@happyvertical/smrt-messages 0.55.4 → 0.55.7

package/dist/intake-snapshot.d.ts

@@ -0,0 +1,27 @@
+import type { EmailMessage } from '@happyvertical/email';
+/** Full-message byte snapshot for an already authorized, configured account. */
+export interface EmailIntakeSnapshot {
+    accountId: string;
+    messageId: string;
+    threadId: string;
+    inReplyTo: string;
+    subject: string;
+    text: string;
+    html: string;
+    date: string;
+    attachments: Array<{
+        partId: string;
+        filename: string;
+        mediaType: string;
+        bytes: Uint8Array;
+    }>;
+}
+/** Safe machine-readable snapshot failure; never contains provider error details. */
+export declare class EmailIntakeSnapshotError extends Error {
+    readonly category: 'invalid' | 'limit' | 'unavailable_bytes';
+    readonly name = "EmailIntakeSnapshotError";
+    constructor(category: 'invalid' | 'limit' | 'unavailable_bytes', message: string);
+}
+/** Copies actual provider bytes; missing bytes fail closed, never read provider-supplied paths. */
+export declare function snapshotEmailForIntake(accountId: string, message: EmailMessage, maxBytes: number): EmailIntakeSnapshot;
+//# sourceMappingURL=intake-snapshot.d.ts.map

package/dist/intake-snapshot.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"intake-snapshot.d.ts","sourceRoot":"","sources":["../src/intake-snapshot.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAEzD,gFAAgF;AAChF,MAAM,WAAW,mBAAmB;IAClC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,KAAK,CAAC;QACjB,MAAM,EAAE,MAAM,CAAC;QACf,QAAQ,EAAE,MAAM,CAAC;QACjB,SAAS,EAAE,MAAM,CAAC;QAClB,KAAK,EAAE,UAAU,CAAC;KACnB,CAAC,CAAC;CACJ;AAED,qFAAqF;AACrF,qBAAa,wBAAyB,SAAQ,KAAK;aAG/B,QAAQ,EAAE,SAAS,GAAG,OAAO,GAAG,mBAAmB;IAFrE,SAAkB,IAAI,8BAA8B;gBAElC,QAAQ,EAAE,SAAS,GAAG,OAAO,GAAG,mBAAmB,EACnE,OAAO,EAAE,MAAM;CAIlB;AAED,mGAAmG;AACnG,wBAAgB,sBAAsB,CACpC,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,YAAY,EACrB,QAAQ,EAAE,MAAM,GACf,mBAAmB,CAwDrB"}

package/dist/manifest.json

@@ -2,7 +2,7 @@
   "version": "1.0.0",
   "timestamp": 0,
   "packageName": "@happyvertical/smrt-messages",
-  "packageVersion": "0.55.4",
+  "packageVersion": "0.55.7",
   "objects": {
     "@happyvertical/smrt-messages:AccountCollection": {
       "name": "accountcollection",
@@ -4367,6 +4367,7 @@
       "className": "Blacklist",
       "qualifiedName": "@happyvertical/smrt-messages:Blacklist",
       "collection": "blacklists",
+      "description": "Block entries for email filtering",
       "filePath": "/home/runner/work/smrt/smrt/packages/messages/src/models/Blacklist.ts",
       "packageName": "@happyvertical/smrt-messages",
       "fields": {
@@ -5667,6 +5668,34 @@
           "isStatic": false,
           "isPublic": true
         },
+        "readIntakeMessage": {
+          "name": "readIntakeMessage",
+          "async": true,
+          "parameters": [
+            {
+              "name": "locator",
+              "type": "string",
+              "optional": false
+            },
+            {
+              "name": "maxBytes",
+              "type": "number",
+              "optional": false
+            },
+            {
+              "name": "imapIdentity",
+              "type": "object",
+              "optional": true,
+              "memberTypes": [
+                "string",
+                "number"
+              ]
+            }
+          ],
+          "returnType": "any",
+          "isStatic": false,
+          "isPublic": true
+        },
         "syncFrom": {
           "name": "syncFrom",
           "async": true,
@@ -10428,6 +10457,7 @@
       "className": "UserNotification",
       "qualifiedName": "@happyvertical/smrt-messages:UserNotification",
       "collection": "usernotifications",
+      "description": "One in-app notification for one person, with its own read state.",
       "filePath": "/home/runner/work/smrt/smrt/packages/messages/src/models/UserNotification.ts",
       "packageName": "@happyvertical/smrt-messages",
       "fields": {
@@ -10693,6 +10723,7 @@
       "className": "Whitelist",
       "qualifiedName": "@happyvertical/smrt-messages:Whitelist",
       "collection": "whitelists",
+      "description": "Allow-only entries for email filtering",
       "filePath": "/home/runner/work/smrt/smrt/packages/messages/src/models/Whitelist.ts",
       "packageName": "@happyvertical/smrt-messages",
       "fields": {

package/dist/models/EmailAccount.d.ts

@@ -35,6 +35,16 @@ export declare class EmailAccount extends Account {
      * '/providers/all') once during startup.
      */
     createClient(): Promise<import("@happyvertical/email").EmailClient>;
+    /**
+     * Read an immutable body/attachment-byte snapshot for an authorized intake host.
+     * Does not sync, acknowledge, mark read or advance mailbox checkpoints.
+     * Metadata-only providers fail explicitly; provider paths are never dereferenced.
+     */
+    readIntakeMessage(locator: string, maxBytes: number, imapIdentity?: {
+        folder: string;
+        uidValidity: number;
+        uid: string;
+    }): Promise<import("../intake-snapshot.js").EmailIntakeSnapshot>;
     /**
      * Sync emails from the email server to the database
      */

package/dist/models/EmailAccount.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"EmailAccount.d.ts","sourceRoot":"","sources":["../../src/models/EmailAccount.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,OAAO,yBAAyB,CAAC;AAGjC,OAAO,KAAK,EACV,mBAAmB,EACnB,sBAAsB,EAEtB,WAAW,EACX,UAAU,EACX,MAAM,aAAU,CAAC;AAClB,OAAO,EAAE,OAAO,EAAE,MAAM,cAAW,CAAC;AAEpC,qBAMa,YAAa,SAAQ,OAAO;IACvC,KAAK,SAAM;IACX,mBAAmB,SAAM;gBAEb,OAAO,GAAE,mBAAwB;IAW7C;;;;;;;OAOG;IACH,OAAO,CAAC,YAAY;IAQpB;;OAEG;IACY,YAAY,IAAI,OAAO,CAAC,sBAAsB,CAAC;IAO9D;;;;;;;;;;OAUG;IACG,YAAY;IAwBlB;;OAEG;IACG,QAAQ,CAAC,OAAO,GAAE,WAAgB,GAAG,OAAO,CAAC,UAAU,CAAC;IAuL9D;;OAEG;IACG,UAAU;IAShB;;OAEG;IACG,SAAS,CAAC,KAAK,CAAC,EAAE,MAAM;IAc9B;;OAEG;IACG,cAAc,IAAI,OAAO,CAAC,MAAM,CAAC;IAOvC;;OAEG;IACY,cAAc,CAC3B,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACpC,OAAO,GAAE;QACP,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;KACd,GACL,OAAO,CAAC,IAAI,CAAC;IAOhB;;;;;;;OAOG;IACG,OAAO,CACX,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC7B,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,KAAK,CAAA;KAAE,CAAC,CAAC;IAU5D;;OAEG;IACG,gBAAgB,IAAI,OAAO,CAAC,IAAI,CAAC;CAcxC"}
+{"version":3,"file":"EmailAccount.d.ts","sourceRoot":"","sources":["../../src/models/EmailAccount.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,OAAO,yBAAyB,CAAC;AAGjC,OAAO,KAAK,EACV,mBAAmB,EACnB,sBAAsB,EAEtB,WAAW,EACX,UAAU,EACX,MAAM,aAAU,CAAC;AAClB,OAAO,EAAE,OAAO,EAAE,MAAM,cAAW,CAAC;AAEpC,qBAMa,YAAa,SAAQ,OAAO;IACvC,KAAK,SAAM;IACX,mBAAmB,SAAM;gBAEb,OAAO,GAAE,mBAAwB;IAW7C;;;;;;;OAOG;IACH,OAAO,CAAC,YAAY;IAQpB;;OAEG;IACY,YAAY,IAAI,OAAO,CAAC,sBAAsB,CAAC;IAO9D;;;;;;;;;;OAUG;IACG,YAAY;IAwBlB;;;;OAIG;IACG,iBAAiB,CACrB,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,EAChB,YAAY,CAAC,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE;IAkCrE;;OAEG;IACG,QAAQ,CAAC,OAAO,GAAE,WAAgB,GAAG,OAAO,CAAC,UAAU,CAAC;IAuL9D;;OAEG;IACG,UAAU;IAShB;;OAEG;IACG,SAAS,CAAC,KAAK,CAAC,EAAE,MAAM;IAc9B;;OAEG;IACG,cAAc,IAAI,OAAO,CAAC,MAAM,CAAC;IAOvC;;OAEG;IACY,cAAc,CAC3B,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACpC,OAAO,GAAE;QACP,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;KACd,GACL,OAAO,CAAC,IAAI,CAAC;IAOhB;;;;;;;OAOG;IACG,OAAO,CACX,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC7B,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,KAAK,CAAA;KAAE,CAAC,CAAC;IAU5D;;OAEG;IACG,gBAAgB,IAAI,OAAO,CAAC,IAAI,CAAC;CAcxC"}

package/dist/smrt-knowledge.json

@@ -3,13 +3,13 @@
   "sensitiveFieldsExcluded": true,
   "generatedAt": "1970-01-01T00:00:00.000Z",
   "packageName": "@happyvertical/smrt-messages",
-  "packageVersion": "0.55.4",
+  "packageVersion": "0.55.7",
   "sourceManifestPath": "dist/manifest.json",
   "agentDocPath": "AGENTS.md",
   "sourceHashes": {
-    "manifest": "21b57622ac16453769255fe518d228b168510d24f960bdee31af3da0c2f6b9c3",
-    "packageJson": "1a820de28783573c2cad9cf017412611d497c90a957ed0db416c10217d105c50",
-    "agents": "36405a8a9cefd4f831381d3670572dc3489d43fbc1787fb12b70814cc1e59f34"
+    "manifest": "659c7f9d8ac03578b8941f7ed4d51bfd694d4d8935fdfc6fdc6ad2d4ba2c7ea0",
+    "packageJson": "a78822c0a563fc3c3f4f3814e7a513206b07e2a913fb6383acebc99a2a6fe50b",
+    "agents": "f2bbd8f6d74a68c2ab949153f2051c7a906bd2e4ba547873b3641d0779491c59"
   },
   "exports": [
     ".",
@@ -4563,6 +4563,7 @@
       "name": "Blacklist",
       "qualifiedName": "@happyvertical/smrt-messages:Blacklist",
       "collection": "blacklists",
+      "description": "Block entries for email filtering",
       "tableName": "blacklists",
       "packageName": "@happyvertical/smrt-messages",
       "extends": "SmrtObject",
@@ -5814,6 +5815,7 @@
         "getSettings",
         "getUnreadCount",
         "migrateToSecrets",
+        "readIntakeMessage",
         "setConfiguration",
         "setCredentials",
         "setSettings",
@@ -5877,6 +5879,16 @@
           "async": true,
           "returns": "Promise<void>"
         },
+        {
+          "name": "readIntakeMessage",
+          "async": true,
+          "params": [
+            "locator: string",
+            "maxBytes: number",
+            "imapIdentity?: object"
+          ],
+          "returns": "any"
+        },
         {
           "name": "setConfiguration",
           "params": [
@@ -6038,6 +6050,13 @@
           "reason": "not listed in api.include",
           "objectName": "@happyvertical/smrt-messages:EmailAccount"
         },
+        {
+          "kind": "api",
+          "operation": "readIntakeMessage",
+          "code": "not-included",
+          "reason": "not listed in api.include",
+          "objectName": "@happyvertical/smrt-messages:EmailAccount"
+        },
         {
           "kind": "api",
           "operation": "setConfiguration",
@@ -10141,6 +10160,7 @@
       "qualifiedName": "@happyvertical/smrt-messages:UserNotification",
       "displayLabelField": "title",
       "collection": "usernotifications",
+      "description": "One in-app notification for one person, with its own read state.",
       "tableName": "user_notifications",
       "packageName": "@happyvertical/smrt-messages",
       "extends": "SmrtObject",
@@ -10246,6 +10266,7 @@
       "name": "Whitelist",
       "qualifiedName": "@happyvertical/smrt-messages:Whitelist",
       "collection": "whitelists",
+      "description": "Allow-only entries for email filtering",
       "tableName": "whitelists",
       "packageName": "@happyvertical/smrt-messages",
       "extends": "SmrtObject",
@@ -15138,5 +15159,5 @@
     "polymorphicAssociations": 0,
     "uuidColumns": 96
   },
-  "agentDoc": "# @happyvertical/smrt-messages\n\nMulti-channel messaging with STI hierarchies for both messages and accounts. Credential encryption via smrt-secrets.\n\n## STI Hierarchies\n\n**Messages** (share `messages` table):\n- `Message` (base): accountId, personaId, endpointId, correlationId, threadId, subject, body, fromAddress, toAddresses (JSON), sendStatus (draft/sending/sent/failed), retryCount\n- `Email`: messageId (RFC 822), inReplyTo, ccAddresses, bccAddresses, htmlBody, textBody, folderId, labels, headers\n- `Tweet`: tweetId, retweetCount, likeCount, mediaUrls, hashtags, mentions\n- `SlackMessage`: channelId, slackTs, slackThreadTs, reactions, blocks\n\n**Accounts** (share `accounts` table):\n- `Account` (base): channelType, providerType, public configuration,\n  credentialSecretId, isActive, lastSyncAt, deprecated sensitive settings\n- `EmailAccount`, `TwitterAccount`, `SlackAccount`, `ZulipAccount`,\n  `TelegramAccount`: provider-specific identity/sender behavior\n\n## Persona messaging\n\n- `MessagingEndpoint`: tenant-owned, write-only destination JSON with masked\n  display helper.\n- `PersonaMessageRoute`: persona → account + endpoint, selected by purpose and\n  descending priority.\n- `PersonaMessagingService`: persists and sends through an enabled route.\n- Provider registry: public setup descriptors + optional sender factory. Keep\n  channel (`sms`) separate from provider (`twilio`).\n- Permissions: `messages.send`, `messages.manage-routes`,\n  `messages.manage-credentials`.\n- `MessagingSettingsService` is the permissioned server boundary;\n  its host-supplied `resolvePersonaTenantId` proves cross-package ownership.\n  `MessagingSettingsPanel` is the callback-driven Svelte surface.\n- Account, endpoint, and route generated surfaces are read-only. Do not add\n  generated mutations around the settings service or make secret fields writable.\n\n## In-app notifications (`UserNotification`)\n\nThe in-app channel: one stored row per person, with read state.\n`user_notifications`: `tenantId` (required), `recipientUserId`\n(`@crossPackageRef` smrt-users:User, uuid), `kind`, `title`, `body`, `href`,\n`severity` (info/success/warning/error), `sourceRef`, `occurredAt`, `readAt`,\n`dismissedAt`. Conflict identity `(tenant_id, recipient_user_id, source_ref)`.\n\n- `UserNotificationService` is the only access path: `notify()` /\n  `notifyMany()` (dedupe on `sourceRef`, existing row returned untouched;\n  a unique ref is generated when omitted), `listForUser()` / `countUnread()`\n  across explicit `tenantIds` (each read under `withTenant`), `markRead()`,\n  `dismiss()` (also marks read), `markAllRead()`. Every write filters on the\n  recipient, so another user's id matches nothing.\n- Generated REST/MCP/CLI are off (`api`/`mcp`/`cli: false`): a tenant-scoped\n  list would expose every member's rows. Hosts expose their own routes that\n  pass the signed-in user's id, never a request-chosen one.\n- Hosts decide who is told (e.g. `SocialPost.createdByUserId` for a failed\n  post). New table: consumers run `db:migrate`.\n\n## Credential Security\n\nAccount credentials stored via tenant-bound `credentialSecretId` →\nsmrt-secrets. Use `setCredentials()`/`getCredentials()` — never store passwords\ndirectly. Credential descriptor schemas contain field definitions, never values.\n\n## Send Lifecycle\n\n`message.send()`: resolves account → creates provider sender → updates sendStatus. Retry support with `maxRetries` budget.\n\n## Provider entry points (bundle boundary, #1979)\n\nThe package root is provider-neutral: models, collections, services,\npermissions, and the provider registry carry **zero provider-SDK weight**.\nProvider SDK wrappers (`@happyvertical/email`, `@happyvertical/messages`) are\nreachable only through explicit entry points, imported once at server startup:\n\n```ts\nimport '@happyvertical/smrt-messages/providers/email';   // smtp/imap/pop3/gmail\nimport '@happyvertical/smrt-messages/providers/slack';\nimport '@happyvertical/smrt-messages/providers/twitter';\nimport '@happyvertical/smrt-messages/providers/all';     // all of the above\n```\n\n- Without the matching entry, `EmailAccount.createClient()` (send + mailbox\n  sync) throws an actionable error and `SlackSender`/`TweetSender` return a\n  failure result naming the entry to import. Telegram and Zulip are\n  fetch-based and always work from the root.\n- Builtin registry definitions stay metadata-only (setup fields for UIs); the\n  entries upgrade them with `createEmailClient`/`createMessageClient`/\n  `createSender` hooks. Never import a provider SDK from any module reachable\n  from `src/index.ts` — the consumer bundle gate (`packages/bundle-gate`)\n  fails CI when one becomes reachable.\n- `Attachment.readContent()` loads `@happyvertical/files` through core's\n  `importOptionalDependency` boundary and keeps its null-on-failure contract\n  in builds where the SDK is absent.\n\n## Gotchas\n\n- **Manifest before decorators**: every decorated model imports\n  `../__smrt-register__.js`, and `package.json#sideEffects` lists\n  `./src/__smrt-register__.ts`. Without both, the library build dropped or\n  reordered the self-registration, so dist classes registered with only their\n  decorated fields and could adopt smrt-ledgers' same-named `Account` (#3098).\n- **`Account` is not unique**: smrt-ledgers also declares `Account` (on\n  `ledger_accounts`). Resolve by constructor or qualified name; the\n  coexistence tests (`ledger-account-identity-*`, and the PostgreSQL lane\n  `pnpm test:postgres`) load both packages in both orders.\n- **STI `_meta_type`**: qualified format `@happyvertical/smrt-messages:Email`\n- **JSON fields**: all address/metadata fields are JSON strings with `getX()`/`setX()` helpers\n- **RFC 822 threading**: Email uses `inReplyTo`/`messageId`/`references` — manual management required\n- **Attachment.messageId**: use this field (not `emailId`); old getter/setter mapped via deprecation wrapper\n- **Optional tenancy**: `@TenantScoped({ mode: 'optional' })` on Message, Account, Attachment\n- **Required tenancy**: endpoints and persona routes are always tenant scoped\n- **Secrets are write-only**: never serialize credentials or endpoint.address to an app\n"
+  "agentDoc": "# @happyvertical/smrt-messages\n\nMulti-channel messaging with STI hierarchies for both messages and accounts. Credential encryption via smrt-secrets.\n\n## STI Hierarchies\n\n**Messages** (share `messages` table):\n- `Message` (base): accountId, personaId, endpointId, correlationId, threadId, subject, body, fromAddress, toAddresses (JSON), sendStatus (draft/sending/sent/failed), retryCount\n- `Email`: messageId (RFC 822), inReplyTo, ccAddresses, bccAddresses, htmlBody, textBody, folderId, labels, headers\n- `Tweet`: tweetId, retweetCount, likeCount, mediaUrls, hashtags, mentions\n- `SlackMessage`: channelId, slackTs, slackThreadTs, reactions, blocks\n\n**Accounts** (share `accounts` table):\n- `Account` (base): channelType, providerType, public configuration,\n  credentialSecretId, isActive, lastSyncAt, deprecated sensitive settings\n- `EmailAccount`, `TwitterAccount`, `SlackAccount`, `ZulipAccount`,\n  `TelegramAccount`: provider-specific identity/sender behavior\n\n## Persona messaging\n\n- `MessagingEndpoint`: tenant-owned, write-only destination JSON with masked\n  display helper.\n- `PersonaMessageRoute`: persona → account + endpoint, selected by purpose and\n  descending priority.\n- `PersonaMessagingService`: persists and sends through an enabled route.\n- Provider registry: public setup descriptors + optional sender factory. Keep\n  channel (`sms`) separate from provider (`twilio`).\n- Permissions: `messages.send`, `messages.manage-routes`,\n  `messages.manage-credentials`.\n- `MessagingSettingsService` is the permissioned server boundary;\n  its host-supplied `resolvePersonaTenantId` proves cross-package ownership.\n  `MessagingSettingsPanel` is the callback-driven Svelte surface.\n- Account, endpoint, and route generated surfaces are read-only. Do not add\n  generated mutations around the settings service or make secret fields writable.\n\n## In-app notifications (`UserNotification`)\n\nThe in-app channel: one stored row per person, with read state.\n`user_notifications`: `tenantId` (required), `recipientUserId`\n(`@crossPackageRef` smrt-users:User, uuid), `kind`, `title`, `body`, `href`,\n`severity` (info/success/warning/error), `sourceRef`, `occurredAt`, `readAt`,\n`dismissedAt`. Conflict identity `(tenant_id, recipient_user_id, source_ref)`.\n\n- `UserNotificationService` is the only access path: `notify()` /\n  `notifyMany()` (dedupe on `sourceRef`, existing row returned untouched;\n  a unique ref is generated when omitted), `listForUser()` / `countUnread()`\n  across explicit `tenantIds` (each read under `withTenant`), `markRead()`,\n  `dismiss()` (also marks read), `markAllRead()`. Every write filters on the\n  recipient, so another user's id matches nothing.\n- Generated REST/MCP/CLI are off (`api`/`mcp`/`cli: false`): a tenant-scoped\n  list would expose every member's rows. Hosts expose their own routes that\n  pass the signed-in user's id, never a request-chosen one.\n- Hosts decide who is told (e.g. `SocialPost.createdByUserId` for a failed\n  post). New table: consumers run `db:migrate`.\n\n## Credential Security\n\nAccount credentials stored via tenant-bound `credentialSecretId` →\nsmrt-secrets. Use `setCredentials()`/`getCredentials()` — never store passwords\ndirectly. Credential descriptor schemas contain field definitions, never values.\n\n## Send Lifecycle\n\n`message.send()`: resolves account → creates provider sender → updates sendStatus. Retry support with `maxRetries` budget.\n\n## Provider entry points (bundle boundary, #1979)\n\nThe package root is provider-neutral: models, collections, services,\npermissions, and the provider registry carry **zero provider-SDK weight**.\nProvider SDK wrappers (`@happyvertical/email`, `@happyvertical/messages`) are\nreachable only through explicit entry points, imported once at server startup:\n\n```ts\nimport '@happyvertical/smrt-messages/providers/email';   // smtp/imap/pop3/gmail\nimport '@happyvertical/smrt-messages/providers/slack';\nimport '@happyvertical/smrt-messages/providers/twitter';\nimport '@happyvertical/smrt-messages/providers/all';     // all of the above\n```\n\n- Without the matching entry, `EmailAccount.createClient()` (send + mailbox\n  sync) throws an actionable error and `SlackSender`/`TweetSender` return a\n  failure result naming the entry to import. Telegram and Zulip are\n  fetch-based and always work from the root.\n- Builtin registry definitions stay metadata-only (setup fields for UIs); the\n  entries upgrade them with `createEmailClient`/`createMessageClient`/\n  `createSender` hooks. Never import a provider SDK from any module reachable\n  from `src/index.ts` — the consumer bundle gate (`packages/bundle-gate`)\n  fails CI when one becomes reachable.\n- `Attachment.readContent()` loads `@happyvertical/files` through core's\n  `importOptionalDependency` boundary and keeps its null-on-failure contract\n  in builds where the SDK is absent.\n\n## Gotchas\n\n- **Manifest before decorators**: every decorated model imports\n  `../__smrt-register__.js`, and `package.json#sideEffects` lists\n  `./src/__smrt-register__.ts`. Without both, the library build dropped or\n  reordered the self-registration, so dist classes registered with only their\n  decorated fields and could adopt smrt-ledgers' same-named `Account` (#3098).\n- **`Account` is not unique**: smrt-ledgers also declares `Account` (on\n  `ledger_accounts`). Resolve by constructor or qualified name; the\n  coexistence tests (`ledger-account-identity-*`, and the PostgreSQL lane\n  `pnpm test:postgres`) load both packages in both orders.\n- **STI `_meta_type`**: qualified format `@happyvertical/smrt-messages:Email`\n- **JSON fields**: all address/metadata fields are JSON strings with `getX()`/`setX()` helpers\n- **RFC 822 threading**: Email uses `inReplyTo`/`messageId`/`references` — manual management required\n- **Attachment.messageId**: use this field (not `emailId`); old getter/setter mapped via deprecation wrapper\n- **Optional tenancy**: `@TenantScoped({ mode: 'optional' })` on Message, Account, Attachment\n- **Required tenancy**: endpoints and persona routes are always tenant scoped\n- **Secrets are write-only**: never serialize credentials or endpoint.address to an app\n\n## Intake byte snapshots\n\n`EmailAccount.readIntakeMessage(providerLookup, maxBytes, imapIdentity?)` is the authorized host seam for\nopt-in ingestion. It copies full-message attachment bytes from the registered\nemail provider and fails when only attachment metadata is available; it never\nreads provider-supplied paths or advances sync checkpoints. Keep this path\nprovider-neutral and exclude arbitrary headers/credentials from its snapshot.\nIMAP lookup must include folder/UIDVALIDITY/UID verification; sender Message-ID\nis a lookup hint, never the durable delivery identity.\n"
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@happyvertical/smrt-messages",
-  "version": "0.55.4",
+  "version": "0.55.7",
   "smrtJsdoc": "strict",
   "description": "Unified multi-channel messaging with STI-based hierarchies",
   "type": "module",
@@ -58,18 +58,18 @@
     "./dist/svelte/index.js"
   ],
   "dependencies": {
-    "@happyvertical/email": "^0.102.3",
-    "@happyvertical/files": "^0.102.3",
-    "@happyvertical/logger": "^0.102.3",
-    "@happyvertical/messages": "^0.102.3",
-    "@happyvertical/smrt-core": "0.55.4",
-    "@happyvertical/smrt-types": "0.55.4",
-    "@happyvertical/smrt-secrets": "0.55.4",
-    "@happyvertical/smrt-tenancy": "0.55.4",
-    "@happyvertical/smrt-ui": "0.55.4",
-    "@happyvertical/smrt-users": "0.55.4",
-    "@happyvertical/sql": "^0.102.3",
-    "@happyvertical/utils": "^0.102.3"
+    "@happyvertical/email": "^0.102.5",
+    "@happyvertical/files": "^0.102.5",
+    "@happyvertical/logger": "^0.102.5",
+    "@happyvertical/messages": "^0.102.5",
+    "@happyvertical/smrt-core": "0.55.7",
+    "@happyvertical/smrt-types": "0.55.7",
+    "@happyvertical/smrt-secrets": "0.55.7",
+    "@happyvertical/smrt-tenancy": "0.55.7",
+    "@happyvertical/smrt-ui": "0.55.7",
+    "@happyvertical/smrt-users": "0.55.7",
+    "@happyvertical/sql": "^0.102.5",
+    "@happyvertical/utils": "^0.102.5"
   },
   "peerDependencies": {
     "@happyvertical/encryption": "*",
@@ -84,8 +84,8 @@
     }
   },
   "devDependencies": {
-    "@happyvertical/smrt-ledgers": "0.55.4",
-    "@happyvertical/smrt-vitest": "0.55.4",
+    "@happyvertical/smrt-ledgers": "0.55.7",
+    "@happyvertical/smrt-vitest": "0.55.7",
     "@sveltejs/package": "^2.5.8",
     "@sveltejs/vite-plugin-svelte": "^7.3.0",
     "@types/node": "24.13.6",