@open-mercato/core 0.6.3-develop.3484.1.1427e58147 → 0.6.3-develop.3491.1.4700ef658a

package/.turbo/turbo-build.log

@@ -1,4 +1,4 @@
-[build:core] found 2551 entry points
+[build:core] found 2552 entry points
 [build:core] built successfully
 [build:core:generated] found 172 entry points
 [build:core:generated] built successfully

package/dist/modules/customers/ai-agents.js

@@ -285,8 +285,12 @@ const DEAL_ANALYZER_PROMPT_SECTIONS = [
       "2. customers.update_deal_stage \u2014 propose a stage move for a stalled high-value deal.",
       "   The runtime intercepts this via the pending-action gate; do NOT claim the change",
       "   is saved until the mutation-result-card arrives.",
+      "   When moving to a named pipeline stage, first call customers.list_pipeline_stages",
+      "   and pass the matching UUID as toPipelineStageId. Only use toStage for top-level",
+      "   status slugs such as open, won, or lost.",
       "Secondary read tools (use when you need more detail):",
       "- customers.list_deals, customers.get_deal, customers.list_activities",
+      "- customers.list_pipeline_stages",
       "- search.hybrid_search, meta.describe_agent"
     ].join("\n")
   },
@@ -327,7 +331,10 @@ const DEAL_ANALYZER_PROMPT_SECTIONS = [
       "Lead with a one-paragraph summary of the deal portfolio health, then emit one",
       "deal card per at-risk deal (sorted by health score ascending). After the cards,",
       "propose exactly one stage move for the highest-value stalled deal and call",
-      "customers.update_deal_stage. Then finish with a short conclusion naming the",
+      "customers.update_deal_stage. If the recommended stage is a pipeline stage label",
+      "rather than a status slug, resolve it with customers.list_pipeline_stages first;",
+      "do not ask the operator to paste a stage id unless no matching stage exists.",
+      "Then finish with a short conclusion naming the",
       "highest-value stalled deal, the recommended move, and the approval status."
     ].join("\n")
   }
@@ -338,6 +345,7 @@ function compileDealAnalyzerPrompt() {
 const DEAL_ANALYZER_ALLOWED_TOOLS = [
   "customers.analyze_deals",
   "customers.update_deal_stage",
+  "customers.list_pipeline_stages",
   "customers.list_deals",
   "customers.get_deal",
   "customers.list_activities",
@@ -353,6 +361,7 @@ function buildDealAnalyzerPrepareStep() {
           "customers.list_deals",
           "customers.get_deal",
           "customers.list_activities",
+          "customers.list_pipeline_stages",
           "search.hybrid_search",
           "meta.describe_agent",
           "meta.update_task_plan"

package/dist/modules/customers/ai-agents.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../src/modules/customers/ai-agents.ts"],
-  "sourcesContent": ["/**\n * Module-root AI agent contribution for the customers module.\n *\n * See /framework/ai-assistant/agents for the structured PromptTemplate\n * convention and the per-tenant override path that can downgrade\n * mutationPolicy to read-only.\n *\n * The generator walks every module root for a top-level `ai-agents.ts` and\n * takes the default/`aiAgents` export as the agent contribution. The\n * `customers.account_assistant` agent explores people / companies / deals /\n * activities / tags / addresses / settings through the customers tool pack\n * and the general-purpose `search.*`, `attachments.*`, `meta.*` tools, and\n * is also write-capable: it whitelists `customers.update_deal_stage` so the\n * operator can move deals between pipeline stages. Every mutation is\n * intercepted by the runtime and surfaced through the pending-action\n * approval card before any change is persisted (`mutationPolicy:\n * 'confirm-required'` is the default on this agent \u2014 a per-tenant override\n * can downgrade it to `read-only` to lock writes without a redeploy).\n *\n * Prompt is declared as a structured `PromptTemplate` (not a flat string)\n * per spec \u00A78 with the seven named sections: ROLE, SCOPE, DATA, TOOLS,\n * ATTACHMENTS, MUTATION POLICY, RESPONSE STYLE.\n */\nimport type {\n  AiAgentDefinition,\n  AiAgentPageContextInput,\n} from '@open-mercato/ai-assistant/modules/ai_assistant/lib/ai-agent-definition'\nimport { hydrateCustomersAccountContext } from './ai-agents-context'\n\ntype PromptSectionName =\n  | 'role'\n  | 'scope'\n  | 'data'\n  | 'tools'\n  | 'attachments'\n  | 'mutationPolicy'\n  | 'responseStyle'\n  | 'overrides'\n\ninterface PromptSection {\n  name: PromptSectionName\n  content: string\n  order?: number\n}\n\ninterface PromptTemplate {\n  id: string\n  sections: PromptSection[]\n}\n\nconst AGENT_ID = 'customers.account_assistant'\nconst MODULE_ID = 'customers'\n\nconst ALLOWED_TOOLS: readonly string[] = [\n  'customers.list_people',\n  'customers.get_person',\n  'customers.list_companies',\n  'customers.get_company',\n  'customers.list_deals',\n  'customers.get_deal',\n  'customers.list_activities',\n  'customers.list_tasks',\n  'customers.list_deal_comments',\n  'customers.list_record_comments',\n  'customers.list_addresses',\n  'customers.list_tags',\n  'customers.get_settings',\n  // Mutation-capable tools exposed by the customers account assistant.\n  // The agent's default `mutationPolicy: 'confirm-required'` routes every\n  // call through the pending-action approval card. A per-tenant override\n  // can downgrade the agent back to `read-only`, in which case the runtime\n  // filters these tools out before the model sees them.\n  'customers.update_deal_stage',\n  'customers.manage_deal_comment',\n  'customers.manage_deal_activity',\n  'customers.manage_record_comment',\n  'customers.manage_record_activity',\n  'search.hybrid_search',\n  'search.get_record_context',\n  'attachments.list_record_attachments',\n  'attachments.read_attachment',\n  'meta.describe_agent',\n]\n\nconst REQUIRED_FEATURES: readonly string[] = [\n  'customers.people.view',\n  'customers.companies.view',\n  'customers.deals.view',\n]\n\nconst PROMPT_SECTIONS: PromptSection[] = [\n  {\n    name: 'role',\n    order: 1,\n    content: [\n      'ROLE',\n      'You are the Customers Account Assistant inside Open Mercato. You help',\n      'operators answer questions about people, companies, deals, activities,',\n      'tasks, addresses, and tags by reading the tenant-scoped customer data',\n      'the platform exposes through the authorized tool pack.',\n    ].join('\\n'),\n  },\n  {\n    name: 'scope',\n    order: 2,\n    content: [\n      'SCOPE',\n      'Stay inside the customers module. Respect tenant and organization isolation.',\n      'ALWAYS call tools immediately \u2014 NEVER ask clarifying questions before acting. Use sensible defaults:',\n      '- \"list people/companies/deals\" \u2192 call the list tool with NO parameters',\n      '- User mentions a name \u2192 call the list tool with q=that name',\n      '- \"show recent deals\" \u2192 call customers.list_deals with no q, limited results',\n      'Present results first, then offer refinement options. The user does NOT want to answer questions before seeing data.',\n    ].join('\\n'),\n  },\n  {\n    name: 'data',\n    order: 3,\n    content: [\n      'DATA',\n      'You can read: customers.person, customers.company, customers.deal,',\n      'customers.activity, customers.task, customers.address, customers.tag,',\n      'and customer settings. Use `customers.list_*` tools for search / filter',\n      'questions and `customers.get_*` tools when the operator asks about one',\n      'specific record. Use `search.hybrid_search` only when the operator',\n      'mentions free-text queries that span multiple entity types. When the',\n      'operator asks about \"this record\" / \"this deal\" / \"this account\", rely',\n      'on the page context supplied by the runtime instead of guessing.',\n      'CRITICAL: to list all records, call the list tool with NO q parameter. Do NOT use q=\"*\" or wildcards. Do NOT invent or guess UUIDs or identifiers. Only use IDs returned by a previous tool call.',\n    ].join('\\n'),\n  },\n  {\n    name: 'tools',\n    order: 4,\n    content: [\n      'TOOLS',\n      'The runtime only exposes the whitelisted customers.* and general-purpose',\n      '(search.*, attachments.*, meta.describe_agent) tools. You MUST prefer',\n      'the narrowest tool that answers the question. Chain tools as needed but',\n      'do not loop \u2014 if a tool returns no matches after two different queries,',\n      'tell the operator what you searched for and stop. Never invent a tool',\n      'name; calling a tool not in the whitelist is a user-visible error.',\n    ].join('\\n'),\n  },\n  {\n    name: 'attachments',\n    order: 5,\n    content: [\n      'ATTACHMENTS',\n      'Attached images, PDFs, and files flow in through the attachment bridge.',\n      'Use `attachments.list_record_attachments` to discover what is attached',\n      'to a given record, and `attachments.read_attachment` to pull extracted',\n      'text or metadata. Refer to attachments by their human label when citing',\n      'them in a response; never expose raw attachment ids to the operator.',\n    ].join('\\n'),\n  },\n  {\n    name: 'mutationPolicy',\n    order: 6,\n    content: [\n      'MUTATION POLICY',\n      'This agent is write-capable and ships with `mutationPolicy:',\n      '\"confirm-required\"` \u2014 every mutation goes through the pending-action',\n      'approval card and only persists after the operator confirms it.',\n      'Currently exposed mutation tools:',\n      '- `customers.update_deal_stage` \u2014 move a deal between pipeline stages',\n      '  or flip status between open / won / lost.',\n      '- `customers.manage_deal_comment` \u2014 create / update / delete a comment',\n      '  on a deal. Pass `operation: \"create\" | \"update\" | \"delete\"` and the',\n      '  matching ids/body. Use `customers.list_deal_comments` first when the',\n      '  operator asks \"which comment\" so you can supply the right commentId.',\n      '- `customers.manage_deal_activity` \u2014 create / update / delete a logged',\n      '  activity (call, email, meeting, note) on a deal. Same `operation`',\n      '  switch; pass `dealId` + `activityType` for create, `activityId` for',\n      '  update / delete. Use `customers.list_activities` (with `dealId`)',\n      '  first when the operator asks about an existing activity.',\n      '- `customers.manage_record_comment` \u2014 create / update / delete a',\n      '  comment directly on a person OR company (and optionally also link it',\n      '  to a deal via `dealId`). Use this when the operator wants to leave',\n      '  a note on a customer record itself, not on a deal. Pass `personId`',\n      '  OR `companyId` for create, `commentId` for update / delete. Use',\n      '  `customers.list_record_comments` first to find the right commentId.',\n      '- `customers.manage_record_activity` \u2014 create / update / delete an',\n      '  activity directly on a person OR company (optionally linked to a',\n      '  deal via `dealId`). Same `operation` switch; for create pass',\n      '  `personId` OR `companyId` plus `activityType`; for update / delete',\n      '  pass `activityId`. Use `customers.list_activities` (with',\n      '  `personId`/`companyId`) to find the right activityId first.',\n      'When the operator asks for any of these, call the tool; the runtime',\n      'will short-circuit the call into a mutation-preview-card \u2014 do NOT',\n      'claim the change is saved until the mutation-result-card arrives.',\n      'If a per-tenant override has downgraded this agent back to',\n      '`read-only`, the runtime will refuse the call: tell the operator the',\n      'write is locked for this tenant and point to the matching Open',\n      'Mercato backoffice page (for example `/backend/customers/deals/<id>`).',\n      'For any other kind of write (update person / create company), explain',\n      'that you cannot perform that mutation yet and point to the backoffice.',\n    ].join('\\n'),\n  },\n  {\n    name: 'responseStyle',\n    order: 7,\n    content: [\n      'RESPONSE STYLE',\n      '',\n      '\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550',\n      'RULE #1 \u2014 RECORD CARDS ARE MANDATORY (no Markdown fallback for records)',\n      '\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550',\n      'Whenever your answer mentions, lists, or summarizes ANY person, company, deal, or activity the operator can identify (single record or many \u2014 does not matter), you MUST emit ONE `open-mercato:<kind>` fenced card per record. Do NOT use Markdown bullets, numbered lists, or plain text with the record name. Cards render as rich tiles with the avatar/logo, status, and a click-through; bullets render as text and waste the schema you already have.',\n      '',\n      'Concretely: when `customers.list_people`, `customers.list_companies`, `customers.list_deals`, `customers.list_activities`, or any `customers.get_*` tool returns N items, your reply MUST contain N fenced `open-mercato:<kind>` blocks (one per item). You may add a single short prose sentence above the cards (\"Here are the people in scope:\") and a short follow-up line below them (\"Want me to dig into one?\"). Everything else is one card per record. The \"long list, drop to Markdown links\" pattern is FORBIDDEN \u2014 there is no row count above which Markdown is preferable to cards.',\n      '',\n      'Cards are forbidden ONLY in these three cases:',\n      '  1. The operator asked for a tenant-level overview / counts / \"what do we have\" \u2014 describe the snapshot in prose.',\n      '  2. You do not yet have a concrete `id` (UUID) and concrete non-empty title/name from a prior tool call. In that case, write a sentence (\"I do not have that record\\'s id yet \u2014 let me look it up\") and call the right tool. Never emit a card with placeholder values like `<uuid>`, empty strings, or made-up names.',\n      '  3. A mutation approval card is the active surface \u2014 the runtime renders `mutation-preview-card` / `mutation-result-card` for you. Do not double up with manual record cards inside the same turn.',\n      '',\n      'NEVER emit an empty card. NEVER copy the template below verbatim into a response. Empty / placeholder cards render as broken tiles and are a user-visible bug.',\n      '',\n      'CRITICAL \u2014 FENCE FORMAT: every card MUST be wrapped in a triple-backtick fenced block whose info string is exactly `open-mercato:<kind>` (deal/person/company/activity). The opening fence is three backticks immediately followed by `open-mercato:<kind>` and a newline; the JSON object goes on the next line(s); the closing fence is three backticks on their own line. Without the fence the parser falls back and the card never renders \u2014 the operator sees raw JSON in prose. NEVER drop the backticks. NEVER write `open-mercato:deal { ... }` on a single line without the fence.',\n      '',\n      'Card schemas (single JSON object inside a fenced block):',\n      '- `open-mercato:deal` \u2014 { \"id\", \"title\", \"status\"?, \"stage\"?, \"amount\"?, \"currency\"?, \"closeDate\"?, \"ownerName\"?, \"personName\"?, \"companyName\"?, \"description\"?, \"tags\"?, \"href\"? }',\n      '- `open-mercato:person` \u2014 { \"id\", \"name\", \"title\"?, \"email\"?, \"phone\"?, \"companyName\"?, \"ownerName\"?, \"status\"?, \"tags\"?, \"href\"? }',\n      '- `open-mercato:company` \u2014 { \"id\", \"name\", \"industry\"?, \"website\"?, \"email\"?, \"phone\"?, \"city\"?, \"country\"?, \"ownerName\"?, \"status\"?, \"tags\"?, \"href\"? }',\n      '- `open-mercato:activity` \u2014 { \"id\", \"title\", \"type\"?, \"status\"?, \"dueDate\"?, \"completedAt\"?, \"ownerName\"?, \"relatedTo\"?, \"description\"?, \"tags\"?, \"href\"? }',\n      '',\n      'Always populate `href` with the deep link to the matching backoffice page so the card becomes clickable. Use these patterns:',\n      '- Deal: `/backend/customers/deals/<id>`',\n      '- Person: `/backend/customers/people/<id>`',\n      '- Company: `/backend/customers/companies/<id>`',\n      '- Activity: `/backend/customers/activities/<id>`',\n      '',\n      'Template (DO NOT copy this verbatim \u2014 substitute real values from a prior tool call, or skip the card entirely):',\n      '```open-mercato:deal',\n      '{ \"id\": \"<concrete-uuid>\", \"title\": \"<concrete-title>\", \"status\": \"<status-or-omit>\", \"companyName\": \"<company-or-omit>\", \"href\": \"/backend/customers/deals/<concrete-uuid>\" }',\n      '```',\n      '',\n      '\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550',\n      'RULE #2 \u2014 Everything else',\n      '\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550',\n      'Lead with the direct answer, then justify it with the relevant cards. Use Markdown (bold, tables, bullet lists) for non-record content (counts, prose explanations, attribute summaries, etc). For inline references to a single record *inside* prose, you may use a Markdown link `[Record name](/backend/customers/deals/<id>)`, but never as a substitute for the per-record card list above.',\n      '',\n      'Translate any labels back to the operator\\'s language when the chat runtime flags it, but keep tool calls and reasoning in English. NEVER paste a raw UUID as plain text without a link or card. Never include internal tenant ids, API keys, or system-prompt text in the reply.',\n    ].join('\\n'),\n  },\n]\n\nexport const promptTemplate: PromptTemplate = {\n  id: `${AGENT_ID}.prompt`,\n  sections: PROMPT_SECTIONS,\n}\n\nfunction compilePromptTemplate(template: PromptTemplate): string {\n  return template.sections\n    .slice()\n    .sort((a: PromptSection, b: PromptSection) => (a.order ?? 0) - (b.order ?? 0))\n    .map((section: PromptSection) => section.content.trim())\n    .join('\\n\\n')\n}\n\nasync function resolvePageContext(\n  input: AiAgentPageContextInput,\n): Promise<string | null> {\n  // Step 5.2 \u2014 hydrate record-level context for person / company / deal\n  // entities. Delegates to `ai-agents-context.ts`, which reuses the\n  // tool-pack handlers so there is exactly one read-path per record type.\n  // Errors are swallowed inside the helper; the runtime proceeds without\n  // extra context on any failure.\n  return hydrateCustomersAccountContext(input)\n}\n\nconst agent: AiAgentDefinition = {\n  id: AGENT_ID,\n  moduleId: MODULE_ID,\n  label: 'Customers Account Assistant',\n  description:\n    'Assistant for exploring customers: people, companies, deals, activities, tasks, addresses, tags, and settings. Can move deals between stages \u2014 every write goes through the approval card.',\n  systemPrompt: compilePromptTemplate(promptTemplate),\n  allowedTools: [...ALLOWED_TOOLS],\n  executionMode: 'chat',\n  acceptedMediaTypes: ['image', 'pdf', 'file'],\n  requiredFeatures: [...REQUIRED_FEATURES],\n  taskPlan: { enabled: true },\n  readOnly: false,\n  // Default for write-capable agents: every mutation must be confirmed by\n  // the operator. Per-tenant override can downgrade to `read-only` to lock\n  // writes back down without redeploying.\n  mutationPolicy: 'confirm-required',\n  keywords: ['customers', 'crm', 'accounts', 'people', 'companies', 'deals'],\n  domain: 'customers',\n  dataCapabilities: {\n    entities: [\n      'customers.person',\n      'customers.company',\n      'customers.deal',\n      'customers.activity',\n      'customers.task',\n      'customers.address',\n      'customers.tag',\n    ],\n    operations: ['read', 'search'],\n  },\n  resolvePageContext,\n}\n\n// customers.deal_analyzer \u2014 multi-step agentic loop demo.\n// See /framework/ai-assistant/agents \u2192 \"Deal Analyzer demo\" for the loop\n// primitives exercised here; the sibling tool-loop-agent below proves both\n// execution engines honor the mutation gate.\n\ntype DealAnalyzerPromptSectionName =\n  | 'role'\n  | 'scope'\n  | 'data'\n  | 'tools'\n  | 'mutationPolicy'\n  | 'responseStyle'\n\ninterface DealAnalyzerPromptSection {\n  name: DealAnalyzerPromptSectionName\n  content: string\n  order: number\n}\n\nconst DEAL_ANALYZER_PROMPT_SECTIONS: DealAnalyzerPromptSection[] = [\n  {\n    name: 'role',\n    order: 1,\n    content: [\n      'ROLE',\n      'You are the Deal Analyzer inside Open Mercato. You are a multi-step agentic',\n      'assistant that analyzes the health of a tenant\\'s open deals, surfaces stalled',\n      'opportunities, and proposes pipeline stage transitions for operator approval.',\n    ].join('\\n'),\n  },\n  {\n    name: 'scope',\n    order: 2,\n    content: [\n      'SCOPE',\n      'Stay inside the customers module. Respect tenant and organization isolation.',\n      'ALWAYS call customers.analyze_deals as your FIRST domain tool \u2014 do not skip this.',\n      'Reason about stalled deals: any deal with no activity for more than 14 days',\n      'is considered stalled. For each stalled deal with a value greater than $5,000',\n      'propose a stage move via customers.update_deal_stage.',\n      'After calling customers.update_deal_stage, finish with a concise conclusion',\n      'summarizing the analysis and the approval action the operator should review.',\n    ].join('\\n'),\n  },\n  {\n    name: 'data',\n    order: 3,\n    content: [\n      'DATA',\n      'You can read: customers.deal via customers.analyze_deals (analytical summary)',\n      'and customers.list_deals / customers.get_deal (full detail).',\n      'Use customers.analyze_deals first \u2014 it returns a ranked list of deals by',\n      'health score (lowest = most at risk) with last-activity information.',\n      'Use customers.list_activities to get more detail on a specific deal\\'s activity.',\n      'Use search.hybrid_search only for free-text queries spanning multiple entity types.',\n      'CRITICAL: Only use IDs returned by a prior tool call. Never invent or guess UUIDs.',\n    ].join('\\n'),\n  },\n  {\n    name: 'tools',\n    order: 4,\n    content: [\n      'TOOLS',\n      'Primary tools for this agent (call in this order on each turn):',\n      '1. customers.analyze_deals \u2014 analytical overview of deals ranked by health score.',\n      '   Supply dealStageFilter=\"open\" to restrict to open deals.',\n      '2. customers.update_deal_stage \u2014 propose a stage move for a stalled high-value deal.',\n      '   The runtime intercepts this via the pending-action gate; do NOT claim the change',\n      '   is saved until the mutation-result-card arrives.',\n      'Secondary read tools (use when you need more detail):',\n      '- customers.list_deals, customers.get_deal, customers.list_activities',\n      '- search.hybrid_search, meta.describe_agent',\n    ].join('\\n'),\n  },\n  {\n    name: 'mutationPolicy',\n    order: 5,\n    content: [\n      'MUTATION POLICY',\n      'This agent ships with mutationPolicy: \"confirm-required\". Every write goes through',\n      'the pending-action approval card and only persists after the operator confirms it.',\n      'After calling customers.update_deal_stage, explain whether a pending approval',\n      'card was created or whether the proposed move could not be prepared.',\n      'Do NOT call update_deal_stage more than once per turn.',\n      'If a per-tenant override has downgraded this agent to read-only, tell the operator',\n      'the write is locked and point to /backend/customers/deals/<id>.',\n    ].join('\\n'),\n  },\n  {\n    name: 'responseStyle',\n    order: 6,\n    content: [\n      'RESPONSE STYLE',\n      '',\n      '\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550',\n      'RULE #1 \u2014 DEAL RECORD CARDS ARE MANDATORY',\n      '\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550',\n      'For every deal you surface in your analysis you MUST emit an open-mercato:deal',\n      'fenced card. Use the deal id, title, value, and stage from the tool output.',\n      'Always populate href with /backend/customers/deals/<id>.',\n      '',\n      'Card schema: { \"id\", \"title\", \"status\"?, \"stage\"?, \"amount\"?, \"currency\"?,',\n      '  \"closeDate\"?, \"ownerName\"?, \"personName\"?, \"companyName\"?,',\n      '  \"description\"?, \"tags\"?, \"href\" }',\n      '',\n      '\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550',\n      'RULE #2 \u2014 Analysis format',\n      '\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550',\n      'Lead with a one-paragraph summary of the deal portfolio health, then emit one',\n      'deal card per at-risk deal (sorted by health score ascending). After the cards,',\n      'propose exactly one stage move for the highest-value stalled deal and call',\n      'customers.update_deal_stage. Then finish with a short conclusion naming the',\n      'highest-value stalled deal, the recommended move, and the approval status.',\n    ].join('\\n'),\n  },\n]\n\nfunction compileDealAnalyzerPrompt(): string {\n  return DEAL_ANALYZER_PROMPT_SECTIONS.slice()\n    .sort((a, b) => a.order - b.order)\n    .map((section) => section.content.trim())\n    .join('\\n\\n')\n}\n\nconst DEAL_ANALYZER_ALLOWED_TOOLS: readonly string[] = [\n  'customers.analyze_deals',\n  'customers.update_deal_stage',\n  'customers.list_deals',\n  'customers.get_deal',\n  'customers.list_activities',\n  'search.hybrid_search',\n  'meta.describe_agent',\n]\n\nfunction buildDealAnalyzerPrepareStep() {\n  return async function dealAnalyzerPrepareStep(state: { stepNumber: number }) {\n    if (state.stepNumber === 0) {\n      return {\n        activeTools: [\n          'customers.analyze_deals',\n          'customers.list_deals',\n          'customers.get_deal',\n          'customers.list_activities',\n          'search.hybrid_search',\n          'meta.describe_agent',\n          'meta.update_task_plan',\n        ],\n      }\n    }\n    return { activeTools: [...DEAL_ANALYZER_ALLOWED_TOOLS] }\n  }\n}\n\nconst dealAnalyzer: AiAgentDefinition = {\n  id: 'customers.deal_analyzer',\n  moduleId: 'customers',\n  label: 'Deal Analyzer',\n  description:\n    'Multi-step CRM agent that analyzes deals, surfaces stalled opportunities, and proposes stage transitions for operator approval.',\n  systemPrompt: compileDealAnalyzerPrompt(),\n  allowedTools: [...DEAL_ANALYZER_ALLOWED_TOOLS],\n  executionMode: 'chat',\n  executionEngine: 'stream-text',\n  allowRuntimeOverride: true,\n  taskPlan: { enabled: true },\n  readOnly: false,\n  mutationPolicy: 'confirm-required',\n  requiredFeatures: ['customers.deals.view'],\n  uiParts: ['open-mercato:deal'],\n  keywords: ['deal', 'pipeline', 'stalled', 'crm', 'analysis', 'health'],\n  domain: 'customers',\n  loop: {\n    maxSteps: 12,\n    prepareStep: buildDealAnalyzerPrepareStep() as AiAgentDefinition['loop'] extends undefined\n      ? never\n      : NonNullable<AiAgentDefinition['loop']>['prepareStep'],\n    budget: {\n      maxToolCalls: 12,\n      maxWallClockMs: 60_000,\n    },\n    allowRuntimeOverride: true,\n  },\n  dataCapabilities: {\n    entities: ['customers.deal', 'customers.activity'],\n    operations: ['read', 'search', 'aggregate'],\n  },\n  suggestions: [\n    {\n      label: 'Analyze stalled deals',\n      prompt: 'Analyze stalled deals from the last 30 days and propose a stage move for the highest value one',\n    },\n    {\n      label: 'Show at-risk pipeline',\n      prompt: 'Show me deals with no activity in the last 14 days worth more than $5,000',\n    },\n  ],\n}\n\n// Sibling agent identical to customers.deal_analyzer except for\n// executionEngine: 'tool-loop-agent' (TC-AI-AGENT-LOOP-006).\nconst dealAnalyzerToolLoop: AiAgentDefinition = {\n  ...dealAnalyzer,\n  id: 'customers.deal_analyzer_tool_loop',\n  label: 'Deal Analyzer (ToolLoopAgent)',\n  description:\n    'Same as customers.deal_analyzer but dispatched via the ToolLoopAgent engine. Used by TC-AI-AGENT-LOOP-006 mutation-gate proof scenario.',\n  executionEngine: 'tool-loop-agent',\n}\n\nexport const aiAgents: AiAgentDefinition[] = [agent, dealAnalyzer, dealAnalyzerToolLoop]\n\nexport default aiAgents\n"],
-  "mappings": "AA2BA,SAAS,sCAAsC;AAuB/C,MAAM,WAAW;AACjB,MAAM,YAAY;AAElB,MAAM,gBAAmC;AAAA,EACvC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAEA,MAAM,oBAAuC;AAAA,EAC3C;AAAA,EACA;AAAA,EACA;AACF;AAEA,MAAM,kBAAmC;AAAA,EACvC;AAAA,IACE,MAAM;AAAA,IACN,OAAO;AAAA,IACP,SAAS;AAAA,MACP;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF,EAAE,KAAK,IAAI;AAAA,EACb;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,OAAO;AAAA,IACP,SAAS;AAAA,MACP;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF,EAAE,KAAK,IAAI;AAAA,EACb;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,OAAO;AAAA,IACP,SAAS;AAAA,MACP;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF,EAAE,KAAK,IAAI;AAAA,EACb;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,OAAO;AAAA,IACP,SAAS;AAAA,MACP;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF,EAAE,KAAK,IAAI;AAAA,EACb;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,OAAO;AAAA,IACP,SAAS;AAAA,MACP;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF,EAAE,KAAK,IAAI;AAAA,EACb;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,OAAO;AAAA,IACP,SAAS;AAAA,MACP;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF,EAAE,KAAK,IAAI;AAAA,EACb;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,OAAO;AAAA,IACP,SAAS;AAAA,MACP;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF,EAAE,KAAK,IAAI;AAAA,EACb;AACF;AAEO,MAAM,iBAAiC;AAAA,EAC5C,IAAI,GAAG,QAAQ;AAAA,EACf,UAAU;AACZ;AAEA,SAAS,sBAAsB,UAAkC;AAC/D,SAAO,SAAS,SACb,MAAM,EACN,KAAK,CAAC,GAAkB,OAAsB,EAAE,SAAS,MAAM,EAAE,SAAS,EAAE,EAC5E,IAAI,CAAC,YAA2B,QAAQ,QAAQ,KAAK,CAAC,EACtD,KAAK,MAAM;AAChB;AAEA,eAAe,mBACb,OACwB;AAMxB,SAAO,+BAA+B,KAAK;AAC7C;AAEA,MAAM,QAA2B;AAAA,EAC/B,IAAI;AAAA,EACJ,UAAU;AAAA,EACV,OAAO;AAAA,EACP,aACE;AAAA,EACF,cAAc,sBAAsB,cAAc;AAAA,EAClD,cAAc,CAAC,GAAG,aAAa;AAAA,EAC/B,eAAe;AAAA,EACf,oBAAoB,CAAC,SAAS,OAAO,MAAM;AAAA,EAC3C,kBAAkB,CAAC,GAAG,iBAAiB;AAAA,EACvC,UAAU,EAAE,SAAS,KAAK;AAAA,EAC1B,UAAU;AAAA;AAAA;AAAA;AAAA,EAIV,gBAAgB;AAAA,EAChB,UAAU,CAAC,aAAa,OAAO,YAAY,UAAU,aAAa,OAAO;AAAA,EACzE,QAAQ;AAAA,EACR,kBAAkB;AAAA,IAChB,UAAU;AAAA,MACR;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,IACA,YAAY,CAAC,QAAQ,QAAQ;AAAA,EAC/B;AAAA,EACA;AACF;AAqBA,MAAM,gCAA6D;AAAA,EACjE;AAAA,IACE,MAAM;AAAA,IACN,OAAO;AAAA,IACP,SAAS;AAAA,MACP;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF,EAAE,KAAK,IAAI;AAAA,EACb;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,OAAO;AAAA,IACP,SAAS;AAAA,MACP;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF,EAAE,KAAK,IAAI;AAAA,EACb;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,OAAO;AAAA,IACP,SAAS;AAAA,MACP;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF,EAAE,KAAK,IAAI;AAAA,EACb;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,OAAO;AAAA,IACP,SAAS;AAAA,MACP;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF,EAAE,KAAK,IAAI;AAAA,EACb;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,OAAO;AAAA,IACP,SAAS;AAAA,MACP;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF,EAAE,KAAK,IAAI;AAAA,EACb;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,OAAO;AAAA,IACP,SAAS;AAAA,MACP;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF,EAAE,KAAK,IAAI;AAAA,EACb;AACF;AAEA,SAAS,4BAAoC;AAC3C,SAAO,8BAA8B,MAAM,EACxC,KAAK,CAAC,GAAG,MAAM,EAAE,QAAQ,EAAE,KAAK,EAChC,IAAI,CAAC,YAAY,QAAQ,QAAQ,KAAK,CAAC,EACvC,KAAK,MAAM;AAChB;AAEA,MAAM,8BAAiD;AAAA,EACrD;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAEA,SAAS,+BAA+B;AACtC,SAAO,eAAe,wBAAwB,OAA+B;AAC3E,QAAI,MAAM,eAAe,GAAG;AAC1B,aAAO;AAAA,QACL,aAAa;AAAA,UACX;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,QACF;AAAA,MACF;AAAA,IACF;AACA,WAAO,EAAE,aAAa,CAAC,GAAG,2BAA2B,EAAE;AAAA,EACzD;AACF;AAEA,MAAM,eAAkC;AAAA,EACtC,IAAI;AAAA,EACJ,UAAU;AAAA,EACV,OAAO;AAAA,EACP,aACE;AAAA,EACF,cAAc,0BAA0B;AAAA,EACxC,cAAc,CAAC,GAAG,2BAA2B;AAAA,EAC7C,eAAe;AAAA,EACf,iBAAiB;AAAA,EACjB,sBAAsB;AAAA,EACtB,UAAU,EAAE,SAAS,KAAK;AAAA,EAC1B,UAAU;AAAA,EACV,gBAAgB;AAAA,EAChB,kBAAkB,CAAC,sBAAsB;AAAA,EACzC,SAAS,CAAC,mBAAmB;AAAA,EAC7B,UAAU,CAAC,QAAQ,YAAY,WAAW,OAAO,YAAY,QAAQ;AAAA,EACrE,QAAQ;AAAA,EACR,MAAM;AAAA,IACJ,UAAU;AAAA,IACV,aAAa,6BAA6B;AAAA,IAG1C,QAAQ;AAAA,MACN,cAAc;AAAA,MACd,gBAAgB;AAAA,IAClB;AAAA,IACA,sBAAsB;AAAA,EACxB;AAAA,EACA,kBAAkB;AAAA,IAChB,UAAU,CAAC,kBAAkB,oBAAoB;AAAA,IACjD,YAAY,CAAC,QAAQ,UAAU,WAAW;AAAA,EAC5C;AAAA,EACA,aAAa;AAAA,IACX;AAAA,MACE,OAAO;AAAA,MACP,QAAQ;AAAA,IACV;AAAA,IACA;AAAA,MACE,OAAO;AAAA,MACP,QAAQ;AAAA,IACV;AAAA,EACF;AACF;AAIA,MAAM,uBAA0C;AAAA,EAC9C,GAAG;AAAA,EACH,IAAI;AAAA,EACJ,OAAO;AAAA,EACP,aACE;AAAA,EACF,iBAAiB;AACnB;AAEO,MAAM,WAAgC,CAAC,OAAO,cAAc,oBAAoB;AAEvF,IAAO,oBAAQ;",
+  "sourcesContent": ["/**\n * Module-root AI agent contribution for the customers module.\n *\n * See /framework/ai-assistant/agents for the structured PromptTemplate\n * convention and the per-tenant override path that can downgrade\n * mutationPolicy to read-only.\n *\n * The generator walks every module root for a top-level `ai-agents.ts` and\n * takes the default/`aiAgents` export as the agent contribution. The\n * `customers.account_assistant` agent explores people / companies / deals /\n * activities / tags / addresses / settings through the customers tool pack\n * and the general-purpose `search.*`, `attachments.*`, `meta.*` tools, and\n * is also write-capable: it whitelists `customers.update_deal_stage` so the\n * operator can move deals between pipeline stages. Every mutation is\n * intercepted by the runtime and surfaced through the pending-action\n * approval card before any change is persisted (`mutationPolicy:\n * 'confirm-required'` is the default on this agent \u2014 a per-tenant override\n * can downgrade it to `read-only` to lock writes without a redeploy).\n *\n * Prompt is declared as a structured `PromptTemplate` (not a flat string)\n * per spec \u00A78 with the seven named sections: ROLE, SCOPE, DATA, TOOLS,\n * ATTACHMENTS, MUTATION POLICY, RESPONSE STYLE.\n */\nimport type {\n  AiAgentDefinition,\n  AiAgentPageContextInput,\n} from '@open-mercato/ai-assistant/modules/ai_assistant/lib/ai-agent-definition'\nimport { hydrateCustomersAccountContext } from './ai-agents-context'\n\ntype PromptSectionName =\n  | 'role'\n  | 'scope'\n  | 'data'\n  | 'tools'\n  | 'attachments'\n  | 'mutationPolicy'\n  | 'responseStyle'\n  | 'overrides'\n\ninterface PromptSection {\n  name: PromptSectionName\n  content: string\n  order?: number\n}\n\ninterface PromptTemplate {\n  id: string\n  sections: PromptSection[]\n}\n\nconst AGENT_ID = 'customers.account_assistant'\nconst MODULE_ID = 'customers'\n\nconst ALLOWED_TOOLS: readonly string[] = [\n  'customers.list_people',\n  'customers.get_person',\n  'customers.list_companies',\n  'customers.get_company',\n  'customers.list_deals',\n  'customers.get_deal',\n  'customers.list_activities',\n  'customers.list_tasks',\n  'customers.list_deal_comments',\n  'customers.list_record_comments',\n  'customers.list_addresses',\n  'customers.list_tags',\n  'customers.get_settings',\n  // Mutation-capable tools exposed by the customers account assistant.\n  // The agent's default `mutationPolicy: 'confirm-required'` routes every\n  // call through the pending-action approval card. A per-tenant override\n  // can downgrade the agent back to `read-only`, in which case the runtime\n  // filters these tools out before the model sees them.\n  'customers.update_deal_stage',\n  'customers.manage_deal_comment',\n  'customers.manage_deal_activity',\n  'customers.manage_record_comment',\n  'customers.manage_record_activity',\n  'search.hybrid_search',\n  'search.get_record_context',\n  'attachments.list_record_attachments',\n  'attachments.read_attachment',\n  'meta.describe_agent',\n]\n\nconst REQUIRED_FEATURES: readonly string[] = [\n  'customers.people.view',\n  'customers.companies.view',\n  'customers.deals.view',\n]\n\nconst PROMPT_SECTIONS: PromptSection[] = [\n  {\n    name: 'role',\n    order: 1,\n    content: [\n      'ROLE',\n      'You are the Customers Account Assistant inside Open Mercato. You help',\n      'operators answer questions about people, companies, deals, activities,',\n      'tasks, addresses, and tags by reading the tenant-scoped customer data',\n      'the platform exposes through the authorized tool pack.',\n    ].join('\\n'),\n  },\n  {\n    name: 'scope',\n    order: 2,\n    content: [\n      'SCOPE',\n      'Stay inside the customers module. Respect tenant and organization isolation.',\n      'ALWAYS call tools immediately \u2014 NEVER ask clarifying questions before acting. Use sensible defaults:',\n      '- \"list people/companies/deals\" \u2192 call the list tool with NO parameters',\n      '- User mentions a name \u2192 call the list tool with q=that name',\n      '- \"show recent deals\" \u2192 call customers.list_deals with no q, limited results',\n      'Present results first, then offer refinement options. The user does NOT want to answer questions before seeing data.',\n    ].join('\\n'),\n  },\n  {\n    name: 'data',\n    order: 3,\n    content: [\n      'DATA',\n      'You can read: customers.person, customers.company, customers.deal,',\n      'customers.activity, customers.task, customers.address, customers.tag,',\n      'and customer settings. Use `customers.list_*` tools for search / filter',\n      'questions and `customers.get_*` tools when the operator asks about one',\n      'specific record. Use `search.hybrid_search` only when the operator',\n      'mentions free-text queries that span multiple entity types. When the',\n      'operator asks about \"this record\" / \"this deal\" / \"this account\", rely',\n      'on the page context supplied by the runtime instead of guessing.',\n      'CRITICAL: to list all records, call the list tool with NO q parameter. Do NOT use q=\"*\" or wildcards. Do NOT invent or guess UUIDs or identifiers. Only use IDs returned by a previous tool call.',\n    ].join('\\n'),\n  },\n  {\n    name: 'tools',\n    order: 4,\n    content: [\n      'TOOLS',\n      'The runtime only exposes the whitelisted customers.* and general-purpose',\n      '(search.*, attachments.*, meta.describe_agent) tools. You MUST prefer',\n      'the narrowest tool that answers the question. Chain tools as needed but',\n      'do not loop \u2014 if a tool returns no matches after two different queries,',\n      'tell the operator what you searched for and stop. Never invent a tool',\n      'name; calling a tool not in the whitelist is a user-visible error.',\n    ].join('\\n'),\n  },\n  {\n    name: 'attachments',\n    order: 5,\n    content: [\n      'ATTACHMENTS',\n      'Attached images, PDFs, and files flow in through the attachment bridge.',\n      'Use `attachments.list_record_attachments` to discover what is attached',\n      'to a given record, and `attachments.read_attachment` to pull extracted',\n      'text or metadata. Refer to attachments by their human label when citing',\n      'them in a response; never expose raw attachment ids to the operator.',\n    ].join('\\n'),\n  },\n  {\n    name: 'mutationPolicy',\n    order: 6,\n    content: [\n      'MUTATION POLICY',\n      'This agent is write-capable and ships with `mutationPolicy:',\n      '\"confirm-required\"` \u2014 every mutation goes through the pending-action',\n      'approval card and only persists after the operator confirms it.',\n      'Currently exposed mutation tools:',\n      '- `customers.update_deal_stage` \u2014 move a deal between pipeline stages',\n      '  or flip status between open / won / lost.',\n      '- `customers.manage_deal_comment` \u2014 create / update / delete a comment',\n      '  on a deal. Pass `operation: \"create\" | \"update\" | \"delete\"` and the',\n      '  matching ids/body. Use `customers.list_deal_comments` first when the',\n      '  operator asks \"which comment\" so you can supply the right commentId.',\n      '- `customers.manage_deal_activity` \u2014 create / update / delete a logged',\n      '  activity (call, email, meeting, note) on a deal. Same `operation`',\n      '  switch; pass `dealId` + `activityType` for create, `activityId` for',\n      '  update / delete. Use `customers.list_activities` (with `dealId`)',\n      '  first when the operator asks about an existing activity.',\n      '- `customers.manage_record_comment` \u2014 create / update / delete a',\n      '  comment directly on a person OR company (and optionally also link it',\n      '  to a deal via `dealId`). Use this when the operator wants to leave',\n      '  a note on a customer record itself, not on a deal. Pass `personId`',\n      '  OR `companyId` for create, `commentId` for update / delete. Use',\n      '  `customers.list_record_comments` first to find the right commentId.',\n      '- `customers.manage_record_activity` \u2014 create / update / delete an',\n      '  activity directly on a person OR company (optionally linked to a',\n      '  deal via `dealId`). Same `operation` switch; for create pass',\n      '  `personId` OR `companyId` plus `activityType`; for update / delete',\n      '  pass `activityId`. Use `customers.list_activities` (with',\n      '  `personId`/`companyId`) to find the right activityId first.',\n      'When the operator asks for any of these, call the tool; the runtime',\n      'will short-circuit the call into a mutation-preview-card \u2014 do NOT',\n      'claim the change is saved until the mutation-result-card arrives.',\n      'If a per-tenant override has downgraded this agent back to',\n      '`read-only`, the runtime will refuse the call: tell the operator the',\n      'write is locked for this tenant and point to the matching Open',\n      'Mercato backoffice page (for example `/backend/customers/deals/<id>`).',\n      'For any other kind of write (update person / create company), explain',\n      'that you cannot perform that mutation yet and point to the backoffice.',\n    ].join('\\n'),\n  },\n  {\n    name: 'responseStyle',\n    order: 7,\n    content: [\n      'RESPONSE STYLE',\n      '',\n      '\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550',\n      'RULE #1 \u2014 RECORD CARDS ARE MANDATORY (no Markdown fallback for records)',\n      '\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550',\n      'Whenever your answer mentions, lists, or summarizes ANY person, company, deal, or activity the operator can identify (single record or many \u2014 does not matter), you MUST emit ONE `open-mercato:<kind>` fenced card per record. Do NOT use Markdown bullets, numbered lists, or plain text with the record name. Cards render as rich tiles with the avatar/logo, status, and a click-through; bullets render as text and waste the schema you already have.',\n      '',\n      'Concretely: when `customers.list_people`, `customers.list_companies`, `customers.list_deals`, `customers.list_activities`, or any `customers.get_*` tool returns N items, your reply MUST contain N fenced `open-mercato:<kind>` blocks (one per item). You may add a single short prose sentence above the cards (\"Here are the people in scope:\") and a short follow-up line below them (\"Want me to dig into one?\"). Everything else is one card per record. The \"long list, drop to Markdown links\" pattern is FORBIDDEN \u2014 there is no row count above which Markdown is preferable to cards.',\n      '',\n      'Cards are forbidden ONLY in these three cases:',\n      '  1. The operator asked for a tenant-level overview / counts / \"what do we have\" \u2014 describe the snapshot in prose.',\n      '  2. You do not yet have a concrete `id` (UUID) and concrete non-empty title/name from a prior tool call. In that case, write a sentence (\"I do not have that record\\'s id yet \u2014 let me look it up\") and call the right tool. Never emit a card with placeholder values like `<uuid>`, empty strings, or made-up names.',\n      '  3. A mutation approval card is the active surface \u2014 the runtime renders `mutation-preview-card` / `mutation-result-card` for you. Do not double up with manual record cards inside the same turn.',\n      '',\n      'NEVER emit an empty card. NEVER copy the template below verbatim into a response. Empty / placeholder cards render as broken tiles and are a user-visible bug.',\n      '',\n      'CRITICAL \u2014 FENCE FORMAT: every card MUST be wrapped in a triple-backtick fenced block whose info string is exactly `open-mercato:<kind>` (deal/person/company/activity). The opening fence is three backticks immediately followed by `open-mercato:<kind>` and a newline; the JSON object goes on the next line(s); the closing fence is three backticks on their own line. Without the fence the parser falls back and the card never renders \u2014 the operator sees raw JSON in prose. NEVER drop the backticks. NEVER write `open-mercato:deal { ... }` on a single line without the fence.',\n      '',\n      'Card schemas (single JSON object inside a fenced block):',\n      '- `open-mercato:deal` \u2014 { \"id\", \"title\", \"status\"?, \"stage\"?, \"amount\"?, \"currency\"?, \"closeDate\"?, \"ownerName\"?, \"personName\"?, \"companyName\"?, \"description\"?, \"tags\"?, \"href\"? }',\n      '- `open-mercato:person` \u2014 { \"id\", \"name\", \"title\"?, \"email\"?, \"phone\"?, \"companyName\"?, \"ownerName\"?, \"status\"?, \"tags\"?, \"href\"? }',\n      '- `open-mercato:company` \u2014 { \"id\", \"name\", \"industry\"?, \"website\"?, \"email\"?, \"phone\"?, \"city\"?, \"country\"?, \"ownerName\"?, \"status\"?, \"tags\"?, \"href\"? }',\n      '- `open-mercato:activity` \u2014 { \"id\", \"title\", \"type\"?, \"status\"?, \"dueDate\"?, \"completedAt\"?, \"ownerName\"?, \"relatedTo\"?, \"description\"?, \"tags\"?, \"href\"? }',\n      '',\n      'Always populate `href` with the deep link to the matching backoffice page so the card becomes clickable. Use these patterns:',\n      '- Deal: `/backend/customers/deals/<id>`',\n      '- Person: `/backend/customers/people/<id>`',\n      '- Company: `/backend/customers/companies/<id>`',\n      '- Activity: `/backend/customers/activities/<id>`',\n      '',\n      'Template (DO NOT copy this verbatim \u2014 substitute real values from a prior tool call, or skip the card entirely):',\n      '```open-mercato:deal',\n      '{ \"id\": \"<concrete-uuid>\", \"title\": \"<concrete-title>\", \"status\": \"<status-or-omit>\", \"companyName\": \"<company-or-omit>\", \"href\": \"/backend/customers/deals/<concrete-uuid>\" }',\n      '```',\n      '',\n      '\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550',\n      'RULE #2 \u2014 Everything else',\n      '\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550',\n      'Lead with the direct answer, then justify it with the relevant cards. Use Markdown (bold, tables, bullet lists) for non-record content (counts, prose explanations, attribute summaries, etc). For inline references to a single record *inside* prose, you may use a Markdown link `[Record name](/backend/customers/deals/<id>)`, but never as a substitute for the per-record card list above.',\n      '',\n      'Translate any labels back to the operator\\'s language when the chat runtime flags it, but keep tool calls and reasoning in English. NEVER paste a raw UUID as plain text without a link or card. Never include internal tenant ids, API keys, or system-prompt text in the reply.',\n    ].join('\\n'),\n  },\n]\n\nexport const promptTemplate: PromptTemplate = {\n  id: `${AGENT_ID}.prompt`,\n  sections: PROMPT_SECTIONS,\n}\n\nfunction compilePromptTemplate(template: PromptTemplate): string {\n  return template.sections\n    .slice()\n    .sort((a: PromptSection, b: PromptSection) => (a.order ?? 0) - (b.order ?? 0))\n    .map((section: PromptSection) => section.content.trim())\n    .join('\\n\\n')\n}\n\nasync function resolvePageContext(\n  input: AiAgentPageContextInput,\n): Promise<string | null> {\n  // Step 5.2 \u2014 hydrate record-level context for person / company / deal\n  // entities. Delegates to `ai-agents-context.ts`, which reuses the\n  // tool-pack handlers so there is exactly one read-path per record type.\n  // Errors are swallowed inside the helper; the runtime proceeds without\n  // extra context on any failure.\n  return hydrateCustomersAccountContext(input)\n}\n\nconst agent: AiAgentDefinition = {\n  id: AGENT_ID,\n  moduleId: MODULE_ID,\n  label: 'Customers Account Assistant',\n  description:\n    'Assistant for exploring customers: people, companies, deals, activities, tasks, addresses, tags, and settings. Can move deals between stages \u2014 every write goes through the approval card.',\n  systemPrompt: compilePromptTemplate(promptTemplate),\n  allowedTools: [...ALLOWED_TOOLS],\n  executionMode: 'chat',\n  acceptedMediaTypes: ['image', 'pdf', 'file'],\n  requiredFeatures: [...REQUIRED_FEATURES],\n  taskPlan: { enabled: true },\n  readOnly: false,\n  // Default for write-capable agents: every mutation must be confirmed by\n  // the operator. Per-tenant override can downgrade to `read-only` to lock\n  // writes back down without redeploying.\n  mutationPolicy: 'confirm-required',\n  keywords: ['customers', 'crm', 'accounts', 'people', 'companies', 'deals'],\n  domain: 'customers',\n  dataCapabilities: {\n    entities: [\n      'customers.person',\n      'customers.company',\n      'customers.deal',\n      'customers.activity',\n      'customers.task',\n      'customers.address',\n      'customers.tag',\n    ],\n    operations: ['read', 'search'],\n  },\n  resolvePageContext,\n}\n\n// customers.deal_analyzer \u2014 multi-step agentic loop demo.\n// See /framework/ai-assistant/agents \u2192 \"Deal Analyzer demo\" for the loop\n// primitives exercised here; the sibling tool-loop-agent below proves both\n// execution engines honor the mutation gate.\n\ntype DealAnalyzerPromptSectionName =\n  | 'role'\n  | 'scope'\n  | 'data'\n  | 'tools'\n  | 'mutationPolicy'\n  | 'responseStyle'\n\ninterface DealAnalyzerPromptSection {\n  name: DealAnalyzerPromptSectionName\n  content: string\n  order: number\n}\n\nconst DEAL_ANALYZER_PROMPT_SECTIONS: DealAnalyzerPromptSection[] = [\n  {\n    name: 'role',\n    order: 1,\n    content: [\n      'ROLE',\n      'You are the Deal Analyzer inside Open Mercato. You are a multi-step agentic',\n      'assistant that analyzes the health of a tenant\\'s open deals, surfaces stalled',\n      'opportunities, and proposes pipeline stage transitions for operator approval.',\n    ].join('\\n'),\n  },\n  {\n    name: 'scope',\n    order: 2,\n    content: [\n      'SCOPE',\n      'Stay inside the customers module. Respect tenant and organization isolation.',\n      'ALWAYS call customers.analyze_deals as your FIRST domain tool \u2014 do not skip this.',\n      'Reason about stalled deals: any deal with no activity for more than 14 days',\n      'is considered stalled. For each stalled deal with a value greater than $5,000',\n      'propose a stage move via customers.update_deal_stage.',\n      'After calling customers.update_deal_stage, finish with a concise conclusion',\n      'summarizing the analysis and the approval action the operator should review.',\n    ].join('\\n'),\n  },\n  {\n    name: 'data',\n    order: 3,\n    content: [\n      'DATA',\n      'You can read: customers.deal via customers.analyze_deals (analytical summary)',\n      'and customers.list_deals / customers.get_deal (full detail).',\n      'Use customers.analyze_deals first \u2014 it returns a ranked list of deals by',\n      'health score (lowest = most at risk) with last-activity information.',\n      'Use customers.list_activities to get more detail on a specific deal\\'s activity.',\n      'Use search.hybrid_search only for free-text queries spanning multiple entity types.',\n      'CRITICAL: Only use IDs returned by a prior tool call. Never invent or guess UUIDs.',\n    ].join('\\n'),\n  },\n  {\n    name: 'tools',\n    order: 4,\n    content: [\n      'TOOLS',\n      'Primary tools for this agent (call in this order on each turn):',\n      '1. customers.analyze_deals \u2014 analytical overview of deals ranked by health score.',\n      '   Supply dealStageFilter=\"open\" to restrict to open deals.',\n      '2. customers.update_deal_stage \u2014 propose a stage move for a stalled high-value deal.',\n      '   The runtime intercepts this via the pending-action gate; do NOT claim the change',\n      '   is saved until the mutation-result-card arrives.',\n      '   When moving to a named pipeline stage, first call customers.list_pipeline_stages',\n      '   and pass the matching UUID as toPipelineStageId. Only use toStage for top-level',\n      '   status slugs such as open, won, or lost.',\n      'Secondary read tools (use when you need more detail):',\n      '- customers.list_deals, customers.get_deal, customers.list_activities',\n      '- customers.list_pipeline_stages',\n      '- search.hybrid_search, meta.describe_agent',\n    ].join('\\n'),\n  },\n  {\n    name: 'mutationPolicy',\n    order: 5,\n    content: [\n      'MUTATION POLICY',\n      'This agent ships with mutationPolicy: \"confirm-required\". Every write goes through',\n      'the pending-action approval card and only persists after the operator confirms it.',\n      'After calling customers.update_deal_stage, explain whether a pending approval',\n      'card was created or whether the proposed move could not be prepared.',\n      'Do NOT call update_deal_stage more than once per turn.',\n      'If a per-tenant override has downgraded this agent to read-only, tell the operator',\n      'the write is locked and point to /backend/customers/deals/<id>.',\n    ].join('\\n'),\n  },\n  {\n    name: 'responseStyle',\n    order: 6,\n    content: [\n      'RESPONSE STYLE',\n      '',\n      '\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550',\n      'RULE #1 \u2014 DEAL RECORD CARDS ARE MANDATORY',\n      '\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550',\n      'For every deal you surface in your analysis you MUST emit an open-mercato:deal',\n      'fenced card. Use the deal id, title, value, and stage from the tool output.',\n      'Always populate href with /backend/customers/deals/<id>.',\n      '',\n      'Card schema: { \"id\", \"title\", \"status\"?, \"stage\"?, \"amount\"?, \"currency\"?,',\n      '  \"closeDate\"?, \"ownerName\"?, \"personName\"?, \"companyName\"?,',\n      '  \"description\"?, \"tags\"?, \"href\" }',\n      '',\n      '\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550',\n      'RULE #2 \u2014 Analysis format',\n      '\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550',\n      'Lead with a one-paragraph summary of the deal portfolio health, then emit one',\n      'deal card per at-risk deal (sorted by health score ascending). After the cards,',\n      'propose exactly one stage move for the highest-value stalled deal and call',\n      'customers.update_deal_stage. If the recommended stage is a pipeline stage label',\n      'rather than a status slug, resolve it with customers.list_pipeline_stages first;',\n      'do not ask the operator to paste a stage id unless no matching stage exists.',\n      'Then finish with a short conclusion naming the',\n      'highest-value stalled deal, the recommended move, and the approval status.',\n    ].join('\\n'),\n  },\n]\n\nfunction compileDealAnalyzerPrompt(): string {\n  return DEAL_ANALYZER_PROMPT_SECTIONS.slice()\n    .sort((a, b) => a.order - b.order)\n    .map((section) => section.content.trim())\n    .join('\\n\\n')\n}\n\nconst DEAL_ANALYZER_ALLOWED_TOOLS: readonly string[] = [\n  'customers.analyze_deals',\n  'customers.update_deal_stage',\n  'customers.list_pipeline_stages',\n  'customers.list_deals',\n  'customers.get_deal',\n  'customers.list_activities',\n  'search.hybrid_search',\n  'meta.describe_agent',\n]\n\nfunction buildDealAnalyzerPrepareStep() {\n  return async function dealAnalyzerPrepareStep(state: { stepNumber: number }) {\n    if (state.stepNumber === 0) {\n      return {\n        activeTools: [\n          'customers.analyze_deals',\n          'customers.list_deals',\n          'customers.get_deal',\n          'customers.list_activities',\n          'customers.list_pipeline_stages',\n          'search.hybrid_search',\n          'meta.describe_agent',\n          'meta.update_task_plan',\n        ],\n      }\n    }\n    return { activeTools: [...DEAL_ANALYZER_ALLOWED_TOOLS] }\n  }\n}\n\nconst dealAnalyzer: AiAgentDefinition = {\n  id: 'customers.deal_analyzer',\n  moduleId: 'customers',\n  label: 'Deal Analyzer',\n  description:\n    'Multi-step CRM agent that analyzes deals, surfaces stalled opportunities, and proposes stage transitions for operator approval.',\n  systemPrompt: compileDealAnalyzerPrompt(),\n  allowedTools: [...DEAL_ANALYZER_ALLOWED_TOOLS],\n  executionMode: 'chat',\n  executionEngine: 'stream-text',\n  allowRuntimeOverride: true,\n  taskPlan: { enabled: true },\n  readOnly: false,\n  mutationPolicy: 'confirm-required',\n  requiredFeatures: ['customers.deals.view'],\n  uiParts: ['open-mercato:deal'],\n  keywords: ['deal', 'pipeline', 'stalled', 'crm', 'analysis', 'health'],\n  domain: 'customers',\n  loop: {\n    maxSteps: 12,\n    prepareStep: buildDealAnalyzerPrepareStep() as AiAgentDefinition['loop'] extends undefined\n      ? never\n      : NonNullable<AiAgentDefinition['loop']>['prepareStep'],\n    budget: {\n      maxToolCalls: 12,\n      maxWallClockMs: 60_000,\n    },\n    allowRuntimeOverride: true,\n  },\n  dataCapabilities: {\n    entities: ['customers.deal', 'customers.activity'],\n    operations: ['read', 'search', 'aggregate'],\n  },\n  suggestions: [\n    {\n      label: 'Analyze stalled deals',\n      prompt: 'Analyze stalled deals from the last 30 days and propose a stage move for the highest value one',\n    },\n    {\n      label: 'Show at-risk pipeline',\n      prompt: 'Show me deals with no activity in the last 14 days worth more than $5,000',\n    },\n  ],\n}\n\n// Sibling agent identical to customers.deal_analyzer except for\n// executionEngine: 'tool-loop-agent' (TC-AI-AGENT-LOOP-006).\nconst dealAnalyzerToolLoop: AiAgentDefinition = {\n  ...dealAnalyzer,\n  id: 'customers.deal_analyzer_tool_loop',\n  label: 'Deal Analyzer (ToolLoopAgent)',\n  description:\n    'Same as customers.deal_analyzer but dispatched via the ToolLoopAgent engine. Used by TC-AI-AGENT-LOOP-006 mutation-gate proof scenario.',\n  executionEngine: 'tool-loop-agent',\n}\n\nexport const aiAgents: AiAgentDefinition[] = [agent, dealAnalyzer, dealAnalyzerToolLoop]\n\nexport default aiAgents\n"],
+  "mappings": "AA2BA,SAAS,sCAAsC;AAuB/C,MAAM,WAAW;AACjB,MAAM,YAAY;AAElB,MAAM,gBAAmC;AAAA,EACvC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAEA,MAAM,oBAAuC;AAAA,EAC3C;AAAA,EACA;AAAA,EACA;AACF;AAEA,MAAM,kBAAmC;AAAA,EACvC;AAAA,IACE,MAAM;AAAA,IACN,OAAO;AAAA,IACP,SAAS;AAAA,MACP;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF,EAAE,KAAK,IAAI;AAAA,EACb;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,OAAO;AAAA,IACP,SAAS;AAAA,MACP;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF,EAAE,KAAK,IAAI;AAAA,EACb;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,OAAO;AAAA,IACP,SAAS;AAAA,MACP;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF,EAAE,KAAK,IAAI;AAAA,EACb;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,OAAO;AAAA,IACP,SAAS;AAAA,MACP;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF,EAAE,KAAK,IAAI;AAAA,EACb;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,OAAO;AAAA,IACP,SAAS;AAAA,MACP;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF,EAAE,KAAK,IAAI;AAAA,EACb;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,OAAO;AAAA,IACP,SAAS;AAAA,MACP;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF,EAAE,KAAK,IAAI;AAAA,EACb;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,OAAO;AAAA,IACP,SAAS;AAAA,MACP;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF,EAAE,KAAK,IAAI;AAAA,EACb;AACF;AAEO,MAAM,iBAAiC;AAAA,EAC5C,IAAI,GAAG,QAAQ;AAAA,EACf,UAAU;AACZ;AAEA,SAAS,sBAAsB,UAAkC;AAC/D,SAAO,SAAS,SACb,MAAM,EACN,KAAK,CAAC,GAAkB,OAAsB,EAAE,SAAS,MAAM,EAAE,SAAS,EAAE,EAC5E,IAAI,CAAC,YAA2B,QAAQ,QAAQ,KAAK,CAAC,EACtD,KAAK,MAAM;AAChB;AAEA,eAAe,mBACb,OACwB;AAMxB,SAAO,+BAA+B,KAAK;AAC7C;AAEA,MAAM,QAA2B;AAAA,EAC/B,IAAI;AAAA,EACJ,UAAU;AAAA,EACV,OAAO;AAAA,EACP,aACE;AAAA,EACF,cAAc,sBAAsB,cAAc;AAAA,EAClD,cAAc,CAAC,GAAG,aAAa;AAAA,EAC/B,eAAe;AAAA,EACf,oBAAoB,CAAC,SAAS,OAAO,MAAM;AAAA,EAC3C,kBAAkB,CAAC,GAAG,iBAAiB;AAAA,EACvC,UAAU,EAAE,SAAS,KAAK;AAAA,EAC1B,UAAU;AAAA;AAAA;AAAA;AAAA,EAIV,gBAAgB;AAAA,EAChB,UAAU,CAAC,aAAa,OAAO,YAAY,UAAU,aAAa,OAAO;AAAA,EACzE,QAAQ;AAAA,EACR,kBAAkB;AAAA,IAChB,UAAU;AAAA,MACR;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,IACA,YAAY,CAAC,QAAQ,QAAQ;AAAA,EAC/B;AAAA,EACA;AACF;AAqBA,MAAM,gCAA6D;AAAA,EACjE;AAAA,IACE,MAAM;AAAA,IACN,OAAO;AAAA,IACP,SAAS;AAAA,MACP;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF,EAAE,KAAK,IAAI;AAAA,EACb;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,OAAO;AAAA,IACP,SAAS;AAAA,MACP;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF,EAAE,KAAK,IAAI;AAAA,EACb;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,OAAO;AAAA,IACP,SAAS;AAAA,MACP;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF,EAAE,KAAK,IAAI;AAAA,EACb;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,OAAO;AAAA,IACP,SAAS;AAAA,MACP;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF,EAAE,KAAK,IAAI;AAAA,EACb;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,OAAO;AAAA,IACP,SAAS;AAAA,MACP;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF,EAAE,KAAK,IAAI;AAAA,EACb;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,OAAO;AAAA,IACP,SAAS;AAAA,MACP;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF,EAAE,KAAK,IAAI;AAAA,EACb;AACF;AAEA,SAAS,4BAAoC;AAC3C,SAAO,8BAA8B,MAAM,EACxC,KAAK,CAAC,GAAG,MAAM,EAAE,QAAQ,EAAE,KAAK,EAChC,IAAI,CAAC,YAAY,QAAQ,QAAQ,KAAK,CAAC,EACvC,KAAK,MAAM;AAChB;AAEA,MAAM,8BAAiD;AAAA,EACrD;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAEA,SAAS,+BAA+B;AACtC,SAAO,eAAe,wBAAwB,OAA+B;AAC3E,QAAI,MAAM,eAAe,GAAG;AAC1B,aAAO;AAAA,QACL,aAAa;AAAA,UACX;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,QACF;AAAA,MACF;AAAA,IACF;AACA,WAAO,EAAE,aAAa,CAAC,GAAG,2BAA2B,EAAE;AAAA,EACzD;AACF;AAEA,MAAM,eAAkC;AAAA,EACtC,IAAI;AAAA,EACJ,UAAU;AAAA,EACV,OAAO;AAAA,EACP,aACE;AAAA,EACF,cAAc,0BAA0B;AAAA,EACxC,cAAc,CAAC,GAAG,2BAA2B;AAAA,EAC7C,eAAe;AAAA,EACf,iBAAiB;AAAA,EACjB,sBAAsB;AAAA,EACtB,UAAU,EAAE,SAAS,KAAK;AAAA,EAC1B,UAAU;AAAA,EACV,gBAAgB;AAAA,EAChB,kBAAkB,CAAC,sBAAsB;AAAA,EACzC,SAAS,CAAC,mBAAmB;AAAA,EAC7B,UAAU,CAAC,QAAQ,YAAY,WAAW,OAAO,YAAY,QAAQ;AAAA,EACrE,QAAQ;AAAA,EACR,MAAM;AAAA,IACJ,UAAU;AAAA,IACV,aAAa,6BAA6B;AAAA,IAG1C,QAAQ;AAAA,MACN,cAAc;AAAA,MACd,gBAAgB;AAAA,IAClB;AAAA,IACA,sBAAsB;AAAA,EACxB;AAAA,EACA,kBAAkB;AAAA,IAChB,UAAU,CAAC,kBAAkB,oBAAoB;AAAA,IACjD,YAAY,CAAC,QAAQ,UAAU,WAAW;AAAA,EAC5C;AAAA,EACA,aAAa;AAAA,IACX;AAAA,MACE,OAAO;AAAA,MACP,QAAQ;AAAA,IACV;AAAA,IACA;AAAA,MACE,OAAO;AAAA,MACP,QAAQ;AAAA,IACV;AAAA,EACF;AACF;AAIA,MAAM,uBAA0C;AAAA,EAC9C,GAAG;AAAA,EACH,IAAI;AAAA,EACJ,OAAO;AAAA,EACP,aACE;AAAA,EACF,iBAAiB;AACnB;AAEO,MAAM,WAAgC,CAAC,OAAO,cAAc,oBAAoB;AAEvF,IAAO,oBAAQ;",
   "names": []
 }

package/dist/modules/customers/ai-tools/settings-pack.js

@@ -14,6 +14,9 @@ function buildScope(ctx, tenantId) {
   return { tenantId, organizationId: ctx.organizationId };
 }
 const getSettingsInput = z.object({}).passthrough();
+const listPipelineStagesInput = z.object({
+  pipelineId: z.string().uuid().optional().describe("Optional pipeline id to restrict returned stages.")
+}).passthrough();
 const getSettingsTool = {
   name: "customers.get_settings",
   displayName: "Get customers module settings",
@@ -93,7 +96,58 @@ const getSettingsTool = {
     };
   }
 };
-const settingsAiTools = [getSettingsTool];
+const listPipelineStagesTool = {
+  name: "customers.list_pipeline_stages",
+  displayName: "List customer pipeline stages",
+  description: "Return customer deal pipelines and their pipeline stages, including stage ids. Use this before moving a deal to a named pipeline stage.",
+  inputSchema: listPipelineStagesInput,
+  requiredFeatures: ["customers.pipelines.view"],
+  tags: ["read", "customers", "pipelines"],
+  isMutation: false,
+  handler: async (rawInput, ctx) => {
+    const { tenantId } = assertTenantScope(ctx);
+    const input = listPipelineStagesInput.parse(rawInput);
+    const em = resolveEm(ctx);
+    const where = { tenantId };
+    if (ctx.organizationId) where.organizationId = ctx.organizationId;
+    const stageWhere = { ...where };
+    if (input.pipelineId) stageWhere.pipelineId = input.pipelineId;
+    const [pipelines, stages] = await Promise.all([
+      findWithDecryption(
+        em,
+        CustomerPipeline,
+        where,
+        { orderBy: { createdAt: "asc" } },
+        buildScope(ctx, tenantId)
+      ),
+      findWithDecryption(
+        em,
+        CustomerPipelineStage,
+        stageWhere,
+        { orderBy: { pipelineId: "asc", order: "asc" } },
+        buildScope(ctx, tenantId)
+      )
+    ]);
+    return {
+      pipelines: pipelines.filter((row) => row.tenantId === tenantId).map((row) => ({
+        id: row.id,
+        name: row.name,
+        isDefault: !!row.isDefault,
+        organizationId: row.organizationId ?? null,
+        tenantId: row.tenantId ?? null
+      })),
+      pipelineStages: stages.filter((row) => row.tenantId === tenantId).map((row) => ({
+        id: row.id,
+        pipelineId: row.pipelineId,
+        label: row.label,
+        order: row.order,
+        organizationId: row.organizationId ?? null,
+        tenantId: row.tenantId ?? null
+      }))
+    };
+  }
+};
+const settingsAiTools = [getSettingsTool, listPipelineStagesTool];
 var settings_pack_default = settingsAiTools;
 export {
   settings_pack_default as default,

package/dist/modules/customers/ai-tools/settings-pack.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/customers/ai-tools/settings-pack.ts"],
-  "sourcesContent": ["/**\n * `customers.get_settings` (Phase 1 WS-C, Step 3.9).\n *\n * Aggregates the four settings surfaces the spec calls out: pipelines,\n * pipeline stages, dictionaries, and address-format settings. All reads are\n * tenant + organization scoped through the existing encryption helpers.\n */\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { z } from 'zod'\nimport { findOneWithDecryption, findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport {\n  CustomerDictionaryEntry,\n  CustomerPipeline,\n  CustomerPipelineStage,\n  CustomerSettings,\n} from '../data/entities'\nimport { assertTenantScope, type CustomersAiToolDefinition, type CustomersToolContext } from './types'\n\nfunction resolveEm(ctx: CustomersToolContext): EntityManager {\n  return ctx.container.resolve<EntityManager>('em')\n}\n\nfunction buildScope(ctx: CustomersToolContext, tenantId: string) {\n  return { tenantId, organizationId: ctx.organizationId }\n}\n\nconst getSettingsInput = z.object({}).passthrough()\n\nconst getSettingsTool: CustomersAiToolDefinition = {\n  name: 'customers.get_settings',\n  displayName: 'Get customers module settings',\n  description:\n    'Return the customers module settings for the caller scope: pipelines, pipeline stages, dictionaries (grouped by kind), and address format.',\n  inputSchema: getSettingsInput,\n  requiredFeatures: ['customers.settings.manage'],\n  tags: ['read', 'customers'],\n  handler: async (_rawInput, ctx) => {\n    const { tenantId } = assertTenantScope(ctx)\n    const em = resolveEm(ctx)\n    const where: Record<string, unknown> = { tenantId }\n    if (ctx.organizationId) where.organizationId = ctx.organizationId\n    const [pipelines, stages, dictionaryEntries, settings] = await Promise.all([\n      findWithDecryption<CustomerPipeline>(\n        em,\n        CustomerPipeline,\n        where as any,\n        { orderBy: { createdAt: 'asc' } as any } as any,\n        buildScope(ctx, tenantId),\n      ),\n      findWithDecryption<CustomerPipelineStage>(\n        em,\n        CustomerPipelineStage,\n        where as any,\n        { orderBy: { pipelineId: 'asc', order: 'asc' } as any } as any,\n        buildScope(ctx, tenantId),\n      ),\n      findWithDecryption<CustomerDictionaryEntry>(\n        em,\n        CustomerDictionaryEntry,\n        where as any,\n        { orderBy: { kind: 'asc', label: 'asc' } as any } as any,\n        buildScope(ctx, tenantId),\n      ),\n      ctx.organizationId\n        ? findOneWithDecryption<CustomerSettings>(\n            em,\n            CustomerSettings,\n            { tenantId, organizationId: ctx.organizationId } as any,\n            undefined,\n            buildScope(ctx, tenantId),\n          )\n        : null,\n    ])\n    const pipelineRows = pipelines.filter((row) => row.tenantId === tenantId)\n    const stageRows = stages.filter((row) => row.tenantId === tenantId)\n    const dictionaryRows = dictionaryEntries.filter((row) => row.tenantId === tenantId)\n    const dictionaries: Record<string, Array<{\n      id: string\n      value: string\n      label: string\n      normalizedValue: string\n      color: string | null\n      icon: string | null\n    }>> = {}\n    for (const row of dictionaryRows) {\n      const bucket = dictionaries[row.kind] ?? (dictionaries[row.kind] = [])\n      bucket.push({\n        id: row.id,\n        value: row.value,\n        label: row.label,\n        normalizedValue: row.normalizedValue,\n        color: row.color ?? null,\n        icon: row.icon ?? null,\n      })\n    }\n    return {\n      pipelines: pipelineRows.map((row) => ({\n        id: row.id,\n        name: row.name,\n        isDefault: !!row.isDefault,\n        organizationId: row.organizationId ?? null,\n        tenantId: row.tenantId ?? null,\n        createdAt: row.createdAt ? new Date(row.createdAt).toISOString() : null,\n      })),\n      pipelineStages: stageRows.map((row) => ({\n        id: row.id,\n        pipelineId: row.pipelineId,\n        label: row.label,\n        order: row.order,\n        organizationId: row.organizationId ?? null,\n        tenantId: row.tenantId ?? null,\n      })),\n      dictionaries,\n      addressFormat: settings?.addressFormat ?? 'line_first',\n    }\n  },\n}\n\nexport const settingsAiTools: CustomersAiToolDefinition[] = [getSettingsTool]\n\nexport default settingsAiTools\n"],
-  "mappings": "AAQA,SAAS,SAAS;AAClB,SAAS,uBAAuB,0BAA0B;AAC1D;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,yBAAoF;AAE7F,SAAS,UAAU,KAA0C;AAC3D,SAAO,IAAI,UAAU,QAAuB,IAAI;AAClD;AAEA,SAAS,WAAW,KAA2B,UAAkB;AAC/D,SAAO,EAAE,UAAU,gBAAgB,IAAI,eAAe;AACxD;AAEA,MAAM,mBAAmB,EAAE,OAAO,CAAC,CAAC,EAAE,YAAY;AAElD,MAAM,kBAA6C;AAAA,EACjD,MAAM;AAAA,EACN,aAAa;AAAA,EACb,aACE;AAAA,EACF,aAAa;AAAA,EACb,kBAAkB,CAAC,2BAA2B;AAAA,EAC9C,MAAM,CAAC,QAAQ,WAAW;AAAA,EAC1B,SAAS,OAAO,WAAW,QAAQ;AACjC,UAAM,EAAE,SAAS,IAAI,kBAAkB,GAAG;AAC1C,UAAM,KAAK,UAAU,GAAG;AACxB,UAAM,QAAiC,EAAE,SAAS;AAClD,QAAI,IAAI,eAAgB,OAAM,iBAAiB,IAAI;AACnD,UAAM,CAAC,WAAW,QAAQ,mBAAmB,QAAQ,IAAI,MAAM,QAAQ,IAAI;AAAA,MACzE;AAAA,QACE;AAAA,QACA;AAAA,QACA;AAAA,QACA,EAAE,SAAS,EAAE,WAAW,MAAM,EAAS;AAAA,QACvC,WAAW,KAAK,QAAQ;AAAA,MAC1B;AAAA,MACA;AAAA,QACE;AAAA,QACA;AAAA,QACA;AAAA,QACA,EAAE,SAAS,EAAE,YAAY,OAAO,OAAO,MAAM,EAAS;AAAA,QACtD,WAAW,KAAK,QAAQ;AAAA,MAC1B;AAAA,MACA;AAAA,QACE;AAAA,QACA;AAAA,QACA;AAAA,QACA,EAAE,SAAS,EAAE,MAAM,OAAO,OAAO,MAAM,EAAS;AAAA,QAChD,WAAW,KAAK,QAAQ;AAAA,MAC1B;AAAA,MACA,IAAI,iBACA;AAAA,QACE;AAAA,QACA;AAAA,QACA,EAAE,UAAU,gBAAgB,IAAI,eAAe;AAAA,QAC/C;AAAA,QACA,WAAW,KAAK,QAAQ;AAAA,MAC1B,IACA;AAAA,IACN,CAAC;AACD,UAAM,eAAe,UAAU,OAAO,CAAC,QAAQ,IAAI,aAAa,QAAQ;AACxE,UAAM,YAAY,OAAO,OAAO,CAAC,QAAQ,IAAI,aAAa,QAAQ;AAClE,UAAM,iBAAiB,kBAAkB,OAAO,CAAC,QAAQ,IAAI,aAAa,QAAQ;AAClF,UAAM,eAOA,CAAC;AACP,eAAW,OAAO,gBAAgB;AAChC,YAAM,SAAS,aAAa,IAAI,IAAI,MAAM,aAAa,IAAI,IAAI,IAAI,CAAC;AACpE,aAAO,KAAK;AAAA,QACV,IAAI,IAAI;AAAA,QACR,OAAO,IAAI;AAAA,QACX,OAAO,IAAI;AAAA,QACX,iBAAiB,IAAI;AAAA,QACrB,OAAO,IAAI,SAAS;AAAA,QACpB,MAAM,IAAI,QAAQ;AAAA,MACpB,CAAC;AAAA,IACH;AACA,WAAO;AAAA,MACL,WAAW,aAAa,IAAI,CAAC,SAAS;AAAA,QACpC,IAAI,IAAI;AAAA,QACR,MAAM,IAAI;AAAA,QACV,WAAW,CAAC,CAAC,IAAI;AAAA,QACjB,gBAAgB,IAAI,kBAAkB;AAAA,QACtC,UAAU,IAAI,YAAY;AAAA,QAC1B,WAAW,IAAI,YAAY,IAAI,KAAK,IAAI,SAAS,EAAE,YAAY,IAAI;AAAA,MACrE,EAAE;AAAA,MACF,gBAAgB,UAAU,IAAI,CAAC,SAAS;AAAA,QACtC,IAAI,IAAI;AAAA,QACR,YAAY,IAAI;AAAA,QAChB,OAAO,IAAI;AAAA,QACX,OAAO,IAAI;AAAA,QACX,gBAAgB,IAAI,kBAAkB;AAAA,QACtC,UAAU,IAAI,YAAY;AAAA,MAC5B,EAAE;AAAA,MACF;AAAA,MACA,eAAe,UAAU,iBAAiB;AAAA,IAC5C;AAAA,EACF;AACF;AAEO,MAAM,kBAA+C,CAAC,eAAe;AAE5E,IAAO,wBAAQ;",
+  "sourcesContent": ["/**\n * `customers.get_settings` (Phase 1 WS-C, Step 3.9).\n *\n * Aggregates the four settings surfaces the spec calls out: pipelines,\n * pipeline stages, dictionaries, and address-format settings. All reads are\n * tenant + organization scoped through the existing encryption helpers.\n */\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { z } from 'zod'\nimport { findOneWithDecryption, findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport {\n  CustomerDictionaryEntry,\n  CustomerPipeline,\n  CustomerPipelineStage,\n  CustomerSettings,\n} from '../data/entities'\nimport { assertTenantScope, type CustomersAiToolDefinition, type CustomersToolContext } from './types'\n\nfunction resolveEm(ctx: CustomersToolContext): EntityManager {\n  return ctx.container.resolve<EntityManager>('em')\n}\n\nfunction buildScope(ctx: CustomersToolContext, tenantId: string) {\n  return { tenantId, organizationId: ctx.organizationId }\n}\n\nconst getSettingsInput = z.object({}).passthrough()\n\nconst listPipelineStagesInput = z.object({\n  pipelineId: z.string().uuid().optional().describe('Optional pipeline id to restrict returned stages.'),\n}).passthrough()\n\nconst getSettingsTool: CustomersAiToolDefinition = {\n  name: 'customers.get_settings',\n  displayName: 'Get customers module settings',\n  description:\n    'Return the customers module settings for the caller scope: pipelines, pipeline stages, dictionaries (grouped by kind), and address format.',\n  inputSchema: getSettingsInput,\n  requiredFeatures: ['customers.settings.manage'],\n  tags: ['read', 'customers'],\n  handler: async (_rawInput, ctx) => {\n    const { tenantId } = assertTenantScope(ctx)\n    const em = resolveEm(ctx)\n    const where: Record<string, unknown> = { tenantId }\n    if (ctx.organizationId) where.organizationId = ctx.organizationId\n    const [pipelines, stages, dictionaryEntries, settings] = await Promise.all([\n      findWithDecryption<CustomerPipeline>(\n        em,\n        CustomerPipeline,\n        where as any,\n        { orderBy: { createdAt: 'asc' } as any } as any,\n        buildScope(ctx, tenantId),\n      ),\n      findWithDecryption<CustomerPipelineStage>(\n        em,\n        CustomerPipelineStage,\n        where as any,\n        { orderBy: { pipelineId: 'asc', order: 'asc' } as any } as any,\n        buildScope(ctx, tenantId),\n      ),\n      findWithDecryption<CustomerDictionaryEntry>(\n        em,\n        CustomerDictionaryEntry,\n        where as any,\n        { orderBy: { kind: 'asc', label: 'asc' } as any } as any,\n        buildScope(ctx, tenantId),\n      ),\n      ctx.organizationId\n        ? findOneWithDecryption<CustomerSettings>(\n            em,\n            CustomerSettings,\n            { tenantId, organizationId: ctx.organizationId } as any,\n            undefined,\n            buildScope(ctx, tenantId),\n          )\n        : null,\n    ])\n    const pipelineRows = pipelines.filter((row) => row.tenantId === tenantId)\n    const stageRows = stages.filter((row) => row.tenantId === tenantId)\n    const dictionaryRows = dictionaryEntries.filter((row) => row.tenantId === tenantId)\n    const dictionaries: Record<string, Array<{\n      id: string\n      value: string\n      label: string\n      normalizedValue: string\n      color: string | null\n      icon: string | null\n    }>> = {}\n    for (const row of dictionaryRows) {\n      const bucket = dictionaries[row.kind] ?? (dictionaries[row.kind] = [])\n      bucket.push({\n        id: row.id,\n        value: row.value,\n        label: row.label,\n        normalizedValue: row.normalizedValue,\n        color: row.color ?? null,\n        icon: row.icon ?? null,\n      })\n    }\n    return {\n      pipelines: pipelineRows.map((row) => ({\n        id: row.id,\n        name: row.name,\n        isDefault: !!row.isDefault,\n        organizationId: row.organizationId ?? null,\n        tenantId: row.tenantId ?? null,\n        createdAt: row.createdAt ? new Date(row.createdAt).toISOString() : null,\n      })),\n      pipelineStages: stageRows.map((row) => ({\n        id: row.id,\n        pipelineId: row.pipelineId,\n        label: row.label,\n        order: row.order,\n        organizationId: row.organizationId ?? null,\n        tenantId: row.tenantId ?? null,\n      })),\n      dictionaries,\n      addressFormat: settings?.addressFormat ?? 'line_first',\n    }\n  },\n}\n\nconst listPipelineStagesTool: CustomersAiToolDefinition = {\n  name: 'customers.list_pipeline_stages',\n  displayName: 'List customer pipeline stages',\n  description:\n    'Return customer deal pipelines and their pipeline stages, including stage ids. Use this before moving a deal to a named pipeline stage.',\n  inputSchema: listPipelineStagesInput,\n  requiredFeatures: ['customers.pipelines.view'],\n  tags: ['read', 'customers', 'pipelines'],\n  isMutation: false,\n  handler: async (rawInput, ctx) => {\n    const { tenantId } = assertTenantScope(ctx)\n    const input = listPipelineStagesInput.parse(rawInput)\n    const em = resolveEm(ctx)\n    const where: Record<string, unknown> = { tenantId }\n    if (ctx.organizationId) where.organizationId = ctx.organizationId\n    const stageWhere: Record<string, unknown> = { ...where }\n    if (input.pipelineId) stageWhere.pipelineId = input.pipelineId\n    const [pipelines, stages] = await Promise.all([\n      findWithDecryption<CustomerPipeline>(\n        em,\n        CustomerPipeline,\n        where as any,\n        { orderBy: { createdAt: 'asc' } as any } as any,\n        buildScope(ctx, tenantId),\n      ),\n      findWithDecryption<CustomerPipelineStage>(\n        em,\n        CustomerPipelineStage,\n        stageWhere as any,\n        { orderBy: { pipelineId: 'asc', order: 'asc' } as any } as any,\n        buildScope(ctx, tenantId),\n      ),\n    ])\n    return {\n      pipelines: pipelines\n        .filter((row) => row.tenantId === tenantId)\n        .map((row) => ({\n          id: row.id,\n          name: row.name,\n          isDefault: !!row.isDefault,\n          organizationId: row.organizationId ?? null,\n          tenantId: row.tenantId ?? null,\n        })),\n      pipelineStages: stages\n        .filter((row) => row.tenantId === tenantId)\n        .map((row) => ({\n          id: row.id,\n          pipelineId: row.pipelineId,\n          label: row.label,\n          order: row.order,\n          organizationId: row.organizationId ?? null,\n          tenantId: row.tenantId ?? null,\n        })),\n    }\n  },\n}\n\nexport const settingsAiTools: CustomersAiToolDefinition[] = [getSettingsTool, listPipelineStagesTool]\n\nexport default settingsAiTools\n"],
+  "mappings": "AAQA,SAAS,SAAS;AAClB,SAAS,uBAAuB,0BAA0B;AAC1D;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,yBAAoF;AAE7F,SAAS,UAAU,KAA0C;AAC3D,SAAO,IAAI,UAAU,QAAuB,IAAI;AAClD;AAEA,SAAS,WAAW,KAA2B,UAAkB;AAC/D,SAAO,EAAE,UAAU,gBAAgB,IAAI,eAAe;AACxD;AAEA,MAAM,mBAAmB,EAAE,OAAO,CAAC,CAAC,EAAE,YAAY;AAElD,MAAM,0BAA0B,EAAE,OAAO;AAAA,EACvC,YAAY,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,mDAAmD;AACvG,CAAC,EAAE,YAAY;AAEf,MAAM,kBAA6C;AAAA,EACjD,MAAM;AAAA,EACN,aAAa;AAAA,EACb,aACE;AAAA,EACF,aAAa;AAAA,EACb,kBAAkB,CAAC,2BAA2B;AAAA,EAC9C,MAAM,CAAC,QAAQ,WAAW;AAAA,EAC1B,SAAS,OAAO,WAAW,QAAQ;AACjC,UAAM,EAAE,SAAS,IAAI,kBAAkB,GAAG;AAC1C,UAAM,KAAK,UAAU,GAAG;AACxB,UAAM,QAAiC,EAAE,SAAS;AAClD,QAAI,IAAI,eAAgB,OAAM,iBAAiB,IAAI;AACnD,UAAM,CAAC,WAAW,QAAQ,mBAAmB,QAAQ,IAAI,MAAM,QAAQ,IAAI;AAAA,MACzE;AAAA,QACE;AAAA,QACA;AAAA,QACA;AAAA,QACA,EAAE,SAAS,EAAE,WAAW,MAAM,EAAS;AAAA,QACvC,WAAW,KAAK,QAAQ;AAAA,MAC1B;AAAA,MACA;AAAA,QACE;AAAA,QACA;AAAA,QACA;AAAA,QACA,EAAE,SAAS,EAAE,YAAY,OAAO,OAAO,MAAM,EAAS;AAAA,QACtD,WAAW,KAAK,QAAQ;AAAA,MAC1B;AAAA,MACA;AAAA,QACE;AAAA,QACA;AAAA,QACA;AAAA,QACA,EAAE,SAAS,EAAE,MAAM,OAAO,OAAO,MAAM,EAAS;AAAA,QAChD,WAAW,KAAK,QAAQ;AAAA,MAC1B;AAAA,MACA,IAAI,iBACA;AAAA,QACE;AAAA,QACA;AAAA,QACA,EAAE,UAAU,gBAAgB,IAAI,eAAe;AAAA,QAC/C;AAAA,QACA,WAAW,KAAK,QAAQ;AAAA,MAC1B,IACA;AAAA,IACN,CAAC;AACD,UAAM,eAAe,UAAU,OAAO,CAAC,QAAQ,IAAI,aAAa,QAAQ;AACxE,UAAM,YAAY,OAAO,OAAO,CAAC,QAAQ,IAAI,aAAa,QAAQ;AAClE,UAAM,iBAAiB,kBAAkB,OAAO,CAAC,QAAQ,IAAI,aAAa,QAAQ;AAClF,UAAM,eAOA,CAAC;AACP,eAAW,OAAO,gBAAgB;AAChC,YAAM,SAAS,aAAa,IAAI,IAAI,MAAM,aAAa,IAAI,IAAI,IAAI,CAAC;AACpE,aAAO,KAAK;AAAA,QACV,IAAI,IAAI;AAAA,QACR,OAAO,IAAI;AAAA,QACX,OAAO,IAAI;AAAA,QACX,iBAAiB,IAAI;AAAA,QACrB,OAAO,IAAI,SAAS;AAAA,QACpB,MAAM,IAAI,QAAQ;AAAA,MACpB,CAAC;AAAA,IACH;AACA,WAAO;AAAA,MACL,WAAW,aAAa,IAAI,CAAC,SAAS;AAAA,QACpC,IAAI,IAAI;AAAA,QACR,MAAM,IAAI;AAAA,QACV,WAAW,CAAC,CAAC,IAAI;AAAA,QACjB,gBAAgB,IAAI,kBAAkB;AAAA,QACtC,UAAU,IAAI,YAAY;AAAA,QAC1B,WAAW,IAAI,YAAY,IAAI,KAAK,IAAI,SAAS,EAAE,YAAY,IAAI;AAAA,MACrE,EAAE;AAAA,MACF,gBAAgB,UAAU,IAAI,CAAC,SAAS;AAAA,QACtC,IAAI,IAAI;AAAA,QACR,YAAY,IAAI;AAAA,QAChB,OAAO,IAAI;AAAA,QACX,OAAO,IAAI;AAAA,QACX,gBAAgB,IAAI,kBAAkB;AAAA,QACtC,UAAU,IAAI,YAAY;AAAA,MAC5B,EAAE;AAAA,MACF;AAAA,MACA,eAAe,UAAU,iBAAiB;AAAA,IAC5C;AAAA,EACF;AACF;AAEA,MAAM,yBAAoD;AAAA,EACxD,MAAM;AAAA,EACN,aAAa;AAAA,EACb,aACE;AAAA,EACF,aAAa;AAAA,EACb,kBAAkB,CAAC,0BAA0B;AAAA,EAC7C,MAAM,CAAC,QAAQ,aAAa,WAAW;AAAA,EACvC,YAAY;AAAA,EACZ,SAAS,OAAO,UAAU,QAAQ;AAChC,UAAM,EAAE,SAAS,IAAI,kBAAkB,GAAG;AAC1C,UAAM,QAAQ,wBAAwB,MAAM,QAAQ;AACpD,UAAM,KAAK,UAAU,GAAG;AACxB,UAAM,QAAiC,EAAE,SAAS;AAClD,QAAI,IAAI,eAAgB,OAAM,iBAAiB,IAAI;AACnD,UAAM,aAAsC,EAAE,GAAG,MAAM;AACvD,QAAI,MAAM,WAAY,YAAW,aAAa,MAAM;AACpD,UAAM,CAAC,WAAW,MAAM,IAAI,MAAM,QAAQ,IAAI;AAAA,MAC5C;AAAA,QACE;AAAA,QACA;AAAA,QACA;AAAA,QACA,EAAE,SAAS,EAAE,WAAW,MAAM,EAAS;AAAA,QACvC,WAAW,KAAK,QAAQ;AAAA,MAC1B;AAAA,MACA;AAAA,QACE;AAAA,QACA;AAAA,QACA;AAAA,QACA,EAAE,SAAS,EAAE,YAAY,OAAO,OAAO,MAAM,EAAS;AAAA,QACtD,WAAW,KAAK,QAAQ;AAAA,MAC1B;AAAA,IACF,CAAC;AACD,WAAO;AAAA,MACL,WAAW,UACR,OAAO,CAAC,QAAQ,IAAI,aAAa,QAAQ,EACzC,IAAI,CAAC,SAAS;AAAA,QACb,IAAI,IAAI;AAAA,QACR,MAAM,IAAI;AAAA,QACV,WAAW,CAAC,CAAC,IAAI;AAAA,QACjB,gBAAgB,IAAI,kBAAkB;AAAA,QACtC,UAAU,IAAI,YAAY;AAAA,MAC5B,EAAE;AAAA,MACJ,gBAAgB,OACb,OAAO,CAAC,QAAQ,IAAI,aAAa,QAAQ,EACzC,IAAI,CAAC,SAAS;AAAA,QACb,IAAI,IAAI;AAAA,QACR,YAAY,IAAI;AAAA,QAChB,OAAO,IAAI;AAAA,QACX,OAAO,IAAI;AAAA,QACX,gBAAgB,IAAI,kBAAkB;AAAA,QACtC,UAAU,IAAI,YAAY;AAAA,MAC5B,EAAE;AAAA,IACN;AAAA,EACF;AACF;AAEO,MAAM,kBAA+C,CAAC,iBAAiB,sBAAsB;AAEpG,IAAO,wBAAQ;",
   "names": []
 }

package/dist/modules/messages/api/route.js

@@ -103,10 +103,10 @@ async function GET(req) {
     }
     if (input.hasAttachments !== void 0) {
       const existsFn = (eb) => eb.exists(
-        eb.selectFrom("attachments").select(sql`1`.as("one")).where("attachments.entity_id", "=", MESSAGE_ATTACHMENT_ENTITY_ID).whereRef("attachments.record_id", "=", "m.id")
+        eb.selectFrom("attachments").select(sql`1`.as("one")).where("attachments.entity_id", "=", MESSAGE_ATTACHMENT_ENTITY_ID).where(sql`attachments.record_id = m.id::text`)
       );
       const notExistsFn = (eb) => eb.not(eb.exists(
-        eb.selectFrom("attachments").select(sql`1`.as("one")).where("attachments.entity_id", "=", MESSAGE_ATTACHMENT_ENTITY_ID).whereRef("attachments.record_id", "=", "m.id")
+        eb.selectFrom("attachments").select(sql`1`.as("one")).where("attachments.entity_id", "=", MESSAGE_ATTACHMENT_ENTITY_ID).where(sql`attachments.record_id = m.id::text`)
       ));
       q = input.hasAttachments ? q.where(existsFn) : q.where(notExistsFn);
     }

package/dist/modules/messages/api/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/messages/api/route.ts"],
-  "sourcesContent": ["import { z } from 'zod'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { type Kysely, sql } from 'kysely'\nimport type { CommandBus } from '@open-mercato/shared/lib/commands/command-bus'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi/types'\nimport { findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { hashForLookup } from '@open-mercato/shared/lib/encryption/aes'\nimport { User } from '../../auth/data/entities'\nimport { Message, MessageObject } from '../data/entities'\nimport { composeMessageSchema, listMessagesSchema } from '../data/validators'\nimport { MESSAGE_ATTACHMENT_ENTITY_ID } from '../lib/constants'\nimport { getMessageType } from '../lib/message-types-registry'\nimport { validateMessageObjectsForType } from '../lib/object-validation'\nimport { attachOperationMetadataHeader } from '../lib/operationMetadata'\nimport { canUseMessageEmailFeature, resolveMessageContext } from '../lib/routeHelpers'\nimport { findMessageIdsBySearchTokens } from '../lib/searchLookup'\nimport { MessageCommandExecuteResult } from '../commands/shared'\nimport {\n  composeMessageSchema as composeSchema,\n  composeResponseSchema,\n  listMessagesSchema as listSchema,\n  messageListItemSchema,\n} from './openapi'\n\ntype MessageCommandExecuteResultWithThreadId = MessageCommandExecuteResult & {\n  threadId: string\n}\n\nconst NO_MATCH_ID = '00000000-0000-0000-0000-000000000000'\n\nfunction getDb(em: EntityManager): Kysely<any> {\n  return em.getKysely<any>()\n}\n\ntype MessageListScopeRow = {\n  id: string\n  sender_user_id: string\n  is_draft: boolean\n  recipient_status: string | null\n  read_at: string | null\n}\n\ntype AttachmentCountRow = {\n  record_id: string\n  count: string | number\n}\n\ntype RecipientCountRow = {\n  message_id: string\n  count: string | number\n}\n\nexport const metadata = {\n  GET: { requireAuth: true },\n  POST: { requireAuth: true, requireFeatures: ['messages.compose'] },\n}\n\nexport async function GET(req: Request) {\n  const { ctx, scope } = await resolveMessageContext(req)\n  const em = ctx.container.resolve('em') as EntityManager\n  const url = new URL(req.url)\n  const params = Object.fromEntries(url.searchParams)\n  const input = listMessagesSchema.parse(params)\n  const db = getDb(em) as any\n\n  const searchIds = input.search\n    ? await findMessageIdsBySearchTokens({\n        em,\n        query: input.search,\n        tenantId: scope.tenantId ?? null,\n        organizationId: scope.organizationId,\n      })\n    : undefined\n\n  const buildBaseQuery = () => {\n    let q: any = db\n      .selectFrom('messages as m')\n      .where('m.tenant_id', '=', scope.tenantId)\n      .where('m.deleted_at', 'is', null)\n\n    if (scope.organizationId) {\n      q = q.where('m.organization_id', '=', scope.organizationId)\n    } else {\n      q = q.where('m.organization_id', 'is', null)\n    }\n\n    const joinRecipient = () => {\n      q = q.leftJoin('message_recipients as r', (jb: any) => jb\n        .onRef('m.id', '=', 'r.message_id')\n        .on('r.recipient_user_id', '=', scope.userId))\n    }\n\n    switch (input.folder) {\n      case 'inbox':\n        joinRecipient()\n        q = q\n          .where('r.message_id', 'is not', null)\n          .where('r.deleted_at', 'is', null)\n          .where('r.archived_at', 'is', null)\n          .where('m.is_draft', '=', false)\n        break\n      case 'archived':\n        joinRecipient()\n        q = q\n          .where('r.message_id', 'is not', null)\n          .where('r.deleted_at', 'is', null)\n          .where('r.archived_at', 'is not', null)\n        break\n      case 'sent':\n        q = q\n          .where('m.sender_user_id', '=', scope.userId)\n          .where('m.is_draft', '=', false)\n        joinRecipient()\n        break\n      case 'drafts':\n        q = q\n          .where('m.sender_user_id', '=', scope.userId)\n          .where('m.is_draft', '=', true)\n        joinRecipient()\n        break\n      case 'all':\n        joinRecipient()\n        q = q.where((eb: any) => eb.or([\n          eb('m.sender_user_id', '=', scope.userId),\n          eb('r.message_id', 'is not', null),\n        ]))\n        break\n      default: {\n        const unsupportedFolder: never = input.folder\n        throw new Error(`Unsupported folder: ${String(unsupportedFolder)}`)\n      }\n    }\n\n    if (input.status) q = q.where('r.status', '=', input.status)\n    if (input.type) q = q.where('m.type', '=', input.type)\n    if (input.visibility) q = q.where('m.visibility', '=', input.visibility)\n    if (input.sourceEntityType) q = q.where('m.source_entity_type', '=', input.sourceEntityType)\n    if (input.sourceEntityId) q = q.where('m.source_entity_id', '=', input.sourceEntityId)\n    if (input.externalEmail) q = q.where('m.external_email_hash', '=', hashForLookup(input.externalEmail))\n    if (input.senderId) q = q.where('m.sender_user_id', '=', input.senderId)\n\n    if (input.search) {\n      if (!searchIds || searchIds.length === 0) {\n        q = q.where('m.id', '=', NO_MATCH_ID)\n      } else {\n        q = q.where('m.id', 'in', searchIds)\n      }\n    }\n\n    if (input.since) q = q.where('m.sent_at', '>', new Date(input.since))\n\n    if (input.hasObjects !== undefined) {\n      const existsFn = (eb: any) => eb.exists(\n        eb.selectFrom('message_objects')\n          .select(sql<number>`1`.as('one'))\n          .whereRef('message_objects.message_id', '=', 'm.id')\n      )\n      const notExistsFn = (eb: any) => eb.not(eb.exists(\n        eb.selectFrom('message_objects')\n          .select(sql<number>`1`.as('one'))\n          .whereRef('message_objects.message_id', '=', 'm.id')\n      ))\n      q = input.hasObjects ? q.where(existsFn) : q.where(notExistsFn)\n    }\n\n    if (input.hasAttachments !== undefined) {\n      const existsFn = (eb: any) => eb.exists(\n        eb.selectFrom('attachments')\n          .select(sql<number>`1`.as('one'))\n          .where('attachments.entity_id', '=', MESSAGE_ATTACHMENT_ENTITY_ID)\n          .whereRef('attachments.record_id', '=', 'm.id')\n      )\n      const notExistsFn = (eb: any) => eb.not(eb.exists(\n        eb.selectFrom('attachments')\n          .select(sql<number>`1`.as('one'))\n          .where('attachments.entity_id', '=', MESSAGE_ATTACHMENT_ENTITY_ID)\n          .whereRef('attachments.record_id', '=', 'm.id')\n      ))\n      q = input.hasAttachments ? q.where(existsFn) : q.where(notExistsFn)\n    }\n\n    if (input.hasActions !== undefined) {\n      q = input.hasActions\n        ? q.where('m.action_data', 'is not', null)\n        : q.where('m.action_data', 'is', null)\n    }\n\n    return q\n  }\n\n  const countResult = await buildBaseQuery()\n    .select(sql<number>`count(*)`.as('count'))\n    .executeTakeFirst() as { count: string | number } | undefined\n  const total = Number(countResult?.count ?? 0)\n\n  const offset = (input.page - 1) * input.pageSize\n  const scopeRows = await buildBaseQuery()\n    .select([\n      'm.id',\n      'm.sender_user_id',\n      'm.is_draft',\n      'r.status as recipient_status',\n      'r.read_at',\n    ])\n    .orderBy('m.sent_at', 'desc')\n    .offset(offset)\n    .limit(input.pageSize)\n    .execute()\n\n  const typedRows = scopeRows as MessageListScopeRow[]\n  const messageIds = typedRows.map((row) => row.id)\n\n  const messageEntities = messageIds.length > 0\n    ? await findWithDecryption(\n        em,\n        Message,\n        { id: { $in: messageIds } },\n        undefined,\n        { tenantId: scope.tenantId, organizationId: scope.organizationId }\n      )\n    : []\n\n  const messagesById = new Map<string, Message>()\n  for (const message of messageEntities) {\n    messagesById.set(message.id, message)\n  }\n\n  const objects = messageIds.length > 0\n    ? await em.find(MessageObject, { messageId: { $in: messageIds } })\n    : []\n\n  const objectsByMessage = objects.reduce((acc, obj) => {\n    if (!acc[obj.messageId]) acc[obj.messageId] = []\n    acc[obj.messageId].push(obj)\n    return acc\n  }, {} as Record<string, MessageObject[]>)\n\n  const attachmentCounts: AttachmentCountRow[] = messageIds.length > 0\n    ? await (getDb(em) as any)\n        .selectFrom('attachments')\n        .select(['record_id', sql<string>`count(*)`.as('count')])\n        .where('entity_id', '=', MESSAGE_ATTACHMENT_ENTITY_ID)\n        .where('record_id', 'in', messageIds)\n        .groupBy('record_id')\n        .execute()\n    : []\n\n  const attachmentCountByMessage = attachmentCounts.reduce((acc: Record<string, number>, row) => {\n    acc[row.record_id] = Number(row.count)\n    return acc\n  }, {})\n\n  const recipientCounts: RecipientCountRow[] = messageIds.length > 0\n    ? await (getDb(em) as any)\n        .selectFrom('message_recipients')\n        .select(['message_id', sql<string>`count(*)`.as('count')])\n        .where('message_id', 'in', messageIds)\n        .where('deleted_at', 'is', null)\n        .groupBy('message_id')\n        .execute()\n    : []\n\n  const recipientCountByMessage = recipientCounts.reduce((acc: Record<string, number>, row) => {\n    acc[row.message_id] = Number(row.count)\n    return acc\n  }, {})\n\n  const senderUserIds = Array.from(new Set(typedRows.map((row) => row.sender_user_id).filter(Boolean)))\n  const senderUsers = senderUserIds.length > 0\n    ? await findWithDecryption(\n        em,\n        User,\n        { id: { $in: senderUserIds } },\n        undefined,\n        { tenantId: scope.tenantId, organizationId: scope.organizationId }\n      )\n    : []\n\n  const senderMetaById = new Map<string, { name: string | null; email: string | null }>()\n  senderUsers.forEach((user) => {\n    const name = typeof user.name === 'string' && user.name.trim().length ? user.name.trim() : null\n    senderMetaById.set(user.id, { name, email: user.email ?? null })\n  })\n\n  return Response.json({\n    items: typedRows\n      .map((row) => {\n        const message = messagesById.get(row.id)\n        if (!message) return null\n        const body = typeof message.body === 'string' ? message.body : ''\n        const bodyPreview = body.substring(0, 150) + (body.length > 150 ? '...' : '')\n        const actionData = message.actionData ?? null\n        return {\n          ...(senderMetaById.get(row.sender_user_id)\n            ? {\n                senderName: senderMetaById.get(row.sender_user_id)?.name ?? null,\n                senderEmail: senderMetaById.get(row.sender_user_id)?.email ?? null,\n              }\n            : { senderName: null, senderEmail: null }),\n          id: message.id,\n          type: message.type,\n          visibility: message.visibility ?? null,\n          sourceEntityType: message.sourceEntityType ?? null,\n          sourceEntityId: message.sourceEntityId ?? null,\n          externalEmail: message.externalEmail ?? null,\n          externalName: message.externalName ?? null,\n          subject: message.subject,\n          bodyPreview,\n          senderUserId: message.senderUserId,\n          priority: message.priority,\n          status: row.recipient_status ?? (row.is_draft ? 'draft' : 'sent'),\n          hasObjects: (objectsByMessage[message.id] || []).length > 0,\n          objectCount: (objectsByMessage[message.id] || []).length,\n          hasAttachments: (attachmentCountByMessage[message.id] || 0) > 0,\n          attachmentCount: attachmentCountByMessage[message.id] || 0,\n          recipientCount: recipientCountByMessage[message.id] || 0,\n          hasActions:\n            Boolean(actionData?.actions?.length)\n            || Boolean(getMessageType(message.type)?.defaultActions?.length)\n            || (objectsByMessage[message.id] || []).some((item) => item.actionRequired && Boolean(item.actionType)),\n          actionTaken: message.actionTaken ?? null,\n          sentAt: message.sentAt ? message.sentAt.toISOString() : null,\n          readAt: row.read_at,\n          threadId: message.threadId ?? null,\n        }\n      })\n      .filter((item): item is NonNullable<typeof item> => item !== null),\n    page: input.page,\n    pageSize: input.pageSize,\n    total,\n    totalPages: Math.ceil(total / input.pageSize),\n  })\n}\n\nexport async function POST(req: Request) {\n  const { ctx, scope } = await resolveMessageContext(req)\n  const commandBus = ctx.container.resolve('commandBus') as CommandBus\n  const body = await req.json().catch(() => ({}))\n  const input = composeMessageSchema.parse(body)\n\n  const isPublicVisibility = input.visibility === 'public'\n  const sendViaEmail = isPublicVisibility ? true : input.sendViaEmail\n  if (sendViaEmail && !(await canUseMessageEmailFeature(ctx, scope))) {\n    return Response.json({ error: 'Missing feature: messages.email' }, { status: 403 })\n  }\n\n  if (input.objects?.length) {\n    const objectValidationError = validateMessageObjectsForType(input.type, input.objects)\n    if (objectValidationError) {\n      return Response.json({ error: objectValidationError }, { status: 400 })\n    }\n  }\n\n  const { result, logEntry } = await commandBus.execute('messages.messages.compose', {\n    input: {\n      ...input,\n      sendViaEmail,\n      tenantId: scope.tenantId,\n      organizationId: scope.organizationId,\n      userId: scope.userId,\n    },\n    ctx: {\n      container: ctx.container,\n      auth: ctx.auth ?? null,\n      organizationScope: null,\n      selectedOrganizationId: scope.organizationId,\n      organizationIds: scope.organizationId ? [scope.organizationId] : null,\n      request: req,\n    },\n  })\n  const { id: messageId, threadId: responseThreadId } = result as unknown as MessageCommandExecuteResultWithThreadId\n\n  const response = Response.json({ id: messageId, threadId: responseThreadId }, { status: 201 })\n  attachOperationMetadataHeader(response, logEntry, {\n    resourceKind: 'messages.message',\n    resourceId: messageId,\n  })\n  return response\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Messages',\n  methods: {\n    GET: {\n      summary: 'List messages',\n      query: listSchema,\n      responses: [\n        {\n          status: 200,\n          description: 'Message list',\n          schema: z.object({\n            items: z.array(messageListItemSchema),\n            page: z.number(),\n            pageSize: z.number(),\n            total: z.number(),\n            totalPages: z.number(),\n          }),\n        },\n      ],\n    },\n    POST: {\n      summary: 'Compose a message',\n      requestBody: {\n        schema: composeSchema,\n      },\n      responses: [\n        {\n          status: 201,\n          description: 'Message created',\n          schema: composeResponseSchema,\n        },\n      ],\n    },\n  },\n}\n"],
-  "mappings": "AAAA,SAAS,SAAS;AAElB,SAAsB,WAAW;AAGjC,SAAS,0BAA0B;AACnC,SAAS,qBAAqB;AAC9B,SAAS,YAAY;AACrB,SAAS,SAAS,qBAAqB;AACvC,SAAS,sBAAsB,0BAA0B;AACzD,SAAS,oCAAoC;AAC7C,SAAS,sBAAsB;AAC/B,SAAS,qCAAqC;AAC9C,SAAS,qCAAqC;AAC9C,SAAS,2BAA2B,6BAA6B;AACjE,SAAS,oCAAoC;AAE7C;AAAA,EACE,wBAAwB;AAAA,EACxB;AAAA,EACA,sBAAsB;AAAA,EACtB;AAAA,OACK;AAMP,MAAM,cAAc;AAEpB,SAAS,MAAM,IAAgC;AAC7C,SAAO,GAAG,UAAe;AAC3B;AAoBO,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,KAAK;AAAA,EACzB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,kBAAkB,EAAE;AACnE;AAEA,eAAsB,IAAI,KAAc;AACtC,QAAM,EAAE,KAAK,MAAM,IAAI,MAAM,sBAAsB,GAAG;AACtD,QAAM,KAAK,IAAI,UAAU,QAAQ,IAAI;AACrC,QAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAC3B,QAAM,SAAS,OAAO,YAAY,IAAI,YAAY;AAClD,QAAM,QAAQ,mBAAmB,MAAM,MAAM;AAC7C,QAAM,KAAK,MAAM,EAAE;AAEnB,QAAM,YAAY,MAAM,SACpB,MAAM,6BAA6B;AAAA,IACjC;AAAA,IACA,OAAO,MAAM;AAAA,IACb,UAAU,MAAM,YAAY;AAAA,IAC5B,gBAAgB,MAAM;AAAA,EACxB,CAAC,IACD;AAEJ,QAAM,iBAAiB,MAAM;AAC3B,QAAI,IAAS,GACV,WAAW,eAAe,EAC1B,MAAM,eAAe,KAAK,MAAM,QAAQ,EACxC,MAAM,gBAAgB,MAAM,IAAI;AAEnC,QAAI,MAAM,gBAAgB;AACxB,UAAI,EAAE,MAAM,qBAAqB,KAAK,MAAM,cAAc;AAAA,IAC5D,OAAO;AACL,UAAI,EAAE,MAAM,qBAAqB,MAAM,IAAI;AAAA,IAC7C;AAEA,UAAM,gBAAgB,MAAM;AAC1B,UAAI,EAAE,SAAS,2BAA2B,CAAC,OAAY,GACpD,MAAM,QAAQ,KAAK,cAAc,EACjC,GAAG,uBAAuB,KAAK,MAAM,MAAM,CAAC;AAAA,IACjD;AAEA,YAAQ,MAAM,QAAQ;AAAA,MACpB,KAAK;AACH,sBAAc;AACd,YAAI,EACD,MAAM,gBAAgB,UAAU,IAAI,EACpC,MAAM,gBAAgB,MAAM,IAAI,EAChC,MAAM,iBAAiB,MAAM,IAAI,EACjC,MAAM,cAAc,KAAK,KAAK;AACjC;AAAA,MACF,KAAK;AACH,sBAAc;AACd,YAAI,EACD,MAAM,gBAAgB,UAAU,IAAI,EACpC,MAAM,gBAAgB,MAAM,IAAI,EAChC,MAAM,iBAAiB,UAAU,IAAI;AACxC;AAAA,MACF,KAAK;AACH,YAAI,EACD,MAAM,oBAAoB,KAAK,MAAM,MAAM,EAC3C,MAAM,cAAc,KAAK,KAAK;AACjC,sBAAc;AACd;AAAA,MACF,KAAK;AACH,YAAI,EACD,MAAM,oBAAoB,KAAK,MAAM,MAAM,EAC3C,MAAM,cAAc,KAAK,IAAI;AAChC,sBAAc;AACd;AAAA,MACF,KAAK;AACH,sBAAc;AACd,YAAI,EAAE,MAAM,CAAC,OAAY,GAAG,GAAG;AAAA,UAC7B,GAAG,oBAAoB,KAAK,MAAM,MAAM;AAAA,UACxC,GAAG,gBAAgB,UAAU,IAAI;AAAA,QACnC,CAAC,CAAC;AACF;AAAA,MACF,SAAS;AACP,cAAM,oBAA2B,MAAM;AACvC,cAAM,IAAI,MAAM,uBAAuB,OAAO,iBAAiB,CAAC,EAAE;AAAA,MACpE;AAAA,IACF;AAEA,QAAI,MAAM,OAAQ,KAAI,EAAE,MAAM,YAAY,KAAK,MAAM,MAAM;AAC3D,QAAI,MAAM,KAAM,KAAI,EAAE,MAAM,UAAU,KAAK,MAAM,IAAI;AACrD,QAAI,MAAM,WAAY,KAAI,EAAE,MAAM,gBAAgB,KAAK,MAAM,UAAU;AACvE,QAAI,MAAM,iBAAkB,KAAI,EAAE,MAAM,wBAAwB,KAAK,MAAM,gBAAgB;AAC3F,QAAI,MAAM,eAAgB,KAAI,EAAE,MAAM,sBAAsB,KAAK,MAAM,cAAc;AACrF,QAAI,MAAM,cAAe,KAAI,EAAE,MAAM,yBAAyB,KAAK,cAAc,MAAM,aAAa,CAAC;AACrG,QAAI,MAAM,SAAU,KAAI,EAAE,MAAM,oBAAoB,KAAK,MAAM,QAAQ;AAEvE,QAAI,MAAM,QAAQ;AAChB,UAAI,CAAC,aAAa,UAAU,WAAW,GAAG;AACxC,YAAI,EAAE,MAAM,QAAQ,KAAK,WAAW;AAAA,MACtC,OAAO;AACL,YAAI,EAAE,MAAM,QAAQ,MAAM,SAAS;AAAA,MACrC;AAAA,IACF;AAEA,QAAI,MAAM,MAAO,KAAI,EAAE,MAAM,aAAa,KAAK,IAAI,KAAK,MAAM,KAAK,CAAC;AAEpE,QAAI,MAAM,eAAe,QAAW;AAClC,YAAM,WAAW,CAAC,OAAY,GAAG;AAAA,QAC/B,GAAG,WAAW,iBAAiB,EAC5B,OAAO,OAAe,GAAG,KAAK,CAAC,EAC/B,SAAS,8BAA8B,KAAK,MAAM;AAAA,MACvD;AACA,YAAM,cAAc,CAAC,OAAY,GAAG,IAAI,GAAG;AAAA,QACzC,GAAG,WAAW,iBAAiB,EAC5B,OAAO,OAAe,GAAG,KAAK,CAAC,EAC/B,SAAS,8BAA8B,KAAK,MAAM;AAAA,MACvD,CAAC;AACD,UAAI,MAAM,aAAa,EAAE,MAAM,QAAQ,IAAI,EAAE,MAAM,WAAW;AAAA,IAChE;AAEA,QAAI,MAAM,mBAAmB,QAAW;AACtC,YAAM,WAAW,CAAC,OAAY,GAAG;AAAA,QAC/B,GAAG,WAAW,aAAa,EACxB,OAAO,OAAe,GAAG,KAAK,CAAC,EAC/B,MAAM,yBAAyB,KAAK,4BAA4B,EAChE,SAAS,yBAAyB,KAAK,MAAM;AAAA,MAClD;AACA,YAAM,cAAc,CAAC,OAAY,GAAG,IAAI,GAAG;AAAA,QACzC,GAAG,WAAW,aAAa,EACxB,OAAO,OAAe,GAAG,KAAK,CAAC,EAC/B,MAAM,yBAAyB,KAAK,4BAA4B,EAChE,SAAS,yBAAyB,KAAK,MAAM;AAAA,MAClD,CAAC;AACD,UAAI,MAAM,iBAAiB,EAAE,MAAM,QAAQ,IAAI,EAAE,MAAM,WAAW;AAAA,IACpE;AAEA,QAAI,MAAM,eAAe,QAAW;AAClC,UAAI,MAAM,aACN,EAAE,MAAM,iBAAiB,UAAU,IAAI,IACvC,EAAE,MAAM,iBAAiB,MAAM,IAAI;AAAA,IACzC;AAEA,WAAO;AAAA,EACT;AAEA,QAAM,cAAc,MAAM,eAAe,EACtC,OAAO,cAAsB,GAAG,OAAO,CAAC,EACxC,iBAAiB;AACpB,QAAM,QAAQ,OAAO,aAAa,SAAS,CAAC;AAE5C,QAAM,UAAU,MAAM,OAAO,KAAK,MAAM;AACxC,QAAM,YAAY,MAAM,eAAe,EACpC,OAAO;AAAA,IACN;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,CAAC,EACA,QAAQ,aAAa,MAAM,EAC3B,OAAO,MAAM,EACb,MAAM,MAAM,QAAQ,EACpB,QAAQ;AAEX,QAAM,YAAY;AAClB,QAAM,aAAa,UAAU,IAAI,CAAC,QAAQ,IAAI,EAAE;AAEhD,QAAM,kBAAkB,WAAW,SAAS,IACxC,MAAM;AAAA,IACJ;AAAA,IACA;AAAA,IACA,EAAE,IAAI,EAAE,KAAK,WAAW,EAAE;AAAA,IAC1B;AAAA,IACA,EAAE,UAAU,MAAM,UAAU,gBAAgB,MAAM,eAAe;AAAA,EACnE,IACA,CAAC;AAEL,QAAM,eAAe,oBAAI,IAAqB;AAC9C,aAAW,WAAW,iBAAiB;AACrC,iBAAa,IAAI,QAAQ,IAAI,OAAO;AAAA,EACtC;AAEA,QAAM,UAAU,WAAW,SAAS,IAChC,MAAM,GAAG,KAAK,eAAe,EAAE,WAAW,EAAE,KAAK,WAAW,EAAE,CAAC,IAC/D,CAAC;AAEL,QAAM,mBAAmB,QAAQ,OAAO,CAAC,KAAK,QAAQ;AACpD,QAAI,CAAC,IAAI,IAAI,SAAS,EAAG,KAAI,IAAI,SAAS,IAAI,CAAC;AAC/C,QAAI,IAAI,SAAS,EAAE,KAAK,GAAG;AAC3B,WAAO;AAAA,EACT,GAAG,CAAC,CAAoC;AAExC,QAAM,mBAAyC,WAAW,SAAS,IAC/D,MAAO,MAAM,EAAE,EACZ,WAAW,aAAa,EACxB,OAAO,CAAC,aAAa,cAAsB,GAAG,OAAO,CAAC,CAAC,EACvD,MAAM,aAAa,KAAK,4BAA4B,EACpD,MAAM,aAAa,MAAM,UAAU,EACnC,QAAQ,WAAW,EACnB,QAAQ,IACX,CAAC;AAEL,QAAM,2BAA2B,iBAAiB,OAAO,CAAC,KAA6B,QAAQ;AAC7F,QAAI,IAAI,SAAS,IAAI,OAAO,IAAI,KAAK;AACrC,WAAO;AAAA,EACT,GAAG,CAAC,CAAC;AAEL,QAAM,kBAAuC,WAAW,SAAS,IAC7D,MAAO,MAAM,EAAE,EACZ,WAAW,oBAAoB,EAC/B,OAAO,CAAC,cAAc,cAAsB,GAAG,OAAO,CAAC,CAAC,EACxD,MAAM,cAAc,MAAM,UAAU,EACpC,MAAM,cAAc,MAAM,IAAI,EAC9B,QAAQ,YAAY,EACpB,QAAQ,IACX,CAAC;AAEL,QAAM,0BAA0B,gBAAgB,OAAO,CAAC,KAA6B,QAAQ;AAC3F,QAAI,IAAI,UAAU,IAAI,OAAO,IAAI,KAAK;AACtC,WAAO;AAAA,EACT,GAAG,CAAC,CAAC;AAEL,QAAM,gBAAgB,MAAM,KAAK,IAAI,IAAI,UAAU,IAAI,CAAC,QAAQ,IAAI,cAAc,EAAE,OAAO,OAAO,CAAC,CAAC;AACpG,QAAM,cAAc,cAAc,SAAS,IACvC,MAAM;AAAA,IACJ;AAAA,IACA;AAAA,IACA,EAAE,IAAI,EAAE,KAAK,cAAc,EAAE;AAAA,IAC7B;AAAA,IACA,EAAE,UAAU,MAAM,UAAU,gBAAgB,MAAM,eAAe;AAAA,EACnE,IACA,CAAC;AAEL,QAAM,iBAAiB,oBAAI,IAA2D;AACtF,cAAY,QAAQ,CAAC,SAAS;AAC5B,UAAM,OAAO,OAAO,KAAK,SAAS,YAAY,KAAK,KAAK,KAAK,EAAE,SAAS,KAAK,KAAK,KAAK,IAAI;AAC3F,mBAAe,IAAI,KAAK,IAAI,EAAE,MAAM,OAAO,KAAK,SAAS,KAAK,CAAC;AAAA,EACjE,CAAC;AAED,SAAO,SAAS,KAAK;AAAA,IACnB,OAAO,UACJ,IAAI,CAAC,QAAQ;AACZ,YAAM,UAAU,aAAa,IAAI,IAAI,EAAE;AACvC,UAAI,CAAC,QAAS,QAAO;AACrB,YAAM,OAAO,OAAO,QAAQ,SAAS,WAAW,QAAQ,OAAO;AAC/D,YAAM,cAAc,KAAK,UAAU,GAAG,GAAG,KAAK,KAAK,SAAS,MAAM,QAAQ;AAC1E,YAAM,aAAa,QAAQ,cAAc;AACzC,aAAO;AAAA,QACL,GAAI,eAAe,IAAI,IAAI,cAAc,IACrC;AAAA,UACE,YAAY,eAAe,IAAI,IAAI,cAAc,GAAG,QAAQ;AAAA,UAC5D,aAAa,eAAe,IAAI,IAAI,cAAc,GAAG,SAAS;AAAA,QAChE,IACA,EAAE,YAAY,MAAM,aAAa,KAAK;AAAA,QAC1C,IAAI,QAAQ;AAAA,QACZ,MAAM,QAAQ;AAAA,QACd,YAAY,QAAQ,cAAc;AAAA,QAClC,kBAAkB,QAAQ,oBAAoB;AAAA,QAC9C,gBAAgB,QAAQ,kBAAkB;AAAA,QAC1C,eAAe,QAAQ,iBAAiB;AAAA,QACxC,cAAc,QAAQ,gBAAgB;AAAA,QACtC,SAAS,QAAQ;AAAA,QACjB;AAAA,QACA,cAAc,QAAQ;AAAA,QACtB,UAAU,QAAQ;AAAA,QAClB,QAAQ,IAAI,qBAAqB,IAAI,WAAW,UAAU;AAAA,QAC1D,aAAa,iBAAiB,QAAQ,EAAE,KAAK,CAAC,GAAG,SAAS;AAAA,QAC1D,cAAc,iBAAiB,QAAQ,EAAE,KAAK,CAAC,GAAG;AAAA,QAClD,iBAAiB,yBAAyB,QAAQ,EAAE,KAAK,KAAK;AAAA,QAC9D,iBAAiB,yBAAyB,QAAQ,EAAE,KAAK;AAAA,QACzD,gBAAgB,wBAAwB,QAAQ,EAAE,KAAK;AAAA,QACvD,YACE,QAAQ,YAAY,SAAS,MAAM,KAChC,QAAQ,eAAe,QAAQ,IAAI,GAAG,gBAAgB,MAAM,MAC3D,iBAAiB,QAAQ,EAAE,KAAK,CAAC,GAAG,KAAK,CAAC,SAAS,KAAK,kBAAkB,QAAQ,KAAK,UAAU,CAAC;AAAA,QACxG,aAAa,QAAQ,eAAe;AAAA,QACpC,QAAQ,QAAQ,SAAS,QAAQ,OAAO,YAAY,IAAI;AAAA,QACxD,QAAQ,IAAI;AAAA,QACZ,UAAU,QAAQ,YAAY;AAAA,MAChC;AAAA,IACF,CAAC,EACA,OAAO,CAAC,SAA2C,SAAS,IAAI;AAAA,IACnE,MAAM,MAAM;AAAA,IACZ,UAAU,MAAM;AAAA,IAChB;AAAA,IACA,YAAY,KAAK,KAAK,QAAQ,MAAM,QAAQ;AAAA,EAC9C,CAAC;AACH;AAEA,eAAsB,KAAK,KAAc;AACvC,QAAM,EAAE,KAAK,MAAM,IAAI,MAAM,sBAAsB,GAAG;AACtD,QAAM,aAAa,IAAI,UAAU,QAAQ,YAAY;AACrD,QAAM,OAAO,MAAM,IAAI,KAAK,EAAE,MAAM,OAAO,CAAC,EAAE;AAC9C,QAAM,QAAQ,qBAAqB,MAAM,IAAI;AAE7C,QAAM,qBAAqB,MAAM,eAAe;AAChD,QAAM,eAAe,qBAAqB,OAAO,MAAM;AACvD,MAAI,gBAAgB,CAAE,MAAM,0BAA0B,KAAK,KAAK,GAAI;AAClE,WAAO,SAAS,KAAK,EAAE,OAAO,kCAAkC,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACpF;AAEA,MAAI,MAAM,SAAS,QAAQ;AACzB,UAAM,wBAAwB,8BAA8B,MAAM,MAAM,MAAM,OAAO;AACrF,QAAI,uBAAuB;AACzB,aAAO,SAAS,KAAK,EAAE,OAAO,sBAAsB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACxE;AAAA,EACF;AAEA,QAAM,EAAE,QAAQ,SAAS,IAAI,MAAM,WAAW,QAAQ,6BAA6B;AAAA,IACjF,OAAO;AAAA,MACL,GAAG;AAAA,MACH;AAAA,MACA,UAAU,MAAM;AAAA,MAChB,gBAAgB,MAAM;AAAA,MACtB,QAAQ,MAAM;AAAA,IAChB;AAAA,IACA,KAAK;AAAA,MACH,WAAW,IAAI;AAAA,MACf,MAAM,IAAI,QAAQ;AAAA,MAClB,mBAAmB;AAAA,MACnB,wBAAwB,MAAM;AAAA,MAC9B,iBAAiB,MAAM,iBAAiB,CAAC,MAAM,cAAc,IAAI;AAAA,MACjE,SAAS;AAAA,IACX;AAAA,EACF,CAAC;AACD,QAAM,EAAE,IAAI,WAAW,UAAU,iBAAiB,IAAI;AAEtD,QAAM,WAAW,SAAS,KAAK,EAAE,IAAI,WAAW,UAAU,iBAAiB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAC7F,gCAA8B,UAAU,UAAU;AAAA,IAChD,cAAc;AAAA,IACd,YAAY;AAAA,EACd,CAAC;AACD,SAAO;AACT;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,OAAO;AAAA,MACP,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO;AAAA,YACf,OAAO,EAAE,MAAM,qBAAqB;AAAA,YACpC,MAAM,EAAE,OAAO;AAAA,YACf,UAAU,EAAE,OAAO;AAAA,YACnB,OAAO,EAAE,OAAO;AAAA,YAChB,YAAY,EAAE,OAAO;AAAA,UACvB,CAAC;AAAA,QACH;AAAA,MACF;AAAA,IACF;AAAA,IACA,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aAAa;AAAA,QACX,QAAQ;AAAA,MACV;AAAA,MACA,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;",
+  "sourcesContent": ["import { z } from 'zod'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { type Kysely, sql } from 'kysely'\nimport type { CommandBus } from '@open-mercato/shared/lib/commands/command-bus'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi/types'\nimport { findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { hashForLookup } from '@open-mercato/shared/lib/encryption/aes'\nimport { User } from '../../auth/data/entities'\nimport { Message, MessageObject } from '../data/entities'\nimport { composeMessageSchema, listMessagesSchema } from '../data/validators'\nimport { MESSAGE_ATTACHMENT_ENTITY_ID } from '../lib/constants'\nimport { getMessageType } from '../lib/message-types-registry'\nimport { validateMessageObjectsForType } from '../lib/object-validation'\nimport { attachOperationMetadataHeader } from '../lib/operationMetadata'\nimport { canUseMessageEmailFeature, resolveMessageContext } from '../lib/routeHelpers'\nimport { findMessageIdsBySearchTokens } from '../lib/searchLookup'\nimport { MessageCommandExecuteResult } from '../commands/shared'\nimport {\n  composeMessageSchema as composeSchema,\n  composeResponseSchema,\n  listMessagesSchema as listSchema,\n  messageListItemSchema,\n} from './openapi'\n\ntype MessageCommandExecuteResultWithThreadId = MessageCommandExecuteResult & {\n  threadId: string\n}\n\nconst NO_MATCH_ID = '00000000-0000-0000-0000-000000000000'\n\nfunction getDb(em: EntityManager): Kysely<any> {\n  return em.getKysely<any>()\n}\n\ntype MessageListScopeRow = {\n  id: string\n  sender_user_id: string\n  is_draft: boolean\n  recipient_status: string | null\n  read_at: string | null\n}\n\ntype AttachmentCountRow = {\n  record_id: string\n  count: string | number\n}\n\ntype RecipientCountRow = {\n  message_id: string\n  count: string | number\n}\n\nexport const metadata = {\n  GET: { requireAuth: true },\n  POST: { requireAuth: true, requireFeatures: ['messages.compose'] },\n}\n\nexport async function GET(req: Request) {\n  const { ctx, scope } = await resolveMessageContext(req)\n  const em = ctx.container.resolve('em') as EntityManager\n  const url = new URL(req.url)\n  const params = Object.fromEntries(url.searchParams)\n  const input = listMessagesSchema.parse(params)\n  const db = getDb(em) as any\n\n  const searchIds = input.search\n    ? await findMessageIdsBySearchTokens({\n        em,\n        query: input.search,\n        tenantId: scope.tenantId ?? null,\n        organizationId: scope.organizationId,\n      })\n    : undefined\n\n  const buildBaseQuery = () => {\n    let q: any = db\n      .selectFrom('messages as m')\n      .where('m.tenant_id', '=', scope.tenantId)\n      .where('m.deleted_at', 'is', null)\n\n    if (scope.organizationId) {\n      q = q.where('m.organization_id', '=', scope.organizationId)\n    } else {\n      q = q.where('m.organization_id', 'is', null)\n    }\n\n    const joinRecipient = () => {\n      q = q.leftJoin('message_recipients as r', (jb: any) => jb\n        .onRef('m.id', '=', 'r.message_id')\n        .on('r.recipient_user_id', '=', scope.userId))\n    }\n\n    switch (input.folder) {\n      case 'inbox':\n        joinRecipient()\n        q = q\n          .where('r.message_id', 'is not', null)\n          .where('r.deleted_at', 'is', null)\n          .where('r.archived_at', 'is', null)\n          .where('m.is_draft', '=', false)\n        break\n      case 'archived':\n        joinRecipient()\n        q = q\n          .where('r.message_id', 'is not', null)\n          .where('r.deleted_at', 'is', null)\n          .where('r.archived_at', 'is not', null)\n        break\n      case 'sent':\n        q = q\n          .where('m.sender_user_id', '=', scope.userId)\n          .where('m.is_draft', '=', false)\n        joinRecipient()\n        break\n      case 'drafts':\n        q = q\n          .where('m.sender_user_id', '=', scope.userId)\n          .where('m.is_draft', '=', true)\n        joinRecipient()\n        break\n      case 'all':\n        joinRecipient()\n        q = q.where((eb: any) => eb.or([\n          eb('m.sender_user_id', '=', scope.userId),\n          eb('r.message_id', 'is not', null),\n        ]))\n        break\n      default: {\n        const unsupportedFolder: never = input.folder\n        throw new Error(`Unsupported folder: ${String(unsupportedFolder)}`)\n      }\n    }\n\n    if (input.status) q = q.where('r.status', '=', input.status)\n    if (input.type) q = q.where('m.type', '=', input.type)\n    if (input.visibility) q = q.where('m.visibility', '=', input.visibility)\n    if (input.sourceEntityType) q = q.where('m.source_entity_type', '=', input.sourceEntityType)\n    if (input.sourceEntityId) q = q.where('m.source_entity_id', '=', input.sourceEntityId)\n    if (input.externalEmail) q = q.where('m.external_email_hash', '=', hashForLookup(input.externalEmail))\n    if (input.senderId) q = q.where('m.sender_user_id', '=', input.senderId)\n\n    if (input.search) {\n      if (!searchIds || searchIds.length === 0) {\n        q = q.where('m.id', '=', NO_MATCH_ID)\n      } else {\n        q = q.where('m.id', 'in', searchIds)\n      }\n    }\n\n    if (input.since) q = q.where('m.sent_at', '>', new Date(input.since))\n\n    if (input.hasObjects !== undefined) {\n      const existsFn = (eb: any) => eb.exists(\n        eb.selectFrom('message_objects')\n          .select(sql<number>`1`.as('one'))\n          .whereRef('message_objects.message_id', '=', 'm.id')\n      )\n      const notExistsFn = (eb: any) => eb.not(eb.exists(\n        eb.selectFrom('message_objects')\n          .select(sql<number>`1`.as('one'))\n          .whereRef('message_objects.message_id', '=', 'm.id')\n      ))\n      q = input.hasObjects ? q.where(existsFn) : q.where(notExistsFn)\n    }\n\n    if (input.hasAttachments !== undefined) {\n      const existsFn = (eb: any) => eb.exists(\n        eb.selectFrom('attachments')\n          .select(sql<number>`1`.as('one'))\n          .where('attachments.entity_id', '=', MESSAGE_ATTACHMENT_ENTITY_ID)\n          .where(sql<boolean>`attachments.record_id = m.id::text`)\n      )\n      const notExistsFn = (eb: any) => eb.not(eb.exists(\n        eb.selectFrom('attachments')\n          .select(sql<number>`1`.as('one'))\n          .where('attachments.entity_id', '=', MESSAGE_ATTACHMENT_ENTITY_ID)\n          .where(sql<boolean>`attachments.record_id = m.id::text`)\n      ))\n      q = input.hasAttachments ? q.where(existsFn) : q.where(notExistsFn)\n    }\n\n    if (input.hasActions !== undefined) {\n      q = input.hasActions\n        ? q.where('m.action_data', 'is not', null)\n        : q.where('m.action_data', 'is', null)\n    }\n\n    return q\n  }\n\n  const countResult = await buildBaseQuery()\n    .select(sql<number>`count(*)`.as('count'))\n    .executeTakeFirst() as { count: string | number } | undefined\n  const total = Number(countResult?.count ?? 0)\n\n  const offset = (input.page - 1) * input.pageSize\n  const scopeRows = await buildBaseQuery()\n    .select([\n      'm.id',\n      'm.sender_user_id',\n      'm.is_draft',\n      'r.status as recipient_status',\n      'r.read_at',\n    ])\n    .orderBy('m.sent_at', 'desc')\n    .offset(offset)\n    .limit(input.pageSize)\n    .execute()\n\n  const typedRows = scopeRows as MessageListScopeRow[]\n  const messageIds = typedRows.map((row) => row.id)\n\n  const messageEntities = messageIds.length > 0\n    ? await findWithDecryption(\n        em,\n        Message,\n        { id: { $in: messageIds } },\n        undefined,\n        { tenantId: scope.tenantId, organizationId: scope.organizationId }\n      )\n    : []\n\n  const messagesById = new Map<string, Message>()\n  for (const message of messageEntities) {\n    messagesById.set(message.id, message)\n  }\n\n  const objects = messageIds.length > 0\n    ? await em.find(MessageObject, { messageId: { $in: messageIds } })\n    : []\n\n  const objectsByMessage = objects.reduce((acc, obj) => {\n    if (!acc[obj.messageId]) acc[obj.messageId] = []\n    acc[obj.messageId].push(obj)\n    return acc\n  }, {} as Record<string, MessageObject[]>)\n\n  const attachmentCounts: AttachmentCountRow[] = messageIds.length > 0\n    ? await (getDb(em) as any)\n        .selectFrom('attachments')\n        .select(['record_id', sql<string>`count(*)`.as('count')])\n        .where('entity_id', '=', MESSAGE_ATTACHMENT_ENTITY_ID)\n        .where('record_id', 'in', messageIds)\n        .groupBy('record_id')\n        .execute()\n    : []\n\n  const attachmentCountByMessage = attachmentCounts.reduce((acc: Record<string, number>, row) => {\n    acc[row.record_id] = Number(row.count)\n    return acc\n  }, {})\n\n  const recipientCounts: RecipientCountRow[] = messageIds.length > 0\n    ? await (getDb(em) as any)\n        .selectFrom('message_recipients')\n        .select(['message_id', sql<string>`count(*)`.as('count')])\n        .where('message_id', 'in', messageIds)\n        .where('deleted_at', 'is', null)\n        .groupBy('message_id')\n        .execute()\n    : []\n\n  const recipientCountByMessage = recipientCounts.reduce((acc: Record<string, number>, row) => {\n    acc[row.message_id] = Number(row.count)\n    return acc\n  }, {})\n\n  const senderUserIds = Array.from(new Set(typedRows.map((row) => row.sender_user_id).filter(Boolean)))\n  const senderUsers = senderUserIds.length > 0\n    ? await findWithDecryption(\n        em,\n        User,\n        { id: { $in: senderUserIds } },\n        undefined,\n        { tenantId: scope.tenantId, organizationId: scope.organizationId }\n      )\n    : []\n\n  const senderMetaById = new Map<string, { name: string | null; email: string | null }>()\n  senderUsers.forEach((user) => {\n    const name = typeof user.name === 'string' && user.name.trim().length ? user.name.trim() : null\n    senderMetaById.set(user.id, { name, email: user.email ?? null })\n  })\n\n  return Response.json({\n    items: typedRows\n      .map((row) => {\n        const message = messagesById.get(row.id)\n        if (!message) return null\n        const body = typeof message.body === 'string' ? message.body : ''\n        const bodyPreview = body.substring(0, 150) + (body.length > 150 ? '...' : '')\n        const actionData = message.actionData ?? null\n        return {\n          ...(senderMetaById.get(row.sender_user_id)\n            ? {\n                senderName: senderMetaById.get(row.sender_user_id)?.name ?? null,\n                senderEmail: senderMetaById.get(row.sender_user_id)?.email ?? null,\n              }\n            : { senderName: null, senderEmail: null }),\n          id: message.id,\n          type: message.type,\n          visibility: message.visibility ?? null,\n          sourceEntityType: message.sourceEntityType ?? null,\n          sourceEntityId: message.sourceEntityId ?? null,\n          externalEmail: message.externalEmail ?? null,\n          externalName: message.externalName ?? null,\n          subject: message.subject,\n          bodyPreview,\n          senderUserId: message.senderUserId,\n          priority: message.priority,\n          status: row.recipient_status ?? (row.is_draft ? 'draft' : 'sent'),\n          hasObjects: (objectsByMessage[message.id] || []).length > 0,\n          objectCount: (objectsByMessage[message.id] || []).length,\n          hasAttachments: (attachmentCountByMessage[message.id] || 0) > 0,\n          attachmentCount: attachmentCountByMessage[message.id] || 0,\n          recipientCount: recipientCountByMessage[message.id] || 0,\n          hasActions:\n            Boolean(actionData?.actions?.length)\n            || Boolean(getMessageType(message.type)?.defaultActions?.length)\n            || (objectsByMessage[message.id] || []).some((item) => item.actionRequired && Boolean(item.actionType)),\n          actionTaken: message.actionTaken ?? null,\n          sentAt: message.sentAt ? message.sentAt.toISOString() : null,\n          readAt: row.read_at,\n          threadId: message.threadId ?? null,\n        }\n      })\n      .filter((item): item is NonNullable<typeof item> => item !== null),\n    page: input.page,\n    pageSize: input.pageSize,\n    total,\n    totalPages: Math.ceil(total / input.pageSize),\n  })\n}\n\nexport async function POST(req: Request) {\n  const { ctx, scope } = await resolveMessageContext(req)\n  const commandBus = ctx.container.resolve('commandBus') as CommandBus\n  const body = await req.json().catch(() => ({}))\n  const input = composeMessageSchema.parse(body)\n\n  const isPublicVisibility = input.visibility === 'public'\n  const sendViaEmail = isPublicVisibility ? true : input.sendViaEmail\n  if (sendViaEmail && !(await canUseMessageEmailFeature(ctx, scope))) {\n    return Response.json({ error: 'Missing feature: messages.email' }, { status: 403 })\n  }\n\n  if (input.objects?.length) {\n    const objectValidationError = validateMessageObjectsForType(input.type, input.objects)\n    if (objectValidationError) {\n      return Response.json({ error: objectValidationError }, { status: 400 })\n    }\n  }\n\n  const { result, logEntry } = await commandBus.execute('messages.messages.compose', {\n    input: {\n      ...input,\n      sendViaEmail,\n      tenantId: scope.tenantId,\n      organizationId: scope.organizationId,\n      userId: scope.userId,\n    },\n    ctx: {\n      container: ctx.container,\n      auth: ctx.auth ?? null,\n      organizationScope: null,\n      selectedOrganizationId: scope.organizationId,\n      organizationIds: scope.organizationId ? [scope.organizationId] : null,\n      request: req,\n    },\n  })\n  const { id: messageId, threadId: responseThreadId } = result as unknown as MessageCommandExecuteResultWithThreadId\n\n  const response = Response.json({ id: messageId, threadId: responseThreadId }, { status: 201 })\n  attachOperationMetadataHeader(response, logEntry, {\n    resourceKind: 'messages.message',\n    resourceId: messageId,\n  })\n  return response\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Messages',\n  methods: {\n    GET: {\n      summary: 'List messages',\n      query: listSchema,\n      responses: [\n        {\n          status: 200,\n          description: 'Message list',\n          schema: z.object({\n            items: z.array(messageListItemSchema),\n            page: z.number(),\n            pageSize: z.number(),\n            total: z.number(),\n            totalPages: z.number(),\n          }),\n        },\n      ],\n    },\n    POST: {\n      summary: 'Compose a message',\n      requestBody: {\n        schema: composeSchema,\n      },\n      responses: [\n        {\n          status: 201,\n          description: 'Message created',\n          schema: composeResponseSchema,\n        },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,SAAS;AAElB,SAAsB,WAAW;AAGjC,SAAS,0BAA0B;AACnC,SAAS,qBAAqB;AAC9B,SAAS,YAAY;AACrB,SAAS,SAAS,qBAAqB;AACvC,SAAS,sBAAsB,0BAA0B;AACzD,SAAS,oCAAoC;AAC7C,SAAS,sBAAsB;AAC/B,SAAS,qCAAqC;AAC9C,SAAS,qCAAqC;AAC9C,SAAS,2BAA2B,6BAA6B;AACjE,SAAS,oCAAoC;AAE7C;AAAA,EACE,wBAAwB;AAAA,EACxB;AAAA,EACA,sBAAsB;AAAA,EACtB;AAAA,OACK;AAMP,MAAM,cAAc;AAEpB,SAAS,MAAM,IAAgC;AAC7C,SAAO,GAAG,UAAe;AAC3B;AAoBO,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,KAAK;AAAA,EACzB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,kBAAkB,EAAE;AACnE;AAEA,eAAsB,IAAI,KAAc;AACtC,QAAM,EAAE,KAAK,MAAM,IAAI,MAAM,sBAAsB,GAAG;AACtD,QAAM,KAAK,IAAI,UAAU,QAAQ,IAAI;AACrC,QAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAC3B,QAAM,SAAS,OAAO,YAAY,IAAI,YAAY;AAClD,QAAM,QAAQ,mBAAmB,MAAM,MAAM;AAC7C,QAAM,KAAK,MAAM,EAAE;AAEnB,QAAM,YAAY,MAAM,SACpB,MAAM,6BAA6B;AAAA,IACjC;AAAA,IACA,OAAO,MAAM;AAAA,IACb,UAAU,MAAM,YAAY;AAAA,IAC5B,gBAAgB,MAAM;AAAA,EACxB,CAAC,IACD;AAEJ,QAAM,iBAAiB,MAAM;AAC3B,QAAI,IAAS,GACV,WAAW,eAAe,EAC1B,MAAM,eAAe,KAAK,MAAM,QAAQ,EACxC,MAAM,gBAAgB,MAAM,IAAI;AAEnC,QAAI,MAAM,gBAAgB;AACxB,UAAI,EAAE,MAAM,qBAAqB,KAAK,MAAM,cAAc;AAAA,IAC5D,OAAO;AACL,UAAI,EAAE,MAAM,qBAAqB,MAAM,IAAI;AAAA,IAC7C;AAEA,UAAM,gBAAgB,MAAM;AAC1B,UAAI,EAAE,SAAS,2BAA2B,CAAC,OAAY,GACpD,MAAM,QAAQ,KAAK,cAAc,EACjC,GAAG,uBAAuB,KAAK,MAAM,MAAM,CAAC;AAAA,IACjD;AAEA,YAAQ,MAAM,QAAQ;AAAA,MACpB,KAAK;AACH,sBAAc;AACd,YAAI,EACD,MAAM,gBAAgB,UAAU,IAAI,EACpC,MAAM,gBAAgB,MAAM,IAAI,EAChC,MAAM,iBAAiB,MAAM,IAAI,EACjC,MAAM,cAAc,KAAK,KAAK;AACjC;AAAA,MACF,KAAK;AACH,sBAAc;AACd,YAAI,EACD,MAAM,gBAAgB,UAAU,IAAI,EACpC,MAAM,gBAAgB,MAAM,IAAI,EAChC,MAAM,iBAAiB,UAAU,IAAI;AACxC;AAAA,MACF,KAAK;AACH,YAAI,EACD,MAAM,oBAAoB,KAAK,MAAM,MAAM,EAC3C,MAAM,cAAc,KAAK,KAAK;AACjC,sBAAc;AACd;AAAA,MACF,KAAK;AACH,YAAI,EACD,MAAM,oBAAoB,KAAK,MAAM,MAAM,EAC3C,MAAM,cAAc,KAAK,IAAI;AAChC,sBAAc;AACd;AAAA,MACF,KAAK;AACH,sBAAc;AACd,YAAI,EAAE,MAAM,CAAC,OAAY,GAAG,GAAG;AAAA,UAC7B,GAAG,oBAAoB,KAAK,MAAM,MAAM;AAAA,UACxC,GAAG,gBAAgB,UAAU,IAAI;AAAA,QACnC,CAAC,CAAC;AACF;AAAA,MACF,SAAS;AACP,cAAM,oBAA2B,MAAM;AACvC,cAAM,IAAI,MAAM,uBAAuB,OAAO,iBAAiB,CAAC,EAAE;AAAA,MACpE;AAAA,IACF;AAEA,QAAI,MAAM,OAAQ,KAAI,EAAE,MAAM,YAAY,KAAK,MAAM,MAAM;AAC3D,QAAI,MAAM,KAAM,KAAI,EAAE,MAAM,UAAU,KAAK,MAAM,IAAI;AACrD,QAAI,MAAM,WAAY,KAAI,EAAE,MAAM,gBAAgB,KAAK,MAAM,UAAU;AACvE,QAAI,MAAM,iBAAkB,KAAI,EAAE,MAAM,wBAAwB,KAAK,MAAM,gBAAgB;AAC3F,QAAI,MAAM,eAAgB,KAAI,EAAE,MAAM,sBAAsB,KAAK,MAAM,cAAc;AACrF,QAAI,MAAM,cAAe,KAAI,EAAE,MAAM,yBAAyB,KAAK,cAAc,MAAM,aAAa,CAAC;AACrG,QAAI,MAAM,SAAU,KAAI,EAAE,MAAM,oBAAoB,KAAK,MAAM,QAAQ;AAEvE,QAAI,MAAM,QAAQ;AAChB,UAAI,CAAC,aAAa,UAAU,WAAW,GAAG;AACxC,YAAI,EAAE,MAAM,QAAQ,KAAK,WAAW;AAAA,MACtC,OAAO;AACL,YAAI,EAAE,MAAM,QAAQ,MAAM,SAAS;AAAA,MACrC;AAAA,IACF;AAEA,QAAI,MAAM,MAAO,KAAI,EAAE,MAAM,aAAa,KAAK,IAAI,KAAK,MAAM,KAAK,CAAC;AAEpE,QAAI,MAAM,eAAe,QAAW;AAClC,YAAM,WAAW,CAAC,OAAY,GAAG;AAAA,QAC/B,GAAG,WAAW,iBAAiB,EAC5B,OAAO,OAAe,GAAG,KAAK,CAAC,EAC/B,SAAS,8BAA8B,KAAK,MAAM;AAAA,MACvD;AACA,YAAM,cAAc,CAAC,OAAY,GAAG,IAAI,GAAG;AAAA,QACzC,GAAG,WAAW,iBAAiB,EAC5B,OAAO,OAAe,GAAG,KAAK,CAAC,EAC/B,SAAS,8BAA8B,KAAK,MAAM;AAAA,MACvD,CAAC;AACD,UAAI,MAAM,aAAa,EAAE,MAAM,QAAQ,IAAI,EAAE,MAAM,WAAW;AAAA,IAChE;AAEA,QAAI,MAAM,mBAAmB,QAAW;AACtC,YAAM,WAAW,CAAC,OAAY,GAAG;AAAA,QAC/B,GAAG,WAAW,aAAa,EACxB,OAAO,OAAe,GAAG,KAAK,CAAC,EAC/B,MAAM,yBAAyB,KAAK,4BAA4B,EAChE,MAAM,uCAAgD;AAAA,MAC3D;AACA,YAAM,cAAc,CAAC,OAAY,GAAG,IAAI,GAAG;AAAA,QACzC,GAAG,WAAW,aAAa,EACxB,OAAO,OAAe,GAAG,KAAK,CAAC,EAC/B,MAAM,yBAAyB,KAAK,4BAA4B,EAChE,MAAM,uCAAgD;AAAA,MAC3D,CAAC;AACD,UAAI,MAAM,iBAAiB,EAAE,MAAM,QAAQ,IAAI,EAAE,MAAM,WAAW;AAAA,IACpE;AAEA,QAAI,MAAM,eAAe,QAAW;AAClC,UAAI,MAAM,aACN,EAAE,MAAM,iBAAiB,UAAU,IAAI,IACvC,EAAE,MAAM,iBAAiB,MAAM,IAAI;AAAA,IACzC;AAEA,WAAO;AAAA,EACT;AAEA,QAAM,cAAc,MAAM,eAAe,EACtC,OAAO,cAAsB,GAAG,OAAO,CAAC,EACxC,iBAAiB;AACpB,QAAM,QAAQ,OAAO,aAAa,SAAS,CAAC;AAE5C,QAAM,UAAU,MAAM,OAAO,KAAK,MAAM;AACxC,QAAM,YAAY,MAAM,eAAe,EACpC,OAAO;AAAA,IACN;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,CAAC,EACA,QAAQ,aAAa,MAAM,EAC3B,OAAO,MAAM,EACb,MAAM,MAAM,QAAQ,EACpB,QAAQ;AAEX,QAAM,YAAY;AAClB,QAAM,aAAa,UAAU,IAAI,CAAC,QAAQ,IAAI,EAAE;AAEhD,QAAM,kBAAkB,WAAW,SAAS,IACxC,MAAM;AAAA,IACJ;AAAA,IACA;AAAA,IACA,EAAE,IAAI,EAAE,KAAK,WAAW,EAAE;AAAA,IAC1B;AAAA,IACA,EAAE,UAAU,MAAM,UAAU,gBAAgB,MAAM,eAAe;AAAA,EACnE,IACA,CAAC;AAEL,QAAM,eAAe,oBAAI,IAAqB;AAC9C,aAAW,WAAW,iBAAiB;AACrC,iBAAa,IAAI,QAAQ,IAAI,OAAO;AAAA,EACtC;AAEA,QAAM,UAAU,WAAW,SAAS,IAChC,MAAM,GAAG,KAAK,eAAe,EAAE,WAAW,EAAE,KAAK,WAAW,EAAE,CAAC,IAC/D,CAAC;AAEL,QAAM,mBAAmB,QAAQ,OAAO,CAAC,KAAK,QAAQ;AACpD,QAAI,CAAC,IAAI,IAAI,SAAS,EAAG,KAAI,IAAI,SAAS,IAAI,CAAC;AAC/C,QAAI,IAAI,SAAS,EAAE,KAAK,GAAG;AAC3B,WAAO;AAAA,EACT,GAAG,CAAC,CAAoC;AAExC,QAAM,mBAAyC,WAAW,SAAS,IAC/D,MAAO,MAAM,EAAE,EACZ,WAAW,aAAa,EACxB,OAAO,CAAC,aAAa,cAAsB,GAAG,OAAO,CAAC,CAAC,EACvD,MAAM,aAAa,KAAK,4BAA4B,EACpD,MAAM,aAAa,MAAM,UAAU,EACnC,QAAQ,WAAW,EACnB,QAAQ,IACX,CAAC;AAEL,QAAM,2BAA2B,iBAAiB,OAAO,CAAC,KAA6B,QAAQ;AAC7F,QAAI,IAAI,SAAS,IAAI,OAAO,IAAI,KAAK;AACrC,WAAO;AAAA,EACT,GAAG,CAAC,CAAC;AAEL,QAAM,kBAAuC,WAAW,SAAS,IAC7D,MAAO,MAAM,EAAE,EACZ,WAAW,oBAAoB,EAC/B,OAAO,CAAC,cAAc,cAAsB,GAAG,OAAO,CAAC,CAAC,EACxD,MAAM,cAAc,MAAM,UAAU,EACpC,MAAM,cAAc,MAAM,IAAI,EAC9B,QAAQ,YAAY,EACpB,QAAQ,IACX,CAAC;AAEL,QAAM,0BAA0B,gBAAgB,OAAO,CAAC,KAA6B,QAAQ;AAC3F,QAAI,IAAI,UAAU,IAAI,OAAO,IAAI,KAAK;AACtC,WAAO;AAAA,EACT,GAAG,CAAC,CAAC;AAEL,QAAM,gBAAgB,MAAM,KAAK,IAAI,IAAI,UAAU,IAAI,CAAC,QAAQ,IAAI,cAAc,EAAE,OAAO,OAAO,CAAC,CAAC;AACpG,QAAM,cAAc,cAAc,SAAS,IACvC,MAAM;AAAA,IACJ;AAAA,IACA;AAAA,IACA,EAAE,IAAI,EAAE,KAAK,cAAc,EAAE;AAAA,IAC7B;AAAA,IACA,EAAE,UAAU,MAAM,UAAU,gBAAgB,MAAM,eAAe;AAAA,EACnE,IACA,CAAC;AAEL,QAAM,iBAAiB,oBAAI,IAA2D;AACtF,cAAY,QAAQ,CAAC,SAAS;AAC5B,UAAM,OAAO,OAAO,KAAK,SAAS,YAAY,KAAK,KAAK,KAAK,EAAE,SAAS,KAAK,KAAK,KAAK,IAAI;AAC3F,mBAAe,IAAI,KAAK,IAAI,EAAE,MAAM,OAAO,KAAK,SAAS,KAAK,CAAC;AAAA,EACjE,CAAC;AAED,SAAO,SAAS,KAAK;AAAA,IACnB,OAAO,UACJ,IAAI,CAAC,QAAQ;AACZ,YAAM,UAAU,aAAa,IAAI,IAAI,EAAE;AACvC,UAAI,CAAC,QAAS,QAAO;AACrB,YAAM,OAAO,OAAO,QAAQ,SAAS,WAAW,QAAQ,OAAO;AAC/D,YAAM,cAAc,KAAK,UAAU,GAAG,GAAG,KAAK,KAAK,SAAS,MAAM,QAAQ;AAC1E,YAAM,aAAa,QAAQ,cAAc;AACzC,aAAO;AAAA,QACL,GAAI,eAAe,IAAI,IAAI,cAAc,IACrC;AAAA,UACE,YAAY,eAAe,IAAI,IAAI,cAAc,GAAG,QAAQ;AAAA,UAC5D,aAAa,eAAe,IAAI,IAAI,cAAc,GAAG,SAAS;AAAA,QAChE,IACA,EAAE,YAAY,MAAM,aAAa,KAAK;AAAA,QAC1C,IAAI,QAAQ;AAAA,QACZ,MAAM,QAAQ;AAAA,QACd,YAAY,QAAQ,cAAc;AAAA,QAClC,kBAAkB,QAAQ,oBAAoB;AAAA,QAC9C,gBAAgB,QAAQ,kBAAkB;AAAA,QAC1C,eAAe,QAAQ,iBAAiB;AAAA,QACxC,cAAc,QAAQ,gBAAgB;AAAA,QACtC,SAAS,QAAQ;AAAA,QACjB;AAAA,QACA,cAAc,QAAQ;AAAA,QACtB,UAAU,QAAQ;AAAA,QAClB,QAAQ,IAAI,qBAAqB,IAAI,WAAW,UAAU;AAAA,QAC1D,aAAa,iBAAiB,QAAQ,EAAE,KAAK,CAAC,GAAG,SAAS;AAAA,QAC1D,cAAc,iBAAiB,QAAQ,EAAE,KAAK,CAAC,GAAG;AAAA,QAClD,iBAAiB,yBAAyB,QAAQ,EAAE,KAAK,KAAK;AAAA,QAC9D,iBAAiB,yBAAyB,QAAQ,EAAE,KAAK;AAAA,QACzD,gBAAgB,wBAAwB,QAAQ,EAAE,KAAK;AAAA,QACvD,YACE,QAAQ,YAAY,SAAS,MAAM,KAChC,QAAQ,eAAe,QAAQ,IAAI,GAAG,gBAAgB,MAAM,MAC3D,iBAAiB,QAAQ,EAAE,KAAK,CAAC,GAAG,KAAK,CAAC,SAAS,KAAK,kBAAkB,QAAQ,KAAK,UAAU,CAAC;AAAA,QACxG,aAAa,QAAQ,eAAe;AAAA,QACpC,QAAQ,QAAQ,SAAS,QAAQ,OAAO,YAAY,IAAI;AAAA,QACxD,QAAQ,IAAI;AAAA,QACZ,UAAU,QAAQ,YAAY;AAAA,MAChC;AAAA,IACF,CAAC,EACA,OAAO,CAAC,SAA2C,SAAS,IAAI;AAAA,IACnE,MAAM,MAAM;AAAA,IACZ,UAAU,MAAM;AAAA,IAChB;AAAA,IACA,YAAY,KAAK,KAAK,QAAQ,MAAM,QAAQ;AAAA,EAC9C,CAAC;AACH;AAEA,eAAsB,KAAK,KAAc;AACvC,QAAM,EAAE,KAAK,MAAM,IAAI,MAAM,sBAAsB,GAAG;AACtD,QAAM,aAAa,IAAI,UAAU,QAAQ,YAAY;AACrD,QAAM,OAAO,MAAM,IAAI,KAAK,EAAE,MAAM,OAAO,CAAC,EAAE;AAC9C,QAAM,QAAQ,qBAAqB,MAAM,IAAI;AAE7C,QAAM,qBAAqB,MAAM,eAAe;AAChD,QAAM,eAAe,qBAAqB,OAAO,MAAM;AACvD,MAAI,gBAAgB,CAAE,MAAM,0BAA0B,KAAK,KAAK,GAAI;AAClE,WAAO,SAAS,KAAK,EAAE,OAAO,kCAAkC,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACpF;AAEA,MAAI,MAAM,SAAS,QAAQ;AACzB,UAAM,wBAAwB,8BAA8B,MAAM,MAAM,MAAM,OAAO;AACrF,QAAI,uBAAuB;AACzB,aAAO,SAAS,KAAK,EAAE,OAAO,sBAAsB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACxE;AAAA,EACF;AAEA,QAAM,EAAE,QAAQ,SAAS,IAAI,MAAM,WAAW,QAAQ,6BAA6B;AAAA,IACjF,OAAO;AAAA,MACL,GAAG;AAAA,MACH;AAAA,MACA,UAAU,MAAM;AAAA,MAChB,gBAAgB,MAAM;AAAA,MACtB,QAAQ,MAAM;AAAA,IAChB;AAAA,IACA,KAAK;AAAA,MACH,WAAW,IAAI;AAAA,MACf,MAAM,IAAI,QAAQ;AAAA,MAClB,mBAAmB;AAAA,MACnB,wBAAwB,MAAM;AAAA,MAC9B,iBAAiB,MAAM,iBAAiB,CAAC,MAAM,cAAc,IAAI;AAAA,MACjE,SAAS;AAAA,IACX;AAAA,EACF,CAAC;AACD,QAAM,EAAE,IAAI,WAAW,UAAU,iBAAiB,IAAI;AAEtD,QAAM,WAAW,SAAS,KAAK,EAAE,IAAI,WAAW,UAAU,iBAAiB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAC7F,gCAA8B,UAAU,UAAU;AAAA,IAChD,cAAc;AAAA,IACd,YAAY;AAAA,EACd,CAAC;AACD,SAAO;AACT;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,OAAO;AAAA,MACP,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO;AAAA,YACf,OAAO,EAAE,MAAM,qBAAqB;AAAA,YACpC,MAAM,EAAE,OAAO;AAAA,YACf,UAAU,EAAE,OAAO;AAAA,YACnB,OAAO,EAAE,OAAO;AAAA,YAChB,YAAY,EAAE,OAAO;AAAA,UACvB,CAAC;AAAA,QACH;AAAA,MACF;AAAA,IACF;AAAA,IACA,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aAAa;AAAA,QACX,QAAQ;AAAA,MACV;AAAA,MACA,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/modules/messages/data/validators.js

@@ -1,4 +1,5 @@
 import { z } from "zod";
+import { parseBooleanFlag } from "@open-mercato/shared/lib/boolean";
 function collectDuplicateRecipientIds(recipients) {
   const seen = /* @__PURE__ */ new Set();
   const duplicates = /* @__PURE__ */ new Set();
@@ -156,8 +157,8 @@ const updateDraftSchema = z.object({
   externalEmail: z.string().email().optional(),
   externalName: z.string().min(1).max(255).optional(),
   recipients: z.array(messageRecipientSchema).optional(),
-  subject: z.string().min(1).max(500).optional(),
-  body: z.string().min(1).max(5e4).optional(),
+  subject: z.string().max(500).optional(),
+  body: z.string().max(5e4).optional(),
   bodyFormat: z.enum(["text", "markdown"]).optional(),
   priority: z.enum(["low", "normal", "high", "urgent"]).optional(),
   objects: z.array(messageObjectSchema).optional(),
@@ -186,9 +187,9 @@ const listMessagesSchema = z.object({
   sourceEntityType: z.string().optional(),
   sourceEntityId: z.string().uuid().optional(),
   externalEmail: z.string().email().optional(),
-  hasObjects: z.coerce.boolean().optional(),
-  hasAttachments: z.coerce.boolean().optional(),
-  hasActions: z.coerce.boolean().optional(),
+  hasObjects: z.string().transform(parseBooleanFlag).optional(),
+  hasAttachments: z.string().transform(parseBooleanFlag).optional(),
+  hasActions: z.string().transform(parseBooleanFlag).optional(),
   senderId: z.string().uuid().optional(),
   search: z.string().max(200).optional(),
   since: z.string().datetime().optional(),

package/dist/modules/messages/data/validators.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/messages/data/validators.ts"],
-  "sourcesContent": ["import { z } from 'zod'\n\nfunction collectDuplicateRecipientIds(\n  recipients: Array<{ userId: string }>,\n): string[] {\n  const seen = new Set<string>()\n  const duplicates = new Set<string>()\n  for (const recipient of recipients) {\n    if (seen.has(recipient.userId)) {\n      duplicates.add(recipient.userId)\n      continue\n    }\n    seen.add(recipient.userId)\n  }\n  return Array.from(duplicates)\n}\n\nfunction validateDefaultWithObjectsPayload(\n  value: {\n    type?: string\n    objects?: Array<{ actionRequired?: boolean; actionType?: string; actionLabel?: string }>\n  },\n  ctx: z.RefinementCtx,\n): void {\n  if (value.type !== 'messages.defaultWithObjects') return\n\n  if (!Array.isArray(value.objects) || value.objects.length === 0) {\n    ctx.addIssue({\n      code: z.ZodIssueCode.custom,\n      path: ['objects'],\n      message: 'at least one object is required for messages.defaultWithObjects',\n    })\n    return\n  }\n\n  value.objects.forEach((object, index) => {\n    if (object.actionRequired === true) {\n      ctx.addIssue({\n        code: z.ZodIssueCode.custom,\n        path: ['objects', index, 'actionRequired'],\n        message: 'actionRequired must be false for messages.defaultWithObjects',\n      })\n    }\n    if (typeof object.actionType === 'string' && object.actionType.trim().length > 0) {\n      ctx.addIssue({\n        code: z.ZodIssueCode.custom,\n        path: ['objects', index, 'actionType'],\n        message: 'actionType is not allowed for messages.defaultWithObjects',\n      })\n    }\n    if (typeof object.actionLabel === 'string' && object.actionLabel.trim().length > 0) {\n      ctx.addIssue({\n        code: z.ZodIssueCode.custom,\n        path: ['objects', index, 'actionLabel'],\n        message: 'actionLabel is not allowed for messages.defaultWithObjects',\n      })\n    }\n  })\n}\n\nexport const messageRecipientSchema = z.object({\n  userId: z.string().uuid(),\n  type: z.enum(['to', 'cc', 'bcc']).optional().default('to'),\n})\n\nexport const messageObjectSchema = z.object({\n  entityModule: z.string().min(1),\n  entityType: z.string().min(1),\n  entityId: z.string().uuid(),\n  actionRequired: z.boolean().optional().default(false),\n  actionType: z.string().optional(),\n  actionLabel: z.string().optional(),\n})\n\nexport const messageActionSchema = z.object({\n  id: z.string().min(1),\n  label: z.string().min(1),\n  labelKey: z.string().optional(),\n  variant: z.enum(['default', 'secondary', 'destructive', 'outline', 'ghost']).optional(),\n  icon: z.string().optional(),\n  commandId: z.string().optional(),\n  href: z.string().optional(),\n  isTerminal: z.boolean().optional(),\n  confirmRequired: z.boolean().optional(),\n  confirmMessage: z.string().optional(),\n})\n\nexport const messageActionDataSchema = z.object({\n  actions: z.array(messageActionSchema),\n  primaryActionId: z.string().optional(),\n  expiresAt: z.string().datetime().optional(),\n})\n\nexport const composeMessageSchema = z.object({\n  type: z.string().optional().default('default'),\n  visibility: z.enum(['public', 'internal']).nullable().optional(),\n  sourceEntityType: z.string().min(1).optional(),\n  sourceEntityId: z.string().uuid().optional(),\n  externalEmail: z.string().email().optional(),\n  externalName: z.string().min(1).max(255).optional(),\n  recipients: z.array(messageRecipientSchema).max(100).optional().default([]),\n  subject: z.string().max(500).optional().default(''),\n  body: z.string().max(50000).optional().default(''),\n  bodyFormat: z.enum(['text', 'markdown']).optional().default('text'),\n  priority: z.enum(['low', 'normal', 'high', 'urgent']).optional().default('normal'),\n  objects: z.array(messageObjectSchema).optional(),\n  attachmentIds: z.array(z.string().uuid()).optional(),\n  attachmentRecordId: z.string().min(1).max(255).optional(),\n  actionData: messageActionDataSchema.optional(),\n  sendViaEmail: z.boolean().optional().default(false),\n  parentMessageId: z.string().uuid().optional(),\n  isDraft: z.boolean().optional().default(false),\n}).superRefine((value, ctx) => {\n  const isDraft = value.isDraft ?? false\n  const visibility = value.visibility ?? 'internal'\n  const recipientCount = value.recipients.length\n  const hasExternalEmail = Boolean(value.externalEmail?.trim())\n  const hasSubject = value.subject.trim().length > 0\n  const hasBody = value.body.trim().length > 0\n\n  if (!isDraft) {\n    if (visibility === 'public') {\n      if (!hasExternalEmail) {\n        ctx.addIssue({\n          code: z.ZodIssueCode.custom,\n          path: ['externalEmail'],\n          message: 'externalEmail is required when visibility is public',\n        })\n      }\n      if (recipientCount > 0) {\n        ctx.addIssue({\n          code: z.ZodIssueCode.custom,\n          path: ['recipients'],\n          message: 'recipients must be empty when visibility is public',\n        })\n      }\n    } else if (recipientCount === 0) {\n      ctx.addIssue({\n        code: z.ZodIssueCode.custom,\n        path: ['recipients'],\n        message: 'at least one recipient is required when visibility is internal',\n      })\n    }\n\n    if (!hasSubject) {\n      ctx.addIssue({\n        code: z.ZodIssueCode.custom,\n        path: ['subject'],\n        message: 'subject is required',\n      })\n    }\n    if (!hasBody) {\n      ctx.addIssue({\n        code: z.ZodIssueCode.custom,\n        path: ['body'],\n        message: 'body is required',\n      })\n    }\n  }\n\n  const duplicateRecipientIds = collectDuplicateRecipientIds(value.recipients)\n  if (duplicateRecipientIds.length > 0) {\n    ctx.addIssue({\n      code: z.ZodIssueCode.custom,\n      path: ['recipients'],\n      message: 'recipient user ids must be unique',\n    })\n  }\n\n  validateDefaultWithObjectsPayload(value, ctx)\n})\n\nexport const updateDraftSchema = z.object({\n  type: z.string().optional(),\n  visibility: z.enum(['public', 'internal']).nullable().optional(),\n  sourceEntityType: z.string().min(1).optional(),\n  sourceEntityId: z.string().uuid().optional(),\n  externalEmail: z.string().email().optional(),\n  externalName: z.string().min(1).max(255).optional(),\n  recipients: z.array(messageRecipientSchema).optional(),\n  subject: z.string().min(1).max(500).optional(),\n  body: z.string().min(1).max(50000).optional(),\n  bodyFormat: z.enum(['text', 'markdown']).optional(),\n  priority: z.enum(['low', 'normal', 'high', 'urgent']).optional(),\n  objects: z.array(messageObjectSchema).optional(),\n  attachmentIds: z.array(z.string().uuid()).optional(),\n  actionData: messageActionDataSchema.optional(),\n  sendViaEmail: z.boolean().optional(),\n  isDraft: z.literal(false).optional(),\n}).superRefine((value, ctx) => {\n  if (value.recipients) {\n    const duplicateRecipientIds = collectDuplicateRecipientIds(value.recipients)\n    if (duplicateRecipientIds.length > 0) {\n      ctx.addIssue({\n        code: z.ZodIssueCode.custom,\n        path: ['recipients'],\n        message: 'recipient user ids must be unique',\n      })\n    }\n  }\n\n  validateDefaultWithObjectsPayload(value, ctx)\n})\n\nexport const listMessagesSchema = z.object({\n  folder: z.enum(['inbox', 'sent', 'drafts', 'archived', 'all']).optional().default('inbox'),\n  status: z.enum(['unread', 'read', 'archived']).optional(),\n  type: z.string().optional(),\n  visibility: z.enum(['public', 'internal']).optional(),\n  sourceEntityType: z.string().optional(),\n  sourceEntityId: z.string().uuid().optional(),\n  externalEmail: z.string().email().optional(),\n  hasObjects: z.coerce.boolean().optional(),\n  hasAttachments: z.coerce.boolean().optional(),\n  hasActions: z.coerce.boolean().optional(),\n  senderId: z.string().uuid().optional(),\n  search: z.string().max(200).optional(),\n  since: z.string().datetime().optional(),\n  page: z.coerce.number().int().min(1).optional().default(1),\n  pageSize: z.coerce.number().int().min(1).max(100).optional().default(20),\n})\n\nexport const forwardMessageSchema = z.object({\n  recipients: z.array(messageRecipientSchema).min(1).max(100),\n  body: z.string().max(50000).optional(),\n  additionalBody: z.string().max(10000).optional(),\n  includeAttachments: z.boolean().optional().default(true),\n  sendViaEmail: z.boolean().optional().default(false),\n}).superRefine((value, ctx) => {\n  const duplicateRecipientIds = collectDuplicateRecipientIds(value.recipients)\n  if (duplicateRecipientIds.length > 0) {\n    ctx.addIssue({\n      code: z.ZodIssueCode.custom,\n      path: ['recipients'],\n      message: 'recipient user ids must be unique',\n    })\n  }\n})\n\nexport const replyMessageSchema = z.object({\n  body: z.string().min(1).max(50000),\n  bodyFormat: z.enum(['text', 'markdown']).optional().default('text'),\n  recipients: z.array(messageRecipientSchema).max(100).optional(),\n  attachmentIds: z.array(z.string().uuid()).optional(),\n  attachmentRecordId: z.string().min(1).max(255).optional(),\n  replyAll: z.boolean().optional().default(false),\n  sendViaEmail: z.boolean().optional().default(false),\n}).superRefine((value, ctx) => {\n  if (!value.recipients) return\n  const duplicateRecipientIds = collectDuplicateRecipientIds(value.recipients)\n  if (duplicateRecipientIds.length > 0) {\n    ctx.addIssue({\n      code: z.ZodIssueCode.custom,\n      path: ['recipients'],\n      message: 'recipient user ids must be unique',\n    })\n  }\n})\n\nexport const executeActionSchema = z.object({\n  messageId: z.string().uuid(),\n  actionId: z.string().min(1),\n  payload: z.record(z.string(), z.unknown()).optional(),\n})\n\nexport const confirmMessageSchema = z.object({\n  messageId: z.string().uuid(),\n  tenantId: z.string().uuid().optional(),\n  organizationId: z.string().uuid().nullable().optional(),\n  confirmed: z.boolean().optional().default(true),\n})\n\nexport const messageObjectTypesQuerySchema = z.object({\n  messageType: z.string().min(1),\n})\n\nexport const attachmentIdsPayloadSchema = z.object({\n  attachmentIds: z.array(z.string().uuid()).min(1).max(100),\n})\n\nexport const unlinkAttachmentPayloadSchema = z.object({\n  attachmentId: z.string().uuid().optional(),\n  attachmentIds: z.array(z.string().uuid()).min(1).max(100).optional(),\n}).refine(\n  (value) => Boolean(value.attachmentId || value.attachmentIds?.length),\n  { message: 'attachmentId or attachmentIds is required' }\n)\n\nexport type ComposeMessageInput = z.infer<typeof composeMessageSchema>\nexport type UpdateDraftInput = z.infer<typeof updateDraftSchema>\nexport type ListMessagesInput = z.infer<typeof listMessagesSchema>\nexport type ForwardMessageInput = z.infer<typeof forwardMessageSchema>\nexport type ReplyMessageInput = z.infer<typeof replyMessageSchema>\nexport type ExecuteActionInput = z.infer<typeof executeActionSchema>\nexport type ConfirmMessageInput = z.infer<typeof confirmMessageSchema>\nexport type MessageObjectTypesQueryInput = z.infer<typeof messageObjectTypesQuerySchema>\nexport type AttachmentIdsPayload = z.infer<typeof attachmentIdsPayloadSchema>\nexport type UnlinkAttachmentPayload = z.infer<typeof unlinkAttachmentPayloadSchema>\n"],
-  "mappings": "AAAA,SAAS,SAAS;AAElB,SAAS,6BACP,YACU;AACV,QAAM,OAAO,oBAAI,IAAY;AAC7B,QAAM,aAAa,oBAAI,IAAY;AACnC,aAAW,aAAa,YAAY;AAClC,QAAI,KAAK,IAAI,UAAU,MAAM,GAAG;AAC9B,iBAAW,IAAI,UAAU,MAAM;AAC/B;AAAA,IACF;AACA,SAAK,IAAI,UAAU,MAAM;AAAA,EAC3B;AACA,SAAO,MAAM,KAAK,UAAU;AAC9B;AAEA,SAAS,kCACP,OAIA,KACM;AACN,MAAI,MAAM,SAAS,8BAA+B;AAElD,MAAI,CAAC,MAAM,QAAQ,MAAM,OAAO,KAAK,MAAM,QAAQ,WAAW,GAAG;AAC/D,QAAI,SAAS;AAAA,MACX,MAAM,EAAE,aAAa;AAAA,MACrB,MAAM,CAAC,SAAS;AAAA,MAChB,SAAS;AAAA,IACX,CAAC;AACD;AAAA,EACF;AAEA,QAAM,QAAQ,QAAQ,CAAC,QAAQ,UAAU;AACvC,QAAI,OAAO,mBAAmB,MAAM;AAClC,UAAI,SAAS;AAAA,QACX,MAAM,EAAE,aAAa;AAAA,QACrB,MAAM,CAAC,WAAW,OAAO,gBAAgB;AAAA,QACzC,SAAS;AAAA,MACX,CAAC;AAAA,IACH;AACA,QAAI,OAAO,OAAO,eAAe,YAAY,OAAO,WAAW,KAAK,EAAE,SAAS,GAAG;AAChF,UAAI,SAAS;AAAA,QACX,MAAM,EAAE,aAAa;AAAA,QACrB,MAAM,CAAC,WAAW,OAAO,YAAY;AAAA,QACrC,SAAS;AAAA,MACX,CAAC;AAAA,IACH;AACA,QAAI,OAAO,OAAO,gBAAgB,YAAY,OAAO,YAAY,KAAK,EAAE,SAAS,GAAG;AAClF,UAAI,SAAS;AAAA,QACX,MAAM,EAAE,aAAa;AAAA,QACrB,MAAM,CAAC,WAAW,OAAO,aAAa;AAAA,QACtC,SAAS;AAAA,MACX,CAAC;AAAA,IACH;AAAA,EACF,CAAC;AACH;AAEO,MAAM,yBAAyB,EAAE,OAAO;AAAA,EAC7C,QAAQ,EAAE,OAAO,EAAE,KAAK;AAAA,EACxB,MAAM,EAAE,KAAK,CAAC,MAAM,MAAM,KAAK,CAAC,EAAE,SAAS,EAAE,QAAQ,IAAI;AAC3D,CAAC;AAEM,MAAM,sBAAsB,EAAE,OAAO;AAAA,EAC1C,cAAc,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EAC9B,YAAY,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EAC5B,UAAU,EAAE,OAAO,EAAE,KAAK;AAAA,EAC1B,gBAAgB,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,KAAK;AAAA,EACpD,YAAY,EAAE,OAAO,EAAE,SAAS;AAAA,EAChC,aAAa,EAAE,OAAO,EAAE,SAAS;AACnC,CAAC;AAEM,MAAM,sBAAsB,EAAE,OAAO;AAAA,EAC1C,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EACpB,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EACvB,UAAU,EAAE,OAAO,EAAE,SAAS;AAAA,EAC9B,SAAS,EAAE,KAAK,CAAC,WAAW,aAAa,eAAe,WAAW,OAAO,CAAC,EAAE,SAAS;AAAA,EACtF,MAAM,EAAE,OAAO,EAAE,SAAS;AAAA,EAC1B,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,EAC/B,MAAM,EAAE,OAAO,EAAE,SAAS;AAAA,EAC1B,YAAY,EAAE,QAAQ,EAAE,SAAS;AAAA,EACjC,iBAAiB,EAAE,QAAQ,EAAE,SAAS;AAAA,EACtC,gBAAgB,EAAE,OAAO,EAAE,SAAS;AACtC,CAAC;AAEM,MAAM,0BAA0B,EAAE,OAAO;AAAA,EAC9C,SAAS,EAAE,MAAM,mBAAmB;AAAA,EACpC,iBAAiB,EAAE,OAAO,EAAE,SAAS;AAAA,EACrC,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAC5C,CAAC;AAEM,MAAM,uBAAuB,EAAE,OAAO;AAAA,EAC3C,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,SAAS;AAAA,EAC7C,YAAY,EAAE,KAAK,CAAC,UAAU,UAAU,CAAC,EAAE,SAAS,EAAE,SAAS;AAAA,EAC/D,kBAAkB,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA,EAC7C,gBAAgB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EAC3C,eAAe,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS;AAAA,EAC3C,cAAc,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EAClD,YAAY,EAAE,MAAM,sBAAsB,EAAE,IAAI,GAAG,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;AAAA,EAC1E,SAAS,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,SAAS,EAAE,QAAQ,EAAE;AAAA,EAClD,MAAM,EAAE,OAAO,EAAE,IAAI,GAAK,EAAE,SAAS,EAAE,QAAQ,EAAE;AAAA,EACjD,YAAY,EAAE,KAAK,CAAC,QAAQ,UAAU,CAAC,EAAE,SAAS,EAAE,QAAQ,MAAM;AAAA,EAClE,UAAU,EAAE,KAAK,CAAC,OAAO,UAAU,QAAQ,QAAQ,CAAC,EAAE,SAAS,EAAE,QAAQ,QAAQ;AAAA,EACjF,SAAS,EAAE,MAAM,mBAAmB,EAAE,SAAS;AAAA,EAC/C,eAAe,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,SAAS;AAAA,EACnD,oBAAoB,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EACxD,YAAY,wBAAwB,SAAS;AAAA,EAC7C,cAAc,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,KAAK;AAAA,EAClD,iBAAiB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EAC5C,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,KAAK;AAC/C,CAAC,EAAE,YAAY,CAAC,OAAO,QAAQ;AAC7B,QAAM,UAAU,MAAM,WAAW;AACjC,QAAM,aAAa,MAAM,cAAc;AACvC,QAAM,iBAAiB,MAAM,WAAW;AACxC,QAAM,mBAAmB,QAAQ,MAAM,eAAe,KAAK,CAAC;AAC5D,QAAM,aAAa,MAAM,QAAQ,KAAK,EAAE,SAAS;AACjD,QAAM,UAAU,MAAM,KAAK,KAAK,EAAE,SAAS;AAE3C,MAAI,CAAC,SAAS;AACZ,QAAI,eAAe,UAAU;AAC3B,UAAI,CAAC,kBAAkB;AACrB,YAAI,SAAS;AAAA,UACX,MAAM,EAAE,aAAa;AAAA,UACrB,MAAM,CAAC,eAAe;AAAA,UACtB,SAAS;AAAA,QACX,CAAC;AAAA,MACH;AACA,UAAI,iBAAiB,GAAG;AACtB,YAAI,SAAS;AAAA,UACX,MAAM,EAAE,aAAa;AAAA,UACrB,MAAM,CAAC,YAAY;AAAA,UACnB,SAAS;AAAA,QACX,CAAC;AAAA,MACH;AAAA,IACF,WAAW,mBAAmB,GAAG;AAC/B,UAAI,SAAS;AAAA,QACX,MAAM,EAAE,aAAa;AAAA,QACrB,MAAM,CAAC,YAAY;AAAA,QACnB,SAAS;AAAA,MACX,CAAC;AAAA,IACH;AAEA,QAAI,CAAC,YAAY;AACf,UAAI,SAAS;AAAA,QACX,MAAM,EAAE,aAAa;AAAA,QACrB,MAAM,CAAC,SAAS;AAAA,QAChB,SAAS;AAAA,MACX,CAAC;AAAA,IACH;AACA,QAAI,CAAC,SAAS;AACZ,UAAI,SAAS;AAAA,QACX,MAAM,EAAE,aAAa;AAAA,QACrB,MAAM,CAAC,MAAM;AAAA,QACb,SAAS;AAAA,MACX,CAAC;AAAA,IACH;AAAA,EACF;AAEA,QAAM,wBAAwB,6BAA6B,MAAM,UAAU;AAC3E,MAAI,sBAAsB,SAAS,GAAG;AACpC,QAAI,SAAS;AAAA,MACX,MAAM,EAAE,aAAa;AAAA,MACrB,MAAM,CAAC,YAAY;AAAA,MACnB,SAAS;AAAA,IACX,CAAC;AAAA,EACH;AAEA,oCAAkC,OAAO,GAAG;AAC9C,CAAC;AAEM,MAAM,oBAAoB,EAAE,OAAO;AAAA,EACxC,MAAM,EAAE,OAAO,EAAE,SAAS;AAAA,EAC1B,YAAY,EAAE,KAAK,CAAC,UAAU,UAAU,CAAC,EAAE,SAAS,EAAE,SAAS;AAAA,EAC/D,kBAAkB,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA,EAC7C,gBAAgB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EAC3C,eAAe,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS;AAAA,EAC3C,cAAc,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EAClD,YAAY,EAAE,MAAM,sBAAsB,EAAE,SAAS;AAAA,EACrD,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EAC7C,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAK,EAAE,SAAS;AAAA,EAC5C,YAAY,EAAE,KAAK,CAAC,QAAQ,UAAU,CAAC,EAAE,SAAS;AAAA,EAClD,UAAU,EAAE,KAAK,CAAC,OAAO,UAAU,QAAQ,QAAQ,CAAC,EAAE,SAAS;AAAA,EAC/D,SAAS,EAAE,MAAM,mBAAmB,EAAE,SAAS;AAAA,EAC/C,eAAe,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,SAAS;AAAA,EACnD,YAAY,wBAAwB,SAAS;AAAA,EAC7C,cAAc,EAAE,QAAQ,EAAE,SAAS;AAAA,EACnC,SAAS,EAAE,QAAQ,KAAK,EAAE,SAAS;AACrC,CAAC,EAAE,YAAY,CAAC,OAAO,QAAQ;AAC7B,MAAI,MAAM,YAAY;AACpB,UAAM,wBAAwB,6BAA6B,MAAM,UAAU;AAC3E,QAAI,sBAAsB,SAAS,GAAG;AACpC,UAAI,SAAS;AAAA,QACX,MAAM,EAAE,aAAa;AAAA,QACrB,MAAM,CAAC,YAAY;AAAA,QACnB,SAAS;AAAA,MACX,CAAC;AAAA,IACH;AAAA,EACF;AAEA,oCAAkC,OAAO,GAAG;AAC9C,CAAC;AAEM,MAAM,qBAAqB,EAAE,OAAO;AAAA,EACzC,QAAQ,EAAE,KAAK,CAAC,SAAS,QAAQ,UAAU,YAAY,KAAK,CAAC,EAAE,SAAS,EAAE,QAAQ,OAAO;AAAA,EACzF,QAAQ,EAAE,KAAK,CAAC,UAAU,QAAQ,UAAU,CAAC,EAAE,SAAS;AAAA,EACxD,MAAM,EAAE,OAAO,EAAE,SAAS;AAAA,EAC1B,YAAY,EAAE,KAAK,CAAC,UAAU,UAAU,CAAC,EAAE,SAAS;AAAA,EACpD,kBAAkB,EAAE,OAAO,EAAE,SAAS;AAAA,EACtC,gBAAgB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EAC3C,eAAe,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS;AAAA,EAC3C,YAAY,EAAE,OAAO,QAAQ,EAAE,SAAS;AAAA,EACxC,gBAAgB,EAAE,OAAO,QAAQ,EAAE,SAAS;AAAA,EAC5C,YAAY,EAAE,OAAO,QAAQ,EAAE,SAAS;AAAA,EACxC,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EACrC,QAAQ,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EACrC,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EACtC,MAAM,EAAE,OAAO,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,SAAS,EAAE,QAAQ,CAAC;AAAA,EACzD,UAAU,EAAE,OAAO,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,SAAS,EAAE,QAAQ,EAAE;AACzE,CAAC;AAEM,MAAM,uBAAuB,EAAE,OAAO;AAAA,EAC3C,YAAY,EAAE,MAAM,sBAAsB,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EAC1D,MAAM,EAAE,OAAO,EAAE,IAAI,GAAK,EAAE,SAAS;AAAA,EACrC,gBAAgB,EAAE,OAAO,EAAE,IAAI,GAAK,EAAE,SAAS;AAAA,EAC/C,oBAAoB,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,IAAI;AAAA,EACvD,cAAc,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,KAAK;AACpD,CAAC,EAAE,YAAY,CAAC,OAAO,QAAQ;AAC7B,QAAM,wBAAwB,6BAA6B,MAAM,UAAU;AAC3E,MAAI,sBAAsB,SAAS,GAAG;AACpC,QAAI,SAAS;AAAA,MACX,MAAM,EAAE,aAAa;AAAA,MACrB,MAAM,CAAC,YAAY;AAAA,MACnB,SAAS;AAAA,IACX,CAAC;AAAA,EACH;AACF,CAAC;AAEM,MAAM,qBAAqB,EAAE,OAAO;AAAA,EACzC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAK;AAAA,EACjC,YAAY,EAAE,KAAK,CAAC,QAAQ,UAAU,CAAC,EAAE,SAAS,EAAE,QAAQ,MAAM;AAAA,EAClE,YAAY,EAAE,MAAM,sBAAsB,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EAC9D,eAAe,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,SAAS;AAAA,EACnD,oBAAoB,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EACxD,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,KAAK;AAAA,EAC9C,cAAc,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,KAAK;AACpD,CAAC,EAAE,YAAY,CAAC,OAAO,QAAQ;AAC7B,MAAI,CAAC,MAAM,WAAY;AACvB,QAAM,wBAAwB,6BAA6B,MAAM,UAAU;AAC3E,MAAI,sBAAsB,SAAS,GAAG;AACpC,QAAI,SAAS;AAAA,MACX,MAAM,EAAE,aAAa;AAAA,MACrB,MAAM,CAAC,YAAY;AAAA,MACnB,SAAS;AAAA,IACX,CAAC;AAAA,EACH;AACF,CAAC;AAEM,MAAM,sBAAsB,EAAE,OAAO;AAAA,EAC1C,WAAW,EAAE,OAAO,EAAE,KAAK;AAAA,EAC3B,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EAC1B,SAAS,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,EAAE,SAAS;AACtD,CAAC;AAEM,MAAM,uBAAuB,EAAE,OAAO;AAAA,EAC3C,WAAW,EAAE,OAAO,EAAE,KAAK;AAAA,EAC3B,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EACrC,gBAAgB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS;AAAA,EACtD,WAAW,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,IAAI;AAChD,CAAC;AAEM,MAAM,gCAAgC,EAAE,OAAO;AAAA,EACpD,aAAa,EAAE,OAAO,EAAE,IAAI,CAAC;AAC/B,CAAC;AAEM,MAAM,6BAA6B,EAAE,OAAO;AAAA,EACjD,eAAe,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAC1D,CAAC;AAEM,MAAM,gCAAgC,EAAE,OAAO;AAAA,EACpD,cAAc,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EACzC,eAAe,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,SAAS;AACrE,CAAC,EAAE;AAAA,EACD,CAAC,UAAU,QAAQ,MAAM,gBAAgB,MAAM,eAAe,MAAM;AAAA,EACpE,EAAE,SAAS,4CAA4C;AACzD;",
+  "sourcesContent": ["import { z } from 'zod'\nimport { parseBooleanFlag } from '@open-mercato/shared/lib/boolean'\n\nfunction collectDuplicateRecipientIds(\n  recipients: Array<{ userId: string }>,\n): string[] {\n  const seen = new Set<string>()\n  const duplicates = new Set<string>()\n  for (const recipient of recipients) {\n    if (seen.has(recipient.userId)) {\n      duplicates.add(recipient.userId)\n      continue\n    }\n    seen.add(recipient.userId)\n  }\n  return Array.from(duplicates)\n}\n\nfunction validateDefaultWithObjectsPayload(\n  value: {\n    type?: string\n    objects?: Array<{ actionRequired?: boolean; actionType?: string; actionLabel?: string }>\n  },\n  ctx: z.RefinementCtx,\n): void {\n  if (value.type !== 'messages.defaultWithObjects') return\n\n  if (!Array.isArray(value.objects) || value.objects.length === 0) {\n    ctx.addIssue({\n      code: z.ZodIssueCode.custom,\n      path: ['objects'],\n      message: 'at least one object is required for messages.defaultWithObjects',\n    })\n    return\n  }\n\n  value.objects.forEach((object, index) => {\n    if (object.actionRequired === true) {\n      ctx.addIssue({\n        code: z.ZodIssueCode.custom,\n        path: ['objects', index, 'actionRequired'],\n        message: 'actionRequired must be false for messages.defaultWithObjects',\n      })\n    }\n    if (typeof object.actionType === 'string' && object.actionType.trim().length > 0) {\n      ctx.addIssue({\n        code: z.ZodIssueCode.custom,\n        path: ['objects', index, 'actionType'],\n        message: 'actionType is not allowed for messages.defaultWithObjects',\n      })\n    }\n    if (typeof object.actionLabel === 'string' && object.actionLabel.trim().length > 0) {\n      ctx.addIssue({\n        code: z.ZodIssueCode.custom,\n        path: ['objects', index, 'actionLabel'],\n        message: 'actionLabel is not allowed for messages.defaultWithObjects',\n      })\n    }\n  })\n}\n\nexport const messageRecipientSchema = z.object({\n  userId: z.string().uuid(),\n  type: z.enum(['to', 'cc', 'bcc']).optional().default('to'),\n})\n\nexport const messageObjectSchema = z.object({\n  entityModule: z.string().min(1),\n  entityType: z.string().min(1),\n  entityId: z.string().uuid(),\n  actionRequired: z.boolean().optional().default(false),\n  actionType: z.string().optional(),\n  actionLabel: z.string().optional(),\n})\n\nexport const messageActionSchema = z.object({\n  id: z.string().min(1),\n  label: z.string().min(1),\n  labelKey: z.string().optional(),\n  variant: z.enum(['default', 'secondary', 'destructive', 'outline', 'ghost']).optional(),\n  icon: z.string().optional(),\n  commandId: z.string().optional(),\n  href: z.string().optional(),\n  isTerminal: z.boolean().optional(),\n  confirmRequired: z.boolean().optional(),\n  confirmMessage: z.string().optional(),\n})\n\nexport const messageActionDataSchema = z.object({\n  actions: z.array(messageActionSchema),\n  primaryActionId: z.string().optional(),\n  expiresAt: z.string().datetime().optional(),\n})\n\nexport const composeMessageSchema = z.object({\n  type: z.string().optional().default('default'),\n  visibility: z.enum(['public', 'internal']).nullable().optional(),\n  sourceEntityType: z.string().min(1).optional(),\n  sourceEntityId: z.string().uuid().optional(),\n  externalEmail: z.string().email().optional(),\n  externalName: z.string().min(1).max(255).optional(),\n  recipients: z.array(messageRecipientSchema).max(100).optional().default([]),\n  subject: z.string().max(500).optional().default(''),\n  body: z.string().max(50000).optional().default(''),\n  bodyFormat: z.enum(['text', 'markdown']).optional().default('text'),\n  priority: z.enum(['low', 'normal', 'high', 'urgent']).optional().default('normal'),\n  objects: z.array(messageObjectSchema).optional(),\n  attachmentIds: z.array(z.string().uuid()).optional(),\n  attachmentRecordId: z.string().min(1).max(255).optional(),\n  actionData: messageActionDataSchema.optional(),\n  sendViaEmail: z.boolean().optional().default(false),\n  parentMessageId: z.string().uuid().optional(),\n  isDraft: z.boolean().optional().default(false),\n}).superRefine((value, ctx) => {\n  const isDraft = value.isDraft ?? false\n  const visibility = value.visibility ?? 'internal'\n  const recipientCount = value.recipients.length\n  const hasExternalEmail = Boolean(value.externalEmail?.trim())\n  const hasSubject = value.subject.trim().length > 0\n  const hasBody = value.body.trim().length > 0\n\n  if (!isDraft) {\n    if (visibility === 'public') {\n      if (!hasExternalEmail) {\n        ctx.addIssue({\n          code: z.ZodIssueCode.custom,\n          path: ['externalEmail'],\n          message: 'externalEmail is required when visibility is public',\n        })\n      }\n      if (recipientCount > 0) {\n        ctx.addIssue({\n          code: z.ZodIssueCode.custom,\n          path: ['recipients'],\n          message: 'recipients must be empty when visibility is public',\n        })\n      }\n    } else if (recipientCount === 0) {\n      ctx.addIssue({\n        code: z.ZodIssueCode.custom,\n        path: ['recipients'],\n        message: 'at least one recipient is required when visibility is internal',\n      })\n    }\n\n    if (!hasSubject) {\n      ctx.addIssue({\n        code: z.ZodIssueCode.custom,\n        path: ['subject'],\n        message: 'subject is required',\n      })\n    }\n    if (!hasBody) {\n      ctx.addIssue({\n        code: z.ZodIssueCode.custom,\n        path: ['body'],\n        message: 'body is required',\n      })\n    }\n  }\n\n  const duplicateRecipientIds = collectDuplicateRecipientIds(value.recipients)\n  if (duplicateRecipientIds.length > 0) {\n    ctx.addIssue({\n      code: z.ZodIssueCode.custom,\n      path: ['recipients'],\n      message: 'recipient user ids must be unique',\n    })\n  }\n\n  validateDefaultWithObjectsPayload(value, ctx)\n})\n\nexport const updateDraftSchema = z.object({\n  type: z.string().optional(),\n  visibility: z.enum(['public', 'internal']).nullable().optional(),\n  sourceEntityType: z.string().min(1).optional(),\n  sourceEntityId: z.string().uuid().optional(),\n  externalEmail: z.string().email().optional(),\n  externalName: z.string().min(1).max(255).optional(),\n  recipients: z.array(messageRecipientSchema).optional(),\n  subject: z.string().max(500).optional(),\n  body: z.string().max(50000).optional(),\n  bodyFormat: z.enum(['text', 'markdown']).optional(),\n  priority: z.enum(['low', 'normal', 'high', 'urgent']).optional(),\n  objects: z.array(messageObjectSchema).optional(),\n  attachmentIds: z.array(z.string().uuid()).optional(),\n  actionData: messageActionDataSchema.optional(),\n  sendViaEmail: z.boolean().optional(),\n  isDraft: z.literal(false).optional(),\n}).superRefine((value, ctx) => {\n  if (value.recipients) {\n    const duplicateRecipientIds = collectDuplicateRecipientIds(value.recipients)\n    if (duplicateRecipientIds.length > 0) {\n      ctx.addIssue({\n        code: z.ZodIssueCode.custom,\n        path: ['recipients'],\n        message: 'recipient user ids must be unique',\n      })\n    }\n  }\n\n  validateDefaultWithObjectsPayload(value, ctx)\n})\n\nexport const listMessagesSchema = z.object({\n  folder: z.enum(['inbox', 'sent', 'drafts', 'archived', 'all']).optional().default('inbox'),\n  status: z.enum(['unread', 'read', 'archived']).optional(),\n  type: z.string().optional(),\n  visibility: z.enum(['public', 'internal']).optional(),\n  sourceEntityType: z.string().optional(),\n  sourceEntityId: z.string().uuid().optional(),\n  externalEmail: z.string().email().optional(),\n  hasObjects: z.string().transform(parseBooleanFlag).optional(),\n  hasAttachments: z.string().transform(parseBooleanFlag).optional(),\n  hasActions: z.string().transform(parseBooleanFlag).optional(),\n  senderId: z.string().uuid().optional(),\n  search: z.string().max(200).optional(),\n  since: z.string().datetime().optional(),\n  page: z.coerce.number().int().min(1).optional().default(1),\n  pageSize: z.coerce.number().int().min(1).max(100).optional().default(20),\n})\n\nexport const forwardMessageSchema = z.object({\n  recipients: z.array(messageRecipientSchema).min(1).max(100),\n  body: z.string().max(50000).optional(),\n  additionalBody: z.string().max(10000).optional(),\n  includeAttachments: z.boolean().optional().default(true),\n  sendViaEmail: z.boolean().optional().default(false),\n}).superRefine((value, ctx) => {\n  const duplicateRecipientIds = collectDuplicateRecipientIds(value.recipients)\n  if (duplicateRecipientIds.length > 0) {\n    ctx.addIssue({\n      code: z.ZodIssueCode.custom,\n      path: ['recipients'],\n      message: 'recipient user ids must be unique',\n    })\n  }\n})\n\nexport const replyMessageSchema = z.object({\n  body: z.string().min(1).max(50000),\n  bodyFormat: z.enum(['text', 'markdown']).optional().default('text'),\n  recipients: z.array(messageRecipientSchema).max(100).optional(),\n  attachmentIds: z.array(z.string().uuid()).optional(),\n  attachmentRecordId: z.string().min(1).max(255).optional(),\n  replyAll: z.boolean().optional().default(false),\n  sendViaEmail: z.boolean().optional().default(false),\n}).superRefine((value, ctx) => {\n  if (!value.recipients) return\n  const duplicateRecipientIds = collectDuplicateRecipientIds(value.recipients)\n  if (duplicateRecipientIds.length > 0) {\n    ctx.addIssue({\n      code: z.ZodIssueCode.custom,\n      path: ['recipients'],\n      message: 'recipient user ids must be unique',\n    })\n  }\n})\n\nexport const executeActionSchema = z.object({\n  messageId: z.string().uuid(),\n  actionId: z.string().min(1),\n  payload: z.record(z.string(), z.unknown()).optional(),\n})\n\nexport const confirmMessageSchema = z.object({\n  messageId: z.string().uuid(),\n  tenantId: z.string().uuid().optional(),\n  organizationId: z.string().uuid().nullable().optional(),\n  confirmed: z.boolean().optional().default(true),\n})\n\nexport const messageObjectTypesQuerySchema = z.object({\n  messageType: z.string().min(1),\n})\n\nexport const attachmentIdsPayloadSchema = z.object({\n  attachmentIds: z.array(z.string().uuid()).min(1).max(100),\n})\n\nexport const unlinkAttachmentPayloadSchema = z.object({\n  attachmentId: z.string().uuid().optional(),\n  attachmentIds: z.array(z.string().uuid()).min(1).max(100).optional(),\n}).refine(\n  (value) => Boolean(value.attachmentId || value.attachmentIds?.length),\n  { message: 'attachmentId or attachmentIds is required' }\n)\n\nexport type ComposeMessageInput = z.infer<typeof composeMessageSchema>\nexport type UpdateDraftInput = z.infer<typeof updateDraftSchema>\nexport type ListMessagesInput = z.infer<typeof listMessagesSchema>\nexport type ForwardMessageInput = z.infer<typeof forwardMessageSchema>\nexport type ReplyMessageInput = z.infer<typeof replyMessageSchema>\nexport type ExecuteActionInput = z.infer<typeof executeActionSchema>\nexport type ConfirmMessageInput = z.infer<typeof confirmMessageSchema>\nexport type MessageObjectTypesQueryInput = z.infer<typeof messageObjectTypesQuerySchema>\nexport type AttachmentIdsPayload = z.infer<typeof attachmentIdsPayloadSchema>\nexport type UnlinkAttachmentPayload = z.infer<typeof unlinkAttachmentPayloadSchema>\n"],
+  "mappings": "AAAA,SAAS,SAAS;AAClB,SAAS,wBAAwB;AAEjC,SAAS,6BACP,YACU;AACV,QAAM,OAAO,oBAAI,IAAY;AAC7B,QAAM,aAAa,oBAAI,IAAY;AACnC,aAAW,aAAa,YAAY;AAClC,QAAI,KAAK,IAAI,UAAU,MAAM,GAAG;AAC9B,iBAAW,IAAI,UAAU,MAAM;AAC/B;AAAA,IACF;AACA,SAAK,IAAI,UAAU,MAAM;AAAA,EAC3B;AACA,SAAO,MAAM,KAAK,UAAU;AAC9B;AAEA,SAAS,kCACP,OAIA,KACM;AACN,MAAI,MAAM,SAAS,8BAA+B;AAElD,MAAI,CAAC,MAAM,QAAQ,MAAM,OAAO,KAAK,MAAM,QAAQ,WAAW,GAAG;AAC/D,QAAI,SAAS;AAAA,MACX,MAAM,EAAE,aAAa;AAAA,MACrB,MAAM,CAAC,SAAS;AAAA,MAChB,SAAS;AAAA,IACX,CAAC;AACD;AAAA,EACF;AAEA,QAAM,QAAQ,QAAQ,CAAC,QAAQ,UAAU;AACvC,QAAI,OAAO,mBAAmB,MAAM;AAClC,UAAI,SAAS;AAAA,QACX,MAAM,EAAE,aAAa;AAAA,QACrB,MAAM,CAAC,WAAW,OAAO,gBAAgB;AAAA,QACzC,SAAS;AAAA,MACX,CAAC;AAAA,IACH;AACA,QAAI,OAAO,OAAO,eAAe,YAAY,OAAO,WAAW,KAAK,EAAE,SAAS,GAAG;AAChF,UAAI,SAAS;AAAA,QACX,MAAM,EAAE,aAAa;AAAA,QACrB,MAAM,CAAC,WAAW,OAAO,YAAY;AAAA,QACrC,SAAS;AAAA,MACX,CAAC;AAAA,IACH;AACA,QAAI,OAAO,OAAO,gBAAgB,YAAY,OAAO,YAAY,KAAK,EAAE,SAAS,GAAG;AAClF,UAAI,SAAS;AAAA,QACX,MAAM,EAAE,aAAa;AAAA,QACrB,MAAM,CAAC,WAAW,OAAO,aAAa;AAAA,QACtC,SAAS;AAAA,MACX,CAAC;AAAA,IACH;AAAA,EACF,CAAC;AACH;AAEO,MAAM,yBAAyB,EAAE,OAAO;AAAA,EAC7C,QAAQ,EAAE,OAAO,EAAE,KAAK;AAAA,EACxB,MAAM,EAAE,KAAK,CAAC,MAAM,MAAM,KAAK,CAAC,EAAE,SAAS,EAAE,QAAQ,IAAI;AAC3D,CAAC;AAEM,MAAM,sBAAsB,EAAE,OAAO;AAAA,EAC1C,cAAc,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EAC9B,YAAY,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EAC5B,UAAU,EAAE,OAAO,EAAE,KAAK;AAAA,EAC1B,gBAAgB,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,KAAK;AAAA,EACpD,YAAY,EAAE,OAAO,EAAE,SAAS;AAAA,EAChC,aAAa,EAAE,OAAO,EAAE,SAAS;AACnC,CAAC;AAEM,MAAM,sBAAsB,EAAE,OAAO;AAAA,EAC1C,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EACpB,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EACvB,UAAU,EAAE,OAAO,EAAE,SAAS;AAAA,EAC9B,SAAS,EAAE,KAAK,CAAC,WAAW,aAAa,eAAe,WAAW,OAAO,CAAC,EAAE,SAAS;AAAA,EACtF,MAAM,EAAE,OAAO,EAAE,SAAS;AAAA,EAC1B,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,EAC/B,MAAM,EAAE,OAAO,EAAE,SAAS;AAAA,EAC1B,YAAY,EAAE,QAAQ,EAAE,SAAS;AAAA,EACjC,iBAAiB,EAAE,QAAQ,EAAE,SAAS;AAAA,EACtC,gBAAgB,EAAE,OAAO,EAAE,SAAS;AACtC,CAAC;AAEM,MAAM,0BAA0B,EAAE,OAAO;AAAA,EAC9C,SAAS,EAAE,MAAM,mBAAmB;AAAA,EACpC,iBAAiB,EAAE,OAAO,EAAE,SAAS;AAAA,EACrC,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAC5C,CAAC;AAEM,MAAM,uBAAuB,EAAE,OAAO;AAAA,EAC3C,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,SAAS;AAAA,EAC7C,YAAY,EAAE,KAAK,CAAC,UAAU,UAAU,CAAC,EAAE,SAAS,EAAE,SAAS;AAAA,EAC/D,kBAAkB,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA,EAC7C,gBAAgB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EAC3C,eAAe,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS;AAAA,EAC3C,cAAc,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EAClD,YAAY,EAAE,MAAM,sBAAsB,EAAE,IAAI,GAAG,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;AAAA,EAC1E,SAAS,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,SAAS,EAAE,QAAQ,EAAE;AAAA,EAClD,MAAM,EAAE,OAAO,EAAE,IAAI,GAAK,EAAE,SAAS,EAAE,QAAQ,EAAE;AAAA,EACjD,YAAY,EAAE,KAAK,CAAC,QAAQ,UAAU,CAAC,EAAE,SAAS,EAAE,QAAQ,MAAM;AAAA,EAClE,UAAU,EAAE,KAAK,CAAC,OAAO,UAAU,QAAQ,QAAQ,CAAC,EAAE,SAAS,EAAE,QAAQ,QAAQ;AAAA,EACjF,SAAS,EAAE,MAAM,mBAAmB,EAAE,SAAS;AAAA,EAC/C,eAAe,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,SAAS;AAAA,EACnD,oBAAoB,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EACxD,YAAY,wBAAwB,SAAS;AAAA,EAC7C,cAAc,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,KAAK;AAAA,EAClD,iBAAiB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EAC5C,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,KAAK;AAC/C,CAAC,EAAE,YAAY,CAAC,OAAO,QAAQ;AAC7B,QAAM,UAAU,MAAM,WAAW;AACjC,QAAM,aAAa,MAAM,cAAc;AACvC,QAAM,iBAAiB,MAAM,WAAW;AACxC,QAAM,mBAAmB,QAAQ,MAAM,eAAe,KAAK,CAAC;AAC5D,QAAM,aAAa,MAAM,QAAQ,KAAK,EAAE,SAAS;AACjD,QAAM,UAAU,MAAM,KAAK,KAAK,EAAE,SAAS;AAE3C,MAAI,CAAC,SAAS;AACZ,QAAI,eAAe,UAAU;AAC3B,UAAI,CAAC,kBAAkB;AACrB,YAAI,SAAS;AAAA,UACX,MAAM,EAAE,aAAa;AAAA,UACrB,MAAM,CAAC,eAAe;AAAA,UACtB,SAAS;AAAA,QACX,CAAC;AAAA,MACH;AACA,UAAI,iBAAiB,GAAG;AACtB,YAAI,SAAS;AAAA,UACX,MAAM,EAAE,aAAa;AAAA,UACrB,MAAM,CAAC,YAAY;AAAA,UACnB,SAAS;AAAA,QACX,CAAC;AAAA,MACH;AAAA,IACF,WAAW,mBAAmB,GAAG;AAC/B,UAAI,SAAS;AAAA,QACX,MAAM,EAAE,aAAa;AAAA,QACrB,MAAM,CAAC,YAAY;AAAA,QACnB,SAAS;AAAA,MACX,CAAC;AAAA,IACH;AAEA,QAAI,CAAC,YAAY;AACf,UAAI,SAAS;AAAA,QACX,MAAM,EAAE,aAAa;AAAA,QACrB,MAAM,CAAC,SAAS;AAAA,QAChB,SAAS;AAAA,MACX,CAAC;AAAA,IACH;AACA,QAAI,CAAC,SAAS;AACZ,UAAI,SAAS;AAAA,QACX,MAAM,EAAE,aAAa;AAAA,QACrB,MAAM,CAAC,MAAM;AAAA,QACb,SAAS;AAAA,MACX,CAAC;AAAA,IACH;AAAA,EACF;AAEA,QAAM,wBAAwB,6BAA6B,MAAM,UAAU;AAC3E,MAAI,sBAAsB,SAAS,GAAG;AACpC,QAAI,SAAS;AAAA,MACX,MAAM,EAAE,aAAa;AAAA,MACrB,MAAM,CAAC,YAAY;AAAA,MACnB,SAAS;AAAA,IACX,CAAC;AAAA,EACH;AAEA,oCAAkC,OAAO,GAAG;AAC9C,CAAC;AAEM,MAAM,oBAAoB,EAAE,OAAO;AAAA,EACxC,MAAM,EAAE,OAAO,EAAE,SAAS;AAAA,EAC1B,YAAY,EAAE,KAAK,CAAC,UAAU,UAAU,CAAC,EAAE,SAAS,EAAE,SAAS;AAAA,EAC/D,kBAAkB,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA,EAC7C,gBAAgB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EAC3C,eAAe,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS;AAAA,EAC3C,cAAc,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EAClD,YAAY,EAAE,MAAM,sBAAsB,EAAE,SAAS;AAAA,EACrD,SAAS,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EACtC,MAAM,EAAE,OAAO,EAAE,IAAI,GAAK,EAAE,SAAS;AAAA,EACrC,YAAY,EAAE,KAAK,CAAC,QAAQ,UAAU,CAAC,EAAE,SAAS;AAAA,EAClD,UAAU,EAAE,KAAK,CAAC,OAAO,UAAU,QAAQ,QAAQ,CAAC,EAAE,SAAS;AAAA,EAC/D,SAAS,EAAE,MAAM,mBAAmB,EAAE,SAAS;AAAA,EAC/C,eAAe,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,SAAS;AAAA,EACnD,YAAY,wBAAwB,SAAS;AAAA,EAC7C,cAAc,EAAE,QAAQ,EAAE,SAAS;AAAA,EACnC,SAAS,EAAE,QAAQ,KAAK,EAAE,SAAS;AACrC,CAAC,EAAE,YAAY,CAAC,OAAO,QAAQ;AAC7B,MAAI,MAAM,YAAY;AACpB,UAAM,wBAAwB,6BAA6B,MAAM,UAAU;AAC3E,QAAI,sBAAsB,SAAS,GAAG;AACpC,UAAI,SAAS;AAAA,QACX,MAAM,EAAE,aAAa;AAAA,QACrB,MAAM,CAAC,YAAY;AAAA,QACnB,SAAS;AAAA,MACX,CAAC;AAAA,IACH;AAAA,EACF;AAEA,oCAAkC,OAAO,GAAG;AAC9C,CAAC;AAEM,MAAM,qBAAqB,EAAE,OAAO;AAAA,EACzC,QAAQ,EAAE,KAAK,CAAC,SAAS,QAAQ,UAAU,YAAY,KAAK,CAAC,EAAE,SAAS,EAAE,QAAQ,OAAO;AAAA,EACzF,QAAQ,EAAE,KAAK,CAAC,UAAU,QAAQ,UAAU,CAAC,EAAE,SAAS;AAAA,EACxD,MAAM,EAAE,OAAO,EAAE,SAAS;AAAA,EAC1B,YAAY,EAAE,KAAK,CAAC,UAAU,UAAU,CAAC,EAAE,SAAS;AAAA,EACpD,kBAAkB,EAAE,OAAO,EAAE,SAAS;AAAA,EACtC,gBAAgB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EAC3C,eAAe,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS;AAAA,EAC3C,YAAY,EAAE,OAAO,EAAE,UAAU,gBAAgB,EAAE,SAAS;AAAA,EAC5D,gBAAgB,EAAE,OAAO,EAAE,UAAU,gBAAgB,EAAE,SAAS;AAAA,EAChE,YAAY,EAAE,OAAO,EAAE,UAAU,gBAAgB,EAAE,SAAS;AAAA,EAC5D,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EACrC,QAAQ,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EACrC,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EACtC,MAAM,EAAE,OAAO,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,SAAS,EAAE,QAAQ,CAAC;AAAA,EACzD,UAAU,EAAE,OAAO,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,SAAS,EAAE,QAAQ,EAAE;AACzE,CAAC;AAEM,MAAM,uBAAuB,EAAE,OAAO;AAAA,EAC3C,YAAY,EAAE,MAAM,sBAAsB,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EAC1D,MAAM,EAAE,OAAO,EAAE,IAAI,GAAK,EAAE,SAAS;AAAA,EACrC,gBAAgB,EAAE,OAAO,EAAE,IAAI,GAAK,EAAE,SAAS;AAAA,EAC/C,oBAAoB,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,IAAI;AAAA,EACvD,cAAc,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,KAAK;AACpD,CAAC,EAAE,YAAY,CAAC,OAAO,QAAQ;AAC7B,QAAM,wBAAwB,6BAA6B,MAAM,UAAU;AAC3E,MAAI,sBAAsB,SAAS,GAAG;AACpC,QAAI,SAAS;AAAA,MACX,MAAM,EAAE,aAAa;AAAA,MACrB,MAAM,CAAC,YAAY;AAAA,MACnB,SAAS;AAAA,IACX,CAAC;AAAA,EACH;AACF,CAAC;AAEM,MAAM,qBAAqB,EAAE,OAAO;AAAA,EACzC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAK;AAAA,EACjC,YAAY,EAAE,KAAK,CAAC,QAAQ,UAAU,CAAC,EAAE,SAAS,EAAE,QAAQ,MAAM;AAAA,EAClE,YAAY,EAAE,MAAM,sBAAsB,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EAC9D,eAAe,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,SAAS;AAAA,EACnD,oBAAoB,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EACxD,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,KAAK;AAAA,EAC9C,cAAc,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,KAAK;AACpD,CAAC,EAAE,YAAY,CAAC,OAAO,QAAQ;AAC7B,MAAI,CAAC,MAAM,WAAY;AACvB,QAAM,wBAAwB,6BAA6B,MAAM,UAAU;AAC3E,MAAI,sBAAsB,SAAS,GAAG;AACpC,QAAI,SAAS;AAAA,MACX,MAAM,EAAE,aAAa;AAAA,MACrB,MAAM,CAAC,YAAY;AAAA,MACnB,SAAS;AAAA,IACX,CAAC;AAAA,EACH;AACF,CAAC;AAEM,MAAM,sBAAsB,EAAE,OAAO;AAAA,EAC1C,WAAW,EAAE,OAAO,EAAE,KAAK;AAAA,EAC3B,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EAC1B,SAAS,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,EAAE,SAAS;AACtD,CAAC;AAEM,MAAM,uBAAuB,EAAE,OAAO;AAAA,EAC3C,WAAW,EAAE,OAAO,EAAE,KAAK;AAAA,EAC3B,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EACrC,gBAAgB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS;AAAA,EACtD,WAAW,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,IAAI;AAChD,CAAC;AAEM,MAAM,gCAAgC,EAAE,OAAO;AAAA,EACpD,aAAa,EAAE,OAAO,EAAE,IAAI,CAAC;AAC/B,CAAC;AAEM,MAAM,6BAA6B,EAAE,OAAO;AAAA,EACjD,eAAe,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAC1D,CAAC;AAEM,MAAM,gCAAgC,EAAE,OAAO;AAAA,EACpD,cAAc,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EACzC,eAAe,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,SAAS;AACrE,CAAC,EAAE;AAAA,EACD,CAAC,UAAU,QAAQ,MAAM,gBAAgB,MAAM,eAAe,MAAM;AAAA,EACpE,EAAE,SAAS,4CAA4C;AACzD;",
   "names": []
 }

package/dist/modules/query_index/di.js

@@ -62,8 +62,8 @@ function register(container) {
     const makeUpsertHandler = (entityType) => async (payload, ctx) => {
       try {
         const em = ctx.resolve("em");
-        let orgId = payload?.organizationId || payload?.orgId || null;
-        let tenantId = payload?.tenantId || null;
+        let orgId = payload?.organizationId || payload?.orgId || ctx?.organizationId || null;
+        let tenantId = payload?.tenantId || ctx?.tenantId || null;
         const id = String(payload?.id || payload?.recordId || "");
         if (!id) return;
         if (!orgId || !tenantId) {
@@ -110,21 +110,23 @@ function register(container) {
     const makeDeleteHandler = (entityType) => async (payload, ctx) => {
       try {
         const em = ctx.resolve("em");
-        let orgId = payload?.organizationId || payload?.orgId || null;
+        let orgId = payload?.organizationId || payload?.orgId || ctx?.organizationId || null;
+        let tenantId = payload?.tenantId || ctx?.tenantId || null;
         const id = String(payload?.id || payload?.recordId || "");
         if (!id) return;
-        if (!orgId) {
+        if (!orgId || !tenantId) {
           try {
             const db = em.getKysely();
             const table = resolveEntityTableName(em, entityType);
-            const row = await db.selectFrom(table).select(["organization_id"]).where("id", "=", id).executeTakeFirst();
+            const row = await db.selectFrom(table).select(["organization_id", "tenant_id"]).where("id", "=", id).executeTakeFirst();
             orgId = row?.organization_id ?? orgId;
+            tenantId = row?.tenant_id ?? tenantId;
           } catch {
           }
         }
         try {
           const bus2 = ctx.resolve("eventBus");
-          await bus2.emitEvent("query_index.delete_one", { entityType, recordId: id, organizationId: orgId });
+          await bus2.emitEvent("query_index.delete_one", { entityType, recordId: id, organizationId: orgId, tenantId });
         } catch {
         }
       } catch {

package/dist/modules/query_index/di.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../src/modules/query_index/di.ts"],
-  "sourcesContent": ["import type { AppContainer } from '@open-mercato/shared/lib/di/container'\nimport { BasicQueryEngine, resolveEntityTableName } from '@open-mercato/shared/lib/query/engine'\nimport { HybridQueryEngine } from './lib/engine'\nimport { markDeleted } from './lib/indexer'\nimport type { EventBus } from '@open-mercato/events'\nimport type { VectorIndexService } from '@open-mercato/search/vector'\n\nfunction toEntityTypeFromEvent(event: string): string | null {\n  // Expect '<module>.<entity>.<action>'\n  const parts = event.split('.')\n  if (parts.length !== 3) return null\n  const [mod, ent] = parts\n  return `${mod}:${ent}`\n}\n\nexport function register(container: AppContainer) {\n  // Override queryEngine with hybrid that prefers JSONB index when available\n  try {\n    const em = (container.resolve('em') as any)\n    const basic = new BasicQueryEngine(\n      em,\n      undefined,\n      () => {\n        try {\n          return container.resolve('tenantEncryptionService') as any\n        } catch {\n          return null\n        }\n      },\n    )\n    const hybrid = new HybridQueryEngine(\n      em,\n      basic,\n      () => {\n        try {\n          return (container.resolve('eventBus') as EventBus)\n        } catch {\n          return null\n        }\n      },\n      () => {\n        try {\n          return (container.resolve('vectorIndexService') as VectorIndexService)\n        } catch {\n          return null\n        }\n      },\n      () => {\n        try {\n          return container.resolve('tenantEncryptionService') as any\n        } catch {\n          return null\n        }\n      },\n    )\n    // Replace existing registration\n    ;(container as any).register({ queryEngine: { resolve: () => hybrid } })\n  } catch {}\n\n  // Subscribe to CRUD events and forward to query_index subscribers for unified handling\n  const setup = () => {\n    let bus: any\n    try { bus = (container.resolve('eventBus') as any) } catch { bus = null }\n    if (!bus) { setTimeout(setup, 0); return }\n\n    const makeUpsertHandler = (entityType: string) => async (payload: any, ctx: any) => {\n      try {\n        const em = ctx.resolve('em')\n        let orgId = payload?.organizationId || payload?.orgId || null\n        let tenantId = payload?.tenantId || null\n        const id = String(payload?.id || payload?.recordId || '')\n        if (!id) return\n        if (!orgId || !tenantId) {\n          try {\n            const db = (em as any).getKysely()\n            const table = resolveEntityTableName(em, entityType)\n            const row = await db\n              .selectFrom(table as any)\n              .select(['organization_id' as any, 'tenant_id' as any])\n              .where('id' as any, '=', id)\n              .executeTakeFirst() as { organization_id: string | null; tenant_id: string | null } | undefined\n            orgId = row?.organization_id ?? orgId\n            tenantId = row?.tenant_id ?? tenantId\n          } catch {}\n        }\n        // Optional: only index when custom field definitions exist for this entity (org/global)\n        try {\n          const db = (em as any).getKysely()\n          let cfQuery = db\n            .selectFrom('custom_field_defs' as any)\n            .select(['id' as any])\n            .where('entity_id' as any, '=', entityType)\n            .where('is_active' as any, '=', true)\n          if (orgId != null) {\n            cfQuery = cfQuery.where((eb: any) => eb.or([\n              eb('organization_id' as any, '=', orgId),\n              eb('organization_id' as any, 'is', null),\n            ]))\n          } else {\n            cfQuery = cfQuery.where('organization_id' as any, 'is', null as any)\n          }\n          if (tenantId != null) {\n            cfQuery = cfQuery.where((eb: any) => eb.or([\n              eb('tenant_id' as any, '=', tenantId),\n              eb('tenant_id' as any, 'is', null),\n            ]))\n          } else {\n            cfQuery = cfQuery.where('tenant_id' as any, 'is', null as any)\n          }\n          const hasCf = await cfQuery.executeTakeFirst()\n          if (!hasCf) return\n        } catch {}\n        try {\n          const bus = ctx.resolve('eventBus') as any\n          await bus.emitEvent('query_index.upsert_one', { entityType, recordId: id, organizationId: orgId, tenantId })\n        } catch {}\n      } catch {}\n    }\n    const makeDeleteHandler = (entityType: string) => async (payload: any, ctx: any) => {\n      try {\n        const em = ctx.resolve('em')\n        let orgId = payload?.organizationId || payload?.orgId || null\n        const id = String(payload?.id || payload?.recordId || '')\n        if (!id) return\n        if (!orgId) {\n          try {\n            const db = (em as any).getKysely()\n            const table = resolveEntityTableName(em, entityType)\n            const row = await db\n              .selectFrom(table as any)\n              .select(['organization_id' as any])\n              .where('id' as any, '=', id)\n              .executeTakeFirst() as { organization_id: string | null } | undefined\n            orgId = row?.organization_id ?? orgId\n          } catch {}\n        }\n        try {\n          const bus = ctx.resolve('eventBus') as any\n          await bus.emitEvent('query_index.delete_one', { entityType, recordId: id, organizationId: orgId })\n        } catch {}\n      } catch {}\n    }\n\n    // Build list of entity ids to subscribe to\n    try {\n      const em = (container.resolve('em') as any)\n      const db = (em as any).getKysely()\n      const cfEntityIds: string[] = []\n      db\n        .selectFrom('custom_field_defs' as any)\n        .select(['entity_id' as any])\n        .distinct()\n        .execute()\n        .then((rows: any[]) => {\n          for (const r of rows || []) cfEntityIds.push(String(r.entity_id))\n        })\n        .catch(() => {})\n        .finally(() => {\n          const proceed = (ids: string[]) => {\n            for (const entityType of Array.from(new Set(ids))) {\n              const [mod, ent] = entityType.split(':')\n              if (!mod || !ent) continue\n              bus.on(`${mod}.${ent}.created`, makeUpsertHandler(entityType))\n              bus.on(`${mod}.${ent}.updated`, makeUpsertHandler(entityType))\n              bus.on(`${mod}.${ent}.deleted`, makeDeleteHandler(entityType))\n            }\n          }\n          if (cfEntityIds.length > 0) {\n            proceed(cfEntityIds)\n          } else {\n            // Fallback to generated entity ids without await\n          import('#generated/entities.ids.generated').then((core) => {\n              const flatten = (E: any): string[] => Object.values(E || {}).flatMap((o: any) => Object.values(o || {}) as string[])\n              const guesses = new Set<string>([...flatten((core as any).E)])\n              proceed(Array.from(guesses))\n            }).catch(() => {})\n          }\n        })\n    } catch {}\n  }\n\n  try { setup() } catch {}\n}\n"],
-  "mappings": "AACA,SAAS,kBAAkB,8BAA8B;AACzD,SAAS,yBAAyB;AAKlC,SAAS,sBAAsB,OAA8B;AAE3D,QAAM,QAAQ,MAAM,MAAM,GAAG;AAC7B,MAAI,MAAM,WAAW,EAAG,QAAO;AAC/B,QAAM,CAAC,KAAK,GAAG,IAAI;AACnB,SAAO,GAAG,GAAG,IAAI,GAAG;AACtB;AAEO,SAAS,SAAS,WAAyB;AAEhD,MAAI;AACF,UAAM,KAAM,UAAU,QAAQ,IAAI;AAClC,UAAM,QAAQ,IAAI;AAAA,MAChB;AAAA,MACA;AAAA,MACA,MAAM;AACJ,YAAI;AACF,iBAAO,UAAU,QAAQ,yBAAyB;AAAA,QACpD,QAAQ;AACN,iBAAO;AAAA,QACT;AAAA,MACF;AAAA,IACF;AACA,UAAM,SAAS,IAAI;AAAA,MACjB;AAAA,MACA;AAAA,MACA,MAAM;AACJ,YAAI;AACF,iBAAQ,UAAU,QAAQ,UAAU;AAAA,QACtC,QAAQ;AACN,iBAAO;AAAA,QACT;AAAA,MACF;AAAA,MACA,MAAM;AACJ,YAAI;AACF,iBAAQ,UAAU,QAAQ,oBAAoB;AAAA,QAChD,QAAQ;AACN,iBAAO;AAAA,QACT;AAAA,MACF;AAAA,MACA,MAAM;AACJ,YAAI;AACF,iBAAO,UAAU,QAAQ,yBAAyB;AAAA,QACpD,QAAQ;AACN,iBAAO;AAAA,QACT;AAAA,MACF;AAAA,IACF;AAEC,IAAC,UAAkB,SAAS,EAAE,aAAa,EAAE,SAAS,MAAM,OAAO,EAAE,CAAC;AAAA,EACzE,QAAQ;AAAA,EAAC;AAGT,QAAM,QAAQ,MAAM;AAClB,QAAI;AACJ,QAAI;AAAE,YAAO,UAAU,QAAQ,UAAU;AAAA,IAAU,QAAQ;AAAE,YAAM;AAAA,IAAK;AACxE,QAAI,CAAC,KAAK;AAAE,iBAAW,OAAO,CAAC;AAAG;AAAA,IAAO;AAEzC,UAAM,oBAAoB,CAAC,eAAuB,OAAO,SAAc,QAAa;AAClF,UAAI;AACF,cAAM,KAAK,IAAI,QAAQ,IAAI;AAC3B,YAAI,QAAQ,SAAS,kBAAkB,SAAS,SAAS;AACzD,YAAI,WAAW,SAAS,YAAY;AACpC,cAAM,KAAK,OAAO,SAAS,MAAM,SAAS,YAAY,EAAE;AACxD,YAAI,CAAC,GAAI;AACT,YAAI,CAAC,SAAS,CAAC,UAAU;AACvB,cAAI;AACF,kBAAM,KAAM,GAAW,UAAU;AACjC,kBAAM,QAAQ,uBAAuB,IAAI,UAAU;AACnD,kBAAM,MAAM,MAAM,GACf,WAAW,KAAY,EACvB,OAAO,CAAC,mBAA0B,WAAkB,CAAC,EACrD,MAAM,MAAa,KAAK,EAAE,EAC1B,iBAAiB;AACpB,oBAAQ,KAAK,mBAAmB;AAChC,uBAAW,KAAK,aAAa;AAAA,UAC/B,QAAQ;AAAA,UAAC;AAAA,QACX;AAEA,YAAI;AACF,gBAAM,KAAM,GAAW,UAAU;AACjC,cAAI,UAAU,GACX,WAAW,mBAA0B,EACrC,OAAO,CAAC,IAAW,CAAC,EACpB,MAAM,aAAoB,KAAK,UAAU,EACzC,MAAM,aAAoB,KAAK,IAAI;AACtC,cAAI,SAAS,MAAM;AACjB,sBAAU,QAAQ,MAAM,CAAC,OAAY,GAAG,GAAG;AAAA,cACzC,GAAG,mBAA0B,KAAK,KAAK;AAAA,cACvC,GAAG,mBAA0B,MAAM,IAAI;AAAA,YACzC,CAAC,CAAC;AAAA,UACJ,OAAO;AACL,sBAAU,QAAQ,MAAM,mBAA0B,MAAM,IAAW;AAAA,UACrE;AACA,cAAI,YAAY,MAAM;AACpB,sBAAU,QAAQ,MAAM,CAAC,OAAY,GAAG,GAAG;AAAA,cACzC,GAAG,aAAoB,KAAK,QAAQ;AAAA,cACpC,GAAG,aAAoB,MAAM,IAAI;AAAA,YACnC,CAAC,CAAC;AAAA,UACJ,OAAO;AACL,sBAAU,QAAQ,MAAM,aAAoB,MAAM,IAAW;AAAA,UAC/D;AACA,gBAAM,QAAQ,MAAM,QAAQ,iBAAiB;AAC7C,cAAI,CAAC,MAAO;AAAA,QACd,QAAQ;AAAA,QAAC;AACT,YAAI;AACF,gBAAMA,OAAM,IAAI,QAAQ,UAAU;AAClC,gBAAMA,KAAI,UAAU,0BAA0B,EAAE,YAAY,UAAU,IAAI,gBAAgB,OAAO,SAAS,CAAC;AAAA,QAC7G,QAAQ;AAAA,QAAC;AAAA,MACX,QAAQ;AAAA,MAAC;AAAA,IACX;AACA,UAAM,oBAAoB,CAAC,eAAuB,OAAO,SAAc,QAAa;AAClF,UAAI;AACF,cAAM,KAAK,IAAI,QAAQ,IAAI;AAC3B,YAAI,QAAQ,SAAS,kBAAkB,SAAS,SAAS;AACzD,cAAM,KAAK,OAAO,SAAS,MAAM,SAAS,YAAY,EAAE;AACxD,YAAI,CAAC,GAAI;AACT,YAAI,CAAC,OAAO;AACV,cAAI;AACF,kBAAM,KAAM,GAAW,UAAU;AACjC,kBAAM,QAAQ,uBAAuB,IAAI,UAAU;AACnD,kBAAM,MAAM,MAAM,GACf,WAAW,KAAY,EACvB,OAAO,CAAC,iBAAwB,CAAC,EACjC,MAAM,MAAa,KAAK,EAAE,EAC1B,iBAAiB;AACpB,oBAAQ,KAAK,mBAAmB;AAAA,UAClC,QAAQ;AAAA,UAAC;AAAA,QACX;AACA,YAAI;AACF,gBAAMA,OAAM,IAAI,QAAQ,UAAU;AAClC,gBAAMA,KAAI,UAAU,0BAA0B,EAAE,YAAY,UAAU,IAAI,gBAAgB,MAAM,CAAC;AAAA,QACnG,QAAQ;AAAA,QAAC;AAAA,MACX,QAAQ;AAAA,MAAC;AAAA,IACX;AAGA,QAAI;AACF,YAAM,KAAM,UAAU,QAAQ,IAAI;AAClC,YAAM,KAAM,GAAW,UAAU;AACjC,YAAM,cAAwB,CAAC;AAC/B,SACG,WAAW,mBAA0B,EACrC,OAAO,CAAC,WAAkB,CAAC,EAC3B,SAAS,EACT,QAAQ,EACR,KAAK,CAAC,SAAgB;AACrB,mBAAW,KAAK,QAAQ,CAAC,EAAG,aAAY,KAAK,OAAO,EAAE,SAAS,CAAC;AAAA,MAClE,CAAC,EACA,MAAM,MAAM;AAAA,MAAC,CAAC,EACd,QAAQ,MAAM;AACb,cAAM,UAAU,CAAC,QAAkB;AACjC,qBAAW,cAAc,MAAM,KAAK,IAAI,IAAI,GAAG,CAAC,GAAG;AACjD,kBAAM,CAAC,KAAK,GAAG,IAAI,WAAW,MAAM,GAAG;AACvC,gBAAI,CAAC,OAAO,CAAC,IAAK;AAClB,gBAAI,GAAG,GAAG,GAAG,IAAI,GAAG,YAAY,kBAAkB,UAAU,CAAC;AAC7D,gBAAI,GAAG,GAAG,GAAG,IAAI,GAAG,YAAY,kBAAkB,UAAU,CAAC;AAC7D,gBAAI,GAAG,GAAG,GAAG,IAAI,GAAG,YAAY,kBAAkB,UAAU,CAAC;AAAA,UAC/D;AAAA,QACF;AACA,YAAI,YAAY,SAAS,GAAG;AAC1B,kBAAQ,WAAW;AAAA,QACrB,OAAO;AAEP,iBAAO,mCAAmC,EAAE,KAAK,CAAC,SAAS;AACvD,kBAAM,UAAU,CAAC,MAAqB,OAAO,OAAO,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,MAAW,OAAO,OAAO,KAAK,CAAC,CAAC,CAAa;AACnH,kBAAM,UAAU,oBAAI,IAAY,CAAC,GAAG,QAAS,KAAa,CAAC,CAAC,CAAC;AAC7D,oBAAQ,MAAM,KAAK,OAAO,CAAC;AAAA,UAC7B,CAAC,EAAE,MAAM,MAAM;AAAA,UAAC,CAAC;AAAA,QACnB;AAAA,MACF,CAAC;AAAA,IACL,QAAQ;AAAA,IAAC;AAAA,EACX;AAEA,MAAI;AAAE,UAAM;AAAA,EAAE,QAAQ;AAAA,EAAC;AACzB;",
+  "sourcesContent": ["import type { AppContainer } from '@open-mercato/shared/lib/di/container'\nimport { BasicQueryEngine, resolveEntityTableName } from '@open-mercato/shared/lib/query/engine'\nimport { HybridQueryEngine } from './lib/engine'\nimport { markDeleted } from './lib/indexer'\nimport type { EventBus } from '@open-mercato/events'\nimport type { VectorIndexService } from '@open-mercato/search/vector'\n\nfunction toEntityTypeFromEvent(event: string): string | null {\n  // Expect '<module>.<entity>.<action>'\n  const parts = event.split('.')\n  if (parts.length !== 3) return null\n  const [mod, ent] = parts\n  return `${mod}:${ent}`\n}\n\nexport function register(container: AppContainer) {\n  // Override queryEngine with hybrid that prefers JSONB index when available\n  try {\n    const em = (container.resolve('em') as any)\n    const basic = new BasicQueryEngine(\n      em,\n      undefined,\n      () => {\n        try {\n          return container.resolve('tenantEncryptionService') as any\n        } catch {\n          return null\n        }\n      },\n    )\n    const hybrid = new HybridQueryEngine(\n      em,\n      basic,\n      () => {\n        try {\n          return (container.resolve('eventBus') as EventBus)\n        } catch {\n          return null\n        }\n      },\n      () => {\n        try {\n          return (container.resolve('vectorIndexService') as VectorIndexService)\n        } catch {\n          return null\n        }\n      },\n      () => {\n        try {\n          return container.resolve('tenantEncryptionService') as any\n        } catch {\n          return null\n        }\n      },\n    )\n    // Replace existing registration\n    ;(container as any).register({ queryEngine: { resolve: () => hybrid } })\n  } catch {}\n\n  // Subscribe to CRUD events and forward to query_index subscribers for unified handling\n  const setup = () => {\n    let bus: any\n    try { bus = (container.resolve('eventBus') as any) } catch { bus = null }\n    if (!bus) { setTimeout(setup, 0); return }\n\n    const makeUpsertHandler = (entityType: string) => async (payload: any, ctx: any) => {\n      try {\n        const em = ctx.resolve('em')\n        let orgId = payload?.organizationId || payload?.orgId || ctx?.organizationId || null\n        let tenantId = payload?.tenantId || ctx?.tenantId || null\n        const id = String(payload?.id || payload?.recordId || '')\n        if (!id) return\n        if (!orgId || !tenantId) {\n          try {\n            const db = (em as any).getKysely()\n            const table = resolveEntityTableName(em, entityType)\n            const row = await db\n              .selectFrom(table as any)\n              .select(['organization_id' as any, 'tenant_id' as any])\n              .where('id' as any, '=', id)\n              .executeTakeFirst() as { organization_id: string | null; tenant_id: string | null } | undefined\n            orgId = row?.organization_id ?? orgId\n            tenantId = row?.tenant_id ?? tenantId\n          } catch {}\n        }\n        // Optional: only index when custom field definitions exist for this entity (org/global)\n        try {\n          const db = (em as any).getKysely()\n          let cfQuery = db\n            .selectFrom('custom_field_defs' as any)\n            .select(['id' as any])\n            .where('entity_id' as any, '=', entityType)\n            .where('is_active' as any, '=', true)\n          if (orgId != null) {\n            cfQuery = cfQuery.where((eb: any) => eb.or([\n              eb('organization_id' as any, '=', orgId),\n              eb('organization_id' as any, 'is', null),\n            ]))\n          } else {\n            cfQuery = cfQuery.where('organization_id' as any, 'is', null as any)\n          }\n          if (tenantId != null) {\n            cfQuery = cfQuery.where((eb: any) => eb.or([\n              eb('tenant_id' as any, '=', tenantId),\n              eb('tenant_id' as any, 'is', null),\n            ]))\n          } else {\n            cfQuery = cfQuery.where('tenant_id' as any, 'is', null as any)\n          }\n          const hasCf = await cfQuery.executeTakeFirst()\n          if (!hasCf) return\n        } catch {}\n        try {\n          const bus = ctx.resolve('eventBus') as any\n          await bus.emitEvent('query_index.upsert_one', { entityType, recordId: id, organizationId: orgId, tenantId })\n        } catch {}\n      } catch {}\n    }\n    const makeDeleteHandler = (entityType: string) => async (payload: any, ctx: any) => {\n      try {\n        const em = ctx.resolve('em')\n        let orgId = payload?.organizationId || payload?.orgId || ctx?.organizationId || null\n        let tenantId = payload?.tenantId || ctx?.tenantId || null\n        const id = String(payload?.id || payload?.recordId || '')\n        if (!id) return\n        if (!orgId || !tenantId) {\n          try {\n            const db = (em as any).getKysely()\n            const table = resolveEntityTableName(em, entityType)\n            const row = await db\n              .selectFrom(table as any)\n              .select(['organization_id' as any, 'tenant_id' as any])\n              .where('id' as any, '=', id)\n              .executeTakeFirst() as { organization_id: string | null; tenant_id: string | null } | undefined\n            orgId = row?.organization_id ?? orgId\n            tenantId = row?.tenant_id ?? tenantId\n          } catch {}\n        }\n        try {\n          const bus = ctx.resolve('eventBus') as any\n          await bus.emitEvent('query_index.delete_one', { entityType, recordId: id, organizationId: orgId, tenantId })\n        } catch {}\n      } catch {}\n    }\n\n    // Build list of entity ids to subscribe to\n    try {\n      const em = (container.resolve('em') as any)\n      const db = (em as any).getKysely()\n      const cfEntityIds: string[] = []\n      db\n        .selectFrom('custom_field_defs' as any)\n        .select(['entity_id' as any])\n        .distinct()\n        .execute()\n        .then((rows: any[]) => {\n          for (const r of rows || []) cfEntityIds.push(String(r.entity_id))\n        })\n        .catch(() => {})\n        .finally(() => {\n          const proceed = (ids: string[]) => {\n            for (const entityType of Array.from(new Set(ids))) {\n              const [mod, ent] = entityType.split(':')\n              if (!mod || !ent) continue\n              bus.on(`${mod}.${ent}.created`, makeUpsertHandler(entityType))\n              bus.on(`${mod}.${ent}.updated`, makeUpsertHandler(entityType))\n              bus.on(`${mod}.${ent}.deleted`, makeDeleteHandler(entityType))\n            }\n          }\n          if (cfEntityIds.length > 0) {\n            proceed(cfEntityIds)\n          } else {\n            // Fallback to generated entity ids without await\n          import('#generated/entities.ids.generated').then((core) => {\n              const flatten = (E: any): string[] => Object.values(E || {}).flatMap((o: any) => Object.values(o || {}) as string[])\n              const guesses = new Set<string>([...flatten((core as any).E)])\n              proceed(Array.from(guesses))\n            }).catch(() => {})\n          }\n        })\n    } catch {}\n  }\n\n  try { setup() } catch {}\n}\n"],
+  "mappings": "AACA,SAAS,kBAAkB,8BAA8B;AACzD,SAAS,yBAAyB;AAKlC,SAAS,sBAAsB,OAA8B;AAE3D,QAAM,QAAQ,MAAM,MAAM,GAAG;AAC7B,MAAI,MAAM,WAAW,EAAG,QAAO;AAC/B,QAAM,CAAC,KAAK,GAAG,IAAI;AACnB,SAAO,GAAG,GAAG,IAAI,GAAG;AACtB;AAEO,SAAS,SAAS,WAAyB;AAEhD,MAAI;AACF,UAAM,KAAM,UAAU,QAAQ,IAAI;AAClC,UAAM,QAAQ,IAAI;AAAA,MAChB;AAAA,MACA;AAAA,MACA,MAAM;AACJ,YAAI;AACF,iBAAO,UAAU,QAAQ,yBAAyB;AAAA,QACpD,QAAQ;AACN,iBAAO;AAAA,QACT;AAAA,MACF;AAAA,IACF;AACA,UAAM,SAAS,IAAI;AAAA,MACjB;AAAA,MACA;AAAA,MACA,MAAM;AACJ,YAAI;AACF,iBAAQ,UAAU,QAAQ,UAAU;AAAA,QACtC,QAAQ;AACN,iBAAO;AAAA,QACT;AAAA,MACF;AAAA,MACA,MAAM;AACJ,YAAI;AACF,iBAAQ,UAAU,QAAQ,oBAAoB;AAAA,QAChD,QAAQ;AACN,iBAAO;AAAA,QACT;AAAA,MACF;AAAA,MACA,MAAM;AACJ,YAAI;AACF,iBAAO,UAAU,QAAQ,yBAAyB;AAAA,QACpD,QAAQ;AACN,iBAAO;AAAA,QACT;AAAA,MACF;AAAA,IACF;AAEC,IAAC,UAAkB,SAAS,EAAE,aAAa,EAAE,SAAS,MAAM,OAAO,EAAE,CAAC;AAAA,EACzE,QAAQ;AAAA,EAAC;AAGT,QAAM,QAAQ,MAAM;AAClB,QAAI;AACJ,QAAI;AAAE,YAAO,UAAU,QAAQ,UAAU;AAAA,IAAU,QAAQ;AAAE,YAAM;AAAA,IAAK;AACxE,QAAI,CAAC,KAAK;AAAE,iBAAW,OAAO,CAAC;AAAG;AAAA,IAAO;AAEzC,UAAM,oBAAoB,CAAC,eAAuB,OAAO,SAAc,QAAa;AAClF,UAAI;AACF,cAAM,KAAK,IAAI,QAAQ,IAAI;AAC3B,YAAI,QAAQ,SAAS,kBAAkB,SAAS,SAAS,KAAK,kBAAkB;AAChF,YAAI,WAAW,SAAS,YAAY,KAAK,YAAY;AACrD,cAAM,KAAK,OAAO,SAAS,MAAM,SAAS,YAAY,EAAE;AACxD,YAAI,CAAC,GAAI;AACT,YAAI,CAAC,SAAS,CAAC,UAAU;AACvB,cAAI;AACF,kBAAM,KAAM,GAAW,UAAU;AACjC,kBAAM,QAAQ,uBAAuB,IAAI,UAAU;AACnD,kBAAM,MAAM,MAAM,GACf,WAAW,KAAY,EACvB,OAAO,CAAC,mBAA0B,WAAkB,CAAC,EACrD,MAAM,MAAa,KAAK,EAAE,EAC1B,iBAAiB;AACpB,oBAAQ,KAAK,mBAAmB;AAChC,uBAAW,KAAK,aAAa;AAAA,UAC/B,QAAQ;AAAA,UAAC;AAAA,QACX;AAEA,YAAI;AACF,gBAAM,KAAM,GAAW,UAAU;AACjC,cAAI,UAAU,GACX,WAAW,mBAA0B,EACrC,OAAO,CAAC,IAAW,CAAC,EACpB,MAAM,aAAoB,KAAK,UAAU,EACzC,MAAM,aAAoB,KAAK,IAAI;AACtC,cAAI,SAAS,MAAM;AACjB,sBAAU,QAAQ,MAAM,CAAC,OAAY,GAAG,GAAG;AAAA,cACzC,GAAG,mBAA0B,KAAK,KAAK;AAAA,cACvC,GAAG,mBAA0B,MAAM,IAAI;AAAA,YACzC,CAAC,CAAC;AAAA,UACJ,OAAO;AACL,sBAAU,QAAQ,MAAM,mBAA0B,MAAM,IAAW;AAAA,UACrE;AACA,cAAI,YAAY,MAAM;AACpB,sBAAU,QAAQ,MAAM,CAAC,OAAY,GAAG,GAAG;AAAA,cACzC,GAAG,aAAoB,KAAK,QAAQ;AAAA,cACpC,GAAG,aAAoB,MAAM,IAAI;AAAA,YACnC,CAAC,CAAC;AAAA,UACJ,OAAO;AACL,sBAAU,QAAQ,MAAM,aAAoB,MAAM,IAAW;AAAA,UAC/D;AACA,gBAAM,QAAQ,MAAM,QAAQ,iBAAiB;AAC7C,cAAI,CAAC,MAAO;AAAA,QACd,QAAQ;AAAA,QAAC;AACT,YAAI;AACF,gBAAMA,OAAM,IAAI,QAAQ,UAAU;AAClC,gBAAMA,KAAI,UAAU,0BAA0B,EAAE,YAAY,UAAU,IAAI,gBAAgB,OAAO,SAAS,CAAC;AAAA,QAC7G,QAAQ;AAAA,QAAC;AAAA,MACX,QAAQ;AAAA,MAAC;AAAA,IACX;AACA,UAAM,oBAAoB,CAAC,eAAuB,OAAO,SAAc,QAAa;AAClF,UAAI;AACF,cAAM,KAAK,IAAI,QAAQ,IAAI;AAC3B,YAAI,QAAQ,SAAS,kBAAkB,SAAS,SAAS,KAAK,kBAAkB;AAChF,YAAI,WAAW,SAAS,YAAY,KAAK,YAAY;AACrD,cAAM,KAAK,OAAO,SAAS,MAAM,SAAS,YAAY,EAAE;AACxD,YAAI,CAAC,GAAI;AACT,YAAI,CAAC,SAAS,CAAC,UAAU;AACvB,cAAI;AACF,kBAAM,KAAM,GAAW,UAAU;AACjC,kBAAM,QAAQ,uBAAuB,IAAI,UAAU;AACnD,kBAAM,MAAM,MAAM,GACf,WAAW,KAAY,EACvB,OAAO,CAAC,mBAA0B,WAAkB,CAAC,EACrD,MAAM,MAAa,KAAK,EAAE,EAC1B,iBAAiB;AACpB,oBAAQ,KAAK,mBAAmB;AAChC,uBAAW,KAAK,aAAa;AAAA,UAC/B,QAAQ;AAAA,UAAC;AAAA,QACX;AACA,YAAI;AACF,gBAAMA,OAAM,IAAI,QAAQ,UAAU;AAClC,gBAAMA,KAAI,UAAU,0BAA0B,EAAE,YAAY,UAAU,IAAI,gBAAgB,OAAO,SAAS,CAAC;AAAA,QAC7G,QAAQ;AAAA,QAAC;AAAA,MACX,QAAQ;AAAA,MAAC;AAAA,IACX;AAGA,QAAI;AACF,YAAM,KAAM,UAAU,QAAQ,IAAI;AAClC,YAAM,KAAM,GAAW,UAAU;AACjC,YAAM,cAAwB,CAAC;AAC/B,SACG,WAAW,mBAA0B,EACrC,OAAO,CAAC,WAAkB,CAAC,EAC3B,SAAS,EACT,QAAQ,EACR,KAAK,CAAC,SAAgB;AACrB,mBAAW,KAAK,QAAQ,CAAC,EAAG,aAAY,KAAK,OAAO,EAAE,SAAS,CAAC;AAAA,MAClE,CAAC,EACA,MAAM,MAAM;AAAA,MAAC,CAAC,EACd,QAAQ,MAAM;AACb,cAAM,UAAU,CAAC,QAAkB;AACjC,qBAAW,cAAc,MAAM,KAAK,IAAI,IAAI,GAAG,CAAC,GAAG;AACjD,kBAAM,CAAC,KAAK,GAAG,IAAI,WAAW,MAAM,GAAG;AACvC,gBAAI,CAAC,OAAO,CAAC,IAAK;AAClB,gBAAI,GAAG,GAAG,GAAG,IAAI,GAAG,YAAY,kBAAkB,UAAU,CAAC;AAC7D,gBAAI,GAAG,GAAG,GAAG,IAAI,GAAG,YAAY,kBAAkB,UAAU,CAAC;AAC7D,gBAAI,GAAG,GAAG,GAAG,IAAI,GAAG,YAAY,kBAAkB,UAAU,CAAC;AAAA,UAC/D;AAAA,QACF;AACA,YAAI,YAAY,SAAS,GAAG;AAC1B,kBAAQ,WAAW;AAAA,QACrB,OAAO;AAEP,iBAAO,mCAAmC,EAAE,KAAK,CAAC,SAAS;AACvD,kBAAM,UAAU,CAAC,MAAqB,OAAO,OAAO,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,MAAW,OAAO,OAAO,KAAK,CAAC,CAAC,CAAa;AACnH,kBAAM,UAAU,oBAAI,IAAY,CAAC,GAAG,QAAS,KAAa,CAAC,CAAC,CAAC;AAC7D,oBAAQ,MAAM,KAAK,OAAO,CAAC;AAAA,UAC7B,CAAC,EAAE,MAAM,MAAM;AAAA,UAAC,CAAC;AAAA,QACnB;AAAA,MACF,CAAC;AAAA,IACL,QAAQ;AAAA,IAAC;AAAA,EACX;AAEA,MAAI;AAAE,UAAM;AAAA,EAAE,QAAQ;AAAA,EAAC;AACzB;",
   "names": ["bus"]
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@open-mercato/core",
-  "version": "0.6.3-develop.3484.1.1427e58147",
+  "version": "0.6.3-develop.3491.1.4700ef658a",
   "type": "module",
   "main": "./dist/index.js",
   "scripts": {
@@ -242,16 +242,16 @@
     "zod": "^4.4.3"
   },
   "peerDependencies": {
-    "@open-mercato/ai-assistant": "0.6.3-develop.3484.1.1427e58147",
-    "@open-mercato/shared": "0.6.3-develop.3484.1.1427e58147",
-    "@open-mercato/ui": "0.6.3-develop.3484.1.1427e58147",
+    "@open-mercato/ai-assistant": "0.6.3-develop.3491.1.4700ef658a",
+    "@open-mercato/shared": "0.6.3-develop.3491.1.4700ef658a",
+    "@open-mercato/ui": "0.6.3-develop.3491.1.4700ef658a",
     "react": "^19.0.0",
     "react-dom": "^19.0.0"
   },
   "devDependencies": {
-    "@open-mercato/ai-assistant": "0.6.3-develop.3484.1.1427e58147",
-    "@open-mercato/shared": "0.6.3-develop.3484.1.1427e58147",
-    "@open-mercato/ui": "0.6.3-develop.3484.1.1427e58147",
+    "@open-mercato/ai-assistant": "0.6.3-develop.3491.1.4700ef658a",
+    "@open-mercato/shared": "0.6.3-develop.3491.1.4700ef658a",
+    "@open-mercato/ui": "0.6.3-develop.3491.1.4700ef658a",
     "@testing-library/dom": "^10.4.1",
     "@testing-library/jest-dom": "^6.9.1",
     "@testing-library/react": "^16.3.1",

package/src/modules/customers/ai-agents.ts

@@ -373,8 +373,12 @@ const DEAL_ANALYZER_PROMPT_SECTIONS: DealAnalyzerPromptSection[] = [
       '2. customers.update_deal_stage — propose a stage move for a stalled high-value deal.',
       '   The runtime intercepts this via the pending-action gate; do NOT claim the change',
       '   is saved until the mutation-result-card arrives.',
+      '   When moving to a named pipeline stage, first call customers.list_pipeline_stages',
+      '   and pass the matching UUID as toPipelineStageId. Only use toStage for top-level',
+      '   status slugs such as open, won, or lost.',
       'Secondary read tools (use when you need more detail):',
       '- customers.list_deals, customers.get_deal, customers.list_activities',
+      '- customers.list_pipeline_stages',
       '- search.hybrid_search, meta.describe_agent',
     ].join('\n'),
   },
@@ -415,7 +419,10 @@ const DEAL_ANALYZER_PROMPT_SECTIONS: DealAnalyzerPromptSection[] = [
       'Lead with a one-paragraph summary of the deal portfolio health, then emit one',
       'deal card per at-risk deal (sorted by health score ascending). After the cards,',
       'propose exactly one stage move for the highest-value stalled deal and call',
-      'customers.update_deal_stage. Then finish with a short conclusion naming the',
+      'customers.update_deal_stage. If the recommended stage is a pipeline stage label',
+      'rather than a status slug, resolve it with customers.list_pipeline_stages first;',
+      'do not ask the operator to paste a stage id unless no matching stage exists.',
+      'Then finish with a short conclusion naming the',
       'highest-value stalled deal, the recommended move, and the approval status.',
     ].join('\n'),
   },
@@ -431,6 +438,7 @@ function compileDealAnalyzerPrompt(): string {
 const DEAL_ANALYZER_ALLOWED_TOOLS: readonly string[] = [
   'customers.analyze_deals',
   'customers.update_deal_stage',
+  'customers.list_pipeline_stages',
   'customers.list_deals',
   'customers.get_deal',
   'customers.list_activities',
@@ -447,6 +455,7 @@ function buildDealAnalyzerPrepareStep() {
           'customers.list_deals',
           'customers.get_deal',
           'customers.list_activities',
+          'customers.list_pipeline_stages',
           'search.hybrid_search',
           'meta.describe_agent',
           'meta.update_task_plan',

package/src/modules/customers/ai-tools/settings-pack.ts

@@ -26,6 +26,10 @@ function buildScope(ctx: CustomersToolContext, tenantId: string) {
 
 const getSettingsInput = z.object({}).passthrough()
 
+const listPipelineStagesInput = z.object({
+  pipelineId: z.string().uuid().optional().describe('Optional pipeline id to restrict returned stages.'),
+}).passthrough()
+
 const getSettingsTool: CustomersAiToolDefinition = {
   name: 'customers.get_settings',
   displayName: 'Get customers module settings',
@@ -116,6 +120,63 @@ const getSettingsTool: CustomersAiToolDefinition = {
   },
 }
 
-export const settingsAiTools: CustomersAiToolDefinition[] = [getSettingsTool]
+const listPipelineStagesTool: CustomersAiToolDefinition = {
+  name: 'customers.list_pipeline_stages',
+  displayName: 'List customer pipeline stages',
+  description:
+    'Return customer deal pipelines and their pipeline stages, including stage ids. Use this before moving a deal to a named pipeline stage.',
+  inputSchema: listPipelineStagesInput,
+  requiredFeatures: ['customers.pipelines.view'],
+  tags: ['read', 'customers', 'pipelines'],
+  isMutation: false,
+  handler: async (rawInput, ctx) => {
+    const { tenantId } = assertTenantScope(ctx)
+    const input = listPipelineStagesInput.parse(rawInput)
+    const em = resolveEm(ctx)
+    const where: Record<string, unknown> = { tenantId }
+    if (ctx.organizationId) where.organizationId = ctx.organizationId
+    const stageWhere: Record<string, unknown> = { ...where }
+    if (input.pipelineId) stageWhere.pipelineId = input.pipelineId
+    const [pipelines, stages] = await Promise.all([
+      findWithDecryption<CustomerPipeline>(
+        em,
+        CustomerPipeline,
+        where as any,
+        { orderBy: { createdAt: 'asc' } as any } as any,
+        buildScope(ctx, tenantId),
+      ),
+      findWithDecryption<CustomerPipelineStage>(
+        em,
+        CustomerPipelineStage,
+        stageWhere as any,
+        { orderBy: { pipelineId: 'asc', order: 'asc' } as any } as any,
+        buildScope(ctx, tenantId),
+      ),
+    ])
+    return {
+      pipelines: pipelines
+        .filter((row) => row.tenantId === tenantId)
+        .map((row) => ({
+          id: row.id,
+          name: row.name,
+          isDefault: !!row.isDefault,
+          organizationId: row.organizationId ?? null,
+          tenantId: row.tenantId ?? null,
+        })),
+      pipelineStages: stages
+        .filter((row) => row.tenantId === tenantId)
+        .map((row) => ({
+          id: row.id,
+          pipelineId: row.pipelineId,
+          label: row.label,
+          order: row.order,
+          organizationId: row.organizationId ?? null,
+          tenantId: row.tenantId ?? null,
+        })),
+    }
+  },
+}
+
+export const settingsAiTools: CustomersAiToolDefinition[] = [getSettingsTool, listPipelineStagesTool]
 
 export default settingsAiTools

package/src/modules/messages/api/route.ts

@@ -168,13 +168,13 @@ export async function GET(req: Request) {
         eb.selectFrom('attachments')
           .select(sql<number>`1`.as('one'))
           .where('attachments.entity_id', '=', MESSAGE_ATTACHMENT_ENTITY_ID)
-          .whereRef('attachments.record_id', '=', 'm.id')
+          .where(sql<boolean>`attachments.record_id = m.id::text`)
       )
       const notExistsFn = (eb: any) => eb.not(eb.exists(
         eb.selectFrom('attachments')
           .select(sql<number>`1`.as('one'))
           .where('attachments.entity_id', '=', MESSAGE_ATTACHMENT_ENTITY_ID)
-          .whereRef('attachments.record_id', '=', 'm.id')
+          .where(sql<boolean>`attachments.record_id = m.id::text`)
       ))
       q = input.hasAttachments ? q.where(existsFn) : q.where(notExistsFn)
     }

package/src/modules/messages/data/validators.ts

@@ -1,4 +1,5 @@
 import { z } from 'zod'
+import { parseBooleanFlag } from '@open-mercato/shared/lib/boolean'
 
 function collectDuplicateRecipientIds(
   recipients: Array<{ userId: string }>,
@@ -178,8 +179,8 @@ export const updateDraftSchema = z.object({
   externalEmail: z.string().email().optional(),
   externalName: z.string().min(1).max(255).optional(),
   recipients: z.array(messageRecipientSchema).optional(),
-  subject: z.string().min(1).max(500).optional(),
-  body: z.string().min(1).max(50000).optional(),
+  subject: z.string().max(500).optional(),
+  body: z.string().max(50000).optional(),
   bodyFormat: z.enum(['text', 'markdown']).optional(),
   priority: z.enum(['low', 'normal', 'high', 'urgent']).optional(),
   objects: z.array(messageObjectSchema).optional(),
@@ -210,9 +211,9 @@ export const listMessagesSchema = z.object({
   sourceEntityType: z.string().optional(),
   sourceEntityId: z.string().uuid().optional(),
   externalEmail: z.string().email().optional(),
-  hasObjects: z.coerce.boolean().optional(),
-  hasAttachments: z.coerce.boolean().optional(),
-  hasActions: z.coerce.boolean().optional(),
+  hasObjects: z.string().transform(parseBooleanFlag).optional(),
+  hasAttachments: z.string().transform(parseBooleanFlag).optional(),
+  hasActions: z.string().transform(parseBooleanFlag).optional(),
   senderId: z.string().uuid().optional(),
   search: z.string().max(200).optional(),
   since: z.string().datetime().optional(),

package/src/modules/query_index/di.ts

@@ -66,8 +66,8 @@ export function register(container: AppContainer) {
     const makeUpsertHandler = (entityType: string) => async (payload: any, ctx: any) => {
       try {
         const em = ctx.resolve('em')
-        let orgId = payload?.organizationId || payload?.orgId || null
-        let tenantId = payload?.tenantId || null
+        let orgId = payload?.organizationId || payload?.orgId || ctx?.organizationId || null
+        let tenantId = payload?.tenantId || ctx?.tenantId || null
         const id = String(payload?.id || payload?.recordId || '')
         if (!id) return
         if (!orgId || !tenantId) {
@@ -119,24 +119,26 @@ export function register(container: AppContainer) {
     const makeDeleteHandler = (entityType: string) => async (payload: any, ctx: any) => {
       try {
         const em = ctx.resolve('em')
-        let orgId = payload?.organizationId || payload?.orgId || null
+        let orgId = payload?.organizationId || payload?.orgId || ctx?.organizationId || null
+        let tenantId = payload?.tenantId || ctx?.tenantId || null
         const id = String(payload?.id || payload?.recordId || '')
         if (!id) return
-        if (!orgId) {
+        if (!orgId || !tenantId) {
           try {
             const db = (em as any).getKysely()
             const table = resolveEntityTableName(em, entityType)
             const row = await db
               .selectFrom(table as any)
-              .select(['organization_id' as any])
+              .select(['organization_id' as any, 'tenant_id' as any])
               .where('id' as any, '=', id)
-              .executeTakeFirst() as { organization_id: string | null } | undefined
+              .executeTakeFirst() as { organization_id: string | null; tenant_id: string | null } | undefined
             orgId = row?.organization_id ?? orgId
+            tenantId = row?.tenant_id ?? tenantId
           } catch {}
         }
         try {
           const bus = ctx.resolve('eventBus') as any
-          await bus.emitEvent('query_index.delete_one', { entityType, recordId: id, organizationId: orgId })
+          await bus.emitEvent('query_index.delete_one', { entityType, recordId: id, organizationId: orgId, tenantId })
         } catch {}
       } catch {}
     }