@open-mercato/shared 0.4.5-develop-03023b2707 → 0.4.5-develop-0c30cb4b11

package/dist/lib/bootstrap/factory.js

@@ -5,6 +5,7 @@ import { registerEntityIds } from "../encryption/entityIds.js";
 import { registerEntityFields } from "../encryption/entityFields.js";
 import { registerSearchModuleConfigs } from "../../modules/search.js";
 import { registerAnalyticsModuleConfigs } from "../../modules/analytics.js";
+import { registerResponseEnrichers } from "../crud/enricher-registry.js";
 let _bootstrapped = false;
 let _asyncRegistrationPromise = null;
 function createBootstrap(data, options = {}) {
@@ -24,6 +25,9 @@ function createBootstrap(data, options = {}) {
     if (data.analyticsModuleConfigs) {
       registerAnalyticsModuleConfigs(data.analyticsModuleConfigs);
     }
+    if (data.enricherEntries) {
+      registerResponseEnrichers(data.enricherEntries);
+    }
     _asyncRegistrationPromise = registerWidgetsAndOptionalPackages(data, options);
     void _asyncRegistrationPromise;
     options.onRegistrationComplete?.();

package/dist/lib/bootstrap/factory.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../src/lib/bootstrap/factory.ts"],
-  "sourcesContent": ["import type { BootstrapData, BootstrapOptions } from './types'\nimport { registerOrmEntities } from '../db/mikro'\nimport { registerDiRegistrars } from '../di/container'\nimport { registerModules } from '../modules/registry'\nimport { registerEntityIds } from '../encryption/entityIds'\nimport { registerEntityFields } from '../encryption/entityFields'\nimport { registerSearchModuleConfigs } from '../../modules/search'\nimport { registerAnalyticsModuleConfigs } from '../../modules/analytics'\n\nlet _bootstrapped = false\n\n// Store the async registration promise so callers can await it if needed\nlet _asyncRegistrationPromise: Promise<void> | null = null\n\n/**\n * Creates a bootstrap function that registers all application dependencies.\n *\n * The returned function should be called once at application startup.\n * In development mode, it can be called multiple times (for HMR).\n *\n * @param data - All generated registry data from .mercato/generated/\n * @param options - Optional configuration\n * @returns A bootstrap function to call at app startup\n */\nexport function createBootstrap(data: BootstrapData, options: BootstrapOptions = {}) {\n  return function bootstrap(): void {\n    // In development, always re-run registrations to handle HMR\n    // (Module state may be reset when Turbopack reloads packages)\n    if (_bootstrapped && process.env.NODE_ENV !== 'development') return\n    _bootstrapped = true\n\n    // === 1. Foundation: ORM entities and DI registrars ===\n    registerOrmEntities(data.entities)\n    registerDiRegistrars(data.diRegistrars.filter((r): r is NonNullable<typeof r> => r != null))\n\n    // === 2. Modules registry (required by i18n, query engine, dashboards, CLI) ===\n    registerModules(data.modules)\n\n    // === 3. Entity IDs (required by encryption, indexing, entity links) ===\n    registerEntityIds(data.entityIds)\n\n    // === 4. Entity fields registry (for encryption manager, Turbopack compatibility) ===\n    if (data.entityFieldsRegistry) {\n      registerEntityFields(data.entityFieldsRegistry)\n    }\n\n    // === 5. Search module configs (for search service registration in DI) ===\n    if (data.searchModuleConfigs) {\n      registerSearchModuleConfigs(data.searchModuleConfigs)\n    }\n\n    // === 6. Analytics module configs (for dashboard widgets and analytics API) ===\n    if (data.analyticsModuleConfigs) {\n      registerAnalyticsModuleConfigs(data.analyticsModuleConfigs)\n    }\n\n    // === 7-8. UI Widgets and Optional packages (async to avoid circular deps) ===\n    // Store the promise so CLI context can await it\n    _asyncRegistrationPromise = registerWidgetsAndOptionalPackages(data, options)\n    void _asyncRegistrationPromise\n\n    options.onRegistrationComplete?.()\n  }\n}\n\n/**\n * Wait for async registrations (CLI modules, widgets, etc.) to complete.\n * Call this after bootstrap() in CLI context where you need modules immediately.\n */\nexport async function waitForAsyncRegistration(): Promise<void> {\n  if (_asyncRegistrationPromise) {\n    await _asyncRegistrationPromise\n  }\n}\n\nasync function registerWidgetsAndOptionalPackages(data: BootstrapData, options: BootstrapOptions): Promise<void> {\n  // Register UI widgets (dynamic imports to avoid circular deps with ui/core packages)\n  try {\n    const [dashboardRegistry, injectionRegistry, coreInjection] = await Promise.all([\n      import('@open-mercato/ui/backend/dashboard/widgetRegistry'),\n      import('@open-mercato/ui/backend/injection/widgetRegistry'),\n      import('@open-mercato/core/modules/widgets/lib/injection'),\n    ])\n\n    dashboardRegistry.registerDashboardWidgets(data.dashboardWidgetEntries)\n    injectionRegistry.registerInjectionWidgets(data.injectionWidgetEntries)\n    coreInjection.registerCoreInjectionWidgets(data.injectionWidgetEntries)\n    coreInjection.registerCoreInjectionTables(data.injectionTables)\n  } catch {\n    // UI packages may not be available in all contexts\n  }\n\n  // Note: Search module configs are registered synchronously in the main bootstrap.\n  // The actual registerSearchModule() call happens in core/bootstrap.ts when the\n  // DI container is created, using getSearchModuleConfigs() from the global registry.\n\n  // Note: CLI module registration is handled separately in CLI context\n  // via bootstrapFromAppRoot in dynamicLoader. We don't import CLI here\n  // to avoid Turbopack tracing through the CLI package in Next.js context.\n}\n\n/**\n * Check if bootstrap has been called.\n */\nexport function isBootstrapped(): boolean {\n  return _bootstrapped\n}\n\n/**\n * Reset bootstrap state. Useful for testing.\n */\nexport function resetBootstrapState(): void {\n  _bootstrapped = false\n}\n"],
-  "mappings": "AACA,SAAS,2BAA2B;AACpC,SAAS,4BAA4B;AACrC,SAAS,uBAAuB;AAChC,SAAS,yBAAyB;AAClC,SAAS,4BAA4B;AACrC,SAAS,mCAAmC;AAC5C,SAAS,sCAAsC;AAE/C,IAAI,gBAAgB;AAGpB,IAAI,4BAAkD;AAY/C,SAAS,gBAAgB,MAAqB,UAA4B,CAAC,GAAG;AACnF,SAAO,SAAS,YAAkB;AAGhC,QAAI,iBAAiB,QAAQ,IAAI,aAAa,cAAe;AAC7D,oBAAgB;AAGhB,wBAAoB,KAAK,QAAQ;AACjC,yBAAqB,KAAK,aAAa,OAAO,CAAC,MAAkC,KAAK,IAAI,CAAC;AAG3F,oBAAgB,KAAK,OAAO;AAG5B,sBAAkB,KAAK,SAAS;AAGhC,QAAI,KAAK,sBAAsB;AAC7B,2BAAqB,KAAK,oBAAoB;AAAA,IAChD;AAGA,QAAI,KAAK,qBAAqB;AAC5B,kCAA4B,KAAK,mBAAmB;AAAA,IACtD;AAGA,QAAI,KAAK,wBAAwB;AAC/B,qCAA+B,KAAK,sBAAsB;AAAA,IAC5D;AAIA,gCAA4B,mCAAmC,MAAM,OAAO;AAC5E,SAAK;AAEL,YAAQ,yBAAyB;AAAA,EACnC;AACF;AAMA,eAAsB,2BAA0C;AAC9D,MAAI,2BAA2B;AAC7B,UAAM;AAAA,EACR;AACF;AAEA,eAAe,mCAAmC,MAAqB,SAA0C;AAE/G,MAAI;AACF,UAAM,CAAC,mBAAmB,mBAAmB,aAAa,IAAI,MAAM,QAAQ,IAAI;AAAA,MAC9E,OAAO,mDAAmD;AAAA,MAC1D,OAAO,mDAAmD;AAAA,MAC1D,OAAO,kDAAkD;AAAA,IAC3D,CAAC;AAED,sBAAkB,yBAAyB,KAAK,sBAAsB;AACtE,sBAAkB,yBAAyB,KAAK,sBAAsB;AACtE,kBAAc,6BAA6B,KAAK,sBAAsB;AACtE,kBAAc,4BAA4B,KAAK,eAAe;AAAA,EAChE,QAAQ;AAAA,EAER;AASF;AAKO,SAAS,iBAA0B;AACxC,SAAO;AACT;AAKO,SAAS,sBAA4B;AAC1C,kBAAgB;AAClB;",
+  "sourcesContent": ["import type { BootstrapData, BootstrapOptions } from './types'\nimport { registerOrmEntities } from '../db/mikro'\nimport { registerDiRegistrars } from '../di/container'\nimport { registerModules } from '../modules/registry'\nimport { registerEntityIds } from '../encryption/entityIds'\nimport { registerEntityFields } from '../encryption/entityFields'\nimport { registerSearchModuleConfigs } from '../../modules/search'\nimport { registerAnalyticsModuleConfigs } from '../../modules/analytics'\nimport { registerResponseEnrichers } from '../crud/enricher-registry'\n\nlet _bootstrapped = false\n\n// Store the async registration promise so callers can await it if needed\nlet _asyncRegistrationPromise: Promise<void> | null = null\n\n/**\n * Creates a bootstrap function that registers all application dependencies.\n *\n * The returned function should be called once at application startup.\n * In development mode, it can be called multiple times (for HMR).\n *\n * @param data - All generated registry data from .mercato/generated/\n * @param options - Optional configuration\n * @returns A bootstrap function to call at app startup\n */\nexport function createBootstrap(data: BootstrapData, options: BootstrapOptions = {}) {\n  return function bootstrap(): void {\n    // In development, always re-run registrations to handle HMR\n    // (Module state may be reset when Turbopack reloads packages)\n    if (_bootstrapped && process.env.NODE_ENV !== 'development') return\n    _bootstrapped = true\n\n    // === 1. Foundation: ORM entities and DI registrars ===\n    registerOrmEntities(data.entities)\n    registerDiRegistrars(data.diRegistrars.filter((r): r is NonNullable<typeof r> => r != null))\n\n    // === 2. Modules registry (required by i18n, query engine, dashboards, CLI) ===\n    registerModules(data.modules)\n\n    // === 3. Entity IDs (required by encryption, indexing, entity links) ===\n    registerEntityIds(data.entityIds)\n\n    // === 4. Entity fields registry (for encryption manager, Turbopack compatibility) ===\n    if (data.entityFieldsRegistry) {\n      registerEntityFields(data.entityFieldsRegistry)\n    }\n\n    // === 5. Search module configs (for search service registration in DI) ===\n    if (data.searchModuleConfigs) {\n      registerSearchModuleConfigs(data.searchModuleConfigs)\n    }\n\n    // === 6. Analytics module configs (for dashboard widgets and analytics API) ===\n    if (data.analyticsModuleConfigs) {\n      registerAnalyticsModuleConfigs(data.analyticsModuleConfigs)\n    }\n\n    // === 6b. Response enrichers (for CRUD response enrichment) ===\n    if (data.enricherEntries) {\n      registerResponseEnrichers(data.enricherEntries)\n    }\n\n    // === 7-8. UI Widgets and Optional packages (async to avoid circular deps) ===\n    // Store the promise so CLI context can await it\n    _asyncRegistrationPromise = registerWidgetsAndOptionalPackages(data, options)\n    void _asyncRegistrationPromise\n\n    options.onRegistrationComplete?.()\n  }\n}\n\n/**\n * Wait for async registrations (CLI modules, widgets, etc.) to complete.\n * Call this after bootstrap() in CLI context where you need modules immediately.\n */\nexport async function waitForAsyncRegistration(): Promise<void> {\n  if (_asyncRegistrationPromise) {\n    await _asyncRegistrationPromise\n  }\n}\n\nasync function registerWidgetsAndOptionalPackages(data: BootstrapData, options: BootstrapOptions): Promise<void> {\n  // Register UI widgets (dynamic imports to avoid circular deps with ui/core packages)\n  try {\n    const [dashboardRegistry, injectionRegistry, coreInjection] = await Promise.all([\n      import('@open-mercato/ui/backend/dashboard/widgetRegistry'),\n      import('@open-mercato/ui/backend/injection/widgetRegistry'),\n      import('@open-mercato/core/modules/widgets/lib/injection'),\n    ])\n\n    dashboardRegistry.registerDashboardWidgets(data.dashboardWidgetEntries)\n    injectionRegistry.registerInjectionWidgets(data.injectionWidgetEntries)\n    coreInjection.registerCoreInjectionWidgets(data.injectionWidgetEntries)\n    coreInjection.registerCoreInjectionTables(data.injectionTables)\n  } catch {\n    // UI packages may not be available in all contexts\n  }\n\n  // Note: Search module configs are registered synchronously in the main bootstrap.\n  // The actual registerSearchModule() call happens in core/bootstrap.ts when the\n  // DI container is created, using getSearchModuleConfigs() from the global registry.\n\n  // Note: CLI module registration is handled separately in CLI context\n  // via bootstrapFromAppRoot in dynamicLoader. We don't import CLI here\n  // to avoid Turbopack tracing through the CLI package in Next.js context.\n}\n\n/**\n * Check if bootstrap has been called.\n */\nexport function isBootstrapped(): boolean {\n  return _bootstrapped\n}\n\n/**\n * Reset bootstrap state. Useful for testing.\n */\nexport function resetBootstrapState(): void {\n  _bootstrapped = false\n}\n"],
+  "mappings": "AACA,SAAS,2BAA2B;AACpC,SAAS,4BAA4B;AACrC,SAAS,uBAAuB;AAChC,SAAS,yBAAyB;AAClC,SAAS,4BAA4B;AACrC,SAAS,mCAAmC;AAC5C,SAAS,sCAAsC;AAC/C,SAAS,iCAAiC;AAE1C,IAAI,gBAAgB;AAGpB,IAAI,4BAAkD;AAY/C,SAAS,gBAAgB,MAAqB,UAA4B,CAAC,GAAG;AACnF,SAAO,SAAS,YAAkB;AAGhC,QAAI,iBAAiB,QAAQ,IAAI,aAAa,cAAe;AAC7D,oBAAgB;AAGhB,wBAAoB,KAAK,QAAQ;AACjC,yBAAqB,KAAK,aAAa,OAAO,CAAC,MAAkC,KAAK,IAAI,CAAC;AAG3F,oBAAgB,KAAK,OAAO;AAG5B,sBAAkB,KAAK,SAAS;AAGhC,QAAI,KAAK,sBAAsB;AAC7B,2BAAqB,KAAK,oBAAoB;AAAA,IAChD;AAGA,QAAI,KAAK,qBAAqB;AAC5B,kCAA4B,KAAK,mBAAmB;AAAA,IACtD;AAGA,QAAI,KAAK,wBAAwB;AAC/B,qCAA+B,KAAK,sBAAsB;AAAA,IAC5D;AAGA,QAAI,KAAK,iBAAiB;AACxB,gCAA0B,KAAK,eAAe;AAAA,IAChD;AAIA,gCAA4B,mCAAmC,MAAM,OAAO;AAC5E,SAAK;AAEL,YAAQ,yBAAyB;AAAA,EACnC;AACF;AAMA,eAAsB,2BAA0C;AAC9D,MAAI,2BAA2B;AAC7B,UAAM;AAAA,EACR;AACF;AAEA,eAAe,mCAAmC,MAAqB,SAA0C;AAE/G,MAAI;AACF,UAAM,CAAC,mBAAmB,mBAAmB,aAAa,IAAI,MAAM,QAAQ,IAAI;AAAA,MAC9E,OAAO,mDAAmD;AAAA,MAC1D,OAAO,mDAAmD;AAAA,MAC1D,OAAO,kDAAkD;AAAA,IAC3D,CAAC;AAED,sBAAkB,yBAAyB,KAAK,sBAAsB;AACtE,sBAAkB,yBAAyB,KAAK,sBAAsB;AACtE,kBAAc,6BAA6B,KAAK,sBAAsB;AACtE,kBAAc,4BAA4B,KAAK,eAAe;AAAA,EAChE,QAAQ;AAAA,EAER;AASF;AAKO,SAAS,iBAA0B;AACxC,SAAO;AACT;AAKO,SAAS,sBAA4B;AAC1C,kBAAgB;AAClB;",
   "names": []
 }

package/dist/lib/crud/enricher-registry.js

@@ -0,0 +1,47 @@
+const GLOBAL_ENRICHERS_KEY = "__openMercatoResponseEnrichers__";
+let _enricherEntries = null;
+function readGlobalEnrichers() {
+  try {
+    const value = globalThis[GLOBAL_ENRICHERS_KEY];
+    return Array.isArray(value) ? value : null;
+  } catch {
+    return null;
+  }
+}
+function writeGlobalEnrichers(entries) {
+  try {
+    ;
+    globalThis[GLOBAL_ENRICHERS_KEY] = entries;
+  } catch {
+  }
+}
+function registerResponseEnrichers(entries) {
+  const flat = [];
+  for (const entry of entries) {
+    for (const enricher of entry.enrichers) {
+      flat.push({ moduleId: entry.moduleId, enricher });
+    }
+  }
+  flat.sort((a, b) => (b.enricher.priority ?? 0) - (a.enricher.priority ?? 0));
+  _enricherEntries = flat;
+  writeGlobalEnrichers(flat);
+}
+function getResponseEnrichers() {
+  const globalEntries = readGlobalEnrichers();
+  if (globalEntries) return globalEntries;
+  if (!_enricherEntries) {
+    return [];
+  }
+  return _enricherEntries;
+}
+function getEnrichersForEntity(targetEntity) {
+  return getResponseEnrichers().filter(
+    (entry) => entry.enricher.targetEntity === targetEntity
+  );
+}
+export {
+  getEnrichersForEntity,
+  getResponseEnrichers,
+  registerResponseEnrichers
+};
+//# sourceMappingURL=enricher-registry.js.map

package/dist/lib/crud/enricher-registry.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../src/lib/crud/enricher-registry.ts"],
+  "sourcesContent": ["/**\n * Response Enricher Registry\n *\n * Global registry for response enrichers using the same globalThis pattern\n * as injection widgets for HMR-safe storage.\n */\n\nimport type { EnricherRegistryEntry, ResponseEnricher } from './response-enricher'\n\nconst GLOBAL_ENRICHERS_KEY = '__openMercatoResponseEnrichers__'\n\nlet _enricherEntries: EnricherRegistryEntry[] | null = null\n\nfunction readGlobalEnrichers(): EnricherRegistryEntry[] | null {\n  try {\n    const value = (globalThis as Record<string, unknown>)[GLOBAL_ENRICHERS_KEY]\n    return Array.isArray(value) ? (value as EnricherRegistryEntry[]) : null\n  } catch {\n    return null\n  }\n}\n\nfunction writeGlobalEnrichers(entries: EnricherRegistryEntry[]) {\n  try {\n    ;(globalThis as Record<string, unknown>)[GLOBAL_ENRICHERS_KEY] = entries\n  } catch {\n    // ignore global assignment failures\n  }\n}\n\n/**\n * Register response enrichers from all modules.\n * Called during bootstrap after generated enrichers are imported.\n */\nexport function registerResponseEnrichers(\n  entries: Array<{ moduleId: string; enrichers: ResponseEnricher[] }>,\n) {\n  const flat: EnricherRegistryEntry[] = []\n  for (const entry of entries) {\n    for (const enricher of entry.enrichers) {\n      flat.push({ moduleId: entry.moduleId, enricher })\n    }\n  }\n  flat.sort((a, b) => (b.enricher.priority ?? 0) - (a.enricher.priority ?? 0))\n  _enricherEntries = flat\n  writeGlobalEnrichers(flat)\n}\n\n/**\n * Get all registered response enrichers.\n */\nexport function getResponseEnrichers(): EnricherRegistryEntry[] {\n  const globalEntries = readGlobalEnrichers()\n  if (globalEntries) return globalEntries\n  if (!_enricherEntries) {\n    return []\n  }\n  return _enricherEntries\n}\n\n/**\n * Get enrichers targeting a specific entity, sorted by priority (higher first).\n */\nexport function getEnrichersForEntity(targetEntity: string): EnricherRegistryEntry[] {\n  return getResponseEnrichers().filter(\n    (entry) => entry.enricher.targetEntity === targetEntity,\n  )\n}\n"],
+  "mappings": "AASA,MAAM,uBAAuB;AAE7B,IAAI,mBAAmD;AAEvD,SAAS,sBAAsD;AAC7D,MAAI;AACF,UAAM,QAAS,WAAuC,oBAAoB;AAC1E,WAAO,MAAM,QAAQ,KAAK,IAAK,QAAoC;AAAA,EACrE,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,SAAS,qBAAqB,SAAkC;AAC9D,MAAI;AACF;AAAC,IAAC,WAAuC,oBAAoB,IAAI;AAAA,EACnE,QAAQ;AAAA,EAER;AACF;AAMO,SAAS,0BACd,SACA;AACA,QAAM,OAAgC,CAAC;AACvC,aAAW,SAAS,SAAS;AAC3B,eAAW,YAAY,MAAM,WAAW;AACtC,WAAK,KAAK,EAAE,UAAU,MAAM,UAAU,SAAS,CAAC;AAAA,IAClD;AAAA,EACF;AACA,OAAK,KAAK,CAAC,GAAG,OAAO,EAAE,SAAS,YAAY,MAAM,EAAE,SAAS,YAAY,EAAE;AAC3E,qBAAmB;AACnB,uBAAqB,IAAI;AAC3B;AAKO,SAAS,uBAAgD;AAC9D,QAAM,gBAAgB,oBAAoB;AAC1C,MAAI,cAAe,QAAO;AAC1B,MAAI,CAAC,kBAAkB;AACrB,WAAO,CAAC;AAAA,EACV;AACA,SAAO;AACT;AAKO,SAAS,sBAAsB,cAA+C;AACnF,SAAO,qBAAqB,EAAE;AAAA,IAC5B,CAAC,UAAU,MAAM,SAAS,iBAAiB;AAAA,EAC7C;AACF;",
+  "names": []
+}

package/dist/lib/crud/enricher-runner.js

@@ -0,0 +1,242 @@
+import { getEnrichersForEntity } from "./enricher-registry.js";
+const DEFAULT_TIMEOUT = 2e3;
+const SLOW_WARN_MS = 100;
+const SLOW_ERROR_MS = 500;
+const DEFAULT_CACHE_TTL_MS = 6e4;
+function timeoutPromise(ms) {
+  return new Promise(
+    (_, reject) => setTimeout(() => reject(new Error(`Enricher timed out after ${ms}ms`)), ms)
+  );
+}
+function hasRequiredFeatures(enricher, userFeatures) {
+  if (!enricher.features || enricher.features.length === 0) return true;
+  if (!userFeatures) return false;
+  const hasFeature = (required) => {
+    for (const granted of userFeatures) {
+      if (granted === "*" || granted === required) return true;
+      if (granted.endsWith(".*")) {
+        const prefix = granted.slice(0, -1);
+        if (required.startsWith(prefix)) return true;
+      }
+    }
+    return false;
+  };
+  return enricher.features.every((feature) => hasFeature(feature));
+}
+function getActiveEnrichers(targetEntity, context) {
+  const entries = getEnrichersForEntity(targetEntity);
+  return entries.filter((entry) => {
+    const enricher = entry.enricher;
+    if (!hasRequiredFeatures(enricher, context.userFeatures)) return false;
+    if (enricher.disabledTenantIds?.includes(context.tenantId)) return false;
+    return true;
+  });
+}
+function resolveCache(context) {
+  const container = context.container;
+  if (!container?.resolve) return null;
+  try {
+    const cache = container.resolve("cache");
+    if (cache && typeof cache.get === "function" && typeof cache.set === "function") {
+      return cache;
+    }
+  } catch {
+  }
+  try {
+    const cacheService = container.resolve("cacheService");
+    if (cacheService && typeof cacheService.get === "function" && typeof cacheService.set === "function") {
+      return cacheService;
+    }
+  } catch {
+  }
+  return null;
+}
+function buildCacheKey(enricher, context, mode, recordIds) {
+  const sortedIds = [...recordIds].sort();
+  return `umes:enricher:${enricher.id}:tenant:${context.tenantId}:org:${context.organizationId}:mode:${mode}:ids:${JSON.stringify(sortedIds)}`;
+}
+function extractRecordId(record) {
+  const idValue = record.id;
+  if (typeof idValue === "string" && idValue.trim().length > 0) return idValue.trim();
+  if (typeof idValue === "number") return String(idValue);
+  return "unknown";
+}
+function getEnricherCacheTtl(enricher) {
+  const ttl = enricher.cache?.ttl;
+  if (typeof ttl === "number" && Number.isFinite(ttl) && ttl > 0) {
+    return ttl;
+  }
+  return DEFAULT_CACHE_TTL_MS;
+}
+function getEnricherCacheTags(enricher, context) {
+  const tags = /* @__PURE__ */ new Set([
+    `tenant:${context.tenantId}`,
+    `organization:${context.organizationId}`,
+    `enricher:${enricher.id}`
+  ]);
+  for (const tag of enricher.cache?.tags ?? []) {
+    if (!tag || tag.trim().length === 0) continue;
+    tags.add(tag);
+  }
+  return Array.from(tags);
+}
+async function readEnricherCache(cache, key) {
+  if (!cache) return null;
+  try {
+    const value = await cache.get(key);
+    return value == null ? null : value;
+  } catch {
+    return null;
+  }
+}
+async function writeEnricherCache(cache, key, value, ttl, tags) {
+  if (!cache) return;
+  try {
+    await cache.set(key, value, { ttl, tags });
+  } catch {
+  }
+}
+async function applyResponseEnrichers(items, targetEntity, context) {
+  const activeEntries = getActiveEnrichers(targetEntity, context);
+  if (activeEntries.length === 0) {
+    return { items, _meta: { enrichedBy: [] } };
+  }
+  const enrichedBy = [];
+  const enricherErrors = [];
+  let currentItems = items;
+  const cache = resolveCache(context);
+  for (const entry of activeEntries) {
+    const enricher = entry.enricher;
+    const timeout = enricher.timeout ?? DEFAULT_TIMEOUT;
+    const startTime = Date.now();
+    try {
+      let result;
+      const recordIds = currentItems.map((item) => extractRecordId(item));
+      const shouldUseCache = enricher.cache?.strategy === "read-through";
+      const cacheKey = shouldUseCache ? buildCacheKey(enricher, context, "many", recordIds) : null;
+      if (shouldUseCache && cacheKey) {
+        const cached = await readEnricherCache(cache, cacheKey);
+        if (cached) {
+          currentItems = cached;
+          enrichedBy.push(enricher.id);
+          continue;
+        }
+      }
+      if (enricher.enrichMany) {
+        result = await Promise.race([
+          enricher.enrichMany(currentItems, context),
+          timeoutPromise(timeout)
+        ]);
+      } else {
+        throw new Error(
+          `Enricher ${enricher.id} must implement enrichMany() for list endpoints`
+        );
+      }
+      const elapsedMs = Date.now() - startTime;
+      if (elapsedMs > SLOW_ERROR_MS) {
+        console.error(
+          `[UMES] Enricher ${enricher.id} took ${elapsedMs}ms (threshold: ${SLOW_ERROR_MS}ms)`
+        );
+      } else if (elapsedMs > SLOW_WARN_MS) {
+        console.warn(
+          `[UMES] Enricher ${enricher.id} took ${elapsedMs}ms (threshold: ${SLOW_WARN_MS}ms)`
+        );
+      }
+      currentItems = result;
+      if (shouldUseCache && cacheKey) {
+        await writeEnricherCache(
+          cache,
+          cacheKey,
+          result,
+          getEnricherCacheTtl(enricher),
+          getEnricherCacheTags(enricher, context)
+        );
+      }
+      enrichedBy.push(enricher.id);
+    } catch (err) {
+      if (enricher.critical) {
+        throw err;
+      }
+      const message = err instanceof Error ? err.message : String(err);
+      console.warn(`[UMES] Enricher ${enricher.id} failed: ${message}`);
+      enricherErrors.push(enricher.id);
+      if (enricher.fallback) {
+        currentItems = currentItems.map((item) => ({
+          ...item,
+          ...enricher.fallback
+        }));
+      }
+    }
+  }
+  return {
+    items: currentItems,
+    _meta: {
+      enrichedBy,
+      ...enricherErrors.length > 0 ? { enricherErrors } : {}
+    }
+  };
+}
+async function applyResponseEnricherToRecord(record, targetEntity, context) {
+  const activeEntries = getActiveEnrichers(targetEntity, context);
+  if (activeEntries.length === 0) {
+    return { record, _meta: { enrichedBy: [] } };
+  }
+  const enrichedBy = [];
+  const enricherErrors = [];
+  let currentRecord = record;
+  const cache = resolveCache(context);
+  for (const entry of activeEntries) {
+    const enricher = entry.enricher;
+    const timeout = enricher.timeout ?? DEFAULT_TIMEOUT;
+    try {
+      const recordId = extractRecordId(currentRecord);
+      const shouldUseCache = enricher.cache?.strategy === "read-through";
+      const cacheKey = shouldUseCache ? buildCacheKey(enricher, context, "one", [recordId]) : null;
+      if (shouldUseCache && cacheKey) {
+        const cached = await readEnricherCache(cache, cacheKey);
+        if (cached) {
+          currentRecord = cached;
+          enrichedBy.push(enricher.id);
+          continue;
+        }
+      }
+      const result = await Promise.race([
+        enricher.enrichOne(currentRecord, context),
+        timeoutPromise(timeout)
+      ]);
+      currentRecord = result;
+      if (shouldUseCache && cacheKey) {
+        await writeEnricherCache(
+          cache,
+          cacheKey,
+          result,
+          getEnricherCacheTtl(enricher),
+          getEnricherCacheTags(enricher, context)
+        );
+      }
+      enrichedBy.push(enricher.id);
+    } catch (err) {
+      if (enricher.critical) {
+        throw err;
+      }
+      const message = err instanceof Error ? err.message : String(err);
+      console.warn(`[UMES] Enricher ${enricher.id} failed: ${message}`);
+      enricherErrors.push(enricher.id);
+      if (enricher.fallback) {
+        currentRecord = { ...currentRecord, ...enricher.fallback };
+      }
+    }
+  }
+  return {
+    record: currentRecord,
+    _meta: {
+      enrichedBy,
+      ...enricherErrors.length > 0 ? { enricherErrors } : {}
+    }
+  };
+}
+export {
+  applyResponseEnricherToRecord,
+  applyResponseEnrichers
+};
+//# sourceMappingURL=enricher-runner.js.map

package/dist/lib/crud/enricher-runner.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../src/lib/crud/enricher-runner.ts"],
+  "sourcesContent": ["/**\n * Response Enricher Runner\n *\n * Executes response enrichers against API response payloads.\n * Handles timeout, fallback, ACL feature gating, and error isolation.\n */\n\nimport type {\n  EnricherContext,\n  EnricherRegistryEntry,\n  EnrichmentResult,\n  ResponseEnricher,\n  SingleEnrichmentResult,\n} from './response-enricher'\nimport { getEnrichersForEntity } from './enricher-registry'\n\nconst DEFAULT_TIMEOUT = 2000\nconst SLOW_WARN_MS = 100\nconst SLOW_ERROR_MS = 500\nconst DEFAULT_CACHE_TTL_MS = 60_000\n\nfunction timeoutPromise(ms: number): Promise<never> {\n  return new Promise((_, reject) =>\n    setTimeout(() => reject(new Error(`Enricher timed out after ${ms}ms`)), ms),\n  )\n}\n\nfunction hasRequiredFeatures(\n  enricher: ResponseEnricher,\n  userFeatures: string[] | undefined,\n): boolean {\n  if (!enricher.features || enricher.features.length === 0) return true\n  if (!userFeatures) return false\n  const hasFeature = (required: string): boolean => {\n    for (const granted of userFeatures) {\n      if (granted === '*' || granted === required) return true\n      if (granted.endsWith('.*')) {\n        const prefix = granted.slice(0, -1)\n        if (required.startsWith(prefix)) return true\n      }\n    }\n    return false\n  }\n  return enricher.features.every((feature) => hasFeature(feature))\n}\n\nfunction getActiveEnrichers(\n  targetEntity: string,\n  context: EnricherContext,\n): EnricherRegistryEntry[] {\n  const entries = getEnrichersForEntity(targetEntity)\n  return entries.filter((entry) => {\n    const enricher = entry.enricher\n    if (!hasRequiredFeatures(enricher, context.userFeatures)) return false\n    if (enricher.disabledTenantIds?.includes(context.tenantId)) return false\n    return true\n  })\n}\n\ntype CacheLike = {\n  get: (key: string) => Promise<unknown>\n  set: (key: string, value: unknown, options?: { ttl?: number; tags?: string[] }) => Promise<unknown>\n}\n\nfunction resolveCache(context: EnricherContext): CacheLike | null {\n  const container = context.container as { resolve?: (name: string) => unknown } | undefined\n  if (!container?.resolve) return null\n  try {\n    const cache = container.resolve('cache') as CacheLike\n    if (cache && typeof cache.get === 'function' && typeof cache.set === 'function') {\n      return cache\n    }\n  } catch {\n    // ignore cache resolution failures\n  }\n  try {\n    const cacheService = container.resolve('cacheService') as CacheLike\n    if (cacheService && typeof cacheService.get === 'function' && typeof cacheService.set === 'function') {\n      return cacheService\n    }\n  } catch {\n    // ignore cache service resolution failures\n  }\n  return null\n}\n\nfunction buildCacheKey(\n  enricher: ResponseEnricher,\n  context: EnricherContext,\n  mode: 'one' | 'many',\n  recordIds: string[],\n): string {\n  const sortedIds = [...recordIds].sort()\n  return `umes:enricher:${enricher.id}:tenant:${context.tenantId}:org:${context.organizationId}:mode:${mode}:ids:${JSON.stringify(sortedIds)}`\n}\n\nfunction extractRecordId(record: Record<string, unknown>): string {\n  const idValue = record.id\n  if (typeof idValue === 'string' && idValue.trim().length > 0) return idValue.trim()\n  if (typeof idValue === 'number') return String(idValue)\n  return 'unknown'\n}\n\nfunction getEnricherCacheTtl(enricher: ResponseEnricher): number {\n  const ttl = enricher.cache?.ttl\n  if (typeof ttl === 'number' && Number.isFinite(ttl) && ttl > 0) {\n    return ttl\n  }\n  return DEFAULT_CACHE_TTL_MS\n}\n\nfunction getEnricherCacheTags(enricher: ResponseEnricher, context: EnricherContext): string[] {\n  const tags = new Set<string>([\n    `tenant:${context.tenantId}`,\n    `organization:${context.organizationId}`,\n    `enricher:${enricher.id}`,\n  ])\n  for (const tag of enricher.cache?.tags ?? []) {\n    if (!tag || tag.trim().length === 0) continue\n    tags.add(tag)\n  }\n  return Array.from(tags)\n}\n\nasync function readEnricherCache<T>(\n  cache: CacheLike | null,\n  key: string,\n): Promise<T | null> {\n  if (!cache) return null\n  try {\n    const value = await cache.get(key)\n    return value == null ? null : (value as T)\n  } catch {\n    return null\n  }\n}\n\nasync function writeEnricherCache(\n  cache: CacheLike | null,\n  key: string,\n  value: unknown,\n  ttl: number,\n  tags: string[],\n): Promise<void> {\n  if (!cache) return\n  try {\n    await cache.set(key, value, { ttl, tags })\n  } catch {\n    // ignore cache write failures\n  }\n}\n\n/**\n * Apply response enrichers to a list of records.\n *\n * Runs AFTER CrudHooks.afterList, BEFORE HTTP response serialization.\n * Each enricher runs independently \u2014 a failed non-critical enricher is skipped.\n */\nexport async function applyResponseEnrichers<T extends Record<string, unknown>>(\n  items: T[],\n  targetEntity: string,\n  context: EnricherContext,\n): Promise<EnrichmentResult<T>> {\n  const activeEntries = getActiveEnrichers(targetEntity, context)\n\n  if (activeEntries.length === 0) {\n    return { items, _meta: { enrichedBy: [] } }\n  }\n\n  const enrichedBy: string[] = []\n  const enricherErrors: string[] = []\n  let currentItems = items\n  const cache = resolveCache(context)\n\n  for (const entry of activeEntries) {\n    const enricher = entry.enricher\n    const timeout = enricher.timeout ?? DEFAULT_TIMEOUT\n    const startTime = Date.now()\n\n    try {\n      let result: T[]\n      const recordIds = currentItems.map((item) => extractRecordId(item))\n      const shouldUseCache = enricher.cache?.strategy === 'read-through'\n      const cacheKey = shouldUseCache ? buildCacheKey(enricher, context, 'many', recordIds) : null\n      if (shouldUseCache && cacheKey) {\n        const cached = await readEnricherCache<T[]>(cache, cacheKey)\n        if (cached) {\n          currentItems = cached\n          enrichedBy.push(enricher.id)\n          continue\n        }\n      }\n\n      if (enricher.enrichMany) {\n        result = await Promise.race([\n          enricher.enrichMany(currentItems, context) as Promise<T[]>,\n          timeoutPromise(timeout),\n        ])\n      } else {\n        throw new Error(\n          `Enricher ${enricher.id} must implement enrichMany() for list endpoints`,\n        )\n      }\n\n      const elapsedMs = Date.now() - startTime\n      if (elapsedMs > SLOW_ERROR_MS) {\n        console.error(\n          `[UMES] Enricher ${enricher.id} took ${elapsedMs}ms (threshold: ${SLOW_ERROR_MS}ms)`,\n        )\n      } else if (elapsedMs > SLOW_WARN_MS) {\n        console.warn(\n          `[UMES] Enricher ${enricher.id} took ${elapsedMs}ms (threshold: ${SLOW_WARN_MS}ms)`,\n        )\n      }\n\n      currentItems = result\n      if (shouldUseCache && cacheKey) {\n        await writeEnricherCache(\n          cache,\n          cacheKey,\n          result,\n          getEnricherCacheTtl(enricher),\n          getEnricherCacheTags(enricher, context),\n        )\n      }\n      enrichedBy.push(enricher.id)\n    } catch (err) {\n      if (enricher.critical) {\n        throw err\n      }\n\n      const message = err instanceof Error ? err.message : String(err)\n      console.warn(`[UMES] Enricher ${enricher.id} failed: ${message}`)\n      enricherErrors.push(enricher.id)\n\n      if (enricher.fallback) {\n        currentItems = currentItems.map((item) => ({\n          ...item,\n          ...enricher.fallback,\n        })) as T[]\n      }\n    }\n  }\n\n  return {\n    items: currentItems,\n    _meta: {\n      enrichedBy,\n      ...(enricherErrors.length > 0 ? { enricherErrors } : {}),\n    },\n  }\n}\n\n/**\n * Apply response enrichers to a single record.\n *\n * Used for detail endpoints (GET /:id), POST, and PUT responses.\n */\nexport async function applyResponseEnricherToRecord<T extends Record<string, unknown>>(\n  record: T,\n  targetEntity: string,\n  context: EnricherContext,\n): Promise<SingleEnrichmentResult<T>> {\n  const activeEntries = getActiveEnrichers(targetEntity, context)\n\n  if (activeEntries.length === 0) {\n    return { record, _meta: { enrichedBy: [] } }\n  }\n\n  const enrichedBy: string[] = []\n  const enricherErrors: string[] = []\n  let currentRecord = record\n  const cache = resolveCache(context)\n\n  for (const entry of activeEntries) {\n    const enricher = entry.enricher\n    const timeout = enricher.timeout ?? DEFAULT_TIMEOUT\n\n    try {\n      const recordId = extractRecordId(currentRecord)\n      const shouldUseCache = enricher.cache?.strategy === 'read-through'\n      const cacheKey = shouldUseCache ? buildCacheKey(enricher, context, 'one', [recordId]) : null\n      if (shouldUseCache && cacheKey) {\n        const cached = await readEnricherCache<T>(cache, cacheKey)\n        if (cached) {\n          currentRecord = cached\n          enrichedBy.push(enricher.id)\n          continue\n        }\n      }\n      const result = await Promise.race([\n        enricher.enrichOne(currentRecord, context) as Promise<T>,\n        timeoutPromise(timeout),\n      ])\n\n      currentRecord = result\n      if (shouldUseCache && cacheKey) {\n        await writeEnricherCache(\n          cache,\n          cacheKey,\n          result,\n          getEnricherCacheTtl(enricher),\n          getEnricherCacheTags(enricher, context),\n        )\n      }\n      enrichedBy.push(enricher.id)\n    } catch (err) {\n      if (enricher.critical) {\n        throw err\n      }\n\n      const message = err instanceof Error ? err.message : String(err)\n      console.warn(`[UMES] Enricher ${enricher.id} failed: ${message}`)\n      enricherErrors.push(enricher.id)\n\n      if (enricher.fallback) {\n        currentRecord = { ...currentRecord, ...enricher.fallback } as T\n      }\n    }\n  }\n\n  return {\n    record: currentRecord,\n    _meta: {\n      enrichedBy,\n      ...(enricherErrors.length > 0 ? { enricherErrors } : {}),\n    },\n  }\n}\n"],
+  "mappings": "AAcA,SAAS,6BAA6B;AAEtC,MAAM,kBAAkB;AACxB,MAAM,eAAe;AACrB,MAAM,gBAAgB;AACtB,MAAM,uBAAuB;AAE7B,SAAS,eAAe,IAA4B;AAClD,SAAO,IAAI;AAAA,IAAQ,CAAC,GAAG,WACrB,WAAW,MAAM,OAAO,IAAI,MAAM,4BAA4B,EAAE,IAAI,CAAC,GAAG,EAAE;AAAA,EAC5E;AACF;AAEA,SAAS,oBACP,UACA,cACS;AACT,MAAI,CAAC,SAAS,YAAY,SAAS,SAAS,WAAW,EAAG,QAAO;AACjE,MAAI,CAAC,aAAc,QAAO;AAC1B,QAAM,aAAa,CAAC,aAA8B;AAChD,eAAW,WAAW,cAAc;AAClC,UAAI,YAAY,OAAO,YAAY,SAAU,QAAO;AACpD,UAAI,QAAQ,SAAS,IAAI,GAAG;AAC1B,cAAM,SAAS,QAAQ,MAAM,GAAG,EAAE;AAClC,YAAI,SAAS,WAAW,MAAM,EAAG,QAAO;AAAA,MAC1C;AAAA,IACF;AACA,WAAO;AAAA,EACT;AACA,SAAO,SAAS,SAAS,MAAM,CAAC,YAAY,WAAW,OAAO,CAAC;AACjE;AAEA,SAAS,mBACP,cACA,SACyB;AACzB,QAAM,UAAU,sBAAsB,YAAY;AAClD,SAAO,QAAQ,OAAO,CAAC,UAAU;AAC/B,UAAM,WAAW,MAAM;AACvB,QAAI,CAAC,oBAAoB,UAAU,QAAQ,YAAY,EAAG,QAAO;AACjE,QAAI,SAAS,mBAAmB,SAAS,QAAQ,QAAQ,EAAG,QAAO;AACnE,WAAO;AAAA,EACT,CAAC;AACH;AAOA,SAAS,aAAa,SAA4C;AAChE,QAAM,YAAY,QAAQ;AAC1B,MAAI,CAAC,WAAW,QAAS,QAAO;AAChC,MAAI;AACF,UAAM,QAAQ,UAAU,QAAQ,OAAO;AACvC,QAAI,SAAS,OAAO,MAAM,QAAQ,cAAc,OAAO,MAAM,QAAQ,YAAY;AAC/E,aAAO;AAAA,IACT;AAAA,EACF,QAAQ;AAAA,EAER;AACA,MAAI;AACF,UAAM,eAAe,UAAU,QAAQ,cAAc;AACrD,QAAI,gBAAgB,OAAO,aAAa,QAAQ,cAAc,OAAO,aAAa,QAAQ,YAAY;AACpG,aAAO;AAAA,IACT;AAAA,EACF,QAAQ;AAAA,EAER;AACA,SAAO;AACT;AAEA,SAAS,cACP,UACA,SACA,MACA,WACQ;AACR,QAAM,YAAY,CAAC,GAAG,SAAS,EAAE,KAAK;AACtC,SAAO,iBAAiB,SAAS,EAAE,WAAW,QAAQ,QAAQ,QAAQ,QAAQ,cAAc,SAAS,IAAI,QAAQ,KAAK,UAAU,SAAS,CAAC;AAC5I;AAEA,SAAS,gBAAgB,QAAyC;AAChE,QAAM,UAAU,OAAO;AACvB,MAAI,OAAO,YAAY,YAAY,QAAQ,KAAK,EAAE,SAAS,EAAG,QAAO,QAAQ,KAAK;AAClF,MAAI,OAAO,YAAY,SAAU,QAAO,OAAO,OAAO;AACtD,SAAO;AACT;AAEA,SAAS,oBAAoB,UAAoC;AAC/D,QAAM,MAAM,SAAS,OAAO;AAC5B,MAAI,OAAO,QAAQ,YAAY,OAAO,SAAS,GAAG,KAAK,MAAM,GAAG;AAC9D,WAAO;AAAA,EACT;AACA,SAAO;AACT;AAEA,SAAS,qBAAqB,UAA4B,SAAoC;AAC5F,QAAM,OAAO,oBAAI,IAAY;AAAA,IAC3B,UAAU,QAAQ,QAAQ;AAAA,IAC1B,gBAAgB,QAAQ,cAAc;AAAA,IACtC,YAAY,SAAS,EAAE;AAAA,EACzB,CAAC;AACD,aAAW,OAAO,SAAS,OAAO,QAAQ,CAAC,GAAG;AAC5C,QAAI,CAAC,OAAO,IAAI,KAAK,EAAE,WAAW,EAAG;AACrC,SAAK,IAAI,GAAG;AAAA,EACd;AACA,SAAO,MAAM,KAAK,IAAI;AACxB;AAEA,eAAe,kBACb,OACA,KACmB;AACnB,MAAI,CAAC,MAAO,QAAO;AACnB,MAAI;AACF,UAAM,QAAQ,MAAM,MAAM,IAAI,GAAG;AACjC,WAAO,SAAS,OAAO,OAAQ;AAAA,EACjC,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,eAAe,mBACb,OACA,KACA,OACA,KACA,MACe;AACf,MAAI,CAAC,MAAO;AACZ,MAAI;AACF,UAAM,MAAM,IAAI,KAAK,OAAO,EAAE,KAAK,KAAK,CAAC;AAAA,EAC3C,QAAQ;AAAA,EAER;AACF;AAQA,eAAsB,uBACpB,OACA,cACA,SAC8B;AAC9B,QAAM,gBAAgB,mBAAmB,cAAc,OAAO;AAE9D,MAAI,cAAc,WAAW,GAAG;AAC9B,WAAO,EAAE,OAAO,OAAO,EAAE,YAAY,CAAC,EAAE,EAAE;AAAA,EAC5C;AAEA,QAAM,aAAuB,CAAC;AAC9B,QAAM,iBAA2B,CAAC;AAClC,MAAI,eAAe;AACnB,QAAM,QAAQ,aAAa,OAAO;AAElC,aAAW,SAAS,eAAe;AACjC,UAAM,WAAW,MAAM;AACvB,UAAM,UAAU,SAAS,WAAW;AACpC,UAAM,YAAY,KAAK,IAAI;AAE3B,QAAI;AACF,UAAI;AACJ,YAAM,YAAY,aAAa,IAAI,CAAC,SAAS,gBAAgB,IAAI,CAAC;AAClE,YAAM,iBAAiB,SAAS,OAAO,aAAa;AACpD,YAAM,WAAW,iBAAiB,cAAc,UAAU,SAAS,QAAQ,SAAS,IAAI;AACxF,UAAI,kBAAkB,UAAU;AAC9B,cAAM,SAAS,MAAM,kBAAuB,OAAO,QAAQ;AAC3D,YAAI,QAAQ;AACV,yBAAe;AACf,qBAAW,KAAK,SAAS,EAAE;AAC3B;AAAA,QACF;AAAA,MACF;AAEA,UAAI,SAAS,YAAY;AACvB,iBAAS,MAAM,QAAQ,KAAK;AAAA,UAC1B,SAAS,WAAW,cAAc,OAAO;AAAA,UACzC,eAAe,OAAO;AAAA,QACxB,CAAC;AAAA,MACH,OAAO;AACL,cAAM,IAAI;AAAA,UACR,YAAY,SAAS,EAAE;AAAA,QACzB;AAAA,MACF;AAEA,YAAM,YAAY,KAAK,IAAI,IAAI;AAC/B,UAAI,YAAY,eAAe;AAC7B,gBAAQ;AAAA,UACN,mBAAmB,SAAS,EAAE,SAAS,SAAS,kBAAkB,aAAa;AAAA,QACjF;AAAA,MACF,WAAW,YAAY,cAAc;AACnC,gBAAQ;AAAA,UACN,mBAAmB,SAAS,EAAE,SAAS,SAAS,kBAAkB,YAAY;AAAA,QAChF;AAAA,MACF;AAEA,qBAAe;AACf,UAAI,kBAAkB,UAAU;AAC9B,cAAM;AAAA,UACJ;AAAA,UACA;AAAA,UACA;AAAA,UACA,oBAAoB,QAAQ;AAAA,UAC5B,qBAAqB,UAAU,OAAO;AAAA,QACxC;AAAA,MACF;AACA,iBAAW,KAAK,SAAS,EAAE;AAAA,IAC7B,SAAS,KAAK;AACZ,UAAI,SAAS,UAAU;AACrB,cAAM;AAAA,MACR;AAEA,YAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC/D,cAAQ,KAAK,mBAAmB,SAAS,EAAE,YAAY,OAAO,EAAE;AAChE,qBAAe,KAAK,SAAS,EAAE;AAE/B,UAAI,SAAS,UAAU;AACrB,uBAAe,aAAa,IAAI,CAAC,UAAU;AAAA,UACzC,GAAG;AAAA,UACH,GAAG,SAAS;AAAA,QACd,EAAE;AAAA,MACJ;AAAA,IACF;AAAA,EACF;AAEA,SAAO;AAAA,IACL,OAAO;AAAA,IACP,OAAO;AAAA,MACL;AAAA,MACA,GAAI,eAAe,SAAS,IAAI,EAAE,eAAe,IAAI,CAAC;AAAA,IACxD;AAAA,EACF;AACF;AAOA,eAAsB,8BACpB,QACA,cACA,SACoC;AACpC,QAAM,gBAAgB,mBAAmB,cAAc,OAAO;AAE9D,MAAI,cAAc,WAAW,GAAG;AAC9B,WAAO,EAAE,QAAQ,OAAO,EAAE,YAAY,CAAC,EAAE,EAAE;AAAA,EAC7C;AAEA,QAAM,aAAuB,CAAC;AAC9B,QAAM,iBAA2B,CAAC;AAClC,MAAI,gBAAgB;AACpB,QAAM,QAAQ,aAAa,OAAO;AAElC,aAAW,SAAS,eAAe;AACjC,UAAM,WAAW,MAAM;AACvB,UAAM,UAAU,SAAS,WAAW;AAEpC,QAAI;AACF,YAAM,WAAW,gBAAgB,aAAa;AAC9C,YAAM,iBAAiB,SAAS,OAAO,aAAa;AACpD,YAAM,WAAW,iBAAiB,cAAc,UAAU,SAAS,OAAO,CAAC,QAAQ,CAAC,IAAI;AACxF,UAAI,kBAAkB,UAAU;AAC9B,cAAM,SAAS,MAAM,kBAAqB,OAAO,QAAQ;AACzD,YAAI,QAAQ;AACV,0BAAgB;AAChB,qBAAW,KAAK,SAAS,EAAE;AAC3B;AAAA,QACF;AAAA,MACF;AACA,YAAM,SAAS,MAAM,QAAQ,KAAK;AAAA,QAChC,SAAS,UAAU,eAAe,OAAO;AAAA,QACzC,eAAe,OAAO;AAAA,MACxB,CAAC;AAED,sBAAgB;AAChB,UAAI,kBAAkB,UAAU;AAC9B,cAAM;AAAA,UACJ;AAAA,UACA;AAAA,UACA;AAAA,UACA,oBAAoB,QAAQ;AAAA,UAC5B,qBAAqB,UAAU,OAAO;AAAA,QACxC;AAAA,MACF;AACA,iBAAW,KAAK,SAAS,EAAE;AAAA,IAC7B,SAAS,KAAK;AACZ,UAAI,SAAS,UAAU;AACrB,cAAM;AAAA,MACR;AAEA,YAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC/D,cAAQ,KAAK,mBAAmB,SAAS,EAAE,YAAY,OAAO,EAAE;AAChE,qBAAe,KAAK,SAAS,EAAE;AAE/B,UAAI,SAAS,UAAU;AACrB,wBAAgB,EAAE,GAAG,eAAe,GAAG,SAAS,SAAS;AAAA,MAC3D;AAAA,IACF;AAAA,EACF;AAEA,SAAO;AAAA,IACL,QAAQ;AAAA,IACR,OAAO;AAAA,MACL;AAAA,MACA,GAAI,eAAe,SAAS,IAAI,EAAE,eAAe,IAAI,CAAC;AAAA,IACxD;AAAA,EACF;AACF;",
+  "names": []
+}

package/dist/lib/crud/factory.js

@@ -35,6 +35,7 @@ import {
 import { deriveCrudSegmentTag } from "./cache-stats.js";
 import { createProfiler, shouldEnableProfiler } from "@open-mercato/shared/lib/profiler";
 import { getTranslationOverlayPlugin } from "@open-mercato/shared/lib/localization/overlay-plugin";
+import { applyResponseEnrichers, applyResponseEnricherToRecord } from "./enricher-runner.js";
 const DEFAULT_EXPORT_FORMATS = ["csv", "json", "xml", "markdown"];
 const DEFAULT_EXPORT_BATCH_SIZE = 1e3;
 const MIN_EXPORT_BATCH_SIZE = 100;
@@ -161,6 +162,8 @@ function normalizeFullRecordForExport(input) {
   const record = {};
   for (const [key, value] of Object.entries(input)) {
     if (key.startsWith("cf_") || key.startsWith("cf:")) continue;
+    if (key === "_meta") continue;
+    if (key.startsWith("_") && key.length > 1) continue;
     record[key] = value;
   }
   const custom = extractAllCustomFieldEntries(input);
@@ -515,6 +518,51 @@ function makeCrudRoute(opts) {
       return items;
     }
   };
+  async function buildEnricherContext(ctx) {
+    if (!opts.enrichers?.entityId) return null;
+    if (!ctx.auth) return null;
+    let userFeatures;
+    try {
+      const rbac = ctx.container.resolve("rbacService");
+      if (rbac?.getGrantedFeatures) {
+        userFeatures = await rbac.getGrantedFeatures(ctx.auth.sub, {
+          tenantId: ctx.auth.tenantId,
+          organizationId: ctx.selectedOrganizationId ?? ctx.auth.orgId
+        });
+      }
+    } catch {
+    }
+    return {
+      organizationId: ctx.selectedOrganizationId ?? ctx.auth.orgId ?? "",
+      tenantId: ctx.auth.tenantId ?? "",
+      userId: ctx.auth.sub,
+      em: ctx.container.resolve("em"),
+      container: ctx.container,
+      userFeatures
+    };
+  }
+  async function enrichListPayload(payload, ctx, profiler) {
+    if (!opts.enrichers?.entityId) return;
+    const enricherCtx = await buildEnricherContext(ctx);
+    if (!enricherCtx) return;
+    profiler?.mark("enrichers_start");
+    const result = await applyResponseEnrichers(payload.items, opts.enrichers.entityId, enricherCtx);
+    payload.items = result.items;
+    if (result._meta.enrichedBy.length > 0 || result._meta.enricherErrors?.length) {
+      payload._meta = { ...payload._meta || {}, ...result._meta };
+    }
+    profiler?.mark("enrichers_complete", { enricherCount: result._meta.enrichedBy.length });
+  }
+  async function enrichSingleRecord(record, ctx) {
+    if (!opts.enrichers?.entityId) return record;
+    const enricherCtx = await buildEnricherContext(ctx);
+    if (!enricherCtx) return record;
+    const result = await applyResponseEnricherToRecord(record, opts.enrichers.entityId, enricherCtx);
+    if (result._meta.enrichedBy.length > 0 || result._meta.enricherErrors?.length) {
+      return { ...result.record, _meta: result._meta };
+    }
+    return result.record;
+  }
   async function ensureAuth(request) {
     const auth = request ? await getAuthFromRequest(request) : await getAuthFromCookies();
     if (!auth) return null;
@@ -719,6 +767,7 @@ function makeCrudRoute(opts) {
           query: validated
         });
         await opts.hooks?.afterList?.(payload2, { ...ctx, query: validated });
+        await enrichListPayload(payload2, ctx, profiler);
         logCacheOutcome("hit", items.length);
         const response2 = respondWithPayload(payload2);
         finishProfile({ result: "cache_hit", cacheStatus });
@@ -884,6 +933,7 @@ function makeCrudRoute(opts) {
         };
         await opts.hooks?.afterList?.(payload2, { ...ctx, query: validated });
         profiler.mark("after_list_hook");
+        await enrichListPayload(payload2, ctx, profiler);
         await maybeStoreCrudCache(payload2);
         profiler.mark("cache_store_attempt", { cacheEnabled });
         logCacheOutcome(cacheStatus, payload2.items.length);
@@ -997,6 +1047,7 @@ function makeCrudRoute(opts) {
       const payload = { items: list, total: list.length };
       await opts.hooks?.afterList?.(payload, { ...ctx, query: validated });
       profiler.mark("after_list_hook");
+      await enrichListPayload(payload, ctx, profiler);
       await maybeStoreCrudCache(payload);
       profiler.mark("cache_store_attempt", { cacheEnabled });
       logCacheOutcome(cacheStatus, payload.items.length);
@@ -1095,7 +1146,8 @@ function makeCrudRoute(opts) {
       });
       await de.flushOrmEntityChanges();
       await invalidateCrudCache(ctx.container, resourceKind, identifiers, ctx.auth.tenantId ?? null, "created", resourceTargets);
-      const payload = createConfig.response ? createConfig.response(entity) : { id: String(entity[ormCfg.idField]) };
+      let payload = createConfig.response ? createConfig.response(entity) : { id: String(entity[ormCfg.idField]) };
+      payload = await enrichSingleRecord(payload, ctx);
       return json(payload, { status: 201 });
     } catch (e) {
       return handleError(e);