@mj-biz-apps/common-activity-sync 0.0.0 → 5.37.0

package/dist/run.d.ts

@@ -0,0 +1,67 @@
+/**
+ * @fileoverview The run vocabulary: activation, dry run, per-message decisions, and the
+ * provider→connection→rule policy chain.
+ *
+ * Everything here is pure. That is deliberate — these are the decisions a reviewer most needs to be
+ * able to reason about without a database, and the ones a dry run exists to preview.
+ *
+ * @module @mj-biz-apps/common-activity-sync
+ */
+/** Mirrors `CK_ActivitySyncConnection_Status`. */
+export type ConnectionStatus = 'Active' | 'Paused' | 'Error' | 'Disabled';
+/** Mirrors `CK_ActivitySyncRun_TriggerType`. */
+export type SyncTriggerType = 'Scheduled' | 'Manual' | 'Webhook' | 'Backfill';
+/** Mirrors `CK_ActivitySyncRunDetail_Decision`. */
+export type SyncDecision = 'Included' | 'Excluded' | 'Duplicate' | 'Failed'
+/** Dry-run outcomes. Nothing was written; this is what WOULD have happened. */
+ | 'WouldInclude' | 'WouldExclude';
+/** Mirrors the `SkippedContentPolicy` CHECKs on both the provider type and the connection. */
+export type SkippedContentPolicy = 'None' | 'SubjectEncrypted' | 'FullEncrypted';
+export interface SyncRunOptions {
+    /**
+     * Evaluate and report without writing.
+     *
+     * A dry run fetches, qualifies and resolves exactly as a real run does, then writes only the
+     * `ActivitySyncRun` and its details — never an `Activity`, never an `ActivityLink`, never an
+     * attachment, and it never advances the watermark. It is the only safe way to see what a rule
+     * set would do to a real mailbox before pointing it at one, and `CK_ActivitySyncRun_DryRunNoWatermark`
+     * enforces the watermark half at the database rather than trusting the engine.
+     */
+    DryRun: boolean;
+    TriggerType: SyncTriggerType;
+    /** Hard cap on items fetched this pass. */
+    Limit: number;
+}
+/**
+ * Whether a connection should sync right now.
+ *
+ * `Status` is the master switch; `StartAt`/`EndAt` are an activation WINDOW, so a mailbox can be
+ * provisioned in advance or retired on a date without anyone remembering to flip a switch. Both
+ * bounds are open when null, and the window only ever narrows what `Status` already allows.
+ */
+export declare function IsConnectionActive(status: ConnectionStatus, startAt: Date | null, endAt: Date | null, now: Date): boolean;
+/**
+ * Resolve a policy down the chain, most specific wins, `null` meaning "inherit".
+ *
+ * The chain is always provider type → connection → (where it applies) rule. An operator configures
+ * storage, encryption and caps ONCE per provider; a connection overrides only when that mailbox is
+ * genuinely different. That is the difference between configuring a fleet and configuring a mailbox
+ * at a time.
+ */
+export declare function ResolvePolicy<T>(providerDefault: T, ...overrides: (T | null | undefined)[]): T;
+/**
+ * Whether captured content may be retained for a message the engine declined to ingest.
+ *
+ * Retention is only ever permissible ENCRYPTED, so a policy above `None` without a key is not a
+ * configuration to honour — it is a misconfiguration to refuse. The database enforces the same pair
+ * on both ends (`CK_ActivitySyncProviderType_KeyRequired`, `CK_ActivitySyncRunDetail_ContentKey`);
+ * this is the runtime half, so the engine fails loudly rather than silently writing plaintext or
+ * silently writing nothing.
+ */
+export declare function ResolveCapturePlan(policy: SkippedContentPolicy, encryptionKeyID: string | null): {
+    Capture: 'None' | 'Subject' | 'Full';
+    EncryptionKeyID: string | null;
+};
+/** The dry-run counterpart of a decision, so a preview never claims to have written anything. */
+export declare function AsDryRunDecision(decision: SyncDecision): SyncDecision;
+//# sourceMappingURL=run.d.ts.map

package/dist/run.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"run.d.ts","sourceRoot":"","sources":["../src/run.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,kDAAkD;AAClD,MAAM,MAAM,gBAAgB,GAAG,QAAQ,GAAG,QAAQ,GAAG,OAAO,GAAG,UAAU,CAAC;AAE1E,gDAAgD;AAChD,MAAM,MAAM,eAAe,GAAG,WAAW,GAAG,QAAQ,GAAG,SAAS,GAAG,UAAU,CAAC;AAE9E,mDAAmD;AACnD,MAAM,MAAM,YAAY,GAClB,UAAU,GACV,UAAU,GACV,WAAW,GACX,QAAQ;AACV,+EAA+E;GAC7E,cAAc,GACd,cAAc,CAAC;AAErB,8FAA8F;AAC9F,MAAM,MAAM,oBAAoB,GAAG,MAAM,GAAG,kBAAkB,GAAG,eAAe,CAAC;AAEjF,MAAM,WAAW,cAAc;IAC3B;;;;;;;;OAQG;IACH,MAAM,EAAE,OAAO,CAAC;IAChB,WAAW,EAAE,eAAe,CAAC;IAC7B,2CAA2C;IAC3C,KAAK,EAAE,MAAM,CAAC;CACjB;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAC9B,MAAM,EAAE,gBAAgB,EACxB,OAAO,EAAE,IAAI,GAAG,IAAI,EACpB,KAAK,EAAE,IAAI,GAAG,IAAI,EAClB,GAAG,EAAE,IAAI,GACV,OAAO,CAiBT;AAED;;;;;;;GAOG;AACH,wBAAgB,aAAa,CAAC,CAAC,EAAE,eAAe,EAAE,CAAC,EAAE,GAAG,SAAS,EAAE,CAAC,CAAC,GAAG,IAAI,GAAG,SAAS,CAAC,EAAE,GAAG,CAAC,CAQ9F;AAED;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAC9B,MAAM,EAAE,oBAAoB,EAC5B,eAAe,EAAE,MAAM,GAAG,IAAI,GAC/B;IAAE,OAAO,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAAC;IAAC,eAAe,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAa1E;AAED,iGAAiG;AACjG,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,YAAY,GAAG,YAAY,CASrE"}

package/dist/run.js

@@ -0,0 +1,84 @@
+/**
+ * @fileoverview The run vocabulary: activation, dry run, per-message decisions, and the
+ * provider→connection→rule policy chain.
+ *
+ * Everything here is pure. That is deliberate — these are the decisions a reviewer most needs to be
+ * able to reason about without a database, and the ones a dry run exists to preview.
+ *
+ * @module @mj-biz-apps/common-activity-sync
+ */
+/**
+ * Whether a connection should sync right now.
+ *
+ * `Status` is the master switch; `StartAt`/`EndAt` are an activation WINDOW, so a mailbox can be
+ * provisioned in advance or retired on a date without anyone remembering to flip a switch. Both
+ * bounds are open when null, and the window only ever narrows what `Status` already allows.
+ */
+export function IsConnectionActive(status, startAt, endAt, now) {
+    /**
+     * `Error` retries. `Paused` and `Disabled` are a person deciding the mailbox
+     * is off and must be honoured. `Error` is a record of the last run and says
+     * nothing about whether the next one will work — refusing it latches a
+     * throttle into a permanent stop.
+     */
+    if (status !== 'Active' && status !== 'Error') {
+        return false;
+    }
+    if (startAt !== null && now.getTime() < startAt.getTime()) {
+        return false;
+    }
+    if (endAt !== null && now.getTime() > endAt.getTime()) {
+        return false;
+    }
+    return true;
+}
+/**
+ * Resolve a policy down the chain, most specific wins, `null` meaning "inherit".
+ *
+ * The chain is always provider type → connection → (where it applies) rule. An operator configures
+ * storage, encryption and caps ONCE per provider; a connection overrides only when that mailbox is
+ * genuinely different. That is the difference between configuring a fleet and configuring a mailbox
+ * at a time.
+ */
+export function ResolvePolicy(providerDefault, ...overrides) {
+    for (let i = overrides.length - 1; i >= 0; i--) {
+        const candidate = overrides[i];
+        if (candidate !== null && candidate !== undefined) {
+            return candidate;
+        }
+    }
+    return providerDefault;
+}
+/**
+ * Whether captured content may be retained for a message the engine declined to ingest.
+ *
+ * Retention is only ever permissible ENCRYPTED, so a policy above `None` without a key is not a
+ * configuration to honour — it is a misconfiguration to refuse. The database enforces the same pair
+ * on both ends (`CK_ActivitySyncProviderType_KeyRequired`, `CK_ActivitySyncRunDetail_ContentKey`);
+ * this is the runtime half, so the engine fails loudly rather than silently writing plaintext or
+ * silently writing nothing.
+ */
+export function ResolveCapturePlan(policy, encryptionKeyID) {
+    if (policy === 'None') {
+        return { Capture: 'None', EncryptionKeyID: null };
+    }
+    if (encryptionKeyID === null) {
+        throw new Error(`SkippedContentPolicy is "${policy}" but no encryption key is configured. Retaining ` +
+            `content from a message that was deliberately not ingested is only permissible ` +
+            `encrypted — set an encryption key on the provider type or the connection, or set ` +
+            `the policy to "None".`);
+    }
+    return { Capture: policy === 'SubjectEncrypted' ? 'Subject' : 'Full', EncryptionKeyID: encryptionKeyID };
+}
+/** The dry-run counterpart of a decision, so a preview never claims to have written anything. */
+export function AsDryRunDecision(decision) {
+    switch (decision) {
+        case 'Included':
+            return 'WouldInclude';
+        case 'Excluded':
+            return 'WouldExclude';
+        default:
+            return decision;
+    }
+}
+//# sourceMappingURL=run.js.map

package/dist/run.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"run.js","sourceRoot":"","sources":["../src/run.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAqCH;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAC9B,MAAwB,EACxB,OAAoB,EACpB,KAAkB,EAClB,GAAS;IAET;;;;;OAKG;IACH,IAAI,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;QAC5C,OAAO,KAAK,CAAC;IACjB,CAAC;IACD,IAAI,OAAO,KAAK,IAAI,IAAI,GAAG,CAAC,OAAO,EAAE,GAAG,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;QACxD,OAAO,KAAK,CAAC;IACjB,CAAC;IACD,IAAI,KAAK,KAAK,IAAI,IAAI,GAAG,CAAC,OAAO,EAAE,GAAG,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;QACpD,OAAO,KAAK,CAAC;IACjB,CAAC;IACD,OAAO,IAAI,CAAC;AAChB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,aAAa,CAAI,eAAkB,EAAE,GAAG,SAAmC;IACvF,KAAK,IAAI,CAAC,GAAG,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC7C,MAAM,SAAS,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;QAC/B,IAAI,SAAS,KAAK,IAAI,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAChD,OAAO,SAAS,CAAC;QACrB,CAAC;IACL,CAAC;IACD,OAAO,eAAe,CAAC;AAC3B,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,kBAAkB,CAC9B,MAA4B,EAC5B,eAA8B;IAE9B,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACpB,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC;IACtD,CAAC;IACD,IAAI,eAAe,KAAK,IAAI,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CACX,4BAA4B,MAAM,mDAAmD;YACjF,gFAAgF;YAChF,mFAAmF;YACnF,uBAAuB,CAC9B,CAAC;IACN,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,MAAM,KAAK,kBAAkB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,EAAE,eAAe,EAAE,eAAe,EAAE,CAAC;AAC7G,CAAC;AAED,iGAAiG;AACjG,MAAM,UAAU,gBAAgB,CAAC,QAAsB;IACnD,QAAQ,QAAQ,EAAE,CAAC;QACf,KAAK,UAAU;YACX,OAAO,cAAc,CAAC;QAC1B,KAAK,UAAU;YACX,OAAO,cAAc,CAAC;QAC1B;YACI,OAAO,QAAQ,CAAC;IACxB,CAAC;AACL,CAAC"}

package/dist/sql.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Values that reach ExtraFilter. ExtraFilter is a string, not parameters.
+ *
+ * IDs: reject anything that is not a UUID. Addresses and other free text:
+ * coerce, drop NULs, double single quotes. A malformed id must not become a
+ * widened result set.
+ */
+export declare class InvalidFilterInputError extends Error {
+    constructor(message: string);
+}
+export declare function RequireUUID(value: string, field: string): string;
+export declare function RequireUUIDs(values: readonly unknown[] | null | undefined, field: string): string[];
+/** Free text for a SQL string literal (addresses, type codes, external ids). */
+export declare function EscapeText(value: unknown): string;
+export declare function InList(values: readonly unknown[]): string;
+export declare function UuidInList(values: readonly unknown[], field: string): string;
+//# sourceMappingURL=sql.d.ts.map

package/dist/sql.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sql.d.ts","sourceRoot":"","sources":["../src/sql.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAKH,qBAAa,uBAAwB,SAAQ,KAAK;gBAClC,OAAO,EAAE,MAAM;CAI9B;AAED,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAKhE;AAED,wBAAgB,YAAY,CAAC,MAAM,EAAE,SAAS,OAAO,EAAE,GAAG,IAAI,GAAG,SAAS,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,CAQnG;AAED,gFAAgF;AAChF,wBAAgB,UAAU,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAIjD;AAED,wBAAgB,MAAM,CAAC,MAAM,EAAE,SAAS,OAAO,EAAE,GAAG,MAAM,CAKzD;AAED,wBAAgB,UAAU,CAAC,MAAM,EAAE,SAAS,OAAO,EAAE,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAM5E"}

package/dist/sql.js

@@ -0,0 +1,50 @@
+/**
+ * Values that reach ExtraFilter. ExtraFilter is a string, not parameters.
+ *
+ * IDs: reject anything that is not a UUID. Addresses and other free text:
+ * coerce, drop NULs, double single quotes. A malformed id must not become a
+ * widened result set.
+ */
+const UUID = /^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$/;
+export class InvalidFilterInputError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'InvalidFilterInputError';
+    }
+}
+export function RequireUUID(value, field) {
+    if (typeof value !== 'string' || !UUID.test(value)) {
+        throw new InvalidFilterInputError(`${field} must be a UUID.`);
+    }
+    return value;
+}
+export function RequireUUIDs(values, field) {
+    if (!values?.length)
+        return [];
+    return values.map((v) => {
+        if (typeof v !== 'string') {
+            throw new InvalidFilterInputError(`${field} must be a UUID.`);
+        }
+        return RequireUUID(v, field);
+    });
+}
+/** Free text for a SQL string literal (addresses, type codes, external ids). */
+export function EscapeText(value) {
+    return String(value ?? '')
+        .replace(/\0/g, '')
+        .replace(/'/g, "''");
+}
+export function InList(values) {
+    if (values.length === 0) {
+        return `'00000000-0000-0000-0000-000000000000'`;
+    }
+    return values.map((v) => `'${EscapeText(v)}'`).join(',');
+}
+export function UuidInList(values, field) {
+    const ids = RequireUUIDs(values, field);
+    if (ids.length === 0) {
+        return `'00000000-0000-0000-0000-000000000000'`;
+    }
+    return ids.map((id) => `'${id}'`).join(',');
+}
+//# sourceMappingURL=sql.js.map

package/dist/sql.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sql.js","sourceRoot":"","sources":["../src/sql.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,MAAM,IAAI,GACN,+EAA+E,CAAC;AAEpF,MAAM,OAAO,uBAAwB,SAAQ,KAAK;IAC9C,YAAY,OAAe;QACvB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAC;IAC1C,CAAC;CACJ;AAED,MAAM,UAAU,WAAW,CAAC,KAAa,EAAE,KAAa;IACpD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACjD,MAAM,IAAI,uBAAuB,CAAC,GAAG,KAAK,kBAAkB,CAAC,CAAC;IAClE,CAAC;IACD,OAAO,KAAK,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,MAA6C,EAAE,KAAa;IACrF,IAAI,CAAC,MAAM,EAAE,MAAM;QAAE,OAAO,EAAE,CAAC;IAC/B,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACpB,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;YACxB,MAAM,IAAI,uBAAuB,CAAC,GAAG,KAAK,kBAAkB,CAAC,CAAC;QAClE,CAAC;QACD,OAAO,WAAW,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IACjC,CAAC,CAAC,CAAC;AACP,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,UAAU,CAAC,KAAc;IACrC,OAAO,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC;SACrB,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;SAClB,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;AAC7B,CAAC;AAED,MAAM,UAAU,MAAM,CAAC,MAA0B;IAC7C,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,OAAO,wCAAwC,CAAC;IACpD,CAAC;IACD,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC7D,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,MAA0B,EAAE,KAAa;IAChE,MAAM,GAAG,GAAG,YAAY,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACxC,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACnB,OAAO,wCAAwC,CAAC;IACpD,CAAC;IACD,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAChD,CAAC"}

package/dist/stages.d.ts

@@ -0,0 +1,55 @@
+/**
+ * Deterministic qualification stages. Exclusions run first and are absolute.
+ */
+import { type ParticipantScope } from './participants.js';
+import type { IQualificationStage, QualificationContext, QualificationVerdict } from './qualification.js';
+import type { NormalizedItem } from './types.js';
+export interface ExclusionRow {
+    ID: string;
+    IdentityKind: string | null;
+    IdentityValue: string;
+    ActivitySyncRuleSetID: string | null;
+}
+export interface RuleRow {
+    ID: string;
+    Sequence: number;
+    IsEnabled: boolean;
+    Action: 'Include' | 'Exclude';
+    Direction: 'Inbound' | 'Outbound' | 'Internal' | null;
+    DateFrom: Date | string | null;
+    DateTo: Date | string | null;
+    ParticipantScope: ParticipantScope | null;
+    ActivitySyncRuleSetID: string | null;
+}
+export interface KnownAddressHit {
+    Address: string;
+}
+export interface EngineQualificationContext extends QualificationContext {
+    Exclusions: ExclusionRow[];
+    Rules: RuleRow[];
+    InternalDomains: string[];
+    KnownAddresses: Map<string, KnownAddressHit>;
+}
+/** Stage 0. An exclusion is not a rule a later Include can outrank. */
+export declare class ExclusionStage implements IQualificationStage {
+    readonly Name = "Exclusions";
+    readonly RequiresInference = false;
+    Evaluate(item: NormalizedItem, context: QualificationContext): Promise<QualificationVerdict>;
+}
+/** Stage 1. Bound rule sets, in sequence. */
+export declare class RulesStage implements IQualificationStage {
+    readonly Name = "Rules";
+    readonly RequiresInference = false;
+    Evaluate(item: NormalizedItem, context: QualificationContext): Promise<QualificationVerdict>;
+}
+/**
+ * Stage 2. Exact ContactMethod address match — never a domain match.
+ * A hit Includes; no hit abstains so the provider-type default (Exclude for mailboxes) decides.
+ */
+export declare class KnownParticipantStage implements IQualificationStage {
+    readonly Name = "KnownParticipant";
+    readonly RequiresInference = false;
+    Evaluate(item: NormalizedItem, context: QualificationContext): Promise<QualificationVerdict>;
+}
+export declare function DefaultDeterministicStages(): IQualificationStage[];
+//# sourceMappingURL=stages.d.ts.map

package/dist/stages.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"stages.d.ts","sourceRoot":"","sources":["../src/stages.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,EAA2D,KAAK,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACnH,OAAO,KAAK,EACR,mBAAmB,EACnB,oBAAoB,EACpB,oBAAoB,EACvB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAEjD,MAAM,WAAW,YAAY;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,aAAa,EAAE,MAAM,CAAC;IACtB,qBAAqB,EAAE,MAAM,GAAG,IAAI,CAAC;CACxC;AAED,MAAM,WAAW,OAAO;IACpB,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,OAAO,CAAC;IACnB,MAAM,EAAE,SAAS,GAAG,SAAS,CAAC;IAC9B,SAAS,EAAE,SAAS,GAAG,UAAU,GAAG,UAAU,GAAG,IAAI,CAAC;IACtD,QAAQ,EAAE,IAAI,GAAG,MAAM,GAAG,IAAI,CAAC;IAC/B,MAAM,EAAE,IAAI,GAAG,MAAM,GAAG,IAAI,CAAC;IAC7B,gBAAgB,EAAE,gBAAgB,GAAG,IAAI,CAAC;IAC1C,qBAAqB,EAAE,MAAM,GAAG,IAAI,CAAC;CACxC;AAED,MAAM,WAAW,eAAe;IAC5B,OAAO,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,0BAA2B,SAAQ,oBAAoB;IACpE,UAAU,EAAE,YAAY,EAAE,CAAC;IAC3B,KAAK,EAAE,OAAO,EAAE,CAAC;IACjB,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,cAAc,EAAE,GAAG,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;CAChD;AAQD,uEAAuE;AACvE,qBAAa,cAAe,YAAW,mBAAmB;IACtD,SAAgB,IAAI,gBAAgB;IACpC,SAAgB,iBAAiB,SAAS;IAE7B,QAAQ,CAAC,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC,oBAAoB,CAAC;CAsB5G;AAED,6CAA6C;AAC7C,qBAAa,UAAW,YAAW,mBAAmB;IAClD,SAAgB,IAAI,WAAW;IAC/B,SAAgB,iBAAiB,SAAS;IAE7B,QAAQ,CAAC,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC,oBAAoB,CAAC;CA0B5G;AAED;;;GAGG;AACH,qBAAa,qBAAsB,YAAW,mBAAmB;IAC7D,SAAgB,IAAI,sBAAsB;IAC1C,SAAgB,iBAAiB,SAAS;IAE7B,QAAQ,CAAC,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC,oBAAoB,CAAC;CAmB5G;AAED,wBAAgB,0BAA0B,IAAI,mBAAmB,EAAE,CAElE"}

package/dist/stages.js

@@ -0,0 +1,109 @@
+/**
+ * Deterministic qualification stages. Exclusions run first and are absolute.
+ */
+import { ClassifyParticipants, DomainOf, MatchesParticipantScope } from './participants.js';
+function asDate(value) {
+    if (value == null)
+        return null;
+    const d = value instanceof Date ? value : new Date(value);
+    return Number.isNaN(d.getTime()) ? null : d;
+}
+/** Stage 0. An exclusion is not a rule a later Include can outrank. */
+export class ExclusionStage {
+    constructor() {
+        this.Name = 'Exclusions';
+        this.RequiresInference = false;
+    }
+    async Evaluate(item, context) {
+        const ctx = context;
+        const addresses = item.Participants.map((p) => p.Address.trim().toLowerCase()).filter(Boolean);
+        for (const exclusion of ctx.Exclusions ?? []) {
+            const needle = exclusion.IdentityValue.trim().toLowerCase().replace(/^@/, '');
+            if (!needle)
+                continue;
+            for (const address of addresses) {
+                const domain = DomainOf(address);
+                const identityHit = address === needle || address.endsWith('@' + needle);
+                const domainHit = domain === needle;
+                if (identityHit || domainHit) {
+                    return {
+                        Decision: 'Exclude',
+                        Reason: `Exclusion ${exclusion.ID} matched ${address}`,
+                        StageName: this.Name,
+                        ActivitySyncExclusionID: exclusion.ID,
+                    };
+                }
+            }
+        }
+        return { Decision: 'Undecided', Reason: 'No exclusion matched', StageName: this.Name };
+    }
+}
+/** Stage 1. Bound rule sets, in sequence. */
+export class RulesStage {
+    constructor() {
+        this.Name = 'Rules';
+        this.RequiresInference = false;
+    }
+    async Evaluate(item, context) {
+        const ctx = context;
+        const rules = [...(ctx.Rules ?? [])]
+            .filter((r) => r.IsEnabled)
+            .sort((a, b) => a.Sequence - b.Sequence);
+        for (const rule of rules) {
+            if (rule.Direction && rule.Direction !== item.Direction)
+                continue;
+            const from = asDate(rule.DateFrom);
+            const to = asDate(rule.DateTo);
+            if (from && item.StartedAt.getTime() < from.getTime())
+                continue;
+            if (to && item.StartedAt.getTime() > to.getTime())
+                continue;
+            if (rule.ParticipantScope && rule.ParticipantScope !== 'Any') {
+                const composition = ClassifyParticipants(item.Participants, ctx.InternalDomains ?? []);
+                if (!MatchesParticipantScope(rule.ParticipantScope, composition)) {
+                    continue;
+                }
+            }
+            return {
+                Decision: rule.Action,
+                Reason: `Rule ${rule.ID} ${rule.Action}`,
+                StageName: this.Name,
+                ActivitySyncRuleID: rule.ID,
+            };
+        }
+        return { Decision: 'Undecided', Reason: 'No rule matched', StageName: this.Name };
+    }
+}
+/**
+ * Stage 2. Exact ContactMethod address match — never a domain match.
+ * A hit Includes; no hit abstains so the provider-type default (Exclude for mailboxes) decides.
+ */
+export class KnownParticipantStage {
+    constructor() {
+        this.Name = 'KnownParticipant';
+        this.RequiresInference = false;
+    }
+    async Evaluate(item, context) {
+        const ctx = context;
+        const known = ctx.KnownAddresses ?? new Map();
+        for (const participant of item.Participants) {
+            const address = participant.Address.trim().toLowerCase();
+            if (address && known.has(address)) {
+                return {
+                    Decision: 'Include',
+                    Reason: `Known contact method ${address}`,
+                    StageName: this.Name,
+                };
+            }
+        }
+        return {
+            Decision: 'Undecided',
+            Reason: 'No participant matched a stored ContactMethod',
+            StageName: this.Name,
+        };
+    }
+}
+export function DefaultDeterministicStages() {
+    return [new ExclusionStage(), new RulesStage(), new KnownParticipantStage()];
+}
+//# sourceMappingURL=stages.js.map

package/dist/stages.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stages.js","sourceRoot":"","sources":["../src/stages.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,EAAE,oBAAoB,EAAE,QAAQ,EAAE,uBAAuB,EAAyB,MAAM,mBAAmB,CAAC;AAsCnH,SAAS,MAAM,CAAC,KAAuC;IACnD,IAAI,KAAK,IAAI,IAAI;QAAE,OAAO,IAAI,CAAC;IAC/B,MAAM,CAAC,GAAG,KAAK,YAAY,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC;IAC1D,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;AAChD,CAAC;AAED,uEAAuE;AACvE,MAAM,OAAO,cAAc;IAA3B;QACoB,SAAI,GAAG,YAAY,CAAC;QACpB,sBAAiB,GAAG,KAAK,CAAC;IAwB9C,CAAC;IAtBU,KAAK,CAAC,QAAQ,CAAC,IAAoB,EAAE,OAA6B;QACrE,MAAM,GAAG,GAAG,OAAqC,CAAC;QAClD,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC/F,KAAK,MAAM,SAAS,IAAI,GAAG,CAAC,UAAU,IAAI,EAAE,EAAE,CAAC;YAC3C,MAAM,MAAM,GAAG,SAAS,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YAC9E,IAAI,CAAC,MAAM;gBAAE,SAAS;YACtB,KAAK,MAAM,OAAO,IAAI,SAAS,EAAE,CAAC;gBAC9B,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;gBACjC,MAAM,WAAW,GAAG,OAAO,KAAK,MAAM,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,GAAG,MAAM,CAAC,CAAC;gBACzE,MAAM,SAAS,GAAG,MAAM,KAAK,MAAM,CAAC;gBACpC,IAAI,WAAW,IAAI,SAAS,EAAE,CAAC;oBAC3B,OAAO;wBACH,QAAQ,EAAE,SAAS;wBACnB,MAAM,EAAE,aAAa,SAAS,CAAC,EAAE,YAAY,OAAO,EAAE;wBACtD,SAAS,EAAE,IAAI,CAAC,IAAI;wBACpB,uBAAuB,EAAE,SAAS,CAAC,EAAE;qBACxC,CAAC;gBACN,CAAC;YACL,CAAC;QACL,CAAC;QACD,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,EAAE,sBAAsB,EAAE,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;IAC3F,CAAC;CACJ;AAED,6CAA6C;AAC7C,MAAM,OAAO,UAAU;IAAvB;QACoB,SAAI,GAAG,OAAO,CAAC;QACf,sBAAiB,GAAG,KAAK,CAAC;IA4B9C,CAAC;IA1BU,KAAK,CAAC,QAAQ,CAAC,IAAoB,EAAE,OAA6B;QACrE,MAAM,GAAG,GAAG,OAAqC,CAAC;QAClD,MAAM,KAAK,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;aAC/B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;aAC1B,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC;QAC7C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACvB,IAAI,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,SAAS,KAAK,IAAI,CAAC,SAAS;gBAAE,SAAS;YAClE,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACnC,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC/B,IAAI,IAAI,IAAI,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE;gBAAE,SAAS;YAChE,IAAI,EAAE,IAAI,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE;gBAAE,SAAS;YAC5D,IAAI,IAAI,CAAC,gBAAgB,IAAI,IAAI,CAAC,gBAAgB,KAAK,KAAK,EAAE,CAAC;gBAC3D,MAAM,WAAW,GAAG,oBAAoB,CAAC,IAAI,CAAC,YAAY,EAAE,GAAG,CAAC,eAAe,IAAI,EAAE,CAAC,CAAC;gBACvF,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,gBAAgB,EAAE,WAAW,CAAC,EAAE,CAAC;oBAC/D,SAAS;gBACb,CAAC;YACL,CAAC;YACD,OAAO;gBACH,QAAQ,EAAE,IAAI,CAAC,MAAM;gBACrB,MAAM,EAAE,QAAQ,IAAI,CAAC,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE;gBACxC,SAAS,EAAE,IAAI,CAAC,IAAI;gBACpB,kBAAkB,EAAE,IAAI,CAAC,EAAE;aAC9B,CAAC;QACN,CAAC;QACD,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,EAAE,iBAAiB,EAAE,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;IACtF,CAAC;CACJ;AAED;;;GAGG;AACH,MAAM,OAAO,qBAAqB;IAAlC;QACoB,SAAI,GAAG,kBAAkB,CAAC;QAC1B,sBAAiB,GAAG,KAAK,CAAC;IAqB9C,CAAC;IAnBU,KAAK,CAAC,QAAQ,CAAC,IAAoB,EAAE,OAA6B;QACrE,MAAM,GAAG,GAAG,OAAqC,CAAC;QAClD,MAAM,KAAK,GAAG,GAAG,CAAC,cAAc,IAAI,IAAI,GAAG,EAAE,CAAC;QAC9C,KAAK,MAAM,WAAW,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YAC1C,MAAM,OAAO,GAAG,WAAW,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YACzD,IAAI,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;gBAChC,OAAO;oBACH,QAAQ,EAAE,SAAS;oBACnB,MAAM,EAAE,wBAAwB,OAAO,EAAE;oBACzC,SAAS,EAAE,IAAI,CAAC,IAAI;iBACvB,CAAC;YACN,CAAC;QACL,CAAC;QACD,OAAO;YACH,QAAQ,EAAE,WAAW;YACrB,MAAM,EAAE,+CAA+C;YACvD,SAAS,EAAE,IAAI,CAAC,IAAI;SACvB,CAAC;IACN,CAAC;CACJ;AAED,MAAM,UAAU,0BAA0B;IACtC,OAAO,CAAC,IAAI,cAAc,EAAE,EAAE,IAAI,UAAU,EAAE,EAAE,IAAI,qBAAqB,EAAE,CAAC,CAAC;AACjF,CAAC"}

package/dist/types.d.ts

@@ -0,0 +1,130 @@
+/**
+ * @fileoverview The provider-neutral shapes every activity source speaks.
+ *
+ * Nothing downstream of a provider knows what produced an item, which is what makes a fixture
+ * provider a genuine substitute rather than a mock: the fixture and a live mailbox hand over the
+ * same type, so a test exercises the real code path instead of a parallel one.
+ *
+ * @module @mj-biz-apps/common-activity-sync
+ */
+/** Mirrors `CK_Activity_Direction`. */
+export type ActivityDirection = 'Inbound' | 'Outbound' | 'Internal';
+/** Mirrors `CK_ActivityLink_Role`. */
+export type ActivityLinkRole = 'Regarding' | 'Participant' | 'From' | 'To' | 'Cc' | 'Bcc' | 'Organizer' | 'Attendee' | 'LoggedFor';
+/** Mirrors `CK_ActivityLink_IdentityKind`. */
+export type ActivityIdentityKind = 'Email' | 'Phone' | 'ExternalUser';
+/**
+ * Runtime value lists for the two unions above, for validating link specs that arrive as data
+ * (JSON params on `Common.LogActivity`) rather than as typed code. The compiler checks every
+ * member is a legal union value; keep them in lockstep with the CHECK constraints.
+ */
+export declare const ACTIVITY_LINK_ROLES: readonly ActivityLinkRole[];
+export declare const ACTIVITY_IDENTITY_KINDS: readonly ActivityIdentityKind[];
+/**
+ * The surface a provider reads.
+ *
+ * This is not decoration — it selects the watermark basis. See {@link WatermarkBasisForKind}.
+ */
+export type ActivitySourceKind = 'Message' | 'Calendar' | 'Social' | 'Chat';
+/**
+ * How a surface's watermark advances.
+ *
+ * `ItemTime` — the newest item's own timestamp. Valid only where a timestamp is always in the past.
+ * `ObservationTime` — when the source looked. Required wherever an item can be dated in the FUTURE.
+ */
+export type WatermarkBasis = 'ItemTime' | 'ObservationTime';
+/** One party on an item, as the source reports them — an address, not yet a person. */
+export interface ItemParticipant {
+    /** Lower-cased by the provider. Matching is case-insensitive and normalization belongs at the edge. */
+    Address: string;
+    Name: string | null;
+    Role: ActivityLinkRole;
+    /** Which identity column an unresolved link would use. */
+    IdentityKind: ActivityIdentityKind;
+}
+/** A provider-neutral item, ready for qualification. */
+export interface NormalizedItem {
+    /**
+     * The provider's own stable id — half of the dedupe key, paired with `SourceSystem`.
+     *
+     * For Graph this is the message id, NOT the RFC-822 `Message-ID` header. The distinction
+     * matters: the RFC header is stable across mailboxes and the Graph id is not, so keying on the
+     * Graph id means a message ingested from two mailboxes yields two rows.
+     */
+    ExternalID: string;
+    /** Groups replies. Becomes `Activity.ExternalThreadID`. */
+    ExternalThreadID: string | null;
+    /** `ActivityType.Code` — resolved by CODE so renaming a type never breaks ingestion. */
+    TypeCode: string;
+    /** Becomes `Activity.Title`. */
+    Subject: string;
+    /** Body or preview. Becomes `Activity.Description`. */
+    Body: string | null;
+    StartedAt: Date;
+    /** Set for calendar items; null for messages. */
+    EndedAt: Date | null;
+    /** Set for calendar items. */
+    Location: string | null;
+    Direction: ActivityDirection;
+    Participants: ItemParticipant[];
+    /**
+     * The item was called off and did not happen.
+     *
+     * First-class rather than something to dig out of `Raw`, because the write branches on it:
+     * `CK_Activity_Status` allows `'Cancelled'`, so a cancelled meeting is recorded as cancelled
+     * rather than as completed. Always false for messages — a sent mail cannot be un-sent.
+     */
+    Cancelled: boolean;
+    /** The provider payload, verbatim. Stringified into `Activity.Details`. */
+    Raw: Record<string, unknown>;
+}
+/** What the engine asks a provider for. */
+export interface ActivitySourceQuery {
+    /** The account/mailbox/handle to read, from `ActivitySyncConnection.Mailbox`. */
+    Mailbox: string;
+    /**
+     * The watermark — `ActivitySyncConnection.LastSyncAt`. Null on a first run.
+     *
+     * ADVISORY TO THE PROVIDER, NOT A GUARANTEE. Several transports expose no date filter at all
+     * (MJ's `GetMessagesParams` is `{ Identifier, NumMessages, UnreadOnly, IncludeHeaders }`), so a
+     * provider may have to fetch the most recent `Limit` and let the engine discard what it has
+     * already seen.
+     */
+    Since: Date | null;
+    /** Hard cap on items returned. */
+    Limit: number;
+}
+/** Whatever a provider's transport handed back, before normalization. */
+export interface RawBatch {
+    Payloads: Record<string, unknown>[];
+    /** Reported, never thrown — a partial batch is still worth filing. */
+    Issues: string[];
+}
+/** One provider pass. */
+export interface ActivitySourceBatch {
+    Items: NormalizedItem[];
+    /**
+     * Advanced from the ITEMS (or the observation), never from a bare clock read at the end of the
+     * run: a wall-clock watermark skips anything that arrives while the run is in flight, whereas
+     * an item-derived one cannot, because it never claims to have seen past the newest thing it
+     * actually saw.
+     */
+    HighWatermark: Date | null;
+    Issues: string[];
+    /**
+     * True when the provider did not complete a look — a throw from FetchRaw / transport / auth —
+     * not an empty mailbox and not a deliberate live-fetch refusal. The engine must not treat
+     * this as Success or clear LastError.
+     */
+    Failed?: boolean;
+}
+/**
+ * The watermark basis a surface requires.
+ *
+ * A CALENDAR source must never advance on `max(StartedAt)`. A meeting's start is routinely in the
+ * FUTURE, so one December event sets the watermark to December and every meeting created afterwards
+ * for an earlier date is filtered out as already-seen — permanently, and with no error. The
+ * calendar simply stops ingesting.
+ */
+export declare function WatermarkBasisForKind(kind: ActivitySourceKind): WatermarkBasis;
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,uCAAuC;AACvC,MAAM,MAAM,iBAAiB,GAAG,SAAS,GAAG,UAAU,GAAG,UAAU,CAAC;AAEpE,sCAAsC;AACtC,MAAM,MAAM,gBAAgB,GACtB,WAAW,GACX,aAAa,GACb,MAAM,GACN,IAAI,GACJ,IAAI,GACJ,KAAK,GACL,WAAW,GACX,UAAU,GACV,WAAW,CAAC;AAElB,8CAA8C;AAC9C,MAAM,MAAM,oBAAoB,GAAG,OAAO,GAAG,OAAO,GAAG,cAAc,CAAC;AAEtE;;;;GAIG;AACH,eAAO,MAAM,mBAAmB,EAAE,SAAS,gBAAgB,EAU1D,CAAC;AAEF,eAAO,MAAM,uBAAuB,EAAE,SAAS,oBAAoB,EAAuC,CAAC;AAE3G;;;;GAIG;AACH,MAAM,MAAM,kBAAkB,GAAG,SAAS,GAAG,UAAU,GAAG,QAAQ,GAAG,MAAM,CAAC;AAE5E;;;;;GAKG;AACH,MAAM,MAAM,cAAc,GAAG,UAAU,GAAG,iBAAiB,CAAC;AAE5D,uFAAuF;AACvF,MAAM,WAAW,eAAe;IAC5B,uGAAuG;IACvG,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,IAAI,EAAE,gBAAgB,CAAC;IACvB,0DAA0D;IAC1D,YAAY,EAAE,oBAAoB,CAAC;CACtC;AAED,wDAAwD;AACxD,MAAM,WAAW,cAAc;IAC3B;;;;;;OAMG;IACH,UAAU,EAAE,MAAM,CAAC;IACnB,2DAA2D;IAC3D,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,wFAAwF;IACxF,QAAQ,EAAE,MAAM,CAAC;IACjB,gCAAgC;IAChC,OAAO,EAAE,MAAM,CAAC;IAChB,uDAAuD;IACvD,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,SAAS,EAAE,IAAI,CAAC;IAChB,iDAAiD;IACjD,OAAO,EAAE,IAAI,GAAG,IAAI,CAAC;IACrB,8BAA8B;IAC9B,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,SAAS,EAAE,iBAAiB,CAAC;IAC7B,YAAY,EAAE,eAAe,EAAE,CAAC;IAChC;;;;;;OAMG;IACH,SAAS,EAAE,OAAO,CAAC;IACnB,2EAA2E;IAC3E,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAChC;AAED,2CAA2C;AAC3C,MAAM,WAAW,mBAAmB;IAChC,iFAAiF;IACjF,OAAO,EAAE,MAAM,CAAC;IAChB;;;;;;;OAOG;IACH,KAAK,EAAE,IAAI,GAAG,IAAI,CAAC;IACnB,kCAAkC;IAClC,KAAK,EAAE,MAAM,CAAC;CACjB;AAED,yEAAyE;AACzE,MAAM,WAAW,QAAQ;IACrB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;IACpC,sEAAsE;IACtE,MAAM,EAAE,MAAM,EAAE,CAAC;CACpB;AAED,yBAAyB;AACzB,MAAM,WAAW,mBAAmB;IAChC,KAAK,EAAE,cAAc,EAAE,CAAC;IACxB;;;;;OAKG;IACH,aAAa,EAAE,IAAI,GAAG,IAAI,CAAC;IAC3B,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB;;;;OAIG;IACH,MAAM,CAAC,EAAE,OAAO,CAAC;CACpB;AAED;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,kBAAkB,GAAG,cAAc,CAE9E"}

package/dist/types.js

@@ -0,0 +1,38 @@
+/**
+ * @fileoverview The provider-neutral shapes every activity source speaks.
+ *
+ * Nothing downstream of a provider knows what produced an item, which is what makes a fixture
+ * provider a genuine substitute rather than a mock: the fixture and a live mailbox hand over the
+ * same type, so a test exercises the real code path instead of a parallel one.
+ *
+ * @module @mj-biz-apps/common-activity-sync
+ */
+/**
+ * Runtime value lists for the two unions above, for validating link specs that arrive as data
+ * (JSON params on `Common.LogActivity`) rather than as typed code. The compiler checks every
+ * member is a legal union value; keep them in lockstep with the CHECK constraints.
+ */
+export const ACTIVITY_LINK_ROLES = [
+    'Regarding',
+    'Participant',
+    'From',
+    'To',
+    'Cc',
+    'Bcc',
+    'Organizer',
+    'Attendee',
+    'LoggedFor',
+];
+export const ACTIVITY_IDENTITY_KINDS = ['Email', 'Phone', 'ExternalUser'];
+/**
+ * The watermark basis a surface requires.
+ *
+ * A CALENDAR source must never advance on `max(StartedAt)`. A meeting's start is routinely in the
+ * FUTURE, so one December event sets the watermark to December and every meeting created afterwards
+ * for an earlier date is filtered out as already-seen — permanently, and with no error. The
+ * calendar simply stops ingesting.
+ */
+export function WatermarkBasisForKind(kind) {
+    return kind === 'Calendar' ? 'ObservationTime' : 'ItemTime';
+}
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAoBH;;;;GAIG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAgC;IAC5D,WAAW;IACX,aAAa;IACb,MAAM;IACN,IAAI;IACJ,IAAI;IACJ,KAAK;IACL,WAAW;IACX,UAAU;IACV,WAAW;CACd,CAAC;AAEF,MAAM,CAAC,MAAM,uBAAuB,GAAoC,CAAC,OAAO,EAAE,OAAO,EAAE,cAAc,CAAC,CAAC;AA2G3G;;;;;;;GAOG;AACH,MAAM,UAAU,qBAAqB,CAAC,IAAwB;IAC1D,OAAO,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,UAAU,CAAC;AAChE,CAAC"}