fix(webapp): stop logging full batch item contents in batchTriggerV3

The idempotency grouping step logged every batch item verbatim,
including its payload and options (which can carry arbitrary
customer metadata). Replace that with a summary of task identifiers
and item counts, and add a unit test covering the summary shape.

Author: carderne

apps/webapp/app/v3/services/batchTriggerV3.server.ts

@@ -43,6 +43,27 @@ function chunkArray<T>(items: T[], size: number): T[][] {
   }
   return chunks;
 }
+
+// Summarizes a task-identifier -> items grouping for logging, without including the items
+// themselves (each item is `{ task, payload, options }`, and `options.metadata` is arbitrary
+// customer data that must never be written to logs whole).
+export function summarizeItemsByTask(
+  itemsByTask: Record<string, unknown[]>
+): { taskIdentifiers: string[]; itemCountsByTask: Record<string, number>; totalItemCount: number } {
+  const itemCountsByTask: Record<string, number> = {};
+  let totalItemCount = 0;
+
+  for (const [taskIdentifier, items] of Object.entries(itemsByTask)) {
+    itemCountsByTask[taskIdentifier] = items.length;
+    totalItemCount += items.length;
+  }
+
+  return {
+    taskIdentifiers: Object.keys(itemsByTask),
+    itemCountsByTask,
+    totalItemCount,
+  };
+}
 const ASYNC_BATCH_PROCESS_SIZE_THRESHOLD = 20;
 const MAX_ATTEMPTS = 10;
 
@@ -409,9 +430,10 @@ export class BatchTriggerV3Service extends BaseService {
       {} as Record<string, typeof body.items>
     );
 
-    logger.debug("[BatchTriggerV2][call] Grouped items by task identifier", {
-      itemsByTask,
-    });
+    logger.debug(
+      "[BatchTriggerV2][call] Grouped items by task identifier",
+      summarizeItemsByTask(itemsByTask)
+    );
 
     const idempotencyKeyLookups = Object.entries(itemsByTask).flatMap(([taskIdentifier, items]) => {
       const idempotencyKeys = Array.from(

apps/webapp/test/batchTriggerV3ItemLogSummary.test.ts

@@ -0,0 +1,38 @@
+import { describe, expect, test } from "vitest";
+import { summarizeItemsByTask } from "~/v3/services/batchTriggerV3.server";
+
+describe("summarizeItemsByTask", () => {
+  test("returns counts and task identifiers without the underlying items", () => {
+    const itemsByTask = {
+      "my-task": [
+        { task: "my-task", payload: { secret: "value" }, options: { metadata: { pii: "yes" } } },
+        { task: "my-task", payload: { secret: "value-2" }, options: {} },
+      ],
+      "other-task": [{ task: "other-task", payload: {}, options: {} }],
+    };
+
+    const summary = summarizeItemsByTask(itemsByTask);
+
+    expect(summary).toEqual({
+      taskIdentifiers: ["my-task", "other-task"],
+      itemCountsByTask: { "my-task": 2, "other-task": 1 },
+      totalItemCount: 3,
+    });
+
+    // The summary must never contain the raw items, their payloads, or their options -
+    // just identifiers and counts.
+    const serialized = JSON.stringify(summary);
+    expect(serialized).not.toContain("payload");
+    expect(serialized).not.toContain("secret");
+    expect(serialized).not.toContain("metadata");
+    expect(serialized).not.toContain("pii");
+  });
+
+  test("returns empty collections when there are no idempotent items", () => {
+    expect(summarizeItemsByTask({})).toEqual({
+      taskIdentifiers: [],
+      itemCountsByTask: {},
+      totalItemCount: 0,
+    });
+  });
+});