AAAA,MACZ;AAAA,QACE,cAAc,iBAAiB,QAAQ,MAAM,UAAU;AAAA,MACzD;AAAA,MACA;AAAA,QACE,UAAU,IAAI,QAAQ,MAAM;AAAA,QAC5B,gBAAgB,IAAI,QAAQ,MAAM;AAAA,QAClC,QAAQ,IAAI,QAAQ,MAAM;AAAA,MAC5B;AAAA,IACF;AACA,UAAM;AAAA,EACR;AACF;",
+  "names": []
+}

package/dist/modules/catalog/workers/catalog-product-bulk-create.js

@@ -0,0 +1,40 @@
+import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
+import {
+  CATALOG_PRODUCT_BULK_CREATE_QUEUE,
+  createCatalogProductsWithProgress
+} from "../lib/bulkCreateProducts.js";
+const metadata = {
+  queue: CATALOG_PRODUCT_BULK_CREATE_QUEUE,
+  id: "catalog:product-bulk-create",
+  concurrency: 1
+};
+async function handle(job, _ctx) {
+  const container = await createRequestContainer();
+  try {
+    await createCatalogProductsWithProgress({
+      container,
+      progressJobId: job.payload.progressJobId,
+      items: job.payload.items,
+      scope: job.payload.scope
+    });
+  } catch (error) {
+    const progressService = container.resolve("progressService");
+    await progressService.failJob(
+      job.payload.progressJobId,
+      {
+        errorMessage: error instanceof Error ? error.message : "Bulk product creation failed"
+      },
+      {
+        tenantId: job.payload.scope.tenantId,
+        organizationId: job.payload.scope.organizationId,
+        userId: job.payload.scope.userId
+      }
+    );
+    throw error;
+  }
+}
+export {
+  handle as default,
+  metadata
+};
+//# sourceMappingURL=catalog-product-bulk-create.js.map

package/dist/modules/catalog/workers/catalog-product-bulk-create.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/catalog/workers/catalog-product-bulk-create.ts"],
+  "sourcesContent": ["import type { JobContext, QueuedJob, WorkerMeta } from '@open-mercato/queue'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport type { ProgressService } from '../../progress/lib/progressService'\nimport {\n  CATALOG_PRODUCT_BULK_CREATE_QUEUE,\n  createCatalogProductsWithProgress,\n  type CatalogProductBulkCreateJobPayload,\n} from '../lib/bulkCreateProducts'\n\ntype HandlerContext = JobContext & {\n  resolve: <T = unknown>(name: string) => T\n}\n\nexport const metadata: WorkerMeta = {\n  queue: CATALOG_PRODUCT_BULK_CREATE_QUEUE,\n  id: 'catalog:product-bulk-create',\n  concurrency: 1,\n}\n\nexport default async function handle(\n  job: QueuedJob<CatalogProductBulkCreateJobPayload>,\n  _ctx: HandlerContext,\n): Promise<void> {\n  const container = await createRequestContainer()\n\n  try {\n    await createCatalogProductsWithProgress({\n      container,\n      progressJobId: job.payload.progressJobId,\n      items: job.payload.items,\n      scope: job.payload.scope,\n    })\n  } catch (error) {\n    const progressService = container.resolve('progressService') as ProgressService\n    await progressService.failJob(\n      job.payload.progressJobId,\n      {\n        errorMessage: error instanceof Error ? error.message : 'Bulk product creation failed',\n      },\n      {\n        tenantId: job.payload.scope.tenantId,\n        organizationId: job.payload.scope.organizationId,\n        userId: job.payload.scope.userId,\n      },\n    )\n    throw error\n  }\n}\n"],
+  "mappings": "AACA,SAAS,8BAA8B;AAEvC;AAAA,EACE;AAAA,EACA;AAAA,OAEK;AAMA,MAAM,WAAuB;AAAA,EAClC,OAAO;AAAA,EACP,IAAI;AAAA,EACJ,aAAa;AACf;AAEA,eAAO,OACL,KACA,MACe;AACf,QAAM,YAAY,MAAM,uBAAuB;AAE/C,MAAI;AACF,UAAM,kCAAkC;AAAA,MACtC;AAAA,MACA,eAAe,IAAI,QAAQ;AAAA,MAC3B,OAAO,IAAI,QAAQ;AAAA,MACnB,OAAO,IAAI,QAAQ;AAAA,IACrB,CAAC;AAAA,EACH,SAAS,OAAO;AACd,UAAM,kBAAkB,UAAU,QAAQ,iBAAiB;AAC3D,UAAM,gBAAgB;AAAA,MACpB,IAAI,QAAQ;AAAA,MACZ;AAAA,QACE,cAAc,iBAAiB,QAAQ,MAAM,UAAU;AAAA,MACzD;AAAA,MACA;AAAA,QACE,UAAU,IAAI,QAAQ,MAAM;AAAA,QAC5B,gBAAgB,IAAI,QAAQ,MAAM;AAAA,QAClC,QAAQ,IAAI,QAAQ,MAAM;AAAA,MAC5B;AAAA,IACF;AACA,UAAM;AAAA,EACR;AACF;",
+  "names": []
+}

package/dist/modules/communication_channels/acl.js

@@ -12,6 +12,14 @@ const features = [
    * Default-granted to all roles in `setup.ts`.
    */
   { id: "communication_channels.connect_user_channel", title: "Connect own communication channel", module: "communication_channels" },
+  /**
+   * Mark YOUR OWN personal channel as a shared team mailbox, so the CRM email it
+   * ingests becomes readable by teammates. Owner-only by construction: the route
+   * loads the channel by `userId = caller` and accepts no owner field, so holding
+   * this feature grants no access to anyone else's mailbox. Deliberately does NOT
+   * depend on `communication_channels.admin`, which stays inert.
+   */
+  { id: "communication_channels.share_own_channel", title: "Share own channel with the team", module: "communication_channels" },
   /**
    * Connect a tenant-wide channel (`CommunicationChannel.user_id IS NULL`) that
    * serves every user in the tenant — used for push providers (FCM/APNs/Expo)

package/dist/modules/communication_channels/acl.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../src/modules/communication_channels/acl.ts"],
-  "sourcesContent": ["export const features = [\n  { id: 'communication_channels.view', title: 'View communication channels', module: 'communication_channels' },\n  { id: 'communication_channels.manage', title: 'Manage communication channels', module: 'communication_channels' },\n  { id: 'communication_channels.react', title: 'React to channel messages', module: 'communication_channels' },\n  { id: 'communication_channels.assign', title: 'Assign channel conversations', module: 'communication_channels' },\n  /**\n   * Per-user channel ownership (added by the email integration spec).\n   *\n   * Gates the \"Connect my mailbox\" flow on the per-user profile page. Split from\n   * `communication_channels.manage` so policy can disable new linking while\n   * preserving existing accounts (e.g. during a security incident response).\n   * Default-granted to all roles in `setup.ts`.\n   */\n  { id: 'communication_channels.connect_user_channel', title: 'Connect own communication channel', module: 'communication_channels' },\n  /**\n   * Connect a tenant-wide channel (`CommunicationChannel.user_id IS NULL`) that\n   * serves every user in the tenant \u2014 used for push providers (FCM/APNs/Expo)\n   * whose service account / signing key is shared tenant infrastructure. Gates\n   * `POST /channels/connect/tenant-credentials`. Admin/superadmin only: unlike\n   * `connect_user_channel` (everyone links their own mailbox), connecting shared\n   * push credentials is an administrative action.\n   */\n  { id: 'communication_channels.connect_tenant_channel', title: 'Connect tenant-wide communication channel', module: 'communication_channels' },\n  /**\n   * Reserved for a future v2 team-oversight capability. NOT consulted in v1:\n   * personal mailboxes (`CommunicationChannel.user_id` set) follow the strict\n   * owner-only privacy model, so this feature grants NO cross-user channel view.\n   * The admin channels list (`GET /api/communication_channels/channels`) returns\n   * `user_id IS NULL` rows only; personal mailboxes surface exclusively on the\n   * owner's profile page and are never exposed to admins/superadmins in v1.\n   * Granted to `superadmin` + `admin` only so the inert grant is in place ahead\n   * of the audited v2 oversight feature that will re-activate it.\n   */\n  { id: 'communication_channels.admin', title: 'Administer all communication channels (tenant-wide)', module: 'communication_channels' },\n  /**\n   * Trigger the \"Import history\" job for a channel \u2014 fetch older messages\n   * the channel never saw at bootstrap (Spec B \u00A7 Phase B6). Separate from\n   * `manage` so policy can gate bulk historical imports during quiet hours\n   * or cost-controlled rollouts while leaving normal channel CRUD open.\n   */\n  { id: 'communication_channels.channel.import_history', title: 'Import channel history', module: 'communication_channels' },\n  /**\n   * Manage provider push delivery (Spec C \u2014 Gmail Pub/Sub push\n   * subscriptions). Gates the \"Re-register push\" operator button and any\n   * future push-status manipulation. Granted to admin + superadmin only \u2014\n   * regular users don't need to think about whether mail arrives via\n   * push or polling, the system handles it.\n   */\n  { id: 'communication_channels.channel.push.manage', title: 'Manage push delivery', module: 'communication_channels' },\n] as const\n\nexport default features\n"],
-  "mappings": "AAAO,MAAM,WAAW;AAAA,EACtB,EAAE,IAAI,+BAA+B,OAAO,+BAA+B,QAAQ,yBAAyB;AAAA,EAC5G,EAAE,IAAI,iCAAiC,OAAO,iCAAiC,QAAQ,yBAAyB;AAAA,EAChH,EAAE,IAAI,gCAAgC,OAAO,6BAA6B,QAAQ,yBAAyB;AAAA,EAC3G,EAAE,IAAI,iCAAiC,OAAO,gCAAgC,QAAQ,yBAAyB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAS/G,EAAE,IAAI,+CAA+C,OAAO,qCAAqC,QAAQ,yBAAyB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASlI,EAAE,IAAI,iDAAiD,OAAO,6CAA6C,QAAQ,yBAAyB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAW5I,EAAE,IAAI,gCAAgC,OAAO,uDAAuD,QAAQ,yBAAyB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOrI,EAAE,IAAI,iDAAiD,OAAO,0BAA0B,QAAQ,yBAAyB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQzH,EAAE,IAAI,8CAA8C,OAAO,wBAAwB,QAAQ,yBAAyB;AACtH;AAEA,IAAO,cAAQ;",
+  "sourcesContent": ["export const features = [\n  { id: 'communication_channels.view', title: 'View communication channels', module: 'communication_channels' },\n  { id: 'communication_channels.manage', title: 'Manage communication channels', module: 'communication_channels' },\n  { id: 'communication_channels.react', title: 'React to channel messages', module: 'communication_channels' },\n  { id: 'communication_channels.assign', title: 'Assign channel conversations', module: 'communication_channels' },\n  /**\n   * Per-user channel ownership (added by the email integration spec).\n   *\n   * Gates the \"Connect my mailbox\" flow on the per-user profile page. Split from\n   * `communication_channels.manage` so policy can disable new linking while\n   * preserving existing accounts (e.g. during a security incident response).\n   * Default-granted to all roles in `setup.ts`.\n   */\n  { id: 'communication_channels.connect_user_channel', title: 'Connect own communication channel', module: 'communication_channels' },\n  /**\n   * Mark YOUR OWN personal channel as a shared team mailbox, so the CRM email it\n   * ingests becomes readable by teammates. Owner-only by construction: the route\n   * loads the channel by `userId = caller` and accepts no owner field, so holding\n   * this feature grants no access to anyone else's mailbox. Deliberately does NOT\n   * depend on `communication_channels.admin`, which stays inert.\n   */\n  { id: 'communication_channels.share_own_channel', title: 'Share own channel with the team', module: 'communication_channels' },\n  /**\n   * Connect a tenant-wide channel (`CommunicationChannel.user_id IS NULL`) that\n   * serves every user in the tenant \u2014 used for push providers (FCM/APNs/Expo)\n   * whose service account / signing key is shared tenant infrastructure. Gates\n   * `POST /channels/connect/tenant-credentials`. Admin/superadmin only: unlike\n   * `connect_user_channel` (everyone links their own mailbox), connecting shared\n   * push credentials is an administrative action.\n   */\n  { id: 'communication_channels.connect_tenant_channel', title: 'Connect tenant-wide communication channel', module: 'communication_channels' },\n  /**\n   * Reserved for a future v2 team-oversight capability. NOT consulted in v1:\n   * personal mailboxes (`CommunicationChannel.user_id` set) follow the strict\n   * owner-only privacy model, so this feature grants NO cross-user channel view.\n   * The admin channels list (`GET /api/communication_channels/channels`) returns\n   * `user_id IS NULL` rows only; personal mailboxes surface exclusively on the\n   * owner's profile page and are never exposed to admins/superadmins in v1.\n   * Granted to `superadmin` + `admin` only so the inert grant is in place ahead\n   * of the audited v2 oversight feature that will re-activate it.\n   */\n  { id: 'communication_channels.admin', title: 'Administer all communication channels (tenant-wide)', module: 'communication_channels' },\n  /**\n   * Trigger the \"Import history\" job for a channel \u2014 fetch older messages\n   * the channel never saw at bootstrap (Spec B \u00A7 Phase B6). Separate from\n   * `manage` so policy can gate bulk historical imports during quiet hours\n   * or cost-controlled rollouts while leaving normal channel CRUD open.\n   */\n  { id: 'communication_channels.channel.import_history', title: 'Import channel history', module: 'communication_channels' },\n  /**\n   * Manage provider push delivery (Spec C \u2014 Gmail Pub/Sub push\n   * subscriptions). Gates the \"Re-register push\" operator button and any\n   * future push-status manipulation. Granted to admin + superadmin only \u2014\n   * regular users don't need to think about whether mail arrives via\n   * push or polling, the system handles it.\n   */\n  { id: 'communication_channels.channel.push.manage', title: 'Manage push delivery', module: 'communication_channels' },\n] as const\n\nexport default features\n"],
+  "mappings": "AAAO,MAAM,WAAW;AAAA,EACtB,EAAE,IAAI,+BAA+B,OAAO,+BAA+B,QAAQ,yBAAyB;AAAA,EAC5G,EAAE,IAAI,iCAAiC,OAAO,iCAAiC,QAAQ,yBAAyB;AAAA,EAChH,EAAE,IAAI,gCAAgC,OAAO,6BAA6B,QAAQ,yBAAyB;AAAA,EAC3G,EAAE,IAAI,iCAAiC,OAAO,gCAAgC,QAAQ,yBAAyB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAS/G,EAAE,IAAI,+CAA+C,OAAO,qCAAqC,QAAQ,yBAAyB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQlI,EAAE,IAAI,4CAA4C,OAAO,mCAAmC,QAAQ,yBAAyB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAS7H,EAAE,IAAI,iDAAiD,OAAO,6CAA6C,QAAQ,yBAAyB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAW5I,EAAE,IAAI,gCAAgC,OAAO,uDAAuD,QAAQ,yBAAyB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOrI,EAAE,IAAI,iDAAiD,OAAO,0BAA0B,QAAQ,yBAAyB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQzH,EAAE,IAAI,8CAA8C,OAAO,wBAAwB,QAAQ,yBAAyB;AACtH;AAEA,IAAO,cAAQ;",
   "names": []
 }

package/dist/modules/communication_channels/api/get/me/channels/route.js

@@ -61,6 +61,10 @@ function serialize(channel, adapterRegistry) {
     displayName: channel.displayName,
     externalIdentifier: channel.externalIdentifier ?? null,
     isPrimary: channel.isPrimary,
+    /** Shared team mailbox flag; drives the profile-page share toggle. */
+    visibility: channel.visibility === "shared" ? "shared" : "private",
+    /** Required so the share toggle can send the optimistic-lock header. */
+    updatedAt: channel.updatedAt?.toISOString?.() ?? null,
     isActive: channel.isActive,
     status: channel.status,
     lastError: channel.lastError ?? null,

package/dist/modules/communication_channels/api/get/me/channels/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../../src/modules/communication_channels/api/get/me/channels/route.ts"],
-  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { CommunicationChannel } from '../../../../data/entities'\nimport { isHubPolledChannel } from '../../../../lib/polling-eligibility'\nimport type { ChannelAdapterRegistry } from '../../../../lib/registry'\n\nexport const metadata = {\n  path: '/communication_channels/me/channels',\n  GET: {\n    requireAuth: true,\n    requireFeatures: ['communication_channels.connect_user_channel'],\n  },\n}\n\n/**\n * List the current user's owned channels. Used by the profile page.\n *\n * Returns the user-scoped subset only (NOT tenant-wide channels). Admin views\n * of all channels live under `/api/communication_channels/channels` (slice 2e).\n */\nexport async function GET(req: Request): Promise<Response> {\n  const auth = await getAuthFromRequest(req)\n  if (!auth?.sub || !auth?.tenantId) {\n    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n  }\n\n  const container = await createRequestContainer()\n  const em = (container.resolve('em') as EntityManager).fork()\n\n  const channels = await findWithDecryption(\n    em,\n    CommunicationChannel,\n    {\n      tenantId: auth.tenantId as string,\n      organizationId: (auth as { orgId?: string | null }).orgId ?? null,\n      userId: auth.sub as string,\n      deletedAt: null,\n    },\n    { orderBy: { createdAt: 'desc' } },\n    { tenantId: auth.tenantId as string, organizationId: (auth as { orgId?: string | null }).orgId ?? null },\n  )\n\n  // The profile grid renders \"is this channel polled or push-driven?\" and\n  // \"can push be registered here?\" \u2014 both are adapter facts, not provider names,\n  // so they are resolved server-side (#4980).\n  let adapterRegistry: ChannelAdapterRegistry | null = null\n  try {\n    adapterRegistry = container.resolve('channelAdapterRegistry') as ChannelAdapterRegistry\n  } catch {\n    adapterRegistry = null\n  }\n\n  return NextResponse.json({\n    items: (channels as CommunicationChannel[]).map((channel) =>\n      serialize(channel, adapterRegistry),\n    ),\n    total: channels.length,\n  })\n}\n\nfunction serialize(channel: CommunicationChannel, adapterRegistry: ChannelAdapterRegistry | null) {\n  // Spec C \u2014 expose push status + last push error to the operator UI so\n  // the `PushStatusSection` can render the \"Re-register push\" affordance.\n  const channelState =\n    (channel.channelState as\n      | { pushStatus?: string; lastPushError?: { code?: string; message?: string; at?: string } | null }\n      | null) ?? null\n  const pushStatus =\n    typeof channelState?.pushStatus === 'string'\n      ? (channelState.pushStatus as 'active' | 'inactive' | 'failed')\n      : null\n  const lastPushError =\n    channelState?.lastPushError && typeof channelState.lastPushError === 'object'\n      ? {\n          code: channelState.lastPushError.code ?? null,\n          message: channelState.lastPushError.message ?? null,\n          at: channelState.lastPushError.at ?? null,\n        }\n      : null\n  // `true` when the hub's poll worker skips this channel because the adapter\n  // declares real-time push \u2014 the inverse of `isHubPolledChannel`, which the\n  // worker itself uses, so the label cannot contradict the behaviour.\n  const supportsRealtimePush = !isHubPolledChannel(channel.capabilities)\n  const adapter = adapterRegistry?.get(channel.providerKey)\n  const supportsPushRegistration = typeof adapter?.registerPush === 'function'\n  return {\n    id: channel.id,\n    providerKey: channel.providerKey,\n    channelType: channel.channelType,\n    displayName: channel.displayName,\n    externalIdentifier: channel.externalIdentifier ?? null,\n    isPrimary: channel.isPrimary,\n    isActive: channel.isActive,\n    status: channel.status,\n    lastError: channel.lastError ?? null,\n    pollIntervalSeconds: channel.pollIntervalSeconds ?? null,\n    lastPolledAt: channel.lastPolledAt?.toISOString?.() ?? null,\n    pushStatus,\n    lastPushError,\n    supportsRealtimePush,\n    supportsPushRegistration,\n    createdAt: channel.createdAt?.toISOString?.() ?? null,\n  }\n}\n\nexport const openApi = {\n  tags: ['CommunicationChannels'],\n  methods: {\n    GET: {\n      summary: 'List the current user\\'s connected channels',\n      tags: ['CommunicationChannels'],\n      responses: [\n        { status: 200, description: 'List of user-owned channels' },\n        { status: 401, description: 'Unauthorized' },\n      ],\n    },\n  },\n}\nexport default GET\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,0BAA0B;AACnC,SAAS,8BAA8B;AAEvC,SAAS,0BAA0B;AACnC,SAAS,4BAA4B;AACrC,SAAS,0BAA0B;AAG5B,MAAM,WAAW;AAAA,EACtB,MAAM;AAAA,EACN,KAAK;AAAA,IACH,aAAa;AAAA,IACb,iBAAiB,CAAC,6CAA6C;AAAA,EACjE;AACF;AAQA,eAAsB,IAAI,KAAiC;AACzD,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM,OAAO,CAAC,MAAM,UAAU;AACjC,WAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrE;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,KAAM,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAE3D,QAAM,WAAW,MAAM;AAAA,IACrB;AAAA,IACA;AAAA,IACA;AAAA,MACE,UAAU,KAAK;AAAA,MACf,gBAAiB,KAAmC,SAAS;AAAA,MAC7D,QAAQ,KAAK;AAAA,MACb,WAAW;AAAA,IACb;AAAA,IACA,EAAE,SAAS,EAAE,WAAW,OAAO,EAAE;AAAA,IACjC,EAAE,UAAU,KAAK,UAAoB,gBAAiB,KAAmC,SAAS,KAAK;AAAA,EACzG;AAKA,MAAI,kBAAiD;AACrD,MAAI;AACF,sBAAkB,UAAU,QAAQ,wBAAwB;AAAA,EAC9D,QAAQ;AACN,sBAAkB;AAAA,EACpB;AAEA,SAAO,aAAa,KAAK;AAAA,IACvB,OAAQ,SAAoC;AAAA,MAAI,CAAC,YAC/C,UAAU,SAAS,eAAe;AAAA,IACpC;AAAA,IACA,OAAO,SAAS;AAAA,EAClB,CAAC;AACH;AAEA,SAAS,UAAU,SAA+B,iBAAgD;AAGhG,QAAM,eACH,QAAQ,gBAEI;AACf,QAAM,aACJ,OAAO,cAAc,eAAe,WAC/B,aAAa,aACd;AACN,QAAM,gBACJ,cAAc,iBAAiB,OAAO,aAAa,kBAAkB,WACjE;AAAA,IACE,MAAM,aAAa,cAAc,QAAQ;AAAA,IACzC,SAAS,aAAa,cAAc,WAAW;AAAA,IAC/C,IAAI,aAAa,cAAc,MAAM;AAAA,EACvC,IACA;AAIN,QAAM,uBAAuB,CAAC,mBAAmB,QAAQ,YAAY;AACrE,QAAM,UAAU,iBAAiB,IAAI,QAAQ,WAAW;AACxD,QAAM,2BAA2B,OAAO,SAAS,iBAAiB;AAClE,SAAO;AAAA,IACL,IAAI,QAAQ;AAAA,IACZ,aAAa,QAAQ;AAAA,IACrB,aAAa,QAAQ;AAAA,IACrB,aAAa,QAAQ;AAAA,IACrB,oBAAoB,QAAQ,sBAAsB;AAAA,IAClD,WAAW,QAAQ;AAAA,IACnB,UAAU,QAAQ;AAAA,IAClB,QAAQ,QAAQ;AAAA,IAChB,WAAW,QAAQ,aAAa;AAAA,IAChC,qBAAqB,QAAQ,uBAAuB;AAAA,IACpD,cAAc,QAAQ,cAAc,cAAc,KAAK;AAAA,IACvD;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,WAAW,QAAQ,WAAW,cAAc,KAAK;AAAA,EACnD;AACF;AAEO,MAAM,UAAU;AAAA,EACrB,MAAM,CAAC,uBAAuB;AAAA,EAC9B,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,MAAM,CAAC,uBAAuB;AAAA,MAC9B,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,8BAA8B;AAAA,QAC1D,EAAE,QAAQ,KAAK,aAAa,eAAe;AAAA,MAC7C;AAAA,IACF;AAAA,EACF;AACF;AACA,IAAO,gBAAQ;",
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { CommunicationChannel } from '../../../../data/entities'\nimport { isHubPolledChannel } from '../../../../lib/polling-eligibility'\nimport type { ChannelAdapterRegistry } from '../../../../lib/registry'\n\nexport const metadata = {\n  path: '/communication_channels/me/channels',\n  GET: {\n    requireAuth: true,\n    requireFeatures: ['communication_channels.connect_user_channel'],\n  },\n}\n\n/**\n * List the current user's owned channels. Used by the profile page.\n *\n * Returns the user-scoped subset only (NOT tenant-wide channels). Admin views\n * of all channels live under `/api/communication_channels/channels` (slice 2e).\n */\nexport async function GET(req: Request): Promise<Response> {\n  const auth = await getAuthFromRequest(req)\n  if (!auth?.sub || !auth?.tenantId) {\n    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n  }\n\n  const container = await createRequestContainer()\n  const em = (container.resolve('em') as EntityManager).fork()\n\n  const channels = await findWithDecryption(\n    em,\n    CommunicationChannel,\n    {\n      tenantId: auth.tenantId as string,\n      organizationId: (auth as { orgId?: string | null }).orgId ?? null,\n      userId: auth.sub as string,\n      deletedAt: null,\n    },\n    { orderBy: { createdAt: 'desc' } },\n    { tenantId: auth.tenantId as string, organizationId: (auth as { orgId?: string | null }).orgId ?? null },\n  )\n\n  // The profile grid renders \"is this channel polled or push-driven?\" and\n  // \"can push be registered here?\" \u2014 both are adapter facts, not provider names,\n  // so they are resolved server-side (#4980).\n  let adapterRegistry: ChannelAdapterRegistry | null = null\n  try {\n    adapterRegistry = container.resolve('channelAdapterRegistry') as ChannelAdapterRegistry\n  } catch {\n    adapterRegistry = null\n  }\n\n  return NextResponse.json({\n    items: (channels as CommunicationChannel[]).map((channel) =>\n      serialize(channel, adapterRegistry),\n    ),\n    total: channels.length,\n  })\n}\n\nfunction serialize(channel: CommunicationChannel, adapterRegistry: ChannelAdapterRegistry | null) {\n  // Spec C \u2014 expose push status + last push error to the operator UI so\n  // the `PushStatusSection` can render the \"Re-register push\" affordance.\n  const channelState =\n    (channel.channelState as\n      | { pushStatus?: string; lastPushError?: { code?: string; message?: string; at?: string } | null }\n      | null) ?? null\n  const pushStatus =\n    typeof channelState?.pushStatus === 'string'\n      ? (channelState.pushStatus as 'active' | 'inactive' | 'failed')\n      : null\n  const lastPushError =\n    channelState?.lastPushError && typeof channelState.lastPushError === 'object'\n      ? {\n          code: channelState.lastPushError.code ?? null,\n          message: channelState.lastPushError.message ?? null,\n          at: channelState.lastPushError.at ?? null,\n        }\n      : null\n  // `true` when the hub's poll worker skips this channel because the adapter\n  // declares real-time push \u2014 the inverse of `isHubPolledChannel`, which the\n  // worker itself uses, so the label cannot contradict the behaviour.\n  const supportsRealtimePush = !isHubPolledChannel(channel.capabilities)\n  const adapter = adapterRegistry?.get(channel.providerKey)\n  const supportsPushRegistration = typeof adapter?.registerPush === 'function'\n  return {\n    id: channel.id,\n    providerKey: channel.providerKey,\n    channelType: channel.channelType,\n    displayName: channel.displayName,\n    externalIdentifier: channel.externalIdentifier ?? null,\n    isPrimary: channel.isPrimary,\n    /** Shared team mailbox flag; drives the profile-page share toggle. */\n    visibility: channel.visibility === 'shared' ? 'shared' : 'private',\n    /** Required so the share toggle can send the optimistic-lock header. */\n    updatedAt: channel.updatedAt?.toISOString?.() ?? null,\n    isActive: channel.isActive,\n    status: channel.status,\n    lastError: channel.lastError ?? null,\n    pollIntervalSeconds: channel.pollIntervalSeconds ?? null,\n    lastPolledAt: channel.lastPolledAt?.toISOString?.() ?? null,\n    pushStatus,\n    lastPushError,\n    supportsRealtimePush,\n    supportsPushRegistration,\n    createdAt: channel.createdAt?.toISOString?.() ?? null,\n  }\n}\n\nexport const openApi = {\n  tags: ['CommunicationChannels'],\n  methods: {\n    GET: {\n      summary: 'List the current user\\'s connected channels',\n      tags: ['CommunicationChannels'],\n      responses: [\n        { status: 200, description: 'List of user-owned channels' },\n        { status: 401, description: 'Unauthorized' },\n      ],\n    },\n  },\n}\nexport default GET\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,0BAA0B;AACnC,SAAS,8BAA8B;AAEvC,SAAS,0BAA0B;AACnC,SAAS,4BAA4B;AACrC,SAAS,0BAA0B;AAG5B,MAAM,WAAW;AAAA,EACtB,MAAM;AAAA,EACN,KAAK;AAAA,IACH,aAAa;AAAA,IACb,iBAAiB,CAAC,6CAA6C;AAAA,EACjE;AACF;AAQA,eAAsB,IAAI,KAAiC;AACzD,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM,OAAO,CAAC,MAAM,UAAU;AACjC,WAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrE;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,KAAM,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAE3D,QAAM,WAAW,MAAM;AAAA,IACrB;AAAA,IACA;AAAA,IACA;AAAA,MACE,UAAU,KAAK;AAAA,MACf,gBAAiB,KAAmC,SAAS;AAAA,MAC7D,QAAQ,KAAK;AAAA,MACb,WAAW;AAAA,IACb;AAAA,IACA,EAAE,SAAS,EAAE,WAAW,OAAO,EAAE;AAAA,IACjC,EAAE,UAAU,KAAK,UAAoB,gBAAiB,KAAmC,SAAS,KAAK;AAAA,EACzG;AAKA,MAAI,kBAAiD;AACrD,MAAI;AACF,sBAAkB,UAAU,QAAQ,wBAAwB;AAAA,EAC9D,QAAQ;AACN,sBAAkB;AAAA,EACpB;AAEA,SAAO,aAAa,KAAK;AAAA,IACvB,OAAQ,SAAoC;AAAA,MAAI,CAAC,YAC/C,UAAU,SAAS,eAAe;AAAA,IACpC;AAAA,IACA,OAAO,SAAS;AAAA,EAClB,CAAC;AACH;AAEA,SAAS,UAAU,SAA+B,iBAAgD;AAGhG,QAAM,eACH,QAAQ,gBAEI;AACf,QAAM,aACJ,OAAO,cAAc,eAAe,WAC/B,aAAa,aACd;AACN,QAAM,gBACJ,cAAc,iBAAiB,OAAO,aAAa,kBAAkB,WACjE;AAAA,IACE,MAAM,aAAa,cAAc,QAAQ;AAAA,IACzC,SAAS,aAAa,cAAc,WAAW;AAAA,IAC/C,IAAI,aAAa,cAAc,MAAM;AAAA,EACvC,IACA;AAIN,QAAM,uBAAuB,CAAC,mBAAmB,QAAQ,YAAY;AACrE,QAAM,UAAU,iBAAiB,IAAI,QAAQ,WAAW;AACxD,QAAM,2BAA2B,OAAO,SAAS,iBAAiB;AAClE,SAAO;AAAA,IACL,IAAI,QAAQ;AAAA,IACZ,aAAa,QAAQ;AAAA,IACrB,aAAa,QAAQ;AAAA,IACrB,aAAa,QAAQ;AAAA,IACrB,oBAAoB,QAAQ,sBAAsB;AAAA,IAClD,WAAW,QAAQ;AAAA;AAAA,IAEnB,YAAY,QAAQ,eAAe,WAAW,WAAW;AAAA;AAAA,IAEzD,WAAW,QAAQ,WAAW,cAAc,KAAK;AAAA,IACjD,UAAU,QAAQ;AAAA,IAClB,QAAQ,QAAQ;AAAA,IAChB,WAAW,QAAQ,aAAa;AAAA,IAChC,qBAAqB,QAAQ,uBAAuB;AAAA,IACpD,cAAc,QAAQ,cAAc,cAAc,KAAK;AAAA,IACvD;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,WAAW,QAAQ,WAAW,cAAc,KAAK;AAAA,EACnD;AACF;AAEO,MAAM,UAAU;AAAA,EACrB,MAAM,CAAC,uBAAuB;AAAA,EAC9B,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,MAAM,CAAC,uBAAuB;AAAA,MAC9B,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,8BAA8B;AAAA,QAC1D,EAAE,QAAQ,KAAK,aAAa,eAAe;AAAA,MAC7C;AAAA,IACF;AAAA,EACF;AACF;AACA,IAAO,gBAAQ;",
   "names": []
 }

package/dist/modules/communication_channels/api/get/oauth/[provider]/callback/route.js

@@ -7,6 +7,7 @@ import { getChannelAdapter } from "../../../../../lib/adapter-registry-singleton
 import { resolveOAuthClientCredentials } from "../../../../../lib/oauth-client-config.js";
 import {
   COMMUNICATION_CHANNELS_OAUTH_STATE_COOKIE_NAME,
+  consumeOAuthStateOnce,
   DEFAULT_OAUTH_RETURN_URL,
   normalizeOAuthReturnUrl,
   OAuthStateError,
@@ -100,6 +101,27 @@ async function GET(req, context) {
   }
   const returnUrl = normalizeOAuthReturnUrl(statePayload.returnUrl, DEFAULT_OAUTH_RETURN_URL);
   const container = await createRequestContainer();
+  const resolved = (() => {
+    try {
+      return container.resolve("cache");
+    } catch {
+      return null;
+    }
+  })();
+  if (!resolved || typeof resolved.has !== "function" || typeof resolved.set !== "function") {
+    return redirectWithFlash(req, returnUrl, { type: "error", code: "state_store_unavailable", provider });
+  }
+  const oauthStateStore = resolved;
+  try {
+    await consumeOAuthStateOnce(oauthStateStore, statePayload);
+  } catch (err) {
+    const errCode = err instanceof OAuthStateError ? err.code : "invalid_state";
+    return redirectWithFlash(req, returnUrl, {
+      type: "error",
+      code: errCode,
+      provider
+    });
+  }
   const credentialsService = (() => {
     try {
       return container.resolve("integrationCredentialsService");

package/dist/modules/communication_channels/api/get/oauth/[provider]/callback/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../../../src/modules/communication_channels/api/get/oauth/%5Bprovider%5D/callback/route.ts"],
-  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { getAppBaseUrl, toAbsoluteUrl } from '@open-mercato/shared/lib/url'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { createConnectedChannelRow, MailboxAlreadyConnectedError } from '../../../../../lib/connect-channel'\nimport { getChannelAdapter } from '../../../../../lib/adapter-registry-singleton'\nimport { resolveOAuthClientCredentials } from '../../../../../lib/oauth-client-config'\nimport {\n  COMMUNICATION_CHANNELS_OAUTH_STATE_COOKIE_NAME,\n  DEFAULT_OAUTH_RETURN_URL,\n  normalizeOAuthReturnUrl,\n  OAuthStateError,\n  verifyOAuthState,\n} from '../../../../../lib/oauth-state'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('communication_channels').child({ component: 'oauth-callback' })\n\nexport const metadata = {\n  path: '/communication_channels/oauth/[provider]/callback',\n  // No auth feature gate \u2014 the state cookie carries identity. The route still\n  // verifies the session below to bind the callback to its initiator.\n  GET: { requireAuth: true },\n}\n\ntype RouteContext = {\n  params: Promise<{ provider: string }> | { provider: string }\n}\n\ntype CredentialsServiceLike = {\n  resolve: (\n    integrationId: string,\n    scope: { organizationId: string; tenantId: string; userId?: string | null },\n  ) => Promise<Record<string, unknown> | null>\n  save?: (\n    integrationId: string,\n    credentials: Record<string, unknown>,\n    scope: { organizationId: string; tenantId: string; userId?: string | null },\n  ) => Promise<void>\n}\n\nfunction redirectWithFlash(\n  req: Request,\n  returnUrl: string,\n  flash: { type: 'connected' | 'error'; code?: string; provider?: string; channelId?: string },\n): Response {\n  const base = new URL(\n    normalizeOAuthReturnUrl(returnUrl, DEFAULT_OAUTH_RETURN_URL),\n    getAppBaseUrl(req),\n  )\n  base.searchParams.set('flash', flash.type)\n  if (flash.code) base.searchParams.set('code', flash.code)\n  if (flash.provider) base.searchParams.set('provider', flash.provider)\n  if (flash.channelId) base.searchParams.set('channelId', flash.channelId)\n  const response = NextResponse.redirect(base.toString(), 302)\n  response.cookies.set({\n    name: COMMUNICATION_CHANNELS_OAUTH_STATE_COOKIE_NAME,\n    value: '',\n    httpOnly: true,\n    secure: process.env.NODE_ENV === 'production',\n    sameSite: 'lax',\n    path: '/',\n    maxAge: 0,\n  })\n  return response\n}\n\nexport async function GET(req: Request, context: RouteContext): Promise<Response> {\n  const { provider } = await context.params\n  const url = new URL(req.url)\n  const code = url.searchParams.get('code') ?? ''\n  const stateParam = url.searchParams.get('state') ?? ''\n  const error = url.searchParams.get('error')\n\n  if (error) {\n    return redirectWithFlash(req, DEFAULT_OAUTH_RETURN_URL, { type: 'error', code: error, provider })\n  }\n  if (!code || !stateParam) {\n    return redirectWithFlash(req, DEFAULT_OAUTH_RETURN_URL, {\n      type: 'error',\n      code: 'missing_code_or_state',\n      provider,\n    })\n  }\n\n  const auth = await getAuthFromRequest(req)\n  if (!auth?.sub || !auth?.tenantId) {\n    return redirectWithFlash(req, DEFAULT_OAUTH_RETURN_URL, {\n      type: 'error',\n      code: 'unauthorized',\n      provider,\n    })\n  }\n\n  const adapter = getChannelAdapter(provider)\n  if (!adapter || typeof adapter.exchangeOAuthCode !== 'function') {\n    return redirectWithFlash(req, DEFAULT_OAUTH_RETURN_URL, {\n      type: 'error',\n      code: 'unknown_provider',\n      provider,\n    })\n  }\n\n  const cookieValue = req.headers.get('cookie') ?? ''\n  const stateCookie = parseCookie(cookieValue, COMMUNICATION_CHANNELS_OAUTH_STATE_COOKIE_NAME)\n\n  let statePayload\n  try {\n    statePayload = verifyOAuthState({\n      cookie: stateCookie,\n      expectedUserId: auth.sub as string,\n      expectedProviderKey: provider,\n      expectedState: stateParam,\n    })\n  } catch (err) {\n    const errCode = err instanceof OAuthStateError ? err.code : 'invalid_state'\n    return redirectWithFlash(req, DEFAULT_OAUTH_RETURN_URL, {\n      type: 'error',\n      code: errCode,\n      provider,\n    })\n  }\n\n  // Defense-in-depth: the signed state is minted for a specific tenant at\n  // initiate time and `verifyOAuthState` already binds it to `auth.sub`. Assert\n  // the session tenant matches too, so a token/session anomaly can never create\n  // a channel under a different tenant than the one that started the flow.\n  if (statePayload.tenantId !== auth.tenantId) {\n    return redirectWithFlash(req, DEFAULT_OAUTH_RETURN_URL, {\n      type: 'error',\n      code: 'tenant_mismatch',\n      provider,\n    })\n  }\n\n  const returnUrl = normalizeOAuthReturnUrl(statePayload.returnUrl, DEFAULT_OAUTH_RETURN_URL)\n\n  // Exchange the code via the adapter.\n  const container = await createRequestContainer()\n  const credentialsService = (() => {\n    try {\n      return container.resolve('integrationCredentialsService') as CredentialsServiceLike\n    } catch {\n      return null\n    }\n  })()\n  // Resolve the tenant's OAuth client app config from the `channel_<provider>`\n  // integration (userId = null). Same source the `initiate` route uses; a\n  // missing row means the provider was never configured, so bounce back with an\n  // actionable code rather than attempting an exchange with empty credentials.\n  const oauthClientCredentials = await resolveOAuthClientCredentials(credentialsService, provider, {\n    tenantId: statePayload.tenantId,\n    organizationId: statePayload.organizationId ?? null,\n  })\n  if (!oauthClientCredentials) {\n    return redirectWithFlash(req, returnUrl, {\n      type: 'error',\n      code: 'oauth_client_not_configured',\n      provider,\n    })\n  }\n\n  // Must byte-for-byte match the redirect_uri sent at authorize time (the\n  // `initiate` route), including behind a reverse proxy \u2014 derive it from the\n  // configured app origin rather than the raw request URL.\n  const redirectUri = toAbsoluteUrl(req, `/api/communication_channels/oauth/${provider}/callback`)\n\n  let exchange\n  try {\n    exchange = await adapter.exchangeOAuthCode({\n      code,\n      redirectUri,\n      credentials: oauthClientCredentials,\n      scope: {\n        tenantId: statePayload.tenantId,\n        organizationId: statePayload.organizationId ?? statePayload.tenantId,\n      },\n      stateExtra: statePayload.extra,\n    })\n  } catch (err) {\n    logger.warn(\n      'code exchange failed for provider',\n      { provider, err },\n    )\n    return redirectWithFlash(req, returnUrl, {\n      type: 'error',\n      code: 'exchange_failed',\n      provider,\n    })\n  }\n\n  // Persist the encrypted credentials under a per-user `integration_credentials`\n  // row, then create / update the per-user `CommunicationChannel`.\n  const em = (container.resolve('em') as EntityManager).fork()\n  // Per-user scope: pass `userId` so the credentials service writes to a\n  // user-scoped row instead of overwriting the tenant-wide row. Without this,\n  // two users on the same tenant share one credentials row (see review R2-C1\n  // / N1, 2026-05-26).\n  const credentialsScope = {\n    tenantId: statePayload.tenantId,\n    organizationId: statePayload.organizationId ?? statePayload.tenantId,\n    userId: auth.sub as string,\n  }\n  let credentialsRefId: string | null = null\n  let credentialsPersisted = false\n  if (credentialsService?.save) {\n    try {\n      // Save under a per-provider integration id namespace; per-user scoping is\n      // recorded on `IntegrationCredentials.user_id` via the `scope.userId`.\n      // Arg order MUST be (integrationId, credentials, scope) \u2014 matches the real\n      // CredentialsService signature; the legacy reversed order corrupted the\n      // saved row by writing the scope object into the credentials field.\n      await credentialsService.save(\n        `channel_${provider}`,\n        {\n          ...exchange.credentials,\n          userId: auth.sub,\n          expiresAt: exchange.expiresAt ? exchange.expiresAt.toISOString() : undefined,\n        },\n        credentialsScope,\n      )\n      credentialsPersisted = true\n    } catch (err) {\n      logger.warn(\n        'persisting credentials failed for provider',\n        { provider, err },\n      )\n    }\n  }\n  // Resolve the saved row's id so we can link `channel.credentialsRef` to it.\n  // `credentialsService.save` is `void`-returning by contract, so we re-find the\n  // row immediately afterwards. Best-effort \u2014 null is acceptable; the channel\n  // creation below will downgrade to `requires_reauth` so workers don't poll\n  // a credential-less channel.\n  if (credentialsPersisted) {\n    try {\n      const { IntegrationCredentials } = await import('@open-mercato/core/modules/integrations/data/entities')\n      const { findOneWithDecryption } = await import('@open-mercato/shared/lib/encryption/find')\n      const row = await findOneWithDecryption(\n        em,\n        IntegrationCredentials,\n        {\n          integrationId: `channel_${provider}`,\n          tenantId: credentialsScope.tenantId,\n          organizationId: credentialsScope.organizationId,\n          userId: credentialsScope.userId,\n          deletedAt: null,\n        },\n        undefined,\n        credentialsScope,\n      )\n      credentialsRefId = (row as { id?: string } | null)?.id ?? null\n    } catch {\n      credentialsRefId = null\n    }\n  }\n\n  const displayName =\n    exchange.displayName ?? exchange.externalIdentifier ?? `${provider} channel`\n  // Fail-safe: if credentials persistence failed (no `credentialsRef` available),\n  // create the channel in `requires_reauth` so workers don't poll a channel that\n  // has no usable credentials. The user can re-run the OAuth flow to recover\n  // (see review R2-H4 / F6, 2026-05-26).\n  const credentialsAvailable = credentialsRefId !== null\n  let channel\n  try {\n    channel = await createConnectedChannelRow({\n      em,\n      adapter,\n      providerKey: provider,\n      displayName,\n      externalIdentifier: exchange.externalIdentifier ?? null,\n      credentialsRefId,\n      userId: auth.sub as string,\n      scope: { tenantId: statePayload.tenantId, organizationId: statePayload.organizationId ?? null },\n    })\n  } catch (err) {\n    // Same mailbox already connected via another provider \u2014 don't create a second\n    // channel that double-ingests every message; send the user back with a flash.\n    if (err instanceof MailboxAlreadyConnectedError) {\n      logger.warn('mailbox already connected via another provider', { existingProviderKey: err.existingProviderKey })\n      return redirectWithFlash(req, returnUrl, {\n        type: 'error',\n        code: 'mailbox_already_connected',\n        provider,\n      })\n    }\n    throw err\n  }\n\n  // Spec C \u00A7 Phase C5 \u2014 best-effort push registration for OAuth providers\n  // that support it (Gmail). Same shape as the credential-connect\n  // path: failures persist as `pushStatus='failed'` on channelState and DO\n  // NOT fail the connect \u2014 polling fallback covers until the operator clicks\n  // \"Re-register push\" on the channels page.\n  const adapterSupportsPush =\n    typeof adapter.registerPush === 'function' && typeof adapter.unregisterPush === 'function'\n  if (\n    credentialsAvailable &&\n    adapterSupportsPush &&\n    statePayload.organizationId &&\n    provider === 'gmail'\n  ) {\n    try {\n      const { pushRegister } = await import('../../../../../commands/push-register')\n      await pushRegister({\n        container,\n        scope: {\n          tenantId: statePayload.tenantId,\n          organizationId: statePayload.organizationId,\n          userId: auth.sub as string,\n        },\n        input: { channelId: channel.id },\n      })\n    } catch (err) {\n      logger.warn(\n        'best-effort pushRegister failed for channel',\n        { channelId: channel.id, err },\n      )\n    }\n  }\n\n  return redirectWithFlash(req, returnUrl, {\n    type: 'connected',\n    provider,\n    channelId: channel.id,\n  })\n}\n\nfunction parseCookie(header: string, name: string): string | null {\n  if (!header) return null\n  const segments = header.split(';')\n  for (const segment of segments) {\n    const trimmed = segment.trim()\n    if (trimmed.startsWith(`${name}=`)) {\n      return decodeURIComponent(trimmed.slice(name.length + 1))\n    }\n  }\n  return null\n}\n\nexport const openApi = {\n  tags: ['CommunicationChannels'],\n  methods: {\n    GET: {\n      summary: 'OAuth callback \u2014 exchange code, persist credentials, create per-user channel',\n      tags: ['CommunicationChannels'],\n      responses: [\n        { status: 302, description: 'Redirect back to returnUrl with flash query params' },\n      ],\n    },\n  },\n}\nexport default GET\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,0BAA0B;AACnC,SAAS,eAAe,qBAAqB;AAC7C,SAAS,8BAA8B;AAEvC,SAAS,2BAA2B,oCAAoC;AACxE,SAAS,yBAAyB;AAClC,SAAS,qCAAqC;AAC9C;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,wBAAwB,EAAE,MAAM,EAAE,WAAW,iBAAiB,CAAC;AAEpF,MAAM,WAAW;AAAA,EACtB,MAAM;AAAA;AAAA;AAAA,EAGN,KAAK,EAAE,aAAa,KAAK;AAC3B;AAkBA,SAAS,kBACP,KACA,WACA,OACU;AACV,QAAM,OAAO,IAAI;AAAA,IACf,wBAAwB,WAAW,wBAAwB;AAAA,IAC3D,cAAc,GAAG;AAAA,EACnB;AACA,OAAK,aAAa,IAAI,SAAS,MAAM,IAAI;AACzC,MAAI,MAAM,KAAM,MAAK,aAAa,IAAI,QAAQ,MAAM,IAAI;AACxD,MAAI,MAAM,SAAU,MAAK,aAAa,IAAI,YAAY,MAAM,QAAQ;AACpE,MAAI,MAAM,UAAW,MAAK,aAAa,IAAI,aAAa,MAAM,SAAS;AACvE,QAAM,WAAW,aAAa,SAAS,KAAK,SAAS,GAAG,GAAG;AAC3D,WAAS,QAAQ,IAAI;AAAA,IACnB,MAAM;AAAA,IACN,OAAO;AAAA,IACP,UAAU;AAAA,IACV,QAAQ,QAAQ,IAAI,aAAa;AAAA,IACjC,UAAU;AAAA,IACV,MAAM;AAAA,IACN,QAAQ;AAAA,EACV,CAAC;AACD,SAAO;AACT;AAEA,eAAsB,IAAI,KAAc,SAA0C;AAChF,QAAM,EAAE,SAAS,IAAI,MAAM,QAAQ;AACnC,QAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAC3B,QAAM,OAAO,IAAI,aAAa,IAAI,MAAM,KAAK;AAC7C,QAAM,aAAa,IAAI,aAAa,IAAI,OAAO,KAAK;AACpD,QAAM,QAAQ,IAAI,aAAa,IAAI,OAAO;AAE1C,MAAI,OAAO;AACT,WAAO,kBAAkB,KAAK,0BAA0B,EAAE,MAAM,SAAS,MAAM,OAAO,SAAS,CAAC;AAAA,EAClG;AACA,MAAI,CAAC,QAAQ,CAAC,YAAY;AACxB,WAAO,kBAAkB,KAAK,0BAA0B;AAAA,MACtD,MAAM;AAAA,MACN,MAAM;AAAA,MACN;AAAA,IACF,CAAC;AAAA,EACH;AAEA,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM,OAAO,CAAC,MAAM,UAAU;AACjC,WAAO,kBAAkB,KAAK,0BAA0B;AAAA,MACtD,MAAM;AAAA,MACN,MAAM;AAAA,MACN;AAAA,IACF,CAAC;AAAA,EACH;AAEA,QAAM,UAAU,kBAAkB,QAAQ;AAC1C,MAAI,CAAC,WAAW,OAAO,QAAQ,sBAAsB,YAAY;AAC/D,WAAO,kBAAkB,KAAK,0BAA0B;AAAA,MACtD,MAAM;AAAA,MACN,MAAM;AAAA,MACN;AAAA,IACF,CAAC;AAAA,EACH;AAEA,QAAM,cAAc,IAAI,QAAQ,IAAI,QAAQ,KAAK;AACjD,QAAM,cAAc,YAAY,aAAa,8CAA8C;AAE3F,MAAI;AACJ,MAAI;AACF,mBAAe,iBAAiB;AAAA,MAC9B,QAAQ;AAAA,MACR,gBAAgB,KAAK;AAAA,MACrB,qBAAqB;AAAA,MACrB,eAAe;AAAA,IACjB,CAAC;AAAA,EACH,SAAS,KAAK;AACZ,UAAM,UAAU,eAAe,kBAAkB,IAAI,OAAO;AAC5D,WAAO,kBAAkB,KAAK,0BAA0B;AAAA,MACtD,MAAM;AAAA,MACN,MAAM;AAAA,MACN;AAAA,IACF,CAAC;AAAA,EACH;AAMA,MAAI,aAAa,aAAa,KAAK,UAAU;AAC3C,WAAO,kBAAkB,KAAK,0BAA0B;AAAA,MACtD,MAAM;AAAA,MACN,MAAM;AAAA,MACN;AAAA,IACF,CAAC;AAAA,EACH;AAEA,QAAM,YAAY,wBAAwB,aAAa,WAAW,wBAAwB;AAG1F,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,sBAAsB,MAAM;AAChC,QAAI;AACF,aAAO,UAAU,QAAQ,+BAA+B;AAAA,IAC1D,QAAQ;AACN,aAAO;AAAA,IACT;AAAA,EACF,GAAG;AAKH,QAAM,yBAAyB,MAAM,8BAA8B,oBAAoB,UAAU;AAAA,IAC/F,UAAU,aAAa;AAAA,IACvB,gBAAgB,aAAa,kBAAkB;AAAA,EACjD,CAAC;AACD,MAAI,CAAC,wBAAwB;AAC3B,WAAO,kBAAkB,KAAK,WAAW;AAAA,MACvC,MAAM;AAAA,MACN,MAAM;AAAA,MACN;AAAA,IACF,CAAC;AAAA,EACH;AAKA,QAAM,cAAc,cAAc,KAAK,qCAAqC,QAAQ,WAAW;AAE/F,MAAI;AACJ,MAAI;AACF,eAAW,MAAM,QAAQ,kBAAkB;AAAA,MACzC;AAAA,MACA;AAAA,MACA,aAAa;AAAA,MACb,OAAO;AAAA,QACL,UAAU,aAAa;AAAA,QACvB,gBAAgB,aAAa,kBAAkB,aAAa;AAAA,MAC9D;AAAA,MACA,YAAY,aAAa;AAAA,IAC3B,CAAC;AAAA,EACH,SAAS,KAAK;AACZ,WAAO;AAAA,MACL;AAAA,MACA,EAAE,UAAU,IAAI;AAAA,IAClB;AACA,WAAO,kBAAkB,KAAK,WAAW;AAAA,MACvC,MAAM;AAAA,MACN,MAAM;AAAA,MACN;AAAA,IACF,CAAC;AAAA,EACH;AAIA,QAAM,KAAM,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAK3D,QAAM,mBAAmB;AAAA,IACvB,UAAU,aAAa;AAAA,IACvB,gBAAgB,aAAa,kBAAkB,aAAa;AAAA,IAC5D,QAAQ,KAAK;AAAA,EACf;AACA,MAAI,mBAAkC;AACtC,MAAI,uBAAuB;AAC3B,MAAI,oBAAoB,MAAM;AAC5B,QAAI;AAMF,YAAM,mBAAmB;AAAA,QACvB,WAAW,QAAQ;AAAA,QACnB;AAAA,UACE,GAAG,SAAS;AAAA,UACZ,QAAQ,KAAK;AAAA,UACb,WAAW,SAAS,YAAY,SAAS,UAAU,YAAY,IAAI;AAAA,QACrE;AAAA,QACA;AAAA,MACF;AACA,6BAAuB;AAAA,IACzB,SAAS,KAAK;AACZ,aAAO;AAAA,QACL;AAAA,QACA,EAAE,UAAU,IAAI;AAAA,MAClB;AAAA,IACF;AAAA,EACF;AAMA,MAAI,sBAAsB;AACxB,QAAI;AACF,YAAM,EAAE,uBAAuB,IAAI,MAAM,OAAO,uDAAuD;AACvG,YAAM,EAAE,sBAAsB,IAAI,MAAM,OAAO,0CAA0C;AACzF,YAAM,MAAM,MAAM;AAAA,QAChB;AAAA,QACA;AAAA,QACA;AAAA,UACE,eAAe,WAAW,QAAQ;AAAA,UAClC,UAAU,iBAAiB;AAAA,UAC3B,gBAAgB,iBAAiB;AAAA,UACjC,QAAQ,iBAAiB;AAAA,UACzB,WAAW;AAAA,QACb;AAAA,QACA;AAAA,QACA;AAAA,MACF;AACA,yBAAoB,KAAgC,MAAM;AAAA,IAC5D,QAAQ;AACN,yBAAmB;AAAA,IACrB;AAAA,EACF;AAEA,QAAM,cACJ,SAAS,eAAe,SAAS,sBAAsB,GAAG,QAAQ;AAKpE,QAAM,uBAAuB,qBAAqB;AAClD,MAAI;AACJ,MAAI;AACF,cAAU,MAAM,0BAA0B;AAAA,MACxC;AAAA,MACA;AAAA,MACA,aAAa;AAAA,MACb;AAAA,MACA,oBAAoB,SAAS,sBAAsB;AAAA,MACnD;AAAA,MACA,QAAQ,KAAK;AAAA,MACb,OAAO,EAAE,UAAU,aAAa,UAAU,gBAAgB,aAAa,kBAAkB,KAAK;AAAA,IAChG,CAAC;AAAA,EACH,SAAS,KAAK;AAGZ,QAAI,eAAe,8BAA8B;AAC/C,aAAO,KAAK,kDAAkD,EAAE,qBAAqB,IAAI,oBAAoB,CAAC;AAC9G,aAAO,kBAAkB,KAAK,WAAW;AAAA,QACvC,MAAM;AAAA,QACN,MAAM;AAAA,QACN;AAAA,MACF,CAAC;AAAA,IACH;AACA,UAAM;AAAA,EACR;AAOA,QAAM,sBACJ,OAAO,QAAQ,iBAAiB,cAAc,OAAO,QAAQ,mBAAmB;AAClF,MACE,wBACA,uBACA,aAAa,kBACb,aAAa,SACb;AACA,QAAI;AACF,YAAM,EAAE,aAAa,IAAI,MAAM,OAAO,uCAAuC;AAC7E,YAAM,aAAa;AAAA,QACjB;AAAA,QACA,OAAO;AAAA,UACL,UAAU,aAAa;AAAA,UACvB,gBAAgB,aAAa;AAAA,UAC7B,QAAQ,KAAK;AAAA,QACf;AAAA,QACA,OAAO,EAAE,WAAW,QAAQ,GAAG;AAAA,MACjC,CAAC;AAAA,IACH,SAAS,KAAK;AACZ,aAAO;AAAA,QACL;AAAA,QACA,EAAE,WAAW,QAAQ,IAAI,IAAI;AAAA,MAC/B;AAAA,IACF;AAAA,EACF;AAEA,SAAO,kBAAkB,KAAK,WAAW;AAAA,IACvC,MAAM;AAAA,IACN;AAAA,IACA,WAAW,QAAQ;AAAA,EACrB,CAAC;AACH;AAEA,SAAS,YAAY,QAAgB,MAA6B;AAChE,MAAI,CAAC,OAAQ,QAAO;AACpB,QAAM,WAAW,OAAO,MAAM,GAAG;AACjC,aAAW,WAAW,UAAU;AAC9B,UAAM,UAAU,QAAQ,KAAK;AAC7B,QAAI,QAAQ,WAAW,GAAG,IAAI,GAAG,GAAG;AAClC,aAAO,mBAAmB,QAAQ,MAAM,KAAK,SAAS,CAAC,CAAC;AAAA,IAC1D;AAAA,EACF;AACA,SAAO;AACT;AAEO,MAAM,UAAU;AAAA,EACrB,MAAM,CAAC,uBAAuB;AAAA,EAC9B,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,MAAM,CAAC,uBAAuB;AAAA,MAC9B,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,qDAAqD;AAAA,MACnF;AAAA,IACF;AAAA,EACF;AACF;AACA,IAAO,gBAAQ;",
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { getAppBaseUrl, toAbsoluteUrl } from '@open-mercato/shared/lib/url'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { createConnectedChannelRow, MailboxAlreadyConnectedError } from '../../../../../lib/connect-channel'\nimport { getChannelAdapter } from '../../../../../lib/adapter-registry-singleton'\nimport { resolveOAuthClientCredentials } from '../../../../../lib/oauth-client-config'\nimport {\n  COMMUNICATION_CHANNELS_OAUTH_STATE_COOKIE_NAME,\n  consumeOAuthStateOnce,\n  DEFAULT_OAUTH_RETURN_URL,\n  normalizeOAuthReturnUrl,\n  OAuthStateError,\n  verifyOAuthState,\n  type OAuthStateConsumeStore,\n} from '../../../../../lib/oauth-state'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('communication_channels').child({ component: 'oauth-callback' })\n\nexport const metadata = {\n  path: '/communication_channels/oauth/[provider]/callback',\n  // No auth feature gate \u2014 the state cookie carries identity. The route still\n  // verifies the session below to bind the callback to its initiator.\n  GET: { requireAuth: true },\n}\n\ntype RouteContext = {\n  params: Promise<{ provider: string }> | { provider: string }\n}\n\ntype CredentialsServiceLike = {\n  resolve: (\n    integrationId: string,\n    scope: { organizationId: string; tenantId: string; userId?: string | null },\n  ) => Promise<Record<string, unknown> | null>\n  save?: (\n    integrationId: string,\n    credentials: Record<string, unknown>,\n    scope: { organizationId: string; tenantId: string; userId?: string | null },\n  ) => Promise<void>\n}\n\nfunction redirectWithFlash(\n  req: Request,\n  returnUrl: string,\n  flash: { type: 'connected' | 'error'; code?: string; provider?: string; channelId?: string },\n): Response {\n  const base = new URL(\n    normalizeOAuthReturnUrl(returnUrl, DEFAULT_OAUTH_RETURN_URL),\n    getAppBaseUrl(req),\n  )\n  base.searchParams.set('flash', flash.type)\n  if (flash.code) base.searchParams.set('code', flash.code)\n  if (flash.provider) base.searchParams.set('provider', flash.provider)\n  if (flash.channelId) base.searchParams.set('channelId', flash.channelId)\n  const response = NextResponse.redirect(base.toString(), 302)\n  response.cookies.set({\n    name: COMMUNICATION_CHANNELS_OAUTH_STATE_COOKIE_NAME,\n    value: '',\n    httpOnly: true,\n    secure: process.env.NODE_ENV === 'production',\n    sameSite: 'lax',\n    path: '/',\n    maxAge: 0,\n  })\n  return response\n}\n\nexport async function GET(req: Request, context: RouteContext): Promise<Response> {\n  const { provider } = await context.params\n  const url = new URL(req.url)\n  const code = url.searchParams.get('code') ?? ''\n  const stateParam = url.searchParams.get('state') ?? ''\n  const error = url.searchParams.get('error')\n\n  if (error) {\n    return redirectWithFlash(req, DEFAULT_OAUTH_RETURN_URL, { type: 'error', code: error, provider })\n  }\n  if (!code || !stateParam) {\n    return redirectWithFlash(req, DEFAULT_OAUTH_RETURN_URL, {\n      type: 'error',\n      code: 'missing_code_or_state',\n      provider,\n    })\n  }\n\n  const auth = await getAuthFromRequest(req)\n  if (!auth?.sub || !auth?.tenantId) {\n    return redirectWithFlash(req, DEFAULT_OAUTH_RETURN_URL, {\n      type: 'error',\n      code: 'unauthorized',\n      provider,\n    })\n  }\n\n  const adapter = getChannelAdapter(provider)\n  if (!adapter || typeof adapter.exchangeOAuthCode !== 'function') {\n    return redirectWithFlash(req, DEFAULT_OAUTH_RETURN_URL, {\n      type: 'error',\n      code: 'unknown_provider',\n      provider,\n    })\n  }\n\n  const cookieValue = req.headers.get('cookie') ?? ''\n  const stateCookie = parseCookie(cookieValue, COMMUNICATION_CHANNELS_OAUTH_STATE_COOKIE_NAME)\n\n  let statePayload\n  try {\n    statePayload = verifyOAuthState({\n      cookie: stateCookie,\n      expectedUserId: auth.sub as string,\n      expectedProviderKey: provider,\n      expectedState: stateParam,\n    })\n  } catch (err) {\n    const errCode = err instanceof OAuthStateError ? err.code : 'invalid_state'\n    return redirectWithFlash(req, DEFAULT_OAUTH_RETURN_URL, {\n      type: 'error',\n      code: errCode,\n      provider,\n    })\n  }\n\n  // Defense-in-depth: the signed state is minted for a specific tenant at\n  // initiate time and `verifyOAuthState` already binds it to `auth.sub`. Assert\n  // the session tenant matches too, so a token/session anomaly can never create\n  // a channel under a different tenant than the one that started the flow.\n  if (statePayload.tenantId !== auth.tenantId) {\n    return redirectWithFlash(req, DEFAULT_OAUTH_RETURN_URL, {\n      type: 'error',\n      code: 'tenant_mismatch',\n      provider,\n    })\n  }\n\n  const returnUrl = normalizeOAuthReturnUrl(statePayload.returnUrl, DEFAULT_OAUTH_RETURN_URL)\n\n  // Exchange the code via the adapter.\n  const container = await createRequestContainer()\n\n  // Single-use consume: reject a captured valid cookie replayed within the TTL.\n  const resolved = (() => { try { return container.resolve('cache') } catch { return null } })()\n  if (\n    !resolved ||\n    typeof (resolved as OAuthStateConsumeStore).has !== 'function' ||\n    typeof (resolved as OAuthStateConsumeStore).set !== 'function'\n  ) {\n    return redirectWithFlash(req, returnUrl, { type: 'error', code: 'state_store_unavailable', provider })\n  }\n  const oauthStateStore = resolved as OAuthStateConsumeStore\n  try {\n    await consumeOAuthStateOnce(oauthStateStore, statePayload)\n  } catch (err) {\n    const errCode = err instanceof OAuthStateError ? err.code : 'invalid_state'\n    return redirectWithFlash(req, returnUrl, {\n      type: 'error',\n      code: errCode,\n      provider,\n    })\n  }\n  const credentialsService = (() => {\n    try {\n      return container.resolve('integrationCredentialsService') as CredentialsServiceLike\n    } catch {\n      return null\n    }\n  })()\n  // Resolve the tenant's OAuth client app config from the `channel_<provider>`\n  // integration (userId = null). Same source the `initiate` route uses; a\n  // missing row means the provider was never configured, so bounce back with an\n  // actionable code rather than attempting an exchange with empty credentials.\n  const oauthClientCredentials = await resolveOAuthClientCredentials(credentialsService, provider, {\n    tenantId: statePayload.tenantId,\n    organizationId: statePayload.organizationId ?? null,\n  })\n  if (!oauthClientCredentials) {\n    return redirectWithFlash(req, returnUrl, {\n      type: 'error',\n      code: 'oauth_client_not_configured',\n      provider,\n    })\n  }\n\n  // Must byte-for-byte match the redirect_uri sent at authorize time (the\n  // `initiate` route), including behind a reverse proxy \u2014 derive it from the\n  // configured app origin rather than the raw request URL.\n  const redirectUri = toAbsoluteUrl(req, `/api/communication_channels/oauth/${provider}/callback`)\n\n  let exchange\n  try {\n    exchange = await adapter.exchangeOAuthCode({\n      code,\n      redirectUri,\n      credentials: oauthClientCredentials,\n      scope: {\n        tenantId: statePayload.tenantId,\n        organizationId: statePayload.organizationId ?? statePayload.tenantId,\n      },\n      stateExtra: statePayload.extra,\n    })\n  } catch (err) {\n    logger.warn(\n      'code exchange failed for provider',\n      { provider, err },\n    )\n    return redirectWithFlash(req, returnUrl, {\n      type: 'error',\n      code: 'exchange_failed',\n      provider,\n    })\n  }\n\n  // Persist the encrypted credentials under a per-user `integration_credentials`\n  // row, then create / update the per-user `CommunicationChannel`.\n  const em = (container.resolve('em') as EntityManager).fork()\n  // Per-user scope: pass `userId` so the credentials service writes to a\n  // user-scoped row instead of overwriting the tenant-wide row. Without this,\n  // two users on the same tenant share one credentials row (see review R2-C1\n  // / N1, 2026-05-26).\n  const credentialsScope = {\n    tenantId: statePayload.tenantId,\n    organizationId: statePayload.organizationId ?? statePayload.tenantId,\n    userId: auth.sub as string,\n  }\n  let credentialsRefId: string | null = null\n  let credentialsPersisted = false\n  if (credentialsService?.save) {\n    try {\n      // Save under a per-provider integration id namespace; per-user scoping is\n      // recorded on `IntegrationCredentials.user_id` via the `scope.userId`.\n      // Arg order MUST be (integrationId, credentials, scope) \u2014 matches the real\n      // CredentialsService signature; the legacy reversed order corrupted the\n      // saved row by writing the scope object into the credentials field.\n      await credentialsService.save(\n        `channel_${provider}`,\n        {\n          ...exchange.credentials,\n          userId: auth.sub,\n          expiresAt: exchange.expiresAt ? exchange.expiresAt.toISOString() : undefined,\n        },\n        credentialsScope,\n      )\n      credentialsPersisted = true\n    } catch (err) {\n      logger.warn(\n        'persisting credentials failed for provider',\n        { provider, err },\n      )\n    }\n  }\n  // Resolve the saved row's id so we can link `channel.credentialsRef` to it.\n  // `credentialsService.save` is `void`-returning by contract, so we re-find the\n  // row immediately afterwards. Best-effort \u2014 null is acceptable; the channel\n  // creation below will downgrade to `requires_reauth` so workers don't poll\n  // a credential-less channel.\n  if (credentialsPersisted) {\n    try {\n      const { IntegrationCredentials } = await import('@open-mercato/core/modules/integrations/data/entities')\n      const { findOneWithDecryption } = await import('@open-mercato/shared/lib/encryption/find')\n      const row = await findOneWithDecryption(\n        em,\n        IntegrationCredentials,\n        {\n          integrationId: `channel_${provider}`,\n          tenantId: credentialsScope.tenantId,\n          organizationId: credentialsScope.organizationId,\n          userId: credentialsScope.userId,\n          deletedAt: null,\n        },\n        undefined,\n        credentialsScope,\n      )\n      credentialsRefId = (row as { id?: string } | null)?.id ?? null\n    } catch {\n      credentialsRefId = null\n    }\n  }\n\n  const displayName =\n    exchange.displayName ?? exchange.externalIdentifier ?? `${provider} channel`\n  // Fail-safe: if credentials persistence failed (no `credentialsRef` available),\n  // create the channel in `requires_reauth` so workers don't poll a channel that\n  // has no usable credentials. The user can re-run the OAuth flow to recover\n  // (see review R2-H4 / F6, 2026-05-26).\n  const credentialsAvailable = credentialsRefId !== null\n  let channel\n  try {\n    channel = await createConnectedChannelRow({\n      em,\n      adapter,\n      providerKey: provider,\n      displayName,\n      externalIdentifier: exchange.externalIdentifier ?? null,\n      credentialsRefId,\n      userId: auth.sub as string,\n      scope: { tenantId: statePayload.tenantId, organizationId: statePayload.organizationId ?? null },\n    })\n  } catch (err) {\n    // Same mailbox already connected via another provider \u2014 don't create a second\n    // channel that double-ingests every message; send the user back with a flash.\n    if (err instanceof MailboxAlreadyConnectedError) {\n      logger.warn('mailbox already connected via another provider', { existingProviderKey: err.existingProviderKey })\n      return redirectWithFlash(req, returnUrl, {\n        type: 'error',\n        code: 'mailbox_already_connected',\n        provider,\n      })\n    }\n    throw err\n  }\n\n  // Spec C \u00A7 Phase C5 \u2014 best-effort push registration for OAuth providers\n  // that support it (Gmail). Same shape as the credential-connect\n  // path: failures persist as `pushStatus='failed'` on channelState and DO\n  // NOT fail the connect \u2014 polling fallback covers until the operator clicks\n  // \"Re-register push\" on the channels page.\n  const adapterSupportsPush =\n    typeof adapter.registerPush === 'function' && typeof adapter.unregisterPush === 'function'\n  if (\n    credentialsAvailable &&\n    adapterSupportsPush &&\n    statePayload.organizationId &&\n    provider === 'gmail'\n  ) {\n    try {\n      const { pushRegister } = await import('../../../../../commands/push-register')\n      await pushRegister({\n        container,\n        scope: {\n          tenantId: statePayload.tenantId,\n          organizationId: statePayload.organizationId,\n          userId: auth.sub as string,\n        },\n        input: { channelId: channel.id },\n      })\n    } catch (err) {\n      logger.warn(\n        'best-effort pushRegister failed for channel',\n        { channelId: channel.id, err },\n      )\n    }\n  }\n\n  return redirectWithFlash(req, returnUrl, {\n    type: 'connected',\n    provider,\n    channelId: channel.id,\n  })\n}\n\nfunction parseCookie(header: string, name: string): string | null {\n  if (!header) return null\n  const segments = header.split(';')\n  for (const segment of segments) {\n    const trimmed = segment.trim()\n    if (trimmed.startsWith(`${name}=`)) {\n      return decodeURIComponent(trimmed.slice(name.length + 1))\n    }\n  }\n  return null\n}\n\nexport const openApi = {\n  tags: ['CommunicationChannels'],\n  methods: {\n    GET: {\n      summary: 'OAuth callback \u2014 exchange code, persist credentials, create per-user channel',\n      tags: ['CommunicationChannels'],\n      responses: [\n        { status: 302, description: 'Redirect back to returnUrl with flash query params' },\n      ],\n    },\n  },\n}\nexport default GET\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,0BAA0B;AACnC,SAAS,eAAe,qBAAqB;AAC7C,SAAS,8BAA8B;AAEvC,SAAS,2BAA2B,oCAAoC;AACxE,SAAS,yBAAyB;AAClC,SAAS,qCAAqC;AAC9C;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAEK;AACP,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,wBAAwB,EAAE,MAAM,EAAE,WAAW,iBAAiB,CAAC;AAEpF,MAAM,WAAW;AAAA,EACtB,MAAM;AAAA;AAAA;AAAA,EAGN,KAAK,EAAE,aAAa,KAAK;AAC3B;AAkBA,SAAS,kBACP,KACA,WACA,OACU;AACV,QAAM,OAAO,IAAI;AAAA,IACf,wBAAwB,WAAW,wBAAwB;AAAA,IAC3D,cAAc,GAAG;AAAA,EACnB;AACA,OAAK,aAAa,IAAI,SAAS,MAAM,IAAI;AACzC,MAAI,MAAM,KAAM,MAAK,aAAa,IAAI,QAAQ,MAAM,IAAI;AACxD,MAAI,MAAM,SAAU,MAAK,aAAa,IAAI,YAAY,MAAM,QAAQ;AACpE,MAAI,MAAM,UAAW,MAAK,aAAa,IAAI,aAAa,MAAM,SAAS;AACvE,QAAM,WAAW,aAAa,SAAS,KAAK,SAAS,GAAG,GAAG;AAC3D,WAAS,QAAQ,IAAI;AAAA,IACnB,MAAM;AAAA,IACN,OAAO;AAAA,IACP,UAAU;AAAA,IACV,QAAQ,QAAQ,IAAI,aAAa;AAAA,IACjC,UAAU;AAAA,IACV,MAAM;AAAA,IACN,QAAQ;AAAA,EACV,CAAC;AACD,SAAO;AACT;AAEA,eAAsB,IAAI,KAAc,SAA0C;AAChF,QAAM,EAAE,SAAS,IAAI,MAAM,QAAQ;AACnC,QAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAC3B,QAAM,OAAO,IAAI,aAAa,IAAI,MAAM,KAAK;AAC7C,QAAM,aAAa,IAAI,aAAa,IAAI,OAAO,KAAK;AACpD,QAAM,QAAQ,IAAI,aAAa,IAAI,OAAO;AAE1C,MAAI,OAAO;AACT,WAAO,kBAAkB,KAAK,0BAA0B,EAAE,MAAM,SAAS,MAAM,OAAO,SAAS,CAAC;AAAA,EAClG;AACA,MAAI,CAAC,QAAQ,CAAC,YAAY;AACxB,WAAO,kBAAkB,KAAK,0BAA0B;AAAA,MACtD,MAAM;AAAA,MACN,MAAM;AAAA,MACN;AAAA,IACF,CAAC;AAAA,EACH;AAEA,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM,OAAO,CAAC,MAAM,UAAU;AACjC,WAAO,kBAAkB,KAAK,0BAA0B;AAAA,MACtD,MAAM;AAAA,MACN,MAAM;AAAA,MACN;AAAA,IACF,CAAC;AAAA,EACH;AAEA,QAAM,UAAU,kBAAkB,QAAQ;AAC1C,MAAI,CAAC,WAAW,OAAO,QAAQ,sBAAsB,YAAY;AAC/D,WAAO,kBAAkB,KAAK,0BAA0B;AAAA,MACtD,MAAM;AAAA,MACN,MAAM;AAAA,MACN;AAAA,IACF,CAAC;AAAA,EACH;AAEA,QAAM,cAAc,IAAI,QAAQ,IAAI,QAAQ,KAAK;AACjD,QAAM,cAAc,YAAY,aAAa,8CAA8C;AAE3F,MAAI;AACJ,MAAI;AACF,mBAAe,iBAAiB;AAAA,MAC9B,QAAQ;AAAA,MACR,gBAAgB,KAAK;AAAA,MACrB,qBAAqB;AAAA,MACrB,eAAe;AAAA,IACjB,CAAC;AAAA,EACH,SAAS,KAAK;AACZ,UAAM,UAAU,eAAe,kBAAkB,IAAI,OAAO;AAC5D,WAAO,kBAAkB,KAAK,0BAA0B;AAAA,MACtD,MAAM;AAAA,MACN,MAAM;AAAA,MACN;AAAA,IACF,CAAC;AAAA,EACH;AAMA,MAAI,aAAa,aAAa,KAAK,UAAU;AAC3C,WAAO,kBAAkB,KAAK,0BAA0B;AAAA,MACtD,MAAM;AAAA,MACN,MAAM;AAAA,MACN;AAAA,IACF,CAAC;AAAA,EACH;AAEA,QAAM,YAAY,wBAAwB,aAAa,WAAW,wBAAwB;AAG1F,QAAM,YAAY,MAAM,uBAAuB;AAG/C,QAAM,YAAY,MAAM;AAAE,QAAI;AAAE,aAAO,UAAU,QAAQ,OAAO;AAAA,IAAE,QAAQ;AAAE,aAAO;AAAA,IAAK;AAAA,EAAE,GAAG;AAC7F,MACE,CAAC,YACD,OAAQ,SAAoC,QAAQ,cACpD,OAAQ,SAAoC,QAAQ,YACpD;AACA,WAAO,kBAAkB,KAAK,WAAW,EAAE,MAAM,SAAS,MAAM,2BAA2B,SAAS,CAAC;AAAA,EACvG;AACA,QAAM,kBAAkB;AACxB,MAAI;AACF,UAAM,sBAAsB,iBAAiB,YAAY;AAAA,EAC3D,SAAS,KAAK;AACZ,UAAM,UAAU,eAAe,kBAAkB,IAAI,OAAO;AAC5D,WAAO,kBAAkB,KAAK,WAAW;AAAA,MACvC,MAAM;AAAA,MACN,MAAM;AAAA,MACN;AAAA,IACF,CAAC;AAAA,EACH;AACA,QAAM,sBAAsB,MAAM;AAChC,QAAI;AACF,aAAO,UAAU,QAAQ,+BAA+B;AAAA,IAC1D,QAAQ;AACN,aAAO;AAAA,IACT;AAAA,EACF,GAAG;AAKH,QAAM,yBAAyB,MAAM,8BAA8B,oBAAoB,UAAU;AAAA,IAC/F,UAAU,aAAa;AAAA,IACvB,gBAAgB,aAAa,kBAAkB;AAAA,EACjD,CAAC;AACD,MAAI,CAAC,wBAAwB;AAC3B,WAAO,kBAAkB,KAAK,WAAW;AAAA,MACvC,MAAM;AAAA,MACN,MAAM;AAAA,MACN;AAAA,IACF,CAAC;AAAA,EACH;AAKA,QAAM,cAAc,cAAc,KAAK,qCAAqC,QAAQ,WAAW;AAE/F,MAAI;AACJ,MAAI;AACF,eAAW,MAAM,QAAQ,kBAAkB;AAAA,MACzC;AAAA,MACA;AAAA,MACA,aAAa;AAAA,MACb,OAAO;AAAA,QACL,UAAU,aAAa;AAAA,QACvB,gBAAgB,aAAa,kBAAkB,aAAa;AAAA,MAC9D;AAAA,MACA,YAAY,aAAa;AAAA,IAC3B,CAAC;AAAA,EACH,SAAS,KAAK;AACZ,WAAO;AAAA,MACL;AAAA,MACA,EAAE,UAAU,IAAI;AAAA,IAClB;AACA,WAAO,kBAAkB,KAAK,WAAW;AAAA,MACvC,MAAM;AAAA,MACN,MAAM;AAAA,MACN;AAAA,IACF,CAAC;AAAA,EACH;AAIA,QAAM,KAAM,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAK3D,QAAM,mBAAmB;AAAA,IACvB,UAAU,aAAa;AAAA,IACvB,gBAAgB,aAAa,kBAAkB,aAAa;AAAA,IAC5D,QAAQ,KAAK;AAAA,EACf;AACA,MAAI,mBAAkC;AACtC,MAAI,uBAAuB;AAC3B,MAAI,oBAAoB,MAAM;AAC5B,QAAI;AAMF,YAAM,mBAAmB;AAAA,QACvB,WAAW,QAAQ;AAAA,QACnB;AAAA,UACE,GAAG,SAAS;AAAA,UACZ,QAAQ,KAAK;AAAA,UACb,WAAW,SAAS,YAAY,SAAS,UAAU,YAAY,IAAI;AAAA,QACrE;AAAA,QACA;AAAA,MACF;AACA,6BAAuB;AAAA,IACzB,SAAS,KAAK;AACZ,aAAO;AAAA,QACL;AAAA,QACA,EAAE,UAAU,IAAI;AAAA,MAClB;AAAA,IACF;AAAA,EACF;AAMA,MAAI,sBAAsB;AACxB,QAAI;AACF,YAAM,EAAE,uBAAuB,IAAI,MAAM,OAAO,uDAAuD;AACvG,YAAM,EAAE,sBAAsB,IAAI,MAAM,OAAO,0CAA0C;AACzF,YAAM,MAAM,MAAM;AAAA,QAChB;AAAA,QACA;AAAA,QACA;AAAA,UACE,eAAe,WAAW,QAAQ;AAAA,UAClC,UAAU,iBAAiB;AAAA,UAC3B,gBAAgB,iBAAiB;AAAA,UACjC,QAAQ,iBAAiB;AAAA,UACzB,WAAW;AAAA,QACb;AAAA,QACA;AAAA,QACA;AAAA,MACF;AACA,yBAAoB,KAAgC,MAAM;AAAA,IAC5D,QAAQ;AACN,yBAAmB;AAAA,IACrB;AAAA,EACF;AAEA,QAAM,cACJ,SAAS,eAAe,SAAS,sBAAsB,GAAG,QAAQ;AAKpE,QAAM,uBAAuB,qBAAqB;AAClD,MAAI;AACJ,MAAI;AACF,cAAU,MAAM,0BAA0B;AAAA,MACxC;AAAA,MACA;AAAA,MACA,aAAa;AAAA,MACb;AAAA,MACA,oBAAoB,SAAS,sBAAsB;AAAA,MACnD;AAAA,MACA,QAAQ,KAAK;AAAA,MACb,OAAO,EAAE,UAAU,aAAa,UAAU,gBAAgB,aAAa,kBAAkB,KAAK;AAAA,IAChG,CAAC;AAAA,EACH,SAAS,KAAK;AAGZ,QAAI,eAAe,8BAA8B;AAC/C,aAAO,KAAK,kDAAkD,EAAE,qBAAqB,IAAI,oBAAoB,CAAC;AAC9G,aAAO,kBAAkB,KAAK,WAAW;AAAA,QACvC,MAAM;AAAA,QACN,MAAM;AAAA,QACN;AAAA,MACF,CAAC;AAAA,IACH;AACA,UAAM;AAAA,EACR;AAOA,QAAM,sBACJ,OAAO,QAAQ,iBAAiB,cAAc,OAAO,QAAQ,mBAAmB;AAClF,MACE,wBACA,uBACA,aAAa,kBACb,aAAa,SACb;AACA,QAAI;AACF,YAAM,EAAE,aAAa,IAAI,MAAM,OAAO,uCAAuC;AAC7E,YAAM,aAAa;AAAA,QACjB;AAAA,QACA,OAAO;AAAA,UACL,UAAU,aAAa;AAAA,UACvB,gBAAgB,aAAa;AAAA,UAC7B,QAAQ,KAAK;AAAA,QACf;AAAA,QACA,OAAO,EAAE,WAAW,QAAQ,GAAG;AAAA,MACjC,CAAC;AAAA,IACH,SAAS,KAAK;AACZ,aAAO;AAAA,QACL;AAAA,QACA,EAAE,WAAW,QAAQ,IAAI,IAAI;AAAA,MAC/B;AAAA,IACF;AAAA,EACF;AAEA,SAAO,kBAAkB,KAAK,WAAW;AAAA,IACvC,MAAM;AAAA,IACN;AAAA,IACA,WAAW,QAAQ;AAAA,EACrB,CAAC;AACH;AAEA,SAAS,YAAY,QAAgB,MAA6B;AAChE,MAAI,CAAC,OAAQ,QAAO;AACpB,QAAM,WAAW,OAAO,MAAM,GAAG;AACjC,aAAW,WAAW,UAAU;AAC9B,UAAM,UAAU,QAAQ,KAAK;AAC7B,QAAI,QAAQ,WAAW,GAAG,IAAI,GAAG,GAAG;AAClC,aAAO,mBAAmB,QAAQ,MAAM,KAAK,SAAS,CAAC,CAAC;AAAA,IAC1D;AAAA,EACF;AACA,SAAO;AACT;AAEO,MAAM,UAAU;AAAA,EACrB,MAAM,CAAC,uBAAuB;AAAA,EAC9B,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,MAAM,CAAC,uBAAuB;AAAA,MAC9B,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,qDAAqD;AAAA,MACnF;AAAA,IACF;AAAA,EACF;AACF;AACA,IAAO,gBAAQ;",
   "names": []
 }

package/dist/modules/communication_channels/api/post/channels/[id]/import-history/route.js

@@ -7,8 +7,7 @@ import { CommunicationChannel } from "../../../../../data/entities.js";
 import { ChannelAccessDeniedError, assertCanManageChannel } from "../../../../../lib/access-control.js";
 import {
   getQueueImportHistorySchema,
-  queueImportHistory,
-  queueImportHistorySchema
+  queueImportHistory
 } from "../../../../../commands/queue-import-history.js";
 import { validateRouteMutationGuard } from "../../../../../lib/route-mutation-guard.js";
 import { createLogger } from "@open-mercato/shared/lib/logger";
@@ -20,7 +19,6 @@ const metadata = {
     requireFeatures: ["communication_channels.connect_user_channel"]
   }
 };
-const bodySchema = queueImportHistorySchema.omit({ channelId: true });
 function buildBodySchema() {
   return getQueueImportHistorySchema().omit({ channelId: true });
 }
@@ -148,7 +146,9 @@ const openApi = {
       requestBody: {
         required: true,
         contentType: "application/json",
-        schema: bodySchema
+        get schema() {
+          return buildBodySchema();
+        }
       },
       responses: [
         { status: 202, description: "Import job queued; returns { progressJobId }" },