@wildo-ai/saas-backend-lib 1.1.1 → 1.1.3

package/dist/esm/monitoring/observability/services/metrics.service.js.map

@@ -1 +1 @@
-{"version":3,"file":"metrics.service.js","sourceRoot":"","sources":["../../../../../../src/monitoring/observability/services/metrics.service.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,EAAE,OAAO,EAAS,MAAM,oBAAoB,CAAC;AACpD,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAIvC;;;;;;;;;;GAUG;AAEI,IAAM,cAAc,GAApB,MAAM,cAAc;IACjB,KAAK,CAAQ;IACb,kBAAkB,CAAoB;IAE9C;QACE,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,QAAQ,CAAC,oBAAoB,EAAE,OAAO,CAAC,CAAC;QAC7D,IAAI,CAAC,iBAAiB,EAAE,CAAC;IAC3B,CAAC;IAEO,iBAAiB;QACvB,IAAI,CAAC,kBAAkB,GAAG;YACxB,wEAAwE;YACxE,gEAAgE;YAChE,wEAAwE;YACxE,gEAAgE;YAChE,mEAAmE;YACnE,sCAAsC;YACtC,gEAAgE;YAChE,kEAAkE;YAClE,2CAA2C;YAC3C,sEAAsE;YACtE,gEAAgE;YAChE,mEAAmE;YACnE,gDAAgD;YAChD,sEAAsE;YACtE,qEAAqE;YACrE,mEAAmE;YACnE,oCAAoC;YACpC,0BAA0B,EAAE,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,uCAAuC,EAAE;gBAC5F,WAAW,EAAE,yGAAyG;aACvH,CAAC;YAEF,4BAA4B,EAAE,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,yCAAyC,EAAE;gBAChG,WAAW,EAAE,2FAA2F;aACzG,CAAC;YAEF,6BAA6B,EAAE,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,yCAAyC,EAAE;gBACjG,WAAW,EAAE,6GAA6G;aAC3H,CAAC;YAEF,mBAAmB,EAAE,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,wBAAwB,EAAE;gBACtE,WAAW,EAAE,gGAAgG;aAC9G,CAAC;YAEF,iCAAiC,EAAE,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,2CAA2C,EAAE;gBACzG,WAAW,EAAE,oGAAoG;aAClH,CAAC;YAEF,6DAA6D;YAC7D,4DAA4D;YAC5D,4EAA4E;YAC5E,6DAA6D;YAC7D,8DAA8D;YAC9D,6CAA6C;YAC7C,8DAA8D;YAC9D,6CAA6C;YAC7C,2DAA2D;YAC3D,uBAAuB,EAAE,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,4BAA4B,EAAE;gBAC9E,WAAW,EAAE,qFAAqF;aACnG,CAAC;YAEF,6DAA6D;YAC7D,oEAAoE;YACpE,2EAA2E;YAC3E,uEAAuE;YACvE,yEAAyE;YACzE,iCAAiC;YACjC,2CAA2C;YAC3C,2EAA2E;YAC3E,qBAAqB,EAAE,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,0BAA0B,EAAE;gBAC1E,WAAW,EAAE,uFAAuF;aACrG,CAAC;YAEF,kDAAkD;YAClD,yEAAyE;YACzE,6EAA6E;YAC7E,0EAA0E;YAC1E,2EAA2E;YAC3E,0EAA0E;YAC1E,UAAU;YACV,kDAAkD;YAClD,yDAAyD;YACzD,wBAAwB,EAAE,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,6BAA6B,EAAE;gBAChF,WAAW,EAAE,kGAAkG;aAChH,CAAC;YAEF,uDAAuD;YACvD,8FAA8F;YAC9F,kGAAkG;YAClG,iGAAiG;YACjG,kGAAkG;YAClG,qGAAqG;YACrG,qBAAqB;YACrB,mFAAmF;YACnF,uFAAuF;YACvF,oCAAoC,EAAE,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,0CAA0C,EAAE;gBACzG,WAAW,EACT,mHAAmH;aACtH,CAAC;YAEF,gFAAgF;YAChF,+FAA+F;YAC/F,2FAA2F;YAC3F,+FAA+F;YAC/F,+FAA+F;YAC/F,+FAA+F;YAC/F,4FAA4F;YAC5F,qBAAqB;YACrB,4CAA4C;YAC5C,8FAA8F;YAC9F,4FAA4F;YAC5F,sBAAsB,EAAE,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,2BAA2B,EAAE;gBAC5E,WAAW,EAAE,4GAA4G;aAC1H,CAAC;SACH,CAAC;IACJ,CAAC;IAED,8EAA8E;IAC9E,0CAA0C;IAC1C,8EAA8E;IAC9E,yEAAyE;IACzE,uEAAuE;IACvE,kEAAkE;IAClE,sDAAsD;IACtD,8EAA8E;IAE9E;;;;OAIG;IACI,6BAA6B,CAAC,MAA8C;QACjF,IAAI,CAAC,kBAAkB,CAAC,0BAA0B,CAAC,GAAG,CAAC,CAAC,EAAE;YACxD,QAAQ,EAAE,MAAM,CAAC,OAAO;YACxB,UAAU,EAAE,MAAM,CAAC,SAAS;SAC7B,CAAC,CAAC;IACL,CAAC;IAED;;;;OAIG;IACI,8BAA8B,CAAC,MAA8C;QAClF,IAAI,CAAC,kBAAkB,CAAC,4BAA4B,CAAC,GAAG,CAAC,CAAC,EAAE;YAC1D,QAAQ,EAAE,MAAM,CAAC,OAAO;YACxB,UAAU,EAAE,MAAM,CAAC,SAAS;SAC7B,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;;OAQG;IACI,kCAAkC,CAAC,MAIzC;QACC,IAAI,CAAC,kBAAkB,CAAC,6BAA6B,CAAC,GAAG,CAAC,CAAC,EAAE;YAC3D,QAAQ,EAAE,MAAM,CAAC,OAAO;YACxB,UAAU,EAAE,MAAM,CAAC,SAAS;YAC5B,MAAM,EAAE,MAAM,CAAC,MAAM;SACtB,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;;OAwBG;IACI,oBAAoB,CAAC,MAM3B;QACC,IAAI,CAAC,kBAAkB,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC,EAAE;YACjD,QAAQ,EAAE,MAAM,CAAC,OAAO;YACxB,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,cAAc,EAAE,MAAM,CAAC,aAAa;YACpC,UAAU,EAAE,MAAM,CAAC,SAAS;SAC7B,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;;;;;;;;;OAeG;IACI,uCAAuC,CAAC,MAG9C;QACC,MAAM,MAAM,GAAG,CAAC,GAAG,EAAE;YACnB,IAAI,MAAM,CAAC,SAAS,IAAI,CAAC;gBAAE,OAAO,GAAG,CAAC;YACtC,IAAI,MAAM,CAAC,SAAS,IAAI,EAAE;gBAAE,OAAO,MAAM,CAAC;YAC1C,IAAI,MAAM,CAAC,SAAS,IAAI,EAAE;gBAAE,OAAO,OAAO,CAAC;YAC3C,IAAI,MAAM,CAAC,SAAS,IAAI,GAAG;gBAAE,OAAO,QAAQ,CAAC;YAC7C,OAAO,MAAM,CAAC;QAChB,CAAC,CAAC,EAAE,CAAC;QACL,IAAI,CAAC,kBAAkB,CAAC,iCAAiC,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE;YAClF,iBAAiB,EAAE,MAAM;SAC1B,CAAC,CAAC;IACL,CAAC;IAED,8EAA8E;IAC9E,4DAA4D;IAC5D,8EAA8E;IAC9E,0EAA0E;IAC1E,wEAAwE;IACxE,0EAA0E;IAC1E,2EAA2E;IAC3E,2EAA2E;IAC3E,8DAA8D;IAC9D,2CAA2C;IAC3C,EAAE;IACF,mBAAmB;IACnB,0EAA0E;IAC1E,iEAAiE;IACjE,uEAAuE;IACvE,wEAAwE;IACxE,gEAAgE;IAChE,kBAAkB;IAClB,EAAE;IACF,uEAAuE;IACvE,8EAA8E;IAE9E;;;;;;;;;;;;;;OAcG;IACI,+BAA+B,CAAC,MAQtC;QACC,IAAI,CAAC,kBAAkB,CAAC,uBAAuB,CAAC,GAAG,CAAC,CAAC,EAAE;YACrD,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,OAAO,EAAE,MAAM,CAAC,OAAO;SACxB,CAAC,CAAC;IACL,CAAC;IAED,8EAA8E;IAC9E,oDAAoD;IACpD,8EAA8E;IAE9E;;;;;;;;OAQG;IACI,sBAAsB,CAAC,MAA+B;QAC3D,IAAI,CAAC,kBAAkB,CAAC,qBAAqB,CAAC,GAAG,CAAC,CAAC,EAAE;YACnD,QAAQ,EAAE,MAAM,CAAC,WAAW;SAC7B,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;;;OASG;IACI,yBAAyB,CAAC,MAA+B;QAC9D,IAAI,CAAC,kBAAkB,CAAC,wBAAwB,CAAC,GAAG,CAAC,CAAC,EAAE;YACtD,QAAQ,EAAE,MAAM,CAAC,WAAW;SAC7B,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;;;;OAUG;IACI,qCAAqC,CAAC,MAA+C;QAC1F,IAAI,CAAC,kBAAkB,CAAC,oCAAoC,CAAC,GAAG,CAAC,CAAC,EAAE;YAClE,QAAQ,EAAE,MAAM,CAAC,WAAW;YAC5B,MAAM,EAAE,MAAM,CAAC,MAAM;SACtB,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;;OAQG;IACI,uBAAuB;QAC5B,IAAI,CAAC,kBAAkB,CAAC,sBAAsB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACxD,CAAC;CACF,CAAA;AAzWY,cAAc;IAD1B,UAAU,EAAE;;GACA,cAAc,CAyW1B","sourcesContent":["import { metrics, Meter } from '@opentelemetry/api';\nimport { injectable } from 'inversify';\nimport type { AuthScopeType } from '@wildo-ai/saas-models';\nimport { MetricDefinitions } from '~wildo-backend-lib/monitoring/observability/models/observability.backend.schemas';\n\n/**\n * Records the operator-facing metrics that have LIVE producers — the\n * data-seeding counters (dispatcher engines + shared ledger writers) and the\n * M2M outbound-webhook counter (delivery batch worker). All instruments are\n * created on the global meter, which the OTLP preload (`otel-preload.ts`) wires\n * to the OTLP metric exporter; with no preload the global meter is a no-op, so\n * recording is silently inert (never throws). The former HTTP/DB/auth/etc.\n * `record*` helpers were removed in Slice 2 Phase 3 — their only caller was the\n * dead observability middleware, and HTTP metrics now come from the preload's\n * auto-instrumentation (bounded, semconv) instead of unbounded org/user labels.\n */\n@injectable()\nexport class MetricsService {\n  private meter: Meter;\n  private metricsDefinitions: MetricDefinitions;\n\n  constructor() {\n    this.meter = metrics.getMeter('wildo-saas-metrics', '1.0.0');\n    this.initializeMetrics();\n  }\n\n  private initializeMetrics(): void {\n    this.metricsDefinitions = {\n      // ---------------------------------------------------------------------\n      // Data Seeding (Phase 6.D / F-17 — Prom-style operator metrics)\n      // ---------------------------------------------------------------------\n      // The data-seeding dispatcher exposes four observable concerns:\n      //   - LAZY C1 cache hit-rate (first-access bootstrap short-circuit\n      //     effectiveness on the hot path),\n      //   - LAZY thunder-herd bow-outs (concurrent first-access races\n      //     resolved silently, distinguishing the \"winner already done\"\n      //     vs \"winner still running\" branches),\n      //   - DataSeedRun terminal totals (every COMPLETED / PARTIAL / FAILED\n      //     ledger transition, per seed × mode × trigger origin — the\n      //     metric covers ALL engines, current and future, because it is\n      //     fired from the shared lifecycle writers).\n      // Counter names follow the Prometheus convention `_total` suffix; the\n      // OpenTelemetry meter is the existing `wildo-saas-metrics` meter, so\n      // the counters export via the OTLP metric reader configured in the\n      // preload without any extra wiring.\n      dataSeedingLazyC1CacheHits: this.meter.createCounter('data_seeding_lazy_c1_cache_hits_total', {\n        description: 'LAZY engine C1 idempotency-probe cache hits (already-completed scope, skipped without entry resolution)',\n      }),\n\n      dataSeedingLazyC1CacheMisses: this.meter.createCounter('data_seeding_lazy_c1_cache_misses_total', {\n        description: 'LAZY engine C1 idempotency-probe cache misses (cold-start, run-slot acquisition proceeds)',\n      }),\n\n      dataSeedingThunderHerdBowouts: this.meter.createCounter('data_seeding_thunder_herd_bowouts_total', {\n        description: 'LAZY engine concurrent-first-access races where the slot acquisition lost and the caller bowed out silently',\n      }),\n\n      dataSeedingRunTotal: this.meter.createCounter('data_seeding_run_total', {\n        description: 'DataSeedRun terminal-state writes (COMPLETED / PARTIAL / FAILED) across all dispatcher engines',\n      }),\n\n      dataSeedingAdminListSeedsDuration: this.meter.createHistogram('data_seeding_admin_list_seeds_duration_ms', {\n        description: 'Wall-clock duration of GET /internal/admin/data-seeding/seeds (N+1 lastRun lookup) in milliseconds',\n      }),\n\n      // ─── M2M Outbound Webhook Delivery (Phase 5 / Step 17) ────\n      // One counter covering every worker `doHandle` return — the\n      // outcome enum maps 1:1 to the five `M2MWebhookDeliveryBatchOutput.outcome`\n      // values (`delivered`, `retry_scheduled`, `failed_terminal`,\n      // `skipped_missing_row`, `skipped_already_leased`). Operators\n      // answer \"is webhook delivery healthy?\" with\n      //   rate(m2m_webhook_delivery_total{outcome=\"delivered\"}[5m])\n      //     / rate(m2m_webhook_delivery_total[5m])\n      // Cardinality: 2 `scope` × 5 `outcome` = 10 active series.\n      m2mWebhookDeliveryTotal: this.meter.createCounter('m2m_webhook_delivery_total', {\n        description: 'M2M outbound webhook delivery terminal / intermediate outcomes (one per worker run)',\n      }),\n\n      // ─── Compliance Audit-Log Sink Failures (Phase 5 / F6) ────\n      // A Layer-2 provider audit sink threw while recording an event. The\n      // composite (`CompositeAuditLogSink`) isolates the failure so the business\n      // op is unaffected, but a silently-failing audit sink (\"we think we're\n      // auditing but we aren't\") must not go unnoticed — this counter makes it\n      // observable. Operators alert on\n      //   rate(audit_sink_failure_total[5m]) > 0\n      // Cardinality: one series per declared audit `provider` (immudb, SIEM, …).\n      auditSinkFailureTotal: this.meter.createCounter('audit_sink_failure_total', {\n        description: 'Compliance audit-log provider sink failures (one per sink throw during event fan-out)',\n      }),\n\n      // ─── Compliance Audit-Log TAMPER detections ────\n      // A tamper-evident audit provider (immudb) PROVED, via its cryptographic\n      // durable-state consistency proof, that its store was rolled back / tampered\n      // between restarts. DISTINCT from `audit_sink_failure_total`: a transient\n      // write miss is backfilled by the reconciler and needs no human, whereas a\n      // proven rollback of the audit ledger is a compliance incident. Operators\n      // page on\n      //   increase(audit_tamper_detected_total[1h]) > 0\n      // Cardinality: one series per declared audit `provider`.\n      auditTamperDetectedTotal: this.meter.createCounter('audit_tamper_detected_total', {\n        description: 'Compliance audit-log store tamper/rollback detections (durable-state consistency-proof failures)',\n      }),\n\n      // ─── Compliance Audit-Log assurance DEGRADATIONS ────\n      // A tamper-evident audit provider dropped from FULL cross-restart tamper-evidence to a WEAKER\n      // assurance level — ephemeral mode (no durable anchor), a corrupt/unreadable anchor, an un-pinned\n      // server-identity change, or a per-op proof failure. DISTINCT from `audit_tamper_detected_total`\n      // (a PROVEN rollback → page) and `audit_sink_failure_total` (a write hiccup): a degradation means\n      // \"we may not detect a future tamper\" — it should be alerted so the guarantee never lapses silently.\n      // Operators alert on\n      //   increase(audit_integrity_assurance_degraded_total{reason=\"ephemeral\"}[1h]) > 0\n      // Cardinality: one series per (provider, reason) — `reason` is a small fixed slug set.\n      auditIntegrityAssuranceDegradedTotal: this.meter.createCounter('audit_integrity_assurance_degraded_total', {\n        description:\n          'Compliance audit-log assurance degradations (ephemeral / corrupt-anchor / identity-change / per-op proof failure)',\n      }),\n\n      // ─── Compliance Audit-Log LAYER-1 (authoritative DB store) write failures ────\n      // The always-on Layer-1 database audit store (`AuditLogsBackendService._createAuditLog`) threw\n      // while writing the authoritative row. DISTINCT from `audit_sink_failure_total` (a Layer-2\n      // provider sink — immudb/SIEM — hiccup, backfilled by the reconciler): a Layer-1 failure means\n      // the PRIMARY, authoritative audit record itself was NOT persisted — the most severe \"we think\n      // we're auditing but we aren't\" state. Emission is fire-and-forget (audit must never break the\n      // business op), so without this counter the outage is invisible past a swallowed warn line.\n      // Operators alert on\n      //   rate(audit_store_failure_total[5m]) > 0\n      // Cardinality: ONE label-free series (the authoritative store has no provider dimension). The\n      // alert rule is specified in `.claude/plans/alerting-system-design-analysis.md` Appendix D.\n      auditStoreFailureTotal: this.meter.createCounter('audit_store_failure_total', {\n        description: 'Compliance audit-log Layer-1 authoritative DB store write failures (one per _createAuditLog persist throw)',\n      }),\n    };\n  }\n\n  // ---------------------------------------------------------------------------\n  // Data Seeding metrics (Phase 6.D / F-17)\n  // ---------------------------------------------------------------------------\n  // Typed wrappers around the four data-seeding counters so the dispatcher\n  // never reaches into the raw OpenTelemetry meter and so all label keys\n  // stay consistent (snake_case to match Prometheus convention; the\n  // dispatcher passes already-stringified enum values).\n  // ---------------------------------------------------------------------------\n\n  /**\n   * LAZY engine — C1 idempotency-probe cache hit. Fired once per\n   * (seed × scope) when `runLazy` short-circuits because a prior\n   * COMPLETED `DataSeedRun` row already covers the scope.\n   */\n  public recordDataSeedingLazyCacheHit(params: { seedKey: string; scopeKind: string }): void {\n    this.metricsDefinitions.dataSeedingLazyC1CacheHits.add(1, {\n      seed_key: params.seedKey,\n      scope_kind: params.scopeKind,\n    });\n  }\n\n  /**\n   * LAZY engine — C1 idempotency-probe cache miss. Fired once per\n   * (seed × scope) when `runLazy` proceeds past the C1 probe and\n   * attempts to acquire a run-slot.\n   */\n  public recordDataSeedingLazyCacheMiss(params: { seedKey: string; scopeKind: string }): void {\n    this.metricsDefinitions.dataSeedingLazyC1CacheMisses.add(1, {\n      seed_key: params.seedKey,\n      scope_kind: params.scopeKind,\n    });\n  }\n\n  /**\n   * LAZY engine — concurrent first-access race resolved by silent\n   * bow-out. `reason` mirrors the dispatcher's\n   * `acquireLazyRunSlotWithRaceGuard` outcome:\n   *   - `concurrent-completed` — a winning concurrent caller already\n   *     wrote a COMPLETED row (data is there);\n   *   - `concurrent-running`   — a winning concurrent caller currently\n   *     owns the RUNNING slot (data is being written).\n   */\n  public recordDataSeedingThunderHerdBowout(params: {\n    seedKey: string;\n    scopeKind: string;\n    reason: 'concurrent-completed' | 'concurrent-running';\n  }): void {\n    this.metricsDefinitions.dataSeedingThunderHerdBowouts.add(1, {\n      seed_key: params.seedKey,\n      scope_kind: params.scopeKind,\n      reason: params.reason,\n    });\n  }\n\n  /**\n   * Terminal `DataSeedRun` write — fired exactly once per row\n   * transition into COMPLETED / PARTIAL / FAILED. The metric is\n   * emitted from the shared lifecycle writers\n   * (`completeDataSeedRun` / `failDataSeedRun` /\n   * `writeFreshFailedDataSeedRun`) so every dispatcher engine —\n   * Level-A application lifecycle, Level-B resource lifecycle, LAZY\n   * first-access, MANUAL re-runs, and the deferred Phase-7 cron —\n   * contributes uniformly without per-engine wiring.\n   *\n   * `mode`, `status`, `triggerOrigin`, and `scopeKind` are passed as\n   * raw enum string values (the dispatcher does the `.toString()`) so\n   * this service stays decoupled from the data-seeding domain enums.\n   *\n   * Phase 5/6 audit H-2 — `scope_kind` was added to align with the\n   * sibling LAZY-engine counters (hit / miss / bow-out) which all\n   * carry it. Without `scope_kind`, operators cannot answer\n   * \"are my org-scoped seeds healthier than my user-scoped seeds?\",\n   * and the deferred Phase-7 cron-scheduler dashboard cannot slice\n   * terminal-run health by scope at all (terminal counts are the\n   * only signal SYNC / ADDITIVE / UPGRADE seeds emit). Cardinality\n   * stays bounded: 5 `DataSeedScopeKind` values × ~200 seeds × 4\n   * modes × 4 statuses × ~6 trigger origins ≈ 96K series upper\n   * bound; in practice <1K active series.\n   */\n  public recordDataSeedingRun(params: {\n    seedKey: string;\n    mode: string;\n    status: string;\n    triggerOrigin: string;\n    scopeKind: string;\n  }): void {\n    this.metricsDefinitions.dataSeedingRunTotal.add(1, {\n      seed_key: params.seedKey,\n      mode: params.mode,\n      status: params.status,\n      trigger_origin: params.triggerOrigin,\n      scope_kind: params.scopeKind,\n    });\n  }\n\n  /**\n   * Wall-clock duration of the admin `GET /internal/admin/data-seeding/seeds`\n   * endpoint in milliseconds. Recorded in the controller around the full\n   * registry walk (which fans out N `lastRun` lookups, one per seed).\n   *\n   * Phase 5/6 audit L-4 — needed because the endpoint is N+1 by design\n   * (single registry-wide aggregate would couple the surface to the\n   * adapter's grammar; see the controller's `lookupLastRunSummary` JSDoc).\n   * The histogram lets operators spot when the seed registry crosses the\n   * \"switch to bulk aggregation\" threshold and surface it as a Phase-7\n   * dashboard SLO alert.\n   *\n   * `seedCount` is bucketed coarsely (0, 1-10, 11-50, 51-200, 201+) so\n   * label cardinality stays bounded across deployments with widely\n   * different seed counts.\n   */\n  public recordDataSeedingAdminListSeedsDuration(params: {\n    durationMs: number;\n    seedCount: number;\n  }): void {\n    const bucket = (() => {\n      if (params.seedCount <= 0) return '0';\n      if (params.seedCount <= 10) return '1-10';\n      if (params.seedCount <= 50) return '11-50';\n      if (params.seedCount <= 200) return '51-200';\n      return '201+';\n    })();\n    this.metricsDefinitions.dataSeedingAdminListSeedsDuration.record(params.durationMs, {\n      seed_count_bucket: bucket,\n    });\n  }\n\n  // ---------------------------------------------------------------------------\n  // M2M Outbound Webhook Delivery metrics (Phase 5 / Step 17)\n  // ---------------------------------------------------------------------------\n  // Typed wrapper around the single `m2m_webhook_delivery_total` counter so\n  // worker call sites never reach into the raw OpenTelemetry meter and so\n  // label keys (`scope` / `outcome`) stay consistent. The `scope` parameter\n  // is locked to the `AuthScopeType` enum (`'organization' | 'application'`)\n  // — passing a typo or a stale string fails type-check rather than silently\n  // creating a parallel time series — and `outcome` maps 1:1 to\n  // `M2MWebhookDeliveryBatchOutput.outcome`.\n  //\n  // Firing contract:\n  //   - Exactly ONCE per worker invocation, at each terminal / intermediate\n  //     return-point in `m2mWebhookDeliveryBatchService.doHandle`.\n  //   - NOT fired from the dispatcher's skip paths (feature off / config\n  //     off / no endpoints) — those never create a delivery row and never\n  //     emit outbound HTTP, so they are not webhook deliveries by\n  //     definition.\n  //\n  // See `.cursor/plans/m2m-webhook-organization-delivery-phase5.md` §D4.\n  // ---------------------------------------------------------------------------\n\n  /**\n   * M2M Outbound Webhook Delivery outcome counter.\n   *\n   * @param params.scope - `AuthScopeType.ORGANIZATION` (`'organization'`)\n   *   or `AuthScopeType.APPLICATION` (`'application'`). Locked to the\n   *   shared `AuthScopeType` enum so a typo or stale literal fails\n   *   type-check rather than silently creating a parallel time series\n   *   under a divergent label.\n   * @param params.outcome - One of the five\n   *   `M2MWebhookDeliveryBatchOutput.outcome` values. `delivered` and\n   *   `failed_terminal` are terminal; `retry_scheduled` is the\n   *   intermediate retry branch; `skipped_missing_row` /\n   *   `skipped_already_leased` cover the two skip branches that still\n   *   consumed a worker slot.\n   */\n  public recordM2MWebhookDeliveryOutcome(params: {\n    scope: AuthScopeType;\n    outcome:\n      | 'delivered'\n      | 'retry_scheduled'\n      | 'failed_terminal'\n      | 'skipped_missing_row'\n      | 'skipped_already_leased';\n  }): void {\n    this.metricsDefinitions.m2mWebhookDeliveryTotal.add(1, {\n      scope: params.scope,\n      outcome: params.outcome,\n    });\n  }\n\n  // ---------------------------------------------------------------------------\n  // Compliance Audit-Log Sink failures (Phase 5 / F6)\n  // ---------------------------------------------------------------------------\n\n  /**\n   * F6 (audit Phase 5) — a Layer-2 provider audit sink threw while recording an\n   * event. Fired by `CompositeAuditLogSink` in its per-sink catch, so an\n   * otherwise-swallowed sink failure is OBSERVABLE (→ alert). Synchronous, never\n   * throws (the global meter is a no-op without the OTLP preload).\n   *\n   * @param params.providerRef - The declared audit provider whose sink failed\n   *   (immudb, a SIEM webhook, …) — the stable, low-cardinality series label.\n   */\n  public recordAuditSinkFailure(params: { providerRef: string }): void {\n    this.metricsDefinitions.auditSinkFailureTotal.add(1, {\n      provider: params.providerRef,\n    });\n  }\n\n  /**\n   * A tamper-evident audit provider PROVED its store was rolled back / tampered between restarts\n   * (its durable-state cryptographic consistency proof failed). Fired by `CompositeAuditLogSink`\n   * via the `onIntegrityViolation` hook it threads into the provider sink factory (the sink cannot\n   * import this service across the dependency wall). DISTINCT from {@link recordAuditSinkFailure}:\n   * this is a compliance incident (page a human), not a backfillable transient miss. Synchronous,\n   * never throws (the global meter is a no-op without the OTLP preload).\n   *\n   * @param params.providerRef - The audit provider whose store proved tampered (immudb, …).\n   */\n  public recordAuditTamperDetected(params: { providerRef: string }): void {\n    this.metricsDefinitions.auditTamperDetectedTotal.add(1, {\n      provider: params.providerRef,\n    });\n  }\n\n  /**\n   * A tamper-evident audit provider DEGRADED from full cross-restart tamper-evidence to a weaker\n   * assurance level (ephemeral mode, a corrupt anchor, an un-pinned server-identity change, or a per-op\n   * proof failure). Fired by `CompositeAuditLogSink` via the `onAssuranceDegraded` hook it threads into\n   * the provider sink factory. DISTINCT from {@link recordAuditTamperDetected}: a degradation is not a\n   * proven tamper, but it means a future tamper may go UNDETECTED — alertable so the guarantee never\n   * lapses silently. Non-latching. Synchronous, never throws.\n   *\n   * @param params.providerRef - The audit provider that degraded (immudb, …).\n   * @param params.reason - Stable snake_case slug (`ephemeral`, `anchor_corrupt`, `anchor_identity_change`, `proof_failure_transient`).\n   */\n  public recordAuditIntegrityAssuranceDegraded(params: { providerRef: string; reason: string }): void {\n    this.metricsDefinitions.auditIntegrityAssuranceDegradedTotal.add(1, {\n      provider: params.providerRef,\n      reason: params.reason,\n    });\n  }\n\n  /**\n   * A-12 — the Layer-1 authoritative DB audit store threw while persisting an event. Fired by\n   * `AuditLogsBackendService._createAuditLog` in its Layer-1 catch, so the \"the primary audit record\n   * itself did not persist\" outage is OBSERVABLE (→ alert) rather than a swallowed warn line on a\n   * fire-and-forget path. DISTINCT from {@link recordAuditSinkFailure}: that is a Layer-2 provider sink\n   * (immudb/SIEM) hiccup the reconciler backfills; THIS is the authoritative store failing. Synchronous,\n   * never throws (the global meter is a no-op without the OTLP preload). Label-free — the authoritative\n   * store has no provider dimension. Alert rule: `alerting-system-design-analysis.md` Appendix D.\n   */\n  public recordAuditStoreFailure(): void {\n    this.metricsDefinitions.auditStoreFailureTotal.add(1);\n  }\n}\n"]}
+{"version":3,"file":"metrics.service.js","sourceRoot":"","sources":["../../../../../../src/monitoring/observability/services/metrics.service.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,EAAE,OAAO,EAAS,MAAM,oBAAoB,CAAC;AACpD,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAIvC;;;;;;;;;;GAUG;AAEI,IAAM,cAAc,GAApB,MAAM,cAAc;IACjB,KAAK,CAAQ;IACb,kBAAkB,CAAoB;IAE9C;QACE,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,QAAQ,CAAC,oBAAoB,EAAE,OAAO,CAAC,CAAC;QAC7D,IAAI,CAAC,iBAAiB,EAAE,CAAC;IAC3B,CAAC;IAEO,iBAAiB;QACvB,IAAI,CAAC,kBAAkB,GAAG;YACxB,wEAAwE;YACxE,gEAAgE;YAChE,wEAAwE;YACxE,gEAAgE;YAChE,mEAAmE;YACnE,sCAAsC;YACtC,gEAAgE;YAChE,kEAAkE;YAClE,2CAA2C;YAC3C,sEAAsE;YACtE,gEAAgE;YAChE,mEAAmE;YACnE,gDAAgD;YAChD,sEAAsE;YACtE,qEAAqE;YACrE,mEAAmE;YACnE,oCAAoC;YACpC,0BAA0B,EAAE,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,uCAAuC,EAAE;gBAC5F,WAAW,EAAE,yGAAyG;aACvH,CAAC;YAEF,4BAA4B,EAAE,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,yCAAyC,EAAE;gBAChG,WAAW,EAAE,2FAA2F;aACzG,CAAC;YAEF,6BAA6B,EAAE,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,yCAAyC,EAAE;gBACjG,WAAW,EAAE,6GAA6G;aAC3H,CAAC;YAEF,mBAAmB,EAAE,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,wBAAwB,EAAE;gBACtE,WAAW,EAAE,gGAAgG;aAC9G,CAAC;YAEF,iCAAiC,EAAE,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,2CAA2C,EAAE;gBACzG,WAAW,EAAE,oGAAoG;aAClH,CAAC;YAEF,6DAA6D;YAC7D,4DAA4D;YAC5D,4EAA4E;YAC5E,6DAA6D;YAC7D,8DAA8D;YAC9D,6CAA6C;YAC7C,8DAA8D;YAC9D,6CAA6C;YAC7C,2DAA2D;YAC3D,uBAAuB,EAAE,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,4BAA4B,EAAE;gBAC9E,WAAW,EAAE,qFAAqF;aACnG,CAAC;YAEF,6DAA6D;YAC7D,oEAAoE;YACpE,2EAA2E;YAC3E,uEAAuE;YACvE,yEAAyE;YACzE,iCAAiC;YACjC,2CAA2C;YAC3C,2EAA2E;YAC3E,qBAAqB,EAAE,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,0BAA0B,EAAE;gBAC1E,WAAW,EAAE,uFAAuF;aACrG,CAAC;YAEF,kDAAkD;YAClD,yEAAyE;YACzE,6EAA6E;YAC7E,0EAA0E;YAC1E,2EAA2E;YAC3E,0EAA0E;YAC1E,UAAU;YACV,kDAAkD;YAClD,yDAAyD;YACzD,wBAAwB,EAAE,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,6BAA6B,EAAE;gBAChF,WAAW,EAAE,kGAAkG;aAChH,CAAC;YAEF,uDAAuD;YACvD,8FAA8F;YAC9F,kGAAkG;YAClG,iGAAiG;YACjG,kGAAkG;YAClG,qGAAqG;YACrG,qBAAqB;YACrB,mFAAmF;YACnF,uFAAuF;YACvF,oCAAoC,EAAE,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,0CAA0C,EAAE;gBACzG,WAAW,EACT,mHAAmH;aACtH,CAAC;YAEF,gFAAgF;YAChF,+FAA+F;YAC/F,2FAA2F;YAC3F,+FAA+F;YAC/F,+FAA+F;YAC/F,+FAA+F;YAC/F,4FAA4F;YAC5F,qBAAqB;YACrB,4CAA4C;YAC5C,8FAA8F;YAC9F,4FAA4F;YAC5F,sBAAsB,EAAE,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,2BAA2B,EAAE;gBAC5E,WAAW,EAAE,4GAA4G;aAC1H,CAAC;YAEF,4EAA4E;YAC5E,wFAAwF;YACxF,+FAA+F;YAC/F,4FAA4F;YAC5F,2FAA2F;YAC3F,4FAA4F;YAC5F,0FAA0F;YAC1F,8FAA8F;YAC9F,4FAA4F;YAC5F,yEAAyE;YACzE,uDAAuD;YACvD,4FAA4F;YAC5F,4BAA4B,EAAE,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,iCAAiC,EAAE;gBACxF,WAAW,EACT,mIAAmI;aACtI,CAAC;SACH,CAAC;IACJ,CAAC;IAED,8EAA8E;IAC9E,0CAA0C;IAC1C,8EAA8E;IAC9E,yEAAyE;IACzE,uEAAuE;IACvE,kEAAkE;IAClE,sDAAsD;IACtD,8EAA8E;IAE9E;;;;OAIG;IACI,6BAA6B,CAAC,MAA8C;QACjF,IAAI,CAAC,kBAAkB,CAAC,0BAA0B,CAAC,GAAG,CAAC,CAAC,EAAE;YACxD,QAAQ,EAAE,MAAM,CAAC,OAAO;YACxB,UAAU,EAAE,MAAM,CAAC,SAAS;SAC7B,CAAC,CAAC;IACL,CAAC;IAED;;;;OAIG;IACI,8BAA8B,CAAC,MAA8C;QAClF,IAAI,CAAC,kBAAkB,CAAC,4BAA4B,CAAC,GAAG,CAAC,CAAC,EAAE;YAC1D,QAAQ,EAAE,MAAM,CAAC,OAAO;YACxB,UAAU,EAAE,MAAM,CAAC,SAAS;SAC7B,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;;OAQG;IACI,kCAAkC,CAAC,MAIzC;QACC,IAAI,CAAC,kBAAkB,CAAC,6BAA6B,CAAC,GAAG,CAAC,CAAC,EAAE;YAC3D,QAAQ,EAAE,MAAM,CAAC,OAAO;YACxB,UAAU,EAAE,MAAM,CAAC,SAAS;YAC5B,MAAM,EAAE,MAAM,CAAC,MAAM;SACtB,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;;OAwBG;IACI,oBAAoB,CAAC,MAM3B;QACC,IAAI,CAAC,kBAAkB,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC,EAAE;YACjD,QAAQ,EAAE,MAAM,CAAC,OAAO;YACxB,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,cAAc,EAAE,MAAM,CAAC,aAAa;YACpC,UAAU,EAAE,MAAM,CAAC,SAAS;SAC7B,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;;;;;;;;;OAeG;IACI,uCAAuC,CAAC,MAG9C;QACC,MAAM,MAAM,GAAG,CAAC,GAAG,EAAE;YACnB,IAAI,MAAM,CAAC,SAAS,IAAI,CAAC;gBAAE,OAAO,GAAG,CAAC;YACtC,IAAI,MAAM,CAAC,SAAS,IAAI,EAAE;gBAAE,OAAO,MAAM,CAAC;YAC1C,IAAI,MAAM,CAAC,SAAS,IAAI,EAAE;gBAAE,OAAO,OAAO,CAAC;YAC3C,IAAI,MAAM,CAAC,SAAS,IAAI,GAAG;gBAAE,OAAO,QAAQ,CAAC;YAC7C,OAAO,MAAM,CAAC;QAChB,CAAC,CAAC,EAAE,CAAC;QACL,IAAI,CAAC,kBAAkB,CAAC,iCAAiC,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE;YAClF,iBAAiB,EAAE,MAAM;SAC1B,CAAC,CAAC;IACL,CAAC;IAED,8EAA8E;IAC9E,4DAA4D;IAC5D,8EAA8E;IAC9E,0EAA0E;IAC1E,wEAAwE;IACxE,0EAA0E;IAC1E,2EAA2E;IAC3E,2EAA2E;IAC3E,8DAA8D;IAC9D,2CAA2C;IAC3C,EAAE;IACF,mBAAmB;IACnB,0EAA0E;IAC1E,iEAAiE;IACjE,uEAAuE;IACvE,wEAAwE;IACxE,gEAAgE;IAChE,kBAAkB;IAClB,EAAE;IACF,uEAAuE;IACvE,8EAA8E;IAE9E;;;;;;;;;;;;;;OAcG;IACI,+BAA+B,CAAC,MAQtC;QACC,IAAI,CAAC,kBAAkB,CAAC,uBAAuB,CAAC,GAAG,CAAC,CAAC,EAAE;YACrD,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,OAAO,EAAE,MAAM,CAAC,OAAO;SACxB,CAAC,CAAC;IACL,CAAC;IAED,8EAA8E;IAC9E,oDAAoD;IACpD,8EAA8E;IAE9E;;;;;;;;OAQG;IACI,sBAAsB,CAAC,MAA+B;QAC3D,IAAI,CAAC,kBAAkB,CAAC,qBAAqB,CAAC,GAAG,CAAC,CAAC,EAAE;YACnD,QAAQ,EAAE,MAAM,CAAC,WAAW;SAC7B,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;;;OASG;IACI,yBAAyB,CAAC,MAA+B;QAC9D,IAAI,CAAC,kBAAkB,CAAC,wBAAwB,CAAC,GAAG,CAAC,CAAC,EAAE;YACtD,QAAQ,EAAE,MAAM,CAAC,WAAW;SAC7B,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;;;;OAUG;IACI,qCAAqC,CAAC,MAA+C;QAC1F,IAAI,CAAC,kBAAkB,CAAC,oCAAoC,CAAC,GAAG,CAAC,CAAC,EAAE;YAClE,QAAQ,EAAE,MAAM,CAAC,WAAW;YAC5B,MAAM,EAAE,MAAM,CAAC,MAAM;SACtB,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;;OAQG;IACI,uBAAuB;QAC5B,IAAI,CAAC,kBAAkB,CAAC,sBAAsB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACxD,CAAC;IAED;;;;;;;;;;;;;;;;OAgBG;IACI,6BAA6B,CAAC,MAA+C;QAClF,IAAI,CAAC,kBAAkB,CAAC,4BAA4B,CAAC,GAAG,CAAC,CAAC,EAAE;YAC1D,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,MAAM,EAAE,MAAM,CAAC,MAAM;SACtB,CAAC,CAAC;IACL,CAAC;CACF,CAAA;AAlZY,cAAc;IAD1B,UAAU,EAAE;;GACA,cAAc,CAkZ1B","sourcesContent":["import { metrics, Meter } from '@opentelemetry/api';\nimport { injectable } from 'inversify';\nimport type { AuthScopeType } from '@wildo-ai/saas-models';\nimport { MetricDefinitions } from '~wildo-backend-lib/monitoring/observability/models/observability.backend.schemas';\n\n/**\n * Records the operator-facing metrics that have LIVE producers — the\n * data-seeding counters (dispatcher engines + shared ledger writers) and the\n * M2M outbound-webhook counter (delivery batch worker). All instruments are\n * created on the global meter, which the OTLP preload (`otel-preload.ts`) wires\n * to the OTLP metric exporter; with no preload the global meter is a no-op, so\n * recording is silently inert (never throws). The former HTTP/DB/auth/etc.\n * `record*` helpers were removed in Slice 2 Phase 3 — their only caller was the\n * dead observability middleware, and HTTP metrics now come from the preload's\n * auto-instrumentation (bounded, semconv) instead of unbounded org/user labels.\n */\n@injectable()\nexport class MetricsService {\n  private meter: Meter;\n  private metricsDefinitions: MetricDefinitions;\n\n  constructor() {\n    this.meter = metrics.getMeter('wildo-saas-metrics', '1.0.0');\n    this.initializeMetrics();\n  }\n\n  private initializeMetrics(): void {\n    this.metricsDefinitions = {\n      // ---------------------------------------------------------------------\n      // Data Seeding (Phase 6.D / F-17 — Prom-style operator metrics)\n      // ---------------------------------------------------------------------\n      // The data-seeding dispatcher exposes four observable concerns:\n      //   - LAZY C1 cache hit-rate (first-access bootstrap short-circuit\n      //     effectiveness on the hot path),\n      //   - LAZY thunder-herd bow-outs (concurrent first-access races\n      //     resolved silently, distinguishing the \"winner already done\"\n      //     vs \"winner still running\" branches),\n      //   - DataSeedRun terminal totals (every COMPLETED / PARTIAL / FAILED\n      //     ledger transition, per seed × mode × trigger origin — the\n      //     metric covers ALL engines, current and future, because it is\n      //     fired from the shared lifecycle writers).\n      // Counter names follow the Prometheus convention `_total` suffix; the\n      // OpenTelemetry meter is the existing `wildo-saas-metrics` meter, so\n      // the counters export via the OTLP metric reader configured in the\n      // preload without any extra wiring.\n      dataSeedingLazyC1CacheHits: this.meter.createCounter('data_seeding_lazy_c1_cache_hits_total', {\n        description: 'LAZY engine C1 idempotency-probe cache hits (already-completed scope, skipped without entry resolution)',\n      }),\n\n      dataSeedingLazyC1CacheMisses: this.meter.createCounter('data_seeding_lazy_c1_cache_misses_total', {\n        description: 'LAZY engine C1 idempotency-probe cache misses (cold-start, run-slot acquisition proceeds)',\n      }),\n\n      dataSeedingThunderHerdBowouts: this.meter.createCounter('data_seeding_thunder_herd_bowouts_total', {\n        description: 'LAZY engine concurrent-first-access races where the slot acquisition lost and the caller bowed out silently',\n      }),\n\n      dataSeedingRunTotal: this.meter.createCounter('data_seeding_run_total', {\n        description: 'DataSeedRun terminal-state writes (COMPLETED / PARTIAL / FAILED) across all dispatcher engines',\n      }),\n\n      dataSeedingAdminListSeedsDuration: this.meter.createHistogram('data_seeding_admin_list_seeds_duration_ms', {\n        description: 'Wall-clock duration of GET /internal/admin/data-seeding/seeds (N+1 lastRun lookup) in milliseconds',\n      }),\n\n      // ─── M2M Outbound Webhook Delivery (Phase 5 / Step 17) ────\n      // One counter covering every worker `doHandle` return — the\n      // outcome enum maps 1:1 to the five `M2MWebhookDeliveryBatchOutput.outcome`\n      // values (`delivered`, `retry_scheduled`, `failed_terminal`,\n      // `skipped_missing_row`, `skipped_already_leased`). Operators\n      // answer \"is webhook delivery healthy?\" with\n      //   rate(m2m_webhook_delivery_total{outcome=\"delivered\"}[5m])\n      //     / rate(m2m_webhook_delivery_total[5m])\n      // Cardinality: 2 `scope` × 5 `outcome` = 10 active series.\n      m2mWebhookDeliveryTotal: this.meter.createCounter('m2m_webhook_delivery_total', {\n        description: 'M2M outbound webhook delivery terminal / intermediate outcomes (one per worker run)',\n      }),\n\n      // ─── Compliance Audit-Log Sink Failures (Phase 5 / F6) ────\n      // A Layer-2 provider audit sink threw while recording an event. The\n      // composite (`CompositeAuditLogSink`) isolates the failure so the business\n      // op is unaffected, but a silently-failing audit sink (\"we think we're\n      // auditing but we aren't\") must not go unnoticed — this counter makes it\n      // observable. Operators alert on\n      //   rate(audit_sink_failure_total[5m]) > 0\n      // Cardinality: one series per declared audit `provider` (immudb, SIEM, …).\n      auditSinkFailureTotal: this.meter.createCounter('audit_sink_failure_total', {\n        description: 'Compliance audit-log provider sink failures (one per sink throw during event fan-out)',\n      }),\n\n      // ─── Compliance Audit-Log TAMPER detections ────\n      // A tamper-evident audit provider (immudb) PROVED, via its cryptographic\n      // durable-state consistency proof, that its store was rolled back / tampered\n      // between restarts. DISTINCT from `audit_sink_failure_total`: a transient\n      // write miss is backfilled by the reconciler and needs no human, whereas a\n      // proven rollback of the audit ledger is a compliance incident. Operators\n      // page on\n      //   increase(audit_tamper_detected_total[1h]) > 0\n      // Cardinality: one series per declared audit `provider`.\n      auditTamperDetectedTotal: this.meter.createCounter('audit_tamper_detected_total', {\n        description: 'Compliance audit-log store tamper/rollback detections (durable-state consistency-proof failures)',\n      }),\n\n      // ─── Compliance Audit-Log assurance DEGRADATIONS ────\n      // A tamper-evident audit provider dropped from FULL cross-restart tamper-evidence to a WEAKER\n      // assurance level — ephemeral mode (no durable anchor), a corrupt/unreadable anchor, an un-pinned\n      // server-identity change, or a per-op proof failure. DISTINCT from `audit_tamper_detected_total`\n      // (a PROVEN rollback → page) and `audit_sink_failure_total` (a write hiccup): a degradation means\n      // \"we may not detect a future tamper\" — it should be alerted so the guarantee never lapses silently.\n      // Operators alert on\n      //   increase(audit_integrity_assurance_degraded_total{reason=\"ephemeral\"}[1h]) > 0\n      // Cardinality: one series per (provider, reason) — `reason` is a small fixed slug set.\n      auditIntegrityAssuranceDegradedTotal: this.meter.createCounter('audit_integrity_assurance_degraded_total', {\n        description:\n          'Compliance audit-log assurance degradations (ephemeral / corrupt-anchor / identity-change / per-op proof failure)',\n      }),\n\n      // ─── Compliance Audit-Log LAYER-1 (authoritative DB store) write failures ────\n      // The always-on Layer-1 database audit store (`AuditLogsBackendService._createAuditLog`) threw\n      // while writing the authoritative row. DISTINCT from `audit_sink_failure_total` (a Layer-2\n      // provider sink — immudb/SIEM — hiccup, backfilled by the reconciler): a Layer-1 failure means\n      // the PRIMARY, authoritative audit record itself was NOT persisted — the most severe \"we think\n      // we're auditing but we aren't\" state. Emission is fire-and-forget (audit must never break the\n      // business op), so without this counter the outage is invisible past a swallowed warn line.\n      // Operators alert on\n      //   rate(audit_store_failure_total[5m]) > 0\n      // Cardinality: ONE label-free series (the authoritative store has no provider dimension). The\n      // alert rule is specified in `.claude/plans/alerting-system-design-analysis.md` Appendix D.\n      auditStoreFailureTotal: this.meter.createCounter('audit_store_failure_total', {\n        description: 'Compliance audit-log Layer-1 authoritative DB store write failures (one per _createAuditLog persist throw)',\n      }),\n\n      // ─── Security audit observations DROPPED before the pipeline saw them ────\n      // A fire-and-forget security observation (an operator tenant crossing, an authorization\n      // refusal, a platform-access grant transition) never reached `AuditLogsBackendService` at all:\n      // the service was unbound or its `log*` method absent, the call threw synchronously, or the\n      // returned promise rejected. DISTINCT from `audit_store_failure_total`, which fires INSIDE\n      // `_createAuditLog` and therefore only sees emissions that got that far — the drops counted\n      // here are exactly the ones it structurally cannot see. Fire-and-forget is deliberate and\n      // stays (an observation must never fail the request it observes), so without this counter the\n      // loss is completely silent and \"no operator crossings this week\" is indistinguishable from\n      // \"the audit service has been unbound since Tuesday\". Operators alert on\n      //   increase(audit_observation_dropped_total[15m]) > 0\n      // Cardinality: 3 `observation` × 3 `reason` = 9 series today, both label sets closed enums.\n      auditObservationDroppedTotal: this.meter.createCounter('audit_observation_dropped_total', {\n        description:\n          'Security audit observations dropped before reaching the audit pipeline (service unavailable / emission threw / emission rejected)',\n      }),\n    };\n  }\n\n  // ---------------------------------------------------------------------------\n  // Data Seeding metrics (Phase 6.D / F-17)\n  // ---------------------------------------------------------------------------\n  // Typed wrappers around the four data-seeding counters so the dispatcher\n  // never reaches into the raw OpenTelemetry meter and so all label keys\n  // stay consistent (snake_case to match Prometheus convention; the\n  // dispatcher passes already-stringified enum values).\n  // ---------------------------------------------------------------------------\n\n  /**\n   * LAZY engine — C1 idempotency-probe cache hit. Fired once per\n   * (seed × scope) when `runLazy` short-circuits because a prior\n   * COMPLETED `DataSeedRun` row already covers the scope.\n   */\n  public recordDataSeedingLazyCacheHit(params: { seedKey: string; scopeKind: string }): void {\n    this.metricsDefinitions.dataSeedingLazyC1CacheHits.add(1, {\n      seed_key: params.seedKey,\n      scope_kind: params.scopeKind,\n    });\n  }\n\n  /**\n   * LAZY engine — C1 idempotency-probe cache miss. Fired once per\n   * (seed × scope) when `runLazy` proceeds past the C1 probe and\n   * attempts to acquire a run-slot.\n   */\n  public recordDataSeedingLazyCacheMiss(params: { seedKey: string; scopeKind: string }): void {\n    this.metricsDefinitions.dataSeedingLazyC1CacheMisses.add(1, {\n      seed_key: params.seedKey,\n      scope_kind: params.scopeKind,\n    });\n  }\n\n  /**\n   * LAZY engine — concurrent first-access race resolved by silent\n   * bow-out. `reason` mirrors the dispatcher's\n   * `acquireLazyRunSlotWithRaceGuard` outcome:\n   *   - `concurrent-completed` — a winning concurrent caller already\n   *     wrote a COMPLETED row (data is there);\n   *   - `concurrent-running`   — a winning concurrent caller currently\n   *     owns the RUNNING slot (data is being written).\n   */\n  public recordDataSeedingThunderHerdBowout(params: {\n    seedKey: string;\n    scopeKind: string;\n    reason: 'concurrent-completed' | 'concurrent-running';\n  }): void {\n    this.metricsDefinitions.dataSeedingThunderHerdBowouts.add(1, {\n      seed_key: params.seedKey,\n      scope_kind: params.scopeKind,\n      reason: params.reason,\n    });\n  }\n\n  /**\n   * Terminal `DataSeedRun` write — fired exactly once per row\n   * transition into COMPLETED / PARTIAL / FAILED. The metric is\n   * emitted from the shared lifecycle writers\n   * (`completeDataSeedRun` / `failDataSeedRun` /\n   * `writeFreshFailedDataSeedRun`) so every dispatcher engine —\n   * Level-A application lifecycle, Level-B resource lifecycle, LAZY\n   * first-access, MANUAL re-runs, and the deferred Phase-7 cron —\n   * contributes uniformly without per-engine wiring.\n   *\n   * `mode`, `status`, `triggerOrigin`, and `scopeKind` are passed as\n   * raw enum string values (the dispatcher does the `.toString()`) so\n   * this service stays decoupled from the data-seeding domain enums.\n   *\n   * Phase 5/6 audit H-2 — `scope_kind` was added to align with the\n   * sibling LAZY-engine counters (hit / miss / bow-out) which all\n   * carry it. Without `scope_kind`, operators cannot answer\n   * \"are my org-scoped seeds healthier than my user-scoped seeds?\",\n   * and the deferred Phase-7 cron-scheduler dashboard cannot slice\n   * terminal-run health by scope at all (terminal counts are the\n   * only signal SYNC / ADDITIVE / UPGRADE seeds emit). Cardinality\n   * stays bounded: 5 `DataSeedScopeKind` values × ~200 seeds × 4\n   * modes × 4 statuses × ~6 trigger origins ≈ 96K series upper\n   * bound; in practice <1K active series.\n   */\n  public recordDataSeedingRun(params: {\n    seedKey: string;\n    mode: string;\n    status: string;\n    triggerOrigin: string;\n    scopeKind: string;\n  }): void {\n    this.metricsDefinitions.dataSeedingRunTotal.add(1, {\n      seed_key: params.seedKey,\n      mode: params.mode,\n      status: params.status,\n      trigger_origin: params.triggerOrigin,\n      scope_kind: params.scopeKind,\n    });\n  }\n\n  /**\n   * Wall-clock duration of the admin `GET /internal/admin/data-seeding/seeds`\n   * endpoint in milliseconds. Recorded in the controller around the full\n   * registry walk (which fans out N `lastRun` lookups, one per seed).\n   *\n   * Phase 5/6 audit L-4 — needed because the endpoint is N+1 by design\n   * (single registry-wide aggregate would couple the surface to the\n   * adapter's grammar; see the controller's `lookupLastRunSummary` JSDoc).\n   * The histogram lets operators spot when the seed registry crosses the\n   * \"switch to bulk aggregation\" threshold and surface it as a Phase-7\n   * dashboard SLO alert.\n   *\n   * `seedCount` is bucketed coarsely (0, 1-10, 11-50, 51-200, 201+) so\n   * label cardinality stays bounded across deployments with widely\n   * different seed counts.\n   */\n  public recordDataSeedingAdminListSeedsDuration(params: {\n    durationMs: number;\n    seedCount: number;\n  }): void {\n    const bucket = (() => {\n      if (params.seedCount <= 0) return '0';\n      if (params.seedCount <= 10) return '1-10';\n      if (params.seedCount <= 50) return '11-50';\n      if (params.seedCount <= 200) return '51-200';\n      return '201+';\n    })();\n    this.metricsDefinitions.dataSeedingAdminListSeedsDuration.record(params.durationMs, {\n      seed_count_bucket: bucket,\n    });\n  }\n\n  // ---------------------------------------------------------------------------\n  // M2M Outbound Webhook Delivery metrics (Phase 5 / Step 17)\n  // ---------------------------------------------------------------------------\n  // Typed wrapper around the single `m2m_webhook_delivery_total` counter so\n  // worker call sites never reach into the raw OpenTelemetry meter and so\n  // label keys (`scope` / `outcome`) stay consistent. The `scope` parameter\n  // is locked to the `AuthScopeType` enum (`'organization' | 'application'`)\n  // — passing a typo or a stale string fails type-check rather than silently\n  // creating a parallel time series — and `outcome` maps 1:1 to\n  // `M2MWebhookDeliveryBatchOutput.outcome`.\n  //\n  // Firing contract:\n  //   - Exactly ONCE per worker invocation, at each terminal / intermediate\n  //     return-point in `m2mWebhookDeliveryBatchService.doHandle`.\n  //   - NOT fired from the dispatcher's skip paths (feature off / config\n  //     off / no endpoints) — those never create a delivery row and never\n  //     emit outbound HTTP, so they are not webhook deliveries by\n  //     definition.\n  //\n  // See `.cursor/plans/m2m-webhook-organization-delivery-phase5.md` §D4.\n  // ---------------------------------------------------------------------------\n\n  /**\n   * M2M Outbound Webhook Delivery outcome counter.\n   *\n   * @param params.scope - `AuthScopeType.ORGANIZATION` (`'organization'`)\n   *   or `AuthScopeType.APPLICATION` (`'application'`). Locked to the\n   *   shared `AuthScopeType` enum so a typo or stale literal fails\n   *   type-check rather than silently creating a parallel time series\n   *   under a divergent label.\n   * @param params.outcome - One of the five\n   *   `M2MWebhookDeliveryBatchOutput.outcome` values. `delivered` and\n   *   `failed_terminal` are terminal; `retry_scheduled` is the\n   *   intermediate retry branch; `skipped_missing_row` /\n   *   `skipped_already_leased` cover the two skip branches that still\n   *   consumed a worker slot.\n   */\n  public recordM2MWebhookDeliveryOutcome(params: {\n    scope: AuthScopeType;\n    outcome:\n      | 'delivered'\n      | 'retry_scheduled'\n      | 'failed_terminal'\n      | 'skipped_missing_row'\n      | 'skipped_already_leased';\n  }): void {\n    this.metricsDefinitions.m2mWebhookDeliveryTotal.add(1, {\n      scope: params.scope,\n      outcome: params.outcome,\n    });\n  }\n\n  // ---------------------------------------------------------------------------\n  // Compliance Audit-Log Sink failures (Phase 5 / F6)\n  // ---------------------------------------------------------------------------\n\n  /**\n   * F6 (audit Phase 5) — a Layer-2 provider audit sink threw while recording an\n   * event. Fired by `CompositeAuditLogSink` in its per-sink catch, so an\n   * otherwise-swallowed sink failure is OBSERVABLE (→ alert). Synchronous, never\n   * throws (the global meter is a no-op without the OTLP preload).\n   *\n   * @param params.providerRef - The declared audit provider whose sink failed\n   *   (immudb, a SIEM webhook, …) — the stable, low-cardinality series label.\n   */\n  public recordAuditSinkFailure(params: { providerRef: string }): void {\n    this.metricsDefinitions.auditSinkFailureTotal.add(1, {\n      provider: params.providerRef,\n    });\n  }\n\n  /**\n   * A tamper-evident audit provider PROVED its store was rolled back / tampered between restarts\n   * (its durable-state cryptographic consistency proof failed). Fired by `CompositeAuditLogSink`\n   * via the `onIntegrityViolation` hook it threads into the provider sink factory (the sink cannot\n   * import this service across the dependency wall). DISTINCT from {@link recordAuditSinkFailure}:\n   * this is a compliance incident (page a human), not a backfillable transient miss. Synchronous,\n   * never throws (the global meter is a no-op without the OTLP preload).\n   *\n   * @param params.providerRef - The audit provider whose store proved tampered (immudb, …).\n   */\n  public recordAuditTamperDetected(params: { providerRef: string }): void {\n    this.metricsDefinitions.auditTamperDetectedTotal.add(1, {\n      provider: params.providerRef,\n    });\n  }\n\n  /**\n   * A tamper-evident audit provider DEGRADED from full cross-restart tamper-evidence to a weaker\n   * assurance level (ephemeral mode, a corrupt anchor, an un-pinned server-identity change, or a per-op\n   * proof failure). Fired by `CompositeAuditLogSink` via the `onAssuranceDegraded` hook it threads into\n   * the provider sink factory. DISTINCT from {@link recordAuditTamperDetected}: a degradation is not a\n   * proven tamper, but it means a future tamper may go UNDETECTED — alertable so the guarantee never\n   * lapses silently. Non-latching. Synchronous, never throws.\n   *\n   * @param params.providerRef - The audit provider that degraded (immudb, …).\n   * @param params.reason - Stable snake_case slug (`ephemeral`, `anchor_corrupt`, `anchor_identity_change`, `proof_failure_transient`).\n   */\n  public recordAuditIntegrityAssuranceDegraded(params: { providerRef: string; reason: string }): void {\n    this.metricsDefinitions.auditIntegrityAssuranceDegradedTotal.add(1, {\n      provider: params.providerRef,\n      reason: params.reason,\n    });\n  }\n\n  /**\n   * A-12 — the Layer-1 authoritative DB audit store threw while persisting an event. Fired by\n   * `AuditLogsBackendService._createAuditLog` in its Layer-1 catch, so the \"the primary audit record\n   * itself did not persist\" outage is OBSERVABLE (→ alert) rather than a swallowed warn line on a\n   * fire-and-forget path. DISTINCT from {@link recordAuditSinkFailure}: that is a Layer-2 provider sink\n   * (immudb/SIEM) hiccup the reconciler backfills; THIS is the authoritative store failing. Synchronous,\n   * never throws (the global meter is a no-op without the OTLP preload). Label-free — the authoritative\n   * store has no provider dimension. Alert rule: `alerting-system-design-analysis.md` Appendix D.\n   */\n  public recordAuditStoreFailure(): void {\n    this.metricsDefinitions.auditStoreFailureTotal.add(1);\n  }\n\n  /**\n   * A fire-and-forget security audit observation was DROPPED before it reached the audit pipeline.\n   * Fired by the shared emission seam (`audit-observation-emission.backend.ts`), which every such\n   * observation routes through, so a new observation is counted the day it lands.\n   *\n   * DISTINCT from {@link recordAuditStoreFailure}, and the distinction is the reason this counter\n   * exists: that one fires INSIDE `_createAuditLog`, so it only ever sees an emission that reached\n   * the audit service. The three shapes counted here — an unbound service or absent `log*` method, a\n   * synchronous throw, a rejected promise — never get that far, and were previously invisible.\n   * Merging them into one counter would let a total wiring outage hide behind a store hiccup.\n   *\n   * Synchronous, never throws (the global meter is a no-op without the OTLP preload — which is why\n   * the seam ALSO logs, at a throttled `error`).\n   *\n   * @param params.observation - `AuditObservationKind` member — WHICH security event was lost.\n   * @param params.reason - `AuditObservationLossReason` member — WHICH of the three loss shapes.\n   */\n  public recordAuditObservationDropped(params: { observation: string; reason: string }): void {\n    this.metricsDefinitions.auditObservationDroppedTotal.add(1, {\n      observation: params.observation,\n      reason: params.reason,\n    });\n  }\n}\n"]}

package/dist/esm/notifications/email/models/email-context-provider.interface.d.ts

@@ -1,80 +0,0 @@
-/**
- * Email Context Provider Interface
- *
- * Allows custom applications to inject additional context into email templates.
- * Follows the customServiceImplementation pattern - providers have access to
- * platform-wide services.
- */
-import { AvailableLanguage } from '@wildo-ai/presets-components-models';
-import type { EmailTemplateContext } from '@wildo-ai/saas-models';
-/**
- * Input for building additional context
- */
-export interface EmailContextProviderInput {
-    /** The template reference being rendered */
-    templateRef: string;
-    /** The locale of the template */
-    locale: AvailableLanguage;
-    /** The base context (without additionalContext) */
-    baseContext: Omit<EmailTemplateContext, 'additionalContext'>;
-}
-/**
- * Utilities available to context providers
- * Similar to customServiceImplementation utils
- */
-export interface EmailContextProviderUtils {
-    /** Repository access via getRepository */
-    getRepository: <T>(resourceType: string) => T;
-    /** Logger instance */
-    logger: {
-        debug: (message: string, meta?: Record<string, unknown>) => void;
-        info: (message: string, meta?: Record<string, unknown>) => void;
-        warn: (message: string, meta?: Record<string, unknown>) => void;
-        error: (message: string, meta?: Record<string, unknown>) => void;
-    };
-    /** Error builder for creating typed errors */
-    errorBuilder: {
-        buildError: (type: string, message: string, details?: Record<string, unknown>) => Error;
-    };
-}
-/**
- * Email Context Provider Interface
- *
- * Custom apps implement this interface to provide additional context
- * to email templates. The provider is invoked once per operation
- * (not per recipient).
- */
-export interface EmailContextProvider {
-    /**
-     * Unique identifier for this provider
-     * Used for logging and debugging
-     */
-    readonly providerId: string;
-    /**
-     * Template ref patterns this provider handles
-     * Uses simple wildcard matching (* matches any characters)
-     *
-     * Examples:
-     * - 'system.*' - all system templates
-     * - 'email.orders_*' - all order-related templates
-     * - '*' - all templates
-     */
-    readonly templateRefPatterns: string[];
-    /**
-     * Build additional context for the template
-     *
-     * @param input - Template info and base context
-     * @param utils - Platform utilities
-     * @returns Additional context to merge into the template context
-     */
-    buildAdditionalContext(input: EmailContextProviderInput, utils: EmailContextProviderUtils): Promise<Record<string, unknown>>;
-}
-/**
- * Check if a template ref matches a pattern
- *
- * @param templateRef - The template ref to check
- * @param pattern - The pattern to match against (supports * wildcard)
- * @returns True if the template ref matches the pattern
- */
-export declare function matchesTemplateRefPattern(templateRef: string, pattern: string): boolean;
-//# sourceMappingURL=email-context-provider.interface.d.ts.map

package/dist/esm/notifications/email/models/email-context-provider.interface.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"email-context-provider.interface.d.ts","sourceRoot":"","sources":["../../../../../../src/notifications/email/models/email-context-provider.interface.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,iBAAiB,EAAE,MAAM,qCAAqC,CAAC;AACxE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAMlE;;GAEG;AACH,MAAM,WAAW,yBAAyB;IACxC,4CAA4C;IAC5C,WAAW,EAAE,MAAM,CAAC;IACpB,iCAAiC;IACjC,MAAM,EAAE,iBAAiB,CAAC;IAC1B,mDAAmD;IACnD,WAAW,EAAE,IAAI,CAAC,oBAAoB,EAAE,mBAAmB,CAAC,CAAC;CAC9D;AAED;;;GAGG;AACH,MAAM,WAAW,yBAAyB;IACxC,0CAA0C;IAC1C,aAAa,EAAE,CAAC,CAAC,EAAE,YAAY,EAAE,MAAM,KAAK,CAAC,CAAC;IAC9C,sBAAsB;IACtB,MAAM,EAAE;QACN,KAAK,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;QACjE,IAAI,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;QAChE,IAAI,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;QAChE,KAAK,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;KAClE,CAAC;IACF,8CAA8C;IAC9C,YAAY,EAAE;QACZ,UAAU,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,KAAK,CAAC;KACzF,CAAC;CACH;AAMD;;;;;;GAMG;AACH,MAAM,WAAW,oBAAoB;IACnC;;;OAGG;IACH,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAE5B;;;;;;;;OAQG;IACH,QAAQ,CAAC,mBAAmB,EAAE,MAAM,EAAE,CAAC;IAEvC;;;;;;OAMG;IACH,sBAAsB,CACpB,KAAK,EAAE,yBAAyB,EAChC,KAAK,EAAE,yBAAyB,GAC/B,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CACrC;AAED;;;;;;GAMG;AACH,wBAAgB,yBAAyB,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAUvF"}

package/dist/esm/notifications/email/models/email-context-provider.interface.js

@@ -1,25 +0,0 @@
-/**
- * Email Context Provider Interface
- *
- * Allows custom applications to inject additional context into email templates.
- * Follows the customServiceImplementation pattern - providers have access to
- * platform-wide services.
- */
-/**
- * Check if a template ref matches a pattern
- *
- * @param templateRef - The template ref to check
- * @param pattern - The pattern to match against (supports * wildcard)
- * @returns True if the template ref matches the pattern
- */
-export function matchesTemplateRefPattern(templateRef, pattern) {
-    if (pattern === '*')
-        return true;
-    // Convert pattern to regex
-    const regexPattern = pattern
-        .replace(/[.+?^${}()|[\]\\]/g, '\\$&') // Escape special chars except *
-        .replace(/\*/g, '.*'); // Convert * to .*
-    const regex = new RegExp(`^${regexPattern}$`);
-    return regex.test(templateRef);
-}
-//# sourceMappingURL=email-context-provider.interface.js.map

package/dist/esm/notifications/email/models/email-context-provider.interface.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"email-context-provider.interface.js","sourceRoot":"","sources":["../../../../../../src/notifications/email/models/email-context-provider.interface.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAmFH;;;;;;GAMG;AACH,MAAM,UAAU,yBAAyB,CAAC,WAAmB,EAAE,OAAe;IAC5E,IAAI,OAAO,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC;IAEjC,2BAA2B;IAC3B,MAAM,YAAY,GAAG,OAAO;SACzB,OAAO,CAAC,oBAAoB,EAAE,MAAM,CAAC,CAAC,gCAAgC;SACtE,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,kBAAkB;IAE3C,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,IAAI,YAAY,GAAG,CAAC,CAAC;IAC9C,OAAO,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;AACjC,CAAC","sourcesContent":["/**\n * Email Context Provider Interface\n * \n * Allows custom applications to inject additional context into email templates.\n * Follows the customServiceImplementation pattern - providers have access to\n * platform-wide services.\n */\n\nimport { AvailableLanguage } from '@wildo-ai/presets-components-models';\nimport type { EmailTemplateContext } from '@wildo-ai/saas-models';\n\n// ─────────────────────────────────────────────────────────────────────────────\n// TYPES\n// ─────────────────────────────────────────────────────────────────────────────\n\n/**\n * Input for building additional context\n */\nexport interface EmailContextProviderInput {\n  /** The template reference being rendered */\n  templateRef: string;\n  /** The locale of the template */\n  locale: AvailableLanguage;\n  /** The base context (without additionalContext) */\n  baseContext: Omit<EmailTemplateContext, 'additionalContext'>;\n}\n\n/**\n * Utilities available to context providers\n * Similar to customServiceImplementation utils\n */\nexport interface EmailContextProviderUtils {\n  /** Repository access via getRepository */\n  getRepository: <T>(resourceType: string) => T;\n  /** Logger instance */\n  logger: {\n    debug: (message: string, meta?: Record<string, unknown>) => void;\n    info: (message: string, meta?: Record<string, unknown>) => void;\n    warn: (message: string, meta?: Record<string, unknown>) => void;\n    error: (message: string, meta?: Record<string, unknown>) => void;\n  };\n  /** Error builder for creating typed errors */\n  errorBuilder: {\n    buildError: (type: string, message: string, details?: Record<string, unknown>) => Error;\n  };\n}\n\n// ─────────────────────────────────────────────────────────────────────────────\n// INTERFACE\n// ─────────────────────────────────────────────────────────────────────────────\n\n/**\n * Email Context Provider Interface\n * \n * Custom apps implement this interface to provide additional context\n * to email templates. The provider is invoked once per operation\n * (not per recipient).\n */\nexport interface EmailContextProvider {\n  /**\n   * Unique identifier for this provider\n   * Used for logging and debugging\n   */\n  readonly providerId: string;\n\n  /**\n   * Template ref patterns this provider handles\n   * Uses simple wildcard matching (* matches any characters)\n   * \n   * Examples:\n   * - 'system.*' - all system templates\n   * - 'email.orders_*' - all order-related templates\n   * - '*' - all templates\n   */\n  readonly templateRefPatterns: string[];\n\n  /**\n   * Build additional context for the template\n   * \n   * @param input - Template info and base context\n   * @param utils - Platform utilities\n   * @returns Additional context to merge into the template context\n   */\n  buildAdditionalContext(\n    input: EmailContextProviderInput,\n    utils: EmailContextProviderUtils\n  ): Promise<Record<string, unknown>>;\n}\n\n/**\n * Check if a template ref matches a pattern\n * \n * @param templateRef - The template ref to check\n * @param pattern - The pattern to match against (supports * wildcard)\n * @returns True if the template ref matches the pattern\n */\nexport function matchesTemplateRefPattern(templateRef: string, pattern: string): boolean {\n  if (pattern === '*') return true;\n  \n  // Convert pattern to regex\n  const regexPattern = pattern\n    .replace(/[.+?^${}()|[\\]\\\\]/g, '\\\\$&') // Escape special chars except *\n    .replace(/\\*/g, '.*'); // Convert * to .*\n  \n  const regex = new RegExp(`^${regexPattern}$`);\n  return regex.test(templateRef);\n}\n"]}

package/dist/esm/notifications/email/services/email-context-provider-registry.backend.service.d.ts

@@ -1,49 +0,0 @@
-/**
- * Email Context Provider Registry Backend Service
- *
- * Manages registration and resolution of email context providers.
- * Custom apps register their providers at startup.
- */
-import type { LoggerService } from '../../../monitoring/logger/services/logger.service';
-import { EmailContextProvider, EmailContextProviderInput, EmailContextProviderUtils } from '../../../notifications/email/models/email-context-provider.interface';
-export declare class EmailContextProviderRegistryBackendService {
-    private readonly logger;
-    private providers;
-    protected logDebug: (message: string, context?: Record<string, unknown>) => void;
-    constructor(logger: LoggerService);
-    /**
-     * Register a context provider
-     *
-     * @param provider - The provider to register
-     */
-    register(provider: EmailContextProvider): void;
-    /**
-     * Register multiple providers at once
-     */
-    registerAll(providers: EmailContextProvider[]): void;
-    /**
-     * Unregister a provider by ID
-     */
-    unregister(providerId: string): boolean;
-    /**
-     * Get all providers that match a template ref
-     */
-    getProvidersForTemplate(templateRef: string): EmailContextProvider[];
-    /**
-     * Build additional context by invoking all matching providers
-     *
-     * @param input - The context provider input
-     * @param utils - Platform utilities for providers
-     * @returns Combined additional context from all providers
-     */
-    buildAdditionalContext(input: EmailContextProviderInput, utils: EmailContextProviderUtils): Promise<Record<string, unknown>>;
-    /**
-     * Get all registered provider IDs
-     */
-    getRegisteredProviderIds(): string[];
-    /**
-     * Clear all registered providers
-     */
-    clear(): void;
-}
-//# sourceMappingURL=email-context-provider-registry.backend.service.d.ts.map

package/dist/esm/notifications/email/services/email-context-provider-registry.backend.service.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"email-context-provider-registry.backend.service.d.ts","sourceRoot":"","sources":["../../../../../../src/notifications/email/services/email-context-provider-registry.backend.service.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,8DAA8D,CAAC;AAClG,OAAO,EACL,oBAAoB,EACpB,yBAAyB,EACzB,yBAAyB,EAE1B,MAAM,gFAAgF,CAAC;AAMxF,qBACa,0CAA0C;IAMhB,OAAO,CAAC,QAAQ,CAAC,MAAM;IAL5D,OAAO,CAAC,SAAS,CAA8B;IAE/C,SAAS,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;gBAG3B,MAAM,EAAE,aAAa;IAM3E;;;;OAIG;IACH,QAAQ,CAAC,QAAQ,EAAE,oBAAoB,GAAG,IAAI;IAiB9C;;OAEG;IACH,WAAW,CAAC,SAAS,EAAE,oBAAoB,EAAE,GAAG,IAAI;IAMpD;;OAEG;IACH,UAAU,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO;IAYvC;;OAEG;IACH,uBAAuB,CAAC,WAAW,EAAE,MAAM,GAAG,oBAAoB,EAAE;IAQpE;;;;;;OAMG;IACG,sBAAsB,CAC1B,KAAK,EAAE,yBAAyB,EAChC,KAAK,EAAE,yBAAyB,GAC/B,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAyCnC;;OAEG;IACH,wBAAwB,IAAI,MAAM,EAAE;IAIpC;;OAEG;IACH,KAAK,IAAI,IAAI;CAId"}

package/dist/esm/notifications/email/services/email-context-provider-registry.backend.service.js

@@ -1,141 +0,0 @@
-/**
- * Email Context Provider Registry Backend Service
- *
- * Manages registration and resolution of email context providers.
- * Custom apps register their providers at startup.
- */
-var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-};
-var __metadata = (this && this.__metadata) || function (k, v) {
-    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
-};
-var __param = (this && this.__param) || function (paramIndex, decorator) {
-    return function (target, key) { decorator(target, key, paramIndex); }
-};
-import { injectable, inject } from 'inversify';
-import { SAAS_SERVICE_TYPES } from '../../../inject/models/service-types.js';
-import { matchesTemplateRefPattern, } from '../../../notifications/email/models/email-context-provider.interface.js';
-// ─────────────────────────────────────────────────────────────────────────────
-// SERVICE
-// ─────────────────────────────────────────────────────────────────────────────
-let EmailContextProviderRegistryBackendService = class EmailContextProviderRegistryBackendService {
-    logger;
-    providers = [];
-    logDebug;
-    constructor(logger) {
-        this.logger = logger;
-        this.logDebug = this.logger.debugByType('EmailContextProviderRegistryBackendService');
-        this.logger.setDebugTypeLogging('EmailContextProviderRegistryBackendService', false);
-    }
-    /**
-     * Register a context provider
-     *
-     * @param provider - The provider to register
-     */
-    register(provider) {
-        // Check for duplicate provider IDs
-        const existing = this.providers.find(p => p.providerId === provider.providerId);
-        if (existing) {
-            this.logger.warn('Replacing existing email context provider', {
-                providerId: provider.providerId,
-            });
-            this.providers = this.providers.filter(p => p.providerId !== provider.providerId);
-        }
-        this.providers.push(provider);
-        this.logger.info('Email context provider registered', {
-            providerId: provider.providerId,
-            patterns: provider.templateRefPatterns,
-        });
-    }
-    /**
-     * Register multiple providers at once
-     */
-    registerAll(providers) {
-        for (const provider of providers) {
-            this.register(provider);
-        }
-    }
-    /**
-     * Unregister a provider by ID
-     */
-    unregister(providerId) {
-        const initialLength = this.providers.length;
-        this.providers = this.providers.filter(p => p.providerId !== providerId);
-        const removed = this.providers.length < initialLength;
-        if (removed) {
-            this.logger.info('Email context provider unregistered', { providerId });
-        }
-        return removed;
-    }
-    /**
-     * Get all providers that match a template ref
-     */
-    getProvidersForTemplate(templateRef) {
-        return this.providers.filter(provider => provider.templateRefPatterns.some(pattern => matchesTemplateRefPattern(templateRef, pattern)));
-    }
-    /**
-     * Build additional context by invoking all matching providers
-     *
-     * @param input - The context provider input
-     * @param utils - Platform utilities for providers
-     * @returns Combined additional context from all providers
-     */
-    async buildAdditionalContext(input, utils) {
-        const matchingProviders = this.getProvidersForTemplate(input.templateRef);
-        if (matchingProviders.length === 0) {
-            return {};
-        }
-        this.logDebug('Building additional context from providers', {
-            templateRef: input.templateRef,
-            providerCount: matchingProviders.length,
-            providerIds: matchingProviders.map(p => p.providerId),
-        });
-        // Run all providers and merge their results
-        const results = await Promise.all(matchingProviders.map(async (provider) => {
-            try {
-                const context = await provider.buildAdditionalContext(input, utils);
-                return { providerId: provider.providerId, context, success: true };
-            }
-            catch (err) {
-                const error = err;
-                this.logger.error('Email context provider failed', {
-                    providerId: provider.providerId,
-                    error: error.message,
-                });
-                return { providerId: provider.providerId, context: {}, success: false };
-            }
-        }));
-        // Merge all contexts (later providers override earlier ones)
-        const mergedContext = {};
-        for (const result of results) {
-            if (result.success) {
-                Object.assign(mergedContext, result.context);
-            }
-        }
-        return mergedContext;
-    }
-    /**
-     * Get all registered provider IDs
-     */
-    getRegisteredProviderIds() {
-        return this.providers.map(p => p.providerId);
-    }
-    /**
-     * Clear all registered providers
-     */
-    clear() {
-        this.providers = [];
-        this.logger.info('All email context providers cleared');
-    }
-};
-EmailContextProviderRegistryBackendService = __decorate([
-    injectable(),
-    __param(0, inject(SAAS_SERVICE_TYPES.Logger)),
-    __metadata("design:paramtypes", [Function])
-], EmailContextProviderRegistryBackendService);
-export { EmailContextProviderRegistryBackendService };
-//# sourceMappingURL=email-context-provider-registry.backend.service.js.map

package/dist/esm/notifications/email/services/email-context-provider-registry.backend.service.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"email-context-provider-registry.backend.service.js","sourceRoot":"","sources":["../../../../../../src/notifications/email/services/email-context-provider-registry.backend.service.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;;;;;;;;;;;;;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AAC/C,OAAO,EAAE,kBAAkB,EAAE,MAAM,gDAAgD,CAAC;AAEpF,OAAO,EAIL,yBAAyB,GAC1B,MAAM,gFAAgF,CAAC;AAExF,gFAAgF;AAChF,UAAU;AACV,gFAAgF;AAGzE,IAAM,0CAA0C,GAAhD,MAAM,0CAA0C;IAMC;IAL9C,SAAS,GAA2B,EAAE,CAAC;IAErC,QAAQ,CAA+D;IAEjF,YACsD,MAAqB;QAArB,WAAM,GAAN,MAAM,CAAe;QAEzE,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,4CAA4C,CAAC,CAAC;QACtF,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,4CAA4C,EAAE,KAAK,CAAC,CAAC;IACvF,CAAC;IAED;;;;OAIG;IACH,QAAQ,CAAC,QAA8B;QACrC,mCAAmC;QACnC,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,QAAQ,CAAC,UAAU,CAAC,CAAC;QAChF,IAAI,QAAQ,EAAE,CAAC;YACb,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,2CAA2C,EAAE;gBAC5D,UAAU,EAAE,QAAQ,CAAC,UAAU;aAChC,CAAC,CAAC;YACH,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,QAAQ,CAAC,UAAU,CAAC,CAAC;QACpF,CAAC;QAED,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC9B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,mCAAmC,EAAE;YACpD,UAAU,EAAE,QAAQ,CAAC,UAAU;YAC/B,QAAQ,EAAE,QAAQ,CAAC,mBAAmB;SACvC,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,WAAW,CAAC,SAAiC;QAC3C,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;YACjC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC;IAED;;OAEG;IACH,UAAU,CAAC,UAAkB;QAC3B,MAAM,aAAa,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;QAC5C,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,UAAU,CAAC,CAAC;QAEzE,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,GAAG,aAAa,CAAC;QACtD,IAAI,OAAO,EAAE,CAAC;YACZ,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,qCAAqC,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC;QAC1E,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;OAEG;IACH,uBAAuB,CAAC,WAAmB;QACzC,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CACtC,QAAQ,CAAC,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAC1C,yBAAyB,CAAC,WAAW,EAAE,OAAO,CAAC,CAChD,CACF,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,sBAAsB,CAC1B,KAAgC,EAChC,KAAgC;QAEhC,MAAM,iBAAiB,GAAG,IAAI,CAAC,uBAAuB,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAE1E,IAAI,iBAAiB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACnC,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,4CAA4C,EAAE;YAC1D,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,aAAa,EAAE,iBAAiB,CAAC,MAAM;YACvC,WAAW,EAAE,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC;SACtD,CAAC,CAAC;QAEH,4CAA4C;QAC5C,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAC/B,iBAAiB,CAAC,GAAG,CAAC,KAAK,EAAE,QAAQ,EAAE,EAAE;YACvC,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,sBAAsB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;gBACpE,OAAO,EAAE,UAAU,EAAE,QAAQ,CAAC,UAAU,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;YACrE,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,KAAK,GAAG,GAAY,CAAC;gBAC3B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,+BAA+B,EAAE;oBACjD,UAAU,EAAE,QAAQ,CAAC,UAAU;oBAC/B,KAAK,EAAE,KAAK,CAAC,OAAO;iBACrB,CAAC,CAAC;gBACH,OAAO,EAAE,UAAU,EAAE,QAAQ,CAAC,UAAU,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;YAC1E,CAAC;QACH,CAAC,CAAC,CACH,CAAC;QAEF,6DAA6D;QAC7D,MAAM,aAAa,GAA4B,EAAE,CAAC;QAClD,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;gBACnB,MAAM,CAAC,MAAM,CAAC,aAAa,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;YAC/C,CAAC;QACH,CAAC;QAED,OAAO,aAAa,CAAC;IACvB,CAAC;IAED;;OAEG;IACH,wBAAwB;QACtB,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;IAC/C,CAAC;IAED;;OAEG;IACH,KAAK;QACH,IAAI,CAAC,SAAS,GAAG,EAAE,CAAC;QACpB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAC;IAC1D,CAAC;CACF,CAAA;AAtIY,0CAA0C;IADtD,UAAU,EAAE;IAOR,WAAA,MAAM,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAA;;GANzB,0CAA0C,CAsItD","sourcesContent":["/**\n * Email Context Provider Registry Backend Service\n *\n * Manages registration and resolution of email context providers.\n * Custom apps register their providers at startup.\n */\n\nimport { injectable, inject } from 'inversify';\nimport { SAAS_SERVICE_TYPES } from '~wildo-backend-lib/inject/models/service-types';\nimport type { LoggerService } from '~wildo-backend-lib/monitoring/logger/services/logger.service';\nimport {\n  EmailContextProvider,\n  EmailContextProviderInput,\n  EmailContextProviderUtils,\n  matchesTemplateRefPattern,\n} from '~wildo-backend-lib/notifications/email/models/email-context-provider.interface';\n\n// ─────────────────────────────────────────────────────────────────────────────\n// SERVICE\n// ─────────────────────────────────────────────────────────────────────────────\n\n@injectable()\nexport class EmailContextProviderRegistryBackendService {\n  private providers: EmailContextProvider[] = [];\n\n  protected logDebug: (message: string, context?: Record<string, unknown>) => void;\n\n  constructor(\n    @inject(SAAS_SERVICE_TYPES.Logger) private readonly logger: LoggerService,\n  ) {\n    this.logDebug = this.logger.debugByType('EmailContextProviderRegistryBackendService');\n    this.logger.setDebugTypeLogging('EmailContextProviderRegistryBackendService', false);\n  }\n\n  /**\n   * Register a context provider\n   *\n   * @param provider - The provider to register\n   */\n  register(provider: EmailContextProvider): void {\n    // Check for duplicate provider IDs\n    const existing = this.providers.find(p => p.providerId === provider.providerId);\n    if (existing) {\n      this.logger.warn('Replacing existing email context provider', {\n        providerId: provider.providerId,\n      });\n      this.providers = this.providers.filter(p => p.providerId !== provider.providerId);\n    }\n\n    this.providers.push(provider);\n    this.logger.info('Email context provider registered', {\n      providerId: provider.providerId,\n      patterns: provider.templateRefPatterns,\n    });\n  }\n\n  /**\n   * Register multiple providers at once\n   */\n  registerAll(providers: EmailContextProvider[]): void {\n    for (const provider of providers) {\n      this.register(provider);\n    }\n  }\n\n  /**\n   * Unregister a provider by ID\n   */\n  unregister(providerId: string): boolean {\n    const initialLength = this.providers.length;\n    this.providers = this.providers.filter(p => p.providerId !== providerId);\n\n    const removed = this.providers.length < initialLength;\n    if (removed) {\n      this.logger.info('Email context provider unregistered', { providerId });\n    }\n\n    return removed;\n  }\n\n  /**\n   * Get all providers that match a template ref\n   */\n  getProvidersForTemplate(templateRef: string): EmailContextProvider[] {\n    return this.providers.filter(provider =>\n      provider.templateRefPatterns.some(pattern =>\n        matchesTemplateRefPattern(templateRef, pattern)\n      )\n    );\n  }\n\n  /**\n   * Build additional context by invoking all matching providers\n   *\n   * @param input - The context provider input\n   * @param utils - Platform utilities for providers\n   * @returns Combined additional context from all providers\n   */\n  async buildAdditionalContext(\n    input: EmailContextProviderInput,\n    utils: EmailContextProviderUtils\n  ): Promise<Record<string, unknown>> {\n    const matchingProviders = this.getProvidersForTemplate(input.templateRef);\n\n    if (matchingProviders.length === 0) {\n      return {};\n    }\n\n    this.logDebug('Building additional context from providers', {\n      templateRef: input.templateRef,\n      providerCount: matchingProviders.length,\n      providerIds: matchingProviders.map(p => p.providerId),\n    });\n\n    // Run all providers and merge their results\n    const results = await Promise.all(\n      matchingProviders.map(async (provider) => {\n        try {\n          const context = await provider.buildAdditionalContext(input, utils);\n          return { providerId: provider.providerId, context, success: true };\n        } catch (err) {\n          const error = err as Error;\n          this.logger.error('Email context provider failed', {\n            providerId: provider.providerId,\n            error: error.message,\n          });\n          return { providerId: provider.providerId, context: {}, success: false };\n        }\n      })\n    );\n\n    // Merge all contexts (later providers override earlier ones)\n    const mergedContext: Record<string, unknown> = {};\n    for (const result of results) {\n      if (result.success) {\n        Object.assign(mergedContext, result.context);\n      }\n    }\n\n    return mergedContext;\n  }\n\n  /**\n   * Get all registered provider IDs\n   */\n  getRegisteredProviderIds(): string[] {\n    return this.providers.map(p => p.providerId);\n  }\n\n  /**\n   * Clear all registered providers\n   */\n  clear(): void {\n    this.providers = [];\n    this.logger.info('All email context providers cleared');\n  }\n}\n"]}

package/dist/esm/notifications/email/services/email-template-compiler.backend.service.d.ts

@@ -1,37 +0,0 @@
-/**
- * Email Template Compiler Backend Service
- *
- * Compiles TSX email templates to JavaScript modules using ESBuild.
- * The compiled modules can be executed in the VM sandbox for rendering.
- */
-import type { LoggerService } from '../../../monitoring/logger/services/logger.service';
-export interface CompilationResult {
-    success: boolean;
-    compiledCode?: string;
-    sourceMap?: string;
-    errors: string[];
-    warnings: string[];
-    durationMs: number;
-}
-export declare class EmailTemplateCompilerBackendService {
-    private readonly logger;
-    protected logDebug: (message: string, context?: Record<string, unknown>) => void;
-    constructor(logger: LoggerService);
-    /**
-     * Compile TSX source to JavaScript module
-     *
-     * @param tsxSource - The TSX template source code
-     * @returns Compilation result with compiled code or errors
-     */
-    compile(tsxSource: string): Promise<CompilationResult>;
-    /**
-     * Compile and return detailed information about the compilation
-     * Useful for debugging and development
-     */
-    compileWithDetails(tsxSource: string): Promise<{
-        result: CompilationResult;
-        inputSize: number;
-        outputSize?: number;
-    }>;
-}
-//# sourceMappingURL=email-template-compiler.backend.service.d.ts.map

package/dist/esm/notifications/email/services/email-template-compiler.backend.service.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"email-template-compiler.backend.service.d.ts","sourceRoot":"","sources":["../../../../../../src/notifications/email/services/email-template-compiler.backend.service.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,8DAA8D,CAAC;AAMlG,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,OAAO,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;CACpB;AAMD,qBACa,mCAAmC;IAIT,OAAO,CAAC,QAAQ,CAAC,MAAM;IAH5D,SAAS,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;gBAG3B,MAAM,EAAE,aAAa;IAM3E;;;;;OAKG;IACG,OAAO,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAoE5D;;;OAGG;IACG,kBAAkB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC;QACnD,MAAM,EAAE,iBAAiB,CAAC;QAC1B,SAAS,EAAE,MAAM,CAAC;QAClB,UAAU,CAAC,EAAE,MAAM,CAAC;KACrB,CAAC;CAcH"}

package/dist/esm/notifications/email/services/email-template-compiler.backend.service.js

@@ -1,121 +0,0 @@
-/**
- * Email Template Compiler Backend Service
- *
- * Compiles TSX email templates to JavaScript modules using ESBuild.
- * The compiled modules can be executed in the VM sandbox for rendering.
- */
-var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-};
-var __metadata = (this && this.__metadata) || function (k, v) {
-    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
-};
-var __param = (this && this.__param) || function (paramIndex, decorator) {
-    return function (target, key) { decorator(target, key, paramIndex); }
-};
-import { injectable, inject } from 'inversify';
-import { SAAS_SERVICE_TYPES } from '../../../inject/models/service-types.js';
-// ─────────────────────────────────────────────────────────────────────────────
-// SERVICE
-// ─────────────────────────────────────────────────────────────────────────────
-let EmailTemplateCompilerBackendService = class EmailTemplateCompilerBackendService {
-    logger;
-    logDebug;
-    constructor(logger) {
-        this.logger = logger;
-        this.logDebug = this.logger.debugByType('EmailTemplateCompilerBackendService');
-        this.logger.setDebugTypeLogging('EmailTemplateCompilerBackendService', false);
-    }
-    /**
-     * Compile TSX source to JavaScript module
-     *
-     * @param tsxSource - The TSX template source code
-     * @returns Compilation result with compiled code or errors
-     */
-    async compile(tsxSource) {
-        const startTime = Date.now();
-        const errors = [];
-        const warnings = [];
-        this.logDebug('Compiling email template TSX to JavaScript');
-        try {
-            // Lazy import esbuild
-            const esbuild = await import('esbuild');
-            const result = await esbuild.transform(tsxSource, {
-                loader: 'tsx',
-                target: 'es2020',
-                format: 'cjs', // CommonJS for VM execution
-                jsx: 'automatic',
-                jsxImportSource: 'react',
-                minify: false, // Keep readable for debugging
-                sourcemap: true,
-                platform: 'node',
-                // Note: external is not available for transform(),
-                // VM sandbox handles module resolution
-            });
-            // Collect warnings
-            if (result.warnings && result.warnings.length > 0) {
-                for (const warning of result.warnings) {
-                    const msg = `Line ${warning.location?.line || '?'}: ${warning.text}`;
-                    warnings.push(msg);
-                    this.logger.warn('ESBuild warning during compilation', { message: msg });
-                }
-            }
-            const durationMs = Date.now() - startTime;
-            this.logDebug('Email template compilation successful', { durationMs });
-            return {
-                success: true,
-                compiledCode: result.code,
-                sourceMap: result.map,
-                errors,
-                warnings,
-                durationMs,
-            };
-        }
-        catch (err) {
-            const error = err;
-            const durationMs = Date.now() - startTime;
-            // ESBuild error format
-            if (error.errors && Array.isArray(error.errors)) {
-                for (const e of error.errors) {
-                    errors.push(`Line ${e.location?.line || '?'}: ${e.text}`);
-                }
-            }
-            else {
-                errors.push(error.message);
-            }
-            this.logger.error('Email template compilation failed', { errors, durationMs });
-            return {
-                success: false,
-                errors,
-                warnings,
-                durationMs,
-            };
-        }
-    }
-    /**
-     * Compile and return detailed information about the compilation
-     * Useful for debugging and development
-     */
-    async compileWithDetails(tsxSource) {
-        const inputSize = Buffer.byteLength(tsxSource, 'utf8');
-        const result = await this.compile(tsxSource);
-        const outputSize = result.compiledCode
-            ? Buffer.byteLength(result.compiledCode, 'utf8')
-            : undefined;
-        return {
-            result,
-            inputSize,
-            outputSize,
-        };
-    }
-};
-EmailTemplateCompilerBackendService = __decorate([
-    injectable(),
-    __param(0, inject(SAAS_SERVICE_TYPES.Logger)),
-    __metadata("design:paramtypes", [Function])
-], EmailTemplateCompilerBackendService);
-export { EmailTemplateCompilerBackendService };
-//# sourceMappingURL=email-template-compiler.backend.service.js.map