[leninejunior]

Follow-up to #3271 (merged). The PR shipped with bot-review CRITICAL/WARNING comments and self-review findings unaddressed — this resolves them.

Audit (the main gap)

#3271 added the provider.credentials.batch_updated audit emitter but not the registries, so bulk activate/deactivate was silently dropped from the high-level Activity feed (every sibling provider action appears there).

• Register it in HIGH_LEVEL_ACTIONS and ACTIVITY_ICONS (+ i18n verb providerCredentialsBatchUpdated).

API (/api/providers PATCH)

• console.log → console.error on the error path (kilo-code CRITICAL).
• Audit status is now warn when notFound is non-empty, instead of always success (kilo-code WARNING — partial failure was reported as full success).

API (/api/providers/test-batch)

• The empty-result early return now includes a summary, so mode=selected with stale ids notifies the user instead of doing nothing.

UI (provider detail page)

• Bulk activate/deactivate chunks the selection by 100, so select-all on a provider with >100 accounts works instead of failing the Zod cap with a generic 400.
• Surfaces a warning when some ids were skipped (notFound) or nothing was updated, rather than a green "Activated 0".
• Cross-gates Test All vs Retest Selected so they can't run concurrently and clobber the shared results state.
• Bounds Retest Selected to 100 with a clear message (a larger live-test batch risks the 120s client abort).

Tests

• Extend the audit allowlist/registry tests to 27 actions + a regression asserting batch_updated is registered with a non-fallback icon.
• npm run test:unit green; typecheck:core clean; lint 0 errors.

Note: the local production build OOMs on the dev VPS (~1 GB free), so the Next.js build is validated by CI here.

[gemini-code-assist]

Warning

You have reached your daily quota limit. Please wait up to 24 hours and I will start processing your requests again!

[kilo-code-bot]

Code Review Summary

Status: 1 Issue Found | Recommendation: Address before merge

Overview

Severity	Count
WARNING	1

Issue Details (click to expand)

File	Line	Issue
src/app/api/providers/test-batch/route.ts	243	console.log on the error catch path — the PR description explicitly lists converting console.log → console.error as part of the scope (already applied in the PATCH handler at src/app/api/providers/route.ts:303), but this file was missed. Error paths should use console.error for proper log level routing.

Other Observations (not in diff)

Issues in unchanged code that cannot receive inline comments:

File	Line	Issue
src/i18n/messages/en.json	1327	Minor: trailing comma missing on the last property ("sync.token.revoked") in the activityVerbs object. Not a runtime issue (JSON allows trailing commas in some parsers, but the project uses Prettier which enforces them). Cosmetic drift from the reformatting elsewhere in this file.

Files Reviewed (9 files)

• src/app/(dashboard)/dashboard/providers/[id]/page.tsx — chunking logic, UI state fixes
• src/app/api/providers/route.ts — audit status fix, console.error fix
• src/app/api/providers/test-batch/route.ts — empty-result summary
• src/lib/audit/activityIcons.ts — batch_updated icon registration
• src/lib/audit/highLevelActions.ts — batch_updated allowlist
• tests/unit/audit-allowlist-real-actions.test.ts — count update + regression
• tests/unit/audit-high-level-actions.test.ts — count update
• src/i18n/messages/en.json — new keys + format fix
• src/i18n/messages/*.json — 40+ locale files with new keys

Fix these issues in Kilo Cloud

---

_{Reviewed by step-3.7-flash-20260528 · 2,443,952 tokens}

[diegosouzapw]

Merged into release/v3.8.22 ✅ — thanks @leninejunior! Solid #3271 follow-up: bulk activate/deactivate now chunks the selection at the API's 100-id cap and aggregates updated/skipped, retest is bounded to avoid the 120s abort, Test-All and the bulk buttons no longer race, and provider.credentials.batch_updated is now a registered high-level action (with regression tests). \n\nHeads-up: the provider detail page was split into ProviderDetailPageClient.tsx by the #3501 god-component refactor after you branched, so I re-applied your page.tsx logic deltas there during the merge (the Prettier churn dropped out cleanly). Ships in the next release.