@happyvertical/smrt-comments 0.55.23 → 0.56.0

package/AGENTS.md

@@ -11,7 +11,7 @@ their own notification delivery policy. The Svelte surface receives authorized
 comment projections and callbacks; it does not fetch or authorize records.
 `CommentService` requires a trusted actor and host record authorization callback.
 `RecordComments.contextKey` includes tenant, actor and record identity.
-See [test design](agents/test-design.md) for the behavior matrix.
+See [test design](agents/test-design.md) and [idempotent creation](agents/idempotent-create.md) for behavior matrices and retry invariants.
 
 Run `pnpm --filter @happyvertical/smrt-comments test`, `test:postgres`, `typecheck`, `check`, and
 `npx --yes @biomejs/biome@2.5.2 check packages/comments` after changes.

package/README.md

@@ -8,7 +8,7 @@ from the authenticated session and an `authorizeRecord` callback. The callback
 must verify that the record belongs to that tenant and that the actor may read
 or comment on it. Both `create` and `listForRecord` require that decision; request
 bodies cannot override the actor. `CreateCommentInput` contains only tenant,
-author, record type/id, body and mentions. The service ignores extra runtime
+author, record type/id, body, mentions and an optional `idempotencyKey`. The service ignores extra runtime
 properties, generates its own UUID/slug and inserts a new row without natural-key
 adoption. Caller-provided identity, context, database and constructor options
 never reach persistence. `CommentOptions` remains the separate trusted model
@@ -35,9 +35,12 @@ source reference so adapter replays deduplicate. Mentions are UUIDs, deduplicate
 and limited to 50; self-mentions do not notify. No adapter means no notifications.
 Mention validation finishes before the single comment insert; invalid or over-limit
 mentions leave no saved row. The comment is saved before notification delivery. A delivery rejection leaves
-the comment saved: reload it and retry delivery, not `create`, which creates a
-new comment. The component warns users to refresh and check the discussion before
-posting again when submission rejects. Delivery and persistence are deliberately not one transaction.
+the comment saved. With `idempotencyKey`, retry `create` with the same key and
+content to recover delivery without creating another comment. Without a key,
+reload and retry delivery rather than creating another comment. The component warns users to refresh and check the discussion before
+posting again when submission rejects. Delivery and persistence are separate unless the host composes both with the same
+outer transaction. See [idempotent creation](agents/idempotent-create.md) for key
+binding, typed conflicts, retention and transaction requirements.
 
 Import `RecordComments` from `@happyvertical/smrt-comments/svelte`. Pass authorized
 comment projections, an `onsubmit(body)` callback, and a `contextKey` containing
@@ -62,3 +65,9 @@ and mention policies are callbacks, not a selectable external provider.
 Validation: `pnpm --filter @happyvertical/smrt-comments test` covers SQLite and
 DuckDB. `pnpm --filter @happyvertical/smrt-comments test:postgres` adds PostgreSQL
 using the repository's disposable-database wrapper and ordinary CI role.
+
+Keyed retries use a separate canonical tenant binding while preserving stored
+tenant and author references. UUID casing changes across trusted actor contexts
+reuse the same comment, including after generic receipt retention. Unkeyed legacy SQLite
+listing remains scoped to its original tenant spelling; keyed rows are merged
+by equivalent UUID tenant without folding arbitrary textual tenant IDs.

package/dist/index.d.ts

@@ -2,7 +2,7 @@ import './__smrt-register__.js';
 export { CommentCollection } from './collections/CommentCollection.js';
 export { Comment } from './models/Comment.js';
 export { RecordCommentsRecipe } from './recipes.js';
-export { CommentService } from './services/CommentService.js';
+export { CommentIdempotencyError, CommentService, } from './services/CommentService.js';
 export { type CommentNotificationService, createCommentMentionNotifications, } from './services/mentionNotifications.js';
 export type { CommentActorContext, CommentMention, CommentMentionNotificationAdapter, CommentOptions, CommentRecordAccess, CreateCommentInput, } from './types.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,wBAAwB,CAAC;AAEhC,OAAO,EAAE,iBAAiB,EAAE,MAAM,oCAAoC,CAAC;AACvE,OAAO,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAC9C,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AACpD,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAC9D,OAAO,EACL,KAAK,0BAA0B,EAC/B,iCAAiC,GAClC,MAAM,oCAAoC,CAAC;AAC5C,YAAY,EACV,mBAAmB,EACnB,cAAc,EACd,iCAAiC,EACjC,cAAc,EACd,mBAAmB,EACnB,kBAAkB,GACnB,MAAM,YAAY,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,wBAAwB,CAAC;AAEhC,OAAO,EAAE,iBAAiB,EAAE,MAAM,oCAAoC,CAAC;AACvE,OAAO,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAC9C,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AACpD,OAAO,EACL,uBAAuB,EACvB,cAAc,GACf,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACL,KAAK,0BAA0B,EAC/B,iCAAiC,GAClC,MAAM,oCAAoC,CAAC;AAC5C,YAAY,EACV,mBAAmB,EACnB,cAAc,EACd,iCAAiC,EACjC,cAAc,EACd,mBAAmB,EACnB,kBAAkB,GACnB,MAAM,YAAY,CAAC"}

package/dist/index.js

@@ -1,7 +1,7 @@
-import { ObjectRegistry, SmrtCollection, SmrtPolymorphicAssociation, SmrtRecipe, crossPackageRef, field, smrt } from "@happyvertical/smrt-core";
+import { ObjectRegistry, SmrtCollection, SmrtPolymorphicAssociation, SmrtRecipe, crossPackageRef, digestRunOnceContent, field, runOnce, smrt } from "@happyvertical/smrt-core";
 import { TenantIsolationError, TenantScoped, getCurrentTenant, tenantId, withTenant } from "@happyvertical/smrt-tenancy";
 //#region src/__smrt-register__.ts
-ObjectRegistry.registerPackageManifest(JSON.parse(`{"version":"1.0.0","timestamp":0,"packageName":"@happyvertical/smrt-comments","packageVersion":"0.55.23","objects":{"@happyvertical/smrt-comments:CommentCollection":{"name":"commentcollection","className":"CommentCollection","qualifiedName":"@happyvertical/smrt-comments:CommentCollection","collection":"comments","filePath":"/home/runner/work/smrt/smrt/packages/comments/src/collections/CommentCollection.ts","packageName":"@happyvertical/smrt-comments","fields":{},"methods":{"listForRecord":{"name":"listForRecord","async":true,"parameters":[{"name":"recordType","type":"string","optional":false},{"name":"recordId","type":"string","optional":false}],"returnType":"Promise<Comment[]>","isStatic":false,"isPublic":true}},"decoratorConfig":{"tableName":"record_comments","api":false,"mcp":false,"cli":false},"extends":"SmrtCollection","extendsTypeArg":"Comment","exportName":"CommentCollection","collectionExportName":"CommentCollectionCollection","schema":{"tableName":"record_comments","ddl":"CREATE TABLE IF NOT EXISTS \\"record_comments\\" (\\n  \\"id\\" UUID PRIMARY KEY NOT NULL,\\n  \\"slug\\" TEXT NOT NULL,\\n  \\"context\\" TEXT NOT NULL DEFAULT '',\\n  \\"created_at\\" TIMESTAMP NOT NULL DEFAULT current_timestamp,\\n  \\"updated_at\\" TIMESTAMP NOT NULL DEFAULT current_timestamp,\\n  \\"meta_type\\" TEXT NOT NULL,\\n  \\"meta_id\\" TEXT NOT NULL,\\n  \\"role\\" TEXT NOT NULL,\\n  \\"sort_order\\" INTEGER DEFAULT 0,\\n  \\"tenant_id\\" UUID NOT NULL,\\n  \\"author_user_id\\" UUID NOT NULL,\\n  \\"body\\" TEXT NOT NULL,\\n  \\"mentions\\" TEXT\\n);","columns":{"id":{"type":"UUID","primaryKey":true,"referenceKind":"id","notNull":true},"slug":{"type":"TEXT","notNull":true},"context":{"type":"TEXT","notNull":true,"default":""},"created_at":{"type":"TIMESTAMP","notNull":true,"default":"current_timestamp"},"updated_at":{"type":"TIMESTAMP","notNull":true,"default":"current_timestamp"},"meta_type":{"type":"TEXT","notNull":true,"unique":false},"meta_id":{"type":"TEXT","notNull":true,"unique":false},"role":{"type":"TEXT","notNull":true,"unique":false},"sort_order":{"type":"INTEGER","notNull":false,"unique":false,"default":0},"tenant_id":{"type":"UUID","referenceKind":"tenantId","notNull":true,"unique":false},"author_user_id":{"type":"UUID","referenceKind":"crossPackageRef","notNull":true,"unique":false},"body":{"type":"TEXT","notNull":true,"unique":false},"mentions":{"type":"TEXT","notNull":false,"unique":false}},"indexes":[{"name":"record_comments_slug_context_idx","columns":["tenant_id","slug","context"],"unique":true},{"name":"record_comments_record_created_idx","columns":["tenant_id","meta_type","meta_id","created_at"]},{"name":"record_comments_tenant_id_created_at_idx","columns":["tenant_id","created_at"]},{"name":"record_comments_meta_type_meta_id_idx","columns":["meta_type","meta_id"]},{"name":"record_comments_author_user_id_idx","columns":["author_user_id"]}],"version":"78644ad4"},"importPath":"@happyvertical/smrt-comments"},"@happyvertical/smrt-comments:Comment":{"name":"comment","className":"Comment","qualifiedName":"@happyvertical/smrt-comments:Comment","collection":"comments","filePath":"/home/runner/work/smrt/smrt/packages/comments/src/models/Comment.ts","packageName":"@happyvertical/smrt-comments","fields":{"metaType":{"type":"text","required":true,"_meta":{"required":true}},"metaId":{"type":"text","required":true,"_meta":{"required":true}},"role":{"type":"text","required":true,"_meta":{"required":true}},"sortOrder":{"type":"integer","required":false,"default":0},"tenantId":{"type":"text","required":true,"_meta":{"sqlType":"UUID","__tenancy":{"isTenantIdField":true,"autoFilter":true,"required":true,"autoPopulate":true,"nullable":false,"mode":"required","field":"tenantId","allowSuperAdminBypass":false}}},"authorUserId":{"type":"crossPackageRef","required":true,"related":"@happyvertical/smrt-users:User"},"body":{"type":"text","required":true,"_meta":{"required":true}},"mentions":{"type":"text","required":false}},"methods":{"hydrate":{"name":"hydrate","async":true,"parameters":[],"returnType":"Promise<T | null>","isStatic":false,"isPublic":true}},"decoratorConfig":{"tableName":"record_comments","api":false,"mcp":false,"cli":false,"indexes":[{"name":"record_comments_record_created_idx","columns":["tenantId","metaType","metaId","createdAt"]}],"tenantScoped":{"mode":"required"},"conflictColumns":["tenant_id","slug","context"]},"extends":"SmrtPolymorphicAssociation","exportName":"Comment","collectionExportName":"CommentCollection","validationRules":[{"field":"metaType","rule":"required","fieldType":"text"},{"field":"metaId","rule":"required","fieldType":"text"},{"field":"role","rule":"required","fieldType":"text"},{"field":"authorUserId","rule":"required","fieldType":"crossPackageRef"},{"field":"body","rule":"required","fieldType":"text"}],"schema":{"tableName":"record_comments","ddl":"CREATE TABLE IF NOT EXISTS \\"record_comments\\" (\\n  \\"id\\" UUID PRIMARY KEY NOT NULL,\\n  \\"slug\\" TEXT NOT NULL,\\n  \\"context\\" TEXT NOT NULL DEFAULT '',\\n  \\"created_at\\" TIMESTAMP NOT NULL DEFAULT current_timestamp,\\n  \\"updated_at\\" TIMESTAMP NOT NULL DEFAULT current_timestamp,\\n  \\"meta_type\\" TEXT NOT NULL,\\n  \\"meta_id\\" TEXT NOT NULL,\\n  \\"role\\" TEXT NOT NULL,\\n  \\"sort_order\\" INTEGER DEFAULT 0,\\n  \\"tenant_id\\" UUID NOT NULL,\\n  \\"author_user_id\\" UUID NOT NULL,\\n  \\"body\\" TEXT NOT NULL,\\n  \\"mentions\\" TEXT\\n);","columns":{"id":{"type":"UUID","primaryKey":true,"referenceKind":"id","notNull":true},"slug":{"type":"TEXT","notNull":true},"context":{"type":"TEXT","notNull":true,"default":""},"created_at":{"type":"TIMESTAMP","notNull":true,"default":"current_timestamp"},"updated_at":{"type":"TIMESTAMP","notNull":true,"default":"current_timestamp"},"meta_type":{"type":"TEXT","notNull":true,"unique":false},"meta_id":{"type":"TEXT","notNull":true,"unique":false},"role":{"type":"TEXT","notNull":true,"unique":false},"sort_order":{"type":"INTEGER","notNull":false,"unique":false,"default":0},"tenant_id":{"type":"UUID","referenceKind":"tenantId","notNull":true,"unique":false},"author_user_id":{"type":"UUID","referenceKind":"crossPackageRef","notNull":true,"unique":false},"body":{"type":"TEXT","notNull":true,"unique":false},"mentions":{"type":"TEXT","notNull":false,"unique":false}},"indexes":[{"name":"record_comments_slug_context_idx","columns":["tenant_id","slug","context"],"unique":true},{"name":"record_comments_record_created_idx","columns":["tenant_id","meta_type","meta_id","created_at"]},{"name":"record_comments_tenant_id_created_at_idx","columns":["tenant_id","created_at"]},{"name":"record_comments_meta_type_meta_id_idx","columns":["meta_type","meta_id"]},{"name":"record_comments_author_user_id_idx","columns":["author_user_id"]}],"version":"78644ad4"},"importPath":"@happyvertical/smrt-comments"}},"moduleType":"smrt","recipes":[{"id":"comments.records","className":"RecordCommentsRecipe","label":"Record comments","summary":"Discuss work directly on the records it concerns.","synonyms":["comments","mentions","discussion"],"models":["@happyvertical/smrt-comments:Comment"],"nav":[],"requires":[],"group":{"id":"comments","label":"Comments","summary":"Keep discussions alongside the records your team works on."},"help":{"markdown":"## Overview\\n\\nRecord comments keep a discussion next to the work it concerns. Open a record\\nyou can access to read its discussion or add a comment. Comments are part of\\nthe record page, rather than a separate list of every discussion.\\n\\n## Tasks\\n\\n### Add a comment\\n\\nOpen the record, find Comments, write your message and choose Post comment.\\nYour app controls who can read the record and who can contribute to its discussion.\\n\\n### Mention someone\\n\\nIf your app provides mention selection, choose a teammate who can access the\\nrecord. When mention notifications are connected, that person receives a\\nnotification. Typing a name alone does not select a recipient.\\n\\n### Check a failed post\\n\\nIf posting reports an error, refresh the discussion before trying again. A\\ncomment may have been saved even when its mention notification could not be\\ndelivered. If it appears in the discussion, do not post it a second time.\\n","fieldRefs":[]},"surfaces":[{"kind":"playground","export":"@happyvertical/smrt-comments/svelte#RecordCommentsPlayground","label":"Record discussion preview"}],"runtime":"both","demoSeed":{"export":"@happyvertical/smrt-comments/svelte#recordCommentsDemo"},"demo":{"mode":"server","reasons":["Needs a server because its package depends on @happyvertical/smrt-tenancy, which do not build for a browser (#3624)."]}}],"smrtDependencies":["@happyvertical/smrt-core","@happyvertical/smrt-messages","@happyvertical/smrt-tenancy"],"browser":{"status":"server-only","issues":["#3624"],"via":["@happyvertical/smrt-tenancy"]},"stampsConstructors":true}`));
+ObjectRegistry.registerPackageManifest(JSON.parse(`{"version":"1.0.0","timestamp":0,"packageName":"@happyvertical/smrt-comments","packageVersion":"0.56.0","objects":{"@happyvertical/smrt-comments:CommentCollection":{"name":"commentcollection","className":"CommentCollection","qualifiedName":"@happyvertical/smrt-comments:CommentCollection","collection":"comments","filePath":"/home/runner/work/smrt/smrt/packages/comments/src/collections/CommentCollection.ts","packageName":"@happyvertical/smrt-comments","fields":{},"methods":{"listForRecord":{"name":"listForRecord","async":true,"parameters":[{"name":"recordType","type":"string","optional":false},{"name":"recordId","type":"string","optional":false}],"returnType":"Promise<Comment[]>","isStatic":false,"isPublic":true}},"decoratorConfig":{"tableName":"record_comments","api":false,"mcp":false,"cli":false},"extends":"SmrtCollection","extendsTypeArg":"Comment","exportName":"CommentCollection","collectionExportName":"CommentCollectionCollection","schema":{"tableName":"record_comments","ddl":"CREATE TABLE IF NOT EXISTS \\"record_comments\\" (\\n  \\"id\\" UUID PRIMARY KEY NOT NULL,\\n  \\"slug\\" TEXT NOT NULL,\\n  \\"context\\" TEXT NOT NULL DEFAULT '',\\n  \\"created_at\\" TIMESTAMP NOT NULL DEFAULT current_timestamp,\\n  \\"updated_at\\" TIMESTAMP NOT NULL DEFAULT current_timestamp,\\n  \\"meta_type\\" TEXT NOT NULL,\\n  \\"meta_id\\" TEXT NOT NULL,\\n  \\"role\\" TEXT NOT NULL,\\n  \\"sort_order\\" INTEGER DEFAULT 0,\\n  \\"tenant_id\\" UUID NOT NULL,\\n  \\"author_user_id\\" UUID NOT NULL,\\n  \\"body\\" TEXT NOT NULL,\\n  \\"mentions\\" TEXT,\\n  \\"idempotency_key\\" TEXT,\\n  \\"retry_tenant_id\\" TEXT,\\n  \\"request_digest\\" TEXT\\n);","columns":{"id":{"type":"UUID","primaryKey":true,"referenceKind":"id","notNull":true},"slug":{"type":"TEXT","notNull":true},"context":{"type":"TEXT","notNull":true,"default":""},"created_at":{"type":"TIMESTAMP","notNull":true,"default":"current_timestamp"},"updated_at":{"type":"TIMESTAMP","notNull":true,"default":"current_timestamp"},"meta_type":{"type":"TEXT","notNull":true,"unique":false},"meta_id":{"type":"TEXT","notNull":true,"unique":false},"role":{"type":"TEXT","notNull":true,"unique":false},"sort_order":{"type":"INTEGER","notNull":false,"unique":false,"default":0},"tenant_id":{"type":"UUID","referenceKind":"tenantId","notNull":true,"unique":false},"author_user_id":{"type":"UUID","referenceKind":"crossPackageRef","notNull":true,"unique":false},"body":{"type":"TEXT","notNull":true,"unique":false},"mentions":{"type":"TEXT","notNull":false,"unique":false},"idempotency_key":{"type":"TEXT","notNull":false,"unique":false},"retry_tenant_id":{"type":"TEXT","notNull":false,"unique":false},"request_digest":{"type":"TEXT","notNull":false,"unique":false}},"indexes":[{"name":"record_comments_slug_context_idx","columns":["tenant_id","slug","context"],"unique":true},{"name":"record_comments_tenant_request_key","columns":["retry_tenant_id","idempotency_key"],"unique":true},{"name":"record_comments_record_created_idx","columns":["tenant_id","meta_type","meta_id","created_at"]},{"name":"record_comments_tenant_id_created_at_idx","columns":["tenant_id","created_at"]},{"name":"record_comments_meta_type_meta_id_idx","columns":["meta_type","meta_id"]},{"name":"record_comments_author_user_id_idx","columns":["author_user_id"]}],"version":"5095dfc9"},"importPath":"@happyvertical/smrt-comments"},"@happyvertical/smrt-comments:Comment":{"name":"comment","className":"Comment","qualifiedName":"@happyvertical/smrt-comments:Comment","collection":"comments","filePath":"/home/runner/work/smrt/smrt/packages/comments/src/models/Comment.ts","packageName":"@happyvertical/smrt-comments","fields":{"metaType":{"type":"text","required":true,"_meta":{"required":true}},"metaId":{"type":"text","required":true,"_meta":{"required":true}},"role":{"type":"text","required":true,"_meta":{"required":true}},"sortOrder":{"type":"integer","required":false,"default":0},"tenantId":{"type":"text","required":true,"_meta":{"sqlType":"UUID","__tenancy":{"isTenantIdField":true,"autoFilter":true,"required":true,"autoPopulate":true,"nullable":false,"mode":"required","field":"tenantId","allowSuperAdminBypass":false}}},"authorUserId":{"type":"crossPackageRef","required":true,"related":"@happyvertical/smrt-users:User"},"body":{"type":"text","required":true,"_meta":{"required":true}},"mentions":{"type":"text","required":false},"idempotencyKey":{"type":"text","required":false,"_meta":{"nullable":true,"readonly":true},"readonly":true},"retryTenantId":{"type":"text","required":false,"_meta":{"nullable":true,"readonly":true},"readonly":true},"requestDigest":{"type":"text","required":false,"_meta":{"nullable":true,"readonly":true},"readonly":true}},"methods":{"hydrate":{"name":"hydrate","async":true,"parameters":[],"returnType":"Promise<T | null>","isStatic":false,"isPublic":true}},"decoratorConfig":{"tableName":"record_comments","api":false,"mcp":false,"cli":false,"indexes":[{"name":"record_comments_tenant_request_key","columns":["retryTenantId","idempotencyKey"],"unique":true},{"name":"record_comments_record_created_idx","columns":["tenantId","metaType","metaId","createdAt"]}],"tenantScoped":{"mode":"required"},"conflictColumns":["tenant_id","slug","context"]},"extends":"SmrtPolymorphicAssociation","exportName":"Comment","collectionExportName":"CommentCollection","validationRules":[{"field":"metaType","rule":"required","fieldType":"text"},{"field":"metaId","rule":"required","fieldType":"text"},{"field":"role","rule":"required","fieldType":"text"},{"field":"authorUserId","rule":"required","fieldType":"crossPackageRef"},{"field":"body","rule":"required","fieldType":"text"}],"schema":{"tableName":"record_comments","ddl":"CREATE TABLE IF NOT EXISTS \\"record_comments\\" (\\n  \\"id\\" UUID PRIMARY KEY NOT NULL,\\n  \\"slug\\" TEXT NOT NULL,\\n  \\"context\\" TEXT NOT NULL DEFAULT '',\\n  \\"created_at\\" TIMESTAMP NOT NULL DEFAULT current_timestamp,\\n  \\"updated_at\\" TIMESTAMP NOT NULL DEFAULT current_timestamp,\\n  \\"meta_type\\" TEXT NOT NULL,\\n  \\"meta_id\\" TEXT NOT NULL,\\n  \\"role\\" TEXT NOT NULL,\\n  \\"sort_order\\" INTEGER DEFAULT 0,\\n  \\"tenant_id\\" UUID NOT NULL,\\n  \\"author_user_id\\" UUID NOT NULL,\\n  \\"body\\" TEXT NOT NULL,\\n  \\"mentions\\" TEXT,\\n  \\"idempotency_key\\" TEXT,\\n  \\"retry_tenant_id\\" TEXT,\\n  \\"request_digest\\" TEXT\\n);","columns":{"id":{"type":"UUID","primaryKey":true,"referenceKind":"id","notNull":true},"slug":{"type":"TEXT","notNull":true},"context":{"type":"TEXT","notNull":true,"default":""},"created_at":{"type":"TIMESTAMP","notNull":true,"default":"current_timestamp"},"updated_at":{"type":"TIMESTAMP","notNull":true,"default":"current_timestamp"},"meta_type":{"type":"TEXT","notNull":true,"unique":false},"meta_id":{"type":"TEXT","notNull":true,"unique":false},"role":{"type":"TEXT","notNull":true,"unique":false},"sort_order":{"type":"INTEGER","notNull":false,"unique":false,"default":0},"tenant_id":{"type":"UUID","referenceKind":"tenantId","notNull":true,"unique":false},"author_user_id":{"type":"UUID","referenceKind":"crossPackageRef","notNull":true,"unique":false},"body":{"type":"TEXT","notNull":true,"unique":false},"mentions":{"type":"TEXT","notNull":false,"unique":false},"idempotency_key":{"type":"TEXT","notNull":false,"unique":false},"retry_tenant_id":{"type":"TEXT","notNull":false,"unique":false},"request_digest":{"type":"TEXT","notNull":false,"unique":false}},"indexes":[{"name":"record_comments_slug_context_idx","columns":["tenant_id","slug","context"],"unique":true},{"name":"record_comments_tenant_request_key","columns":["retry_tenant_id","idempotency_key"],"unique":true},{"name":"record_comments_record_created_idx","columns":["tenant_id","meta_type","meta_id","created_at"]},{"name":"record_comments_tenant_id_created_at_idx","columns":["tenant_id","created_at"]},{"name":"record_comments_meta_type_meta_id_idx","columns":["meta_type","meta_id"]},{"name":"record_comments_author_user_id_idx","columns":["author_user_id"]}],"version":"5095dfc9"},"importPath":"@happyvertical/smrt-comments"}},"moduleType":"smrt","recipes":[{"id":"comments.records","className":"RecordCommentsRecipe","label":"Record comments","summary":"Discuss work directly on the records it concerns.","synonyms":["comments","mentions","discussion"],"models":["@happyvertical/smrt-comments:Comment"],"nav":[],"requires":[],"group":{"id":"comments","label":"Comments","summary":"Keep discussions alongside the records your team works on."},"help":{"markdown":"## Overview\\n\\nRecord comments keep a discussion next to the work it concerns. Open a record\\nyou can access to read its discussion or add a comment. Comments are part of\\nthe record page, rather than a separate list of every discussion.\\n\\n## Tasks\\n\\n### Add a comment\\n\\nOpen the record, find Comments, write your message and choose Post comment.\\nYour app controls who can read the record and who can contribute to its discussion.\\n\\n### Mention someone\\n\\nIf your app provides mention selection, choose a teammate who can access the\\nrecord. When mention notifications are connected, that person receives a\\nnotification. Typing a name alone does not select a recipient.\\n\\n### Check a failed post\\n\\nIf posting reports an error, refresh the discussion before trying again. A\\ncomment may have been saved even when its mention notification could not be\\ndelivered. If it appears in the discussion, do not post it a second time.\\n","fieldRefs":[]},"surfaces":[{"kind":"playground","export":"@happyvertical/smrt-comments/svelte#RecordCommentsPlayground","label":"Record discussion preview"}],"runtime":"both","demoSeed":{"export":"@happyvertical/smrt-comments/svelte#recordCommentsDemo"},"demo":{"mode":"server","reasons":["Needs a server because its package depends on @happyvertical/smrt-tenancy, which do not build for a browser (#3624)."]}}],"smrtDependencies":["@happyvertical/smrt-core","@happyvertical/smrt-messages","@happyvertical/smrt-tenancy"],"browser":{"status":"server-only","issues":["#3624"],"via":["@happyvertical/smrt-tenancy"]},"stampsConstructors":true}`));
 //#endregion
 //#region src/models/Comment.ts
 var __defProp = Object.defineProperty;
@@ -27,11 +27,17 @@ var Comment = class extends SmrtPolymorphicAssociation {
 	body = "";
 	/** JSON array of referenced User UUIDs; use mentionUserIds for validation. */
 	mentions = "[]";
+	idempotencyKey = null;
+	retryTenantId = null;
+	requestDigest = null;
 	constructor(options = {}) {
 		super(options);
 		if (options.tenantId !== void 0) this.tenantId = options.tenantId;
 		if (options.authorUserId !== void 0) this.authorUserId = options.authorUserId;
 		if (options.body !== void 0) this.body = options.body;
+		if (options.idempotencyKey !== void 0) this.idempotencyKey = options.idempotencyKey;
+		if (options.retryTenantId !== void 0) this.retryTenantId = options.retryTenantId;
+		if (options.requestDigest !== void 0) this.requestDigest = options.requestDigest;
 		const mentions = options.mentions;
 		if (Array.isArray(mentions)) this.mentionUserIds = mentions;
 		else if (typeof mentions === "string") this.mentions = mentions;
@@ -54,12 +60,31 @@ __publicField(Comment, "__smrtPackage__", "@happyvertical/smrt-comments");
 __decorateClass([tenantId()], Comment.prototype, "tenantId", 2);
 __decorateClass([crossPackageRef("@happyvertical/smrt-users:User", { required: true })], Comment.prototype, "authorUserId", 2);
 __decorateClass([field({ required: true })], Comment.prototype, "body", 2);
+__decorateClass([field({
+	type: "text",
+	nullable: true,
+	readonly: true
+})], Comment.prototype, "idempotencyKey", 2);
+__decorateClass([field({
+	type: "text",
+	nullable: true,
+	readonly: true
+})], Comment.prototype, "retryTenantId", 2);
+__decorateClass([field({
+	type: "text",
+	nullable: true,
+	readonly: true
+})], Comment.prototype, "requestDigest", 2);
 Comment = __decorateClass([TenantScoped({ mode: "required" }), smrt({
 	tableName: "record_comments",
 	api: false,
 	mcp: false,
 	cli: false,
 	indexes: [{
+		name: "record_comments_tenant_request_key",
+		columns: ["retryTenantId", "idempotencyKey"],
+		unique: true
+	}, {
 		name: "record_comments_record_created_idx",
 		columns: [
 			"tenantId",
@@ -115,6 +140,15 @@ var RecordCommentsRecipe = class extends SmrtRecipe {
 };
 //#endregion
 //#region src/services/CommentService.ts
+var canonicalUuid = (value) => /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i.test(value) ? value.toLowerCase() : value;
+var CommentIdempotencyError = class extends Error {
+	constructor(code) {
+		super(code === "COMMENT_REQUEST_CONFLICT" ? "Comment request key already used with different content." : "Comment request no longer has an unchanged comment.");
+		this.code = code;
+		this.name = "CommentIdempotencyError";
+	}
+	code;
+};
 var CommentService = class {
 	constructor(options) {
 		this.options = options;
@@ -131,34 +165,100 @@ var CommentService = class {
 	}
 	async listForRecord(recordType, recordId) {
 		await this.authorize(recordType, recordId, "read");
-		return withTenant({ tenantId: this.options.actor.tenantId }, async () => (await CommentCollection.create({ db: this.options.db })).listForRecord(recordType, recordId));
+		const tenantId = this.options.actor.tenantId;
+		const binding = canonicalUuid(tenantId);
+		const rows = await withTenant({ tenantId }, async () => (await CommentCollection.create({ db: this.options.db })).listForRecord(recordType, recordId));
+		const collection = await withTenant({ tenantId }, () => CommentCollection.create({ db: this.options.db }));
+		const bound = await collection.db.query(`SELECT CAST(id AS TEXT) AS id, CAST(tenant_id AS TEXT) AS tenant_id FROM "${collection.tableName.replace(/"/g, "\"\"")}" WHERE retry_tenant_id = ? AND meta_type = ? AND meta_id = ? AND idempotency_key IS NOT NULL`, binding, recordType, recordId);
+		for (const stored of bound.rows) {
+			const row = await this.loadBoundComment(collection.db, stored, binding);
+			if (row.metaType !== recordType || row.metaId !== recordId) throw new CommentIdempotencyError("COMMENT_REQUEST_UNAVAILABLE");
+			rows.push(row);
+		}
+		for (const row of rows) if (row.idempotencyKey !== null && row.retryTenantId !== binding) throw new CommentIdempotencyError("COMMENT_REQUEST_UNAVAILABLE");
+		return [...new Map(rows.map((row) => [row.id, row])).values()].sort((a, b) => (a.created_at?.getTime() ?? 0) - (b.created_at?.getTime() ?? 0) || (a.id ?? "").localeCompare(b.id ?? ""));
+	}
+	async loadBoundComment(db, stored, binding) {
+		const id = stored.id;
+		const tenantId = stored.tenant_id;
+		if (typeof id !== "string" || typeof tenantId !== "string" || canonicalUuid(tenantId) !== binding) throw new CommentIdempotencyError("COMMENT_REQUEST_UNAVAILABLE");
+		const row = await withTenant({ tenantId }, async () => (await CommentCollection.create({ db })).get(id));
+		if (!row || canonicalUuid(row.tenantId) !== binding || row.retryTenantId !== binding || row.idempotencyKey === null) throw new CommentIdempotencyError("COMMENT_REQUEST_UNAVAILABLE");
+		return row;
 	}
 	async create(commentOptions) {
-		const { tenantId, authorUserId, metaType, metaId, body, mentions } = commentOptions;
-		if (!tenantId || !authorUserId) throw new TypeError("Comments require a tenant and author.");
-		if (tenantId !== this.options.actor.tenantId || authorUserId !== this.options.actor.userId) throw new Error("Comment actor context mismatch.");
+		const { tenantId: inputTenantId, authorUserId: inputAuthorUserId, metaType, metaId, body, mentions, idempotencyKey } = commentOptions;
+		if (!inputTenantId || !inputAuthorUserId) throw new TypeError("Comments require a tenant and author.");
+		if (canonicalUuid(inputTenantId) !== canonicalUuid(this.options.actor.tenantId) || canonicalUuid(inputAuthorUserId) !== canonicalUuid(this.options.actor.userId)) throw new Error("Comment actor context mismatch.");
+		const tenantId = this.options.actor.tenantId;
+		const authorUserId = this.options.actor.userId;
 		await this.authorize(metaType ?? "", metaId ?? "", "comment");
 		if (!body?.trim()) throw new TypeError("Comment body is required.");
 		const prepared = new Comment();
 		if (mentions !== void 0) prepared.mentionUserIds = mentions;
-		const id = crypto.randomUUID();
+		if (idempotencyKey !== void 0 && (typeof idempotencyKey !== "string" || !idempotencyKey.trim() || idempotencyKey !== idempotencyKey.trim() || idempotencyKey.length > 200)) throw new TypeError("Comment idempotencyKey must be a nonempty trimmed string of at most 200 characters.");
+		const normalizedMentions = [...prepared.mentionUserIds].sort();
+		const requestDigest = digestRunOnceContent({
+			tenantId: canonicalUuid(tenantId),
+			authorUserId: canonicalUuid(authorUserId),
+			metaType,
+			metaId,
+			body,
+			mentions: normalizedMentions
+		});
 		const comment = await withTenant({ tenantId }, async () => {
-			return (await CommentCollection.create({ db: this.options.db })).create({
-				tenantId,
-				authorUserId,
-				metaType,
-				metaId,
-				body,
-				id,
-				slug: id,
-				context: "",
-				_insertOnly: true,
-				mentions: prepared.mentions
+			const collection = await CommentCollection.create({ db: this.options.db });
+			const insert = async (target) => {
+				const id = crypto.randomUUID();
+				return target.create({
+					tenantId,
+					authorUserId,
+					metaType,
+					metaId,
+					body,
+					id,
+					slug: id,
+					context: "",
+					_insertOnly: true,
+					mentions: prepared.mentions,
+					idempotencyKey: idempotencyKey ?? null,
+					requestDigest: idempotencyKey === void 0 ? null : requestDigest,
+					retryTenantId: idempotencyKey === void 0 ? null : canonicalUuid(tenantId)
+				});
+			};
+			if (idempotencyKey === void 0) return insert(collection);
+			const receipt = await runOnce({
+				db: collection.db,
+				tenantId: canonicalUuid(tenantId),
+				actor: "smrt-comments.create:v1",
+				token: idempotencyKey,
+				content: "comment-request-binding:v1"
+			}, async (tx) => {
+				const scoped = await CommentCollection.create({ db: tx });
+				const matches = await tx.query(`SELECT CAST(id AS TEXT) AS id, CAST(tenant_id AS TEXT) AS tenant_id FROM "${scoped.tableName.replace(/"/g, "\"\"")}" WHERE retry_tenant_id = ? AND idempotency_key = ?`, canonicalUuid(tenantId), idempotencyKey);
+				if (matches.rows.length > 1) throw new CommentIdempotencyError("COMMENT_REQUEST_UNAVAILABLE");
+				const row2 = matches.rows[0] ? await this.loadBoundComment(tx, matches.rows[0], canonicalUuid(tenantId)) : await insert(scoped);
+				return {
+					id: row2.id,
+					digest: row2.requestDigest,
+					tenant_id: row2.tenantId
+				};
 			});
+			if (receipt.digest !== requestDigest) throw new CommentIdempotencyError("COMMENT_REQUEST_CONFLICT");
+			const row = await this.loadBoundComment(collection.db, receipt, canonicalUuid(tenantId));
+			if (!row || canonicalUuid(row.tenantId) !== canonicalUuid(tenantId) || row.idempotencyKey !== idempotencyKey || row.requestDigest !== requestDigest || digestRunOnceContent({
+				tenantId: canonicalUuid(row.tenantId),
+				authorUserId: canonicalUuid(row.authorUserId),
+				metaType: row.metaType,
+				metaId: row.metaId,
+				body: row.body,
+				mentions: [...row.mentionUserIds].sort()
+			}) !== requestDigest) throw new CommentIdempotencyError("COMMENT_REQUEST_UNAVAILABLE");
+			return row;
 		});
 		if (!this.options.mentionNotifications || !comment.id) return comment;
 		for (const recipientUserId of comment.mentionUserIds) {
-			if (recipientUserId === comment.authorUserId) continue;
+			if (canonicalUuid(recipientUserId) === canonicalUuid(comment.authorUserId)) continue;
 			await this.options.mentionNotifications.notifyMention({
 				commentId: comment.id,
 				tenantId: comment.tenantId,
@@ -188,6 +288,6 @@ function createCommentMentionNotifications(options) {
 	} };
 }
 //#endregion
-export { Comment, CommentCollection, CommentService, RecordCommentsRecipe, createCommentMentionNotifications };
+export { Comment, CommentCollection, CommentIdempotencyError, CommentService, RecordCommentsRecipe, createCommentMentionNotifications };
 
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","names":[],"sources":["../src/__smrt-register__.ts","../src/models/Comment.ts","../src/collections/CommentCollection.ts","../src/recipes.ts","../src/services/CommentService.ts","../src/services/mentionNotifications.ts"],"sourcesContent":["// Generated by @happyvertical/smrt-core smrtPlugin at library build time.\n// The package manifest is inlined so self-registration cannot miss when a\n// downstream bundler relocates this module away from dist/manifest.json\n// (https://github.com/happyvertical/smrt/issues/1506,\n//  https://github.com/happyvertical/smrt/issues/1507).\nimport { ObjectRegistry } from '@happyvertical/smrt-core';\n\nObjectRegistry.registerPackageManifest(JSON.parse(\"{\\\"version\\\":\\\"1.0.0\\\",\\\"timestamp\\\":0,\\\"packageName\\\":\\\"@happyvertical/smrt-comments\\\",\\\"packageVersion\\\":\\\"0.55.23\\\",\\\"objects\\\":{\\\"@happyvertical/smrt-comments:CommentCollection\\\":{\\\"name\\\":\\\"commentcollection\\\",\\\"className\\\":\\\"CommentCollection\\\",\\\"qualifiedName\\\":\\\"@happyvertical/smrt-comments:CommentCollection\\\",\\\"collection\\\":\\\"comments\\\",\\\"filePath\\\":\\\"/home/runner/work/smrt/smrt/packages/comments/src/collections/CommentCollection.ts\\\",\\\"packageName\\\":\\\"@happyvertical/smrt-comments\\\",\\\"fields\\\":{},\\\"methods\\\":{\\\"listForRecord\\\":{\\\"name\\\":\\\"listForRecord\\\",\\\"async\\\":true,\\\"parameters\\\":[{\\\"name\\\":\\\"recordType\\\",\\\"type\\\":\\\"string\\\",\\\"optional\\\":false},{\\\"name\\\":\\\"recordId\\\",\\\"type\\\":\\\"string\\\",\\\"optional\\\":false}],\\\"returnType\\\":\\\"Promise<Comment[]>\\\",\\\"isStatic\\\":false,\\\"isPublic\\\":true}},\\\"decoratorConfig\\\":{\\\"tableName\\\":\\\"record_comments\\\",\\\"api\\\":false,\\\"mcp\\\":false,\\\"cli\\\":false},\\\"extends\\\":\\\"SmrtCollection\\\",\\\"extendsTypeArg\\\":\\\"Comment\\\",\\\"exportName\\\":\\\"CommentCollection\\\",\\\"collectionExportName\\\":\\\"CommentCollectionCollection\\\",\\\"schema\\\":{\\\"tableName\\\":\\\"record_comments\\\",\\\"ddl\\\":\\\"CREATE TABLE IF NOT EXISTS \\\\\\\"record_comments\\\\\\\" (\\\\n  \\\\\\\"id\\\\\\\" UUID PRIMARY KEY NOT NULL,\\\\n  \\\\\\\"slug\\\\\\\" TEXT NOT NULL,\\\\n  \\\\\\\"context\\\\\\\" TEXT NOT NULL DEFAULT '',\\\\n  \\\\\\\"created_at\\\\\\\" TIMESTAMP NOT NULL DEFAULT current_timestamp,\\\\n  \\\\\\\"updated_at\\\\\\\" TIMESTAMP NOT NULL DEFAULT current_timestamp,\\\\n  \\\\\\\"meta_type\\\\\\\" TEXT NOT NULL,\\\\n  \\\\\\\"meta_id\\\\\\\" TEXT NOT NULL,\\\\n  \\\\\\\"role\\\\\\\" TEXT NOT NULL,\\\\n  \\\\\\\"sort_order\\\\\\\" INTEGER DEFAULT 0,\\\\n  \\\\\\\"tenant_id\\\\\\\" UUID NOT NULL,\\\\n  \\\\\\\"author_user_id\\\\\\\" UUID NOT NULL,\\\\n  \\\\\\\"body\\\\\\\" TEXT NOT NULL,\\\\n  \\\\\\\"mentions\\\\\\\" TEXT\\\\n);\\\",\\\"columns\\\":{\\\"id\\\":{\\\"type\\\":\\\"UUID\\\",\\\"primaryKey\\\":true,\\\"referenceKind\\\":\\\"id\\\",\\\"notNull\\\":true},\\\"slug\\\":{\\\"type\\\":\\\"TEXT\\\",\\\"notNull\\\":true},\\\"context\\\":{\\\"type\\\":\\\"TEXT\\\",\\\"notNull\\\":true,\\\"default\\\":\\\"\\\"},\\\"created_at\\\":{\\\"type\\\":\\\"TIMESTAMP\\\",\\\"notNull\\\":true,\\\"default\\\":\\\"current_timestamp\\\"},\\\"updated_at\\\":{\\\"type\\\":\\\"TIMESTAMP\\\",\\\"notNull\\\":true,\\\"default\\\":\\\"current_timestamp\\\"},\\\"meta_type\\\":{\\\"type\\\":\\\"TEXT\\\",\\\"notNull\\\":true,\\\"unique\\\":false},\\\"meta_id\\\":{\\\"type\\\":\\\"TEXT\\\",\\\"notNull\\\":true,\\\"unique\\\":false},\\\"role\\\":{\\\"type\\\":\\\"TEXT\\\",\\\"notNull\\\":true,\\\"unique\\\":false},\\\"sort_order\\\":{\\\"type\\\":\\\"INTEGER\\\",\\\"notNull\\\":false,\\\"unique\\\":false,\\\"default\\\":0},\\\"tenant_id\\\":{\\\"type\\\":\\\"UUID\\\",\\\"referenceKind\\\":\\\"tenantId\\\",\\\"notNull\\\":true,\\\"unique\\\":false},\\\"author_user_id\\\":{\\\"type\\\":\\\"UUID\\\",\\\"referenceKind\\\":\\\"crossPackageRef\\\",\\\"notNull\\\":true,\\\"unique\\\":false},\\\"body\\\":{\\\"type\\\":\\\"TEXT\\\",\\\"notNull\\\":true,\\\"unique\\\":false},\\\"mentions\\\":{\\\"type\\\":\\\"TEXT\\\",\\\"notNull\\\":false,\\\"unique\\\":false}},\\\"indexes\\\":[{\\\"name\\\":\\\"record_comments_slug_context_idx\\\",\\\"columns\\\":[\\\"tenant_id\\\",\\\"slug\\\",\\\"context\\\"],\\\"unique\\\":true},{\\\"name\\\":\\\"record_comments_record_created_idx\\\",\\\"columns\\\":[\\\"tenant_id\\\",\\\"meta_type\\\",\\\"meta_id\\\",\\\"created_at\\\"]},{\\\"name\\\":\\\"record_comments_tenant_id_created_at_idx\\\",\\\"columns\\\":[\\\"tenant_id\\\",\\\"created_at\\\"]},{\\\"name\\\":\\\"record_comments_meta_type_meta_id_idx\\\",\\\"columns\\\":[\\\"meta_type\\\",\\\"meta_id\\\"]},{\\\"name\\\":\\\"record_comments_author_user_id_idx\\\",\\\"columns\\\":[\\\"author_user_id\\\"]}],\\\"version\\\":\\\"78644ad4\\\"},\\\"importPath\\\":\\\"@happyvertical/smrt-comments\\\"},\\\"@happyvertical/smrt-comments:Comment\\\":{\\\"name\\\":\\\"comment\\\",\\\"className\\\":\\\"Comment\\\",\\\"qualifiedName\\\":\\\"@happyvertical/smrt-comments:Comment\\\",\\\"collection\\\":\\\"comments\\\",\\\"filePath\\\":\\\"/home/runner/work/smrt/smrt/packages/comments/src/models/Comment.ts\\\",\\\"packageName\\\":\\\"@happyvertical/smrt-comments\\\",\\\"fields\\\":{\\\"metaType\\\":{\\\"type\\\":\\\"text\\\",\\\"required\\\":true,\\\"_meta\\\":{\\\"required\\\":true}},\\\"metaId\\\":{\\\"type\\\":\\\"text\\\",\\\"required\\\":true,\\\"_meta\\\":{\\\"required\\\":true}},\\\"role\\\":{\\\"type\\\":\\\"text\\\",\\\"required\\\":true,\\\"_meta\\\":{\\\"required\\\":true}},\\\"sortOrder\\\":{\\\"type\\\":\\\"integer\\\",\\\"required\\\":false,\\\"default\\\":0},\\\"tenantId\\\":{\\\"type\\\":\\\"text\\\",\\\"required\\\":true,\\\"_meta\\\":{\\\"sqlType\\\":\\\"UUID\\\",\\\"__tenancy\\\":{\\\"isTenantIdField\\\":true,\\\"autoFilter\\\":true,\\\"required\\\":true,\\\"autoPopulate\\\":true,\\\"nullable\\\":false,\\\"mode\\\":\\\"required\\\",\\\"field\\\":\\\"tenantId\\\",\\\"allowSuperAdminBypass\\\":false}}},\\\"authorUserId\\\":{\\\"type\\\":\\\"crossPackageRef\\\",\\\"required\\\":true,\\\"related\\\":\\\"@happyvertical/smrt-users:User\\\"},\\\"body\\\":{\\\"type\\\":\\\"text\\\",\\\"required\\\":true,\\\"_meta\\\":{\\\"required\\\":true}},\\\"mentions\\\":{\\\"type\\\":\\\"text\\\",\\\"required\\\":false}},\\\"methods\\\":{\\\"hydrate\\\":{\\\"name\\\":\\\"hydrate\\\",\\\"async\\\":true,\\\"parameters\\\":[],\\\"returnType\\\":\\\"Promise<T | null>\\\",\\\"isStatic\\\":false,\\\"isPublic\\\":true}},\\\"decoratorConfig\\\":{\\\"tableName\\\":\\\"record_comments\\\",\\\"api\\\":false,\\\"mcp\\\":false,\\\"cli\\\":false,\\\"indexes\\\":[{\\\"name\\\":\\\"record_comments_record_created_idx\\\",\\\"columns\\\":[\\\"tenantId\\\",\\\"metaType\\\",\\\"metaId\\\",\\\"createdAt\\\"]}],\\\"tenantScoped\\\":{\\\"mode\\\":\\\"required\\\"},\\\"conflictColumns\\\":[\\\"tenant_id\\\",\\\"slug\\\",\\\"context\\\"]},\\\"extends\\\":\\\"SmrtPolymorphicAssociation\\\",\\\"exportName\\\":\\\"Comment\\\",\\\"collectionExportName\\\":\\\"CommentCollection\\\",\\\"validationRules\\\":[{\\\"field\\\":\\\"metaType\\\",\\\"rule\\\":\\\"required\\\",\\\"fieldType\\\":\\\"text\\\"},{\\\"field\\\":\\\"metaId\\\",\\\"rule\\\":\\\"required\\\",\\\"fieldType\\\":\\\"text\\\"},{\\\"field\\\":\\\"role\\\",\\\"rule\\\":\\\"required\\\",\\\"fieldType\\\":\\\"text\\\"},{\\\"field\\\":\\\"authorUserId\\\",\\\"rule\\\":\\\"required\\\",\\\"fieldType\\\":\\\"crossPackageRef\\\"},{\\\"field\\\":\\\"body\\\",\\\"rule\\\":\\\"required\\\",\\\"fieldType\\\":\\\"text\\\"}],\\\"schema\\\":{\\\"tableName\\\":\\\"record_comments\\\",\\\"ddl\\\":\\\"CREATE TABLE IF NOT EXISTS \\\\\\\"record_comments\\\\\\\" (\\\\n  \\\\\\\"id\\\\\\\" UUID PRIMARY KEY NOT NULL,\\\\n  \\\\\\\"slug\\\\\\\" TEXT NOT NULL,\\\\n  \\\\\\\"context\\\\\\\" TEXT NOT NULL DEFAULT '',\\\\n  \\\\\\\"created_at\\\\\\\" TIMESTAMP NOT NULL DEFAULT current_timestamp,\\\\n  \\\\\\\"updated_at\\\\\\\" TIMESTAMP NOT NULL DEFAULT current_timestamp,\\\\n  \\\\\\\"meta_type\\\\\\\" TEXT NOT NULL,\\\\n  \\\\\\\"meta_id\\\\\\\" TEXT NOT NULL,\\\\n  \\\\\\\"role\\\\\\\" TEXT NOT NULL,\\\\n  \\\\\\\"sort_order\\\\\\\" INTEGER DEFAULT 0,\\\\n  \\\\\\\"tenant_id\\\\\\\" UUID NOT NULL,\\\\n  \\\\\\\"author_user_id\\\\\\\" UUID NOT NULL,\\\\n  \\\\\\\"body\\\\\\\" TEXT NOT NULL,\\\\n  \\\\\\\"mentions\\\\\\\" TEXT\\\\n);\\\",\\\"columns\\\":{\\\"id\\\":{\\\"type\\\":\\\"UUID\\\",\\\"primaryKey\\\":true,\\\"referenceKind\\\":\\\"id\\\",\\\"notNull\\\":true},\\\"slug\\\":{\\\"type\\\":\\\"TEXT\\\",\\\"notNull\\\":true},\\\"context\\\":{\\\"type\\\":\\\"TEXT\\\",\\\"notNull\\\":true,\\\"default\\\":\\\"\\\"},\\\"created_at\\\":{\\\"type\\\":\\\"TIMESTAMP\\\",\\\"notNull\\\":true,\\\"default\\\":\\\"current_timestamp\\\"},\\\"updated_at\\\":{\\\"type\\\":\\\"TIMESTAMP\\\",\\\"notNull\\\":true,\\\"default\\\":\\\"current_timestamp\\\"},\\\"meta_type\\\":{\\\"type\\\":\\\"TEXT\\\",\\\"notNull\\\":true,\\\"unique\\\":false},\\\"meta_id\\\":{\\\"type\\\":\\\"TEXT\\\",\\\"notNull\\\":true,\\\"unique\\\":false},\\\"role\\\":{\\\"type\\\":\\\"TEXT\\\",\\\"notNull\\\":true,\\\"unique\\\":false},\\\"sort_order\\\":{\\\"type\\\":\\\"INTEGER\\\",\\\"notNull\\\":false,\\\"unique\\\":false,\\\"default\\\":0},\\\"tenant_id\\\":{\\\"type\\\":\\\"UUID\\\",\\\"referenceKind\\\":\\\"tenantId\\\",\\\"notNull\\\":true,\\\"unique\\\":false},\\\"author_user_id\\\":{\\\"type\\\":\\\"UUID\\\",\\\"referenceKind\\\":\\\"crossPackageRef\\\",\\\"notNull\\\":true,\\\"unique\\\":false},\\\"body\\\":{\\\"type\\\":\\\"TEXT\\\",\\\"notNull\\\":true,\\\"unique\\\":false},\\\"mentions\\\":{\\\"type\\\":\\\"TEXT\\\",\\\"notNull\\\":false,\\\"unique\\\":false}},\\\"indexes\\\":[{\\\"name\\\":\\\"record_comments_slug_context_idx\\\",\\\"columns\\\":[\\\"tenant_id\\\",\\\"slug\\\",\\\"context\\\"],\\\"unique\\\":true},{\\\"name\\\":\\\"record_comments_record_created_idx\\\",\\\"columns\\\":[\\\"tenant_id\\\",\\\"meta_type\\\",\\\"meta_id\\\",\\\"created_at\\\"]},{\\\"name\\\":\\\"record_comments_tenant_id_created_at_idx\\\",\\\"columns\\\":[\\\"tenant_id\\\",\\\"created_at\\\"]},{\\\"name\\\":\\\"record_comments_meta_type_meta_id_idx\\\",\\\"columns\\\":[\\\"meta_type\\\",\\\"meta_id\\\"]},{\\\"name\\\":\\\"record_comments_author_user_id_idx\\\",\\\"columns\\\":[\\\"author_user_id\\\"]}],\\\"version\\\":\\\"78644ad4\\\"},\\\"importPath\\\":\\\"@happyvertical/smrt-comments\\\"}},\\\"moduleType\\\":\\\"smrt\\\",\\\"recipes\\\":[{\\\"id\\\":\\\"comments.records\\\",\\\"className\\\":\\\"RecordCommentsRecipe\\\",\\\"label\\\":\\\"Record comments\\\",\\\"summary\\\":\\\"Discuss work directly on the records it concerns.\\\",\\\"synonyms\\\":[\\\"comments\\\",\\\"mentions\\\",\\\"discussion\\\"],\\\"models\\\":[\\\"@happyvertical/smrt-comments:Comment\\\"],\\\"nav\\\":[],\\\"requires\\\":[],\\\"group\\\":{\\\"id\\\":\\\"comments\\\",\\\"label\\\":\\\"Comments\\\",\\\"summary\\\":\\\"Keep discussions alongside the records your team works on.\\\"},\\\"help\\\":{\\\"markdown\\\":\\\"## Overview\\\\n\\\\nRecord comments keep a discussion next to the work it concerns. Open a record\\\\nyou can access to read its discussion or add a comment. Comments are part of\\\\nthe record page, rather than a separate list of every discussion.\\\\n\\\\n## Tasks\\\\n\\\\n### Add a comment\\\\n\\\\nOpen the record, find Comments, write your message and choose Post comment.\\\\nYour app controls who can read the record and who can contribute to its discussion.\\\\n\\\\n### Mention someone\\\\n\\\\nIf your app provides mention selection, choose a teammate who can access the\\\\nrecord. When mention notifications are connected, that person receives a\\\\nnotification. Typing a name alone does not select a recipient.\\\\n\\\\n### Check a failed post\\\\n\\\\nIf posting reports an error, refresh the discussion before trying again. A\\\\ncomment may have been saved even when its mention notification could not be\\\\ndelivered. If it appears in the discussion, do not post it a second time.\\\\n\\\",\\\"fieldRefs\\\":[]},\\\"surfaces\\\":[{\\\"kind\\\":\\\"playground\\\",\\\"export\\\":\\\"@happyvertical/smrt-comments/svelte#RecordCommentsPlayground\\\",\\\"label\\\":\\\"Record discussion preview\\\"}],\\\"runtime\\\":\\\"both\\\",\\\"demoSeed\\\":{\\\"export\\\":\\\"@happyvertical/smrt-comments/svelte#recordCommentsDemo\\\"},\\\"demo\\\":{\\\"mode\\\":\\\"server\\\",\\\"reasons\\\":[\\\"Needs a server because its package depends on @happyvertical/smrt-tenancy, which do not build for a browser (#3624).\\\"]}}],\\\"smrtDependencies\\\":[\\\"@happyvertical/smrt-core\\\",\\\"@happyvertical/smrt-messages\\\",\\\"@happyvertical/smrt-tenancy\\\"],\\\"browser\\\":{\\\"status\\\":\\\"server-only\\\",\\\"issues\\\":[\\\"#3624\\\"],\\\"via\\\":[\\\"@happyvertical/smrt-tenancy\\\"]},\\\"stampsConstructors\\\":true}\"));\n","import {\n  crossPackageRef,\n  field,\n  SmrtPolymorphicAssociation,\n  smrt,\n} from '@happyvertical/smrt-core';\nimport { TenantScoped, tenantId } from '@happyvertical/smrt-tenancy';\nimport type { CommentOptions } from '../types.js';\n\nconst MAX_MENTIONS = 50;\nconst UUID = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;\n\n@TenantScoped({ mode: 'required' })\n@smrt({\n  tableName: 'record_comments',\n  api: false,\n  mcp: false,\n  cli: false,\n  indexes: [\n    {\n      name: 'record_comments_record_created_idx',\n      columns: ['tenantId', 'metaType', 'metaId', 'createdAt'],\n    },\n  ],\n})\nexport class Comment extends SmrtPolymorphicAssociation { static __smrtPackage__ = \"@happyvertical/smrt-comments\";\n  @tenantId()\n  tenantId = '';\n\n  @crossPackageRef('@happyvertical/smrt-users:User', { required: true })\n  authorUserId = '';\n\n  @field({ required: true })\n  body = '';\n\n  /** JSON array of referenced User UUIDs; use mentionUserIds for validation. */\n  mentions = '[]';\n\n  constructor(options: CommentOptions = {}) {\n    super(options);\n    if (options.tenantId !== undefined) this.tenantId = options.tenantId;\n    if (options.authorUserId !== undefined)\n      this.authorUserId = options.authorUserId;\n    if (options.body !== undefined) this.body = options.body;\n    const mentions = options.mentions as unknown;\n    if (Array.isArray(mentions)) this.mentionUserIds = mentions;\n    else if (typeof mentions === 'string') this.mentions = mentions;\n  }\n\n  get mentionUserIds(): string[] {\n    try {\n      const parsed: unknown = JSON.parse(this.mentions);\n      return Array.isArray(parsed) &&\n        parsed.every((value) => typeof value === 'string')\n        ? parsed\n        : [];\n    } catch {\n      return [];\n    }\n  }\n\n  set mentionUserIds(value: readonly string[]) {\n    const unique = [...new Set(value.map((id) => id.trim()).filter(Boolean))];\n    if (unique.length > MAX_MENTIONS || unique.some((id) => !UUID.test(id))) {\n      throw new TypeError(\n        'Comment mentions must contain at most 50 user UUIDs.',\n      );\n    }\n    this.mentions = JSON.stringify(unique);\n  }\n}\n","import { SmrtCollection } from '@happyvertical/smrt-core';\nimport {\n  getCurrentTenant,\n  TenantIsolationError,\n} from '@happyvertical/smrt-tenancy';\nimport { Comment } from '../models/Comment.js';\n\nexport class CommentCollection extends SmrtCollection<Comment> {\n  static readonly _itemClass = Comment;\n\n  async listForRecord(\n    recordType: string,\n    recordId: string,\n  ): Promise<Comment[]> {\n    const tenantId = getCurrentTenant()?.tenantId;\n    if (!tenantId) {\n      throw new TenantIsolationError(\n        'Record comments require a tenant context.',\n      );\n    }\n    return this.list({\n      where: { tenantId, metaType: recordType, metaId: recordId },\n      orderBy: ['createdAt ASC'],\n    });\n  }\n}\n","import { SmrtRecipe } from '@happyvertical/smrt-core';\nimport { Comment } from './models/Comment.js';\n\n/** Discussion attached to any authorized business record. */\nexport class RecordCommentsRecipe extends SmrtRecipe {\n  static id = 'comments.records';\n  static label = 'Record comments';\n  static summary = 'Discuss work directly on the records it concerns.';\n  static synonyms = ['comments', 'mentions', 'discussion'];\n  static group = {\n    id: 'comments',\n    label: 'Comments',\n    summary: 'Keep discussions alongside the records your team works on.',\n  };\n  static models = [Comment];\n  // Record discussions need an authorized parent record, not a global list.\n  static nav = [];\n  static runtime = 'both' as const;\n  static surfaces = [\n    {\n      kind: 'playground',\n      export: '@happyvertical/smrt-comments/svelte#RecordCommentsPlayground',\n      label: 'Record discussion preview',\n    },\n  ] as const;\n  static demoSeed = {\n    export: '@happyvertical/smrt-comments/svelte#recordCommentsDemo',\n  } as const;\n  static help = './comments.records.recipe.md';\n}\n","import type { SmrtClassOptions } from '@happyvertical/smrt-core';\nimport { withTenant } from '@happyvertical/smrt-tenancy';\nimport { CommentCollection } from '../collections/CommentCollection.js';\nimport { Comment } from '../models/Comment.js';\nimport type {\n  CommentActorContext,\n  CommentMentionNotificationAdapter,\n  CommentRecordAccess,\n  CreateCommentInput,\n} from '../types.js';\n\nexport class CommentService {\n  constructor(\n    private readonly options: {\n      db: SmrtClassOptions['db'];\n      actor: CommentActorContext;\n      authorizeRecord: (access: CommentRecordAccess) => Promise<boolean>;\n      mentionNotifications?: CommentMentionNotificationAdapter;\n    },\n  ) {}\n\n  private async authorize(\n    recordType: string,\n    recordId: string,\n    action: 'read' | 'comment',\n  ) {\n    const { actor } = this.options;\n    if (\n      !actor.tenantId ||\n      !actor.userId ||\n      !recordType ||\n      !recordId ||\n      !(await this.options.authorizeRecord({\n        ...actor,\n        recordType,\n        recordId,\n        action,\n      }))\n    ) {\n      throw new Error('Comment record access denied.');\n    }\n  }\n\n  async listForRecord(\n    recordType: string,\n    recordId: string,\n  ): Promise<Comment[]> {\n    await this.authorize(recordType, recordId, 'read');\n    return withTenant({ tenantId: this.options.actor.tenantId }, async () =>\n      (await CommentCollection.create({ db: this.options.db })).listForRecord(\n        recordType,\n        recordId,\n      ),\n    );\n  }\n\n  async create(commentOptions: CreateCommentInput): Promise<Comment> {\n    const { tenantId, authorUserId, metaType, metaId, body, mentions } =\n      commentOptions;\n    if (!tenantId || !authorUserId) {\n      throw new TypeError('Comments require a tenant and author.');\n    }\n    if (\n      tenantId !== this.options.actor.tenantId ||\n      authorUserId !== this.options.actor.userId\n    ) {\n      throw new Error('Comment actor context mismatch.');\n    }\n    await this.authorize(metaType ?? '', metaId ?? '', 'comment');\n    if (!body?.trim()) throw new TypeError('Comment body is required.');\n    // Validate through the model's public setter before collection.create()\n    // persists. Supply its normalized JSON in that single insert.\n    const prepared = new Comment();\n    if (mentions !== undefined) prepared.mentionUserIds = mentions;\n    const id = crypto.randomUUID();\n    const comment = await withTenant({ tenantId }, async () => {\n      return (await CommentCollection.create({ db: this.options.db })).create({\n        tenantId,\n        authorUserId,\n        metaType,\n        metaId,\n        body,\n        id,\n        slug: id,\n        context: '',\n        _insertOnly: true,\n        mentions: prepared.mentions,\n      });\n    });\n    if (!this.options.mentionNotifications || !comment.id) return comment;\n    for (const recipientUserId of comment.mentionUserIds) {\n      if (recipientUserId === comment.authorUserId) continue;\n      await this.options.mentionNotifications.notifyMention({\n        commentId: comment.id,\n        tenantId: comment.tenantId,\n        authorUserId: comment.authorUserId,\n        recipientUserId,\n        recordType: comment.metaType,\n        recordId: comment.metaId,\n        body: comment.body,\n      });\n    }\n    return comment;\n  }\n}\n","import type {\n  CommentMention,\n  CommentMentionNotificationAdapter,\n} from '../types.js';\n\n/** Structural subset implemented by smrt-messages UserNotificationService. */\nexport interface CommentNotificationService {\n  notify(input: {\n    tenantId: string;\n    recipientUserId: string;\n    kind: string;\n    title: string;\n    body: string;\n    sourceRef: string;\n  }): Promise<unknown>;\n}\n\n/** Hosts must check recipient membership AND access to the referenced record. */\nexport function createCommentMentionNotifications(options: {\n  notifications: CommentNotificationService;\n  canNotify: (mention: CommentMention) => Promise<boolean>;\n}): CommentMentionNotificationAdapter {\n  return {\n    async notifyMention(mention) {\n      if (!(await options.canNotify(mention))) return;\n      await options.notifications.notify({\n        tenantId: mention.tenantId,\n        recipientUserId: mention.recipientUserId,\n        kind: 'comments.mention',\n        title: 'You were mentioned in a comment',\n        body: mention.body,\n        sourceRef: `comments.mention:${mention.commentId}`,\n      });\n    },\n  };\n}\n"],"mappings":";;;AAOA,eAAe,wBAAwB,KAAK,MAAM,grRAAwqT,CAAC;;;;;;;;;;;;;;;;;;ACE3tT,IAAM,eAAe;AACrB,IAAM,OAAO;AAeN,IAAM,UAAN,cAAsB,2BAA2B;CAEtD,WAAW;CAGX,eAAe;CAGf,OAAO;;CAGP,WAAW;CAEX,YAAY,UAA0B,CAAC,GAAG;EACxC,MAAM,OAAO;EACb,IAAI,QAAQ,aAAa,KAAA,GAAW,KAAK,WAAW,QAAQ;EAC5D,IAAI,QAAQ,iBAAiB,KAAA,GAC3B,KAAK,eAAe,QAAQ;EAC9B,IAAI,QAAQ,SAAS,KAAA,GAAW,KAAK,OAAO,QAAQ;EACpD,MAAM,WAAW,QAAQ;EACzB,IAAI,MAAM,QAAQ,QAAQ,GAAG,KAAK,iBAAiB;OAAA,IAC1C,OAAO,aAAa,UAAU,KAAK,WAAW;CACzD;CAEA,IAAI,iBAA2B;EAC7B,IAAI;GACF,MAAM,SAAkB,KAAK,MAAM,KAAK,QAAQ;GAChD,OAAO,MAAM,QAAQ,MAAM,KACzB,OAAO,OAAO,UAAU,OAAO,UAAU,QAAQ,IAC/C,SACA,CAAC;EACP,QAAQ;GACN,OAAO,CAAC;EACV;CACF;CAEA,IAAI,eAAe,OAA0B;EAC3C,MAAM,SAAS,CAAC,GAAG,IAAI,IAAI,MAAM,KAAK,OAAO,GAAG,KAAK,CAAC,CAAA,CAAE,OAAO,OAAO,CAAC,CAAC;EACxE,IAAI,OAAO,SAAS,gBAAgB,OAAO,MAAM,OAAO,CAAC,KAAK,KAAK,EAAE,CAAC,GACpE,MAAM,IAAI,UACR,sDACF;EAEF,KAAK,WAAW,KAAK,UAAU,MAAM;CACvC;AACF;AA7C0D,cAA7C,SAAoD,mBAAkB,8BAAA;AAEjF,gBAAA,CADC,SAAS,CAAA,GADC,QAEX,WAAA,YAAA,CAAA;AAGA,gBAAA,CADC,gBAAgB,kCAAkC,EAAE,UAAU,KAAK,CAAC,CAAA,GAJ1D,QAKX,WAAA,gBAAA,CAAA;AAGA,gBAAA,CADC,MAAM,EAAE,UAAU,KAAK,CAAC,CAAA,GAPd,QAQX,WAAA,QAAA,CAAA;AARW,UAAN,gBAAA,CAbN,aAAa,EAAE,MAAM,WAAW,CAAC,GACjC,KAAK;CACJ,WAAW;CACX,KAAK;CACL,KAAK;CACL,KAAK;CACL,SAAS,CACP;EACE,MAAM;EACN,SAAS;GAAC;GAAY;GAAY;GAAU;EAAW;CACzD,CACF;AACF,CAAC,CAAA,GACY,OAAA;;;AClBN,IAAM,oBAAN,cAAgC,eAAwB;CAC7D,OAAgB,aAAa;CAE7B,MAAM,cACJ,YACA,UACoB;EACpB,MAAM,WAAW,iBAAiB,CAAA,EAAG;EACrC,IAAI,CAAC,UACH,MAAM,IAAI,qBACR,2CACF;EAEF,OAAO,KAAK,KAAK;GACf,OAAO;IAAE;IAAU,UAAU;IAAY,QAAQ;GAAS;GAC1D,SAAS,CAAC,eAAe;EAC3B,CAAC;CACH;AACF;;;ACrBO,IAAM,uBAAN,cAAmC,WAAW;CACnD,OAAO,KAAK;CACZ,OAAO,QAAQ;CACf,OAAO,UAAU;CACjB,OAAO,WAAW;EAAC;EAAY;EAAY;CAAY;CACvD,OAAO,QAAQ;EACb,IAAI;EACJ,OAAO;EACP,SAAS;CACX;CACA,OAAO,SAAS,CAAC,OAAO;CAExB,OAAO,MAAM,CAAC;CACd,OAAO,UAAU;CACjB,OAAO,WAAW,CAChB;EACE,MAAM;EACN,QAAQ;EACR,OAAO;CACT,CACF;CACA,OAAO,WAAW,EAChB,QAAQ,yDACV;CACA,OAAO,OAAO;AAChB;;;AClBO,IAAM,iBAAN,MAAqB;CAC1B,YACmB,SAMjB;EANiB,KAAA,UAAA;CAMhB;CANgB;CAQnB,MAAc,UACZ,YACA,UACA,QACA;EACA,MAAM,EAAE,UAAU,KAAK;EACvB,IACE,CAAC,MAAM,YACP,CAAC,MAAM,UACP,CAAC,cACD,CAAC,YACD,CAAE,MAAM,KAAK,QAAQ,gBAAgB;GACnC,GAAG;GACH;GACA;GACA;EACF,CAAC,GAED,MAAM,IAAI,MAAM,+BAA+B;CAEnD;CAEA,MAAM,cACJ,YACA,UACoB;EACpB,MAAM,KAAK,UAAU,YAAY,UAAU,MAAM;EACjD,OAAO,WAAW,EAAE,UAAU,KAAK,QAAQ,MAAM,SAAS,GAAG,aAC1D,MAAM,kBAAkB,OAAO,EAAE,IAAI,KAAK,QAAQ,GAAG,CAAC,EAAA,CAAG,cACxD,YACA,QACF,CACF;CACF;CAEA,MAAM,OAAO,gBAAsD;EACjE,MAAM,EAAE,UAAU,cAAc,UAAU,QAAQ,MAAM,aACtD;EACF,IAAI,CAAC,YAAY,CAAC,cAChB,MAAM,IAAI,UAAU,uCAAuC;EAE7D,IACE,aAAa,KAAK,QAAQ,MAAM,YAChC,iBAAiB,KAAK,QAAQ,MAAM,QAEpC,MAAM,IAAI,MAAM,iCAAiC;EAEnD,MAAM,KAAK,UAAU,YAAY,IAAI,UAAU,IAAI,SAAS;EAC5D,IAAI,CAAC,MAAM,KAAK,GAAG,MAAM,IAAI,UAAU,2BAA2B;EAGlE,MAAM,WAAW,IAAI,QAAQ;EAC7B,IAAI,aAAa,KAAA,GAAW,SAAS,iBAAiB;EACtD,MAAM,KAAK,OAAO,WAAW;EAC7B,MAAM,UAAU,MAAM,WAAW,EAAE,SAAS,GAAG,YAAY;GACzD,QAAQ,MAAM,kBAAkB,OAAO,EAAE,IAAI,KAAK,QAAQ,GAAG,CAAC,EAAA,CAAG,OAAO;IACtE;IACA;IACA;IACA;IACA;IACA;IACA,MAAM;IACN,SAAS;IACT,aAAa;IACb,UAAU,SAAS;GACrB,CAAC;EACH,CAAC;EACD,IAAI,CAAC,KAAK,QAAQ,wBAAwB,CAAC,QAAQ,IAAI,OAAO;EAC9D,KAAA,MAAW,mBAAmB,QAAQ,gBAAgB;GACpD,IAAI,oBAAoB,QAAQ,cAAc;GAC9C,MAAM,KAAK,QAAQ,qBAAqB,cAAc;IACpD,WAAW,QAAQ;IACnB,UAAU,QAAQ;IAClB,cAAc,QAAQ;IACtB;IACA,YAAY,QAAQ;IACpB,UAAU,QAAQ;IAClB,MAAM,QAAQ;GAChB,CAAC;EACH;EACA,OAAO;CACT;AACF;;;ACtFO,SAAS,kCAAkC,SAGZ;CACpC,OAAO,EACL,MAAM,cAAc,SAAS;EAC3B,IAAI,CAAE,MAAM,QAAQ,UAAU,OAAO,GAAI;EACzC,MAAM,QAAQ,cAAc,OAAO;GACjC,UAAU,QAAQ;GAClB,iBAAiB,QAAQ;GACzB,MAAM;GACN,OAAO;GACP,MAAM,QAAQ;GACd,WAAW,oBAAoB,QAAQ;EACzC,CAAC;CACH,EACF;AACF"}
+{"version":3,"file":"index.js","names":["row"],"sources":["../src/__smrt-register__.ts","../src/models/Comment.ts","../src/collections/CommentCollection.ts","../src/recipes.ts","../src/services/CommentService.ts","../src/services/mentionNotifications.ts"],"sourcesContent":["// Generated by @happyvertical/smrt-core smrtPlugin at library build time.\n// The package manifest is inlined so self-registration cannot miss when a\n// downstream bundler relocates this module away from dist/manifest.json\n// (https://github.com/happyvertical/smrt/issues/1506,\n//  https://github.com/happyvertical/smrt/issues/1507).\nimport { ObjectRegistry } from '@happyvertical/smrt-core';\n\nObjectRegistry.registerPackageManifest(JSON.parse(\"{\\\"version\\\":\\\"1.0.0\\\",\\\"timestamp\\\":0,\\\"packageName\\\":\\\"@happyvertical/smrt-comments\\\",\\\"packageVersion\\\":\\\"0.56.0\\\",\\\"objects\\\":{\\\"@happyvertical/smrt-comments:CommentCollection\\\":{\\\"name\\\":\\\"commentcollection\\\",\\\"className\\\":\\\"CommentCollection\\\",\\\"qualifiedName\\\":\\\"@happyvertical/smrt-comments:CommentCollection\\\",\\\"collection\\\":\\\"comments\\\",\\\"filePath\\\":\\\"/home/runner/work/smrt/smrt/packages/comments/src/collections/CommentCollection.ts\\\",\\\"packageName\\\":\\\"@happyvertical/smrt-comments\\\",\\\"fields\\\":{},\\\"methods\\\":{\\\"listForRecord\\\":{\\\"name\\\":\\\"listForRecord\\\",\\\"async\\\":true,\\\"parameters\\\":[{\\\"name\\\":\\\"recordType\\\",\\\"type\\\":\\\"string\\\",\\\"optional\\\":false},{\\\"name\\\":\\\"recordId\\\",\\\"type\\\":\\\"string\\\",\\\"optional\\\":false}],\\\"returnType\\\":\\\"Promise<Comment[]>\\\",\\\"isStatic\\\":false,\\\"isPublic\\\":true}},\\\"decoratorConfig\\\":{\\\"tableName\\\":\\\"record_comments\\\",\\\"api\\\":false,\\\"mcp\\\":false,\\\"cli\\\":false},\\\"extends\\\":\\\"SmrtCollection\\\",\\\"extendsTypeArg\\\":\\\"Comment\\\",\\\"exportName\\\":\\\"CommentCollection\\\",\\\"collectionExportName\\\":\\\"CommentCollectionCollection\\\",\\\"schema\\\":{\\\"tableName\\\":\\\"record_comments\\\",\\\"ddl\\\":\\\"CREATE TABLE IF NOT EXISTS \\\\\\\"record_comments\\\\\\\" (\\\\n  \\\\\\\"id\\\\\\\" UUID PRIMARY KEY NOT NULL,\\\\n  \\\\\\\"slug\\\\\\\" TEXT NOT NULL,\\\\n  \\\\\\\"context\\\\\\\" TEXT NOT NULL DEFAULT '',\\\\n  \\\\\\\"created_at\\\\\\\" TIMESTAMP NOT NULL DEFAULT current_timestamp,\\\\n  \\\\\\\"updated_at\\\\\\\" TIMESTAMP NOT NULL DEFAULT current_timestamp,\\\\n  \\\\\\\"meta_type\\\\\\\" TEXT NOT NULL,\\\\n  \\\\\\\"meta_id\\\\\\\" TEXT NOT NULL,\\\\n  \\\\\\\"role\\\\\\\" TEXT NOT NULL,\\\\n  \\\\\\\"sort_order\\\\\\\" INTEGER DEFAULT 0,\\\\n  \\\\\\\"tenant_id\\\\\\\" UUID NOT NULL,\\\\n  \\\\\\\"author_user_id\\\\\\\" UUID NOT NULL,\\\\n  \\\\\\\"body\\\\\\\" TEXT NOT NULL,\\\\n  \\\\\\\"mentions\\\\\\\" TEXT,\\\\n  \\\\\\\"idempotency_key\\\\\\\" TEXT,\\\\n  \\\\\\\"retry_tenant_id\\\\\\\" TEXT,\\\\n  \\\\\\\"request_digest\\\\\\\" TEXT\\\\n);\\\",\\\"columns\\\":{\\\"id\\\":{\\\"type\\\":\\\"UUID\\\",\\\"primaryKey\\\":true,\\\"referenceKind\\\":\\\"id\\\",\\\"notNull\\\":true},\\\"slug\\\":{\\\"type\\\":\\\"TEXT\\\",\\\"notNull\\\":true},\\\"context\\\":{\\\"type\\\":\\\"TEXT\\\",\\\"notNull\\\":true,\\\"default\\\":\\\"\\\"},\\\"created_at\\\":{\\\"type\\\":\\\"TIMESTAMP\\\",\\\"notNull\\\":true,\\\"default\\\":\\\"current_timestamp\\\"},\\\"updated_at\\\":{\\\"type\\\":\\\"TIMESTAMP\\\",\\\"notNull\\\":true,\\\"default\\\":\\\"current_timestamp\\\"},\\\"meta_type\\\":{\\\"type\\\":\\\"TEXT\\\",\\\"notNull\\\":true,\\\"unique\\\":false},\\\"meta_id\\\":{\\\"type\\\":\\\"TEXT\\\",\\\"notNull\\\":true,\\\"unique\\\":false},\\\"role\\\":{\\\"type\\\":\\\"TEXT\\\",\\\"notNull\\\":true,\\\"unique\\\":false},\\\"sort_order\\\":{\\\"type\\\":\\\"INTEGER\\\",\\\"notNull\\\":false,\\\"unique\\\":false,\\\"default\\\":0},\\\"tenant_id\\\":{\\\"type\\\":\\\"UUID\\\",\\\"referenceKind\\\":\\\"tenantId\\\",\\\"notNull\\\":true,\\\"unique\\\":false},\\\"author_user_id\\\":{\\\"type\\\":\\\"UUID\\\",\\\"referenceKind\\\":\\\"crossPackageRef\\\",\\\"notNull\\\":true,\\\"unique\\\":false},\\\"body\\\":{\\\"type\\\":\\\"TEXT\\\",\\\"notNull\\\":true,\\\"unique\\\":false},\\\"mentions\\\":{\\\"type\\\":\\\"TEXT\\\",\\\"notNull\\\":false,\\\"unique\\\":false},\\\"idempotency_key\\\":{\\\"type\\\":\\\"TEXT\\\",\\\"notNull\\\":false,\\\"unique\\\":false},\\\"retry_tenant_id\\\":{\\\"type\\\":\\\"TEXT\\\",\\\"notNull\\\":false,\\\"unique\\\":false},\\\"request_digest\\\":{\\\"type\\\":\\\"TEXT\\\",\\\"notNull\\\":false,\\\"unique\\\":false}},\\\"indexes\\\":[{\\\"name\\\":\\\"record_comments_slug_context_idx\\\",\\\"columns\\\":[\\\"tenant_id\\\",\\\"slug\\\",\\\"context\\\"],\\\"unique\\\":true},{\\\"name\\\":\\\"record_comments_tenant_request_key\\\",\\\"columns\\\":[\\\"retry_tenant_id\\\",\\\"idempotency_key\\\"],\\\"unique\\\":true},{\\\"name\\\":\\\"record_comments_record_created_idx\\\",\\\"columns\\\":[\\\"tenant_id\\\",\\\"meta_type\\\",\\\"meta_id\\\",\\\"created_at\\\"]},{\\\"name\\\":\\\"record_comments_tenant_id_created_at_idx\\\",\\\"columns\\\":[\\\"tenant_id\\\",\\\"created_at\\\"]},{\\\"name\\\":\\\"record_comments_meta_type_meta_id_idx\\\",\\\"columns\\\":[\\\"meta_type\\\",\\\"meta_id\\\"]},{\\\"name\\\":\\\"record_comments_author_user_id_idx\\\",\\\"columns\\\":[\\\"author_user_id\\\"]}],\\\"version\\\":\\\"5095dfc9\\\"},\\\"importPath\\\":\\\"@happyvertical/smrt-comments\\\"},\\\"@happyvertical/smrt-comments:Comment\\\":{\\\"name\\\":\\\"comment\\\",\\\"className\\\":\\\"Comment\\\",\\\"qualifiedName\\\":\\\"@happyvertical/smrt-comments:Comment\\\",\\\"collection\\\":\\\"comments\\\",\\\"filePath\\\":\\\"/home/runner/work/smrt/smrt/packages/comments/src/models/Comment.ts\\\",\\\"packageName\\\":\\\"@happyvertical/smrt-comments\\\",\\\"fields\\\":{\\\"metaType\\\":{\\\"type\\\":\\\"text\\\",\\\"required\\\":true,\\\"_meta\\\":{\\\"required\\\":true}},\\\"metaId\\\":{\\\"type\\\":\\\"text\\\",\\\"required\\\":true,\\\"_meta\\\":{\\\"required\\\":true}},\\\"role\\\":{\\\"type\\\":\\\"text\\\",\\\"required\\\":true,\\\"_meta\\\":{\\\"required\\\":true}},\\\"sortOrder\\\":{\\\"type\\\":\\\"integer\\\",\\\"required\\\":false,\\\"default\\\":0},\\\"tenantId\\\":{\\\"type\\\":\\\"text\\\",\\\"required\\\":true,\\\"_meta\\\":{\\\"sqlType\\\":\\\"UUID\\\",\\\"__tenancy\\\":{\\\"isTenantIdField\\\":true,\\\"autoFilter\\\":true,\\\"required\\\":true,\\\"autoPopulate\\\":true,\\\"nullable\\\":false,\\\"mode\\\":\\\"required\\\",\\\"field\\\":\\\"tenantId\\\",\\\"allowSuperAdminBypass\\\":false}}},\\\"authorUserId\\\":{\\\"type\\\":\\\"crossPackageRef\\\",\\\"required\\\":true,\\\"related\\\":\\\"@happyvertical/smrt-users:User\\\"},\\\"body\\\":{\\\"type\\\":\\\"text\\\",\\\"required\\\":true,\\\"_meta\\\":{\\\"required\\\":true}},\\\"mentions\\\":{\\\"type\\\":\\\"text\\\",\\\"required\\\":false},\\\"idempotencyKey\\\":{\\\"type\\\":\\\"text\\\",\\\"required\\\":false,\\\"_meta\\\":{\\\"nullable\\\":true,\\\"readonly\\\":true},\\\"readonly\\\":true},\\\"retryTenantId\\\":{\\\"type\\\":\\\"text\\\",\\\"required\\\":false,\\\"_meta\\\":{\\\"nullable\\\":true,\\\"readonly\\\":true},\\\"readonly\\\":true},\\\"requestDigest\\\":{\\\"type\\\":\\\"text\\\",\\\"required\\\":false,\\\"_meta\\\":{\\\"nullable\\\":true,\\\"readonly\\\":true},\\\"readonly\\\":true}},\\\"methods\\\":{\\\"hydrate\\\":{\\\"name\\\":\\\"hydrate\\\",\\\"async\\\":true,\\\"parameters\\\":[],\\\"returnType\\\":\\\"Promise<T | null>\\\",\\\"isStatic\\\":false,\\\"isPublic\\\":true}},\\\"decoratorConfig\\\":{\\\"tableName\\\":\\\"record_comments\\\",\\\"api\\\":false,\\\"mcp\\\":false,\\\"cli\\\":false,\\\"indexes\\\":[{\\\"name\\\":\\\"record_comments_tenant_request_key\\\",\\\"columns\\\":[\\\"retryTenantId\\\",\\\"idempotencyKey\\\"],\\\"unique\\\":true},{\\\"name\\\":\\\"record_comments_record_created_idx\\\",\\\"columns\\\":[\\\"tenantId\\\",\\\"metaType\\\",\\\"metaId\\\",\\\"createdAt\\\"]}],\\\"tenantScoped\\\":{\\\"mode\\\":\\\"required\\\"},\\\"conflictColumns\\\":[\\\"tenant_id\\\",\\\"slug\\\",\\\"context\\\"]},\\\"extends\\\":\\\"SmrtPolymorphicAssociation\\\",\\\"exportName\\\":\\\"Comment\\\",\\\"collectionExportName\\\":\\\"CommentCollection\\\",\\\"validationRules\\\":[{\\\"field\\\":\\\"metaType\\\",\\\"rule\\\":\\\"required\\\",\\\"fieldType\\\":\\\"text\\\"},{\\\"field\\\":\\\"metaId\\\",\\\"rule\\\":\\\"required\\\",\\\"fieldType\\\":\\\"text\\\"},{\\\"field\\\":\\\"role\\\",\\\"rule\\\":\\\"required\\\",\\\"fieldType\\\":\\\"text\\\"},{\\\"field\\\":\\\"authorUserId\\\",\\\"rule\\\":\\\"required\\\",\\\"fieldType\\\":\\\"crossPackageRef\\\"},{\\\"field\\\":\\\"body\\\",\\\"rule\\\":\\\"required\\\",\\\"fieldType\\\":\\\"text\\\"}],\\\"schema\\\":{\\\"tableName\\\":\\\"record_comments\\\",\\\"ddl\\\":\\\"CREATE TABLE IF NOT EXISTS \\\\\\\"record_comments\\\\\\\" (\\\\n  \\\\\\\"id\\\\\\\" UUID PRIMARY KEY NOT NULL,\\\\n  \\\\\\\"slug\\\\\\\" TEXT NOT NULL,\\\\n  \\\\\\\"context\\\\\\\" TEXT NOT NULL DEFAULT '',\\\\n  \\\\\\\"created_at\\\\\\\" TIMESTAMP NOT NULL DEFAULT current_timestamp,\\\\n  \\\\\\\"updated_at\\\\\\\" TIMESTAMP NOT NULL DEFAULT current_timestamp,\\\\n  \\\\\\\"meta_type\\\\\\\" TEXT NOT NULL,\\\\n  \\\\\\\"meta_id\\\\\\\" TEXT NOT NULL,\\\\n  \\\\\\\"role\\\\\\\" TEXT NOT NULL,\\\\n  \\\\\\\"sort_order\\\\\\\" INTEGER DEFAULT 0,\\\\n  \\\\\\\"tenant_id\\\\\\\" UUID NOT NULL,\\\\n  \\\\\\\"author_user_id\\\\\\\" UUID NOT NULL,\\\\n  \\\\\\\"body\\\\\\\" TEXT NOT NULL,\\\\n  \\\\\\\"mentions\\\\\\\" TEXT,\\\\n  \\\\\\\"idempotency_key\\\\\\\" TEXT,\\\\n  \\\\\\\"retry_tenant_id\\\\\\\" TEXT,\\\\n  \\\\\\\"request_digest\\\\\\\" TEXT\\\\n);\\\",\\\"columns\\\":{\\\"id\\\":{\\\"type\\\":\\\"UUID\\\",\\\"primaryKey\\\":true,\\\"referenceKind\\\":\\\"id\\\",\\\"notNull\\\":true},\\\"slug\\\":{\\\"type\\\":\\\"TEXT\\\",\\\"notNull\\\":true},\\\"context\\\":{\\\"type\\\":\\\"TEXT\\\",\\\"notNull\\\":true,\\\"default\\\":\\\"\\\"},\\\"created_at\\\":{\\\"type\\\":\\\"TIMESTAMP\\\",\\\"notNull\\\":true,\\\"default\\\":\\\"current_timestamp\\\"},\\\"updated_at\\\":{\\\"type\\\":\\\"TIMESTAMP\\\",\\\"notNull\\\":true,\\\"default\\\":\\\"current_timestamp\\\"},\\\"meta_type\\\":{\\\"type\\\":\\\"TEXT\\\",\\\"notNull\\\":true,\\\"unique\\\":false},\\\"meta_id\\\":{\\\"type\\\":\\\"TEXT\\\",\\\"notNull\\\":true,\\\"unique\\\":false},\\\"role\\\":{\\\"type\\\":\\\"TEXT\\\",\\\"notNull\\\":true,\\\"unique\\\":false},\\\"sort_order\\\":{\\\"type\\\":\\\"INTEGER\\\",\\\"notNull\\\":false,\\\"unique\\\":false,\\\"default\\\":0},\\\"tenant_id\\\":{\\\"type\\\":\\\"UUID\\\",\\\"referenceKind\\\":\\\"tenantId\\\",\\\"notNull\\\":true,\\\"unique\\\":false},\\\"author_user_id\\\":{\\\"type\\\":\\\"UUID\\\",\\\"referenceKind\\\":\\\"crossPackageRef\\\",\\\"notNull\\\":true,\\\"unique\\\":false},\\\"body\\\":{\\\"type\\\":\\\"TEXT\\\",\\\"notNull\\\":true,\\\"unique\\\":false},\\\"mentions\\\":{\\\"type\\\":\\\"TEXT\\\",\\\"notNull\\\":false,\\\"unique\\\":false},\\\"idempotency_key\\\":{\\\"type\\\":\\\"TEXT\\\",\\\"notNull\\\":false,\\\"unique\\\":false},\\\"retry_tenant_id\\\":{\\\"type\\\":\\\"TEXT\\\",\\\"notNull\\\":false,\\\"unique\\\":false},\\\"request_digest\\\":{\\\"type\\\":\\\"TEXT\\\",\\\"notNull\\\":false,\\\"unique\\\":false}},\\\"indexes\\\":[{\\\"name\\\":\\\"record_comments_slug_context_idx\\\",\\\"columns\\\":[\\\"tenant_id\\\",\\\"slug\\\",\\\"context\\\"],\\\"unique\\\":true},{\\\"name\\\":\\\"record_comments_tenant_request_key\\\",\\\"columns\\\":[\\\"retry_tenant_id\\\",\\\"idempotency_key\\\"],\\\"unique\\\":true},{\\\"name\\\":\\\"record_comments_record_created_idx\\\",\\\"columns\\\":[\\\"tenant_id\\\",\\\"meta_type\\\",\\\"meta_id\\\",\\\"created_at\\\"]},{\\\"name\\\":\\\"record_comments_tenant_id_created_at_idx\\\",\\\"columns\\\":[\\\"tenant_id\\\",\\\"created_at\\\"]},{\\\"name\\\":\\\"record_comments_meta_type_meta_id_idx\\\",\\\"columns\\\":[\\\"meta_type\\\",\\\"meta_id\\\"]},{\\\"name\\\":\\\"record_comments_author_user_id_idx\\\",\\\"columns\\\":[\\\"author_user_id\\\"]}],\\\"version\\\":\\\"5095dfc9\\\"},\\\"importPath\\\":\\\"@happyvertical/smrt-comments\\\"}},\\\"moduleType\\\":\\\"smrt\\\",\\\"recipes\\\":[{\\\"id\\\":\\\"comments.records\\\",\\\"className\\\":\\\"RecordCommentsRecipe\\\",\\\"label\\\":\\\"Record comments\\\",\\\"summary\\\":\\\"Discuss work directly on the records it concerns.\\\",\\\"synonyms\\\":[\\\"comments\\\",\\\"mentions\\\",\\\"discussion\\\"],\\\"models\\\":[\\\"@happyvertical/smrt-comments:Comment\\\"],\\\"nav\\\":[],\\\"requires\\\":[],\\\"group\\\":{\\\"id\\\":\\\"comments\\\",\\\"label\\\":\\\"Comments\\\",\\\"summary\\\":\\\"Keep discussions alongside the records your team works on.\\\"},\\\"help\\\":{\\\"markdown\\\":\\\"## Overview\\\\n\\\\nRecord comments keep a discussion next to the work it concerns. Open a record\\\\nyou can access to read its discussion or add a comment. Comments are part of\\\\nthe record page, rather than a separate list of every discussion.\\\\n\\\\n## Tasks\\\\n\\\\n### Add a comment\\\\n\\\\nOpen the record, find Comments, write your message and choose Post comment.\\\\nYour app controls who can read the record and who can contribute to its discussion.\\\\n\\\\n### Mention someone\\\\n\\\\nIf your app provides mention selection, choose a teammate who can access the\\\\nrecord. When mention notifications are connected, that person receives a\\\\nnotification. Typing a name alone does not select a recipient.\\\\n\\\\n### Check a failed post\\\\n\\\\nIf posting reports an error, refresh the discussion before trying again. A\\\\ncomment may have been saved even when its mention notification could not be\\\\ndelivered. If it appears in the discussion, do not post it a second time.\\\\n\\\",\\\"fieldRefs\\\":[]},\\\"surfaces\\\":[{\\\"kind\\\":\\\"playground\\\",\\\"export\\\":\\\"@happyvertical/smrt-comments/svelte#RecordCommentsPlayground\\\",\\\"label\\\":\\\"Record discussion preview\\\"}],\\\"runtime\\\":\\\"both\\\",\\\"demoSeed\\\":{\\\"export\\\":\\\"@happyvertical/smrt-comments/svelte#recordCommentsDemo\\\"},\\\"demo\\\":{\\\"mode\\\":\\\"server\\\",\\\"reasons\\\":[\\\"Needs a server because its package depends on @happyvertical/smrt-tenancy, which do not build for a browser (#3624).\\\"]}}],\\\"smrtDependencies\\\":[\\\"@happyvertical/smrt-core\\\",\\\"@happyvertical/smrt-messages\\\",\\\"@happyvertical/smrt-tenancy\\\"],\\\"browser\\\":{\\\"status\\\":\\\"server-only\\\",\\\"issues\\\":[\\\"#3624\\\"],\\\"via\\\":[\\\"@happyvertical/smrt-tenancy\\\"]},\\\"stampsConstructors\\\":true}\"));\n","import {\n  crossPackageRef,\n  field,\n  SmrtPolymorphicAssociation,\n  smrt,\n} from '@happyvertical/smrt-core';\nimport { TenantScoped, tenantId } from '@happyvertical/smrt-tenancy';\nimport type { CommentOptions } from '../types.js';\n\nconst MAX_MENTIONS = 50;\nconst UUID = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;\n\n@TenantScoped({ mode: 'required' })\n@smrt({\n  tableName: 'record_comments',\n  api: false,\n  mcp: false,\n  cli: false,\n  indexes: [\n    {\n      name: 'record_comments_tenant_request_key',\n      columns: ['retryTenantId', 'idempotencyKey'],\n      unique: true,\n    },\n    {\n      name: 'record_comments_record_created_idx',\n      columns: ['tenantId', 'metaType', 'metaId', 'createdAt'],\n    },\n  ],\n})\nexport class Comment extends SmrtPolymorphicAssociation { static __smrtPackage__ = \"@happyvertical/smrt-comments\";\n  @tenantId()\n  tenantId = '';\n\n  @crossPackageRef('@happyvertical/smrt-users:User', { required: true })\n  authorUserId = '';\n\n  @field({ required: true })\n  body = '';\n\n  /** JSON array of referenced User UUIDs; use mentionUserIds for validation. */\n  mentions = '[]';\n\n  /** Service-owned binding retained after generic runOnce claim retention. */\n  @field({ type: 'text', nullable: true, readonly: true })\n  idempotencyKey: string | null = null;\n\n  /** Canonical retry namespace; never rewrites stored tenant/user references. */\n  @field({ type: 'text', nullable: true, readonly: true })\n  retryTenantId: string | null = null;\n\n  /** Digest of the original authenticated author, parent and normalized payload. */\n  @field({ type: 'text', nullable: true, readonly: true })\n  requestDigest: string | null = null;\n\n  constructor(options: CommentOptions = {}) {\n    super(options);\n    if (options.tenantId !== undefined) this.tenantId = options.tenantId;\n    if (options.authorUserId !== undefined)\n      this.authorUserId = options.authorUserId;\n    if (options.body !== undefined) this.body = options.body;\n    if (options.idempotencyKey !== undefined)\n      this.idempotencyKey = options.idempotencyKey;\n    if (options.retryTenantId !== undefined)\n      this.retryTenantId = options.retryTenantId;\n    if (options.requestDigest !== undefined)\n      this.requestDigest = options.requestDigest;\n    const mentions = options.mentions as unknown;\n    if (Array.isArray(mentions)) this.mentionUserIds = mentions;\n    else if (typeof mentions === 'string') this.mentions = mentions;\n  }\n\n  get mentionUserIds(): string[] {\n    try {\n      const parsed: unknown = JSON.parse(this.mentions);\n      return Array.isArray(parsed) &&\n        parsed.every((value) => typeof value === 'string')\n        ? parsed\n        : [];\n    } catch {\n      return [];\n    }\n  }\n\n  set mentionUserIds(value: readonly string[]) {\n    const unique = [...new Set(value.map((id) => id.trim()).filter(Boolean))];\n    if (unique.length > MAX_MENTIONS || unique.some((id) => !UUID.test(id))) {\n      throw new TypeError(\n        'Comment mentions must contain at most 50 user UUIDs.',\n      );\n    }\n    this.mentions = JSON.stringify(unique);\n  }\n}\n","import { SmrtCollection } from '@happyvertical/smrt-core';\nimport {\n  getCurrentTenant,\n  TenantIsolationError,\n} from '@happyvertical/smrt-tenancy';\nimport { Comment } from '../models/Comment.js';\n\nexport class CommentCollection extends SmrtCollection<Comment> {\n  static readonly _itemClass = Comment;\n\n  async listForRecord(\n    recordType: string,\n    recordId: string,\n  ): Promise<Comment[]> {\n    const tenantId = getCurrentTenant()?.tenantId;\n    if (!tenantId) {\n      throw new TenantIsolationError(\n        'Record comments require a tenant context.',\n      );\n    }\n    return this.list({\n      where: { tenantId, metaType: recordType, metaId: recordId },\n      orderBy: ['createdAt ASC'],\n    });\n  }\n}\n","import { SmrtRecipe } from '@happyvertical/smrt-core';\nimport { Comment } from './models/Comment.js';\n\n/** Discussion attached to any authorized business record. */\nexport class RecordCommentsRecipe extends SmrtRecipe {\n  static id = 'comments.records';\n  static label = 'Record comments';\n  static summary = 'Discuss work directly on the records it concerns.';\n  static synonyms = ['comments', 'mentions', 'discussion'];\n  static group = {\n    id: 'comments',\n    label: 'Comments',\n    summary: 'Keep discussions alongside the records your team works on.',\n  };\n  static models = [Comment];\n  // Record discussions need an authorized parent record, not a global list.\n  static nav = [];\n  static runtime = 'both' as const;\n  static surfaces = [\n    {\n      kind: 'playground',\n      export: '@happyvertical/smrt-comments/svelte#RecordCommentsPlayground',\n      label: 'Record discussion preview',\n    },\n  ] as const;\n  static demoSeed = {\n    export: '@happyvertical/smrt-comments/svelte#recordCommentsDemo',\n  } as const;\n  static help = './comments.records.recipe.md';\n}\n","import {\n  digestRunOnceContent,\n  runOnce,\n  type SmrtClassOptions,\n} from '@happyvertical/smrt-core';\nimport { withTenant } from '@happyvertical/smrt-tenancy';\nimport { CommentCollection } from '../collections/CommentCollection.js';\nimport { Comment } from '../models/Comment.js';\nimport type {\n  CommentActorContext,\n  CommentMentionNotificationAdapter,\n  CommentRecordAccess,\n  CreateCommentInput,\n} from '../types.js';\n\n// Native UUID columns canonicalize case; identity and digests must agree with them.\nconst canonicalUuid = (value: string) =>\n  /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i.test(value)\n    ? value.toLowerCase()\n    : value;\n\n/** A reused request differs, or its retained comment is no longer available. */\nexport class CommentIdempotencyError extends Error {\n  constructor(\n    readonly code: 'COMMENT_REQUEST_CONFLICT' | 'COMMENT_REQUEST_UNAVAILABLE',\n  ) {\n    super(\n      code === 'COMMENT_REQUEST_CONFLICT'\n        ? 'Comment request key already used with different content.'\n        : 'Comment request no longer has an unchanged comment.',\n    );\n    this.name = 'CommentIdempotencyError';\n  }\n}\n\nexport class CommentService {\n  constructor(\n    private readonly options: {\n      db: SmrtClassOptions['db'];\n      actor: CommentActorContext;\n      authorizeRecord: (access: CommentRecordAccess) => Promise<boolean>;\n      mentionNotifications?: CommentMentionNotificationAdapter;\n    },\n  ) {}\n\n  private async authorize(\n    recordType: string,\n    recordId: string,\n    action: 'read' | 'comment',\n  ) {\n    const { actor } = this.options;\n    if (\n      !actor.tenantId ||\n      !actor.userId ||\n      !recordType ||\n      !recordId ||\n      !(await this.options.authorizeRecord({\n        ...actor,\n        recordType,\n        recordId,\n        action,\n      }))\n    ) {\n      throw new Error('Comment record access denied.');\n    }\n  }\n\n  async listForRecord(\n    recordType: string,\n    recordId: string,\n  ): Promise<Comment[]> {\n    await this.authorize(recordType, recordId, 'read');\n    const tenantId = this.options.actor.tenantId;\n    const binding = canonicalUuid(tenantId);\n    const rows = await withTenant({ tenantId }, async () =>\n      (await CommentCollection.create({ db: this.options.db })).listForRecord(\n        recordType,\n        recordId,\n      ),\n    );\n    const collection = await withTenant({ tenantId }, () =>\n      CommentCollection.create({ db: this.options.db }),\n    );\n    // The canonical retry namespace is separate from legacy reference spelling.\n    // This query is tenant/parent-bound before any scoped hydration.\n    const bound = await collection.db.query(\n      `SELECT CAST(id AS TEXT) AS id, CAST(tenant_id AS TEXT) AS tenant_id FROM \"${collection.tableName.replace(/\"/g, '\"\"')}\" WHERE retry_tenant_id = ? AND meta_type = ? AND meta_id = ? AND idempotency_key IS NOT NULL`,\n      binding,\n      recordType,\n      recordId,\n    );\n    for (const stored of bound.rows) {\n      const row = await this.loadBoundComment(collection.db, stored, binding);\n      if (row.metaType !== recordType || row.metaId !== recordId) {\n        throw new CommentIdempotencyError('COMMENT_REQUEST_UNAVAILABLE');\n      }\n      rows.push(row);\n    }\n    for (const row of rows) {\n      if (row.idempotencyKey !== null && row.retryTenantId !== binding) {\n        throw new CommentIdempotencyError('COMMENT_REQUEST_UNAVAILABLE');\n      }\n    }\n    return [...new Map(rows.map((row) => [row.id, row])).values()].sort(\n      (a, b) =>\n        (a.created_at?.getTime() ?? 0) - (b.created_at?.getTime() ?? 0) ||\n        (a.id ?? '').localeCompare(b.id ?? ''),\n    );\n  }\n\n  private async loadBoundComment(\n    db: CommentCollection['db'],\n    stored: { [key: string]: unknown },\n    binding: string,\n  ): Promise<Comment> {\n    const id = stored.id;\n    const tenantId = stored.tenant_id;\n    if (\n      typeof id !== 'string' ||\n      typeof tenantId !== 'string' ||\n      canonicalUuid(tenantId) !== binding\n    ) {\n      throw new CommentIdempotencyError('COMMENT_REQUEST_UNAVAILABLE');\n    }\n    // This is the original spelling of the same authorized tenant, not a bypass.\n    const row = await withTenant({ tenantId }, async () =>\n      (await CommentCollection.create({ db })).get(id),\n    );\n    if (\n      !row ||\n      canonicalUuid(row.tenantId) !== binding ||\n      row.retryTenantId !== binding ||\n      row.idempotencyKey === null\n    ) {\n      throw new CommentIdempotencyError('COMMENT_REQUEST_UNAVAILABLE');\n    }\n    return row;\n  }\n\n  async create(commentOptions: CreateCommentInput): Promise<Comment> {\n    const {\n      tenantId: inputTenantId,\n      authorUserId: inputAuthorUserId,\n      metaType,\n      metaId,\n      body,\n      mentions,\n      idempotencyKey,\n    } = commentOptions;\n    if (!inputTenantId || !inputAuthorUserId) {\n      throw new TypeError('Comments require a tenant and author.');\n    }\n    if (\n      canonicalUuid(inputTenantId) !==\n        canonicalUuid(this.options.actor.tenantId) ||\n      canonicalUuid(inputAuthorUserId) !==\n        canonicalUuid(this.options.actor.userId)\n    ) {\n      throw new Error('Comment actor context mismatch.');\n    }\n    // Preserve the trusted context's stored spelling on text-backed databases.\n    const tenantId = this.options.actor.tenantId;\n    const authorUserId = this.options.actor.userId;\n    await this.authorize(metaType ?? '', metaId ?? '', 'comment');\n    if (!body?.trim()) throw new TypeError('Comment body is required.');\n    // Validate through the model's public setter before collection.create()\n    // persists. Supply its normalized JSON in that single insert.\n    const prepared = new Comment();\n    if (mentions !== undefined) prepared.mentionUserIds = mentions;\n    if (\n      idempotencyKey !== undefined &&\n      (typeof idempotencyKey !== 'string' ||\n        !idempotencyKey.trim() ||\n        idempotencyKey !== idempotencyKey.trim() ||\n        idempotencyKey.length > 200)\n    ) {\n      throw new TypeError(\n        'Comment idempotencyKey must be a nonempty trimmed string of at most 200 characters.',\n      );\n    }\n    const normalizedMentions = [...prepared.mentionUserIds].sort();\n    const requestDigest = digestRunOnceContent({\n      tenantId: canonicalUuid(tenantId),\n      authorUserId: canonicalUuid(authorUserId),\n      metaType,\n      metaId,\n      body,\n      mentions: normalizedMentions,\n    });\n    const comment = await withTenant({ tenantId }, async () => {\n      const collection = await CommentCollection.create({\n        db: this.options.db,\n      });\n      const insert = async (target: CommentCollection) => {\n        const id = crypto.randomUUID();\n        return target.create({\n          tenantId,\n          authorUserId,\n          metaType,\n          metaId,\n          body,\n          id,\n          slug: id,\n          context: '',\n          _insertOnly: true,\n          mentions: prepared.mentions,\n          idempotencyKey: idempotencyKey ?? null,\n          requestDigest: idempotencyKey === undefined ? null : requestDigest,\n          retryTenantId:\n            idempotencyKey === undefined ? null : canonicalUuid(tenantId),\n        });\n      };\n      if (idempotencyKey === undefined) return insert(collection);\n      // The internal actor is an arbitration namespace, NOT the authenticated\n      // author. All authors sharing a tenant/key must contend on the same claim.\n      // Actual author and payload are bound by the independently checked digest.\n      const receipt = await runOnce(\n        {\n          db: collection.db,\n          tenantId: canonicalUuid(tenantId),\n          actor: 'smrt-comments.create:v1',\n          token: idempotencyKey,\n          content: 'comment-request-binding:v1',\n        },\n        async (tx) => {\n          const scoped = await CommentCollection.create({ db: tx });\n          const matches = await tx.query(\n            `SELECT CAST(id AS TEXT) AS id, CAST(tenant_id AS TEXT) AS tenant_id FROM \"${scoped.tableName.replace(/\"/g, '\"\"')}\" WHERE retry_tenant_id = ? AND idempotency_key = ?`,\n            canonicalUuid(tenantId),\n            idempotencyKey,\n          );\n          if (matches.rows.length > 1) {\n            throw new CommentIdempotencyError('COMMENT_REQUEST_UNAVAILABLE');\n          }\n          const row = matches.rows[0]\n            ? await this.loadBoundComment(\n                tx,\n                matches.rows[0],\n                canonicalUuid(tenantId),\n              )\n            : await insert(scoped);\n          return {\n            id: row.id,\n            digest: row.requestDigest,\n            tenant_id: row.tenantId,\n          };\n        },\n      );\n      if (receipt.digest !== requestDigest)\n        throw new CommentIdempotencyError('COMMENT_REQUEST_CONFLICT');\n      const row = await this.loadBoundComment(\n        collection.db,\n        receipt,\n        canonicalUuid(tenantId),\n      );\n      if (\n        !row ||\n        canonicalUuid(row.tenantId) !== canonicalUuid(tenantId) ||\n        row.idempotencyKey !== idempotencyKey ||\n        row.requestDigest !== requestDigest ||\n        digestRunOnceContent({\n          tenantId: canonicalUuid(row.tenantId),\n          authorUserId: canonicalUuid(row.authorUserId),\n          metaType: row.metaType,\n          metaId: row.metaId,\n          body: row.body,\n          mentions: [...row.mentionUserIds].sort(),\n        }) !== requestDigest\n      ) {\n        throw new CommentIdempotencyError('COMMENT_REQUEST_UNAVAILABLE');\n      }\n      return row;\n    });\n    if (!this.options.mentionNotifications || !comment.id) return comment;\n    for (const recipientUserId of comment.mentionUserIds) {\n      if (\n        canonicalUuid(recipientUserId) === canonicalUuid(comment.authorUserId)\n      )\n        continue;\n      await this.options.mentionNotifications.notifyMention({\n        commentId: comment.id,\n        tenantId: comment.tenantId,\n        authorUserId: comment.authorUserId,\n        recipientUserId,\n        recordType: comment.metaType,\n        recordId: comment.metaId,\n        body: comment.body,\n      });\n    }\n    return comment;\n  }\n}\n","import type {\n  CommentMention,\n  CommentMentionNotificationAdapter,\n} from '../types.js';\n\n/** Structural subset implemented by smrt-messages UserNotificationService. */\nexport interface CommentNotificationService {\n  notify(input: {\n    tenantId: string;\n    recipientUserId: string;\n    kind: string;\n    title: string;\n    body: string;\n    sourceRef: string;\n  }): Promise<unknown>;\n}\n\n/** Hosts must check recipient membership AND access to the referenced record. */\nexport function createCommentMentionNotifications(options: {\n  notifications: CommentNotificationService;\n  canNotify: (mention: CommentMention) => Promise<boolean>;\n}): CommentMentionNotificationAdapter {\n  return {\n    async notifyMention(mention) {\n      if (!(await options.canNotify(mention))) return;\n      await options.notifications.notify({\n        tenantId: mention.tenantId,\n        recipientUserId: mention.recipientUserId,\n        kind: 'comments.mention',\n        title: 'You were mentioned in a comment',\n        body: mention.body,\n        sourceRef: `comments.mention:${mention.commentId}`,\n      });\n    },\n  };\n}\n"],"mappings":";;;AAOA,eAAe,wBAAwB,KAAK,MAAM,o3TAAwgW,CAAC;;;;;;;;;;;;;;;;;;ACE3jW,IAAM,eAAe;AACrB,IAAM,OAAO;AAoBN,IAAM,UAAN,cAAsB,2BAA2B;CAEtD,WAAW;CAGX,eAAe;CAGf,OAAO;;CAGP,WAAW;CAIX,iBAAgC;CAIhC,gBAA+B;CAI/B,gBAA+B;CAE/B,YAAY,UAA0B,CAAC,GAAG;EACxC,MAAM,OAAO;EACb,IAAI,QAAQ,aAAa,KAAA,GAAW,KAAK,WAAW,QAAQ;EAC5D,IAAI,QAAQ,iBAAiB,KAAA,GAC3B,KAAK,eAAe,QAAQ;EAC9B,IAAI,QAAQ,SAAS,KAAA,GAAW,KAAK,OAAO,QAAQ;EACpD,IAAI,QAAQ,mBAAmB,KAAA,GAC7B,KAAK,iBAAiB,QAAQ;EAChC,IAAI,QAAQ,kBAAkB,KAAA,GAC5B,KAAK,gBAAgB,QAAQ;EAC/B,IAAI,QAAQ,kBAAkB,KAAA,GAC5B,KAAK,gBAAgB,QAAQ;EAC/B,MAAM,WAAW,QAAQ;EACzB,IAAI,MAAM,QAAQ,QAAQ,GAAG,KAAK,iBAAiB;OAAA,IAC1C,OAAO,aAAa,UAAU,KAAK,WAAW;CACzD;CAEA,IAAI,iBAA2B;EAC7B,IAAI;GACF,MAAM,SAAkB,KAAK,MAAM,KAAK,QAAQ;GAChD,OAAO,MAAM,QAAQ,MAAM,KACzB,OAAO,OAAO,UAAU,OAAO,UAAU,QAAQ,IAC/C,SACA,CAAC;EACP,QAAQ;GACN,OAAO,CAAC;EACV;CACF;CAEA,IAAI,eAAe,OAA0B;EAC3C,MAAM,SAAS,CAAC,GAAG,IAAI,IAAI,MAAM,KAAK,OAAO,GAAG,KAAK,CAAC,CAAA,CAAE,OAAO,OAAO,CAAC,CAAC;EACxE,IAAI,OAAO,SAAS,gBAAgB,OAAO,MAAM,OAAO,CAAC,KAAK,KAAK,EAAE,CAAC,GACpE,MAAM,IAAI,UACR,sDACF;EAEF,KAAK,WAAW,KAAK,UAAU,MAAM;CACvC;AACF;AA/D0D,cAA7C,SAAoD,mBAAkB,8BAAA;AAEjF,gBAAA,CADC,SAAS,CAAA,GADC,QAEX,WAAA,YAAA,CAAA;AAGA,gBAAA,CADC,gBAAgB,kCAAkC,EAAE,UAAU,KAAK,CAAC,CAAA,GAJ1D,QAKX,WAAA,gBAAA,CAAA;AAGA,gBAAA,CADC,MAAM,EAAE,UAAU,KAAK,CAAC,CAAA,GAPd,QAQX,WAAA,QAAA,CAAA;AAOA,gBAAA,CADC,MAAM;CAAE,MAAM;CAAQ,UAAU;CAAM,UAAU;AAAK,CAAC,CAAA,GAd5C,QAeX,WAAA,kBAAA,CAAA;AAIA,gBAAA,CADC,MAAM;CAAE,MAAM;CAAQ,UAAU;CAAM,UAAU;AAAK,CAAC,CAAA,GAlB5C,QAmBX,WAAA,iBAAA,CAAA;AAIA,gBAAA,CADC,MAAM;CAAE,MAAM;CAAQ,UAAU;CAAM,UAAU;AAAK,CAAC,CAAA,GAtB5C,QAuBX,WAAA,iBAAA,CAAA;AAvBW,UAAN,gBAAA,CAlBN,aAAa,EAAE,MAAM,WAAW,CAAC,GACjC,KAAK;CACJ,WAAW;CACX,KAAK;CACL,KAAK;CACL,KAAK;CACL,SAAS,CACP;EACE,MAAM;EACN,SAAS,CAAC,iBAAiB,gBAAgB;EAC3C,QAAQ;CACV,GACA;EACE,MAAM;EACN,SAAS;GAAC;GAAY;GAAY;GAAU;EAAW;CACzD,CACF;AACF,CAAC,CAAA,GACY,OAAA;;;ACvBN,IAAM,oBAAN,cAAgC,eAAwB;CAC7D,OAAgB,aAAa;CAE7B,MAAM,cACJ,YACA,UACoB;EACpB,MAAM,WAAW,iBAAiB,CAAA,EAAG;EACrC,IAAI,CAAC,UACH,MAAM,IAAI,qBACR,2CACF;EAEF,OAAO,KAAK,KAAK;GACf,OAAO;IAAE;IAAU,UAAU;IAAY,QAAQ;GAAS;GAC1D,SAAS,CAAC,eAAe;EAC3B,CAAC;CACH;AACF;;;ACrBO,IAAM,uBAAN,cAAmC,WAAW;CACnD,OAAO,KAAK;CACZ,OAAO,QAAQ;CACf,OAAO,UAAU;CACjB,OAAO,WAAW;EAAC;EAAY;EAAY;CAAY;CACvD,OAAO,QAAQ;EACb,IAAI;EACJ,OAAO;EACP,SAAS;CACX;CACA,OAAO,SAAS,CAAC,OAAO;CAExB,OAAO,MAAM,CAAC;CACd,OAAO,UAAU;CACjB,OAAO,WAAW,CAChB;EACE,MAAM;EACN,QAAQ;EACR,OAAO;CACT,CACF;CACA,OAAO,WAAW,EAChB,QAAQ,yDACV;CACA,OAAO,OAAO;AAChB;;;ACbA,IAAM,iBAAiB,UACrB,kEAAkE,KAAK,KAAK,IACxE,MAAM,YAAY,IAClB;AAGC,IAAM,0BAAN,cAAsC,MAAM;CACjD,YACW,MACT;EACA,MACE,SAAS,6BACL,6DACA,qDACN;EANS,KAAA,OAAA;EAOT,KAAK,OAAO;CACd;CARW;AASb;AAEO,IAAM,iBAAN,MAAqB;CAC1B,YACmB,SAMjB;EANiB,KAAA,UAAA;CAMhB;CANgB;CAQnB,MAAc,UACZ,YACA,UACA,QACA;EACA,MAAM,EAAE,UAAU,KAAK;EACvB,IACE,CAAC,MAAM,YACP,CAAC,MAAM,UACP,CAAC,cACD,CAAC,YACD,CAAE,MAAM,KAAK,QAAQ,gBAAgB;GACnC,GAAG;GACH;GACA;GACA;EACF,CAAC,GAED,MAAM,IAAI,MAAM,+BAA+B;CAEnD;CAEA,MAAM,cACJ,YACA,UACoB;EACpB,MAAM,KAAK,UAAU,YAAY,UAAU,MAAM;EACjD,MAAM,WAAW,KAAK,QAAQ,MAAM;EACpC,MAAM,UAAU,cAAc,QAAQ;EACtC,MAAM,OAAO,MAAM,WAAW,EAAE,SAAS,GAAG,aACzC,MAAM,kBAAkB,OAAO,EAAE,IAAI,KAAK,QAAQ,GAAG,CAAC,EAAA,CAAG,cACxD,YACA,QACF,CACF;EACA,MAAM,aAAa,MAAM,WAAW,EAAE,SAAS,SAC7C,kBAAkB,OAAO,EAAE,IAAI,KAAK,QAAQ,GAAG,CAAC,CAClD;EAGA,MAAM,QAAQ,MAAM,WAAW,GAAG,MAChC,6EAA6E,WAAW,UAAU,QAAQ,MAAM,MAAI,EAAC,gGACrH,SACA,YACA,QACF;EACA,KAAA,MAAW,UAAU,MAAM,MAAM;GAC/B,MAAM,MAAM,MAAM,KAAK,iBAAiB,WAAW,IAAI,QAAQ,OAAO;GACtE,IAAI,IAAI,aAAa,cAAc,IAAI,WAAW,UAChD,MAAM,IAAI,wBAAwB,6BAA6B;GAEjE,KAAK,KAAK,GAAG;EACf;EACA,KAAA,MAAW,OAAO,MAChB,IAAI,IAAI,mBAAmB,QAAQ,IAAI,kBAAkB,SACvD,MAAM,IAAI,wBAAwB,6BAA6B;EAGnE,OAAO,CAAC,GAAG,IAAI,IAAI,KAAK,KAAK,QAAQ,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC,CAAA,CAAE,OAAO,CAAC,CAAA,CAAE,MAC5D,GAAG,OACD,EAAE,YAAY,QAAQ,KAAK,MAAM,EAAE,YAAY,QAAQ,KAAK,OAC5D,EAAE,MAAM,GAAA,CAAI,cAAc,EAAE,MAAM,EAAE,CACzC;CACF;CAEA,MAAc,iBACZ,IACA,QACA,SACkB;EAClB,MAAM,KAAK,OAAO;EAClB,MAAM,WAAW,OAAO;EACxB,IACE,OAAO,OAAO,YACd,OAAO,aAAa,YACpB,cAAc,QAAQ,MAAM,SAE5B,MAAM,IAAI,wBAAwB,6BAA6B;EAGjE,MAAM,MAAM,MAAM,WAAW,EAAE,SAAS,GAAG,aACxC,MAAM,kBAAkB,OAAO,EAAE,GAAG,CAAC,EAAA,CAAG,IAAI,EAAE,CACjD;EACA,IACE,CAAC,OACD,cAAc,IAAI,QAAQ,MAAM,WAChC,IAAI,kBAAkB,WACtB,IAAI,mBAAmB,MAEvB,MAAM,IAAI,wBAAwB,6BAA6B;EAEjE,OAAO;CACT;CAEA,MAAM,OAAO,gBAAsD;EACjE,MAAM,EACJ,UAAU,eACV,cAAc,mBACd,UACA,QACA,MACA,UACA,mBACE;EACJ,IAAI,CAAC,iBAAiB,CAAC,mBACrB,MAAM,IAAI,UAAU,uCAAuC;EAE7D,IACE,cAAc,aAAa,MACzB,cAAc,KAAK,QAAQ,MAAM,QAAQ,KAC3C,cAAc,iBAAiB,MAC7B,cAAc,KAAK,QAAQ,MAAM,MAAM,GAEzC,MAAM,IAAI,MAAM,iCAAiC;EAGnD,MAAM,WAAW,KAAK,QAAQ,MAAM;EACpC,MAAM,eAAe,KAAK,QAAQ,MAAM;EACxC,MAAM,KAAK,UAAU,YAAY,IAAI,UAAU,IAAI,SAAS;EAC5D,IAAI,CAAC,MAAM,KAAK,GAAG,MAAM,IAAI,UAAU,2BAA2B;EAGlE,MAAM,WAAW,IAAI,QAAQ;EAC7B,IAAI,aAAa,KAAA,GAAW,SAAS,iBAAiB;EACtD,IACE,mBAAmB,KAAA,MAClB,OAAO,mBAAmB,YACzB,CAAC,eAAe,KAAK,KACrB,mBAAmB,eAAe,KAAK,KACvC,eAAe,SAAS,MAE1B,MAAM,IAAI,UACR,qFACF;EAEF,MAAM,qBAAqB,CAAC,GAAG,SAAS,cAAc,CAAA,CAAE,KAAK;EAC7D,MAAM,gBAAgB,qBAAqB;GACzC,UAAU,cAAc,QAAQ;GAChC,cAAc,cAAc,YAAY;GACxC;GACA;GACA;GACA,UAAU;EACZ,CAAC;EACD,MAAM,UAAU,MAAM,WAAW,EAAE,SAAS,GAAG,YAAY;GACzD,MAAM,aAAa,MAAM,kBAAkB,OAAO,EAChD,IAAI,KAAK,QAAQ,GACnB,CAAC;GACD,MAAM,SAAS,OAAO,WAA8B;IAClD,MAAM,KAAK,OAAO,WAAW;IAC7B,OAAO,OAAO,OAAO;KACnB;KACA;KACA;KACA;KACA;KACA;KACA,MAAM;KACN,SAAS;KACT,aAAa;KACb,UAAU,SAAS;KACnB,gBAAgB,kBAAkB;KAClC,eAAe,mBAAmB,KAAA,IAAY,OAAO;KACrD,eACE,mBAAmB,KAAA,IAAY,OAAO,cAAc,QAAQ;IAChE,CAAC;GACH;GACA,IAAI,mBAAmB,KAAA,GAAW,OAAO,OAAO,UAAU;GAI1D,MAAM,UAAU,MAAM,QACpB;IACE,IAAI,WAAW;IACf,UAAU,cAAc,QAAQ;IAChC,OAAO;IACP,OAAO;IACP,SAAS;GACX,GACA,OAAO,OAAO;IACZ,MAAM,SAAS,MAAM,kBAAkB,OAAO,EAAE,IAAI,GAAG,CAAC;IACxD,MAAM,UAAU,MAAM,GAAG,MACvB,6EAA6E,OAAO,UAAU,QAAQ,MAAM,MAAI,EAAC,sDACjH,cAAc,QAAQ,GACtB,cACF;IACA,IAAI,QAAQ,KAAK,SAAS,GACxB,MAAM,IAAI,wBAAwB,6BAA6B;IAEjE,MAAMA,OAAM,QAAQ,KAAK,KACrB,MAAM,KAAK,iBACT,IACA,QAAQ,KAAK,IACb,cAAc,QAAQ,CACxB,IACA,MAAM,OAAO,MAAM;IACvB,OAAO;KACL,IAAIA,KAAI;KACR,QAAQA,KAAI;KACZ,WAAWA,KAAI;IACjB;GACF,CACF;GACA,IAAI,QAAQ,WAAW,eACrB,MAAM,IAAI,wBAAwB,0BAA0B;GAC9D,MAAM,MAAM,MAAM,KAAK,iBACrB,WAAW,IACX,SACA,cAAc,QAAQ,CACxB;GACA,IACE,CAAC,OACD,cAAc,IAAI,QAAQ,MAAM,cAAc,QAAQ,KACtD,IAAI,mBAAmB,kBACvB,IAAI,kBAAkB,iBACtB,qBAAqB;IACnB,UAAU,cAAc,IAAI,QAAQ;IACpC,cAAc,cAAc,IAAI,YAAY;IAC5C,UAAU,IAAI;IACd,QAAQ,IAAI;IACZ,MAAM,IAAI;IACV,UAAU,CAAC,GAAG,IAAI,cAAc,CAAA,CAAE,KAAK;GACzC,CAAC,MAAM,eAEP,MAAM,IAAI,wBAAwB,6BAA6B;GAEjE,OAAO;EACT,CAAC;EACD,IAAI,CAAC,KAAK,QAAQ,wBAAwB,CAAC,QAAQ,IAAI,OAAO;EAC9D,KAAA,MAAW,mBAAmB,QAAQ,gBAAgB;GACpD,IACE,cAAc,eAAe,MAAM,cAAc,QAAQ,YAAY,GAErE;GACF,MAAM,KAAK,QAAQ,qBAAqB,cAAc;IACpD,WAAW,QAAQ;IACnB,UAAU,QAAQ;IAClB,cAAc,QAAQ;IACtB;IACA,YAAY,QAAQ;IACpB,UAAU,QAAQ;IAClB,MAAM,QAAQ;GAChB,CAAC;EACH;EACA,OAAO;CACT;AACF;;;ACjRO,SAAS,kCAAkC,SAGZ;CACpC,OAAO,EACL,MAAM,cAAc,SAAS;EAC3B,IAAI,CAAE,MAAM,QAAQ,UAAU,OAAO,GAAI;EACzC,MAAM,QAAQ,cAAc,OAAO;GACjC,UAAU,QAAQ;GAClB,iBAAiB,QAAQ;GACzB,MAAM;GACN,OAAO;GACP,MAAM,QAAQ;GACd,WAAW,oBAAoB,QAAQ;EACzC,CAAC;CACH,EACF;AACF"}

package/dist/manifest.json

@@ -2,7 +2,7 @@
   "version": "1.0.0",
   "timestamp": 0,
   "packageName": "@happyvertical/smrt-comments",
-  "packageVersion": "0.55.23",
+  "packageVersion": "0.56.0",
   "objects": {
     "@happyvertical/smrt-comments:CommentCollection": {
       "name": "commentcollection",
@@ -45,7 +45,7 @@
       "collectionExportName": "CommentCollectionCollection",
       "schema": {
         "tableName": "record_comments",
-        "ddl": "CREATE TABLE IF NOT EXISTS \"record_comments\" (\n  \"id\" UUID PRIMARY KEY NOT NULL,\n  \"slug\" TEXT NOT NULL,\n  \"context\" TEXT NOT NULL DEFAULT '',\n  \"created_at\" TIMESTAMP NOT NULL DEFAULT current_timestamp,\n  \"updated_at\" TIMESTAMP NOT NULL DEFAULT current_timestamp,\n  \"meta_type\" TEXT NOT NULL,\n  \"meta_id\" TEXT NOT NULL,\n  \"role\" TEXT NOT NULL,\n  \"sort_order\" INTEGER DEFAULT 0,\n  \"tenant_id\" UUID NOT NULL,\n  \"author_user_id\" UUID NOT NULL,\n  \"body\" TEXT NOT NULL,\n  \"mentions\" TEXT\n);",
+        "ddl": "CREATE TABLE IF NOT EXISTS \"record_comments\" (\n  \"id\" UUID PRIMARY KEY NOT NULL,\n  \"slug\" TEXT NOT NULL,\n  \"context\" TEXT NOT NULL DEFAULT '',\n  \"created_at\" TIMESTAMP NOT NULL DEFAULT current_timestamp,\n  \"updated_at\" TIMESTAMP NOT NULL DEFAULT current_timestamp,\n  \"meta_type\" TEXT NOT NULL,\n  \"meta_id\" TEXT NOT NULL,\n  \"role\" TEXT NOT NULL,\n  \"sort_order\" INTEGER DEFAULT 0,\n  \"tenant_id\" UUID NOT NULL,\n  \"author_user_id\" UUID NOT NULL,\n  \"body\" TEXT NOT NULL,\n  \"mentions\" TEXT,\n  \"idempotency_key\" TEXT,\n  \"retry_tenant_id\" TEXT,\n  \"request_digest\" TEXT\n);",
         "columns": {
           "id": {
             "type": "UUID",
@@ -114,6 +114,21 @@
             "type": "TEXT",
             "notNull": false,
             "unique": false
+          },
+          "idempotency_key": {
+            "type": "TEXT",
+            "notNull": false,
+            "unique": false
+          },
+          "retry_tenant_id": {
+            "type": "TEXT",
+            "notNull": false,
+            "unique": false
+          },
+          "request_digest": {
+            "type": "TEXT",
+            "notNull": false,
+            "unique": false
           }
         },
         "indexes": [
@@ -126,6 +141,14 @@
             ],
             "unique": true
           },
+          {
+            "name": "record_comments_tenant_request_key",
+            "columns": [
+              "retry_tenant_id",
+              "idempotency_key"
+            ],
+            "unique": true
+          },
           {
             "name": "record_comments_record_created_idx",
             "columns": [
@@ -156,7 +179,7 @@
             ]
           }
         ],
-        "version": "78644ad4"
+        "version": "5095dfc9"
       },
       "importPath": "@happyvertical/smrt-comments"
     },
@@ -226,6 +249,33 @@
         "mentions": {
           "type": "text",
           "required": false
+        },
+        "idempotencyKey": {
+          "type": "text",
+          "required": false,
+          "_meta": {
+            "nullable": true,
+            "readonly": true
+          },
+          "readonly": true
+        },
+        "retryTenantId": {
+          "type": "text",
+          "required": false,
+          "_meta": {
+            "nullable": true,
+            "readonly": true
+          },
+          "readonly": true
+        },
+        "requestDigest": {
+          "type": "text",
+          "required": false,
+          "_meta": {
+            "nullable": true,
+            "readonly": true
+          },
+          "readonly": true
         }
       },
       "methods": {
@@ -244,6 +294,14 @@
         "mcp": false,
         "cli": false,
         "indexes": [
+          {
+            "name": "record_comments_tenant_request_key",
+            "columns": [
+              "retryTenantId",
+              "idempotencyKey"
+            ],
+            "unique": true
+          },
           {
             "name": "record_comments_record_created_idx",
             "columns": [
@@ -295,7 +353,7 @@
       ],
       "schema": {
         "tableName": "record_comments",
-        "ddl": "CREATE TABLE IF NOT EXISTS \"record_comments\" (\n  \"id\" UUID PRIMARY KEY NOT NULL,\n  \"slug\" TEXT NOT NULL,\n  \"context\" TEXT NOT NULL DEFAULT '',\n  \"created_at\" TIMESTAMP NOT NULL DEFAULT current_timestamp,\n  \"updated_at\" TIMESTAMP NOT NULL DEFAULT current_timestamp,\n  \"meta_type\" TEXT NOT NULL,\n  \"meta_id\" TEXT NOT NULL,\n  \"role\" TEXT NOT NULL,\n  \"sort_order\" INTEGER DEFAULT 0,\n  \"tenant_id\" UUID NOT NULL,\n  \"author_user_id\" UUID NOT NULL,\n  \"body\" TEXT NOT NULL,\n  \"mentions\" TEXT\n);",
+        "ddl": "CREATE TABLE IF NOT EXISTS \"record_comments\" (\n  \"id\" UUID PRIMARY KEY NOT NULL,\n  \"slug\" TEXT NOT NULL,\n  \"context\" TEXT NOT NULL DEFAULT '',\n  \"created_at\" TIMESTAMP NOT NULL DEFAULT current_timestamp,\n  \"updated_at\" TIMESTAMP NOT NULL DEFAULT current_timestamp,\n  \"meta_type\" TEXT NOT NULL,\n  \"meta_id\" TEXT NOT NULL,\n  \"role\" TEXT NOT NULL,\n  \"sort_order\" INTEGER DEFAULT 0,\n  \"tenant_id\" UUID NOT NULL,\n  \"author_user_id\" UUID NOT NULL,\n  \"body\" TEXT NOT NULL,\n  \"mentions\" TEXT,\n  \"idempotency_key\" TEXT,\n  \"retry_tenant_id\" TEXT,\n  \"request_digest\" TEXT\n);",
         "columns": {
           "id": {
             "type": "UUID",
@@ -364,6 +422,21 @@
             "type": "TEXT",
             "notNull": false,
             "unique": false
+          },
+          "idempotency_key": {
+            "type": "TEXT",
+            "notNull": false,
+            "unique": false
+          },
+          "retry_tenant_id": {
+            "type": "TEXT",
+            "notNull": false,
+            "unique": false
+          },
+          "request_digest": {
+            "type": "TEXT",
+            "notNull": false,
+            "unique": false
           }
         },
         "indexes": [
@@ -376,6 +449,14 @@
             ],
             "unique": true
           },
+          {
+            "name": "record_comments_tenant_request_key",
+            "columns": [
+              "retry_tenant_id",
+              "idempotency_key"
+            ],
+            "unique": true
+          },
           {
             "name": "record_comments_record_created_idx",
             "columns": [
@@ -406,7 +487,7 @@
             ]
           }
         ],
-        "version": "78644ad4"
+        "version": "5095dfc9"
       },
       "importPath": "@happyvertical/smrt-comments"
     }

package/dist/models/Comment.d.ts

@@ -6,6 +6,12 @@ export declare class Comment extends SmrtPolymorphicAssociation {
     body: string;
     /** JSON array of referenced User UUIDs; use mentionUserIds for validation. */
     mentions: string;
+    /** Service-owned binding retained after generic runOnce claim retention. */
+    idempotencyKey: string | null;
+    /** Canonical retry namespace; never rewrites stored tenant/user references. */
+    retryTenantId: string | null;
+    /** Digest of the original authenticated author, parent and normalized payload. */
+    requestDigest: string | null;
     constructor(options?: CommentOptions);
     get mentionUserIds(): string[];
     set mentionUserIds(value: readonly string[]);

package/dist/models/Comment.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"Comment.d.ts","sourceRoot":"","sources":["../../src/models/Comment.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,0BAA0B,EAE3B,MAAM,0BAA0B,CAAC;AAElC,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAKlD,qBAaa,OAAQ,SAAQ,0BAA0B;IAErD,QAAQ,SAAM;IAGd,YAAY,SAAM;IAGlB,IAAI,SAAM;IAEV,8EAA8E;IAC9E,QAAQ,SAAQ;gBAEJ,OAAO,GAAE,cAAmB;IAWxC,IAAI,cAAc,IAAI,MAAM,EAAE,CAU7B;IAED,IAAI,cAAc,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,EAQ1C;CACF"}
+{"version":3,"file":"Comment.d.ts","sourceRoot":"","sources":["../../src/models/Comment.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,0BAA0B,EAE3B,MAAM,0BAA0B,CAAC;AAElC,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAKlD,qBAkBa,OAAQ,SAAQ,0BAA0B;IAErD,QAAQ,SAAM;IAGd,YAAY,SAAM;IAGlB,IAAI,SAAM;IAEV,8EAA8E;IAC9E,QAAQ,SAAQ;IAEhB,4EAA4E;IAE5E,cAAc,EAAE,MAAM,GAAG,IAAI,CAAQ;IAErC,+EAA+E;IAE/E,aAAa,EAAE,MAAM,GAAG,IAAI,CAAQ;IAEpC,kFAAkF;IAElF,aAAa,EAAE,MAAM,GAAG,IAAI,CAAQ;gBAExB,OAAO,GAAE,cAAmB;IAiBxC,IAAI,cAAc,IAAI,MAAM,EAAE,CAU7B;IAED,IAAI,cAAc,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,EAQ1C;CACF"}

package/dist/services/CommentService.d.ts

@@ -1,6 +1,11 @@
-import type { SmrtClassOptions } from '@happyvertical/smrt-core';
+import { type SmrtClassOptions } from '@happyvertical/smrt-core';
 import { Comment } from '../models/Comment.js';
 import type { CommentActorContext, CommentMentionNotificationAdapter, CommentRecordAccess, CreateCommentInput } from '../types.js';
+/** A reused request differs, or its retained comment is no longer available. */
+export declare class CommentIdempotencyError extends Error {
+    readonly code: 'COMMENT_REQUEST_CONFLICT' | 'COMMENT_REQUEST_UNAVAILABLE';
+    constructor(code: 'COMMENT_REQUEST_CONFLICT' | 'COMMENT_REQUEST_UNAVAILABLE');
+}
 export declare class CommentService {
     private readonly options;
     constructor(options: {
@@ -11,6 +16,7 @@ export declare class CommentService {
     });
     private authorize;
     listForRecord(recordType: string, recordId: string): Promise<Comment[]>;
+    private loadBoundComment;
     create(commentOptions: CreateCommentInput): Promise<Comment>;
 }
 //# sourceMappingURL=CommentService.d.ts.map

package/dist/services/CommentService.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"CommentService.d.ts","sourceRoot":"","sources":["../../src/services/CommentService.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAGjE,OAAO,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAC;AAC/C,OAAO,KAAK,EACV,mBAAmB,EACnB,iCAAiC,EACjC,mBAAmB,EACnB,kBAAkB,EACnB,MAAM,aAAa,CAAC;AAErB,qBAAa,cAAc;IAEvB,OAAO,CAAC,QAAQ,CAAC,OAAO;gBAAP,OAAO,EAAE;QACxB,EAAE,EAAE,gBAAgB,CAAC,IAAI,CAAC,CAAC;QAC3B,KAAK,EAAE,mBAAmB,CAAC;QAC3B,eAAe,EAAE,CAAC,MAAM,EAAE,mBAAmB,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;QACnE,oBAAoB,CAAC,EAAE,iCAAiC,CAAC;KAC1D;YAGW,SAAS;IAsBjB,aAAa,CACjB,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,OAAO,EAAE,CAAC;IAUf,MAAM,CAAC,cAAc,EAAE,kBAAkB,GAAG,OAAO,CAAC,OAAO,CAAC;CAgDnE"}
+{"version":3,"file":"CommentService.d.ts","sourceRoot":"","sources":["../../src/services/CommentService.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,KAAK,gBAAgB,EACtB,MAAM,0BAA0B,CAAC;AAGlC,OAAO,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAC;AAC/C,OAAO,KAAK,EACV,mBAAmB,EACnB,iCAAiC,EACjC,mBAAmB,EACnB,kBAAkB,EACnB,MAAM,aAAa,CAAC;AAQrB,gFAAgF;AAChF,qBAAa,uBAAwB,SAAQ,KAAK;IAE9C,QAAQ,CAAC,IAAI,EAAE,0BAA0B,GAAG,6BAA6B;gBAAhE,IAAI,EAAE,0BAA0B,GAAG,6BAA6B;CAS5E;AAED,qBAAa,cAAc;IAEvB,OAAO,CAAC,QAAQ,CAAC,OAAO;gBAAP,OAAO,EAAE;QACxB,EAAE,EAAE,gBAAgB,CAAC,IAAI,CAAC,CAAC;QAC3B,KAAK,EAAE,mBAAmB,CAAC;QAC3B,eAAe,EAAE,CAAC,MAAM,EAAE,mBAAmB,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;QACnE,oBAAoB,CAAC,EAAE,iCAAiC,CAAC;KAC1D;YAGW,SAAS;IAsBjB,aAAa,CACjB,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,OAAO,EAAE,CAAC;YAwCP,gBAAgB;IA6BxB,MAAM,CAAC,cAAc,EAAE,kBAAkB,GAAG,OAAO,CAAC,OAAO,CAAC;CAwJnE"}

package/dist/smrt-knowledge.json

@@ -3,14 +3,15 @@
   "sensitiveFieldsExcluded": true,
   "generatedAt": "1970-01-01T00:00:00.000Z",
   "packageName": "@happyvertical/smrt-comments",
-  "packageVersion": "0.55.23",
+  "packageVersion": "0.56.0",
   "sourceManifestPath": "dist/manifest.json",
   "agentDocPath": "AGENTS.md",
   "sourceHashes": {
-    "manifest": "12529d635dcae5e7bc23b9a5af30ecdae1dd268eaf2b25286605838e73dfa1a5",
-    "packageJson": "afebf2f1bf268439282c0f0d1a25e755be438f41921a4941ce94583112f2138f",
-    "agents": "06a1eb0f4777eea60f0ea72d08f5af82e5045f686b5197ddeaa2079e446852cd",
-    "moduleDoc:agents/test-design.md": "0e6eb932f89676ae0e869b445be2e9a7dd100159dc850b6d992777645aa31851"
+    "manifest": "2bfcce146b3d36b5d4d4a10b64e7b33d1abd240c7d38a1dcef3241a4b8427afe",
+    "packageJson": "a1d9db8367441f23c1b6c53da102fe846dc5423c27cb7eee4e3e597755c44307",
+    "agents": "3e82791ea4a860351e1be18ee8cee07902b99643bd9c53d4859e1f18683979ec",
+    "moduleDoc:agents/test-design.md": "df07180c4186d6358a841e23c806cd521f772a98582676e7f0ab73035d5cbb53",
+    "moduleDoc:agents/idempotent-create.md": "97043e654f93fe59f1c2bbc2f5f3adbfad616e2741756c69fa5ca7ff6d84250f"
   },
   "exports": [
     ".",
@@ -145,6 +146,27 @@
           "type": "text",
           "required": false,
           "columnType": "TEXT"
+        },
+        {
+          "name": "idempotencyKey",
+          "type": "text",
+          "required": false,
+          "columnType": "TEXT",
+          "readonly": true
+        },
+        {
+          "name": "retryTenantId",
+          "type": "text",
+          "required": false,
+          "columnType": "TEXT",
+          "readonly": true
+        },
+        {
+          "name": "requestDigest",
+          "type": "text",
+          "required": false,
+          "columnType": "TEXT",
+          "readonly": true
         }
       ],
       "relationships": [
@@ -205,12 +227,17 @@
     "polymorphicAssociations": 1,
     "uuidColumns": 6
   },
-  "agentDoc": "# @happyvertical/smrt-comments\n\nRecord discussions attach to arbitrary records through `Comment`'s inherited\n`metaType` and `metaId`; preserve these as a qualified polymorphic pair and\nnever replace them with a text foreign key. `CommentService` owns persistence\nand invokes the optional mention adapter only after the comment is saved.\n\nThe package must not depend on `smrt-messages`: hosts compose\n`CommentMentionNotificationAdapter` with `UserNotificationService` and retain\ntheir own notification delivery policy. The Svelte surface receives authorized\ncomment projections and callbacks; it does not fetch or authorize records.\n`CommentService` requires a trusted actor and host record authorization callback.\n`RecordComments.contextKey` includes tenant, actor and record identity.\nSee [test design](agents/test-design.md) for the behavior matrix.\n\nRun `pnpm --filter @happyvertical/smrt-comments test`, `test:postgres`, `typecheck`, `check`, and\n`npx --yes @biomejs/biome@2.5.2 check packages/comments` after changes.\n",
+  "agentDoc": "# @happyvertical/smrt-comments\n\nRecord discussions attach to arbitrary records through `Comment`'s inherited\n`metaType` and `metaId`; preserve these as a qualified polymorphic pair and\nnever replace them with a text foreign key. `CommentService` owns persistence\nand invokes the optional mention adapter only after the comment is saved.\n\nThe package must not depend on `smrt-messages`: hosts compose\n`CommentMentionNotificationAdapter` with `UserNotificationService` and retain\ntheir own notification delivery policy. The Svelte surface receives authorized\ncomment projections and callbacks; it does not fetch or authorize records.\n`CommentService` requires a trusted actor and host record authorization callback.\n`RecordComments.contextKey` includes tenant, actor and record identity.\nSee [test design](agents/test-design.md) and [idempotent creation](agents/idempotent-create.md) for behavior matrices and retry invariants.\n\nRun `pnpm --filter @happyvertical/smrt-comments test`, `test:postgres`, `typecheck`, `check`, and\n`npx --yes @biomejs/biome@2.5.2 check packages/comments` after changes.\n",
   "moduleDocs": [
     {
       "path": "agents/test-design.md",
       "module": "test-design",
-      "content": "# Comments behavior evidence (#3714)\n\n| Behavior / trigger | Positive / failure | Actor / executor | Runtime / edge | Level / command |\n| --- | --- | --- | --- | --- |\n| Create/read a comment | Persist and reload; deny missing record permission, forged author or tenant | Trusted session actor; same supplied DB handle under tenant context | Node, SQLite/DuckDB/PostgreSQL; polymorphic record authorization callback | Integration, `test` / `test:postgres` |\n| Shared record identity in different tenants | Tenant A sees A; never B | Two tenant contexts, same actor and DB | All three SQL dialects; explicit tenant filter | Integration, `test` / `test:postgres` |\n| Mention creation | Deduplicate and exclude author; malformed UUID rejected | Authorized author, recipient access callback | All three SQL dialects; missing adapter is supported | Integration, `test` / `test:postgres` |\n| Mention delivery | Real UserNotificationService row; denied recipient gets none; replay deduplicates | Supplied notification service/DB | All three SQL dialects; upstream failure leaves saved comment | Integration, `test` / `test:postgres` |\n| UI submission | Trim/post; empty body and rejected callback keep actionable feedback | Host authorized projections | Browser Svelte; async callback | Component, `test` |\n| Actor/record switch during submission | Reset draft; stale success/error cannot mutate new draft | Changed composite contextKey | Browser Svelte; async completion | Component, `test` |\n| Recipe/schema | Recipe includes Comment; generated schema used by real persistence | Registry/test migrator | All three SQL dialects | Integration, `test` / `test:postgres`; `build` |\n\nNew feature, so a base-regression comparison is N/A. Comment insertion is one\nsave on the provided executor, with validation/authorization before mutation.\nNotification delivery intentionally occurs after save and is not atomic with it;\nthe failure test asserts the saved-row contract. No comment retry/idempotency\ncontract is promised: clients must not blindly retry create after delivery error.\nThe fixture-only playground does not replace the authenticated record surface.\n\nRecipe metadata follow-up (#3604): the comments catalog group, embedded-only\nnavigation and help are checked in the generated manifest and knowledge artifact\nafter building with refreshed scanner/core artifacts. Model exposure stays off.\nThis change does not affect persistence or delivery; prior three-dialect evidence\nremains applicable. Full package tests, typecheck, Svelte and Biome are rerun.\n\n#3708 follow-up: the browser-only playground renders fixture projections and\naccepts local posts without storage or notification access. Component tests\nverify display, posting, instance isolation and reset on remount. Build assertions\nverify runtime, playground and demo exports in manifest and knowledge artifacts.\nPersistence and authorization are unchanged; existing three-dialect evidence\napplies. Route/settings/shell/provider contracts are N/A because they cannot\nprovide the parent record authorization context.\n\n## Accepted review6084422109 round 1 regressions\n\n- Invalid UUID and 51 distinct mentions: authorized actor, each SQL dialect,\n  failed create must leave zero rows for the record. Baseline failed on SQLite,\n  DuckDB and PostgreSQL; public model setter now validates before the one insert.\n- Actual SQLite CommentService notification rejection composed with the Svelte\n  submit callback: saved row remains, draft remains, alert instructs refresh and\n  checking the discussion before reposting. Baseline produced “Try again”.\n- Commands: full comments `test`, `test:postgres`, `typecheck`, `check`, `build`,\n  and Biome; evidence under `/private/tmp/smrt-track-b-evidence/3714-r1-*`.\n\n## Accepted review6084422109 round 6 persistence-key injection\n\nActor may comment on record A only; another author owns a comment on record B\nin the same tenant. Injecting B's slug/context, with and without its primary id,\nmust create a separate A row and preserve B's identity, author and body. Injected\ndatabase and constructor options must not reach persistence or alter defaults.\nReal SQLite/DuckDB/PostgreSQL baselines fail these assertions; the service now\nallowlists CreateCommentInput and generates identity with insert-only persistence.\nHydration options remain available only on the trusted model path. Full package,\nthree-dialect, type/Svelte, build and Biome evidence: `3714-round6-*` logs.\n"
+      "content": "# Comments behavior evidence (#3714)\n\n| Behavior / trigger | Positive / failure | Actor / executor | Runtime / edge | Level / command |\n| --- | --- | --- | --- | --- |\n| Create/read a comment | Persist and reload; deny missing record permission, forged author or tenant | Trusted session actor; same supplied DB handle under tenant context | Node, SQLite/DuckDB/PostgreSQL; polymorphic record authorization callback | Integration, `test` / `test:postgres` |\n| Shared record identity in different tenants | Tenant A sees A; never B | Two tenant contexts, same actor and DB | All three SQL dialects; explicit tenant filter | Integration, `test` / `test:postgres` |\n| Mention creation | Deduplicate and exclude author; malformed UUID rejected | Authorized author, recipient access callback | All three SQL dialects; missing adapter is supported | Integration, `test` / `test:postgres` |\n| Mention delivery | Real UserNotificationService row; denied recipient gets none; replay deduplicates | Supplied notification service/DB | All three SQL dialects; upstream failure leaves saved comment | Integration, `test` / `test:postgres` |\n| UI submission | Trim/post; empty body and rejected callback keep actionable feedback | Host authorized projections | Browser Svelte; async callback | Component, `test` |\n| Actor/record switch during submission | Reset draft; stale success/error cannot mutate new draft | Changed composite contextKey | Browser Svelte; async completion | Component, `test` |\n| Recipe/schema | Recipe includes Comment; generated schema used by real persistence | Registry/test migrator | All three SQL dialects | Integration, `test` / `test:postgres`; `build` |\n\nNew feature, so a base-regression comparison is N/A. Comment insertion is one\nsave on the provided executor, with validation/authorization before mutation.\nNotification delivery intentionally occurs after save and is not atomic with it;\nthe failure test asserts the saved-row contract. Unkeyed creates have no retry contract. Explicit keyed creates now support\nretry recovery; see [idempotent creation](idempotent-create.md).\nThe fixture-only playground does not replace the authenticated record surface.\n\nRecipe metadata follow-up (#3604): the comments catalog group, embedded-only\nnavigation and help are checked in the generated manifest and knowledge artifact\nafter building with refreshed scanner/core artifacts. Model exposure stays off.\nThis change does not affect persistence or delivery; prior three-dialect evidence\nremains applicable. Full package tests, typecheck, Svelte and Biome are rerun.\n\n#3708 follow-up: the browser-only playground renders fixture projections and\naccepts local posts without storage or notification access. Component tests\nverify display, posting, instance isolation and reset on remount. Build assertions\nverify runtime, playground and demo exports in manifest and knowledge artifacts.\nPersistence and authorization are unchanged; existing three-dialect evidence\napplies. Route/settings/shell/provider contracts are N/A because they cannot\nprovide the parent record authorization context.\n\n## Accepted review6084422109 round 1 regressions\n\n- Invalid UUID and 51 distinct mentions: authorized actor, each SQL dialect,\n  failed create must leave zero rows for the record. Baseline failed on SQLite,\n  DuckDB and PostgreSQL; public model setter now validates before the one insert.\n- Actual SQLite CommentService notification rejection composed with the Svelte\n  submit callback: saved row remains, draft remains, alert instructs refresh and\n  checking the discussion before reposting. Baseline produced “Try again”.\n- Commands: full comments `test`, `test:postgres`, `typecheck`, `check`, `build`,\n  and Biome; evidence under `/private/tmp/smrt-track-b-evidence/3714-r1-*`.\n\n## Accepted review6084422109 round 6 persistence-key injection\n\nActor may comment on record A only; another author owns a comment on record B\nin the same tenant. Injecting B's slug/context, with and without its primary id,\nmust create a separate A row and preserve B's identity, author and body. Injected\ndatabase and constructor options must not reach persistence or alter defaults.\nReal SQLite/DuckDB/PostgreSQL baselines fail these assertions; the service now\nallowlists CreateCommentInput and generates identity with insert-only persistence.\nHydration options remain available only on the trusted model path. Full package,\nthree-dialect, type/Svelte, build and Biome evidence: `3714-round6-*` logs.\n"
+    },
+    {
+      "path": "agents/idempotent-create.md",
+      "module": "idempotent-create",
+      "content": "# Idempotent comment creation (#3941)\n\n`CommentService.create({...input, idempotencyKey})` returns a `Comment`, including\nits server-generated UUID. Keys are optional, trimmed nonempty strings of at most\n200 characters, unique within a tenant. Omitted keys retain the original create\nbehavior. The service allowlists input: identity, slug, context, executor and\nrequestDigest and retryTenantId cannot be supplied by the caller.\n\nValid UUID tenant/author identities use lowercase for equality, arbitration and\ndigest comparisons. Authorization and stored tenant/author references preserve the\ntrusted actor spelling, including existing SQLite identities. A separate nullable\n`retryTenantId` binds keyed rows to the canonical tenant; its unique index with\n`idempotencyKey` matches arbitration and retention lookup. Opaque textual tenant\nIDs remain case-sensitive, and parent record keys remain exact.\nThe trusted actor and record authorization run before every attempt, including\nreplays. A key binds the actual author, qualified parent, exact body and sorted,\ndeduplicated validated mentions. Reusing a key with different bound content throws\n`CommentIdempotencyError` with code `COMMENT_REQUEST_CONFLICT`. Replays return the\noriginal unchanged comment. A retained receipt referring to a missing or modified\ncomment throws `COMMENT_REQUEST_UNAVAILABLE`, never recreates it.\n\nThe service reuses core `runOnce` for atomic arbitration. Its fixed internal actor\n`smrt-comments.create:v1` is only an arbitration namespace: different authenticated\nauthors racing the same tenant/key must contend together. The actual author is\nbound in the separate immutable request digest. Claim insertion uses core's\nconflict-safe SQL; comment insertion uses the callback's executor and remains\ninsert-only with a random server UUID. Nullable key/digest/retry-tenant fields on Comment retain the binding after normal\ngeneric claim retention. Existing rows need no key or canonical binding.\n\nInternal lookups use parameterized queries against the resolved public\n`CommentCollection.tableName`, honoring `smrt.tableNames` deployment bindings.\nThe table identifier is quoted separately from bound values (mapping configuration\naccepts a single lowercase SQL identifier, not schema-qualified names). Lookups are\nrestricted to canonical retry tenant plus key (or exact authorized parent for\nlisting). The stored tenant must be UUID-equivalent to the authorized tenant before\nhydration in that original tenant scope; no system-context bypass is used. Lists\nmerge legacy exact-scope rows with equivalent-tenant keyed rows, deduplicate by\nserver UUID and sort by public creation timestamp with UUID as a tie-breaker. This\npreserves old unkeyed listing semantics while showing keyed replies across trusted\nactor UUID spellings. Stored tenant and author references are never rewritten.\n\nThe caller's DB must support transactions for keyed creates. Nested transaction\nsupport follows the database adapter: unsupported nested transactions fail before\nwork, rather than silently widening the supplied executor. Hosts needing atomic\ncomment/notification rollback compose the service and notification adapter with\nthe same outer transaction handle. Notification delivery happens after comment\narbitration, including on identical retries. The default messages adapter's stable\ncomment sourceRef deduplicates delivered mentions and retries missing delivery.\nArbitrary adapters must provide their own replay safety; no exactly-once external\ndelivery is promised. Without an outer transaction a delivery failure leaves the\ncomment saved, and retrying the same key is supported.\n\nThe service exposes no edit/delete lifecycle. Trusted model/collection bypasses\nmust preserve key/digest binding. Deleting both the comment and retained core\nclaim intentionally destroys retry history and is outside this contract. Do not\npurge retry history while clients may still retry. Runtime does not create schema;\napply normal SMRT migrations before using keyed creates.\n\n## Test-design contract\n\nAll rows use the authenticated author and explicit tenant context, a real supplied\nDB executor, and SQLite/DuckDB/PostgreSQL unless noted. Commands are package `test`\nand `test:postgres`; public TypeScript contract is also checked by `typecheck`.\n\n| Invariant / reachable trigger | Positive | Negative / failure | Executor / edge / level |\n| --- | --- | --- | --- |\n| Optional keyed create and retry | Same key and normalized mentions return one UUID | Empty, oversized or nonstring keys rejected before mutation | Root DB, public input, integration |\n| Immutable tenant/request binding | Different tenants may reuse key | Changed author, parent, body or mentions conflicts | Authenticated actor, public service, integration |\n| Authorization precedes replay | Authorized replay succeeds | Revoked record access or forged tenant/actor denied | Same DB, host authorization callback, integration |\n| Concurrent arbitration | Simultaneous identical creates produce one row | Competing authors/payloads yield one winner, one typed conflict | Root DB; PostgreSQL outer transactions also remain usable, integration |\n| Transaction affinity | Comment and claim use runOnce callback executor | Caller rollback removes comment, claim and composed notifications | PostgreSQL/SQLite supported nesting; DuckDB rejects unsupported nesting before writes, integration |\n| Delivery recovery | Default notifications replay once per recipient | Partial adapter failure retains comment; same-key retry finishes missing notification | Real messages adapter and supplied DB; integration |\n| Durable binding | All 16 actor/input UUID casing combinations, before/after claim retention, reuse one comment | Deleted/modified retained comment or forged canonical tenant binding is unavailable | Cold concurrent cross-case actors, unique index independent of claim, all dialects |\n| Legacy references/listing | Uppercase Tenant/User references and legacy NULL-binding rows remain usable | Another tenant/parent and differently cased opaque IDs stay isolated | Mixed legacy/keyed order and dedup; old-to-new migration repeat |\n| Persistence-option injection | Generated UUID remains server-owned | Injected id/slug/context/db/digest cannot replace another row | Existing three-dialect regression suite plus keyed case |\n\nNew additive API: baseline rejects `idempotencyKey` at the TypeScript boundary and\nignores it at runtime, creating duplicate rows. Record an executable baseline\nretry failure before final evidence. Browser behavior is unchanged; existing Svelte\nchecks/tests remain required, and a new browser flow is N/A.\n"
     }
   ],
   "recipes": [

package/dist/types.d.ts

@@ -4,6 +4,9 @@ export interface CommentOptions extends SmrtPolymorphicAssociationOptions {
     authorUserId?: string;
     body?: string;
     mentions?: readonly string[];
+    idempotencyKey?: string | null;
+    requestDigest?: string | null;
+    retryTenantId?: string | null;
 }
 /** Public service input; persistence identity and executor are server-owned. */
 export interface CreateCommentInput {
@@ -13,6 +16,8 @@ export interface CreateCommentInput {
     metaId: string;
     body: string;
     mentions?: readonly string[];
+    /** Tenant-scoped request key; identical retries return the original comment. */
+    idempotencyKey?: string;
 }
 export interface CommentMention {
     commentId: string;

package/dist/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iCAAiC,EAAE,MAAM,0BAA0B,CAAC;AAElF,MAAM,WAAW,cAAe,SAAQ,iCAAiC;IACvE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAC9B;AAED,gFAAgF;AAChF,MAAM,WAAW,kBAAkB;IACjC,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAC9B;AAED,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,eAAe,EAAE,MAAM,CAAC;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;CACd;AAED,6EAA6E;AAC7E,MAAM,WAAW,iCAAiC;IAChD,aAAa,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACvD;AAED,4EAA4E;AAC5E,MAAM,WAAW,mBAAmB;IAClC,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,mBAAoB,SAAQ,mBAAmB;IAC9D,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC;CAC5B"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iCAAiC,EAAE,MAAM,0BAA0B,CAAC;AAElF,MAAM,WAAW,cAAe,SAAQ,iCAAiC;IACvE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC7B,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC/B;AAED,gFAAgF;AAChF,MAAM,WAAW,kBAAkB;IACjC,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC7B,gFAAgF;IAChF,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,eAAe,EAAE,MAAM,CAAC;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;CACd;AAED,6EAA6E;AAC7E,MAAM,WAAW,iCAAiC;IAChD,aAAa,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACvD;AAED,4EAA4E;AAC5E,MAAM,WAAW,mBAAmB;IAClC,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,mBAAoB,SAAQ,mBAAmB;IAC9D,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC;CAC5B"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@happyvertical/smrt-comments",
-  "version": "0.55.23",
+  "version": "0.56.0",
   "description": "Record comments and mention hooks for SMRT applications",
   "type": "module",
   "main": "./dist/index.js",
@@ -24,8 +24,8 @@
     "./manifest.json": "./dist/manifest.json"
   },
   "dependencies": {
-    "@happyvertical/smrt-core": "0.55.23",
-    "@happyvertical/smrt-tenancy": "0.55.23"
+    "@happyvertical/smrt-core": "0.56.0",
+    "@happyvertical/smrt-tenancy": "0.56.0"
   },
   "peerDependencies": {
     "svelte": "^5.57.0"
@@ -43,7 +43,7 @@
     "directory": "packages/comments"
   },
   "devDependencies": {
-    "@happyvertical/smrt-vitest": "0.55.23",
+    "@happyvertical/smrt-vitest": "0.56.0",
     "@sveltejs/package": "^2.5.8",
     "@sveltejs/vite-plugin-svelte": "^7.3.0",
     "@testing-library/svelte": "^5.4.2",
@@ -53,7 +53,7 @@
     "typescript": "6.0.3",
     "vite": "8.1.4",
     "vitest": "4.1.10",
-    "@happyvertical/smrt-messages": "0.55.23"
+    "@happyvertical/smrt-messages": "0.56.0"
   },
   "scripts": {
     "build": "vite build --mode library && svelte-package -i src/svelte -o dist/svelte --tsconfig tsconfig.svelte.json && node ../../scripts/prune-svelte-package-artifacts.js dist",