@open-mercato/tillio 0.7.1-develop.7176.1.d229567a50

package/.turbo/turbo-build.log

@@ -0,0 +1,2 @@
+[build:tillio] found 37 entry points
+[build:tillio] built successfully

package/build.mjs

@@ -0,0 +1,7 @@
+import { dirname } from 'node:path'
+import { fileURLToPath } from 'node:url'
+import { buildPackage } from '../../scripts/build-package.mjs'
+
+const packageDir = dirname(fileURLToPath(import.meta.url))
+
+await buildPackage(packageDir, { name: 'tillio' })

package/dist/index.js

@@ -0,0 +1,5 @@
+import { metadata } from "./modules/tillio/index.js";
+export {
+  metadata
+};
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../src/index.ts"],
+  "sourcesContent": ["export { metadata } from './modules/tillio/index'\n"],
+  "mappings": "AAAA,SAAS,gBAAgB;",
+  "names": []
+}

package/dist/modules/tillio/__integration__/TC-PHONE-001-pull-readiness.spec.js

@@ -0,0 +1,17 @@
+import { expect, test } from "@playwright/test";
+import { apiRequest, getAuthToken } from "@open-mercato/core/helpers/integration/api";
+import { readJsonSafe } from "@open-mercato/core/helpers/integration/generalFixtures";
+test.describe("TC-PHONE-001: Tillio pull readiness", () => {
+  test("reports environment_not_ready when Tillio is not configured", async ({ request }) => {
+    const token = await getAuthToken(request, "superadmin");
+    const response = await apiRequest(request, "GET", "/api/tillio/pull", { token });
+    expect(response.status(), "the readiness probe should be reachable").toBe(200);
+    const body = await readJsonSafe(response);
+    expect(body?.ok, "readiness responds ok even when blocked").toBe(true);
+    expect(body?.environmentReady, "no Tillio credentials means the environment is not ready").toBe(false);
+    expect(body?.operatorAttached, "no operator can be attached without an environment").toBe(false);
+    expect(body?.blocker, "the environment blocker should be reported").toBe("environment_not_ready");
+    expect(body?.operatorId, "no operator id without an operator").toBeNull();
+  });
+});
+//# sourceMappingURL=TC-PHONE-001-pull-readiness.spec.js.map

package/dist/modules/tillio/__integration__/TC-PHONE-001-pull-readiness.spec.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/tillio/__integration__/TC-PHONE-001-pull-readiness.spec.ts"],
+  "sourcesContent": ["import { expect, test } from '@playwright/test'\nimport { apiRequest, getAuthToken } from '@open-mercato/core/helpers/integration/api'\nimport { readJsonSafe } from '@open-mercato/core/helpers/integration/generalFixtures'\n\ntype ReadinessBody = {\n  ok?: boolean\n  environmentReady?: boolean\n  operatorAttached?: boolean\n  envDrift?: boolean\n  blocker?: string | null\n  operatorId?: string | null\n  plugin?: string | null\n}\n\n/**\n * TC-PHONE-001 \u2014 the pull readiness probe reports an unconfigured Tillio environment.\n *\n * GET /api/tillio/pull only reads config out of the database; it never calls Tillio.\n * On a fresh environment no Tillio credentials exist, so readiness must report the\n * `environment_not_ready` blocker rather than erroring. This asserts the module's own\n * readiness contract \u2014 the blocker precedence rules themselves are unit-tested in\n * packages/tillio/src/modules/tillio/__tests__/pull-readiness.test.ts.\n */\ntest.describe('TC-PHONE-001: Tillio pull readiness', () => {\n  test('reports environment_not_ready when Tillio is not configured', async ({ request }) => {\n    const token = await getAuthToken(request, 'superadmin')\n    const response = await apiRequest(request, 'GET', '/api/tillio/pull', { token })\n\n    expect(response.status(), 'the readiness probe should be reachable').toBe(200)\n\n    const body = await readJsonSafe<ReadinessBody>(response)\n    expect(body?.ok, 'readiness responds ok even when blocked').toBe(true)\n    expect(body?.environmentReady, 'no Tillio credentials means the environment is not ready').toBe(false)\n    expect(body?.operatorAttached, 'no operator can be attached without an environment').toBe(false)\n    expect(body?.blocker, 'the environment blocker should be reported').toBe('environment_not_ready')\n    expect(body?.operatorId, 'no operator id without an operator').toBeNull()\n  })\n})\n"],
+  "mappings": "AAAA,SAAS,QAAQ,YAAY;AAC7B,SAAS,YAAY,oBAAoB;AACzC,SAAS,oBAAoB;AAqB7B,KAAK,SAAS,uCAAuC,MAAM;AACzD,OAAK,+DAA+D,OAAO,EAAE,QAAQ,MAAM;AACzF,UAAM,QAAQ,MAAM,aAAa,SAAS,YAAY;AACtD,UAAM,WAAW,MAAM,WAAW,SAAS,OAAO,oBAAoB,EAAE,MAAM,CAAC;AAE/E,WAAO,SAAS,OAAO,GAAG,yCAAyC,EAAE,KAAK,GAAG;AAE7E,UAAM,OAAO,MAAM,aAA4B,QAAQ;AACvD,WAAO,MAAM,IAAI,yCAAyC,EAAE,KAAK,IAAI;AACrE,WAAO,MAAM,kBAAkB,0DAA0D,EAAE,KAAK,KAAK;AACrG,WAAO,MAAM,kBAAkB,oDAAoD,EAAE,KAAK,KAAK;AAC/F,WAAO,MAAM,SAAS,4CAA4C,EAAE,KAAK,uBAAuB;AAChG,WAAO,MAAM,YAAY,oCAAoC,EAAE,SAAS;AAAA,EAC1E,CAAC;AACH,CAAC;",
+  "names": []
+}

package/dist/modules/tillio/__integration__/TC-PHONE-002-pull-blocked.spec.js

@@ -0,0 +1,27 @@
+import { expect, test } from "@playwright/test";
+import { apiRequest, getAuthToken } from "@open-mercato/core/helpers/integration/api";
+import { readJsonSafe } from "@open-mercato/core/helpers/integration/generalFixtures";
+test.describe("TC-PHONE-002: Tillio pull blocked before reaching the provider", () => {
+  test("returns a structured 409 when the environment is not configured", async ({ request }) => {
+    const token = await getAuthToken(request, "superadmin");
+    const response = await apiRequest(request, "POST", "/api/tillio/pull", {
+      token,
+      data: { from: "2026-03-01", to: "2026-03-02" }
+    });
+    expect(response.status(), "an unconfigured environment must block the pull").toBe(409);
+    const body = await readJsonSafe(response);
+    expect(body?.ok).toBe(false);
+    expect(body?.code, "the blocker code drives which settings section the UI opens").toBe("environment_not_ready");
+    expect(body?.section, "environment blockers route to the environment section").toBe("environment");
+    expect(body?.message, "the blocker carries an actionable message").toBeTruthy();
+  });
+  test("rejects a reversed day range before touching readiness", async ({ request }) => {
+    const token = await getAuthToken(request, "superadmin");
+    const response = await apiRequest(request, "POST", "/api/tillio/pull", {
+      token,
+      data: { from: "2026-03-02", to: "2026-03-01" }
+    });
+    expect(response.status(), "from must not be after to").toBe(400);
+  });
+});
+//# sourceMappingURL=TC-PHONE-002-pull-blocked.spec.js.map

package/dist/modules/tillio/__integration__/TC-PHONE-002-pull-blocked.spec.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/tillio/__integration__/TC-PHONE-002-pull-blocked.spec.ts"],
+  "sourcesContent": ["import { expect, test } from '@playwright/test'\nimport { apiRequest, getAuthToken } from '@open-mercato/core/helpers/integration/api'\nimport { readJsonSafe } from '@open-mercato/core/helpers/integration/generalFixtures'\n\ntype BlockedBody = { ok?: boolean; code?: string; section?: string; message?: string }\n\n/**\n * TC-PHONE-002 \u2014 the pull refuses to run before Tillio is configured.\n *\n * The readiness gate returns 409 before `tillioAdapter.fetchCalls` is ever reached, so\n * this exercises the real POST path without any network traffic to Tillio and without\n * ingesting anything. That ordering is the point of the test: a regression that moved\n * the gate below the fetch would turn an unconfigured tenant into a live provider call.\n *\n * A pull against a real Tillio environment needs Ringostat credentials and is therefore\n * a deliberate manual check, not an automated one.\n */\ntest.describe('TC-PHONE-002: Tillio pull blocked before reaching the provider', () => {\n  test('returns a structured 409 when the environment is not configured', async ({ request }) => {\n    const token = await getAuthToken(request, 'superadmin')\n    const response = await apiRequest(request, 'POST', '/api/tillio/pull', {\n      token,\n      data: { from: '2026-03-01', to: '2026-03-02' },\n    })\n\n    expect(response.status(), 'an unconfigured environment must block the pull').toBe(409)\n\n    const body = await readJsonSafe<BlockedBody>(response)\n    expect(body?.ok).toBe(false)\n    expect(body?.code, 'the blocker code drives which settings section the UI opens').toBe('environment_not_ready')\n    expect(body?.section, 'environment blockers route to the environment section').toBe('environment')\n    expect(body?.message, 'the blocker carries an actionable message').toBeTruthy()\n  })\n\n  test('rejects a reversed day range before touching readiness', async ({ request }) => {\n    const token = await getAuthToken(request, 'superadmin')\n    const response = await apiRequest(request, 'POST', '/api/tillio/pull', {\n      token,\n      data: { from: '2026-03-02', to: '2026-03-01' },\n    })\n\n    expect(response.status(), 'from must not be after to').toBe(400)\n  })\n})\n"],
+  "mappings": "AAAA,SAAS,QAAQ,YAAY;AAC7B,SAAS,YAAY,oBAAoB;AACzC,SAAS,oBAAoB;AAe7B,KAAK,SAAS,kEAAkE,MAAM;AACpF,OAAK,mEAAmE,OAAO,EAAE,QAAQ,MAAM;AAC7F,UAAM,QAAQ,MAAM,aAAa,SAAS,YAAY;AACtD,UAAM,WAAW,MAAM,WAAW,SAAS,QAAQ,oBAAoB;AAAA,MACrE;AAAA,MACA,MAAM,EAAE,MAAM,cAAc,IAAI,aAAa;AAAA,IAC/C,CAAC;AAED,WAAO,SAAS,OAAO,GAAG,iDAAiD,EAAE,KAAK,GAAG;AAErF,UAAM,OAAO,MAAM,aAA0B,QAAQ;AACrD,WAAO,MAAM,EAAE,EAAE,KAAK,KAAK;AAC3B,WAAO,MAAM,MAAM,6DAA6D,EAAE,KAAK,uBAAuB;AAC9G,WAAO,MAAM,SAAS,uDAAuD,EAAE,KAAK,aAAa;AACjG,WAAO,MAAM,SAAS,2CAA2C,EAAE,WAAW;AAAA,EAChF,CAAC;AAED,OAAK,0DAA0D,OAAO,EAAE,QAAQ,MAAM;AACpF,UAAM,QAAQ,MAAM,aAAa,SAAS,YAAY;AACtD,UAAM,WAAW,MAAM,WAAW,SAAS,QAAQ,oBAAoB;AAAA,MACrE;AAAA,MACA,MAAM,EAAE,MAAM,cAAc,IAAI,aAAa;AAAA,IAC/C,CAAC;AAED,WAAO,SAAS,OAAO,GAAG,2BAA2B,EAAE,KAAK,GAAG;AAAA,EACjE,CAAC;AACH,CAAC;",
+  "names": []
+}

package/dist/modules/tillio/__integration__/TC-PHONE-003-operators.spec.js

@@ -0,0 +1,47 @@
+import { expect, test } from "@playwright/test";
+import { apiRequest, getAuthToken } from "@open-mercato/core/helpers/integration/api";
+import { readJsonSafe } from "@open-mercato/core/helpers/integration/generalFixtures";
+test.describe("TC-PHONE-003: Tillio operators", () => {
+  test("lists an empty operator set on an unconfigured environment", async ({ request }) => {
+    const token = await getAuthToken(request, "superadmin");
+    const response = await apiRequest(request, "GET", "/api/tillio/operators", { token });
+    expect(response.status(), "the operator listing should be reachable").toBe(200);
+    const body = await readJsonSafe(response);
+    expect(body?.ok).toBe(true);
+    expect(body?.environmentReady, "no credentials means the environment is not ready").toBe(false);
+    expect(body?.operators, "no operators can exist without an environment").toEqual([]);
+    expect(body?.defaultOperatorId).toBeNull();
+    expect(body?.tenantSystemId).toBeNull();
+    expect(body?.envDrift, "drift is meaningless with no operators attached").toBe(false);
+    expect(body?.supportedPlugins, "the UI builds its plugin picker from this list").toEqual(["Ringostat"]);
+  });
+  test("refuses to attach an operator before the environment is healthy", async ({ request }) => {
+    const token = await getAuthToken(request, "superadmin");
+    const response = await apiRequest(request, "POST", "/api/tillio/operators", {
+      token,
+      data: { plugin: "Ringostat", config: { key: "qa-tillio-003-never-used" } }
+    });
+    expect(response.status(), "attaching must be gated on a healthy environment").toBe(409);
+    const body = await readJsonSafe(response);
+    expect(body?.ok).toBe(false);
+    expect(body?.code).toBe("environment_not_ready");
+    expect(body?.section, "the blocker routes the UI to the environment section").toBe("environment");
+  });
+  test("rejects an unsupported plugin", async ({ request }) => {
+    const token = await getAuthToken(request, "superadmin");
+    const response = await apiRequest(request, "POST", "/api/tillio/operators", {
+      token,
+      data: { plugin: "Twilio", config: { key: "qa-tillio-003-never-used" } }
+    });
+    expect(response.status(), "only Ringostat is a supported plugin today").toBe(400);
+  });
+  test("detaching an unknown operator reports that nothing was detached", async ({ request }) => {
+    const token = await getAuthToken(request, "superadmin");
+    const response = await apiRequest(request, "DELETE", "/api/tillio/operators/qa-tillio-003-missing", { token });
+    expect(response.status()).toBe(200);
+    const body = await readJsonSafe(response);
+    expect(body?.ok).toBe(true);
+    expect(body?.detached, "an unknown id detaches nothing rather than erroring").toBe(false);
+  });
+});
+//# sourceMappingURL=TC-PHONE-003-operators.spec.js.map

package/dist/modules/tillio/__integration__/TC-PHONE-003-operators.spec.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/tillio/__integration__/TC-PHONE-003-operators.spec.ts"],
+  "sourcesContent": ["import { expect, test } from '@playwright/test'\nimport { apiRequest, getAuthToken } from '@open-mercato/core/helpers/integration/api'\nimport { readJsonSafe } from '@open-mercato/core/helpers/integration/generalFixtures'\n\ntype OperatorsBody = {\n  ok?: boolean\n  environmentReady?: boolean\n  tenantSystemId?: string | null\n  supportedPlugins?: string[]\n  operators?: Array<{ id?: string; plugin?: string; stale?: boolean }>\n  defaultOperatorId?: string | null\n  envDrift?: boolean\n}\ntype BlockedBody = { ok?: boolean; code?: string; section?: string; message?: string }\n\n/**\n * TC-PHONE-003 \u2014 the operator routes answer correctly before Tillio is configured.\n *\n * Attaching a real operator calls Tillio (`addConfig`) and needs a Ringostat key, so the\n * live path stays a manual check. Everything asserted here stops before the network:\n * the listing reads credentials out of the database, the attach is refused by the\n * environment gate ahead of `attachOperator`, and detaching an unknown id returns early\n * without resolving an environment at all.\n */\ntest.describe('TC-PHONE-003: Tillio operators', () => {\n  test('lists an empty operator set on an unconfigured environment', async ({ request }) => {\n    const token = await getAuthToken(request, 'superadmin')\n    const response = await apiRequest(request, 'GET', '/api/tillio/operators', { token })\n\n    expect(response.status(), 'the operator listing should be reachable').toBe(200)\n\n    const body = await readJsonSafe<OperatorsBody>(response)\n    expect(body?.ok).toBe(true)\n    expect(body?.environmentReady, 'no credentials means the environment is not ready').toBe(false)\n    expect(body?.operators, 'no operators can exist without an environment').toEqual([])\n    expect(body?.defaultOperatorId).toBeNull()\n    expect(body?.tenantSystemId).toBeNull()\n    expect(body?.envDrift, 'drift is meaningless with no operators attached').toBe(false)\n    expect(body?.supportedPlugins, 'the UI builds its plugin picker from this list').toEqual(['Ringostat'])\n  })\n\n  test('refuses to attach an operator before the environment is healthy', async ({ request }) => {\n    const token = await getAuthToken(request, 'superadmin')\n    const response = await apiRequest(request, 'POST', '/api/tillio/operators', {\n      token,\n      data: { plugin: 'Ringostat', config: { key: 'qa-tillio-003-never-used' } },\n    })\n\n    expect(response.status(), 'attaching must be gated on a healthy environment').toBe(409)\n\n    const body = await readJsonSafe<BlockedBody>(response)\n    expect(body?.ok).toBe(false)\n    expect(body?.code).toBe('environment_not_ready')\n    expect(body?.section, 'the blocker routes the UI to the environment section').toBe('environment')\n  })\n\n  test('rejects an unsupported plugin', async ({ request }) => {\n    const token = await getAuthToken(request, 'superadmin')\n    const response = await apiRequest(request, 'POST', '/api/tillio/operators', {\n      token,\n      data: { plugin: 'Twilio', config: { key: 'qa-tillio-003-never-used' } },\n    })\n\n    expect(response.status(), 'only Ringostat is a supported plugin today').toBe(400)\n  })\n\n  test('detaching an unknown operator reports that nothing was detached', async ({ request }) => {\n    const token = await getAuthToken(request, 'superadmin')\n    const response = await apiRequest(request, 'DELETE', '/api/tillio/operators/qa-tillio-003-missing', { token })\n\n    expect(response.status()).toBe(200)\n    const body = await readJsonSafe<{ ok?: boolean; detached?: boolean }>(response)\n    expect(body?.ok).toBe(true)\n    expect(body?.detached, 'an unknown id detaches nothing rather than erroring').toBe(false)\n  })\n})\n"],
+  "mappings": "AAAA,SAAS,QAAQ,YAAY;AAC7B,SAAS,YAAY,oBAAoB;AACzC,SAAS,oBAAoB;AAsB7B,KAAK,SAAS,kCAAkC,MAAM;AACpD,OAAK,8DAA8D,OAAO,EAAE,QAAQ,MAAM;AACxF,UAAM,QAAQ,MAAM,aAAa,SAAS,YAAY;AACtD,UAAM,WAAW,MAAM,WAAW,SAAS,OAAO,yBAAyB,EAAE,MAAM,CAAC;AAEpF,WAAO,SAAS,OAAO,GAAG,0CAA0C,EAAE,KAAK,GAAG;AAE9E,UAAM,OAAO,MAAM,aAA4B,QAAQ;AACvD,WAAO,MAAM,EAAE,EAAE,KAAK,IAAI;AAC1B,WAAO,MAAM,kBAAkB,mDAAmD,EAAE,KAAK,KAAK;AAC9F,WAAO,MAAM,WAAW,+CAA+C,EAAE,QAAQ,CAAC,CAAC;AACnF,WAAO,MAAM,iBAAiB,EAAE,SAAS;AACzC,WAAO,MAAM,cAAc,EAAE,SAAS;AACtC,WAAO,MAAM,UAAU,iDAAiD,EAAE,KAAK,KAAK;AACpF,WAAO,MAAM,kBAAkB,gDAAgD,EAAE,QAAQ,CAAC,WAAW,CAAC;AAAA,EACxG,CAAC;AAED,OAAK,mEAAmE,OAAO,EAAE,QAAQ,MAAM;AAC7F,UAAM,QAAQ,MAAM,aAAa,SAAS,YAAY;AACtD,UAAM,WAAW,MAAM,WAAW,SAAS,QAAQ,yBAAyB;AAAA,MAC1E;AAAA,MACA,MAAM,EAAE,QAAQ,aAAa,QAAQ,EAAE,KAAK,2BAA2B,EAAE;AAAA,IAC3E,CAAC;AAED,WAAO,SAAS,OAAO,GAAG,kDAAkD,EAAE,KAAK,GAAG;AAEtF,UAAM,OAAO,MAAM,aAA0B,QAAQ;AACrD,WAAO,MAAM,EAAE,EAAE,KAAK,KAAK;AAC3B,WAAO,MAAM,IAAI,EAAE,KAAK,uBAAuB;AAC/C,WAAO,MAAM,SAAS,sDAAsD,EAAE,KAAK,aAAa;AAAA,EAClG,CAAC;AAED,OAAK,iCAAiC,OAAO,EAAE,QAAQ,MAAM;AAC3D,UAAM,QAAQ,MAAM,aAAa,SAAS,YAAY;AACtD,UAAM,WAAW,MAAM,WAAW,SAAS,QAAQ,yBAAyB;AAAA,MAC1E;AAAA,MACA,MAAM,EAAE,QAAQ,UAAU,QAAQ,EAAE,KAAK,2BAA2B,EAAE;AAAA,IACxE,CAAC;AAED,WAAO,SAAS,OAAO,GAAG,4CAA4C,EAAE,KAAK,GAAG;AAAA,EAClF,CAAC;AAED,OAAK,mEAAmE,OAAO,EAAE,QAAQ,MAAM;AAC7F,UAAM,QAAQ,MAAM,aAAa,SAAS,YAAY;AACtD,UAAM,WAAW,MAAM,WAAW,SAAS,UAAU,+CAA+C,EAAE,MAAM,CAAC;AAE7G,WAAO,SAAS,OAAO,CAAC,EAAE,KAAK,GAAG;AAClC,UAAM,OAAO,MAAM,aAAmD,QAAQ;AAC9E,WAAO,MAAM,EAAE,EAAE,KAAK,IAAI;AAC1B,WAAO,MAAM,UAAU,qDAAqD,EAAE,KAAK,KAAK;AAAA,EAC1F,CAAC;AACH,CAAC;",
+  "names": []
+}

package/dist/modules/tillio/__integration__/TC-PHONE-004-pull-widget.spec.js

@@ -0,0 +1,11 @@
+import { expect, test } from "@playwright/test";
+import { login } from "@open-mercato/core/helpers/integration/auth";
+test.describe("TC-PHONE-004: Tillio pull widget injection", () => {
+  test("renders the pull action on the phone calls list", async ({ page }) => {
+    await login(page, "admin");
+    await page.goto("/backend/phone_calls");
+    await expect(page.getByRole("heading", { name: "Phone Calls" })).toBeVisible();
+    await expect(page.getByRole("button", { name: "Pull calls" })).toBeVisible();
+  });
+});
+//# sourceMappingURL=TC-PHONE-004-pull-widget.spec.js.map

package/dist/modules/tillio/__integration__/TC-PHONE-004-pull-widget.spec.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/tillio/__integration__/TC-PHONE-004-pull-widget.spec.ts"],
+  "sourcesContent": ["import { expect, test } from '@playwright/test'\nimport { login } from '@open-mercato/core/helpers/integration/auth'\n\n/**\n * TC-PHONE-004 \u2014 the Pull widget reaches the hub's call list toolbar.\n *\n * This module injects `tillio.injection.pull-calls` into `data-table:phone_calls.calls:toolbar`,\n * a spot owned by phone_calls in another package. Nothing in either package fails to compile if\n * that wiring breaks \u2014 the button simply stops rendering \u2014 so the injection is asserted here.\n *\n * It lives in the provider package on purpose: phone_calls must keep passing with tillio\n * disabled, so its own page spec cannot assert a Tillio button.\n */\ntest.describe('TC-PHONE-004: Tillio pull widget injection', () => {\n  test('renders the pull action on the phone calls list', async ({ page }) => {\n    await login(page, 'admin')\n    await page.goto('/backend/phone_calls')\n\n    await expect(page.getByRole('heading', { name: 'Phone Calls' })).toBeVisible()\n    await expect(page.getByRole('button', { name: 'Pull calls' })).toBeVisible()\n  })\n})\n"],
+  "mappings": "AAAA,SAAS,QAAQ,YAAY;AAC7B,SAAS,aAAa;AAYtB,KAAK,SAAS,8CAA8C,MAAM;AAChE,OAAK,mDAAmD,OAAO,EAAE,KAAK,MAAM;AAC1E,UAAM,MAAM,MAAM,OAAO;AACzB,UAAM,KAAK,KAAK,sBAAsB;AAEtC,UAAM,OAAO,KAAK,UAAU,WAAW,EAAE,MAAM,cAAc,CAAC,CAAC,EAAE,YAAY;AAC7E,UAAM,OAAO,KAAK,UAAU,UAAU,EAAE,MAAM,aAAa,CAAC,CAAC,EAAE,YAAY;AAAA,EAC7E,CAAC;AACH,CAAC;",
+  "names": []
+}

package/dist/modules/tillio/__integration__/TC-PHONE-005-operators-widget.spec.js

@@ -0,0 +1,13 @@
+import { expect, test } from "@playwright/test";
+import { login } from "@open-mercato/core/helpers/integration/auth";
+test.describe("TC-PHONE-005: Tillio operators widget injection", () => {
+  test("renders the operator configuration tab with not-ready guidance", async ({ page }) => {
+    await login(page, "admin");
+    await page.goto("/backend/integrations/tillio");
+    await page.getByRole("tab", { name: "Operator configuration" }).click();
+    await expect(
+      page.getByText("Save the Tillio API URL and key in the Credentials tab, then run the health Check before attaching an operator.")
+    ).toBeVisible();
+  });
+});
+//# sourceMappingURL=TC-PHONE-005-operators-widget.spec.js.map

package/dist/modules/tillio/__integration__/TC-PHONE-005-operators-widget.spec.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/tillio/__integration__/TC-PHONE-005-operators-widget.spec.ts"],
+  "sourcesContent": ["import { expect, test } from '@playwright/test'\nimport { login } from '@open-mercato/core/helpers/integration/auth'\n\n/**\n * TC-PHONE-005 \u2014 the operator configuration tab reaches the Tillio integration page.\n *\n * `tillio.injection.operators` is injected as a tab into this integration's detail spot,\n * which the integrations module renders from the `IntegrationDefinition`. The registration\n * chain (definition -> spot id -> injection table) has no compile-time link to the page, so\n * a break would silently drop the tab.\n *\n * The page opens on Credentials, so the tab is activated before asserting its body. With no\n * credentials stored the widget must guide the user to configure them instead of offering an\n * operator form \u2014 that guidance is the state a fresh tenant actually sees.\n */\ntest.describe('TC-PHONE-005: Tillio operators widget injection', () => {\n  test('renders the operator configuration tab with not-ready guidance', async ({ page }) => {\n    await login(page, 'admin')\n    await page.goto('/backend/integrations/tillio')\n\n    await page.getByRole('tab', { name: 'Operator configuration' }).click()\n\n    await expect(\n      page.getByText('Save the Tillio API URL and key in the Credentials tab, then run the health Check before attaching an operator.'),\n    ).toBeVisible()\n  })\n})\n"],
+  "mappings": "AAAA,SAAS,QAAQ,YAAY;AAC7B,SAAS,aAAa;AActB,KAAK,SAAS,mDAAmD,MAAM;AACrE,OAAK,kEAAkE,OAAO,EAAE,KAAK,MAAM;AACzF,UAAM,MAAM,MAAM,OAAO;AACzB,UAAM,KAAK,KAAK,8BAA8B;AAE9C,UAAM,KAAK,UAAU,OAAO,EAAE,MAAM,yBAAyB,CAAC,EAAE,MAAM;AAEtE,UAAM;AAAA,MACJ,KAAK,UAAU,iHAAiH;AAAA,IAClI,EAAE,YAAY;AAAA,EAChB,CAAC;AACH,CAAC;",
+  "names": []
+}

package/dist/modules/tillio/acl.js

@@ -0,0 +1,9 @@
+const features = [
+  { id: "tillio.manage", title: "Manage Tillio integration", module: "tillio" }
+];
+var acl_default = features;
+export {
+  acl_default as default,
+  features
+};
+//# sourceMappingURL=acl.js.map

package/dist/modules/tillio/acl.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../src/modules/tillio/acl.ts"],
+  "sourcesContent": ["export const features = [\n  { id: 'tillio.manage', title: 'Manage Tillio integration', module: 'tillio' },\n]\n\nexport default features\n"],
+  "mappings": "AAAO,MAAM,WAAW;AAAA,EACtB,EAAE,IAAI,iBAAiB,OAAO,6BAA6B,QAAQ,SAAS;AAC9E;AAEA,IAAO,cAAQ;",
+  "names": []
+}

package/dist/modules/tillio/api/operators/[id]/route.js

@@ -0,0 +1,78 @@
+import { NextResponse } from "next/server";
+import { z } from "zod";
+import { getAuthFromRequest } from "@open-mercato/shared/lib/auth/server";
+import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
+import { runRouteMutationGuards } from "@open-mercato/shared/lib/crud/route-mutation-guard";
+import { parseBooleanWithDefault } from "@open-mercato/shared/lib/boolean";
+import { tillioErrorCopy } from "../../../lib/error-codes.js";
+import {
+  detachOperator,
+  TILLIO_OPERATOR_RESOURCE_KIND,
+  TillioRevocationFailedError
+} from "../../../lib/operators.js";
+const idParamsSchema = z.object({ id: z.string().trim().min(1) });
+const metadata = {
+  DELETE: { requireAuth: true, requireFeatures: ["tillio.manage", "integrations.manage"] }
+};
+const openApi = {
+  tags: ["Tillio"],
+  summary: "Detach a Tillio operator"
+};
+async function DELETE(req, ctx) {
+  const auth = await getAuthFromRequest(req);
+  if (!auth?.tenantId || !auth.orgId) {
+    return NextResponse.json({ ok: false, code: "unauthorized", message: "Unauthorized" }, { status: 401 });
+  }
+  const rawParams = ctx.params && typeof ctx.params.then === "function" ? await ctx.params : ctx.params;
+  const parsedParams = idParamsSchema.safeParse(rawParams);
+  if (!parsedParams.success) {
+    return NextResponse.json({ ok: false, code: "invalid_operator_id", message: "Invalid operator id" }, { status: 400 });
+  }
+  const operatorId = parsedParams.data.id;
+  const force = parseBooleanWithDefault(new URL(req.url).searchParams.get("force"), false);
+  const container = await createRequestContainer();
+  const credentialsService = container.resolve("integrationCredentialsService");
+  const scope = { organizationId: auth.orgId, tenantId: auth.tenantId };
+  const guarded = await runRouteMutationGuards({
+    container,
+    req,
+    auth: { userId: auth.sub, tenantId: auth.tenantId, organizationId: auth.orgId },
+    input: {
+      resourceKind: TILLIO_OPERATOR_RESOURCE_KIND,
+      resourceId: operatorId,
+      operation: "delete",
+      mutationPayload: { operatorId, force }
+    }
+  });
+  if (!guarded.ok) return guarded.response;
+  const guardedForce = typeof guarded.modifiedPayload?.force === "boolean" ? guarded.modifiedPayload.force : force;
+  try {
+    const result = await detachOperator({ credentialsService, scope }, operatorId, { force: guardedForce });
+    await guarded.runAfterSuccess();
+    return NextResponse.json({ ok: true, detached: result.detached, revoked: result.revoked });
+  } catch (err) {
+    if (err instanceof TillioRevocationFailedError) {
+      const code = err.environmentMissing ? "environment_not_ready" : "revocation_failed";
+      return NextResponse.json(
+        {
+          ok: false,
+          code,
+          section: err.environmentMissing ? "environment" : "operator",
+          message: tillioErrorCopy(code, "detach_failed").fallback,
+          canForce: true
+        },
+        { status: 502 }
+      );
+    }
+    return NextResponse.json(
+      { ok: false, code: "detach_failed", section: "operator", message: "Failed to detach the operator." },
+      { status: 500 }
+    );
+  }
+}
+export {
+  DELETE,
+  metadata,
+  openApi
+};
+//# sourceMappingURL=route.js.map

package/dist/modules/tillio/api/operators/[id]/route.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../../src/modules/tillio/api/operators/%5Bid%5D/route.ts"],
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { runRouteMutationGuards } from '@open-mercato/shared/lib/crud/route-mutation-guard'\nimport { parseBooleanWithDefault } from '@open-mercato/shared/lib/boolean'\nimport type { IntegrationScope } from '@open-mercato/shared/modules/integrations/types'\nimport { tillioErrorCopy } from '../../../lib/error-codes'\nimport type { TillioCredentialsService } from '../../../lib/operators-store'\nimport {\n  detachOperator,\n  TILLIO_OPERATOR_RESOURCE_KIND,\n  TillioRevocationFailedError,\n} from '../../../lib/operators'\n\nconst idParamsSchema = z.object({ id: z.string().trim().min(1) })\n\nexport const metadata = {\n  DELETE: { requireAuth: true, requireFeatures: ['tillio.manage', 'integrations.manage'] },\n}\n\nexport const openApi = {\n  tags: ['Tillio'],\n  summary: 'Detach a Tillio operator',\n}\n\nexport async function DELETE(req: Request, ctx: { params?: Promise<{ id?: string }> | { id?: string } }) {\n  const auth = await getAuthFromRequest(req)\n  if (!auth?.tenantId || !auth.orgId) {\n    return NextResponse.json({ ok: false, code: 'unauthorized', message: 'Unauthorized' }, { status: 401 })\n  }\n\n  const rawParams = (ctx.params && typeof (ctx.params as Promise<unknown>).then === 'function')\n    ? await (ctx.params as Promise<{ id?: string }>)\n    : (ctx.params as { id?: string } | undefined)\n\n  const parsedParams = idParamsSchema.safeParse(rawParams)\n  if (!parsedParams.success) {\n    return NextResponse.json({ ok: false, code: 'invalid_operator_id', message: 'Invalid operator id' }, { status: 400 })\n  }\n  const operatorId = parsedParams.data.id\n  const force = parseBooleanWithDefault(new URL(req.url).searchParams.get('force'), false)\n\n  const container = await createRequestContainer()\n  const credentialsService = container.resolve('integrationCredentialsService') as TillioCredentialsService\n  const scope: IntegrationScope = { organizationId: auth.orgId, tenantId: auth.tenantId }\n\n  const guarded = await runRouteMutationGuards({\n    container,\n    req,\n    auth: { userId: auth.sub, tenantId: auth.tenantId, organizationId: auth.orgId },\n    input: {\n      resourceKind: TILLIO_OPERATOR_RESOURCE_KIND,\n      resourceId: operatorId,\n      operation: 'delete',\n      mutationPayload: { operatorId, force },\n    },\n  })\n  if (!guarded.ok) return guarded.response\n\n  // A guard that refuses to let `force` through has to be able to say so. Only the flag is\n  // read back: rewriting which operator gets detached would silently retarget the request.\n  const guardedForce = typeof guarded.modifiedPayload?.force === 'boolean'\n    ? guarded.modifiedPayload.force\n    : force\n\n  try {\n    const result = await detachOperator({ credentialsService, scope }, operatorId, { force: guardedForce })\n    await guarded.runAfterSuccess()\n    return NextResponse.json({ ok: true, detached: result.detached, revoked: result.revoked })\n  } catch (err) {\n    if (err instanceof TillioRevocationFailedError) {\n      const code = err.environmentMissing ? 'environment_not_ready' : 'revocation_failed'\n      return NextResponse.json(\n        {\n          ok: false,\n          code,\n          section: err.environmentMissing ? 'environment' : 'operator',\n          message: tillioErrorCopy(code, 'detach_failed').fallback,\n          canForce: true,\n        },\n        { status: 502 },\n      )\n    }\n    return NextResponse.json(\n      { ok: false, code: 'detach_failed', section: 'operator', message: 'Failed to detach the operator.' },\n      { status: 500 },\n    )\n  }\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAClB,SAAS,0BAA0B;AACnC,SAAS,8BAA8B;AACvC,SAAS,8BAA8B;AACvC,SAAS,+BAA+B;AAExC,SAAS,uBAAuB;AAEhC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEP,MAAM,iBAAiB,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,CAAC;AAEzD,MAAM,WAAW;AAAA,EACtB,QAAQ,EAAE,aAAa,MAAM,iBAAiB,CAAC,iBAAiB,qBAAqB,EAAE;AACzF;AAEO,MAAM,UAAU;AAAA,EACrB,MAAM,CAAC,QAAQ;AAAA,EACf,SAAS;AACX;AAEA,eAAsB,OAAO,KAAc,KAA8D;AACvG,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM,YAAY,CAAC,KAAK,OAAO;AAClC,WAAO,aAAa,KAAK,EAAE,IAAI,OAAO,MAAM,gBAAgB,SAAS,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACxG;AAEA,QAAM,YAAa,IAAI,UAAU,OAAQ,IAAI,OAA4B,SAAS,aAC9E,MAAO,IAAI,SACV,IAAI;AAET,QAAM,eAAe,eAAe,UAAU,SAAS;AACvD,MAAI,CAAC,aAAa,SAAS;AACzB,WAAO,aAAa,KAAK,EAAE,IAAI,OAAO,MAAM,uBAAuB,SAAS,sBAAsB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACtH;AACA,QAAM,aAAa,aAAa,KAAK;AACrC,QAAM,QAAQ,wBAAwB,IAAI,IAAI,IAAI,GAAG,EAAE,aAAa,IAAI,OAAO,GAAG,KAAK;AAEvF,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,qBAAqB,UAAU,QAAQ,+BAA+B;AAC5E,QAAM,QAA0B,EAAE,gBAAgB,KAAK,OAAO,UAAU,KAAK,SAAS;AAEtF,QAAM,UAAU,MAAM,uBAAuB;AAAA,IAC3C;AAAA,IACA;AAAA,IACA,MAAM,EAAE,QAAQ,KAAK,KAAK,UAAU,KAAK,UAAU,gBAAgB,KAAK,MAAM;AAAA,IAC9E,OAAO;AAAA,MACL,cAAc;AAAA,MACd,YAAY;AAAA,MACZ,WAAW;AAAA,MACX,iBAAiB,EAAE,YAAY,MAAM;AAAA,IACvC;AAAA,EACF,CAAC;AACD,MAAI,CAAC,QAAQ,GAAI,QAAO,QAAQ;AAIhC,QAAM,eAAe,OAAO,QAAQ,iBAAiB,UAAU,YAC3D,QAAQ,gBAAgB,QACxB;AAEJ,MAAI;AACF,UAAM,SAAS,MAAM,eAAe,EAAE,oBAAoB,MAAM,GAAG,YAAY,EAAE,OAAO,aAAa,CAAC;AACtG,UAAM,QAAQ,gBAAgB;AAC9B,WAAO,aAAa,KAAK,EAAE,IAAI,MAAM,UAAU,OAAO,UAAU,SAAS,OAAO,QAAQ,CAAC;AAAA,EAC3F,SAAS,KAAK;AACZ,QAAI,eAAe,6BAA6B;AAC9C,YAAM,OAAO,IAAI,qBAAqB,0BAA0B;AAChE,aAAO,aAAa;AAAA,QAClB;AAAA,UACE,IAAI;AAAA,UACJ;AAAA,UACA,SAAS,IAAI,qBAAqB,gBAAgB;AAAA,UAClD,SAAS,gBAAgB,MAAM,eAAe,EAAE;AAAA,UAChD,UAAU;AAAA,QACZ;AAAA,QACA,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AACA,WAAO,aAAa;AAAA,MAClB,EAAE,IAAI,OAAO,MAAM,iBAAiB,SAAS,YAAY,SAAS,iCAAiC;AAAA,MACnG,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACF;",
+  "names": []
+}

package/dist/modules/tillio/api/operators/route.js

@@ -0,0 +1,171 @@
+import { NextResponse } from "next/server";
+import { z } from "zod";
+import { getAuthFromRequest } from "@open-mercato/shared/lib/auth/server";
+import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
+import { readJsonSafe } from "@open-mercato/shared/lib/http/readJsonSafe";
+import { runRouteMutationGuards } from "@open-mercato/shared/lib/crud/route-mutation-guard";
+import { createLogger } from "@open-mercato/shared/lib/logger";
+import {
+  computeEnvFingerprint,
+  readOperatorsBlob
+} from "../../lib/operators-store.js";
+import { createTillioLock, tillioOperatorLockKey } from "../../lib/locking.js";
+import { evaluateEnvironmentReadiness } from "../../lib/pull-readiness.js";
+import {
+  TillioApiError
+} from "../../lib/errors.js";
+import { tillioErrorCopy } from "../../lib/error-codes.js";
+import {
+  attachOperator,
+  classifyTillioError,
+  readTillioIntegrationState,
+  resolveEnvironment,
+  TILLIO_OPERATOR_RESOURCE_KIND,
+  TillioEnvironmentNotReadyError,
+  TillioOperatorLimitError
+} from "../../lib/operators.js";
+const SUPPORTED_PLUGINS = ["Ringostat"];
+const logger = createLogger("tillio").child({ component: "operators-route" });
+const ATTACH_BLOCKER_MESSAGES = {
+  integration_disabled: "The Tillio integration is disabled. Enable it before attaching an operator.",
+  environment_not_ready: "Run the Tillio environment health check before attaching an operator."
+};
+const attachBodySchema = z.object({
+  plugin: z.literal("Ringostat"),
+  config: z.object({ key: z.string().trim().min(1) }),
+  label: z.string().trim().optional()
+});
+const metadata = {
+  GET: { requireAuth: true, requireFeatures: ["tillio.manage", "integrations.manage"] },
+  POST: { requireAuth: true, requireFeatures: ["tillio.manage", "integrations.manage"] }
+};
+const openApi = {
+  tags: ["Tillio"],
+  summary: "List and attach Tillio operators"
+};
+async function GET(req) {
+  const auth = await getAuthFromRequest(req);
+  if (!auth?.tenantId || !auth.orgId) {
+    return NextResponse.json({ ok: false, code: "unauthorized", message: "Unauthorized" }, { status: 401 });
+  }
+  const container = await createRequestContainer();
+  const credentialsService = container.resolve("integrationCredentialsService");
+  const em = container.resolve("em");
+  const scope = { organizationId: auth.orgId, tenantId: auth.tenantId };
+  const environment = await resolveEnvironment(credentialsService, scope);
+  const integrationState = await readTillioIntegrationState(em, scope);
+  const { ready: environmentReady, blocker: environmentBlocker } = evaluateEnvironmentReadiness({
+    environment,
+    integrationEnabled: integrationState.enabled,
+    environmentHealthy: integrationState.healthy
+  });
+  const blob = await readOperatorsBlob(credentialsService, scope);
+  const currentFingerprint = environment ? computeEnvFingerprint(environment) : null;
+  const operators = blob.operators.map((operator) => ({
+    id: operator.id,
+    plugin: operator.plugin,
+    tenantDomain: operator.tenantDomain,
+    stale: currentFingerprint ? operator.envFingerprint !== currentFingerprint : true
+  }));
+  return NextResponse.json({
+    ok: true,
+    environmentReady,
+    environmentBlocker,
+    tenantSystemId: environment?.tenantSystemId ?? null,
+    supportedPlugins: SUPPORTED_PLUGINS,
+    operators,
+    defaultOperatorId: blob.defaultOperatorId,
+    envDrift: operators.some((operator) => operator.stale)
+  });
+}
+async function POST(req) {
+  const auth = await getAuthFromRequest(req);
+  if (!auth?.tenantId || !auth.orgId) {
+    return NextResponse.json({ ok: false, code: "unauthorized", message: "Unauthorized" }, { status: 401 });
+  }
+  const parsedBody = attachBodySchema.safeParse(await readJsonSafe(req));
+  if (!parsedBody.success) {
+    return NextResponse.json({ ok: false, code: "invalid_payload", message: "Invalid operator payload" }, { status: 400 });
+  }
+  const container = await createRequestContainer();
+  const credentialsService = container.resolve("integrationCredentialsService");
+  const em = container.resolve("em");
+  const scope = { organizationId: auth.orgId, tenantId: auth.tenantId };
+  const environment = await resolveEnvironment(credentialsService, scope);
+  const integrationState = await readTillioIntegrationState(em, scope);
+  const { blocker } = evaluateEnvironmentReadiness({
+    environment,
+    integrationEnabled: integrationState.enabled,
+    environmentHealthy: integrationState.healthy
+  });
+  if (blocker) {
+    return NextResponse.json(
+      { ok: false, code: blocker, section: "environment", message: ATTACH_BLOCKER_MESSAGES[blocker] },
+      { status: 409 }
+    );
+  }
+  const appUrl = process.env.APP_URL ?? "";
+  if (!appUrl.trim()) {
+    return NextResponse.json(
+      { ok: false, code: "app_url_missing", section: "environment", message: "APP_URL is not configured; it is required to derive the operator webhook domain." },
+      { status: 500 }
+    );
+  }
+  const guarded = await runRouteMutationGuards({
+    container,
+    req,
+    auth: { userId: auth.sub, tenantId: auth.tenantId, organizationId: auth.orgId },
+    input: {
+      resourceKind: TILLIO_OPERATOR_RESOURCE_KIND,
+      operation: "create",
+      // The operator key is a credential, so it is described to guards, never handed to them.
+      mutationPayload: { plugin: parsedBody.data.plugin, label: parsedBody.data.label ?? null }
+    }
+  });
+  if (!guarded.ok) return guarded.response;
+  const guardedLabel = typeof guarded.modifiedPayload?.label === "string" ? guarded.modifiedPayload.label : parsedBody.data.label;
+  try {
+    const operator = await attachOperator(
+      { credentialsService, scope, appUrl, withLock: createTillioLock(em, tillioOperatorLockKey(scope)) },
+      { plugin: parsedBody.data.plugin, config: parsedBody.data.config, label: guardedLabel }
+    );
+    await guarded.runAfterSuccess();
+    return NextResponse.json({
+      ok: true,
+      operator: { id: operator.id, plugin: operator.plugin, tenantDomain: operator.tenantDomain }
+    });
+  } catch (err) {
+    if (err instanceof TillioOperatorLimitError) {
+      return NextResponse.json({ ok: false, code: "operator_limit", section: "operator", message: err.message }, { status: 409 });
+    }
+    if (err instanceof TillioEnvironmentNotReadyError) {
+      return NextResponse.json({ ok: false, code: "environment_not_ready", section: "environment", message: err.message }, { status: 409 });
+    }
+    if (err instanceof TillioApiError) {
+      const section = classifyTillioError(err);
+      logger.error("Tillio operator attach failed at provider", {
+        section,
+        status: err.status,
+        detail: err.detail,
+        err
+      });
+      return NextResponse.json(
+        {
+          ok: false,
+          code: "provider_error",
+          section,
+          message: tillioErrorCopy("provider_error", "provider_error").fallback
+        },
+        { status: section === "environment" ? 502 : 422 }
+      );
+    }
+    return NextResponse.json({ ok: false, code: "attach_failed", section: "operator", message: "Failed to attach the operator." }, { status: 500 });
+  }
+}
+export {
+  GET,
+  POST,
+  metadata,
+  openApi
+};
+//# sourceMappingURL=route.js.map

package/dist/modules/tillio/api/operators/route.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../src/modules/tillio/api/operators/route.ts"],
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { readJsonSafe } from '@open-mercato/shared/lib/http/readJsonSafe'\nimport { runRouteMutationGuards } from '@open-mercato/shared/lib/crud/route-mutation-guard'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\nimport type { IntegrationScope } from '@open-mercato/shared/modules/integrations/types'\nimport {\n  computeEnvFingerprint,\n  readOperatorsBlob,\n  type TillioCredentialsService,\n} from '../../lib/operators-store'\nimport { createTillioLock, tillioOperatorLockKey } from '../../lib/locking'\nimport { evaluateEnvironmentReadiness, type EnvironmentBlocker } from '../../lib/pull-readiness'\nimport {\n  TillioApiError,\n} from '../../lib/errors'\nimport { tillioErrorCopy } from '../../lib/error-codes'\nimport {\n  attachOperator,\n  classifyTillioError,\n  readTillioIntegrationState,\n  resolveEnvironment,\n  TILLIO_OPERATOR_RESOURCE_KIND,\n  TillioEnvironmentNotReadyError,\n  TillioOperatorLimitError,\n} from '../../lib/operators'\n\nconst SUPPORTED_PLUGINS = ['Ringostat'] as const\nconst logger = createLogger('tillio').child({ component: 'operators-route' })\n\n// Same blockers as the pull reports, worded for the action the caller was attempting.\nconst ATTACH_BLOCKER_MESSAGES: Record<EnvironmentBlocker, string> = {\n  integration_disabled: 'The Tillio integration is disabled. Enable it before attaching an operator.',\n  environment_not_ready: 'Run the Tillio environment health check before attaching an operator.',\n}\n\nconst attachBodySchema = z.object({\n  plugin: z.literal('Ringostat'),\n  config: z.object({ key: z.string().trim().min(1) }),\n  label: z.string().trim().optional(),\n})\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['tillio.manage', 'integrations.manage'] },\n  POST: { requireAuth: true, requireFeatures: ['tillio.manage', 'integrations.manage'] },\n}\n\nexport const openApi = {\n  tags: ['Tillio'],\n  summary: 'List and attach Tillio operators',\n}\n\nexport async function GET(req: Request) {\n  const auth = await getAuthFromRequest(req)\n  if (!auth?.tenantId || !auth.orgId) {\n    return NextResponse.json({ ok: false, code: 'unauthorized', message: 'Unauthorized' }, { status: 401 })\n  }\n\n  const container = await createRequestContainer()\n  const credentialsService = container.resolve('integrationCredentialsService') as TillioCredentialsService\n  const em = container.resolve('em') as EntityManager\n  const scope: IntegrationScope = { organizationId: auth.orgId, tenantId: auth.tenantId }\n\n  const environment = await resolveEnvironment(credentialsService, scope)\n  const integrationState = await readTillioIntegrationState(em, scope)\n  const { ready: environmentReady, blocker: environmentBlocker } = evaluateEnvironmentReadiness({\n    environment,\n    integrationEnabled: integrationState.enabled,\n    environmentHealthy: integrationState.healthy,\n  })\n  const blob = await readOperatorsBlob(credentialsService, scope)\n  const currentFingerprint = environment ? computeEnvFingerprint(environment) : null\n\n  const operators = blob.operators.map((operator) => ({\n    id: operator.id,\n    plugin: operator.plugin,\n    tenantDomain: operator.tenantDomain,\n    stale: currentFingerprint ? operator.envFingerprint !== currentFingerprint : true,\n  }))\n\n  return NextResponse.json({\n    ok: true,\n    environmentReady,\n    environmentBlocker,\n    tenantSystemId: environment?.tenantSystemId ?? null,\n    supportedPlugins: SUPPORTED_PLUGINS,\n    operators,\n    defaultOperatorId: blob.defaultOperatorId,\n    envDrift: operators.some((operator) => operator.stale),\n  })\n}\n\nexport async function POST(req: Request) {\n  const auth = await getAuthFromRequest(req)\n  if (!auth?.tenantId || !auth.orgId) {\n    return NextResponse.json({ ok: false, code: 'unauthorized', message: 'Unauthorized' }, { status: 401 })\n  }\n\n  const parsedBody = attachBodySchema.safeParse(await readJsonSafe(req))\n  if (!parsedBody.success) {\n    return NextResponse.json({ ok: false, code: 'invalid_payload', message: 'Invalid operator payload' }, { status: 400 })\n  }\n\n  const container = await createRequestContainer()\n  const credentialsService = container.resolve('integrationCredentialsService') as TillioCredentialsService\n  const em = container.resolve('em') as EntityManager\n  const scope: IntegrationScope = { organizationId: auth.orgId, tenantId: auth.tenantId }\n\n  const environment = await resolveEnvironment(credentialsService, scope)\n  const integrationState = await readTillioIntegrationState(em, scope)\n  // Provisioning an operator registers a config on Tillio's side, so the environment is checked\n  // here rather than left to the pull to discover. The decision is the shared one; only the\n  // wording is specific to attaching.\n  const { blocker } = evaluateEnvironmentReadiness({\n    environment,\n    integrationEnabled: integrationState.enabled,\n    environmentHealthy: integrationState.healthy,\n  })\n  if (blocker) {\n    return NextResponse.json(\n      { ok: false, code: blocker, section: 'environment', message: ATTACH_BLOCKER_MESSAGES[blocker] },\n      { status: 409 },\n    )\n  }\n\n  const appUrl = process.env.APP_URL ?? ''\n  if (!appUrl.trim()) {\n    return NextResponse.json(\n      { ok: false, code: 'app_url_missing', section: 'environment', message: 'APP_URL is not configured; it is required to derive the operator webhook domain.' },\n      { status: 500 },\n    )\n  }\n\n  const guarded = await runRouteMutationGuards({\n    container,\n    req,\n    auth: { userId: auth.sub, tenantId: auth.tenantId, organizationId: auth.orgId },\n    input: {\n      resourceKind: TILLIO_OPERATOR_RESOURCE_KIND,\n      operation: 'create',\n      // The operator key is a credential, so it is described to guards, never handed to them.\n      mutationPayload: { plugin: parsedBody.data.plugin, label: parsedBody.data.label ?? null },\n    },\n  })\n  if (!guarded.ok) return guarded.response\n\n  const guardedLabel = typeof guarded.modifiedPayload?.label === 'string'\n    ? guarded.modifiedPayload.label\n    : parsedBody.data.label\n\n  try {\n    const operator = await attachOperator(\n      { credentialsService, scope, appUrl, withLock: createTillioLock(em, tillioOperatorLockKey(scope)) },\n      { plugin: parsedBody.data.plugin, config: parsedBody.data.config, label: guardedLabel },\n    )\n    await guarded.runAfterSuccess()\n    return NextResponse.json({\n      ok: true,\n      operator: { id: operator.id, plugin: operator.plugin, tenantDomain: operator.tenantDomain },\n    })\n  } catch (err) {\n    if (err instanceof TillioOperatorLimitError) {\n      return NextResponse.json({ ok: false, code: 'operator_limit', section: 'operator', message: err.message }, { status: 409 })\n    }\n    if (err instanceof TillioEnvironmentNotReadyError) {\n      return NextResponse.json({ ok: false, code: 'environment_not_ready', section: 'environment', message: err.message }, { status: 409 })\n    }\n    if (err instanceof TillioApiError) {\n      const section = classifyTillioError(err)\n      logger.error('Tillio operator attach failed at provider', {\n        section,\n        status: err.status,\n        detail: err.detail,\n        err,\n      })\n      return NextResponse.json(\n        {\n          ok: false,\n          code: 'provider_error',\n          section,\n          message: tillioErrorCopy('provider_error', 'provider_error').fallback,\n        },\n        { status: section === 'environment' ? 502 : 422 },\n      )\n    }\n    return NextResponse.json({ ok: false, code: 'attach_failed', section: 'operator', message: 'Failed to attach the operator.' }, { status: 500 })\n  }\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAElB,SAAS,0BAA0B;AACnC,SAAS,8BAA8B;AACvC,SAAS,oBAAoB;AAC7B,SAAS,8BAA8B;AACvC,SAAS,oBAAoB;AAE7B;AAAA,EACE;AAAA,EACA;AAAA,OAEK;AACP,SAAS,kBAAkB,6BAA6B;AACxD,SAAS,oCAA6D;AACtE;AAAA,EACE;AAAA,OACK;AACP,SAAS,uBAAuB;AAChC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEP,MAAM,oBAAoB,CAAC,WAAW;AACtC,MAAM,SAAS,aAAa,QAAQ,EAAE,MAAM,EAAE,WAAW,kBAAkB,CAAC;AAG5E,MAAM,0BAA8D;AAAA,EAClE,sBAAsB;AAAA,EACtB,uBAAuB;AACzB;AAEA,MAAM,mBAAmB,EAAE,OAAO;AAAA,EAChC,QAAQ,EAAE,QAAQ,WAAW;AAAA,EAC7B,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,CAAC;AAAA,EAClD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AACpC,CAAC;AAEM,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,iBAAiB,qBAAqB,EAAE;AAAA,EACpF,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,iBAAiB,qBAAqB,EAAE;AACvF;AAEO,MAAM,UAAU;AAAA,EACrB,MAAM,CAAC,QAAQ;AAAA,EACf,SAAS;AACX;AAEA,eAAsB,IAAI,KAAc;AACtC,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM,YAAY,CAAC,KAAK,OAAO;AAClC,WAAO,aAAa,KAAK,EAAE,IAAI,OAAO,MAAM,gBAAgB,SAAS,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACxG;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,qBAAqB,UAAU,QAAQ,+BAA+B;AAC5E,QAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,QAAM,QAA0B,EAAE,gBAAgB,KAAK,OAAO,UAAU,KAAK,SAAS;AAEtF,QAAM,cAAc,MAAM,mBAAmB,oBAAoB,KAAK;AACtE,QAAM,mBAAmB,MAAM,2BAA2B,IAAI,KAAK;AACnE,QAAM,EAAE,OAAO,kBAAkB,SAAS,mBAAmB,IAAI,6BAA6B;AAAA,IAC5F;AAAA,IACA,oBAAoB,iBAAiB;AAAA,IACrC,oBAAoB,iBAAiB;AAAA,EACvC,CAAC;AACD,QAAM,OAAO,MAAM,kBAAkB,oBAAoB,KAAK;AAC9D,QAAM,qBAAqB,cAAc,sBAAsB,WAAW,IAAI;AAE9E,QAAM,YAAY,KAAK,UAAU,IAAI,CAAC,cAAc;AAAA,IAClD,IAAI,SAAS;AAAA,IACb,QAAQ,SAAS;AAAA,IACjB,cAAc,SAAS;AAAA,IACvB,OAAO,qBAAqB,SAAS,mBAAmB,qBAAqB;AAAA,EAC/E,EAAE;AAEF,SAAO,aAAa,KAAK;AAAA,IACvB,IAAI;AAAA,IACJ;AAAA,IACA;AAAA,IACA,gBAAgB,aAAa,kBAAkB;AAAA,IAC/C,kBAAkB;AAAA,IAClB;AAAA,IACA,mBAAmB,KAAK;AAAA,IACxB,UAAU,UAAU,KAAK,CAAC,aAAa,SAAS,KAAK;AAAA,EACvD,CAAC;AACH;AAEA,eAAsB,KAAK,KAAc;AACvC,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM,YAAY,CAAC,KAAK,OAAO;AAClC,WAAO,aAAa,KAAK,EAAE,IAAI,OAAO,MAAM,gBAAgB,SAAS,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACxG;AAEA,QAAM,aAAa,iBAAiB,UAAU,MAAM,aAAa,GAAG,CAAC;AACrE,MAAI,CAAC,WAAW,SAAS;AACvB,WAAO,aAAa,KAAK,EAAE,IAAI,OAAO,MAAM,mBAAmB,SAAS,2BAA2B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACvH;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,qBAAqB,UAAU,QAAQ,+BAA+B;AAC5E,QAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,QAAM,QAA0B,EAAE,gBAAgB,KAAK,OAAO,UAAU,KAAK,SAAS;AAEtF,QAAM,cAAc,MAAM,mBAAmB,oBAAoB,KAAK;AACtE,QAAM,mBAAmB,MAAM,2BAA2B,IAAI,KAAK;AAInE,QAAM,EAAE,QAAQ,IAAI,6BAA6B;AAAA,IAC/C;AAAA,IACA,oBAAoB,iBAAiB;AAAA,IACrC,oBAAoB,iBAAiB;AAAA,EACvC,CAAC;AACD,MAAI,SAAS;AACX,WAAO,aAAa;AAAA,MAClB,EAAE,IAAI,OAAO,MAAM,SAAS,SAAS,eAAe,SAAS,wBAAwB,OAAO,EAAE;AAAA,MAC9F,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AAEA,QAAM,SAAS,QAAQ,IAAI,WAAW;AACtC,MAAI,CAAC,OAAO,KAAK,GAAG;AAClB,WAAO,aAAa;AAAA,MAClB,EAAE,IAAI,OAAO,MAAM,mBAAmB,SAAS,eAAe,SAAS,mFAAmF;AAAA,MAC1J,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AAEA,QAAM,UAAU,MAAM,uBAAuB;AAAA,IAC3C;AAAA,IACA;AAAA,IACA,MAAM,EAAE,QAAQ,KAAK,KAAK,UAAU,KAAK,UAAU,gBAAgB,KAAK,MAAM;AAAA,IAC9E,OAAO;AAAA,MACL,cAAc;AAAA,MACd,WAAW;AAAA;AAAA,MAEX,iBAAiB,EAAE,QAAQ,WAAW,KAAK,QAAQ,OAAO,WAAW,KAAK,SAAS,KAAK;AAAA,IAC1F;AAAA,EACF,CAAC;AACD,MAAI,CAAC,QAAQ,GAAI,QAAO,QAAQ;AAEhC,QAAM,eAAe,OAAO,QAAQ,iBAAiB,UAAU,WAC3D,QAAQ,gBAAgB,QACxB,WAAW,KAAK;AAEpB,MAAI;AACF,UAAM,WAAW,MAAM;AAAA,MACrB,EAAE,oBAAoB,OAAO,QAAQ,UAAU,iBAAiB,IAAI,sBAAsB,KAAK,CAAC,EAAE;AAAA,MAClG,EAAE,QAAQ,WAAW,KAAK,QAAQ,QAAQ,WAAW,KAAK,QAAQ,OAAO,aAAa;AAAA,IACxF;AACA,UAAM,QAAQ,gBAAgB;AAC9B,WAAO,aAAa,KAAK;AAAA,MACvB,IAAI;AAAA,MACJ,UAAU,EAAE,IAAI,SAAS,IAAI,QAAQ,SAAS,QAAQ,cAAc,SAAS,aAAa;AAAA,IAC5F,CAAC;AAAA,EACH,SAAS,KAAK;AACZ,QAAI,eAAe,0BAA0B;AAC3C,aAAO,aAAa,KAAK,EAAE,IAAI,OAAO,MAAM,kBAAkB,SAAS,YAAY,SAAS,IAAI,QAAQ,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC5H;AACA,QAAI,eAAe,gCAAgC;AACjD,aAAO,aAAa,KAAK,EAAE,IAAI,OAAO,MAAM,yBAAyB,SAAS,eAAe,SAAS,IAAI,QAAQ,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACtI;AACA,QAAI,eAAe,gBAAgB;AACjC,YAAM,UAAU,oBAAoB,GAAG;AACvC,aAAO,MAAM,6CAA6C;AAAA,QACxD;AAAA,QACA,QAAQ,IAAI;AAAA,QACZ,QAAQ,IAAI;AAAA,QACZ;AAAA,MACF,CAAC;AACD,aAAO,aAAa;AAAA,QAClB;AAAA,UACE,IAAI;AAAA,UACJ,MAAM;AAAA,UACN;AAAA,UACA,SAAS,gBAAgB,kBAAkB,gBAAgB,EAAE;AAAA,QAC/D;AAAA,QACA,EAAE,QAAQ,YAAY,gBAAgB,MAAM,IAAI;AAAA,MAClD;AAAA,IACF;AACA,WAAO,aAAa,KAAK,EAAE,IAAI,OAAO,MAAM,iBAAiB,SAAS,YAAY,SAAS,iCAAiC,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAChJ;AACF;",
+  "names": []
+}