@iveri/contracts 0.15.0 → 0.16.0

package/README.md

@@ -3,6 +3,12 @@
 The wire contract every Iveri service and frontend compiles against: shared types and plain
 enums, and nothing else.
 
+Release `0.16.0` adds the Unibox realtime contract under `@iveri/contracts/unibox` —
+`RealtimeConversationEvent`, the publish body, the socket message shapes and the event-name
+constants — plus the `unibox:realtime:publish` permission. It is shared by three repos at once
+(`unibox-api` publishes, `unibox-realtime` fans out, `unibox-web` subscribes), which is exactly
+the case a hand-copied interface drifts on.
+
 ```bash
 pnpm add @iveri/contracts
 ```

package/dist/cjs/api/unibox/index.d.ts

@@ -9,5 +9,7 @@ export * from './message-content-type.enum.js';
 export * from './message-direction.enum.js';
 export * from './message-status.enum.js';
 export * from './message.type.js';
+export * from './realtime-event.enum.js';
+export * from './realtime.type.js';
 export * from './team.type.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/cjs/api/unibox/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/api/unibox/index.ts"],"names":[],"mappings":"AAAA,cAAc,wBAAwB,CAAC;AACvC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,mBAAmB,CAAC;AAClC,cAAc,mBAAmB,CAAC;AAClC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,wBAAwB,CAAC;AACvC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,gCAAgC,CAAC;AAC/C,cAAc,6BAA6B,CAAC;AAC5C,cAAc,0BAA0B,CAAC;AACzC,cAAc,mBAAmB,CAAC;AAClC,cAAc,gBAAgB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/api/unibox/index.ts"],"names":[],"mappings":"AAAA,cAAc,wBAAwB,CAAC;AACvC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,mBAAmB,CAAC;AAClC,cAAc,mBAAmB,CAAC;AAClC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,wBAAwB,CAAC;AACvC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,gCAAgC,CAAC;AAC/C,cAAc,6BAA6B,CAAC;AAC5C,cAAc,0BAA0B,CAAC;AACzC,cAAc,mBAAmB,CAAC;AAClC,cAAc,0BAA0B,CAAC;AACzC,cAAc,oBAAoB,CAAC;AACnC,cAAc,gBAAgB,CAAC"}

package/dist/cjs/api/unibox/index.js

@@ -25,5 +25,7 @@ __exportStar(require("./message-content-type.enum.js"), exports);
 __exportStar(require("./message-direction.enum.js"), exports);
 __exportStar(require("./message-status.enum.js"), exports);
 __exportStar(require("./message.type.js"), exports);
+__exportStar(require("./realtime-event.enum.js"), exports);
+__exportStar(require("./realtime.type.js"), exports);
 __exportStar(require("./team.type.js"), exports);
 //# sourceMappingURL=index.js.map

package/dist/cjs/api/unibox/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/api/unibox/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,yDAAuC;AACvC,6DAA2C;AAC3C,oDAAkC;AAClC,oDAAkC;AAClC,gEAA8C;AAC9C,yDAAuC;AACvC,gEAA8C;AAC9C,iEAA+C;AAC/C,8DAA4C;AAC5C,2DAAyC;AACzC,oDAAkC;AAClC,iDAA+B"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/api/unibox/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,yDAAuC;AACvC,6DAA2C;AAC3C,oDAAkC;AAClC,oDAAkC;AAClC,gEAA8C;AAC9C,yDAAuC;AACvC,gEAA8C;AAC9C,iEAA+C;AAC/C,8DAA4C;AAC5C,2DAAyC;AACzC,oDAAkC;AAClC,2DAAyC;AACzC,qDAAmC;AACnC,iDAA+B"}

package/dist/cjs/api/unibox/realtime-event.enum.d.ts

@@ -0,0 +1,24 @@
+/**
+ * What happened to a conversation, as told to a live subscriber.
+ *
+ * Deliberately a small closed set rather than a free-form string. A subscriber decides what to
+ * refetch from the event name, so an unrecognised one means either doing nothing — a live inbox
+ * that silently stops updating — or refetching everything, which is a stampede triggered by
+ * whatever a publisher felt like sending.
+ *
+ * **These are notifications, not state.** The payload carries identifiers, never the message
+ * body or the contact's details: an event is a prompt to read from `unibox-api`, which is the
+ * only thing that can answer for what the reader is allowed to see. That also keeps a missed
+ * event harmless — the next read is correct regardless.
+ */
+export declare enum RealtimeConversationEvent {
+    /** A message was appended. The reader refetches the conversation's messages. */
+    MESSAGE_CREATED = "message.created",
+    /** A message's delivery status moved — sent, delivered, read, failed. */
+    MESSAGE_STATUS_CHANGED = "message.status-changed",
+    /** Status, unread count, or another conversation-level field changed. */
+    CONVERSATION_UPDATED = "conversation.updated",
+    /** The conversation moved to another agent or team, or a human took over from the AI. */
+    CONVERSATION_ASSIGNED = "conversation.assigned"
+}
+//# sourceMappingURL=realtime-event.enum.d.ts.map

package/dist/cjs/api/unibox/realtime-event.enum.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"realtime-event.enum.d.ts","sourceRoot":"","sources":["../../../../src/api/unibox/realtime-event.enum.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,oBAAY,yBAAyB;IACjC,gFAAgF;IAChF,eAAe,oBAAoB;IACnC,yEAAyE;IACzE,sBAAsB,2BAA2B;IACjD,yEAAyE;IACzE,oBAAoB,yBAAyB;IAC7C,yFAAyF;IACzF,qBAAqB,0BAA0B;CAClD"}

package/dist/cjs/api/unibox/realtime-event.enum.js

@@ -0,0 +1,28 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RealtimeConversationEvent = void 0;
+/**
+ * What happened to a conversation, as told to a live subscriber.
+ *
+ * Deliberately a small closed set rather than a free-form string. A subscriber decides what to
+ * refetch from the event name, so an unrecognised one means either doing nothing — a live inbox
+ * that silently stops updating — or refetching everything, which is a stampede triggered by
+ * whatever a publisher felt like sending.
+ *
+ * **These are notifications, not state.** The payload carries identifiers, never the message
+ * body or the contact's details: an event is a prompt to read from `unibox-api`, which is the
+ * only thing that can answer for what the reader is allowed to see. That also keeps a missed
+ * event harmless — the next read is correct regardless.
+ */
+var RealtimeConversationEvent;
+(function (RealtimeConversationEvent) {
+    /** A message was appended. The reader refetches the conversation's messages. */
+    RealtimeConversationEvent["MESSAGE_CREATED"] = "message.created";
+    /** A message's delivery status moved — sent, delivered, read, failed. */
+    RealtimeConversationEvent["MESSAGE_STATUS_CHANGED"] = "message.status-changed";
+    /** Status, unread count, or another conversation-level field changed. */
+    RealtimeConversationEvent["CONVERSATION_UPDATED"] = "conversation.updated";
+    /** The conversation moved to another agent or team, or a human took over from the AI. */
+    RealtimeConversationEvent["CONVERSATION_ASSIGNED"] = "conversation.assigned";
+})(RealtimeConversationEvent || (exports.RealtimeConversationEvent = RealtimeConversationEvent = {}));
+//# sourceMappingURL=realtime-event.enum.js.map

package/dist/cjs/api/unibox/realtime-event.enum.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"realtime-event.enum.js","sourceRoot":"","sources":["../../../../src/api/unibox/realtime-event.enum.ts"],"names":[],"mappings":";;;AAAA;;;;;;;;;;;;GAYG;AACH,IAAY,yBASX;AATD,WAAY,yBAAyB;IACjC,gFAAgF;IAChF,gEAAmC,CAAA;IACnC,yEAAyE;IACzE,8EAAiD,CAAA;IACjD,yEAAyE;IACzE,0EAA6C,CAAA;IAC7C,yFAAyF;IACzF,4EAA+C,CAAA;AACnD,CAAC,EATW,yBAAyB,yCAAzB,yBAAyB,QASpC"}

package/dist/cjs/api/unibox/realtime.type.d.ts

@@ -0,0 +1,83 @@
+import type { UUID } from '../../type/uuid.type.js';
+import type { RealtimeConversationEvent } from './realtime-event.enum.js';
+/** Socket.IO event names a client sends. */
+export declare const REALTIME_CLIENT_EVENT: {
+    readonly SUBSCRIBE: "realtime.subscribe";
+};
+/** Socket.IO event names a client receives. */
+export declare const REALTIME_SERVER_EVENT: {
+    readonly READY: "realtime.ready";
+    readonly SUBSCRIBED: "realtime.subscribed";
+    readonly CONVERSATION_UPDATED: "conversation.updated";
+    readonly ERROR: "realtime.error";
+};
+/** Bumped when a message shape changes incompatibly; the server announces it on connect. */
+export declare const REALTIME_PROTOCOL_VERSION = 1;
+/** Most conversations a single socket may watch. */
+export declare const MAX_REALTIME_SUBSCRIPTIONS_PER_SOCKET = 100;
+/** Largest serialized event, in bytes. */
+export declare const MAX_REALTIME_EVENT_BYTES: number;
+/** Longest event name accepted from a publisher. */
+export declare const MAX_REALTIME_EVENT_NAME_LENGTH = 128;
+/**
+ * The body a publishing service POSTs to `unibox-realtime`.
+ *
+ * **There is no `tenantId` field, and that absence is the security model.** The tenant comes
+ * from the publisher's own access token, so a compromised or buggy publisher cannot address
+ * another tenant's subscribers — it can only ever reach its own. A body field would make
+ * cross-tenant delivery a validation rule someone has to remember to write.
+ */
+export interface PublishConversationEventBody {
+    conversationId: UUID;
+    event: RealtimeConversationEvent;
+    /** Identifiers only. Never message content — see {@link RealtimeConversationEvent}. */
+    payload: Record<string, unknown>;
+}
+/** `unibox-realtime`'s answer to a publish. */
+export interface PublishConversationEventResponse {
+    /**
+     * Whether the event was accepted for fan-out.
+     *
+     * Never whether anyone received it. With the Redis adapter no single process knows that, and
+     * a publisher that waited to find out would be blocking a write on how many browsers happen
+     * to be open.
+     */
+    accepted: boolean;
+}
+/** Sent to a client once its token verifies. */
+export interface RealtimeReadyMessage {
+    protocolVersion: typeof REALTIME_PROTOCOL_VERSION;
+}
+/** What a client asks to watch. */
+export interface RealtimeSubscribeRequest {
+    conversationIds: UUID[];
+}
+/** The full set a socket is watching after a subscribe, not just the delta. */
+export interface RealtimeSubscribedMessage {
+    conversationIds: UUID[];
+}
+export interface RealtimeErrorMessage {
+    code: 'UNAUTHENTICATED' | 'FORBIDDEN' | 'INVALID_SUBSCRIPTION' | 'PAYLOAD_TOO_LARGE';
+    message: string;
+}
+/**
+ * What a subscribed client receives.
+ *
+ * **No tenant id.** The subscriber proved its own tenant to enter the room, so echoing it back
+ * says nothing it does not know and puts another tenant's identifier one bug away from a socket
+ * that must never see it.
+ */
+export interface ConversationUpdatedMessage {
+    conversationId: UUID;
+    event: RealtimeConversationEvent;
+    payload: Record<string, unknown>;
+}
+/** Acknowledgement returned to a client's `subscribe` call. */
+export type RealtimeSubscriptionAck = {
+    ok: true;
+    message: RealtimeSubscribedMessage;
+} | {
+    ok: false;
+    message: RealtimeErrorMessage;
+};
+//# sourceMappingURL=realtime.type.d.ts.map

package/dist/cjs/api/unibox/realtime.type.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"realtime.type.d.ts","sourceRoot":"","sources":["../../../../src/api/unibox/realtime.type.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,yBAAyB,CAAC;AAEpD,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,0BAA0B,CAAC;AAE1E,4CAA4C;AAC5C,eAAO,MAAM,qBAAqB;;CAExB,CAAC;AAEX,+CAA+C;AAC/C,eAAO,MAAM,qBAAqB;;;;;CAKxB,CAAC;AAEX,4FAA4F;AAC5F,eAAO,MAAM,yBAAyB,IAAI,CAAC;AAE3C,oDAAoD;AACpD,eAAO,MAAM,qCAAqC,MAAM,CAAC;AAEzD,0CAA0C;AAC1C,eAAO,MAAM,wBAAwB,QAAY,CAAC;AAElD,oDAAoD;AACpD,eAAO,MAAM,8BAA8B,MAAM,CAAC;AAElD;;;;;;;GAOG;AACH,MAAM,WAAW,4BAA4B;IACzC,cAAc,EAAE,IAAI,CAAC;IACrB,KAAK,EAAE,yBAAyB,CAAC;IACjC,uFAAuF;IACvF,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED,+CAA+C;AAC/C,MAAM,WAAW,gCAAgC;IAC7C;;;;;;OAMG;IACH,QAAQ,EAAE,OAAO,CAAC;CACrB;AAED,gDAAgD;AAChD,MAAM,WAAW,oBAAoB;IACjC,eAAe,EAAE,OAAO,yBAAyB,CAAC;CACrD;AAED,mCAAmC;AACnC,MAAM,WAAW,wBAAwB;IACrC,eAAe,EAAE,IAAI,EAAE,CAAC;CAC3B;AAED,+EAA+E;AAC/E,MAAM,WAAW,yBAAyB;IACtC,eAAe,EAAE,IAAI,EAAE,CAAC;CAC3B;AAED,MAAM,WAAW,oBAAoB;IACjC,IAAI,EAAE,iBAAiB,GAAG,WAAW,GAAG,sBAAsB,GAAG,mBAAmB,CAAC;IACrF,OAAO,EAAE,MAAM,CAAC;CACnB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,0BAA0B;IACvC,cAAc,EAAE,IAAI,CAAC;IACrB,KAAK,EAAE,yBAAyB,CAAC;IACjC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED,+DAA+D;AAC/D,MAAM,MAAM,uBAAuB,GAC/B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,OAAO,EAAE,yBAAyB,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,OAAO,EAAE,oBAAoB,CAAA;CAAE,CAAC"}

package/dist/cjs/api/unibox/realtime.type.js

@@ -0,0 +1,23 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MAX_REALTIME_EVENT_NAME_LENGTH = exports.MAX_REALTIME_EVENT_BYTES = exports.MAX_REALTIME_SUBSCRIPTIONS_PER_SOCKET = exports.REALTIME_PROTOCOL_VERSION = exports.REALTIME_SERVER_EVENT = exports.REALTIME_CLIENT_EVENT = void 0;
+/** Socket.IO event names a client sends. */
+exports.REALTIME_CLIENT_EVENT = {
+    SUBSCRIBE: 'realtime.subscribe',
+};
+/** Socket.IO event names a client receives. */
+exports.REALTIME_SERVER_EVENT = {
+    READY: 'realtime.ready',
+    SUBSCRIBED: 'realtime.subscribed',
+    CONVERSATION_UPDATED: 'conversation.updated',
+    ERROR: 'realtime.error',
+};
+/** Bumped when a message shape changes incompatibly; the server announces it on connect. */
+exports.REALTIME_PROTOCOL_VERSION = 1;
+/** Most conversations a single socket may watch. */
+exports.MAX_REALTIME_SUBSCRIPTIONS_PER_SOCKET = 100;
+/** Largest serialized event, in bytes. */
+exports.MAX_REALTIME_EVENT_BYTES = 64 * 1024;
+/** Longest event name accepted from a publisher. */
+exports.MAX_REALTIME_EVENT_NAME_LENGTH = 128;
+//# sourceMappingURL=realtime.type.js.map

package/dist/cjs/api/unibox/realtime.type.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"realtime.type.js","sourceRoot":"","sources":["../../../../src/api/unibox/realtime.type.ts"],"names":[],"mappings":";;;AAIA,4CAA4C;AAC/B,QAAA,qBAAqB,GAAG;IACjC,SAAS,EAAE,oBAAoB;CACzB,CAAC;AAEX,+CAA+C;AAClC,QAAA,qBAAqB,GAAG;IACjC,KAAK,EAAE,gBAAgB;IACvB,UAAU,EAAE,qBAAqB;IACjC,oBAAoB,EAAE,sBAAsB;IAC5C,KAAK,EAAE,gBAAgB;CACjB,CAAC;AAEX,4FAA4F;AAC/E,QAAA,yBAAyB,GAAG,CAAC,CAAC;AAE3C,oDAAoD;AACvC,QAAA,qCAAqC,GAAG,GAAG,CAAC;AAEzD,0CAA0C;AAC7B,QAAA,wBAAwB,GAAG,EAAE,GAAG,IAAI,CAAC;AAElD,oDAAoD;AACvC,QAAA,8BAA8B,GAAG,GAAG,CAAC"}

package/dist/cjs/enum/user-permission.enum.d.ts

@@ -190,6 +190,19 @@ export declare enum UserPermission {
     UNIBOX_CANNED_REPLY_READ = "unibox:canned-reply:read",
     /** Author the saved replies every agent in the tenant will send. */
     UNIBOX_CANNED_REPLY_MANAGE = "unibox:canned-reply:manage",
+    /**
+     * Publish a conversation event into the live inbox.
+     *
+     * **A service permission, not a human one**, and deliberately absent from the seeded `ADMIN`
+     * role — unlike `CONDUIT_DISPATCH_SEND`, which an admin holds so they can prove a connection
+     * works. There is no equivalent thing to prove here: publishing means putting a message in
+     * front of every agent watching a conversation, so the only legitimate holder is the service
+     * that owns what actually happened to that conversation.
+     *
+     * Reading the live stream is `UNIBOX_CONVERSATION_READ` — the same permission that guards
+     * reading the inbox over HTTP, because it is the same data arriving by another route.
+     */
+    UNIBOX_REALTIME_PUBLISH = "unibox:realtime:publish",
     /** Allows a trusted service principal to submit bounded conversation context for generation. */
     UNIBOX_AI_RUN = "unibox:ai:run",
     /** Read tenant MCP server metadata; credential values are never returned. */

package/dist/cjs/enum/user-permission.enum.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"user-permission.enum.d.ts","sourceRoot":"","sources":["../../../src/enum/user-permission.enum.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,oBAAY,cAAc;IAItB,WAAW,gBAAgB;IAC3B,aAAa,kBAAkB;IAC/B,sFAAsF;IACtF,aAAa,kBAAkB;IAG/B,SAAS,cAAc;IACvB,WAAW,gBAAgB;IAC3B,WAAW,gBAAgB;IAC3B,WAAW,gBAAgB;IAG3B,eAAe,oBAAoB;IACnC,6EAA6E;IAC7E,iBAAiB,sBAAsB;IACvC;;;OAGG;IACH,sBAAsB,2BAA2B;IAGjD,SAAS,cAAc;IACvB,WAAW,gBAAgB;IAC3B,WAAW,gBAAgB;IAC3B,WAAW,gBAAgB;IAG3B,YAAY,iBAAiB;IAC7B,aAAa,kBAAkB;IAC/B,cAAc,mBAAmB;IAKjC,qEAAqE;IACrE,qBAAqB,0BAA0B;IAC/C,uBAAuB,4BAA4B;IACnD,uBAAuB,4BAA4B;IACnD,uBAAuB,4BAA4B;IAGnD;;;;OAIG;IACH,oBAAoB,yBAAyB;IAC7C,sBAAsB,2BAA2B;IAGjD;;;;OAIG;IACH,sBAAsB,2BAA2B;IAGjD,qBAAqB,0BAA0B;IAC/C,yFAAyF;IACzF,uBAAuB,4BAA4B;IAGnD,mEAAmE;IACnE,wBAAwB,6BAA6B;IACrD;;;;;;;OAOG;IACH,0BAA0B,+BAA+B;IAGzD,kBAAkB,uBAAuB;IACzC,2DAA2D;IAC3D,oBAAoB,yBAAyB;IAG7C;;;;;OAKG;IACH,qBAAqB,0BAA0B;IAC/C;;;;;;OAMG;IACH,wBAAwB,6BAA6B;IAGrD,wFAAwF;IACxF,sBAAsB,2BAA2B;IACjD;;;;;;;;OAQG;IACH,wBAAwB,6BAA6B;IAGrD,sEAAsE;IACtE,uBAAuB,4BAA4B;IACnD;;;;;OAKG;IACH,yBAAyB,8BAA8B;IAGvD;;;;;OAKG;IACH,qBAAqB,0BAA0B;IAC/C;;;;;;;OAOG;IACH,qBAAqB,0BAA0B;IAC/C,qEAAqE;IACrE,wBAAwB,6BAA6B;IAKrD,4EAA4E;IAC5E,qBAAqB,0BAA0B;IAC/C,yEAAyE;IACzE,uBAAuB,4BAA4B;IAInD,iEAAiE;IACjE,sBAAsB,2BAA2B;IACjD,mDAAmD;IACnD,sBAAsB,2BAA2B;IACjD,qEAAqE;IACrE,kBAAkB,uBAAuB;IACzC,uEAAuE;IACvE,qBAAqB,0BAA0B;IAC/C,yFAAyF;IACzF,uBAAuB,4BAA4B;IAKnD,kFAAkF;IAClF,mBAAmB,wBAAwB;IAC3C;;;;;;OAMG;IACH,qBAAqB,0BAA0B;IAG/C,2FAA2F;IAC3F,mBAAmB,wBAAwB;IAC3C,gDAAgD;IAChD,qBAAqB,0BAA0B;IAG/C;;;;;;;OAOG;IACH,wBAAwB,6BAA6B;IACrD,yFAAyF;IACzF,0BAA0B,+BAA+B;IACzD;;;;;;OAMG;IACH,0BAA0B,+BAA+B;IAGzD;;;;;;OAMG;IACH,mBAAmB,wBAAwB;IAG3C,gBAAgB,qBAAqB;IACrC,8FAA8F;IAC9F,kBAAkB,uBAAuB;IAGzC,wBAAwB,6BAA6B;IACrD,oEAAoE;IACpE,0BAA0B,+BAA+B;IAGzD,gGAAgG;IAChG,aAAa,kBAAkB;IAG/B,6EAA6E;IAC7E,eAAe,oBAAoB;IACnC,wDAAwD;IACxD,iBAAiB,sBAAsB;IAKvC,8CAA8C;IAC9C,iBAAiB,sBAAsB;IACvC,sDAAsD;IACtD,mBAAmB,wBAAwB;IAG3C,6DAA6D;IAC7D,yBAAyB,8BAA8B;IACvD,qDAAqD;IACrD,2BAA2B,gCAAgC;IAG3D,yCAAyC;IACzC,kBAAkB,uBAAuB;IACzC,2DAA2D;IAC3D,oBAAoB,yBAAyB;IAG7C,+DAA+D;IAC/D,oBAAoB,yBAAyB;IAC7C,+EAA+E;IAC/E,sBAAsB,2BAA2B;IAGjD,2DAA2D;IAC3D,oBAAoB,yBAAyB;IAC7C,gDAAgD;IAChD,sBAAsB,2BAA2B;CACpD;AAED;;;;;GAKG;AACH,eAAO,MAAM,oBAAoB,EAAE,SAAS,cAAc,EAAiD,CAAC"}
+{"version":3,"file":"user-permission.enum.d.ts","sourceRoot":"","sources":["../../../src/enum/user-permission.enum.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,oBAAY,cAAc;IAItB,WAAW,gBAAgB;IAC3B,aAAa,kBAAkB;IAC/B,sFAAsF;IACtF,aAAa,kBAAkB;IAG/B,SAAS,cAAc;IACvB,WAAW,gBAAgB;IAC3B,WAAW,gBAAgB;IAC3B,WAAW,gBAAgB;IAG3B,eAAe,oBAAoB;IACnC,6EAA6E;IAC7E,iBAAiB,sBAAsB;IACvC;;;OAGG;IACH,sBAAsB,2BAA2B;IAGjD,SAAS,cAAc;IACvB,WAAW,gBAAgB;IAC3B,WAAW,gBAAgB;IAC3B,WAAW,gBAAgB;IAG3B,YAAY,iBAAiB;IAC7B,aAAa,kBAAkB;IAC/B,cAAc,mBAAmB;IAKjC,qEAAqE;IACrE,qBAAqB,0BAA0B;IAC/C,uBAAuB,4BAA4B;IACnD,uBAAuB,4BAA4B;IACnD,uBAAuB,4BAA4B;IAGnD;;;;OAIG;IACH,oBAAoB,yBAAyB;IAC7C,sBAAsB,2BAA2B;IAGjD;;;;OAIG;IACH,sBAAsB,2BAA2B;IAGjD,qBAAqB,0BAA0B;IAC/C,yFAAyF;IACzF,uBAAuB,4BAA4B;IAGnD,mEAAmE;IACnE,wBAAwB,6BAA6B;IACrD;;;;;;;OAOG;IACH,0BAA0B,+BAA+B;IAGzD,kBAAkB,uBAAuB;IACzC,2DAA2D;IAC3D,oBAAoB,yBAAyB;IAG7C;;;;;OAKG;IACH,qBAAqB,0BAA0B;IAC/C;;;;;;OAMG;IACH,wBAAwB,6BAA6B;IAGrD,wFAAwF;IACxF,sBAAsB,2BAA2B;IACjD;;;;;;;;OAQG;IACH,wBAAwB,6BAA6B;IAGrD,sEAAsE;IACtE,uBAAuB,4BAA4B;IACnD;;;;;OAKG;IACH,yBAAyB,8BAA8B;IAGvD;;;;;OAKG;IACH,qBAAqB,0BAA0B;IAC/C;;;;;;;OAOG;IACH,qBAAqB,0BAA0B;IAC/C,qEAAqE;IACrE,wBAAwB,6BAA6B;IAKrD,4EAA4E;IAC5E,qBAAqB,0BAA0B;IAC/C,yEAAyE;IACzE,uBAAuB,4BAA4B;IAInD,iEAAiE;IACjE,sBAAsB,2BAA2B;IACjD,mDAAmD;IACnD,sBAAsB,2BAA2B;IACjD,qEAAqE;IACrE,kBAAkB,uBAAuB;IACzC,uEAAuE;IACvE,qBAAqB,0BAA0B;IAC/C,yFAAyF;IACzF,uBAAuB,4BAA4B;IAKnD,kFAAkF;IAClF,mBAAmB,wBAAwB;IAC3C;;;;;;OAMG;IACH,qBAAqB,0BAA0B;IAG/C,2FAA2F;IAC3F,mBAAmB,wBAAwB;IAC3C,gDAAgD;IAChD,qBAAqB,0BAA0B;IAG/C;;;;;;;OAOG;IACH,wBAAwB,6BAA6B;IACrD,yFAAyF;IACzF,0BAA0B,+BAA+B;IACzD;;;;;;OAMG;IACH,0BAA0B,+BAA+B;IAGzD;;;;;;OAMG;IACH,mBAAmB,wBAAwB;IAG3C,gBAAgB,qBAAqB;IACrC,8FAA8F;IAC9F,kBAAkB,uBAAuB;IAGzC,wBAAwB,6BAA6B;IACrD,oEAAoE;IACpE,0BAA0B,+BAA+B;IAGzD;;;;;;;;;;;OAWG;IACH,uBAAuB,4BAA4B;IAGnD,gGAAgG;IAChG,aAAa,kBAAkB;IAG/B,6EAA6E;IAC7E,eAAe,oBAAoB;IACnC,wDAAwD;IACxD,iBAAiB,sBAAsB;IAKvC,8CAA8C;IAC9C,iBAAiB,sBAAsB;IACvC,sDAAsD;IACtD,mBAAmB,wBAAwB;IAG3C,6DAA6D;IAC7D,yBAAyB,8BAA8B;IACvD,qDAAqD;IACrD,2BAA2B,gCAAgC;IAG3D,yCAAyC;IACzC,kBAAkB,uBAAuB;IACzC,2DAA2D;IAC3D,oBAAoB,yBAAyB;IAG7C,+DAA+D;IAC/D,oBAAoB,yBAAyB;IAC7C,+EAA+E;IAC/E,sBAAsB,2BAA2B;IAGjD,2DAA2D;IAC3D,oBAAoB,yBAAyB;IAC7C,gDAAgD;IAChD,sBAAsB,2BAA2B;CACpD;AAED;;;;;GAKG;AACH,eAAO,MAAM,oBAAoB,EAAE,SAAS,cAAc,EAAiD,CAAC"}

package/dist/cjs/enum/user-permission.enum.js

@@ -221,6 +221,20 @@ var UserPermission;
     UserPermission["UNIBOX_CANNED_REPLY_READ"] = "unibox:canned-reply:read";
     /** Author the saved replies every agent in the tenant will send. */
     UserPermission["UNIBOX_CANNED_REPLY_MANAGE"] = "unibox:canned-reply:manage";
+    // ── Realtime ────────────────────────────────────────────────────────────
+    /**
+     * Publish a conversation event into the live inbox.
+     *
+     * **A service permission, not a human one**, and deliberately absent from the seeded `ADMIN`
+     * role — unlike `CONDUIT_DISPATCH_SEND`, which an admin holds so they can prove a connection
+     * works. There is no equivalent thing to prove here: publishing means putting a message in
+     * front of every agent watching a conversation, so the only legitimate holder is the service
+     * that owns what actually happened to that conversation.
+     *
+     * Reading the live stream is `UNIBOX_CONVERSATION_READ` — the same permission that guards
+     * reading the inbox over HTTP, because it is the same data arriving by another route.
+     */
+    UserPermission["UNIBOX_REALTIME_PUBLISH"] = "unibox:realtime:publish";
     // ── AI runtime ──────────────────────────────────────────────────────────
     /** Allows a trusted service principal to submit bounded conversation context for generation. */
     UserPermission["UNIBOX_AI_RUN"] = "unibox:ai:run";

package/dist/cjs/enum/user-permission.enum.js.map

@@ -1 +1 @@
-{"version":3,"file":"user-permission.enum.js","sourceRoot":"","sources":["../../../src/enum/user-permission.enum.ts"],"names":[],"mappings":";;;AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,IAAY,cA8QX;AA9QD,WAAY,cAAc;IACtB,4EAA4E;IAE5E,2EAA2E;IAC3E,6CAA2B,CAAA;IAC3B,iDAA+B,CAAA;IAC/B,sFAAsF;IACtF,iDAA+B,CAAA;IAE/B,2EAA2E;IAC3E,yCAAuB,CAAA;IACvB,6CAA2B,CAAA;IAC3B,6CAA2B,CAAA;IAC3B,6CAA2B,CAAA;IAE3B,2EAA2E;IAC3E,qDAAmC,CAAA;IACnC,6EAA6E;IAC7E,yDAAuC,CAAA;IACvC;;;OAGG;IACH,mEAAiD,CAAA;IAEjD,2EAA2E;IAC3E,yCAAuB,CAAA;IACvB,6CAA2B,CAAA;IAC3B,6CAA2B,CAAA;IAC3B,6CAA2B,CAAA;IAE3B,2EAA2E;IAC3E,+CAA6B,CAAA;IAC7B,iDAA+B,CAAA;IAC/B,mDAAiC,CAAA;IAEjC,4EAA4E;IAE5E,2EAA2E;IAC3E,qEAAqE;IACrE,iEAA+C,CAAA;IAC/C,qEAAmD,CAAA;IACnD,qEAAmD,CAAA;IACnD,qEAAmD,CAAA;IAEnD,2EAA2E;IAC3E;;;;OAIG;IACH,+DAA6C,CAAA;IAC7C,mEAAiD,CAAA;IAEjD,2EAA2E;IAC3E;;;;OAIG;IACH,mEAAiD,CAAA;IAEjD,2EAA2E;IAC3E,iEAA+C,CAAA;IAC/C,yFAAyF;IACzF,qEAAmD,CAAA;IAEnD,2EAA2E;IAC3E,mEAAmE;IACnE,uEAAqD,CAAA;IACrD;;;;;;;OAOG;IACH,2EAAyD,CAAA;IAEzD,2EAA2E;IAC3E,2DAAyC,CAAA;IACzC,2DAA2D;IAC3D,+DAA6C,CAAA;IAE7C,2EAA2E;IAC3E;;;;;OAKG;IACH,iEAA+C,CAAA;IAC/C;;;;;;OAMG;IACH,uEAAqD,CAAA;IAErD,2EAA2E;IAC3E,wFAAwF;IACxF,mEAAiD,CAAA;IACjD;;;;;;;;OAQG;IACH,uEAAqD,CAAA;IAErD,2EAA2E;IAC3E,sEAAsE;IACtE,qEAAmD,CAAA;IACnD;;;;;OAKG;IACH,yEAAuD,CAAA;IAEvD,2EAA2E;IAC3E;;;;;OAKG;IACH,iEAA+C,CAAA;IAC/C;;;;;;;OAOG;IACH,iEAA+C,CAAA;IAC/C,qEAAqE;IACrE,uEAAqD,CAAA;IAErD,4EAA4E;IAE5E,2EAA2E;IAC3E,4EAA4E;IAC5E,iEAA+C,CAAA;IAC/C,yEAAyE;IACzE,qEAAmD,CAAA;IAEnD,2EAA2E;IAE3E,iEAAiE;IACjE,mEAAiD,CAAA;IACjD,mDAAmD;IACnD,mEAAiD,CAAA;IACjD,qEAAqE;IACrE,2DAAyC,CAAA;IACzC,uEAAuE;IACvE,iEAA+C,CAAA;IAC/C,yFAAyF;IACzF,qEAAmD,CAAA;IAEnD,4EAA4E;IAE5E,2EAA2E;IAC3E,kFAAkF;IAClF,6DAA2C,CAAA;IAC3C;;;;;;OAMG;IACH,iEAA+C,CAAA;IAE/C,2EAA2E;IAC3E,2FAA2F;IAC3F,6DAA2C,CAAA;IAC3C,gDAAgD;IAChD,iEAA+C,CAAA;IAE/C,2EAA2E;IAC3E;;;;;;;OAOG;IACH,uEAAqD,CAAA;IACrD,yFAAyF;IACzF,2EAAyD,CAAA;IACzD;;;;;;OAMG;IACH,2EAAyD,CAAA;IAEzD,2EAA2E;IAC3E;;;;;;OAMG;IACH,6DAA2C,CAAA;IAE3C,2EAA2E;IAC3E,uDAAqC,CAAA;IACrC,8FAA8F;IAC9F,2DAAyC,CAAA;IAEzC,2EAA2E;IAC3E,uEAAqD,CAAA;IACrD,oEAAoE;IACpE,2EAAyD,CAAA;IAEzD,2EAA2E;IAC3E,gGAAgG;IAChG,iDAA+B,CAAA;IAE/B,2EAA2E;IAC3E,6EAA6E;IAC7E,qDAAmC,CAAA;IACnC,wDAAwD;IACxD,yDAAuC,CAAA;IAEvC,2EAA2E;IAE3E,0EAA0E;IAC1E,8CAA8C;IAC9C,yDAAuC,CAAA;IACvC,sDAAsD;IACtD,6DAA2C,CAAA;IAE3C,yEAAyE;IACzE,6DAA6D;IAC7D,yEAAuD,CAAA;IACvD,qDAAqD;IACrD,6EAA2D,CAAA;IAE3D,0EAA0E;IAC1E,yCAAyC;IACzC,2DAAyC,CAAA;IACzC,2DAA2D;IAC3D,+DAA6C,CAAA;IAE7C,0EAA0E;IAC1E,+DAA+D;IAC/D,+DAA6C,CAAA;IAC7C,+EAA+E;IAC/E,mEAAiD,CAAA;IAEjD,0EAA0E;IAC1E,2DAA2D;IAC3D,+DAA6C,CAAA;IAC7C,gDAAgD;IAChD,mEAAiD,CAAA;AACrD,CAAC,EA9QW,cAAc,8BAAd,cAAc,QA8QzB;AAED;;;;;GAKG;AACU,QAAA,oBAAoB,GAA8B,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC"}
+{"version":3,"file":"user-permission.enum.js","sourceRoot":"","sources":["../../../src/enum/user-permission.enum.ts"],"names":[],"mappings":";;;AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,IAAY,cA6RX;AA7RD,WAAY,cAAc;IACtB,4EAA4E;IAE5E,2EAA2E;IAC3E,6CAA2B,CAAA;IAC3B,iDAA+B,CAAA;IAC/B,sFAAsF;IACtF,iDAA+B,CAAA;IAE/B,2EAA2E;IAC3E,yCAAuB,CAAA;IACvB,6CAA2B,CAAA;IAC3B,6CAA2B,CAAA;IAC3B,6CAA2B,CAAA;IAE3B,2EAA2E;IAC3E,qDAAmC,CAAA;IACnC,6EAA6E;IAC7E,yDAAuC,CAAA;IACvC;;;OAGG;IACH,mEAAiD,CAAA;IAEjD,2EAA2E;IAC3E,yCAAuB,CAAA;IACvB,6CAA2B,CAAA;IAC3B,6CAA2B,CAAA;IAC3B,6CAA2B,CAAA;IAE3B,2EAA2E;IAC3E,+CAA6B,CAAA;IAC7B,iDAA+B,CAAA;IAC/B,mDAAiC,CAAA;IAEjC,4EAA4E;IAE5E,2EAA2E;IAC3E,qEAAqE;IACrE,iEAA+C,CAAA;IAC/C,qEAAmD,CAAA;IACnD,qEAAmD,CAAA;IACnD,qEAAmD,CAAA;IAEnD,2EAA2E;IAC3E;;;;OAIG;IACH,+DAA6C,CAAA;IAC7C,mEAAiD,CAAA;IAEjD,2EAA2E;IAC3E;;;;OAIG;IACH,mEAAiD,CAAA;IAEjD,2EAA2E;IAC3E,iEAA+C,CAAA;IAC/C,yFAAyF;IACzF,qEAAmD,CAAA;IAEnD,2EAA2E;IAC3E,mEAAmE;IACnE,uEAAqD,CAAA;IACrD;;;;;;;OAOG;IACH,2EAAyD,CAAA;IAEzD,2EAA2E;IAC3E,2DAAyC,CAAA;IACzC,2DAA2D;IAC3D,+DAA6C,CAAA;IAE7C,2EAA2E;IAC3E;;;;;OAKG;IACH,iEAA+C,CAAA;IAC/C;;;;;;OAMG;IACH,uEAAqD,CAAA;IAErD,2EAA2E;IAC3E,wFAAwF;IACxF,mEAAiD,CAAA;IACjD;;;;;;;;OAQG;IACH,uEAAqD,CAAA;IAErD,2EAA2E;IAC3E,sEAAsE;IACtE,qEAAmD,CAAA;IACnD;;;;;OAKG;IACH,yEAAuD,CAAA;IAEvD,2EAA2E;IAC3E;;;;;OAKG;IACH,iEAA+C,CAAA;IAC/C;;;;;;;OAOG;IACH,iEAA+C,CAAA;IAC/C,qEAAqE;IACrE,uEAAqD,CAAA;IAErD,4EAA4E;IAE5E,2EAA2E;IAC3E,4EAA4E;IAC5E,iEAA+C,CAAA;IAC/C,yEAAyE;IACzE,qEAAmD,CAAA;IAEnD,2EAA2E;IAE3E,iEAAiE;IACjE,mEAAiD,CAAA;IACjD,mDAAmD;IACnD,mEAAiD,CAAA;IACjD,qEAAqE;IACrE,2DAAyC,CAAA;IACzC,uEAAuE;IACvE,iEAA+C,CAAA;IAC/C,yFAAyF;IACzF,qEAAmD,CAAA;IAEnD,4EAA4E;IAE5E,2EAA2E;IAC3E,kFAAkF;IAClF,6DAA2C,CAAA;IAC3C;;;;;;OAMG;IACH,iEAA+C,CAAA;IAE/C,2EAA2E;IAC3E,2FAA2F;IAC3F,6DAA2C,CAAA;IAC3C,gDAAgD;IAChD,iEAA+C,CAAA;IAE/C,2EAA2E;IAC3E;;;;;;;OAOG;IACH,uEAAqD,CAAA;IACrD,yFAAyF;IACzF,2EAAyD,CAAA;IACzD;;;;;;OAMG;IACH,2EAAyD,CAAA;IAEzD,2EAA2E;IAC3E;;;;;;OAMG;IACH,6DAA2C,CAAA;IAE3C,2EAA2E;IAC3E,uDAAqC,CAAA;IACrC,8FAA8F;IAC9F,2DAAyC,CAAA;IAEzC,2EAA2E;IAC3E,uEAAqD,CAAA;IACrD,oEAAoE;IACpE,2EAAyD,CAAA;IAEzD,2EAA2E;IAC3E;;;;;;;;;;;OAWG;IACH,qEAAmD,CAAA;IAEnD,2EAA2E;IAC3E,gGAAgG;IAChG,iDAA+B,CAAA;IAE/B,2EAA2E;IAC3E,6EAA6E;IAC7E,qDAAmC,CAAA;IACnC,wDAAwD;IACxD,yDAAuC,CAAA;IAEvC,2EAA2E;IAE3E,0EAA0E;IAC1E,8CAA8C;IAC9C,yDAAuC,CAAA;IACvC,sDAAsD;IACtD,6DAA2C,CAAA;IAE3C,yEAAyE;IACzE,6DAA6D;IAC7D,yEAAuD,CAAA;IACvD,qDAAqD;IACrD,6EAA2D,CAAA;IAE3D,0EAA0E;IAC1E,yCAAyC;IACzC,2DAAyC,CAAA;IACzC,2DAA2D;IAC3D,+DAA6C,CAAA;IAE7C,0EAA0E;IAC1E,+DAA+D;IAC/D,+DAA6C,CAAA;IAC7C,+EAA+E;IAC/E,mEAAiD,CAAA;IAEjD,0EAA0E;IAC1E,2DAA2D;IAC3D,+DAA6C,CAAA;IAC7C,gDAAgD;IAChD,mEAAiD,CAAA;AACrD,CAAC,EA7RW,cAAc,8BAAd,cAAc,QA6RzB;AAED;;;;;GAKG;AACU,QAAA,oBAAoB,GAA8B,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC"}

package/dist/esm/api/unibox/index.d.ts

@@ -9,5 +9,7 @@ export * from './message-content-type.enum.js';
 export * from './message-direction.enum.js';
 export * from './message-status.enum.js';
 export * from './message.type.js';
+export * from './realtime-event.enum.js';
+export * from './realtime.type.js';
 export * from './team.type.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/esm/api/unibox/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/api/unibox/index.ts"],"names":[],"mappings":"AAAA,cAAc,wBAAwB,CAAC;AACvC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,mBAAmB,CAAC;AAClC,cAAc,mBAAmB,CAAC;AAClC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,wBAAwB,CAAC;AACvC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,gCAAgC,CAAC;AAC/C,cAAc,6BAA6B,CAAC;AAC5C,cAAc,0BAA0B,CAAC;AACzC,cAAc,mBAAmB,CAAC;AAClC,cAAc,gBAAgB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/api/unibox/index.ts"],"names":[],"mappings":"AAAA,cAAc,wBAAwB,CAAC;AACvC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,mBAAmB,CAAC;AAClC,cAAc,mBAAmB,CAAC;AAClC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,wBAAwB,CAAC;AACvC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,gCAAgC,CAAC;AAC/C,cAAc,6BAA6B,CAAC;AAC5C,cAAc,0BAA0B,CAAC;AACzC,cAAc,mBAAmB,CAAC;AAClC,cAAc,0BAA0B,CAAC;AACzC,cAAc,oBAAoB,CAAC;AACnC,cAAc,gBAAgB,CAAC"}

package/dist/esm/api/unibox/index.js

@@ -9,5 +9,7 @@ export * from './message-content-type.enum.js';
 export * from './message-direction.enum.js';
 export * from './message-status.enum.js';
 export * from './message.type.js';
+export * from './realtime-event.enum.js';
+export * from './realtime.type.js';
 export * from './team.type.js';
 //# sourceMappingURL=index.js.map

package/dist/esm/api/unibox/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/api/unibox/index.ts"],"names":[],"mappings":"AAAA,cAAc,wBAAwB,CAAC;AACvC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,mBAAmB,CAAC;AAClC,cAAc,mBAAmB,CAAC;AAClC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,wBAAwB,CAAC;AACvC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,gCAAgC,CAAC;AAC/C,cAAc,6BAA6B,CAAC;AAC5C,cAAc,0BAA0B,CAAC;AACzC,cAAc,mBAAmB,CAAC;AAClC,cAAc,gBAAgB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/api/unibox/index.ts"],"names":[],"mappings":"AAAA,cAAc,wBAAwB,CAAC;AACvC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,mBAAmB,CAAC;AAClC,cAAc,mBAAmB,CAAC;AAClC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,wBAAwB,CAAC;AACvC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,gCAAgC,CAAC;AAC/C,cAAc,6BAA6B,CAAC;AAC5C,cAAc,0BAA0B,CAAC;AACzC,cAAc,mBAAmB,CAAC;AAClC,cAAc,0BAA0B,CAAC;AACzC,cAAc,oBAAoB,CAAC;AACnC,cAAc,gBAAgB,CAAC"}

package/dist/esm/api/unibox/realtime-event.enum.d.ts

@@ -0,0 +1,24 @@
+/**
+ * What happened to a conversation, as told to a live subscriber.
+ *
+ * Deliberately a small closed set rather than a free-form string. A subscriber decides what to
+ * refetch from the event name, so an unrecognised one means either doing nothing — a live inbox
+ * that silently stops updating — or refetching everything, which is a stampede triggered by
+ * whatever a publisher felt like sending.
+ *
+ * **These are notifications, not state.** The payload carries identifiers, never the message
+ * body or the contact's details: an event is a prompt to read from `unibox-api`, which is the
+ * only thing that can answer for what the reader is allowed to see. That also keeps a missed
+ * event harmless — the next read is correct regardless.
+ */
+export declare enum RealtimeConversationEvent {
+    /** A message was appended. The reader refetches the conversation's messages. */
+    MESSAGE_CREATED = "message.created",
+    /** A message's delivery status moved — sent, delivered, read, failed. */
+    MESSAGE_STATUS_CHANGED = "message.status-changed",
+    /** Status, unread count, or another conversation-level field changed. */
+    CONVERSATION_UPDATED = "conversation.updated",
+    /** The conversation moved to another agent or team, or a human took over from the AI. */
+    CONVERSATION_ASSIGNED = "conversation.assigned"
+}
+//# sourceMappingURL=realtime-event.enum.d.ts.map

package/dist/esm/api/unibox/realtime-event.enum.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"realtime-event.enum.d.ts","sourceRoot":"","sources":["../../../../src/api/unibox/realtime-event.enum.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,oBAAY,yBAAyB;IACjC,gFAAgF;IAChF,eAAe,oBAAoB;IACnC,yEAAyE;IACzE,sBAAsB,2BAA2B;IACjD,yEAAyE;IACzE,oBAAoB,yBAAyB;IAC7C,yFAAyF;IACzF,qBAAqB,0BAA0B;CAClD"}

package/dist/esm/api/unibox/realtime-event.enum.js

@@ -0,0 +1,25 @@
+/**
+ * What happened to a conversation, as told to a live subscriber.
+ *
+ * Deliberately a small closed set rather than a free-form string. A subscriber decides what to
+ * refetch from the event name, so an unrecognised one means either doing nothing — a live inbox
+ * that silently stops updating — or refetching everything, which is a stampede triggered by
+ * whatever a publisher felt like sending.
+ *
+ * **These are notifications, not state.** The payload carries identifiers, never the message
+ * body or the contact's details: an event is a prompt to read from `unibox-api`, which is the
+ * only thing that can answer for what the reader is allowed to see. That also keeps a missed
+ * event harmless — the next read is correct regardless.
+ */
+export var RealtimeConversationEvent;
+(function (RealtimeConversationEvent) {
+    /** A message was appended. The reader refetches the conversation's messages. */
+    RealtimeConversationEvent["MESSAGE_CREATED"] = "message.created";
+    /** A message's delivery status moved — sent, delivered, read, failed. */
+    RealtimeConversationEvent["MESSAGE_STATUS_CHANGED"] = "message.status-changed";
+    /** Status, unread count, or another conversation-level field changed. */
+    RealtimeConversationEvent["CONVERSATION_UPDATED"] = "conversation.updated";
+    /** The conversation moved to another agent or team, or a human took over from the AI. */
+    RealtimeConversationEvent["CONVERSATION_ASSIGNED"] = "conversation.assigned";
+})(RealtimeConversationEvent || (RealtimeConversationEvent = {}));
+//# sourceMappingURL=realtime-event.enum.js.map

package/dist/esm/api/unibox/realtime-event.enum.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"realtime-event.enum.js","sourceRoot":"","sources":["../../../../src/api/unibox/realtime-event.enum.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,MAAM,CAAN,IAAY,yBASX;AATD,WAAY,yBAAyB;IACjC,gFAAgF;IAChF,gEAAmC,CAAA;IACnC,yEAAyE;IACzE,8EAAiD,CAAA;IACjD,yEAAyE;IACzE,0EAA6C,CAAA;IAC7C,yFAAyF;IACzF,4EAA+C,CAAA;AACnD,CAAC,EATW,yBAAyB,KAAzB,yBAAyB,QASpC"}

package/dist/esm/api/unibox/realtime.type.d.ts

@@ -0,0 +1,83 @@
+import type { UUID } from '../../type/uuid.type.js';
+import type { RealtimeConversationEvent } from './realtime-event.enum.js';
+/** Socket.IO event names a client sends. */
+export declare const REALTIME_CLIENT_EVENT: {
+    readonly SUBSCRIBE: "realtime.subscribe";
+};
+/** Socket.IO event names a client receives. */
+export declare const REALTIME_SERVER_EVENT: {
+    readonly READY: "realtime.ready";
+    readonly SUBSCRIBED: "realtime.subscribed";
+    readonly CONVERSATION_UPDATED: "conversation.updated";
+    readonly ERROR: "realtime.error";
+};
+/** Bumped when a message shape changes incompatibly; the server announces it on connect. */
+export declare const REALTIME_PROTOCOL_VERSION = 1;
+/** Most conversations a single socket may watch. */
+export declare const MAX_REALTIME_SUBSCRIPTIONS_PER_SOCKET = 100;
+/** Largest serialized event, in bytes. */
+export declare const MAX_REALTIME_EVENT_BYTES: number;
+/** Longest event name accepted from a publisher. */
+export declare const MAX_REALTIME_EVENT_NAME_LENGTH = 128;
+/**
+ * The body a publishing service POSTs to `unibox-realtime`.
+ *
+ * **There is no `tenantId` field, and that absence is the security model.** The tenant comes
+ * from the publisher's own access token, so a compromised or buggy publisher cannot address
+ * another tenant's subscribers — it can only ever reach its own. A body field would make
+ * cross-tenant delivery a validation rule someone has to remember to write.
+ */
+export interface PublishConversationEventBody {
+    conversationId: UUID;
+    event: RealtimeConversationEvent;
+    /** Identifiers only. Never message content — see {@link RealtimeConversationEvent}. */
+    payload: Record<string, unknown>;
+}
+/** `unibox-realtime`'s answer to a publish. */
+export interface PublishConversationEventResponse {
+    /**
+     * Whether the event was accepted for fan-out.
+     *
+     * Never whether anyone received it. With the Redis adapter no single process knows that, and
+     * a publisher that waited to find out would be blocking a write on how many browsers happen
+     * to be open.
+     */
+    accepted: boolean;
+}
+/** Sent to a client once its token verifies. */
+export interface RealtimeReadyMessage {
+    protocolVersion: typeof REALTIME_PROTOCOL_VERSION;
+}
+/** What a client asks to watch. */
+export interface RealtimeSubscribeRequest {
+    conversationIds: UUID[];
+}
+/** The full set a socket is watching after a subscribe, not just the delta. */
+export interface RealtimeSubscribedMessage {
+    conversationIds: UUID[];
+}
+export interface RealtimeErrorMessage {
+    code: 'UNAUTHENTICATED' | 'FORBIDDEN' | 'INVALID_SUBSCRIPTION' | 'PAYLOAD_TOO_LARGE';
+    message: string;
+}
+/**
+ * What a subscribed client receives.
+ *
+ * **No tenant id.** The subscriber proved its own tenant to enter the room, so echoing it back
+ * says nothing it does not know and puts another tenant's identifier one bug away from a socket
+ * that must never see it.
+ */
+export interface ConversationUpdatedMessage {
+    conversationId: UUID;
+    event: RealtimeConversationEvent;
+    payload: Record<string, unknown>;
+}
+/** Acknowledgement returned to a client's `subscribe` call. */
+export type RealtimeSubscriptionAck = {
+    ok: true;
+    message: RealtimeSubscribedMessage;
+} | {
+    ok: false;
+    message: RealtimeErrorMessage;
+};
+//# sourceMappingURL=realtime.type.d.ts.map

package/dist/esm/api/unibox/realtime.type.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"realtime.type.d.ts","sourceRoot":"","sources":["../../../../src/api/unibox/realtime.type.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,yBAAyB,CAAC;AAEpD,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,0BAA0B,CAAC;AAE1E,4CAA4C;AAC5C,eAAO,MAAM,qBAAqB;;CAExB,CAAC;AAEX,+CAA+C;AAC/C,eAAO,MAAM,qBAAqB;;;;;CAKxB,CAAC;AAEX,4FAA4F;AAC5F,eAAO,MAAM,yBAAyB,IAAI,CAAC;AAE3C,oDAAoD;AACpD,eAAO,MAAM,qCAAqC,MAAM,CAAC;AAEzD,0CAA0C;AAC1C,eAAO,MAAM,wBAAwB,QAAY,CAAC;AAElD,oDAAoD;AACpD,eAAO,MAAM,8BAA8B,MAAM,CAAC;AAElD;;;;;;;GAOG;AACH,MAAM,WAAW,4BAA4B;IACzC,cAAc,EAAE,IAAI,CAAC;IACrB,KAAK,EAAE,yBAAyB,CAAC;IACjC,uFAAuF;IACvF,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED,+CAA+C;AAC/C,MAAM,WAAW,gCAAgC;IAC7C;;;;;;OAMG;IACH,QAAQ,EAAE,OAAO,CAAC;CACrB;AAED,gDAAgD;AAChD,MAAM,WAAW,oBAAoB;IACjC,eAAe,EAAE,OAAO,yBAAyB,CAAC;CACrD;AAED,mCAAmC;AACnC,MAAM,WAAW,wBAAwB;IACrC,eAAe,EAAE,IAAI,EAAE,CAAC;CAC3B;AAED,+EAA+E;AAC/E,MAAM,WAAW,yBAAyB;IACtC,eAAe,EAAE,IAAI,EAAE,CAAC;CAC3B;AAED,MAAM,WAAW,oBAAoB;IACjC,IAAI,EAAE,iBAAiB,GAAG,WAAW,GAAG,sBAAsB,GAAG,mBAAmB,CAAC;IACrF,OAAO,EAAE,MAAM,CAAC;CACnB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,0BAA0B;IACvC,cAAc,EAAE,IAAI,CAAC;IACrB,KAAK,EAAE,yBAAyB,CAAC;IACjC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED,+DAA+D;AAC/D,MAAM,MAAM,uBAAuB,GAC/B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,OAAO,EAAE,yBAAyB,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,OAAO,EAAE,oBAAoB,CAAA;CAAE,CAAC"}

package/dist/esm/api/unibox/realtime.type.js

@@ -0,0 +1,20 @@
+/** Socket.IO event names a client sends. */
+export const REALTIME_CLIENT_EVENT = {
+    SUBSCRIBE: 'realtime.subscribe',
+};
+/** Socket.IO event names a client receives. */
+export const REALTIME_SERVER_EVENT = {
+    READY: 'realtime.ready',
+    SUBSCRIBED: 'realtime.subscribed',
+    CONVERSATION_UPDATED: 'conversation.updated',
+    ERROR: 'realtime.error',
+};
+/** Bumped when a message shape changes incompatibly; the server announces it on connect. */
+export const REALTIME_PROTOCOL_VERSION = 1;
+/** Most conversations a single socket may watch. */
+export const MAX_REALTIME_SUBSCRIPTIONS_PER_SOCKET = 100;
+/** Largest serialized event, in bytes. */
+export const MAX_REALTIME_EVENT_BYTES = 64 * 1024;
+/** Longest event name accepted from a publisher. */
+export const MAX_REALTIME_EVENT_NAME_LENGTH = 128;
+//# sourceMappingURL=realtime.type.js.map

package/dist/esm/api/unibox/realtime.type.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"realtime.type.js","sourceRoot":"","sources":["../../../../src/api/unibox/realtime.type.ts"],"names":[],"mappings":"AAIA,4CAA4C;AAC5C,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACjC,SAAS,EAAE,oBAAoB;CACzB,CAAC;AAEX,+CAA+C;AAC/C,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACjC,KAAK,EAAE,gBAAgB;IACvB,UAAU,EAAE,qBAAqB;IACjC,oBAAoB,EAAE,sBAAsB;IAC5C,KAAK,EAAE,gBAAgB;CACjB,CAAC;AAEX,4FAA4F;AAC5F,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC;AAE3C,oDAAoD;AACpD,MAAM,CAAC,MAAM,qCAAqC,GAAG,GAAG,CAAC;AAEzD,0CAA0C;AAC1C,MAAM,CAAC,MAAM,wBAAwB,GAAG,EAAE,GAAG,IAAI,CAAC;AAElD,oDAAoD;AACpD,MAAM,CAAC,MAAM,8BAA8B,GAAG,GAAG,CAAC"}

package/dist/esm/enum/user-permission.enum.d.ts

@@ -190,6 +190,19 @@ export declare enum UserPermission {
     UNIBOX_CANNED_REPLY_READ = "unibox:canned-reply:read",
     /** Author the saved replies every agent in the tenant will send. */
     UNIBOX_CANNED_REPLY_MANAGE = "unibox:canned-reply:manage",
+    /**
+     * Publish a conversation event into the live inbox.
+     *
+     * **A service permission, not a human one**, and deliberately absent from the seeded `ADMIN`
+     * role — unlike `CONDUIT_DISPATCH_SEND`, which an admin holds so they can prove a connection
+     * works. There is no equivalent thing to prove here: publishing means putting a message in
+     * front of every agent watching a conversation, so the only legitimate holder is the service
+     * that owns what actually happened to that conversation.
+     *
+     * Reading the live stream is `UNIBOX_CONVERSATION_READ` — the same permission that guards
+     * reading the inbox over HTTP, because it is the same data arriving by another route.
+     */
+    UNIBOX_REALTIME_PUBLISH = "unibox:realtime:publish",
     /** Allows a trusted service principal to submit bounded conversation context for generation. */
     UNIBOX_AI_RUN = "unibox:ai:run",
     /** Read tenant MCP server metadata; credential values are never returned. */

package/dist/esm/enum/user-permission.enum.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"user-permission.enum.d.ts","sourceRoot":"","sources":["../../../src/enum/user-permission.enum.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,oBAAY,cAAc;IAItB,WAAW,gBAAgB;IAC3B,aAAa,kBAAkB;IAC/B,sFAAsF;IACtF,aAAa,kBAAkB;IAG/B,SAAS,cAAc;IACvB,WAAW,gBAAgB;IAC3B,WAAW,gBAAgB;IAC3B,WAAW,gBAAgB;IAG3B,eAAe,oBAAoB;IACnC,6EAA6E;IAC7E,iBAAiB,sBAAsB;IACvC;;;OAGG;IACH,sBAAsB,2BAA2B;IAGjD,SAAS,cAAc;IACvB,WAAW,gBAAgB;IAC3B,WAAW,gBAAgB;IAC3B,WAAW,gBAAgB;IAG3B,YAAY,iBAAiB;IAC7B,aAAa,kBAAkB;IAC/B,cAAc,mBAAmB;IAKjC,qEAAqE;IACrE,qBAAqB,0BAA0B;IAC/C,uBAAuB,4BAA4B;IACnD,uBAAuB,4BAA4B;IACnD,uBAAuB,4BAA4B;IAGnD;;;;OAIG;IACH,oBAAoB,yBAAyB;IAC7C,sBAAsB,2BAA2B;IAGjD;;;;OAIG;IACH,sBAAsB,2BAA2B;IAGjD,qBAAqB,0BAA0B;IAC/C,yFAAyF;IACzF,uBAAuB,4BAA4B;IAGnD,mEAAmE;IACnE,wBAAwB,6BAA6B;IACrD;;;;;;;OAOG;IACH,0BAA0B,+BAA+B;IAGzD,kBAAkB,uBAAuB;IACzC,2DAA2D;IAC3D,oBAAoB,yBAAyB;IAG7C;;;;;OAKG;IACH,qBAAqB,0BAA0B;IAC/C;;;;;;OAMG;IACH,wBAAwB,6BAA6B;IAGrD,wFAAwF;IACxF,sBAAsB,2BAA2B;IACjD;;;;;;;;OAQG;IACH,wBAAwB,6BAA6B;IAGrD,sEAAsE;IACtE,uBAAuB,4BAA4B;IACnD;;;;;OAKG;IACH,yBAAyB,8BAA8B;IAGvD;;;;;OAKG;IACH,qBAAqB,0BAA0B;IAC/C;;;;;;;OAOG;IACH,qBAAqB,0BAA0B;IAC/C,qEAAqE;IACrE,wBAAwB,6BAA6B;IAKrD,4EAA4E;IAC5E,qBAAqB,0BAA0B;IAC/C,yEAAyE;IACzE,uBAAuB,4BAA4B;IAInD,iEAAiE;IACjE,sBAAsB,2BAA2B;IACjD,mDAAmD;IACnD,sBAAsB,2BAA2B;IACjD,qEAAqE;IACrE,kBAAkB,uBAAuB;IACzC,uEAAuE;IACvE,qBAAqB,0BAA0B;IAC/C,yFAAyF;IACzF,uBAAuB,4BAA4B;IAKnD,kFAAkF;IAClF,mBAAmB,wBAAwB;IAC3C;;;;;;OAMG;IACH,qBAAqB,0BAA0B;IAG/C,2FAA2F;IAC3F,mBAAmB,wBAAwB;IAC3C,gDAAgD;IAChD,qBAAqB,0BAA0B;IAG/C;;;;;;;OAOG;IACH,wBAAwB,6BAA6B;IACrD,yFAAyF;IACzF,0BAA0B,+BAA+B;IACzD;;;;;;OAMG;IACH,0BAA0B,+BAA+B;IAGzD;;;;;;OAMG;IACH,mBAAmB,wBAAwB;IAG3C,gBAAgB,qBAAqB;IACrC,8FAA8F;IAC9F,kBAAkB,uBAAuB;IAGzC,wBAAwB,6BAA6B;IACrD,oEAAoE;IACpE,0BAA0B,+BAA+B;IAGzD,gGAAgG;IAChG,aAAa,kBAAkB;IAG/B,6EAA6E;IAC7E,eAAe,oBAAoB;IACnC,wDAAwD;IACxD,iBAAiB,sBAAsB;IAKvC,8CAA8C;IAC9C,iBAAiB,sBAAsB;IACvC,sDAAsD;IACtD,mBAAmB,wBAAwB;IAG3C,6DAA6D;IAC7D,yBAAyB,8BAA8B;IACvD,qDAAqD;IACrD,2BAA2B,gCAAgC;IAG3D,yCAAyC;IACzC,kBAAkB,uBAAuB;IACzC,2DAA2D;IAC3D,oBAAoB,yBAAyB;IAG7C,+DAA+D;IAC/D,oBAAoB,yBAAyB;IAC7C,+EAA+E;IAC/E,sBAAsB,2BAA2B;IAGjD,2DAA2D;IAC3D,oBAAoB,yBAAyB;IAC7C,gDAAgD;IAChD,sBAAsB,2BAA2B;CACpD;AAED;;;;;GAKG;AACH,eAAO,MAAM,oBAAoB,EAAE,SAAS,cAAc,EAAiD,CAAC"}
+{"version":3,"file":"user-permission.enum.d.ts","sourceRoot":"","sources":["../../../src/enum/user-permission.enum.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,oBAAY,cAAc;IAItB,WAAW,gBAAgB;IAC3B,aAAa,kBAAkB;IAC/B,sFAAsF;IACtF,aAAa,kBAAkB;IAG/B,SAAS,cAAc;IACvB,WAAW,gBAAgB;IAC3B,WAAW,gBAAgB;IAC3B,WAAW,gBAAgB;IAG3B,eAAe,oBAAoB;IACnC,6EAA6E;IAC7E,iBAAiB,sBAAsB;IACvC;;;OAGG;IACH,sBAAsB,2BAA2B;IAGjD,SAAS,cAAc;IACvB,WAAW,gBAAgB;IAC3B,WAAW,gBAAgB;IAC3B,WAAW,gBAAgB;IAG3B,YAAY,iBAAiB;IAC7B,aAAa,kBAAkB;IAC/B,cAAc,mBAAmB;IAKjC,qEAAqE;IACrE,qBAAqB,0BAA0B;IAC/C,uBAAuB,4BAA4B;IACnD,uBAAuB,4BAA4B;IACnD,uBAAuB,4BAA4B;IAGnD;;;;OAIG;IACH,oBAAoB,yBAAyB;IAC7C,sBAAsB,2BAA2B;IAGjD;;;;OAIG;IACH,sBAAsB,2BAA2B;IAGjD,qBAAqB,0BAA0B;IAC/C,yFAAyF;IACzF,uBAAuB,4BAA4B;IAGnD,mEAAmE;IACnE,wBAAwB,6BAA6B;IACrD;;;;;;;OAOG;IACH,0BAA0B,+BAA+B;IAGzD,kBAAkB,uBAAuB;IACzC,2DAA2D;IAC3D,oBAAoB,yBAAyB;IAG7C;;;;;OAKG;IACH,qBAAqB,0BAA0B;IAC/C;;;;;;OAMG;IACH,wBAAwB,6BAA6B;IAGrD,wFAAwF;IACxF,sBAAsB,2BAA2B;IACjD;;;;;;;;OAQG;IACH,wBAAwB,6BAA6B;IAGrD,sEAAsE;IACtE,uBAAuB,4BAA4B;IACnD;;;;;OAKG;IACH,yBAAyB,8BAA8B;IAGvD;;;;;OAKG;IACH,qBAAqB,0BAA0B;IAC/C;;;;;;;OAOG;IACH,qBAAqB,0BAA0B;IAC/C,qEAAqE;IACrE,wBAAwB,6BAA6B;IAKrD,4EAA4E;IAC5E,qBAAqB,0BAA0B;IAC/C,yEAAyE;IACzE,uBAAuB,4BAA4B;IAInD,iEAAiE;IACjE,sBAAsB,2BAA2B;IACjD,mDAAmD;IACnD,sBAAsB,2BAA2B;IACjD,qEAAqE;IACrE,kBAAkB,uBAAuB;IACzC,uEAAuE;IACvE,qBAAqB,0BAA0B;IAC/C,yFAAyF;IACzF,uBAAuB,4BAA4B;IAKnD,kFAAkF;IAClF,mBAAmB,wBAAwB;IAC3C;;;;;;OAMG;IACH,qBAAqB,0BAA0B;IAG/C,2FAA2F;IAC3F,mBAAmB,wBAAwB;IAC3C,gDAAgD;IAChD,qBAAqB,0BAA0B;IAG/C;;;;;;;OAOG;IACH,wBAAwB,6BAA6B;IACrD,yFAAyF;IACzF,0BAA0B,+BAA+B;IACzD;;;;;;OAMG;IACH,0BAA0B,+BAA+B;IAGzD;;;;;;OAMG;IACH,mBAAmB,wBAAwB;IAG3C,gBAAgB,qBAAqB;IACrC,8FAA8F;IAC9F,kBAAkB,uBAAuB;IAGzC,wBAAwB,6BAA6B;IACrD,oEAAoE;IACpE,0BAA0B,+BAA+B;IAGzD;;;;;;;;;;;OAWG;IACH,uBAAuB,4BAA4B;IAGnD,gGAAgG;IAChG,aAAa,kBAAkB;IAG/B,6EAA6E;IAC7E,eAAe,oBAAoB;IACnC,wDAAwD;IACxD,iBAAiB,sBAAsB;IAKvC,8CAA8C;IAC9C,iBAAiB,sBAAsB;IACvC,sDAAsD;IACtD,mBAAmB,wBAAwB;IAG3C,6DAA6D;IAC7D,yBAAyB,8BAA8B;IACvD,qDAAqD;IACrD,2BAA2B,gCAAgC;IAG3D,yCAAyC;IACzC,kBAAkB,uBAAuB;IACzC,2DAA2D;IAC3D,oBAAoB,yBAAyB;IAG7C,+DAA+D;IAC/D,oBAAoB,yBAAyB;IAC7C,+EAA+E;IAC/E,sBAAsB,2BAA2B;IAGjD,2DAA2D;IAC3D,oBAAoB,yBAAyB;IAC7C,gDAAgD;IAChD,sBAAsB,2BAA2B;CACpD;AAED;;;;;GAKG;AACH,eAAO,MAAM,oBAAoB,EAAE,SAAS,cAAc,EAAiD,CAAC"}

package/dist/esm/enum/user-permission.enum.js

@@ -218,6 +218,20 @@ export var UserPermission;
     UserPermission["UNIBOX_CANNED_REPLY_READ"] = "unibox:canned-reply:read";
     /** Author the saved replies every agent in the tenant will send. */
     UserPermission["UNIBOX_CANNED_REPLY_MANAGE"] = "unibox:canned-reply:manage";
+    // ── Realtime ────────────────────────────────────────────────────────────
+    /**
+     * Publish a conversation event into the live inbox.
+     *
+     * **A service permission, not a human one**, and deliberately absent from the seeded `ADMIN`
+     * role — unlike `CONDUIT_DISPATCH_SEND`, which an admin holds so they can prove a connection
+     * works. There is no equivalent thing to prove here: publishing means putting a message in
+     * front of every agent watching a conversation, so the only legitimate holder is the service
+     * that owns what actually happened to that conversation.
+     *
+     * Reading the live stream is `UNIBOX_CONVERSATION_READ` — the same permission that guards
+     * reading the inbox over HTTP, because it is the same data arriving by another route.
+     */
+    UserPermission["UNIBOX_REALTIME_PUBLISH"] = "unibox:realtime:publish";
     // ── AI runtime ──────────────────────────────────────────────────────────
     /** Allows a trusted service principal to submit bounded conversation context for generation. */
     UserPermission["UNIBOX_AI_RUN"] = "unibox:ai:run";

package/dist/esm/enum/user-permission.enum.js.map

@@ -1 +1 @@
-{"version":3,"file":"user-permission.enum.js","sourceRoot":"","sources":["../../../src/enum/user-permission.enum.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAN,IAAY,cA8QX;AA9QD,WAAY,cAAc;IACtB,4EAA4E;IAE5E,2EAA2E;IAC3E,6CAA2B,CAAA;IAC3B,iDAA+B,CAAA;IAC/B,sFAAsF;IACtF,iDAA+B,CAAA;IAE/B,2EAA2E;IAC3E,yCAAuB,CAAA;IACvB,6CAA2B,CAAA;IAC3B,6CAA2B,CAAA;IAC3B,6CAA2B,CAAA;IAE3B,2EAA2E;IAC3E,qDAAmC,CAAA;IACnC,6EAA6E;IAC7E,yDAAuC,CAAA;IACvC;;;OAGG;IACH,mEAAiD,CAAA;IAEjD,2EAA2E;IAC3E,yCAAuB,CAAA;IACvB,6CAA2B,CAAA;IAC3B,6CAA2B,CAAA;IAC3B,6CAA2B,CAAA;IAE3B,2EAA2E;IAC3E,+CAA6B,CAAA;IAC7B,iDAA+B,CAAA;IAC/B,mDAAiC,CAAA;IAEjC,4EAA4E;IAE5E,2EAA2E;IAC3E,qEAAqE;IACrE,iEAA+C,CAAA;IAC/C,qEAAmD,CAAA;IACnD,qEAAmD,CAAA;IACnD,qEAAmD,CAAA;IAEnD,2EAA2E;IAC3E;;;;OAIG;IACH,+DAA6C,CAAA;IAC7C,mEAAiD,CAAA;IAEjD,2EAA2E;IAC3E;;;;OAIG;IACH,mEAAiD,CAAA;IAEjD,2EAA2E;IAC3E,iEAA+C,CAAA;IAC/C,yFAAyF;IACzF,qEAAmD,CAAA;IAEnD,2EAA2E;IAC3E,mEAAmE;IACnE,uEAAqD,CAAA;IACrD;;;;;;;OAOG;IACH,2EAAyD,CAAA;IAEzD,2EAA2E;IAC3E,2DAAyC,CAAA;IACzC,2DAA2D;IAC3D,+DAA6C,CAAA;IAE7C,2EAA2E;IAC3E;;;;;OAKG;IACH,iEAA+C,CAAA;IAC/C;;;;;;OAMG;IACH,uEAAqD,CAAA;IAErD,2EAA2E;IAC3E,wFAAwF;IACxF,mEAAiD,CAAA;IACjD;;;;;;;;OAQG;IACH,uEAAqD,CAAA;IAErD,2EAA2E;IAC3E,sEAAsE;IACtE,qEAAmD,CAAA;IACnD;;;;;OAKG;IACH,yEAAuD,CAAA;IAEvD,2EAA2E;IAC3E;;;;;OAKG;IACH,iEAA+C,CAAA;IAC/C;;;;;;;OAOG;IACH,iEAA+C,CAAA;IAC/C,qEAAqE;IACrE,uEAAqD,CAAA;IAErD,4EAA4E;IAE5E,2EAA2E;IAC3E,4EAA4E;IAC5E,iEAA+C,CAAA;IAC/C,yEAAyE;IACzE,qEAAmD,CAAA;IAEnD,2EAA2E;IAE3E,iEAAiE;IACjE,mEAAiD,CAAA;IACjD,mDAAmD;IACnD,mEAAiD,CAAA;IACjD,qEAAqE;IACrE,2DAAyC,CAAA;IACzC,uEAAuE;IACvE,iEAA+C,CAAA;IAC/C,yFAAyF;IACzF,qEAAmD,CAAA;IAEnD,4EAA4E;IAE5E,2EAA2E;IAC3E,kFAAkF;IAClF,6DAA2C,CAAA;IAC3C;;;;;;OAMG;IACH,iEAA+C,CAAA;IAE/C,2EAA2E;IAC3E,2FAA2F;IAC3F,6DAA2C,CAAA;IAC3C,gDAAgD;IAChD,iEAA+C,CAAA;IAE/C,2EAA2E;IAC3E;;;;;;;OAOG;IACH,uEAAqD,CAAA;IACrD,yFAAyF;IACzF,2EAAyD,CAAA;IACzD;;;;;;OAMG;IACH,2EAAyD,CAAA;IAEzD,2EAA2E;IAC3E;;;;;;OAMG;IACH,6DAA2C,CAAA;IAE3C,2EAA2E;IAC3E,uDAAqC,CAAA;IACrC,8FAA8F;IAC9F,2DAAyC,CAAA;IAEzC,2EAA2E;IAC3E,uEAAqD,CAAA;IACrD,oEAAoE;IACpE,2EAAyD,CAAA;IAEzD,2EAA2E;IAC3E,gGAAgG;IAChG,iDAA+B,CAAA;IAE/B,2EAA2E;IAC3E,6EAA6E;IAC7E,qDAAmC,CAAA;IACnC,wDAAwD;IACxD,yDAAuC,CAAA;IAEvC,2EAA2E;IAE3E,0EAA0E;IAC1E,8CAA8C;IAC9C,yDAAuC,CAAA;IACvC,sDAAsD;IACtD,6DAA2C,CAAA;IAE3C,yEAAyE;IACzE,6DAA6D;IAC7D,yEAAuD,CAAA;IACvD,qDAAqD;IACrD,6EAA2D,CAAA;IAE3D,0EAA0E;IAC1E,yCAAyC;IACzC,2DAAyC,CAAA;IACzC,2DAA2D;IAC3D,+DAA6C,CAAA;IAE7C,0EAA0E;IAC1E,+DAA+D;IAC/D,+DAA6C,CAAA;IAC7C,+EAA+E;IAC/E,mEAAiD,CAAA;IAEjD,0EAA0E;IAC1E,2DAA2D;IAC3D,+DAA6C,CAAA;IAC7C,gDAAgD;IAChD,mEAAiD,CAAA;AACrD,CAAC,EA9QW,cAAc,KAAd,cAAc,QA8QzB;AAED;;;;;GAKG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAA8B,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC"}
+{"version":3,"file":"user-permission.enum.js","sourceRoot":"","sources":["../../../src/enum/user-permission.enum.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAN,IAAY,cA6RX;AA7RD,WAAY,cAAc;IACtB,4EAA4E;IAE5E,2EAA2E;IAC3E,6CAA2B,CAAA;IAC3B,iDAA+B,CAAA;IAC/B,sFAAsF;IACtF,iDAA+B,CAAA;IAE/B,2EAA2E;IAC3E,yCAAuB,CAAA;IACvB,6CAA2B,CAAA;IAC3B,6CAA2B,CAAA;IAC3B,6CAA2B,CAAA;IAE3B,2EAA2E;IAC3E,qDAAmC,CAAA;IACnC,6EAA6E;IAC7E,yDAAuC,CAAA;IACvC;;;OAGG;IACH,mEAAiD,CAAA;IAEjD,2EAA2E;IAC3E,yCAAuB,CAAA;IACvB,6CAA2B,CAAA;IAC3B,6CAA2B,CAAA;IAC3B,6CAA2B,CAAA;IAE3B,2EAA2E;IAC3E,+CAA6B,CAAA;IAC7B,iDAA+B,CAAA;IAC/B,mDAAiC,CAAA;IAEjC,4EAA4E;IAE5E,2EAA2E;IAC3E,qEAAqE;IACrE,iEAA+C,CAAA;IAC/C,qEAAmD,CAAA;IACnD,qEAAmD,CAAA;IACnD,qEAAmD,CAAA;IAEnD,2EAA2E;IAC3E;;;;OAIG;IACH,+DAA6C,CAAA;IAC7C,mEAAiD,CAAA;IAEjD,2EAA2E;IAC3E;;;;OAIG;IACH,mEAAiD,CAAA;IAEjD,2EAA2E;IAC3E,iEAA+C,CAAA;IAC/C,yFAAyF;IACzF,qEAAmD,CAAA;IAEnD,2EAA2E;IAC3E,mEAAmE;IACnE,uEAAqD,CAAA;IACrD;;;;;;;OAOG;IACH,2EAAyD,CAAA;IAEzD,2EAA2E;IAC3E,2DAAyC,CAAA;IACzC,2DAA2D;IAC3D,+DAA6C,CAAA;IAE7C,2EAA2E;IAC3E;;;;;OAKG;IACH,iEAA+C,CAAA;IAC/C;;;;;;OAMG;IACH,uEAAqD,CAAA;IAErD,2EAA2E;IAC3E,wFAAwF;IACxF,mEAAiD,CAAA;IACjD;;;;;;;;OAQG;IACH,uEAAqD,CAAA;IAErD,2EAA2E;IAC3E,sEAAsE;IACtE,qEAAmD,CAAA;IACnD;;;;;OAKG;IACH,yEAAuD,CAAA;IAEvD,2EAA2E;IAC3E;;;;;OAKG;IACH,iEAA+C,CAAA;IAC/C;;;;;;;OAOG;IACH,iEAA+C,CAAA;IAC/C,qEAAqE;IACrE,uEAAqD,CAAA;IAErD,4EAA4E;IAE5E,2EAA2E;IAC3E,4EAA4E;IAC5E,iEAA+C,CAAA;IAC/C,yEAAyE;IACzE,qEAAmD,CAAA;IAEnD,2EAA2E;IAE3E,iEAAiE;IACjE,mEAAiD,CAAA;IACjD,mDAAmD;IACnD,mEAAiD,CAAA;IACjD,qEAAqE;IACrE,2DAAyC,CAAA;IACzC,uEAAuE;IACvE,iEAA+C,CAAA;IAC/C,yFAAyF;IACzF,qEAAmD,CAAA;IAEnD,4EAA4E;IAE5E,2EAA2E;IAC3E,kFAAkF;IAClF,6DAA2C,CAAA;IAC3C;;;;;;OAMG;IACH,iEAA+C,CAAA;IAE/C,2EAA2E;IAC3E,2FAA2F;IAC3F,6DAA2C,CAAA;IAC3C,gDAAgD;IAChD,iEAA+C,CAAA;IAE/C,2EAA2E;IAC3E;;;;;;;OAOG;IACH,uEAAqD,CAAA;IACrD,yFAAyF;IACzF,2EAAyD,CAAA;IACzD;;;;;;OAMG;IACH,2EAAyD,CAAA;IAEzD,2EAA2E;IAC3E;;;;;;OAMG;IACH,6DAA2C,CAAA;IAE3C,2EAA2E;IAC3E,uDAAqC,CAAA;IACrC,8FAA8F;IAC9F,2DAAyC,CAAA;IAEzC,2EAA2E;IAC3E,uEAAqD,CAAA;IACrD,oEAAoE;IACpE,2EAAyD,CAAA;IAEzD,2EAA2E;IAC3E;;;;;;;;;;;OAWG;IACH,qEAAmD,CAAA;IAEnD,2EAA2E;IAC3E,gGAAgG;IAChG,iDAA+B,CAAA;IAE/B,2EAA2E;IAC3E,6EAA6E;IAC7E,qDAAmC,CAAA;IACnC,wDAAwD;IACxD,yDAAuC,CAAA;IAEvC,2EAA2E;IAE3E,0EAA0E;IAC1E,8CAA8C;IAC9C,yDAAuC,CAAA;IACvC,sDAAsD;IACtD,6DAA2C,CAAA;IAE3C,yEAAyE;IACzE,6DAA6D;IAC7D,yEAAuD,CAAA;IACvD,qDAAqD;IACrD,6EAA2D,CAAA;IAE3D,0EAA0E;IAC1E,yCAAyC;IACzC,2DAAyC,CAAA;IACzC,2DAA2D;IAC3D,+DAA6C,CAAA;IAE7C,0EAA0E;IAC1E,+DAA+D;IAC/D,+DAA6C,CAAA;IAC7C,+EAA+E;IAC/E,mEAAiD,CAAA;IAEjD,0EAA0E;IAC1E,2DAA2D;IAC3D,+DAA6C,CAAA;IAC7C,gDAAgD;IAChD,mEAAiD,CAAA;AACrD,CAAC,EA7RW,cAAc,KAAd,cAAc,QA6RzB;AAED;;;;;GAKG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAA8B,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@iveri/contracts",
-  "version": "0.15.0",
+  "version": "0.16.0",
   "description": "Wire contracts shared by every Iveri backend and frontend. Zero runtime dependencies.",
   "license": "MIT",
   "repository": {