@open-mercato/core 0.5.1-develop.2691.d8a0934b37 → 0.5.1-develop.2699.f8b50c8046

package/dist/modules/messages/api/route.js

@@ -1,4 +1,5 @@
 import { z } from "zod";
+import { sql } from "kysely";
 import { findWithDecryption } from "@open-mercato/shared/lib/encryption/find";
 import { hashForLookup } from "@open-mercato/shared/lib/encryption/aes";
 import { User } from "../../auth/data/entities.js";
@@ -17,8 +18,8 @@ import {
   messageListItemSchema
 } from "./openapi.js";
 const NO_MATCH_ID = "00000000-0000-0000-0000-000000000000";
-function getKnex(em) {
-  return em.getConnection().getKnex();
+function getDb(em) {
+  return em.getKysely();
 }
 const metadata = {
   GET: { requireAuth: true, requireFeatures: ["messages.view"] },
@@ -30,104 +31,100 @@ async function GET(req) {
   const url = new URL(req.url);
   const params = Object.fromEntries(url.searchParams);
   const input = listMessagesSchema.parse(params);
-  const knex = getKnex(em);
-  let query = knex("messages as m").where("m.tenant_id", scope.tenantId).whereNull("m.deleted_at");
-  if (scope.organizationId) {
-    query = query.where("m.organization_id", scope.organizationId);
-  } else {
-    query = query.whereNull("m.organization_id");
-  }
-  const joinRecipient = () => {
-    query = query.leftJoin("message_recipients as r", function() {
-      this.on("m.id", "=", "r.message_id").andOn("r.recipient_user_id", "=", knex.raw("?", [scope.userId]));
-    });
-  };
-  switch (input.folder) {
-    case "inbox":
-      joinRecipient();
-      query = query.whereNotNull("r.message_id").whereNull("r.deleted_at").whereNull("r.archived_at").where("m.is_draft", false);
-      break;
-    case "archived":
-      joinRecipient();
-      query = query.whereNotNull("r.message_id").whereNull("r.deleted_at").whereNotNull("r.archived_at");
-      break;
-    case "sent":
-      query = query.where("m.sender_user_id", scope.userId).where("m.is_draft", false);
-      joinRecipient();
-      break;
-    case "drafts":
-      query = query.where("m.sender_user_id", scope.userId).where("m.is_draft", true);
-      joinRecipient();
-      break;
-    case "all":
-      joinRecipient();
-      query = query.where(function() {
-        this.where("m.sender_user_id", scope.userId).orWhereNotNull("r.message_id");
-      });
-      break;
-    default: {
-      const unsupportedFolder = input.folder;
-      throw new Error(`Unsupported folder: ${String(unsupportedFolder)}`);
-    }
-  }
-  if (input.status) {
-    query = query.where("r.status", input.status);
-  }
-  if (input.type) {
-    query = query.where("m.type", input.type);
-  }
-  if (input.visibility) {
-    query = query.where("m.visibility", input.visibility);
-  }
-  if (input.sourceEntityType) {
-    query = query.where("m.source_entity_type", input.sourceEntityType);
-  }
-  if (input.sourceEntityId) {
-    query = query.where("m.source_entity_id", input.sourceEntityId);
-  }
-  if (input.externalEmail) {
-    query = query.where("m.external_email_hash", hashForLookup(input.externalEmail));
-  }
-  if (input.senderId) {
-    query = query.where("m.sender_user_id", input.senderId);
-  }
-  if (input.search) {
-    const matchedIds = await findMessageIdsBySearchTokens({
-      em,
-      query: input.search,
-      tenantId: scope.tenantId ?? null,
-      organizationId: scope.organizationId
-    });
-    if (matchedIds === null || matchedIds.length === 0) {
-      query = query.where("m.id", NO_MATCH_ID);
+  const db = getDb(em);
+  const searchIds = input.search ? await findMessageIdsBySearchTokens({
+    em,
+    query: input.search,
+    tenantId: scope.tenantId ?? null,
+    organizationId: scope.organizationId
+  }) : void 0;
+  const buildBaseQuery = () => {
+    let q = db.selectFrom("messages as m").where("m.tenant_id", "=", scope.tenantId).where("m.deleted_at", "is", null);
+    if (scope.organizationId) {
+      q = q.where("m.organization_id", "=", scope.organizationId);
     } else {
-      query = query.whereIn("m.id", matchedIds);
+      q = q.where("m.organization_id", "is", null);
     }
-  }
-  if (input.since) {
-    query = query.where("m.sent_at", ">", new Date(input.since));
-  }
-  if (input.hasObjects !== void 0) {
-    const subquery = knex("message_objects").select(1).whereRaw("message_objects.message_id = m.id");
-    query = input.hasObjects ? query.whereExists(subquery) : query.whereNotExists(subquery);
-  }
-  if (input.hasAttachments !== void 0) {
-    const subquery = knex("attachments").select(1).where("attachments.entity_id", MESSAGE_ATTACHMENT_ENTITY_ID).whereRaw("attachments.record_id = m.id");
-    query = input.hasAttachments ? query.whereExists(subquery) : query.whereNotExists(subquery);
-  }
-  if (input.hasActions !== void 0) {
-    query = input.hasActions ? query.whereNotNull("m.action_data") : query.whereNull("m.action_data");
-  }
-  const countResult = await query.clone().count("* as count").first();
+    const joinRecipient = () => {
+      q = q.leftJoin("message_recipients as r", (jb) => jb.onRef("m.id", "=", "r.message_id").on("r.recipient_user_id", "=", scope.userId));
+    };
+    switch (input.folder) {
+      case "inbox":
+        joinRecipient();
+        q = q.where("r.message_id", "is not", null).where("r.deleted_at", "is", null).where("r.archived_at", "is", null).where("m.is_draft", "=", false);
+        break;
+      case "archived":
+        joinRecipient();
+        q = q.where("r.message_id", "is not", null).where("r.deleted_at", "is", null).where("r.archived_at", "is not", null);
+        break;
+      case "sent":
+        q = q.where("m.sender_user_id", "=", scope.userId).where("m.is_draft", "=", false);
+        joinRecipient();
+        break;
+      case "drafts":
+        q = q.where("m.sender_user_id", "=", scope.userId).where("m.is_draft", "=", true);
+        joinRecipient();
+        break;
+      case "all":
+        joinRecipient();
+        q = q.where((eb) => eb.or([
+          eb("m.sender_user_id", "=", scope.userId),
+          eb("r.message_id", "is not", null)
+        ]));
+        break;
+      default: {
+        const unsupportedFolder = input.folder;
+        throw new Error(`Unsupported folder: ${String(unsupportedFolder)}`);
+      }
+    }
+    if (input.status) q = q.where("r.status", "=", input.status);
+    if (input.type) q = q.where("m.type", "=", input.type);
+    if (input.visibility) q = q.where("m.visibility", "=", input.visibility);
+    if (input.sourceEntityType) q = q.where("m.source_entity_type", "=", input.sourceEntityType);
+    if (input.sourceEntityId) q = q.where("m.source_entity_id", "=", input.sourceEntityId);
+    if (input.externalEmail) q = q.where("m.external_email_hash", "=", hashForLookup(input.externalEmail));
+    if (input.senderId) q = q.where("m.sender_user_id", "=", input.senderId);
+    if (input.search) {
+      if (!searchIds || searchIds.length === 0) {
+        q = q.where("m.id", "=", NO_MATCH_ID);
+      } else {
+        q = q.where("m.id", "in", searchIds);
+      }
+    }
+    if (input.since) q = q.where("m.sent_at", ">", new Date(input.since));
+    if (input.hasObjects !== void 0) {
+      const existsFn = (eb) => eb.exists(
+        eb.selectFrom("message_objects").select(sql`1`.as("one")).whereRef("message_objects.message_id", "=", "m.id")
+      );
+      const notExistsFn = (eb) => eb.not(eb.exists(
+        eb.selectFrom("message_objects").select(sql`1`.as("one")).whereRef("message_objects.message_id", "=", "m.id")
+      ));
+      q = input.hasObjects ? q.where(existsFn) : q.where(notExistsFn);
+    }
+    if (input.hasAttachments !== void 0) {
+      const existsFn = (eb) => eb.exists(
+        eb.selectFrom("attachments").select(sql`1`.as("one")).where("attachments.entity_id", "=", MESSAGE_ATTACHMENT_ENTITY_ID).whereRef("attachments.record_id", "=", "m.id")
+      );
+      const notExistsFn = (eb) => eb.not(eb.exists(
+        eb.selectFrom("attachments").select(sql`1`.as("one")).where("attachments.entity_id", "=", MESSAGE_ATTACHMENT_ENTITY_ID).whereRef("attachments.record_id", "=", "m.id")
+      ));
+      q = input.hasAttachments ? q.where(existsFn) : q.where(notExistsFn);
+    }
+    if (input.hasActions !== void 0) {
+      q = input.hasActions ? q.where("m.action_data", "is not", null) : q.where("m.action_data", "is", null);
+    }
+    return q;
+  };
+  const countResult = await buildBaseQuery().select(sql`count(*)`.as("count")).executeTakeFirst();
   const total = Number(countResult?.count ?? 0);
   const offset = (input.page - 1) * input.pageSize;
-  const scopeRows = await query.select(
+  const scopeRows = await buildBaseQuery().select([
     "m.id",
     "m.sender_user_id",
     "m.is_draft",
     "r.status as recipient_status",
     "r.read_at"
-  ).orderBy("m.sent_at", "desc").offset(offset).limit(input.pageSize);
+  ]).orderBy("m.sent_at", "desc").offset(offset).limit(input.pageSize).execute();
   const typedRows = scopeRows;
   const messageIds = typedRows.map((row) => row.id);
   const messageEntities = messageIds.length > 0 ? await findWithDecryption(
@@ -147,12 +144,12 @@ async function GET(req) {
     acc[obj.messageId].push(obj);
     return acc;
   }, {});
-  const attachmentCounts = messageIds.length > 0 ? await getKnex(em)("attachments").select("record_id").count("* as count").where("entity_id", MESSAGE_ATTACHMENT_ENTITY_ID).whereIn("record_id", messageIds).groupBy("record_id") : [];
+  const attachmentCounts = messageIds.length > 0 ? await getDb(em).selectFrom("attachments").select(["record_id", sql`count(*)`.as("count")]).where("entity_id", "=", MESSAGE_ATTACHMENT_ENTITY_ID).where("record_id", "in", messageIds).groupBy("record_id").execute() : [];
   const attachmentCountByMessage = attachmentCounts.reduce((acc, row) => {
     acc[row.record_id] = Number(row.count);
     return acc;
   }, {});
-  const recipientCounts = messageIds.length > 0 ? await getKnex(em)("message_recipients").select("message_id").count("* as count").whereIn("message_id", messageIds).whereNull("deleted_at").groupBy("message_id") : [];
+  const recipientCounts = messageIds.length > 0 ? await getDb(em).selectFrom("message_recipients").select(["message_id", sql`count(*)`.as("count")]).where("message_id", "in", messageIds).where("deleted_at", "is", null).groupBy("message_id").execute() : [];
   const recipientCountByMessage = recipientCounts.reduce((acc, row) => {
     acc[row.message_id] = Number(row.count);
     return acc;

package/dist/modules/messages/api/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/messages/api/route.ts"],
-  "sourcesContent": ["import { z } from 'zod'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport type { Knex } from 'knex'\nimport type { CommandBus } from '@open-mercato/shared/lib/commands/command-bus'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi/types'\nimport { findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { hashForLookup } from '@open-mercato/shared/lib/encryption/aes'\nimport { User } from '../../auth/data/entities'\nimport { Message, MessageObject } from '../data/entities'\nimport { composeMessageSchema, listMessagesSchema } from '../data/validators'\nimport { MESSAGE_ATTACHMENT_ENTITY_ID } from '../lib/constants'\nimport { getMessageType } from '../lib/message-types-registry'\nimport { validateMessageObjectsForType } from '../lib/object-validation'\nimport { attachOperationMetadataHeader } from '../lib/operationMetadata'\nimport { canUseMessageEmailFeature, resolveMessageContext } from '../lib/routeHelpers'\nimport { findMessageIdsBySearchTokens } from '../lib/searchLookup'\nimport { MessageCommandExecuteResult } from '../commands/shared'\nimport {\n  composeMessageSchema as composeSchema,\n  composeResponseSchema,\n  listMessagesSchema as listSchema,\n  messageListItemSchema,\n} from './openapi'\n\ntype MessageCommandExecuteResultWithThreadId = MessageCommandExecuteResult & {\n  threadId: string\n}\n\nconst NO_MATCH_ID = '00000000-0000-0000-0000-000000000000'\n\nfunction getKnex(em: EntityManager): Knex {\n  return (em.getConnection() as unknown as { getKnex: () => Knex }).getKnex()\n}\n\ntype MessageListScopeRow = {\n  id: string\n  sender_user_id: string\n  is_draft: boolean\n  recipient_status: string | null\n  read_at: string | null\n}\n\ntype AttachmentCountRow = {\n  record_id: string\n  count: string | number\n}\n\ntype RecipientCountRow = {\n  message_id: string\n  count: string | number\n}\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['messages.view'] },\n  POST: { requireAuth: true, requireFeatures: ['messages.compose'] },\n}\n\nexport async function GET(req: Request) {\n  const { ctx, scope } = await resolveMessageContext(req)\n  const em = ctx.container.resolve('em') as EntityManager\n  const url = new URL(req.url)\n  const params = Object.fromEntries(url.searchParams)\n  const input = listMessagesSchema.parse(params)\n  const knex = getKnex(em)\n\n  let query = knex('messages as m')\n    .where('m.tenant_id', scope.tenantId)\n    .whereNull('m.deleted_at')\n\n  if (scope.organizationId) {\n    query = query.where('m.organization_id', scope.organizationId)\n  } else {\n    query = query.whereNull('m.organization_id')\n  }\n\n  const joinRecipient = () => {\n    query = query.leftJoin('message_recipients as r', function () {\n      this.on('m.id', '=', 'r.message_id').andOn('r.recipient_user_id', '=', knex.raw('?', [scope.userId]))\n    })\n  }\n\n  switch (input.folder) {\n    case 'inbox':\n      joinRecipient()\n      query = query\n        .whereNotNull('r.message_id')\n        .whereNull('r.deleted_at')\n        .whereNull('r.archived_at')\n        .where('m.is_draft', false)\n      break\n    case 'archived':\n      joinRecipient()\n      query = query\n        .whereNotNull('r.message_id')\n        .whereNull('r.deleted_at')\n        .whereNotNull('r.archived_at')\n      break\n    case 'sent':\n      query = query\n        .where('m.sender_user_id', scope.userId)\n        .where('m.is_draft', false)\n      joinRecipient()\n      break\n    case 'drafts':\n      query = query\n        .where('m.sender_user_id', scope.userId)\n        .where('m.is_draft', true)\n      joinRecipient()\n      break\n    case 'all':\n      joinRecipient()\n      query = query.where(function () {\n        this.where('m.sender_user_id', scope.userId).orWhereNotNull('r.message_id')\n      })\n      break\n    default: {\n      const unsupportedFolder: never = input.folder\n      throw new Error(`Unsupported folder: ${String(unsupportedFolder)}`)\n    }\n  }\n\n  if (input.status) {\n    query = query.where('r.status', input.status)\n  }\n\n  if (input.type) {\n    query = query.where('m.type', input.type)\n  }\n\n  if (input.visibility) {\n    query = query.where('m.visibility', input.visibility)\n  }\n\n  if (input.sourceEntityType) {\n    query = query.where('m.source_entity_type', input.sourceEntityType)\n  }\n\n  if (input.sourceEntityId) {\n    query = query.where('m.source_entity_id', input.sourceEntityId)\n  }\n\n  if (input.externalEmail) {\n    query = query.where('m.external_email_hash', hashForLookup(input.externalEmail))\n  }\n\n  if (input.senderId) {\n    query = query.where('m.sender_user_id', input.senderId)\n  }\n\n  if (input.search) {\n    const matchedIds = await findMessageIdsBySearchTokens({\n      em,\n      query: input.search,\n      tenantId: scope.tenantId ?? null,\n      organizationId: scope.organizationId,\n    })\n    if (matchedIds === null || matchedIds.length === 0) {\n      query = query.where('m.id', NO_MATCH_ID)\n    } else {\n      query = query.whereIn('m.id', matchedIds)\n    }\n  }\n\n  if (input.since) {\n    query = query.where('m.sent_at', '>', new Date(input.since))\n  }\n\n  if (input.hasObjects !== undefined) {\n    const subquery = knex('message_objects').select(1).whereRaw('message_objects.message_id = m.id')\n    query = input.hasObjects ? query.whereExists(subquery) : query.whereNotExists(subquery)\n  }\n\n  if (input.hasAttachments !== undefined) {\n    const subquery = knex('attachments')\n      .select(1)\n      .where('attachments.entity_id', MESSAGE_ATTACHMENT_ENTITY_ID)\n      .whereRaw('attachments.record_id = m.id')\n    query = input.hasAttachments ? query.whereExists(subquery) : query.whereNotExists(subquery)\n  }\n\n  if (input.hasActions !== undefined) {\n    query = input.hasActions ? query.whereNotNull('m.action_data') : query.whereNull('m.action_data')\n  }\n\n  const countResult = await query.clone().count('* as count').first()\n  const total = Number(countResult?.count ?? 0)\n\n  const offset = (input.page - 1) * input.pageSize\n  const scopeRows = await query\n    .select(\n      'm.id',\n      'm.sender_user_id',\n      'm.is_draft',\n      'r.status as recipient_status',\n      'r.read_at',\n    )\n    .orderBy('m.sent_at', 'desc')\n    .offset(offset)\n    .limit(input.pageSize)\n\n  const typedRows = scopeRows as MessageListScopeRow[]\n  const messageIds = typedRows.map((row) => row.id)\n\n  const messageEntities = messageIds.length > 0\n    ? await findWithDecryption(\n        em,\n        Message,\n        { id: { $in: messageIds } },\n        undefined,\n        { tenantId: scope.tenantId, organizationId: scope.organizationId }\n      )\n    : []\n\n  const messagesById = new Map<string, Message>()\n  for (const message of messageEntities) {\n    messagesById.set(message.id, message)\n  }\n\n  const objects = messageIds.length > 0\n    ? await em.find(MessageObject, { messageId: { $in: messageIds } })\n    : []\n\n  const objectsByMessage = objects.reduce((acc, obj) => {\n    if (!acc[obj.messageId]) acc[obj.messageId] = []\n    acc[obj.messageId].push(obj)\n    return acc\n  }, {} as Record<string, MessageObject[]>)\n\n  const attachmentCounts: AttachmentCountRow[] = messageIds.length > 0\n    ? await getKnex(em)('attachments')\n        .select('record_id')\n        .count('* as count')\n        .where('entity_id', MESSAGE_ATTACHMENT_ENTITY_ID)\n        .whereIn('record_id', messageIds)\n        .groupBy('record_id')\n    : []\n\n  const attachmentCountByMessage = attachmentCounts.reduce((acc: Record<string, number>, row) => {\n    acc[row.record_id] = Number(row.count)\n    return acc\n  }, {})\n\n  const recipientCounts: RecipientCountRow[] = messageIds.length > 0\n    ? await getKnex(em)('message_recipients')\n        .select('message_id')\n        .count('* as count')\n        .whereIn('message_id', messageIds)\n        .whereNull('deleted_at')\n        .groupBy('message_id')\n    : []\n\n  const recipientCountByMessage = recipientCounts.reduce((acc: Record<string, number>, row) => {\n    acc[row.message_id] = Number(row.count)\n    return acc\n  }, {})\n\n  const senderUserIds = Array.from(new Set(typedRows.map((row) => row.sender_user_id).filter(Boolean)))\n  const senderUsers = senderUserIds.length > 0\n    ? await findWithDecryption(\n        em,\n        User,\n        { id: { $in: senderUserIds } },\n        undefined,\n        { tenantId: scope.tenantId, organizationId: scope.organizationId }\n      )\n    : []\n\n  const senderMetaById = new Map<string, { name: string | null; email: string | null }>()\n  senderUsers.forEach((user) => {\n    const name = typeof user.name === 'string' && user.name.trim().length ? user.name.trim() : null\n    senderMetaById.set(user.id, { name, email: user.email ?? null })\n  })\n\n  return Response.json({\n    items: typedRows\n      .map((row) => {\n        const message = messagesById.get(row.id)\n        if (!message) return null\n        const body = typeof message.body === 'string' ? message.body : ''\n        const bodyPreview = body.substring(0, 150) + (body.length > 150 ? '...' : '')\n        const actionData = message.actionData ?? null\n        return {\n          ...(senderMetaById.get(row.sender_user_id)\n            ? {\n                senderName: senderMetaById.get(row.sender_user_id)?.name ?? null,\n                senderEmail: senderMetaById.get(row.sender_user_id)?.email ?? null,\n              }\n            : { senderName: null, senderEmail: null }),\n          id: message.id,\n          type: message.type,\n          visibility: message.visibility ?? null,\n          sourceEntityType: message.sourceEntityType ?? null,\n          sourceEntityId: message.sourceEntityId ?? null,\n          externalEmail: message.externalEmail ?? null,\n          externalName: message.externalName ?? null,\n          subject: message.subject,\n          bodyPreview,\n          senderUserId: message.senderUserId,\n          priority: message.priority,\n          status: row.recipient_status ?? (row.is_draft ? 'draft' : 'sent'),\n          hasObjects: (objectsByMessage[message.id] || []).length > 0,\n          objectCount: (objectsByMessage[message.id] || []).length,\n          hasAttachments: (attachmentCountByMessage[message.id] || 0) > 0,\n          attachmentCount: attachmentCountByMessage[message.id] || 0,\n          recipientCount: recipientCountByMessage[message.id] || 0,\n          hasActions:\n            Boolean(actionData?.actions?.length)\n            || Boolean(getMessageType(message.type)?.defaultActions?.length)\n            || (objectsByMessage[message.id] || []).some((item) => item.actionRequired && Boolean(item.actionType)),\n          actionTaken: message.actionTaken ?? null,\n          sentAt: message.sentAt ? message.sentAt.toISOString() : null,\n          readAt: row.read_at,\n          threadId: message.threadId ?? null,\n        }\n      })\n      .filter((item): item is NonNullable<typeof item> => item !== null),\n    page: input.page,\n    pageSize: input.pageSize,\n    total,\n    totalPages: Math.ceil(total / input.pageSize),\n  })\n}\n\nexport async function POST(req: Request) {\n  const { ctx, scope } = await resolveMessageContext(req)\n  const commandBus = ctx.container.resolve('commandBus') as CommandBus\n  const body = await req.json().catch(() => ({}))\n  const input = composeMessageSchema.parse(body)\n\n  const isPublicVisibility = input.visibility === 'public'\n  const sendViaEmail = isPublicVisibility ? true : input.sendViaEmail\n  if (sendViaEmail && !(await canUseMessageEmailFeature(ctx, scope))) {\n    return Response.json({ error: 'Missing feature: messages.email' }, { status: 403 })\n  }\n\n  if (input.objects?.length) {\n    const objectValidationError = validateMessageObjectsForType(input.type, input.objects)\n    if (objectValidationError) {\n      return Response.json({ error: objectValidationError }, { status: 400 })\n    }\n  }\n\n  const { result, logEntry } = await commandBus.execute('messages.messages.compose', {\n    input: {\n      ...input,\n      sendViaEmail,\n      tenantId: scope.tenantId,\n      organizationId: scope.organizationId,\n      userId: scope.userId,\n    },\n    ctx: {\n      container: ctx.container,\n      auth: ctx.auth ?? null,\n      organizationScope: null,\n      selectedOrganizationId: scope.organizationId,\n      organizationIds: scope.organizationId ? [scope.organizationId] : null,\n      request: req,\n    },\n  })\n  const { id: messageId, threadId: responseThreadId } = result as unknown as MessageCommandExecuteResultWithThreadId\n\n  const response = Response.json({ id: messageId, threadId: responseThreadId }, { status: 201 })\n  attachOperationMetadataHeader(response, logEntry, {\n    resourceKind: 'messages.message',\n    resourceId: messageId,\n  })\n  return response\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Messages',\n  methods: {\n    GET: {\n      summary: 'List messages',\n      query: listSchema,\n      responses: [\n        {\n          status: 200,\n          description: 'Message list',\n          schema: z.object({\n            items: z.array(messageListItemSchema),\n            page: z.number(),\n            pageSize: z.number(),\n            total: z.number(),\n            totalPages: z.number(),\n          }),\n        },\n      ],\n    },\n    POST: {\n      summary: 'Compose a message',\n      requestBody: {\n        schema: composeSchema,\n      },\n      responses: [\n        {\n          status: 201,\n          description: 'Message created',\n          schema: composeResponseSchema,\n        },\n      ],\n    },\n  },\n}\n"],
-  "mappings": "AAAA,SAAS,SAAS;AAKlB,SAAS,0BAA0B;AACnC,SAAS,qBAAqB;AAC9B,SAAS,YAAY;AACrB,SAAS,SAAS,qBAAqB;AACvC,SAAS,sBAAsB,0BAA0B;AACzD,SAAS,oCAAoC;AAC7C,SAAS,sBAAsB;AAC/B,SAAS,qCAAqC;AAC9C,SAAS,qCAAqC;AAC9C,SAAS,2BAA2B,6BAA6B;AACjE,SAAS,oCAAoC;AAE7C;AAAA,EACE,wBAAwB;AAAA,EACxB;AAAA,EACA,sBAAsB;AAAA,EACtB;AAAA,OACK;AAMP,MAAM,cAAc;AAEpB,SAAS,QAAQ,IAAyB;AACxC,SAAQ,GAAG,cAAc,EAAyC,QAAQ;AAC5E;AAoBO,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,eAAe,EAAE;AAAA,EAC7D,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,kBAAkB,EAAE;AACnE;AAEA,eAAsB,IAAI,KAAc;AACtC,QAAM,EAAE,KAAK,MAAM,IAAI,MAAM,sBAAsB,GAAG;AACtD,QAAM,KAAK,IAAI,UAAU,QAAQ,IAAI;AACrC,QAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAC3B,QAAM,SAAS,OAAO,YAAY,IAAI,YAAY;AAClD,QAAM,QAAQ,mBAAmB,MAAM,MAAM;AAC7C,QAAM,OAAO,QAAQ,EAAE;AAEvB,MAAI,QAAQ,KAAK,eAAe,EAC7B,MAAM,eAAe,MAAM,QAAQ,EACnC,UAAU,cAAc;AAE3B,MAAI,MAAM,gBAAgB;AACxB,YAAQ,MAAM,MAAM,qBAAqB,MAAM,cAAc;AAAA,EAC/D,OAAO;AACL,YAAQ,MAAM,UAAU,mBAAmB;AAAA,EAC7C;AAEA,QAAM,gBAAgB,MAAM;AAC1B,YAAQ,MAAM,SAAS,2BAA2B,WAAY;AAC5D,WAAK,GAAG,QAAQ,KAAK,cAAc,EAAE,MAAM,uBAAuB,KAAK,KAAK,IAAI,KAAK,CAAC,MAAM,MAAM,CAAC,CAAC;AAAA,IACtG,CAAC;AAAA,EACH;AAEA,UAAQ,MAAM,QAAQ;AAAA,IACpB,KAAK;AACH,oBAAc;AACd,cAAQ,MACL,aAAa,cAAc,EAC3B,UAAU,cAAc,EACxB,UAAU,eAAe,EACzB,MAAM,cAAc,KAAK;AAC5B;AAAA,IACF,KAAK;AACH,oBAAc;AACd,cAAQ,MACL,aAAa,cAAc,EAC3B,UAAU,cAAc,EACxB,aAAa,eAAe;AAC/B;AAAA,IACF,KAAK;AACH,cAAQ,MACL,MAAM,oBAAoB,MAAM,MAAM,EACtC,MAAM,cAAc,KAAK;AAC5B,oBAAc;AACd;AAAA,IACF,KAAK;AACH,cAAQ,MACL,MAAM,oBAAoB,MAAM,MAAM,EACtC,MAAM,cAAc,IAAI;AAC3B,oBAAc;AACd;AAAA,IACF,KAAK;AACH,oBAAc;AACd,cAAQ,MAAM,MAAM,WAAY;AAC9B,aAAK,MAAM,oBAAoB,MAAM,MAAM,EAAE,eAAe,cAAc;AAAA,MAC5E,CAAC;AACD;AAAA,IACF,SAAS;AACP,YAAM,oBAA2B,MAAM;AACvC,YAAM,IAAI,MAAM,uBAAuB,OAAO,iBAAiB,CAAC,EAAE;AAAA,IACpE;AAAA,EACF;AAEA,MAAI,MAAM,QAAQ;AAChB,YAAQ,MAAM,MAAM,YAAY,MAAM,MAAM;AAAA,EAC9C;AAEA,MAAI,MAAM,MAAM;AACd,YAAQ,MAAM,MAAM,UAAU,MAAM,IAAI;AAAA,EAC1C;AAEA,MAAI,MAAM,YAAY;AACpB,YAAQ,MAAM,MAAM,gBAAgB,MAAM,UAAU;AAAA,EACtD;AAEA,MAAI,MAAM,kBAAkB;AAC1B,YAAQ,MAAM,MAAM,wBAAwB,MAAM,gBAAgB;AAAA,EACpE;AAEA,MAAI,MAAM,gBAAgB;AACxB,YAAQ,MAAM,MAAM,sBAAsB,MAAM,cAAc;AAAA,EAChE;AAEA,MAAI,MAAM,eAAe;AACvB,YAAQ,MAAM,MAAM,yBAAyB,cAAc,MAAM,aAAa,CAAC;AAAA,EACjF;AAEA,MAAI,MAAM,UAAU;AAClB,YAAQ,MAAM,MAAM,oBAAoB,MAAM,QAAQ;AAAA,EACxD;AAEA,MAAI,MAAM,QAAQ;AAChB,UAAM,aAAa,MAAM,6BAA6B;AAAA,MACpD;AAAA,MACA,OAAO,MAAM;AAAA,MACb,UAAU,MAAM,YAAY;AAAA,MAC5B,gBAAgB,MAAM;AAAA,IACxB,CAAC;AACD,QAAI,eAAe,QAAQ,WAAW,WAAW,GAAG;AAClD,cAAQ,MAAM,MAAM,QAAQ,WAAW;AAAA,IACzC,OAAO;AACL,cAAQ,MAAM,QAAQ,QAAQ,UAAU;AAAA,IAC1C;AAAA,EACF;AAEA,MAAI,MAAM,OAAO;AACf,YAAQ,MAAM,MAAM,aAAa,KAAK,IAAI,KAAK,MAAM,KAAK,CAAC;AAAA,EAC7D;AAEA,MAAI,MAAM,eAAe,QAAW;AAClC,UAAM,WAAW,KAAK,iBAAiB,EAAE,OAAO,CAAC,EAAE,SAAS,mCAAmC;AAC/F,YAAQ,MAAM,aAAa,MAAM,YAAY,QAAQ,IAAI,MAAM,eAAe,QAAQ;AAAA,EACxF;AAEA,MAAI,MAAM,mBAAmB,QAAW;AACtC,UAAM,WAAW,KAAK,aAAa,EAChC,OAAO,CAAC,EACR,MAAM,yBAAyB,4BAA4B,EAC3D,SAAS,8BAA8B;AAC1C,YAAQ,MAAM,iBAAiB,MAAM,YAAY,QAAQ,IAAI,MAAM,eAAe,QAAQ;AAAA,EAC5F;AAEA,MAAI,MAAM,eAAe,QAAW;AAClC,YAAQ,MAAM,aAAa,MAAM,aAAa,eAAe,IAAI,MAAM,UAAU,eAAe;AAAA,EAClG;AAEA,QAAM,cAAc,MAAM,MAAM,MAAM,EAAE,MAAM,YAAY,EAAE,MAAM;AAClE,QAAM,QAAQ,OAAO,aAAa,SAAS,CAAC;AAE5C,QAAM,UAAU,MAAM,OAAO,KAAK,MAAM;AACxC,QAAM,YAAY,MAAM,MACrB;AAAA,IACC;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,EACC,QAAQ,aAAa,MAAM,EAC3B,OAAO,MAAM,EACb,MAAM,MAAM,QAAQ;AAEvB,QAAM,YAAY;AAClB,QAAM,aAAa,UAAU,IAAI,CAAC,QAAQ,IAAI,EAAE;AAEhD,QAAM,kBAAkB,WAAW,SAAS,IACxC,MAAM;AAAA,IACJ;AAAA,IACA;AAAA,IACA,EAAE,IAAI,EAAE,KAAK,WAAW,EAAE;AAAA,IAC1B;AAAA,IACA,EAAE,UAAU,MAAM,UAAU,gBAAgB,MAAM,eAAe;AAAA,EACnE,IACA,CAAC;AAEL,QAAM,eAAe,oBAAI,IAAqB;AAC9C,aAAW,WAAW,iBAAiB;AACrC,iBAAa,IAAI,QAAQ,IAAI,OAAO;AAAA,EACtC;AAEA,QAAM,UAAU,WAAW,SAAS,IAChC,MAAM,GAAG,KAAK,eAAe,EAAE,WAAW,EAAE,KAAK,WAAW,EAAE,CAAC,IAC/D,CAAC;AAEL,QAAM,mBAAmB,QAAQ,OAAO,CAAC,KAAK,QAAQ;AACpD,QAAI,CAAC,IAAI,IAAI,SAAS,EAAG,KAAI,IAAI,SAAS,IAAI,CAAC;AAC/C,QAAI,IAAI,SAAS,EAAE,KAAK,GAAG;AAC3B,WAAO;AAAA,EACT,GAAG,CAAC,CAAoC;AAExC,QAAM,mBAAyC,WAAW,SAAS,IAC/D,MAAM,QAAQ,EAAE,EAAE,aAAa,EAC5B,OAAO,WAAW,EAClB,MAAM,YAAY,EAClB,MAAM,aAAa,4BAA4B,EAC/C,QAAQ,aAAa,UAAU,EAC/B,QAAQ,WAAW,IACtB,CAAC;AAEL,QAAM,2BAA2B,iBAAiB,OAAO,CAAC,KAA6B,QAAQ;AAC7F,QAAI,IAAI,SAAS,IAAI,OAAO,IAAI,KAAK;AACrC,WAAO;AAAA,EACT,GAAG,CAAC,CAAC;AAEL,QAAM,kBAAuC,WAAW,SAAS,IAC7D,MAAM,QAAQ,EAAE,EAAE,oBAAoB,EACnC,OAAO,YAAY,EACnB,MAAM,YAAY,EAClB,QAAQ,cAAc,UAAU,EAChC,UAAU,YAAY,EACtB,QAAQ,YAAY,IACvB,CAAC;AAEL,QAAM,0BAA0B,gBAAgB,OAAO,CAAC,KAA6B,QAAQ;AAC3F,QAAI,IAAI,UAAU,IAAI,OAAO,IAAI,KAAK;AACtC,WAAO;AAAA,EACT,GAAG,CAAC,CAAC;AAEL,QAAM,gBAAgB,MAAM,KAAK,IAAI,IAAI,UAAU,IAAI,CAAC,QAAQ,IAAI,cAAc,EAAE,OAAO,OAAO,CAAC,CAAC;AACpG,QAAM,cAAc,cAAc,SAAS,IACvC,MAAM;AAAA,IACJ;AAAA,IACA;AAAA,IACA,EAAE,IAAI,EAAE,KAAK,cAAc,EAAE;AAAA,IAC7B;AAAA,IACA,EAAE,UAAU,MAAM,UAAU,gBAAgB,MAAM,eAAe;AAAA,EACnE,IACA,CAAC;AAEL,QAAM,iBAAiB,oBAAI,IAA2D;AACtF,cAAY,QAAQ,CAAC,SAAS;AAC5B,UAAM,OAAO,OAAO,KAAK,SAAS,YAAY,KAAK,KAAK,KAAK,EAAE,SAAS,KAAK,KAAK,KAAK,IAAI;AAC3F,mBAAe,IAAI,KAAK,IAAI,EAAE,MAAM,OAAO,KAAK,SAAS,KAAK,CAAC;AAAA,EACjE,CAAC;AAED,SAAO,SAAS,KAAK;AAAA,IACnB,OAAO,UACJ,IAAI,CAAC,QAAQ;AACZ,YAAM,UAAU,aAAa,IAAI,IAAI,EAAE;AACvC,UAAI,CAAC,QAAS,QAAO;AACrB,YAAM,OAAO,OAAO,QAAQ,SAAS,WAAW,QAAQ,OAAO;AAC/D,YAAM,cAAc,KAAK,UAAU,GAAG,GAAG,KAAK,KAAK,SAAS,MAAM,QAAQ;AAC1E,YAAM,aAAa,QAAQ,cAAc;AACzC,aAAO;AAAA,QACL,GAAI,eAAe,IAAI,IAAI,cAAc,IACrC;AAAA,UACE,YAAY,eAAe,IAAI,IAAI,cAAc,GAAG,QAAQ;AAAA,UAC5D,aAAa,eAAe,IAAI,IAAI,cAAc,GAAG,SAAS;AAAA,QAChE,IACA,EAAE,YAAY,MAAM,aAAa,KAAK;AAAA,QAC1C,IAAI,QAAQ;AAAA,QACZ,MAAM,QAAQ;AAAA,QACd,YAAY,QAAQ,cAAc;AAAA,QAClC,kBAAkB,QAAQ,oBAAoB;AAAA,QAC9C,gBAAgB,QAAQ,kBAAkB;AAAA,QAC1C,eAAe,QAAQ,iBAAiB;AAAA,QACxC,cAAc,QAAQ,gBAAgB;AAAA,QACtC,SAAS,QAAQ;AAAA,QACjB;AAAA,QACA,cAAc,QAAQ;AAAA,QACtB,UAAU,QAAQ;AAAA,QAClB,QAAQ,IAAI,qBAAqB,IAAI,WAAW,UAAU;AAAA,QAC1D,aAAa,iBAAiB,QAAQ,EAAE,KAAK,CAAC,GAAG,SAAS;AAAA,QAC1D,cAAc,iBAAiB,QAAQ,EAAE,KAAK,CAAC,GAAG;AAAA,QAClD,iBAAiB,yBAAyB,QAAQ,EAAE,KAAK,KAAK;AAAA,QAC9D,iBAAiB,yBAAyB,QAAQ,EAAE,KAAK;AAAA,QACzD,gBAAgB,wBAAwB,QAAQ,EAAE,KAAK;AAAA,QACvD,YACE,QAAQ,YAAY,SAAS,MAAM,KAChC,QAAQ,eAAe,QAAQ,IAAI,GAAG,gBAAgB,MAAM,MAC3D,iBAAiB,QAAQ,EAAE,KAAK,CAAC,GAAG,KAAK,CAAC,SAAS,KAAK,kBAAkB,QAAQ,KAAK,UAAU,CAAC;AAAA,QACxG,aAAa,QAAQ,eAAe;AAAA,QACpC,QAAQ,QAAQ,SAAS,QAAQ,OAAO,YAAY,IAAI;AAAA,QACxD,QAAQ,IAAI;AAAA,QACZ,UAAU,QAAQ,YAAY;AAAA,MAChC;AAAA,IACF,CAAC,EACA,OAAO,CAAC,SAA2C,SAAS,IAAI;AAAA,IACnE,MAAM,MAAM;AAAA,IACZ,UAAU,MAAM;AAAA,IAChB;AAAA,IACA,YAAY,KAAK,KAAK,QAAQ,MAAM,QAAQ;AAAA,EAC9C,CAAC;AACH;AAEA,eAAsB,KAAK,KAAc;AACvC,QAAM,EAAE,KAAK,MAAM,IAAI,MAAM,sBAAsB,GAAG;AACtD,QAAM,aAAa,IAAI,UAAU,QAAQ,YAAY;AACrD,QAAM,OAAO,MAAM,IAAI,KAAK,EAAE,MAAM,OAAO,CAAC,EAAE;AAC9C,QAAM,QAAQ,qBAAqB,MAAM,IAAI;AAE7C,QAAM,qBAAqB,MAAM,eAAe;AAChD,QAAM,eAAe,qBAAqB,OAAO,MAAM;AACvD,MAAI,gBAAgB,CAAE,MAAM,0BAA0B,KAAK,KAAK,GAAI;AAClE,WAAO,SAAS,KAAK,EAAE,OAAO,kCAAkC,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACpF;AAEA,MAAI,MAAM,SAAS,QAAQ;AACzB,UAAM,wBAAwB,8BAA8B,MAAM,MAAM,MAAM,OAAO;AACrF,QAAI,uBAAuB;AACzB,aAAO,SAAS,KAAK,EAAE,OAAO,sBAAsB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACxE;AAAA,EACF;AAEA,QAAM,EAAE,QAAQ,SAAS,IAAI,MAAM,WAAW,QAAQ,6BAA6B;AAAA,IACjF,OAAO;AAAA,MACL,GAAG;AAAA,MACH;AAAA,MACA,UAAU,MAAM;AAAA,MAChB,gBAAgB,MAAM;AAAA,MACtB,QAAQ,MAAM;AAAA,IAChB;AAAA,IACA,KAAK;AAAA,MACH,WAAW,IAAI;AAAA,MACf,MAAM,IAAI,QAAQ;AAAA,MAClB,mBAAmB;AAAA,MACnB,wBAAwB,MAAM;AAAA,MAC9B,iBAAiB,MAAM,iBAAiB,CAAC,MAAM,cAAc,IAAI;AAAA,MACjE,SAAS;AAAA,IACX;AAAA,EACF,CAAC;AACD,QAAM,EAAE,IAAI,WAAW,UAAU,iBAAiB,IAAI;AAEtD,QAAM,WAAW,SAAS,KAAK,EAAE,IAAI,WAAW,UAAU,iBAAiB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAC7F,gCAA8B,UAAU,UAAU;AAAA,IAChD,cAAc;AAAA,IACd,YAAY;AAAA,EACd,CAAC;AACD,SAAO;AACT;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,OAAO;AAAA,MACP,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO;AAAA,YACf,OAAO,EAAE,MAAM,qBAAqB;AAAA,YACpC,MAAM,EAAE,OAAO;AAAA,YACf,UAAU,EAAE,OAAO;AAAA,YACnB,OAAO,EAAE,OAAO;AAAA,YAChB,YAAY,EAAE,OAAO;AAAA,UACvB,CAAC;AAAA,QACH;AAAA,MACF;AAAA,IACF;AAAA,IACA,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aAAa;AAAA,QACX,QAAQ;AAAA,MACV;AAAA,MACA,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;",
+  "sourcesContent": ["import { z } from 'zod'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { type Kysely, sql } from 'kysely'\nimport type { CommandBus } from '@open-mercato/shared/lib/commands/command-bus'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi/types'\nimport { findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { hashForLookup } from '@open-mercato/shared/lib/encryption/aes'\nimport { User } from '../../auth/data/entities'\nimport { Message, MessageObject } from '../data/entities'\nimport { composeMessageSchema, listMessagesSchema } from '../data/validators'\nimport { MESSAGE_ATTACHMENT_ENTITY_ID } from '../lib/constants'\nimport { getMessageType } from '../lib/message-types-registry'\nimport { validateMessageObjectsForType } from '../lib/object-validation'\nimport { attachOperationMetadataHeader } from '../lib/operationMetadata'\nimport { canUseMessageEmailFeature, resolveMessageContext } from '../lib/routeHelpers'\nimport { findMessageIdsBySearchTokens } from '../lib/searchLookup'\nimport { MessageCommandExecuteResult } from '../commands/shared'\nimport {\n  composeMessageSchema as composeSchema,\n  composeResponseSchema,\n  listMessagesSchema as listSchema,\n  messageListItemSchema,\n} from './openapi'\n\ntype MessageCommandExecuteResultWithThreadId = MessageCommandExecuteResult & {\n  threadId: string\n}\n\nconst NO_MATCH_ID = '00000000-0000-0000-0000-000000000000'\n\nfunction getDb(em: EntityManager): Kysely<any> {\n  return em.getKysely<any>()\n}\n\ntype MessageListScopeRow = {\n  id: string\n  sender_user_id: string\n  is_draft: boolean\n  recipient_status: string | null\n  read_at: string | null\n}\n\ntype AttachmentCountRow = {\n  record_id: string\n  count: string | number\n}\n\ntype RecipientCountRow = {\n  message_id: string\n  count: string | number\n}\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['messages.view'] },\n  POST: { requireAuth: true, requireFeatures: ['messages.compose'] },\n}\n\nexport async function GET(req: Request) {\n  const { ctx, scope } = await resolveMessageContext(req)\n  const em = ctx.container.resolve('em') as EntityManager\n  const url = new URL(req.url)\n  const params = Object.fromEntries(url.searchParams)\n  const input = listMessagesSchema.parse(params)\n  const db = getDb(em) as any\n\n  const searchIds = input.search\n    ? await findMessageIdsBySearchTokens({\n        em,\n        query: input.search,\n        tenantId: scope.tenantId ?? null,\n        organizationId: scope.organizationId,\n      })\n    : undefined\n\n  const buildBaseQuery = () => {\n    let q: any = db\n      .selectFrom('messages as m')\n      .where('m.tenant_id', '=', scope.tenantId)\n      .where('m.deleted_at', 'is', null)\n\n    if (scope.organizationId) {\n      q = q.where('m.organization_id', '=', scope.organizationId)\n    } else {\n      q = q.where('m.organization_id', 'is', null)\n    }\n\n    const joinRecipient = () => {\n      q = q.leftJoin('message_recipients as r', (jb: any) => jb\n        .onRef('m.id', '=', 'r.message_id')\n        .on('r.recipient_user_id', '=', scope.userId))\n    }\n\n    switch (input.folder) {\n      case 'inbox':\n        joinRecipient()\n        q = q\n          .where('r.message_id', 'is not', null)\n          .where('r.deleted_at', 'is', null)\n          .where('r.archived_at', 'is', null)\n          .where('m.is_draft', '=', false)\n        break\n      case 'archived':\n        joinRecipient()\n        q = q\n          .where('r.message_id', 'is not', null)\n          .where('r.deleted_at', 'is', null)\n          .where('r.archived_at', 'is not', null)\n        break\n      case 'sent':\n        q = q\n          .where('m.sender_user_id', '=', scope.userId)\n          .where('m.is_draft', '=', false)\n        joinRecipient()\n        break\n      case 'drafts':\n        q = q\n          .where('m.sender_user_id', '=', scope.userId)\n          .where('m.is_draft', '=', true)\n        joinRecipient()\n        break\n      case 'all':\n        joinRecipient()\n        q = q.where((eb: any) => eb.or([\n          eb('m.sender_user_id', '=', scope.userId),\n          eb('r.message_id', 'is not', null),\n        ]))\n        break\n      default: {\n        const unsupportedFolder: never = input.folder\n        throw new Error(`Unsupported folder: ${String(unsupportedFolder)}`)\n      }\n    }\n\n    if (input.status) q = q.where('r.status', '=', input.status)\n    if (input.type) q = q.where('m.type', '=', input.type)\n    if (input.visibility) q = q.where('m.visibility', '=', input.visibility)\n    if (input.sourceEntityType) q = q.where('m.source_entity_type', '=', input.sourceEntityType)\n    if (input.sourceEntityId) q = q.where('m.source_entity_id', '=', input.sourceEntityId)\n    if (input.externalEmail) q = q.where('m.external_email_hash', '=', hashForLookup(input.externalEmail))\n    if (input.senderId) q = q.where('m.sender_user_id', '=', input.senderId)\n\n    if (input.search) {\n      if (!searchIds || searchIds.length === 0) {\n        q = q.where('m.id', '=', NO_MATCH_ID)\n      } else {\n        q = q.where('m.id', 'in', searchIds)\n      }\n    }\n\n    if (input.since) q = q.where('m.sent_at', '>', new Date(input.since))\n\n    if (input.hasObjects !== undefined) {\n      const existsFn = (eb: any) => eb.exists(\n        eb.selectFrom('message_objects')\n          .select(sql<number>`1`.as('one'))\n          .whereRef('message_objects.message_id', '=', 'm.id')\n      )\n      const notExistsFn = (eb: any) => eb.not(eb.exists(\n        eb.selectFrom('message_objects')\n          .select(sql<number>`1`.as('one'))\n          .whereRef('message_objects.message_id', '=', 'm.id')\n      ))\n      q = input.hasObjects ? q.where(existsFn) : q.where(notExistsFn)\n    }\n\n    if (input.hasAttachments !== undefined) {\n      const existsFn = (eb: any) => eb.exists(\n        eb.selectFrom('attachments')\n          .select(sql<number>`1`.as('one'))\n          .where('attachments.entity_id', '=', MESSAGE_ATTACHMENT_ENTITY_ID)\n          .whereRef('attachments.record_id', '=', 'm.id')\n      )\n      const notExistsFn = (eb: any) => eb.not(eb.exists(\n        eb.selectFrom('attachments')\n          .select(sql<number>`1`.as('one'))\n          .where('attachments.entity_id', '=', MESSAGE_ATTACHMENT_ENTITY_ID)\n          .whereRef('attachments.record_id', '=', 'm.id')\n      ))\n      q = input.hasAttachments ? q.where(existsFn) : q.where(notExistsFn)\n    }\n\n    if (input.hasActions !== undefined) {\n      q = input.hasActions\n        ? q.where('m.action_data', 'is not', null)\n        : q.where('m.action_data', 'is', null)\n    }\n\n    return q\n  }\n\n  const countResult = await buildBaseQuery()\n    .select(sql<number>`count(*)`.as('count'))\n    .executeTakeFirst() as { count: string | number } | undefined\n  const total = Number(countResult?.count ?? 0)\n\n  const offset = (input.page - 1) * input.pageSize\n  const scopeRows = await buildBaseQuery()\n    .select([\n      'm.id',\n      'm.sender_user_id',\n      'm.is_draft',\n      'r.status as recipient_status',\n      'r.read_at',\n    ])\n    .orderBy('m.sent_at', 'desc')\n    .offset(offset)\n    .limit(input.pageSize)\n    .execute()\n\n  const typedRows = scopeRows as MessageListScopeRow[]\n  const messageIds = typedRows.map((row) => row.id)\n\n  const messageEntities = messageIds.length > 0\n    ? await findWithDecryption(\n        em,\n        Message,\n        { id: { $in: messageIds } },\n        undefined,\n        { tenantId: scope.tenantId, organizationId: scope.organizationId }\n      )\n    : []\n\n  const messagesById = new Map<string, Message>()\n  for (const message of messageEntities) {\n    messagesById.set(message.id, message)\n  }\n\n  const objects = messageIds.length > 0\n    ? await em.find(MessageObject, { messageId: { $in: messageIds } })\n    : []\n\n  const objectsByMessage = objects.reduce((acc, obj) => {\n    if (!acc[obj.messageId]) acc[obj.messageId] = []\n    acc[obj.messageId].push(obj)\n    return acc\n  }, {} as Record<string, MessageObject[]>)\n\n  const attachmentCounts: AttachmentCountRow[] = messageIds.length > 0\n    ? await (getDb(em) as any)\n        .selectFrom('attachments')\n        .select(['record_id', sql<string>`count(*)`.as('count')])\n        .where('entity_id', '=', MESSAGE_ATTACHMENT_ENTITY_ID)\n        .where('record_id', 'in', messageIds)\n        .groupBy('record_id')\n        .execute()\n    : []\n\n  const attachmentCountByMessage = attachmentCounts.reduce((acc: Record<string, number>, row) => {\n    acc[row.record_id] = Number(row.count)\n    return acc\n  }, {})\n\n  const recipientCounts: RecipientCountRow[] = messageIds.length > 0\n    ? await (getDb(em) as any)\n        .selectFrom('message_recipients')\n        .select(['message_id', sql<string>`count(*)`.as('count')])\n        .where('message_id', 'in', messageIds)\n        .where('deleted_at', 'is', null)\n        .groupBy('message_id')\n        .execute()\n    : []\n\n  const recipientCountByMessage = recipientCounts.reduce((acc: Record<string, number>, row) => {\n    acc[row.message_id] = Number(row.count)\n    return acc\n  }, {})\n\n  const senderUserIds = Array.from(new Set(typedRows.map((row) => row.sender_user_id).filter(Boolean)))\n  const senderUsers = senderUserIds.length > 0\n    ? await findWithDecryption(\n        em,\n        User,\n        { id: { $in: senderUserIds } },\n        undefined,\n        { tenantId: scope.tenantId, organizationId: scope.organizationId }\n      )\n    : []\n\n  const senderMetaById = new Map<string, { name: string | null; email: string | null }>()\n  senderUsers.forEach((user) => {\n    const name = typeof user.name === 'string' && user.name.trim().length ? user.name.trim() : null\n    senderMetaById.set(user.id, { name, email: user.email ?? null })\n  })\n\n  return Response.json({\n    items: typedRows\n      .map((row) => {\n        const message = messagesById.get(row.id)\n        if (!message) return null\n        const body = typeof message.body === 'string' ? message.body : ''\n        const bodyPreview = body.substring(0, 150) + (body.length > 150 ? '...' : '')\n        const actionData = message.actionData ?? null\n        return {\n          ...(senderMetaById.get(row.sender_user_id)\n            ? {\n                senderName: senderMetaById.get(row.sender_user_id)?.name ?? null,\n                senderEmail: senderMetaById.get(row.sender_user_id)?.email ?? null,\n              }\n            : { senderName: null, senderEmail: null }),\n          id: message.id,\n          type: message.type,\n          visibility: message.visibility ?? null,\n          sourceEntityType: message.sourceEntityType ?? null,\n          sourceEntityId: message.sourceEntityId ?? null,\n          externalEmail: message.externalEmail ?? null,\n          externalName: message.externalName ?? null,\n          subject: message.subject,\n          bodyPreview,\n          senderUserId: message.senderUserId,\n          priority: message.priority,\n          status: row.recipient_status ?? (row.is_draft ? 'draft' : 'sent'),\n          hasObjects: (objectsByMessage[message.id] || []).length > 0,\n          objectCount: (objectsByMessage[message.id] || []).length,\n          hasAttachments: (attachmentCountByMessage[message.id] || 0) > 0,\n          attachmentCount: attachmentCountByMessage[message.id] || 0,\n          recipientCount: recipientCountByMessage[message.id] || 0,\n          hasActions:\n            Boolean(actionData?.actions?.length)\n            || Boolean(getMessageType(message.type)?.defaultActions?.length)\n            || (objectsByMessage[message.id] || []).some((item) => item.actionRequired && Boolean(item.actionType)),\n          actionTaken: message.actionTaken ?? null,\n          sentAt: message.sentAt ? message.sentAt.toISOString() : null,\n          readAt: row.read_at,\n          threadId: message.threadId ?? null,\n        }\n      })\n      .filter((item): item is NonNullable<typeof item> => item !== null),\n    page: input.page,\n    pageSize: input.pageSize,\n    total,\n    totalPages: Math.ceil(total / input.pageSize),\n  })\n}\n\nexport async function POST(req: Request) {\n  const { ctx, scope } = await resolveMessageContext(req)\n  const commandBus = ctx.container.resolve('commandBus') as CommandBus\n  const body = await req.json().catch(() => ({}))\n  const input = composeMessageSchema.parse(body)\n\n  const isPublicVisibility = input.visibility === 'public'\n  const sendViaEmail = isPublicVisibility ? true : input.sendViaEmail\n  if (sendViaEmail && !(await canUseMessageEmailFeature(ctx, scope))) {\n    return Response.json({ error: 'Missing feature: messages.email' }, { status: 403 })\n  }\n\n  if (input.objects?.length) {\n    const objectValidationError = validateMessageObjectsForType(input.type, input.objects)\n    if (objectValidationError) {\n      return Response.json({ error: objectValidationError }, { status: 400 })\n    }\n  }\n\n  const { result, logEntry } = await commandBus.execute('messages.messages.compose', {\n    input: {\n      ...input,\n      sendViaEmail,\n      tenantId: scope.tenantId,\n      organizationId: scope.organizationId,\n      userId: scope.userId,\n    },\n    ctx: {\n      container: ctx.container,\n      auth: ctx.auth ?? null,\n      organizationScope: null,\n      selectedOrganizationId: scope.organizationId,\n      organizationIds: scope.organizationId ? [scope.organizationId] : null,\n      request: req,\n    },\n  })\n  const { id: messageId, threadId: responseThreadId } = result as unknown as MessageCommandExecuteResultWithThreadId\n\n  const response = Response.json({ id: messageId, threadId: responseThreadId }, { status: 201 })\n  attachOperationMetadataHeader(response, logEntry, {\n    resourceKind: 'messages.message',\n    resourceId: messageId,\n  })\n  return response\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Messages',\n  methods: {\n    GET: {\n      summary: 'List messages',\n      query: listSchema,\n      responses: [\n        {\n          status: 200,\n          description: 'Message list',\n          schema: z.object({\n            items: z.array(messageListItemSchema),\n            page: z.number(),\n            pageSize: z.number(),\n            total: z.number(),\n            totalPages: z.number(),\n          }),\n        },\n      ],\n    },\n    POST: {\n      summary: 'Compose a message',\n      requestBody: {\n        schema: composeSchema,\n      },\n      responses: [\n        {\n          status: 201,\n          description: 'Message created',\n          schema: composeResponseSchema,\n        },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,SAAS;AAElB,SAAsB,WAAW;AAGjC,SAAS,0BAA0B;AACnC,SAAS,qBAAqB;AAC9B,SAAS,YAAY;AACrB,SAAS,SAAS,qBAAqB;AACvC,SAAS,sBAAsB,0BAA0B;AACzD,SAAS,oCAAoC;AAC7C,SAAS,sBAAsB;AAC/B,SAAS,qCAAqC;AAC9C,SAAS,qCAAqC;AAC9C,SAAS,2BAA2B,6BAA6B;AACjE,SAAS,oCAAoC;AAE7C;AAAA,EACE,wBAAwB;AAAA,EACxB;AAAA,EACA,sBAAsB;AAAA,EACtB;AAAA,OACK;AAMP,MAAM,cAAc;AAEpB,SAAS,MAAM,IAAgC;AAC7C,SAAO,GAAG,UAAe;AAC3B;AAoBO,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,eAAe,EAAE;AAAA,EAC7D,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,kBAAkB,EAAE;AACnE;AAEA,eAAsB,IAAI,KAAc;AACtC,QAAM,EAAE,KAAK,MAAM,IAAI,MAAM,sBAAsB,GAAG;AACtD,QAAM,KAAK,IAAI,UAAU,QAAQ,IAAI;AACrC,QAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAC3B,QAAM,SAAS,OAAO,YAAY,IAAI,YAAY;AAClD,QAAM,QAAQ,mBAAmB,MAAM,MAAM;AAC7C,QAAM,KAAK,MAAM,EAAE;AAEnB,QAAM,YAAY,MAAM,SACpB,MAAM,6BAA6B;AAAA,IACjC;AAAA,IACA,OAAO,MAAM;AAAA,IACb,UAAU,MAAM,YAAY;AAAA,IAC5B,gBAAgB,MAAM;AAAA,EACxB,CAAC,IACD;AAEJ,QAAM,iBAAiB,MAAM;AAC3B,QAAI,IAAS,GACV,WAAW,eAAe,EAC1B,MAAM,eAAe,KAAK,MAAM,QAAQ,EACxC,MAAM,gBAAgB,MAAM,IAAI;AAEnC,QAAI,MAAM,gBAAgB;AACxB,UAAI,EAAE,MAAM,qBAAqB,KAAK,MAAM,cAAc;AAAA,IAC5D,OAAO;AACL,UAAI,EAAE,MAAM,qBAAqB,MAAM,IAAI;AAAA,IAC7C;AAEA,UAAM,gBAAgB,MAAM;AAC1B,UAAI,EAAE,SAAS,2BAA2B,CAAC,OAAY,GACpD,MAAM,QAAQ,KAAK,cAAc,EACjC,GAAG,uBAAuB,KAAK,MAAM,MAAM,CAAC;AAAA,IACjD;AAEA,YAAQ,MAAM,QAAQ;AAAA,MACpB,KAAK;AACH,sBAAc;AACd,YAAI,EACD,MAAM,gBAAgB,UAAU,IAAI,EACpC,MAAM,gBAAgB,MAAM,IAAI,EAChC,MAAM,iBAAiB,MAAM,IAAI,EACjC,MAAM,cAAc,KAAK,KAAK;AACjC;AAAA,MACF,KAAK;AACH,sBAAc;AACd,YAAI,EACD,MAAM,gBAAgB,UAAU,IAAI,EACpC,MAAM,gBAAgB,MAAM,IAAI,EAChC,MAAM,iBAAiB,UAAU,IAAI;AACxC;AAAA,MACF,KAAK;AACH,YAAI,EACD,MAAM,oBAAoB,KAAK,MAAM,MAAM,EAC3C,MAAM,cAAc,KAAK,KAAK;AACjC,sBAAc;AACd;AAAA,MACF,KAAK;AACH,YAAI,EACD,MAAM,oBAAoB,KAAK,MAAM,MAAM,EAC3C,MAAM,cAAc,KAAK,IAAI;AAChC,sBAAc;AACd;AAAA,MACF,KAAK;AACH,sBAAc;AACd,YAAI,EAAE,MAAM,CAAC,OAAY,GAAG,GAAG;AAAA,UAC7B,GAAG,oBAAoB,KAAK,MAAM,MAAM;AAAA,UACxC,GAAG,gBAAgB,UAAU,IAAI;AAAA,QACnC,CAAC,CAAC;AACF;AAAA,MACF,SAAS;AACP,cAAM,oBAA2B,MAAM;AACvC,cAAM,IAAI,MAAM,uBAAuB,OAAO,iBAAiB,CAAC,EAAE;AAAA,MACpE;AAAA,IACF;AAEA,QAAI,MAAM,OAAQ,KAAI,EAAE,MAAM,YAAY,KAAK,MAAM,MAAM;AAC3D,QAAI,MAAM,KAAM,KAAI,EAAE,MAAM,UAAU,KAAK,MAAM,IAAI;AACrD,QAAI,MAAM,WAAY,KAAI,EAAE,MAAM,gBAAgB,KAAK,MAAM,UAAU;AACvE,QAAI,MAAM,iBAAkB,KAAI,EAAE,MAAM,wBAAwB,KAAK,MAAM,gBAAgB;AAC3F,QAAI,MAAM,eAAgB,KAAI,EAAE,MAAM,sBAAsB,KAAK,MAAM,cAAc;AACrF,QAAI,MAAM,cAAe,KAAI,EAAE,MAAM,yBAAyB,KAAK,cAAc,MAAM,aAAa,CAAC;AACrG,QAAI,MAAM,SAAU,KAAI,EAAE,MAAM,oBAAoB,KAAK,MAAM,QAAQ;AAEvE,QAAI,MAAM,QAAQ;AAChB,UAAI,CAAC,aAAa,UAAU,WAAW,GAAG;AACxC,YAAI,EAAE,MAAM,QAAQ,KAAK,WAAW;AAAA,MACtC,OAAO;AACL,YAAI,EAAE,MAAM,QAAQ,MAAM,SAAS;AAAA,MACrC;AAAA,IACF;AAEA,QAAI,MAAM,MAAO,KAAI,EAAE,MAAM,aAAa,KAAK,IAAI,KAAK,MAAM,KAAK,CAAC;AAEpE,QAAI,MAAM,eAAe,QAAW;AAClC,YAAM,WAAW,CAAC,OAAY,GAAG;AAAA,QAC/B,GAAG,WAAW,iBAAiB,EAC5B,OAAO,OAAe,GAAG,KAAK,CAAC,EAC/B,SAAS,8BAA8B,KAAK,MAAM;AAAA,MACvD;AACA,YAAM,cAAc,CAAC,OAAY,GAAG,IAAI,GAAG;AAAA,QACzC,GAAG,WAAW,iBAAiB,EAC5B,OAAO,OAAe,GAAG,KAAK,CAAC,EAC/B,SAAS,8BAA8B,KAAK,MAAM;AAAA,MACvD,CAAC;AACD,UAAI,MAAM,aAAa,EAAE,MAAM,QAAQ,IAAI,EAAE,MAAM,WAAW;AAAA,IAChE;AAEA,QAAI,MAAM,mBAAmB,QAAW;AACtC,YAAM,WAAW,CAAC,OAAY,GAAG;AAAA,QAC/B,GAAG,WAAW,aAAa,EACxB,OAAO,OAAe,GAAG,KAAK,CAAC,EAC/B,MAAM,yBAAyB,KAAK,4BAA4B,EAChE,SAAS,yBAAyB,KAAK,MAAM;AAAA,MAClD;AACA,YAAM,cAAc,CAAC,OAAY,GAAG,IAAI,GAAG;AAAA,QACzC,GAAG,WAAW,aAAa,EACxB,OAAO,OAAe,GAAG,KAAK,CAAC,EAC/B,MAAM,yBAAyB,KAAK,4BAA4B,EAChE,SAAS,yBAAyB,KAAK,MAAM;AAAA,MAClD,CAAC;AACD,UAAI,MAAM,iBAAiB,EAAE,MAAM,QAAQ,IAAI,EAAE,MAAM,WAAW;AAAA,IACpE;AAEA,QAAI,MAAM,eAAe,QAAW;AAClC,UAAI,MAAM,aACN,EAAE,MAAM,iBAAiB,UAAU,IAAI,IACvC,EAAE,MAAM,iBAAiB,MAAM,IAAI;AAAA,IACzC;AAEA,WAAO;AAAA,EACT;AAEA,QAAM,cAAc,MAAM,eAAe,EACtC,OAAO,cAAsB,GAAG,OAAO,CAAC,EACxC,iBAAiB;AACpB,QAAM,QAAQ,OAAO,aAAa,SAAS,CAAC;AAE5C,QAAM,UAAU,MAAM,OAAO,KAAK,MAAM;AACxC,QAAM,YAAY,MAAM,eAAe,EACpC,OAAO;AAAA,IACN;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,CAAC,EACA,QAAQ,aAAa,MAAM,EAC3B,OAAO,MAAM,EACb,MAAM,MAAM,QAAQ,EACpB,QAAQ;AAEX,QAAM,YAAY;AAClB,QAAM,aAAa,UAAU,IAAI,CAAC,QAAQ,IAAI,EAAE;AAEhD,QAAM,kBAAkB,WAAW,SAAS,IACxC,MAAM;AAAA,IACJ;AAAA,IACA;AAAA,IACA,EAAE,IAAI,EAAE,KAAK,WAAW,EAAE;AAAA,IAC1B;AAAA,IACA,EAAE,UAAU,MAAM,UAAU,gBAAgB,MAAM,eAAe;AAAA,EACnE,IACA,CAAC;AAEL,QAAM,eAAe,oBAAI,IAAqB;AAC9C,aAAW,WAAW,iBAAiB;AACrC,iBAAa,IAAI,QAAQ,IAAI,OAAO;AAAA,EACtC;AAEA,QAAM,UAAU,WAAW,SAAS,IAChC,MAAM,GAAG,KAAK,eAAe,EAAE,WAAW,EAAE,KAAK,WAAW,EAAE,CAAC,IAC/D,CAAC;AAEL,QAAM,mBAAmB,QAAQ,OAAO,CAAC,KAAK,QAAQ;AACpD,QAAI,CAAC,IAAI,IAAI,SAAS,EAAG,KAAI,IAAI,SAAS,IAAI,CAAC;AAC/C,QAAI,IAAI,SAAS,EAAE,KAAK,GAAG;AAC3B,WAAO;AAAA,EACT,GAAG,CAAC,CAAoC;AAExC,QAAM,mBAAyC,WAAW,SAAS,IAC/D,MAAO,MAAM,EAAE,EACZ,WAAW,aAAa,EACxB,OAAO,CAAC,aAAa,cAAsB,GAAG,OAAO,CAAC,CAAC,EACvD,MAAM,aAAa,KAAK,4BAA4B,EACpD,MAAM,aAAa,MAAM,UAAU,EACnC,QAAQ,WAAW,EACnB,QAAQ,IACX,CAAC;AAEL,QAAM,2BAA2B,iBAAiB,OAAO,CAAC,KAA6B,QAAQ;AAC7F,QAAI,IAAI,SAAS,IAAI,OAAO,IAAI,KAAK;AACrC,WAAO;AAAA,EACT,GAAG,CAAC,CAAC;AAEL,QAAM,kBAAuC,WAAW,SAAS,IAC7D,MAAO,MAAM,EAAE,EACZ,WAAW,oBAAoB,EAC/B,OAAO,CAAC,cAAc,cAAsB,GAAG,OAAO,CAAC,CAAC,EACxD,MAAM,cAAc,MAAM,UAAU,EACpC,MAAM,cAAc,MAAM,IAAI,EAC9B,QAAQ,YAAY,EACpB,QAAQ,IACX,CAAC;AAEL,QAAM,0BAA0B,gBAAgB,OAAO,CAAC,KAA6B,QAAQ;AAC3F,QAAI,IAAI,UAAU,IAAI,OAAO,IAAI,KAAK;AACtC,WAAO;AAAA,EACT,GAAG,CAAC,CAAC;AAEL,QAAM,gBAAgB,MAAM,KAAK,IAAI,IAAI,UAAU,IAAI,CAAC,QAAQ,IAAI,cAAc,EAAE,OAAO,OAAO,CAAC,CAAC;AACpG,QAAM,cAAc,cAAc,SAAS,IACvC,MAAM;AAAA,IACJ;AAAA,IACA;AAAA,IACA,EAAE,IAAI,EAAE,KAAK,cAAc,EAAE;AAAA,IAC7B;AAAA,IACA,EAAE,UAAU,MAAM,UAAU,gBAAgB,MAAM,eAAe;AAAA,EACnE,IACA,CAAC;AAEL,QAAM,iBAAiB,oBAAI,IAA2D;AACtF,cAAY,QAAQ,CAAC,SAAS;AAC5B,UAAM,OAAO,OAAO,KAAK,SAAS,YAAY,KAAK,KAAK,KAAK,EAAE,SAAS,KAAK,KAAK,KAAK,IAAI;AAC3F,mBAAe,IAAI,KAAK,IAAI,EAAE,MAAM,OAAO,KAAK,SAAS,KAAK,CAAC;AAAA,EACjE,CAAC;AAED,SAAO,SAAS,KAAK;AAAA,IACnB,OAAO,UACJ,IAAI,CAAC,QAAQ;AACZ,YAAM,UAAU,aAAa,IAAI,IAAI,EAAE;AACvC,UAAI,CAAC,QAAS,QAAO;AACrB,YAAM,OAAO,OAAO,QAAQ,SAAS,WAAW,QAAQ,OAAO;AAC/D,YAAM,cAAc,KAAK,UAAU,GAAG,GAAG,KAAK,KAAK,SAAS,MAAM,QAAQ;AAC1E,YAAM,aAAa,QAAQ,cAAc;AACzC,aAAO;AAAA,QACL,GAAI,eAAe,IAAI,IAAI,cAAc,IACrC;AAAA,UACE,YAAY,eAAe,IAAI,IAAI,cAAc,GAAG,QAAQ;AAAA,UAC5D,aAAa,eAAe,IAAI,IAAI,cAAc,GAAG,SAAS;AAAA,QAChE,IACA,EAAE,YAAY,MAAM,aAAa,KAAK;AAAA,QAC1C,IAAI,QAAQ;AAAA,QACZ,MAAM,QAAQ;AAAA,QACd,YAAY,QAAQ,cAAc;AAAA,QAClC,kBAAkB,QAAQ,oBAAoB;AAAA,QAC9C,gBAAgB,QAAQ,kBAAkB;AAAA,QAC1C,eAAe,QAAQ,iBAAiB;AAAA,QACxC,cAAc,QAAQ,gBAAgB;AAAA,QACtC,SAAS,QAAQ;AAAA,QACjB;AAAA,QACA,cAAc,QAAQ;AAAA,QACtB,UAAU,QAAQ;AAAA,QAClB,QAAQ,IAAI,qBAAqB,IAAI,WAAW,UAAU;AAAA,QAC1D,aAAa,iBAAiB,QAAQ,EAAE,KAAK,CAAC,GAAG,SAAS;AAAA,QAC1D,cAAc,iBAAiB,QAAQ,EAAE,KAAK,CAAC,GAAG;AAAA,QAClD,iBAAiB,yBAAyB,QAAQ,EAAE,KAAK,KAAK;AAAA,QAC9D,iBAAiB,yBAAyB,QAAQ,EAAE,KAAK;AAAA,QACzD,gBAAgB,wBAAwB,QAAQ,EAAE,KAAK;AAAA,QACvD,YACE,QAAQ,YAAY,SAAS,MAAM,KAChC,QAAQ,eAAe,QAAQ,IAAI,GAAG,gBAAgB,MAAM,MAC3D,iBAAiB,QAAQ,EAAE,KAAK,CAAC,GAAG,KAAK,CAAC,SAAS,KAAK,kBAAkB,QAAQ,KAAK,UAAU,CAAC;AAAA,QACxG,aAAa,QAAQ,eAAe;AAAA,QACpC,QAAQ,QAAQ,SAAS,QAAQ,OAAO,YAAY,IAAI;AAAA,QACxD,QAAQ,IAAI;AAAA,QACZ,UAAU,QAAQ,YAAY;AAAA,MAChC;AAAA,IACF,CAAC,EACA,OAAO,CAAC,SAA2C,SAAS,IAAI;AAAA,IACnE,MAAM,MAAM;AAAA,IACZ,UAAU,MAAM;AAAA,IAChB;AAAA,IACA,YAAY,KAAK,KAAK,QAAQ,MAAM,QAAQ;AAAA,EAC9C,CAAC;AACH;AAEA,eAAsB,KAAK,KAAc;AACvC,QAAM,EAAE,KAAK,MAAM,IAAI,MAAM,sBAAsB,GAAG;AACtD,QAAM,aAAa,IAAI,UAAU,QAAQ,YAAY;AACrD,QAAM,OAAO,MAAM,IAAI,KAAK,EAAE,MAAM,OAAO,CAAC,EAAE;AAC9C,QAAM,QAAQ,qBAAqB,MAAM,IAAI;AAE7C,QAAM,qBAAqB,MAAM,eAAe;AAChD,QAAM,eAAe,qBAAqB,OAAO,MAAM;AACvD,MAAI,gBAAgB,CAAE,MAAM,0BAA0B,KAAK,KAAK,GAAI;AAClE,WAAO,SAAS,KAAK,EAAE,OAAO,kCAAkC,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACpF;AAEA,MAAI,MAAM,SAAS,QAAQ;AACzB,UAAM,wBAAwB,8BAA8B,MAAM,MAAM,MAAM,OAAO;AACrF,QAAI,uBAAuB;AACzB,aAAO,SAAS,KAAK,EAAE,OAAO,sBAAsB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACxE;AAAA,EACF;AAEA,QAAM,EAAE,QAAQ,SAAS,IAAI,MAAM,WAAW,QAAQ,6BAA6B;AAAA,IACjF,OAAO;AAAA,MACL,GAAG;AAAA,MACH;AAAA,MACA,UAAU,MAAM;AAAA,MAChB,gBAAgB,MAAM;AAAA,MACtB,QAAQ,MAAM;AAAA,IAChB;AAAA,IACA,KAAK;AAAA,MACH,WAAW,IAAI;AAAA,MACf,MAAM,IAAI,QAAQ;AAAA,MAClB,mBAAmB;AAAA,MACnB,wBAAwB,MAAM;AAAA,MAC9B,iBAAiB,MAAM,iBAAiB,CAAC,MAAM,cAAc,IAAI;AAAA,MACjE,SAAS;AAAA,IACX;AAAA,EACF,CAAC;AACD,QAAM,EAAE,IAAI,WAAW,UAAU,iBAAiB,IAAI;AAEtD,QAAM,WAAW,SAAS,KAAK,EAAE,IAAI,WAAW,UAAU,iBAAiB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAC7F,gCAA8B,UAAU,UAAU;AAAA,IAChD,cAAc;AAAA,IACd,YAAY;AAAA,EACd,CAAC;AACD,SAAO;AACT;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,OAAO;AAAA,MACP,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO;AAAA,YACf,OAAO,EAAE,MAAM,qBAAqB;AAAA,YACpC,MAAM,EAAE,OAAO;AAAA,YACf,UAAU,EAAE,OAAO;AAAA,YACnB,OAAO,EAAE,OAAO;AAAA,YAChB,YAAY,EAAE,OAAO;AAAA,UACvB,CAAC;AAAA,QACH;AAAA,MACF;AAAA,IACF;AAAA,IACA,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aAAa;AAAA,QACX,QAAQ;AAAA,MACV;AAAA,MACA,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/modules/messages/api/unread-count/route.js

@@ -1,22 +1,23 @@
+import { sql } from "kysely";
 import { resolveMessageContext } from "../../lib/routeHelpers.js";
 import { unreadCountResponseSchema } from "../openapi.js";
 const metadata = {
   GET: { requireAuth: true, requireFeatures: ["messages.view"] }
 };
-function getKnex(em) {
-  return em.getConnection().getKnex();
+function getDb(em) {
+  return em.getKysely();
 }
 async function GET(req) {
   const { ctx, scope } = await resolveMessageContext(req);
   const em = ctx.container.resolve("em");
-  const knex = getKnex(em);
-  let query = knex("message_recipients as r").join("messages as m", "m.id", "r.message_id").where("r.recipient_user_id", scope.userId).where("r.status", "unread").whereNull("r.deleted_at").whereNull("r.archived_at").where("m.tenant_id", scope.tenantId).whereNull("m.deleted_at");
+  const db = getDb(em);
+  let query = db.selectFrom("message_recipients as r").innerJoin("messages as m", "m.id", "r.message_id").where("r.recipient_user_id", "=", scope.userId).where("r.status", "=", "unread").where("r.deleted_at", "is", null).where("r.archived_at", "is", null).where("m.tenant_id", "=", scope.tenantId).where("m.deleted_at", "is", null);
   if (scope.organizationId) {
-    query = query.where("m.organization_id", scope.organizationId);
+    query = query.where("m.organization_id", "=", scope.organizationId);
   } else {
-    query = query.whereNull("m.organization_id");
+    query = query.where("m.organization_id", "is", null);
   }
-  const row = await query.count("* as count").first();
+  const row = await query.select(sql`count(*)`.as("count")).executeTakeFirst();
   const count = Number(row?.count ?? 0);
   return Response.json({ unreadCount: count });
 }

package/dist/modules/messages/api/unread-count/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../src/modules/messages/api/unread-count/route.ts"],
-  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport type { Knex } from 'knex'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi/types'\nimport { resolveMessageContext } from '../../lib/routeHelpers'\nimport { unreadCountResponseSchema } from '../openapi'\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['messages.view'] },\n}\n\nfunction getKnex(em: EntityManager): Knex {\n  return (em.getConnection() as unknown as { getKnex: () => Knex }).getKnex()\n}\n\nexport async function GET(req: Request) {\n  const { ctx, scope } = await resolveMessageContext(req)\n  const em = ctx.container.resolve('em') as EntityManager\n  const knex = getKnex(em)\n\n  let query = knex('message_recipients as r')\n    .join('messages as m', 'm.id', 'r.message_id')\n    .where('r.recipient_user_id', scope.userId)\n    .where('r.status', 'unread')\n    .whereNull('r.deleted_at')\n    .whereNull('r.archived_at')\n    .where('m.tenant_id', scope.tenantId)\n    .whereNull('m.deleted_at')\n\n  if (scope.organizationId) {\n    query = query.where('m.organization_id', scope.organizationId)\n  } else {\n    query = query.whereNull('m.organization_id')\n  }\n\n  const row = await query.count('* as count').first<{ count: string | number }>()\n  const count = Number(row?.count ?? 0)\n\n  return Response.json({ unreadCount: count })\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Messages',\n  methods: {\n    GET: {\n      summary: 'Get unread message count',\n      responses: [\n        {\n          status: 200,\n          description: 'Unread count',\n          schema: unreadCountResponseSchema,\n        },\n      ],\n    },\n  },\n}\n"],
-  "mappings": "AAGA,SAAS,6BAA6B;AACtC,SAAS,iCAAiC;AAEnC,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,eAAe,EAAE;AAC/D;AAEA,SAAS,QAAQ,IAAyB;AACxC,SAAQ,GAAG,cAAc,EAAyC,QAAQ;AAC5E;AAEA,eAAsB,IAAI,KAAc;AACtC,QAAM,EAAE,KAAK,MAAM,IAAI,MAAM,sBAAsB,GAAG;AACtD,QAAM,KAAK,IAAI,UAAU,QAAQ,IAAI;AACrC,QAAM,OAAO,QAAQ,EAAE;AAEvB,MAAI,QAAQ,KAAK,yBAAyB,EACvC,KAAK,iBAAiB,QAAQ,cAAc,EAC5C,MAAM,uBAAuB,MAAM,MAAM,EACzC,MAAM,YAAY,QAAQ,EAC1B,UAAU,cAAc,EACxB,UAAU,eAAe,EACzB,MAAM,eAAe,MAAM,QAAQ,EACnC,UAAU,cAAc;AAE3B,MAAI,MAAM,gBAAgB;AACxB,YAAQ,MAAM,MAAM,qBAAqB,MAAM,cAAc;AAAA,EAC/D,OAAO;AACL,YAAQ,MAAM,UAAU,mBAAmB;AAAA,EAC7C;AAEA,QAAM,MAAM,MAAM,MAAM,MAAM,YAAY,EAAE,MAAkC;AAC9E,QAAM,QAAQ,OAAO,KAAK,SAAS,CAAC;AAEpC,SAAO,SAAS,KAAK,EAAE,aAAa,MAAM,CAAC;AAC7C;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;",
+  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport { type Kysely, sql } from 'kysely'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi/types'\nimport { resolveMessageContext } from '../../lib/routeHelpers'\nimport { unreadCountResponseSchema } from '../openapi'\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['messages.view'] },\n}\n\nfunction getDb(em: EntityManager): Kysely<any> {\n  return em.getKysely<any>()\n}\n\nexport async function GET(req: Request) {\n  const { ctx, scope } = await resolveMessageContext(req)\n  const em = ctx.container.resolve('em') as EntityManager\n  const db = getDb(em) as any\n\n  let query = db\n    .selectFrom('message_recipients as r')\n    .innerJoin('messages as m', 'm.id', 'r.message_id')\n    .where('r.recipient_user_id', '=', scope.userId)\n    .where('r.status', '=', 'unread')\n    .where('r.deleted_at', 'is', null)\n    .where('r.archived_at', 'is', null)\n    .where('m.tenant_id', '=', scope.tenantId)\n    .where('m.deleted_at', 'is', null)\n\n  if (scope.organizationId) {\n    query = query.where('m.organization_id', '=', scope.organizationId)\n  } else {\n    query = query.where('m.organization_id', 'is', null)\n  }\n\n  const row = await query\n    .select(sql<number>`count(*)`.as('count'))\n    .executeTakeFirst() as { count: string | number } | undefined\n  const count = Number(row?.count ?? 0)\n\n  return Response.json({ unreadCount: count })\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Messages',\n  methods: {\n    GET: {\n      summary: 'Get unread message count',\n      responses: [\n        {\n          status: 200,\n          description: 'Unread count',\n          schema: unreadCountResponseSchema,\n        },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AACA,SAAsB,WAAW;AAEjC,SAAS,6BAA6B;AACtC,SAAS,iCAAiC;AAEnC,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,eAAe,EAAE;AAC/D;AAEA,SAAS,MAAM,IAAgC;AAC7C,SAAO,GAAG,UAAe;AAC3B;AAEA,eAAsB,IAAI,KAAc;AACtC,QAAM,EAAE,KAAK,MAAM,IAAI,MAAM,sBAAsB,GAAG;AACtD,QAAM,KAAK,IAAI,UAAU,QAAQ,IAAI;AACrC,QAAM,KAAK,MAAM,EAAE;AAEnB,MAAI,QAAQ,GACT,WAAW,yBAAyB,EACpC,UAAU,iBAAiB,QAAQ,cAAc,EACjD,MAAM,uBAAuB,KAAK,MAAM,MAAM,EAC9C,MAAM,YAAY,KAAK,QAAQ,EAC/B,MAAM,gBAAgB,MAAM,IAAI,EAChC,MAAM,iBAAiB,MAAM,IAAI,EACjC,MAAM,eAAe,KAAK,MAAM,QAAQ,EACxC,MAAM,gBAAgB,MAAM,IAAI;AAEnC,MAAI,MAAM,gBAAgB;AACxB,YAAQ,MAAM,MAAM,qBAAqB,KAAK,MAAM,cAAc;AAAA,EACpE,OAAO;AACL,YAAQ,MAAM,MAAM,qBAAqB,MAAM,IAAI;AAAA,EACrD;AAEA,QAAM,MAAM,MAAM,MACf,OAAO,cAAsB,GAAG,OAAO,CAAC,EACxC,iBAAiB;AACpB,QAAM,QAAQ,OAAO,KAAK,SAAS,CAAC;AAEpC,SAAO,SAAS,KAAK,EAAE,aAAa,MAAM,CAAC;AAC7C;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/modules/messages/commands/confirmations.js

@@ -71,7 +71,7 @@ const confirmMessageCommand = {
     confirmation.confirmed = input.confirmed;
     confirmation.confirmedByUserId = actorUserId;
     confirmation.confirmedAt = input.confirmed ? /* @__PURE__ */ new Date() : null;
-    await em.persistAndFlush(confirmation);
+    await em.persist(confirmation).flush();
     return {
       messageId: confirmation.messageId,
       confirmed: confirmation.confirmed,

package/dist/modules/messages/commands/confirmations.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/messages/commands/confirmations.ts"],
-  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport { registerCommand } from '@open-mercato/shared/lib/commands'\nimport type { CommandHandler } from '@open-mercato/shared/lib/commands'\nimport { extractUndoPayload, type UndoPayload } from '@open-mercato/shared/lib/commands/undo'\nimport { Message, MessageConfirmation, MessageRecipient } from '../data/entities'\nimport { confirmMessageSchema } from '../data/validators'\n\ntype ConfirmMessageResult = {\n  messageId: string\n  confirmed: boolean\n  confirmedAt: string | null\n  confirmedByUserId: string | null\n}\n\ntype ConfirmationSnapshot = {\n  id: string | null\n  messageId: string\n  confirmed: boolean\n  confirmedAt: string | null\n  confirmedByUserId: string | null\n  tenantId: string\n  organizationId: string | null\n}\n\nfunction toIso(value: Date | null | undefined): string | null {\n  return value ? value.toISOString() : null\n}\n\nfunction toDate(value: string | null | undefined): Date | null {\n  if (!value) return null\n  return new Date(value)\n}\n\nconst confirmMessageCommand: CommandHandler<unknown, ConfirmMessageResult> = {\n  id: 'messages.confirmations.confirm',\n  async prepare(rawInput, ctx) {\n    const input = confirmMessageSchema.parse(rawInput)\n    const tenantId = input.tenantId ?? ctx.auth?.tenantId ?? null\n    if (!tenantId) throw new Error('Tenant scope is required')\n    const organizationId = input.organizationId ?? ctx.selectedOrganizationId ?? null\n    const em = (ctx.container.resolve('em') as EntityManager).fork()\n    const existing = await em.findOne(MessageConfirmation, { messageId: input.messageId })\n    return {\n      before: {\n        id: existing?.id ?? null,\n        messageId: input.messageId,\n        confirmed: existing?.confirmed ?? false,\n        confirmedAt: toIso(existing?.confirmedAt),\n        confirmedByUserId: existing?.confirmedByUserId ?? null,\n        tenantId,\n        organizationId,\n      } satisfies ConfirmationSnapshot,\n    }\n  },\n  async execute(rawInput, ctx) {\n    const input = confirmMessageSchema.parse(rawInput)\n    const tenantId = input.tenantId ?? ctx.auth?.tenantId ?? null\n\n    if (!tenantId) {\n      throw new Error('Tenant scope is required')\n    }\n\n    const organizationId = input.organizationId ?? ctx.selectedOrganizationId ?? null\n    const em = (ctx.container.resolve('em') as EntityManager).fork()\n\n    const message = await em.findOne(Message, {\n      id: input.messageId,\n      tenantId,\n      organizationId,\n      deletedAt: null,\n    })\n\n    if (!message) {\n      throw new Error('Message not found')\n    }\n\n    const actorUserId = ctx.auth?.sub ?? null\n    if (!actorUserId) {\n      throw new Error('Authentication required')\n    }\n\n    const recipient = await em.findOne(MessageRecipient, {\n      messageId: message.id,\n      recipientUserId: actorUserId,\n      deletedAt: null,\n    })\n    const isSender = message.senderUserId === actorUserId\n    if (!isSender && !recipient) {\n      throw new Error('Access denied')\n    }\n\n    let confirmation = await em.findOne(MessageConfirmation, { messageId: message.id })\n    if (!confirmation) {\n      confirmation = em.create(MessageConfirmation, {\n        messageId: message.id,\n        tenantId,\n        organizationId,\n      })\n    }\n\n    confirmation.confirmed = input.confirmed\n    confirmation.confirmedByUserId = actorUserId\n    confirmation.confirmedAt = input.confirmed ? new Date() : null\n\n    await em.persistAndFlush(confirmation)\n\n    return {\n      messageId: confirmation.messageId,\n      confirmed: confirmation.confirmed,\n      confirmedAt: confirmation.confirmedAt ? confirmation.confirmedAt.toISOString() : null,\n      confirmedByUserId: confirmation.confirmedByUserId ?? null,\n    }\n  },\n  async captureAfter(rawInput, _result, ctx) {\n    const input = confirmMessageSchema.parse(rawInput)\n    const tenantId = input.tenantId ?? ctx.auth?.tenantId ?? null\n    if (!tenantId) return null\n    const organizationId = input.organizationId ?? ctx.selectedOrganizationId ?? null\n    const em = (ctx.container.resolve('em') as EntityManager).fork()\n    const confirmation = await em.findOne(MessageConfirmation, { messageId: input.messageId })\n    return {\n      id: confirmation?.id ?? null,\n      messageId: input.messageId,\n      confirmed: confirmation?.confirmed ?? false,\n      confirmedAt: toIso(confirmation?.confirmedAt),\n      confirmedByUserId: confirmation?.confirmedByUserId ?? null,\n      tenantId,\n      organizationId,\n    } satisfies ConfirmationSnapshot\n  },\n  async buildLog({ input, snapshots }) {\n    const parsed = confirmMessageSchema.parse(input)\n    return {\n      actionLabel: parsed.confirmed ? 'Confirm message' : 'Unconfirm message',\n      resourceKind: 'messages.message',\n      resourceId: parsed.messageId,\n      tenantId: parsed.tenantId ?? null,\n      organizationId: parsed.organizationId ?? null,\n      payload: {\n        undo: {\n          before: (snapshots.before as ConfirmationSnapshot | undefined) ?? null,\n          after: (snapshots.after as ConfirmationSnapshot | undefined) ?? null,\n        } satisfies UndoPayload<ConfirmationSnapshot>,\n      },\n      snapshotBefore: snapshots.before ?? null,\n      snapshotAfter: snapshots.after ?? null,\n    }\n  },\n  undo: async ({ logEntry, ctx }) => {\n    const undo = extractUndoPayload<UndoPayload<ConfirmationSnapshot>>(logEntry)\n    const before = undo?.before\n    if (!before) return\n    const em = (ctx.container.resolve('em') as EntityManager).fork()\n    const existing = await em.findOne(MessageConfirmation, { messageId: before.messageId })\n    if (!before.id) {\n      if (existing) {\n        em.remove(existing)\n        await em.flush()\n      }\n      return\n    }\n    if (!existing) {\n      em.persist(em.create(MessageConfirmation, {\n        id: before.id,\n        messageId: before.messageId,\n        confirmed: before.confirmed,\n        confirmedAt: toDate(before.confirmedAt),\n        confirmedByUserId: before.confirmedByUserId,\n        tenantId: before.tenantId,\n        organizationId: before.organizationId,\n      }))\n    } else {\n      existing.confirmed = before.confirmed\n      existing.confirmedAt = toDate(before.confirmedAt)\n      existing.confirmedByUserId = before.confirmedByUserId\n      existing.tenantId = before.tenantId\n      existing.organizationId = before.organizationId\n    }\n    await em.flush()\n  },\n}\n\nregisterCommand(confirmMessageCommand)\n"],
-  "mappings": "AACA,SAAS,uBAAuB;AAEhC,SAAS,0BAA4C;AACrD,SAAS,SAAS,qBAAqB,wBAAwB;AAC/D,SAAS,4BAA4B;AAmBrC,SAAS,MAAM,OAA+C;AAC5D,SAAO,QAAQ,MAAM,YAAY,IAAI;AACvC;AAEA,SAAS,OAAO,OAA+C;AAC7D,MAAI,CAAC,MAAO,QAAO;AACnB,SAAO,IAAI,KAAK,KAAK;AACvB;AAEA,MAAM,wBAAuE;AAAA,EAC3E,IAAI;AAAA,EACJ,MAAM,QAAQ,UAAU,KAAK;AAC3B,UAAM,QAAQ,qBAAqB,MAAM,QAAQ;AACjD,UAAM,WAAW,MAAM,YAAY,IAAI,MAAM,YAAY;AACzD,QAAI,CAAC,SAAU,OAAM,IAAI,MAAM,0BAA0B;AACzD,UAAM,iBAAiB,MAAM,kBAAkB,IAAI,0BAA0B;AAC7E,UAAM,KAAM,IAAI,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC/D,UAAM,WAAW,MAAM,GAAG,QAAQ,qBAAqB,EAAE,WAAW,MAAM,UAAU,CAAC;AACrF,WAAO;AAAA,MACL,QAAQ;AAAA,QACN,IAAI,UAAU,MAAM;AAAA,QACpB,WAAW,MAAM;AAAA,QACjB,WAAW,UAAU,aAAa;AAAA,QAClC,aAAa,MAAM,UAAU,WAAW;AAAA,QACxC,mBAAmB,UAAU,qBAAqB;AAAA,QAClD;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA,MAAM,QAAQ,UAAU,KAAK;AAC3B,UAAM,QAAQ,qBAAqB,MAAM,QAAQ;AACjD,UAAM,WAAW,MAAM,YAAY,IAAI,MAAM,YAAY;AAEzD,QAAI,CAAC,UAAU;AACb,YAAM,IAAI,MAAM,0BAA0B;AAAA,IAC5C;AAEA,UAAM,iBAAiB,MAAM,kBAAkB,IAAI,0BAA0B;AAC7E,UAAM,KAAM,IAAI,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAE/D,UAAM,UAAU,MAAM,GAAG,QAAQ,SAAS;AAAA,MACxC,IAAI,MAAM;AAAA,MACV;AAAA,MACA;AAAA,MACA,WAAW;AAAA,IACb,CAAC;AAED,QAAI,CAAC,SAAS;AACZ,YAAM,IAAI,MAAM,mBAAmB;AAAA,IACrC;AAEA,UAAM,cAAc,IAAI,MAAM,OAAO;AACrC,QAAI,CAAC,aAAa;AAChB,YAAM,IAAI,MAAM,yBAAyB;AAAA,IAC3C;AAEA,UAAM,YAAY,MAAM,GAAG,QAAQ,kBAAkB;AAAA,MACnD,WAAW,QAAQ;AAAA,MACnB,iBAAiB;AAAA,MACjB,WAAW;AAAA,IACb,CAAC;AACD,UAAM,WAAW,QAAQ,iBAAiB;AAC1C,QAAI,CAAC,YAAY,CAAC,WAAW;AAC3B,YAAM,IAAI,MAAM,eAAe;AAAA,IACjC;AAEA,QAAI,eAAe,MAAM,GAAG,QAAQ,qBAAqB,EAAE,WAAW,QAAQ,GAAG,CAAC;AAClF,QAAI,CAAC,cAAc;AACjB,qBAAe,GAAG,OAAO,qBAAqB;AAAA,QAC5C,WAAW,QAAQ;AAAA,QACnB;AAAA,QACA;AAAA,MACF,CAAC;AAAA,IACH;AAEA,iBAAa,YAAY,MAAM;AAC/B,iBAAa,oBAAoB;AACjC,iBAAa,cAAc,MAAM,YAAY,oBAAI,KAAK,IAAI;AAE1D,UAAM,GAAG,gBAAgB,YAAY;AAErC,WAAO;AAAA,MACL,WAAW,aAAa;AAAA,MACxB,WAAW,aAAa;AAAA,MACxB,aAAa,aAAa,cAAc,aAAa,YAAY,YAAY,IAAI;AAAA,MACjF,mBAAmB,aAAa,qBAAqB;AAAA,IACvD;AAAA,EACF;AAAA,EACA,MAAM,aAAa,UAAU,SAAS,KAAK;AACzC,UAAM,QAAQ,qBAAqB,MAAM,QAAQ;AACjD,UAAM,WAAW,MAAM,YAAY,IAAI,MAAM,YAAY;AACzD,QAAI,CAAC,SAAU,QAAO;AACtB,UAAM,iBAAiB,MAAM,kBAAkB,IAAI,0BAA0B;AAC7E,UAAM,KAAM,IAAI,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC/D,UAAM,eAAe,MAAM,GAAG,QAAQ,qBAAqB,EAAE,WAAW,MAAM,UAAU,CAAC;AACzF,WAAO;AAAA,MACL,IAAI,cAAc,MAAM;AAAA,MACxB,WAAW,MAAM;AAAA,MACjB,WAAW,cAAc,aAAa;AAAA,MACtC,aAAa,MAAM,cAAc,WAAW;AAAA,MAC5C,mBAAmB,cAAc,qBAAqB;AAAA,MACtD;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA,EACA,MAAM,SAAS,EAAE,OAAO,UAAU,GAAG;AACnC,UAAM,SAAS,qBAAqB,MAAM,KAAK;AAC/C,WAAO;AAAA,MACL,aAAa,OAAO,YAAY,oBAAoB;AAAA,MACpD,cAAc;AAAA,MACd,YAAY,OAAO;AAAA,MACnB,UAAU,OAAO,YAAY;AAAA,MAC7B,gBAAgB,OAAO,kBAAkB;AAAA,MACzC,SAAS;AAAA,QACP,MAAM;AAAA,UACJ,QAAS,UAAU,UAA+C;AAAA,UAClE,OAAQ,UAAU,SAA8C;AAAA,QAClE;AAAA,MACF;AAAA,MACA,gBAAgB,UAAU,UAAU;AAAA,MACpC,eAAe,UAAU,SAAS;AAAA,IACpC;AAAA,EACF;AAAA,EACA,MAAM,OAAO,EAAE,UAAU,IAAI,MAAM;AACjC,UAAM,OAAO,mBAAsD,QAAQ;AAC3E,UAAM,SAAS,MAAM;AACrB,QAAI,CAAC,OAAQ;AACb,UAAM,KAAM,IAAI,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC/D,UAAM,WAAW,MAAM,GAAG,QAAQ,qBAAqB,EAAE,WAAW,OAAO,UAAU,CAAC;AACtF,QAAI,CAAC,OAAO,IAAI;AACd,UAAI,UAAU;AACZ,WAAG,OAAO,QAAQ;AAClB,cAAM,GAAG,MAAM;AAAA,MACjB;AACA;AAAA,IACF;AACA,QAAI,CAAC,UAAU;AACb,SAAG,QAAQ,GAAG,OAAO,qBAAqB;AAAA,QACxC,IAAI,OAAO;AAAA,QACX,WAAW,OAAO;AAAA,QAClB,WAAW,OAAO;AAAA,QAClB,aAAa,OAAO,OAAO,WAAW;AAAA,QACtC,mBAAmB,OAAO;AAAA,QAC1B,UAAU,OAAO;AAAA,QACjB,gBAAgB,OAAO;AAAA,MACzB,CAAC,CAAC;AAAA,IACJ,OAAO;AACL,eAAS,YAAY,OAAO;AAC5B,eAAS,cAAc,OAAO,OAAO,WAAW;AAChD,eAAS,oBAAoB,OAAO;AACpC,eAAS,WAAW,OAAO;AAC3B,eAAS,iBAAiB,OAAO;AAAA,IACnC;AACA,UAAM,GAAG,MAAM;AAAA,EACjB;AACF;AAEA,gBAAgB,qBAAqB;",
+  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport { registerCommand } from '@open-mercato/shared/lib/commands'\nimport type { CommandHandler } from '@open-mercato/shared/lib/commands'\nimport { extractUndoPayload, type UndoPayload } from '@open-mercato/shared/lib/commands/undo'\nimport { Message, MessageConfirmation, MessageRecipient } from '../data/entities'\nimport { confirmMessageSchema } from '../data/validators'\n\ntype ConfirmMessageResult = {\n  messageId: string\n  confirmed: boolean\n  confirmedAt: string | null\n  confirmedByUserId: string | null\n}\n\ntype ConfirmationSnapshot = {\n  id: string | null\n  messageId: string\n  confirmed: boolean\n  confirmedAt: string | null\n  confirmedByUserId: string | null\n  tenantId: string\n  organizationId: string | null\n}\n\nfunction toIso(value: Date | null | undefined): string | null {\n  return value ? value.toISOString() : null\n}\n\nfunction toDate(value: string | null | undefined): Date | null {\n  if (!value) return null\n  return new Date(value)\n}\n\nconst confirmMessageCommand: CommandHandler<unknown, ConfirmMessageResult> = {\n  id: 'messages.confirmations.confirm',\n  async prepare(rawInput, ctx) {\n    const input = confirmMessageSchema.parse(rawInput)\n    const tenantId = input.tenantId ?? ctx.auth?.tenantId ?? null\n    if (!tenantId) throw new Error('Tenant scope is required')\n    const organizationId = input.organizationId ?? ctx.selectedOrganizationId ?? null\n    const em = (ctx.container.resolve('em') as EntityManager).fork()\n    const existing = await em.findOne(MessageConfirmation, { messageId: input.messageId })\n    return {\n      before: {\n        id: existing?.id ?? null,\n        messageId: input.messageId,\n        confirmed: existing?.confirmed ?? false,\n        confirmedAt: toIso(existing?.confirmedAt),\n        confirmedByUserId: existing?.confirmedByUserId ?? null,\n        tenantId,\n        organizationId,\n      } satisfies ConfirmationSnapshot,\n    }\n  },\n  async execute(rawInput, ctx) {\n    const input = confirmMessageSchema.parse(rawInput)\n    const tenantId = input.tenantId ?? ctx.auth?.tenantId ?? null\n\n    if (!tenantId) {\n      throw new Error('Tenant scope is required')\n    }\n\n    const organizationId = input.organizationId ?? ctx.selectedOrganizationId ?? null\n    const em = (ctx.container.resolve('em') as EntityManager).fork()\n\n    const message = await em.findOne(Message, {\n      id: input.messageId,\n      tenantId,\n      organizationId,\n      deletedAt: null,\n    })\n\n    if (!message) {\n      throw new Error('Message not found')\n    }\n\n    const actorUserId = ctx.auth?.sub ?? null\n    if (!actorUserId) {\n      throw new Error('Authentication required')\n    }\n\n    const recipient = await em.findOne(MessageRecipient, {\n      messageId: message.id,\n      recipientUserId: actorUserId,\n      deletedAt: null,\n    })\n    const isSender = message.senderUserId === actorUserId\n    if (!isSender && !recipient) {\n      throw new Error('Access denied')\n    }\n\n    let confirmation = await em.findOne(MessageConfirmation, { messageId: message.id })\n    if (!confirmation) {\n      confirmation = em.create(MessageConfirmation, {\n        messageId: message.id,\n        tenantId,\n        organizationId,\n      })\n    }\n\n    confirmation.confirmed = input.confirmed\n    confirmation.confirmedByUserId = actorUserId\n    confirmation.confirmedAt = input.confirmed ? new Date() : null\n\n    await em.persist(confirmation).flush()\n\n    return {\n      messageId: confirmation.messageId,\n      confirmed: confirmation.confirmed,\n      confirmedAt: confirmation.confirmedAt ? confirmation.confirmedAt.toISOString() : null,\n      confirmedByUserId: confirmation.confirmedByUserId ?? null,\n    }\n  },\n  async captureAfter(rawInput, _result, ctx) {\n    const input = confirmMessageSchema.parse(rawInput)\n    const tenantId = input.tenantId ?? ctx.auth?.tenantId ?? null\n    if (!tenantId) return null\n    const organizationId = input.organizationId ?? ctx.selectedOrganizationId ?? null\n    const em = (ctx.container.resolve('em') as EntityManager).fork()\n    const confirmation = await em.findOne(MessageConfirmation, { messageId: input.messageId })\n    return {\n      id: confirmation?.id ?? null,\n      messageId: input.messageId,\n      confirmed: confirmation?.confirmed ?? false,\n      confirmedAt: toIso(confirmation?.confirmedAt),\n      confirmedByUserId: confirmation?.confirmedByUserId ?? null,\n      tenantId,\n      organizationId,\n    } satisfies ConfirmationSnapshot\n  },\n  async buildLog({ input, snapshots }) {\n    const parsed = confirmMessageSchema.parse(input)\n    return {\n      actionLabel: parsed.confirmed ? 'Confirm message' : 'Unconfirm message',\n      resourceKind: 'messages.message',\n      resourceId: parsed.messageId,\n      tenantId: parsed.tenantId ?? null,\n      organizationId: parsed.organizationId ?? null,\n      payload: {\n        undo: {\n          before: (snapshots.before as ConfirmationSnapshot | undefined) ?? null,\n          after: (snapshots.after as ConfirmationSnapshot | undefined) ?? null,\n        } satisfies UndoPayload<ConfirmationSnapshot>,\n      },\n      snapshotBefore: snapshots.before ?? null,\n      snapshotAfter: snapshots.after ?? null,\n    }\n  },\n  undo: async ({ logEntry, ctx }) => {\n    const undo = extractUndoPayload<UndoPayload<ConfirmationSnapshot>>(logEntry)\n    const before = undo?.before\n    if (!before) return\n    const em = (ctx.container.resolve('em') as EntityManager).fork()\n    const existing = await em.findOne(MessageConfirmation, { messageId: before.messageId })\n    if (!before.id) {\n      if (existing) {\n        em.remove(existing)\n        await em.flush()\n      }\n      return\n    }\n    if (!existing) {\n      em.persist(em.create(MessageConfirmation, {\n        id: before.id,\n        messageId: before.messageId,\n        confirmed: before.confirmed,\n        confirmedAt: toDate(before.confirmedAt),\n        confirmedByUserId: before.confirmedByUserId,\n        tenantId: before.tenantId,\n        organizationId: before.organizationId,\n      }))\n    } else {\n      existing.confirmed = before.confirmed\n      existing.confirmedAt = toDate(before.confirmedAt)\n      existing.confirmedByUserId = before.confirmedByUserId\n      existing.tenantId = before.tenantId\n      existing.organizationId = before.organizationId\n    }\n    await em.flush()\n  },\n}\n\nregisterCommand(confirmMessageCommand)\n"],
+  "mappings": "AACA,SAAS,uBAAuB;AAEhC,SAAS,0BAA4C;AACrD,SAAS,SAAS,qBAAqB,wBAAwB;AAC/D,SAAS,4BAA4B;AAmBrC,SAAS,MAAM,OAA+C;AAC5D,SAAO,QAAQ,MAAM,YAAY,IAAI;AACvC;AAEA,SAAS,OAAO,OAA+C;AAC7D,MAAI,CAAC,MAAO,QAAO;AACnB,SAAO,IAAI,KAAK,KAAK;AACvB;AAEA,MAAM,wBAAuE;AAAA,EAC3E,IAAI;AAAA,EACJ,MAAM,QAAQ,UAAU,KAAK;AAC3B,UAAM,QAAQ,qBAAqB,MAAM,QAAQ;AACjD,UAAM,WAAW,MAAM,YAAY,IAAI,MAAM,YAAY;AACzD,QAAI,CAAC,SAAU,OAAM,IAAI,MAAM,0BAA0B;AACzD,UAAM,iBAAiB,MAAM,kBAAkB,IAAI,0BAA0B;AAC7E,UAAM,KAAM,IAAI,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC/D,UAAM,WAAW,MAAM,GAAG,QAAQ,qBAAqB,EAAE,WAAW,MAAM,UAAU,CAAC;AACrF,WAAO;AAAA,MACL,QAAQ;AAAA,QACN,IAAI,UAAU,MAAM;AAAA,QACpB,WAAW,MAAM;AAAA,QACjB,WAAW,UAAU,aAAa;AAAA,QAClC,aAAa,MAAM,UAAU,WAAW;AAAA,QACxC,mBAAmB,UAAU,qBAAqB;AAAA,QAClD;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA,MAAM,QAAQ,UAAU,KAAK;AAC3B,UAAM,QAAQ,qBAAqB,MAAM,QAAQ;AACjD,UAAM,WAAW,MAAM,YAAY,IAAI,MAAM,YAAY;AAEzD,QAAI,CAAC,UAAU;AACb,YAAM,IAAI,MAAM,0BAA0B;AAAA,IAC5C;AAEA,UAAM,iBAAiB,MAAM,kBAAkB,IAAI,0BAA0B;AAC7E,UAAM,KAAM,IAAI,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAE/D,UAAM,UAAU,MAAM,GAAG,QAAQ,SAAS;AAAA,MACxC,IAAI,MAAM;AAAA,MACV;AAAA,MACA;AAAA,MACA,WAAW;AAAA,IACb,CAAC;AAED,QAAI,CAAC,SAAS;AACZ,YAAM,IAAI,MAAM,mBAAmB;AAAA,IACrC;AAEA,UAAM,cAAc,IAAI,MAAM,OAAO;AACrC,QAAI,CAAC,aAAa;AAChB,YAAM,IAAI,MAAM,yBAAyB;AAAA,IAC3C;AAEA,UAAM,YAAY,MAAM,GAAG,QAAQ,kBAAkB;AAAA,MACnD,WAAW,QAAQ;AAAA,MACnB,iBAAiB;AAAA,MACjB,WAAW;AAAA,IACb,CAAC;AACD,UAAM,WAAW,QAAQ,iBAAiB;AAC1C,QAAI,CAAC,YAAY,CAAC,WAAW;AAC3B,YAAM,IAAI,MAAM,eAAe;AAAA,IACjC;AAEA,QAAI,eAAe,MAAM,GAAG,QAAQ,qBAAqB,EAAE,WAAW,QAAQ,GAAG,CAAC;AAClF,QAAI,CAAC,cAAc;AACjB,qBAAe,GAAG,OAAO,qBAAqB;AAAA,QAC5C,WAAW,QAAQ;AAAA,QACnB;AAAA,QACA;AAAA,MACF,CAAC;AAAA,IACH;AAEA,iBAAa,YAAY,MAAM;AAC/B,iBAAa,oBAAoB;AACjC,iBAAa,cAAc,MAAM,YAAY,oBAAI,KAAK,IAAI;AAE1D,UAAM,GAAG,QAAQ,YAAY,EAAE,MAAM;AAErC,WAAO;AAAA,MACL,WAAW,aAAa;AAAA,MACxB,WAAW,aAAa;AAAA,MACxB,aAAa,aAAa,cAAc,aAAa,YAAY,YAAY,IAAI;AAAA,MACjF,mBAAmB,aAAa,qBAAqB;AAAA,IACvD;AAAA,EACF;AAAA,EACA,MAAM,aAAa,UAAU,SAAS,KAAK;AACzC,UAAM,QAAQ,qBAAqB,MAAM,QAAQ;AACjD,UAAM,WAAW,MAAM,YAAY,IAAI,MAAM,YAAY;AACzD,QAAI,CAAC,SAAU,QAAO;AACtB,UAAM,iBAAiB,MAAM,kBAAkB,IAAI,0BAA0B;AAC7E,UAAM,KAAM,IAAI,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC/D,UAAM,eAAe,MAAM,GAAG,QAAQ,qBAAqB,EAAE,WAAW,MAAM,UAAU,CAAC;AACzF,WAAO;AAAA,MACL,IAAI,cAAc,MAAM;AAAA,MACxB,WAAW,MAAM;AAAA,MACjB,WAAW,cAAc,aAAa;AAAA,MACtC,aAAa,MAAM,cAAc,WAAW;AAAA,MAC5C,mBAAmB,cAAc,qBAAqB;AAAA,MACtD;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA,EACA,MAAM,SAAS,EAAE,OAAO,UAAU,GAAG;AACnC,UAAM,SAAS,qBAAqB,MAAM,KAAK;AAC/C,WAAO;AAAA,MACL,aAAa,OAAO,YAAY,oBAAoB;AAAA,MACpD,cAAc;AAAA,MACd,YAAY,OAAO;AAAA,MACnB,UAAU,OAAO,YAAY;AAAA,MAC7B,gBAAgB,OAAO,kBAAkB;AAAA,MACzC,SAAS;AAAA,QACP,MAAM;AAAA,UACJ,QAAS,UAAU,UAA+C;AAAA,UAClE,OAAQ,UAAU,SAA8C;AAAA,QAClE;AAAA,MACF;AAAA,MACA,gBAAgB,UAAU,UAAU;AAAA,MACpC,eAAe,UAAU,SAAS;AAAA,IACpC;AAAA,EACF;AAAA,EACA,MAAM,OAAO,EAAE,UAAU,IAAI,MAAM;AACjC,UAAM,OAAO,mBAAsD,QAAQ;AAC3E,UAAM,SAAS,MAAM;AACrB,QAAI,CAAC,OAAQ;AACb,UAAM,KAAM,IAAI,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC/D,UAAM,WAAW,MAAM,GAAG,QAAQ,qBAAqB,EAAE,WAAW,OAAO,UAAU,CAAC;AACtF,QAAI,CAAC,OAAO,IAAI;AACd,UAAI,UAAU;AACZ,WAAG,OAAO,QAAQ;AAClB,cAAM,GAAG,MAAM;AAAA,MACjB;AACA;AAAA,IACF;AACA,QAAI,CAAC,UAAU;AACb,SAAG,QAAQ,GAAG,OAAO,qBAAqB;AAAA,QACxC,IAAI,OAAO;AAAA,QACX,WAAW,OAAO;AAAA,QAClB,WAAW,OAAO;AAAA,QAClB,aAAa,OAAO,OAAO,WAAW;AAAA,QACtC,mBAAmB,OAAO;AAAA,QAC1B,UAAU,OAAO;AAAA,QACjB,gBAAgB,OAAO;AAAA,MACzB,CAAC,CAAC;AAAA,IACJ,OAAO;AACL,eAAS,YAAY,OAAO;AAC5B,eAAS,cAAc,OAAO,OAAO,WAAW;AAChD,eAAS,oBAAoB,OAAO;AACpC,eAAS,WAAW,OAAO;AAC3B,eAAS,iBAAiB,OAAO;AAAA,IACnC;AACA,UAAM,GAAG,MAAM;AAAA,EACjB;AACF;AAEA,gBAAgB,qBAAqB;",
   "names": []
 }

package/dist/modules/messages/commands/messages.js

@@ -161,7 +161,7 @@ const composeMessageCommand = {
         tenantId: input.tenantId,
         organizationId: input.organizationId
       });
-      await trx.persistAndFlush(message);
+      await trx.persist(message).flush();
       if (!threadId && !input.isDraft && !message.threadId) {
         message.threadId = message.id;
         await trx.flush();
@@ -468,7 +468,7 @@ const replyMessageCommand = {
         tenantId: input.tenantId,
         organizationId: input.organizationId
       });
-      await trx.persistAndFlush(message);
+      await trx.persist(message).flush();
       for (const recipientUserId of recipientIds) {
         trx.persist(trx.create(MessageRecipient, {
           messageId: message.id,
@@ -603,7 +603,7 @@ const forwardMessageCommand = {
         tenantId: input.tenantId,
         organizationId: input.organizationId
       });
-      await trx.persistAndFlush(newMessage);
+      await trx.persist(newMessage).flush();
       for (const recipient of input.recipients) {
         trx.persist(trx.create(MessageRecipient, {
           messageId: newMessage.id,