@open-mercato/core 0.6.4-develop.4371.1.8f3030407e → 0.6.4

package/dist/modules/communication_channels/lib/send-as-user.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/communication_channels/lib/send-as-user.ts"],
+  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport type { AppContainer } from '@open-mercato/shared/lib/di/container'\nimport type { CommandBus } from '@open-mercato/shared/lib/commands'\nimport { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport {\n  ChannelThreadMapping,\n  CommunicationChannel,\n  ExternalConversation,\n  MessageChannelLink,\n} from '../data/entities'\nimport { ChannelMutationBlockedError, guardOutboundCreate } from './mutation-guards'\nimport { COMMUNICATION_CHANNELS_QUEUES, getCommunicationChannelsQueue } from './queue'\nimport type { OutboundDeliveryPayload } from '../workers/outbound-delivery'\nimport { htmlToText } from './email-mime'\n\nexport type SendAsUserActor = {\n  userId: string\n  tenantId: string\n  organizationId: string | null\n  /** Forwarded as the messages compose command `ctx.auth`. */\n  auth?: unknown\n}\n\nexport type SendAsUserInput = {\n  userChannelId: string\n  to: string[]\n  cc?: string[]\n  bcc?: string[]\n  subject: string\n  body: { plain?: string; html?: string }\n  inReplyTo?: string\n  references?: string[]\n  /**\n   * Open Mercato `messages.message` id of the message being replied to. When\n   * set, the composed message joins that message's thread (the messages module\n   * derives `threadId` from the parent), so a CRM reply continues the existing\n   * conversation instead of starting a new thread. Optional \u2014 omitted for new\n   * threads.\n   */\n  parentMessageId?: string\n  /**\n   * Free-form metadata persisted on the resulting MessageChannelLink. Used by\n   * downstream subscribers (e.g. the customers module's link-channel-message\n   * subscriber) to anchor the sent message back to a CRM Person or honor a\n   * caller-specified visibility flag. The hub does not interpret these keys.\n   */\n  channelMetadata?: Record<string, unknown>\n}\n\nexport type SendAsUserResult =\n  | {\n      ok: true\n      messageId: string\n      threadId: string\n      channelId: string\n      providerKey: string\n    }\n  | { ok: false; status: number; error: string; fieldErrors?: Record<string, string> }\n\n/**\n * In-process send-as-user facade.\n *\n * Validates the actor owns `userChannelId`, composes the Message via the\n * messages module command, persists the outbound MessageChannelLink + thread\n * mapping, and enqueues delivery. Returns a discriminated result instead of an\n * HTTP Response so it can be invoked both by the `/send-as-user` route and by\n * other modules via DI (`container.resolve('communicationChannelsSendAsUser')`)\n * \u2014 no HTTP self-call required.\n */\nexport async function sendAsUser(\n  container: AppContainer,\n  actor: SendAsUserActor,\n  input: SendAsUserInput,\n): Promise<SendAsUserResult> {\n  if (!input.body.plain && !input.body.html) {\n    return { ok: false, status: 422, error: 'Either body.plain or body.html is required' }\n  }\n  // Re-validate here (not only in the HTTP route's zod schema) because this\n  // facade is also reachable via DI; `input.to[0]` below would otherwise become\n  // `undefined` for an empty recipient list.\n  if (!Array.isArray(input.to) || input.to.length === 0) {\n    return { ok: false, status: 422, error: 'At least one recipient is required' }\n  }\n\n  const em = (container.resolve('em') as EntityManager).fork()\n  const { tenantId } = actor\n  const organizationId = actor.organizationId\n  const dscope = { tenantId, organizationId }\n\n  const channel = await findOneWithDecryption(\n    em,\n    CommunicationChannel,\n    { id: input.userChannelId, tenantId, organizationId, deletedAt: null },\n    undefined,\n    dscope,\n  )\n  if (!channel) return { ok: false, status: 404, error: 'Channel not found' }\n  if (channel.userId !== actor.userId) {\n    return { ok: false, status: 403, error: 'You can only send through channels you own' }\n  }\n\n  // Hub mutation guard: map known non-deliverable states (`requires_reauth`,\n  // `disconnected`) to a 422 with field-level errors; other transitional states\n  // fall through to the 409 below.\n  try {\n    await guardOutboundCreate(em, { channelId: channel.id, scope: dscope })\n  } catch (err) {\n    if (err instanceof ChannelMutationBlockedError) {\n      return { ok: false, status: 422, error: err.message, fieldErrors: err.errors }\n    }\n    throw err\n  }\n  if (!channel.isActive || channel.status !== 'connected') {\n    return {\n      ok: false,\n      status: 409,\n      error: `Channel is in status '${channel.status}' (not connected)`,\n    }\n  }\n\n  // Create the Message via the messages module compose command. The outbound\n  // subscriber picks it up via `messages.message.sent` and routes through the\n  // adapter chain.\n  const commandBus = container.resolve('commandBus') as CommandBus\n  const messageBody = input.body.plain ?? htmlToText(input.body.html ?? '')\n  const composeInput = {\n    type: `channel.${channel.providerKey}`,\n    visibility: 'public' as const,\n    sourceEntityType: 'communication_channels.send_as_user',\n    sourceEntityId: channel.id,\n    externalEmail: input.to[0],\n    externalName: input.subject,\n    recipients: [],\n    subject: input.subject,\n    body: messageBody,\n    bodyFormat: 'text' as const,\n    priority: 'normal' as const,\n    sendViaEmail: false,\n    parentMessageId: input.parentMessageId,\n    isDraft: false,\n    tenantId,\n    organizationId,\n    userId: actor.userId,\n  }\n  let result\n  try {\n    result = await commandBus.execute<typeof composeInput, { id: string; threadId: string | null }>(\n      'messages.messages.compose',\n      {\n        input: composeInput,\n        ctx: {\n          container,\n          auth: actor.auth as never,\n          organizationScope: null,\n          selectedOrganizationId: organizationId,\n          organizationIds: organizationId ? [organizationId] : null,\n        },\n      },\n    )\n  } catch (err) {\n    console.error('[communication_channels] send-as-user compose failed', err)\n    return { ok: false, status: 500, error: '[internal] compose failed' }\n  }\n\n  const messageId = result.result.id\n  const messageThreadId = result.result.threadId ?? messageId\n  const externalThreadRef = `outbound:${messageThreadId}`\n\n  // Persist the conversation, thread mapping, and channel link as one unit. The\n  // conversation's id is DB-generated (`gen_random_uuid()`), so it must be\n  // flushed before the mapping/link can reference it \u2014 hence the eager flushes\n  // rather than `withAtomicFlush` (single trailing flush). `em.transactional`\n  // wraps the whole sequence so a mid-way failure rolls back all three writes\n  // instead of leaving an orphaned conversation row.\n  await em.transactional(async () => {\n    let conversation = await findOneWithDecryption(\n      em,\n      ExternalConversation,\n      {\n        channelId: channel.id,\n        externalConversationId: externalThreadRef,\n        tenantId,\n        organizationId,\n      },\n      undefined,\n      dscope,\n    )\n    if (!conversation) {\n      conversation = em.create(ExternalConversation, {\n        channelId: channel.id,\n        externalConversationId: externalThreadRef,\n        subject: input.subject,\n        assignedUserId: actor.userId,\n        tenantId,\n        organizationId,\n        lastMessageAt: new Date(),\n      })\n      em.persist(conversation)\n      await em.flush()\n    } else {\n      conversation.subject = conversation.subject ?? input.subject\n      conversation.assignedUserId = conversation.assignedUserId ?? actor.userId\n      conversation.lastMessageAt = new Date()\n      // Flush the scalar updates BEFORE the ChannelThreadMapping lookup below: a\n      // find/findOne on the same EntityManager between a scalar mutation and flush\n      // can silently drop the pending UPDATE (core AGENTS.md \u2192 Entity Update Safety).\n      await em.flush()\n    }\n\n    const existingMapping = await findOneWithDecryption(\n      em,\n      ChannelThreadMapping,\n      {\n        externalConversationId: conversation.id,\n        tenantId,\n        organizationId,\n      },\n      undefined,\n      dscope,\n    )\n    if (!existingMapping) {\n      const mapping = em.create(ChannelThreadMapping, {\n        externalConversationId: conversation.id,\n        messageThreadId,\n        channelId: channel.id,\n        providerKey: channel.providerKey,\n        externalThreadRef,\n        assignedUserId: actor.userId,\n        tenantId,\n        organizationId,\n      })\n      em.persist(mapping)\n    }\n\n    const channelLink = em.create(MessageChannelLink, {\n      messageId,\n      externalConversationId: conversation.id,\n      providerKey: channel.providerKey,\n      channelType: channel.channelType,\n      direction: 'outbound',\n      deliveryStatus: 'pending',\n      channelPayload: {\n        text: input.body.plain ?? messageBody,\n        ...(input.body.html ? { html: input.body.html } : {}),\n      },\n      channelContentType: input.body.html ? 'text/html' : 'text/plain',\n      channelMetadata: {\n        // Caller-supplied pass-through metadata merged FIRST so the validated\n        // routing fields below always win \u2014 a caller cannot override the\n        // recipients/subject/threading headers via `channelMetadata`.\n        ...(input.channelMetadata ?? {}),\n        to: input.to,\n        cc: input.cc ?? [],\n        bcc: input.bcc ?? [],\n        subject: input.subject,\n        inReplyTo: input.inReplyTo ?? null,\n        references: input.references ?? [],\n      },\n      tenantId,\n      organizationId,\n    })\n    em.persist(channelLink)\n    await em.flush()\n  })\n\n  const queue = getCommunicationChannelsQueue(COMMUNICATION_CHANNELS_QUEUES.outbound)\n  const deliveryJob: OutboundDeliveryPayload = {\n    messageId,\n    scope: dscope,\n    attempt: 1,\n  }\n  await queue.enqueue(deliveryJob as unknown as Record<string, unknown>)\n\n  return {\n    ok: true,\n    messageId,\n    threadId: messageThreadId,\n    channelId: channel.id,\n    providerKey: channel.providerKey,\n  }\n}\n\n/** DI service type for cross-module callers (resolve `communicationChannelsSendAsUser`). */\nexport type SendAsUserService = typeof sendAsUser\n"],
+  "mappings": "AAGA,SAAS,6BAA6B;AACtC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,6BAA6B,2BAA2B;AACjE,SAAS,+BAA+B,qCAAqC;AAE7E,SAAS,kBAAkB;AAwD3B,eAAsB,WACpB,WACA,OACA,OAC2B;AAC3B,MAAI,CAAC,MAAM,KAAK,SAAS,CAAC,MAAM,KAAK,MAAM;AACzC,WAAO,EAAE,IAAI,OAAO,QAAQ,KAAK,OAAO,6CAA6C;AAAA,EACvF;AAIA,MAAI,CAAC,MAAM,QAAQ,MAAM,EAAE,KAAK,MAAM,GAAG,WAAW,GAAG;AACrD,WAAO,EAAE,IAAI,OAAO,QAAQ,KAAK,OAAO,qCAAqC;AAAA,EAC/E;AAEA,QAAM,KAAM,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC3D,QAAM,EAAE,SAAS,IAAI;AACrB,QAAM,iBAAiB,MAAM;AAC7B,QAAM,SAAS,EAAE,UAAU,eAAe;AAE1C,QAAM,UAAU,MAAM;AAAA,IACpB;AAAA,IACA;AAAA,IACA,EAAE,IAAI,MAAM,eAAe,UAAU,gBAAgB,WAAW,KAAK;AAAA,IACrE;AAAA,IACA;AAAA,EACF;AACA,MAAI,CAAC,QAAS,QAAO,EAAE,IAAI,OAAO,QAAQ,KAAK,OAAO,oBAAoB;AAC1E,MAAI,QAAQ,WAAW,MAAM,QAAQ;AACnC,WAAO,EAAE,IAAI,OAAO,QAAQ,KAAK,OAAO,6CAA6C;AAAA,EACvF;AAKA,MAAI;AACF,UAAM,oBAAoB,IAAI,EAAE,WAAW,QAAQ,IAAI,OAAO,OAAO,CAAC;AAAA,EACxE,SAAS,KAAK;AACZ,QAAI,eAAe,6BAA6B;AAC9C,aAAO,EAAE,IAAI,OAAO,QAAQ,KAAK,OAAO,IAAI,SAAS,aAAa,IAAI,OAAO;AAAA,IAC/E;AACA,UAAM;AAAA,EACR;AACA,MAAI,CAAC,QAAQ,YAAY,QAAQ,WAAW,aAAa;AACvD,WAAO;AAAA,MACL,IAAI;AAAA,MACJ,QAAQ;AAAA,MACR,OAAO,yBAAyB,QAAQ,MAAM;AAAA,IAChD;AAAA,EACF;AAKA,QAAM,aAAa,UAAU,QAAQ,YAAY;AACjD,QAAM,cAAc,MAAM,KAAK,SAAS,WAAW,MAAM,KAAK,QAAQ,EAAE;AACxE,QAAM,eAAe;AAAA,IACnB,MAAM,WAAW,QAAQ,WAAW;AAAA,IACpC,YAAY;AAAA,IACZ,kBAAkB;AAAA,IAClB,gBAAgB,QAAQ;AAAA,IACxB,eAAe,MAAM,GAAG,CAAC;AAAA,IACzB,cAAc,MAAM;AAAA,IACpB,YAAY,CAAC;AAAA,IACb,SAAS,MAAM;AAAA,IACf,MAAM;AAAA,IACN,YAAY;AAAA,IACZ,UAAU;AAAA,IACV,cAAc;AAAA,IACd,iBAAiB,MAAM;AAAA,IACvB,SAAS;AAAA,IACT;AAAA,IACA;AAAA,IACA,QAAQ,MAAM;AAAA,EAChB;AACA,MAAI;AACJ,MAAI;AACF,aAAS,MAAM,WAAW;AAAA,MACxB;AAAA,MACA;AAAA,QACE,OAAO;AAAA,QACP,KAAK;AAAA,UACH;AAAA,UACA,MAAM,MAAM;AAAA,UACZ,mBAAmB;AAAA,UACnB,wBAAwB;AAAA,UACxB,iBAAiB,iBAAiB,CAAC,cAAc,IAAI;AAAA,QACvD;AAAA,MACF;AAAA,IACF;AAAA,EACF,SAAS,KAAK;AACZ,YAAQ,MAAM,wDAAwD,GAAG;AACzE,WAAO,EAAE,IAAI,OAAO,QAAQ,KAAK,OAAO,4BAA4B;AAAA,EACtE;AAEA,QAAM,YAAY,OAAO,OAAO;AAChC,QAAM,kBAAkB,OAAO,OAAO,YAAY;AAClD,QAAM,oBAAoB,YAAY,eAAe;AAQrD,QAAM,GAAG,cAAc,YAAY;AACjC,QAAI,eAAe,MAAM;AAAA,MACvB;AAAA,MACA;AAAA,MACA;AAAA,QACE,WAAW,QAAQ;AAAA,QACnB,wBAAwB;AAAA,QACxB;AAAA,QACA;AAAA,MACF;AAAA,MACA;AAAA,MACA;AAAA,IACF;AACA,QAAI,CAAC,cAAc;AACjB,qBAAe,GAAG,OAAO,sBAAsB;AAAA,QAC7C,WAAW,QAAQ;AAAA,QACnB,wBAAwB;AAAA,QACxB,SAAS,MAAM;AAAA,QACf,gBAAgB,MAAM;AAAA,QACtB;AAAA,QACA;AAAA,QACA,eAAe,oBAAI,KAAK;AAAA,MAC1B,CAAC;AACD,SAAG,QAAQ,YAAY;AACvB,YAAM,GAAG,MAAM;AAAA,IACjB,OAAO;AACL,mBAAa,UAAU,aAAa,WAAW,MAAM;AACrD,mBAAa,iBAAiB,aAAa,kBAAkB,MAAM;AACnE,mBAAa,gBAAgB,oBAAI,KAAK;AAItC,YAAM,GAAG,MAAM;AAAA,IACjB;AAEA,UAAM,kBAAkB,MAAM;AAAA,MAC5B;AAAA,MACA;AAAA,MACA;AAAA,QACE,wBAAwB,aAAa;AAAA,QACrC;AAAA,QACA;AAAA,MACF;AAAA,MACA;AAAA,MACA;AAAA,IACF;AACA,QAAI,CAAC,iBAAiB;AACpB,YAAM,UAAU,GAAG,OAAO,sBAAsB;AAAA,QAC9C,wBAAwB,aAAa;AAAA,QACrC;AAAA,QACA,WAAW,QAAQ;AAAA,QACnB,aAAa,QAAQ;AAAA,QACrB;AAAA,QACA,gBAAgB,MAAM;AAAA,QACtB;AAAA,QACA;AAAA,MACF,CAAC;AACD,SAAG,QAAQ,OAAO;AAAA,IACpB;AAEA,UAAM,cAAc,GAAG,OAAO,oBAAoB;AAAA,MAChD;AAAA,MACA,wBAAwB,aAAa;AAAA,MACrC,aAAa,QAAQ;AAAA,MACrB,aAAa,QAAQ;AAAA,MACrB,WAAW;AAAA,MACX,gBAAgB;AAAA,MAChB,gBAAgB;AAAA,QACd,MAAM,MAAM,KAAK,SAAS;AAAA,QAC1B,GAAI,MAAM,KAAK,OAAO,EAAE,MAAM,MAAM,KAAK,KAAK,IAAI,CAAC;AAAA,MACrD;AAAA,MACA,oBAAoB,MAAM,KAAK,OAAO,cAAc;AAAA,MACpD,iBAAiB;AAAA;AAAA;AAAA;AAAA,QAIf,GAAI,MAAM,mBAAmB,CAAC;AAAA,QAC9B,IAAI,MAAM;AAAA,QACV,IAAI,MAAM,MAAM,CAAC;AAAA,QACjB,KAAK,MAAM,OAAO,CAAC;AAAA,QACnB,SAAS,MAAM;AAAA,QACf,WAAW,MAAM,aAAa;AAAA,QAC9B,YAAY,MAAM,cAAc,CAAC;AAAA,MACnC;AAAA,MACA;AAAA,MACA;AAAA,IACF,CAAC;AACD,OAAG,QAAQ,WAAW;AACtB,UAAM,GAAG,MAAM;AAAA,EACjB,CAAC;AAED,QAAM,QAAQ,8BAA8B,8BAA8B,QAAQ;AAClF,QAAM,cAAuC;AAAA,IAC3C;AAAA,IACA,OAAO;AAAA,IACP,SAAS;AAAA,EACX;AACA,QAAM,MAAM,QAAQ,WAAiD;AAErE,SAAO;AAAA,IACL,IAAI;AAAA,IACJ;AAAA,IACA,UAAU;AAAA,IACV,WAAW,QAAQ;AAAA,IACnB,aAAa,QAAQ;AAAA,EACvB;AACF;",
+  "names": []
+}

package/dist/modules/communication_channels/lib/system-user.js

@@ -0,0 +1,22 @@
+const COMMUNICATION_CHANNELS_SYSTEM_USER_ID = "00000000-0000-0000-0000-000000000000";
+function systemUserEmail(tenantId) {
+  return `system+communication_channels@${tenantId}.local`;
+}
+async function resolveCommunicationChannelsSystemUserId(em, tenantId, fallbackId) {
+  try {
+    const expectedEmail = systemUserEmail(tenantId);
+    const qb = em.createQueryBuilder("auth.users", "u");
+    const row = await qb.select(["u.id"]).where({ email: expectedEmail, tenant_id: tenantId }).limit(1).execute("get").catch(() => null);
+    const id = row?.id;
+    if (typeof id === "string" && id.length > 0) return id;
+  } catch {
+  }
+  if (typeof fallbackId === "string" && fallbackId.length > 0) return fallbackId;
+  return COMMUNICATION_CHANNELS_SYSTEM_USER_ID;
+}
+export {
+  COMMUNICATION_CHANNELS_SYSTEM_USER_ID,
+  resolveCommunicationChannelsSystemUserId,
+  systemUserEmail
+};
+//# sourceMappingURL=system-user.js.map

package/dist/modules/communication_channels/lib/system-user.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/communication_channels/lib/system-user.ts"],
+  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\n\n/**\n * Sentinel UUID \u2014 used as a last-resort `senderUserId` for inbound channel\n * messages when no per-tenant system user is available. Matches the pattern\n * in `inbox_ops/lib/messagesIntegration.ts`.\n */\nexport const COMMUNICATION_CHANNELS_SYSTEM_USER_ID = '00000000-0000-0000-0000-000000000000'\n\n/**\n * Configurable email pattern for per-tenant channel-bot users. Implementations\n * (provider packages, onboarding scripts) may create a real `auth.user` row\n * matching this convention so inbound channel messages get a meaningful sender\n * display name in the unified inbox.\n *\n * Format: `system+communication_channels@<tenantId>.local`\n */\nexport function systemUserEmail(tenantId: string): string {\n  return `system+communication_channels@${tenantId}.local`\n}\n\n/**\n * Resolve a tenant-scoped system user id to attribute inbound channel messages to.\n *\n * Lookup order:\n *   1. Per-tenant channel-bot user (by convention email \u2014 see `systemUserEmail`).\n *   2. (Optional, caller-supplied) seed fallback \u2014 a specific override id.\n *   3. Sentinel UUID (`00000000-...`) \u2014 backward-compatible default.\n *\n * The function is fail-soft: when the lookup throws, it falls back to the\n * sentinel. The inbound-processor must never refuse to ingest a message\n * because the channel-bot user doesn't exist.\n *\n * @param em            EntityManager scoped to the tenant.\n * @param tenantId      Tenant id for which to resolve the system user.\n * @param fallbackId    Optional caller-supplied fallback (e.g., the channel's\n *                      assigned user) used when the channel-bot lookup misses.\n */\nexport async function resolveCommunicationChannelsSystemUserId(\n  em: EntityManager,\n  tenantId: string,\n  fallbackId?: string | null,\n): Promise<string> {\n  try {\n    const expectedEmail = systemUserEmail(tenantId)\n    // Untyped QB by design \u2014 the helper is intentionally cross-module\n    // (resolving an `auth.user` from the hub) and must not pull the User\n    // entity class. MikroORM v7's typed builder requires an entity ref;\n    // we keep the lookup table-name-driven so the helper compiles without\n    // a cross-module import. The mocks in `__tests__/system-user.test.ts`\n    // exercise this code path through a duck-typed `createQueryBuilder` stub.\n    type RawQueryBuilder = {\n      select: (fields: string[]) => RawQueryBuilder\n      where: (cond: Record<string, unknown>) => RawQueryBuilder\n      limit: (count: number) => RawQueryBuilder\n      execute: (mode: string) => Promise<unknown>\n    }\n    const qb = (\n      em as unknown as { createQueryBuilder: (table: string, alias: string) => RawQueryBuilder }\n    ).createQueryBuilder('auth.users', 'u')\n    const row = await qb\n      .select(['u.id'])\n      .where({ email: expectedEmail, tenant_id: tenantId })\n      .limit(1)\n      .execute('get')\n      .catch(() => null)\n    const id = (row as { id?: string } | null)?.id\n    if (typeof id === 'string' && id.length > 0) return id\n  } catch {\n    // ignore \u2014 fall through to fallback\n  }\n  if (typeof fallbackId === 'string' && fallbackId.length > 0) return fallbackId\n  return COMMUNICATION_CHANNELS_SYSTEM_USER_ID\n}\n"],
+  "mappings": "AAOO,MAAM,wCAAwC;AAU9C,SAAS,gBAAgB,UAA0B;AACxD,SAAO,iCAAiC,QAAQ;AAClD;AAmBA,eAAsB,yCACpB,IACA,UACA,YACiB;AACjB,MAAI;AACF,UAAM,gBAAgB,gBAAgB,QAAQ;AAa9C,UAAM,KACJ,GACA,mBAAmB,cAAc,GAAG;AACtC,UAAM,MAAM,MAAM,GACf,OAAO,CAAC,MAAM,CAAC,EACf,MAAM,EAAE,OAAO,eAAe,WAAW,SAAS,CAAC,EACnD,MAAM,CAAC,EACP,QAAQ,KAAK,EACb,MAAM,MAAM,IAAI;AACnB,UAAM,KAAM,KAAgC;AAC5C,QAAI,OAAO,OAAO,YAAY,GAAG,SAAS,EAAG,QAAO;AAAA,EACtD,QAAQ;AAAA,EAER;AACA,MAAI,OAAO,eAAe,YAAY,WAAW,SAAS,EAAG,QAAO;AACpE,SAAO;AACT;",
+  "names": []
+}

package/dist/modules/communication_channels/lib/test-seed.js

@@ -0,0 +1,68 @@
+import { baseEmailCapabilities } from "./email-capabilities.js";
+import { hasChannelAdapter, registerChannelAdapter } from "./adapter-registry-singleton.js";
+const TEST_SEED_PROVIDER_KEY = "__test_seed__";
+const TEST_CHANNEL_SEEDING_ENV = "OM_ENABLE_TEST_CHANNEL_SEEDING";
+function isTestChannelSeedingEnabled() {
+  const raw = process.env[TEST_CHANNEL_SEEDING_ENV];
+  if (typeof raw !== "string") return false;
+  return ["1", "true", "yes", "on"].includes(raw.trim().toLowerCase());
+}
+const testSeedCapabilities = {
+  ...baseEmailCapabilities,
+  conversationHistory: false,
+  realtimePush: false
+};
+class TestSeedChannelAdapter {
+  constructor() {
+    this.providerKey = TEST_SEED_PROVIDER_KEY;
+    this.channelType = "email";
+    this.capabilities = testSeedCapabilities;
+  }
+  async sendMessage(input) {
+    const externalMessageId = `test-seed-${Date.now()}-${Math.random().toString(16).slice(2, 10)}@test-seed.local`;
+    return {
+      externalMessageId,
+      conversationId: input.conversationId,
+      status: "sent",
+      metadata: { testSeed: true }
+    };
+  }
+  async verifyWebhook(_input) {
+    return { raw: {}, eventType: "other", metadata: { reason: "test-seed-no-webhook" } };
+  }
+  async getStatus(_input) {
+    return { status: "sent" };
+  }
+  async convertOutbound(input) {
+    return {
+      content: {
+        text: input.body,
+        bodyFormat: input.bodyFormat
+      },
+      metadata: input.channelMetadata ?? {}
+    };
+  }
+  async normalizeInbound(_raw) {
+    throw new Error("[internal] TestSeedChannelAdapter.normalizeInbound is not used by the seed harness");
+  }
+  async validateCredentials(_input) {
+    return { ok: true };
+  }
+}
+let cachedTestSeedAdapter = null;
+function getTestSeedChannelAdapter() {
+  if (!cachedTestSeedAdapter) cachedTestSeedAdapter = new TestSeedChannelAdapter();
+  return cachedTestSeedAdapter;
+}
+function ensureTestSeedAdapterRegistered() {
+  if (!isTestChannelSeedingEnabled()) return;
+  if (hasChannelAdapter(TEST_SEED_PROVIDER_KEY)) return;
+  registerChannelAdapter(getTestSeedChannelAdapter());
+}
+export {
+  TEST_CHANNEL_SEEDING_ENV,
+  TEST_SEED_PROVIDER_KEY,
+  ensureTestSeedAdapterRegistered,
+  isTestChannelSeedingEnabled
+};
+//# sourceMappingURL=test-seed.js.map

package/dist/modules/communication_channels/lib/test-seed.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/communication_channels/lib/test-seed.ts"],
+  "sourcesContent": ["import type {\n  ChannelAdapter,\n  ChannelCapabilities,\n  ChannelNativeContent,\n  ConvertOutboundInput,\n  GetMessageStatusInput,\n  InboundMessage,\n  MessageStatus,\n  NormalizedInboundMessage,\n  SendMessageInput,\n  SendMessageResult,\n  ValidateCredentialsInput,\n  ValidateCredentialsResult,\n  VerifyWebhookInput,\n} from './adapter'\nimport { baseEmailCapabilities } from './email-capabilities'\nimport { hasChannelAdapter, registerChannelAdapter } from './adapter-registry-singleton'\n\n/**\n * Test-only channel seeding support.\n *\n * The ephemeral integration harness cannot connect a REAL email channel:\n *   - IMAP/SMTP `validateCredentials` performs a live LOGIN against a mail server\n *     (none exists in CI), so `POST /channels/connect/credentials` returns 422.\n *   - Even with a connected channel, the outbound delivery worker calls the real\n *     SMTP adapter, which fails with no server \u2014 so `communication_channels.message.sent`\n *     never fires and the customers link subscriber never runs.\n *\n * To make the compose \u2192 deliver \u2192 `.sent` \u2192 CRM-link \u2192 cross-user-visibility chain\n * (TC-CRM-EMAIL-001) and the inbound auto-link chain (TC-CRM-EMAIL-002..005) runnable\n * end-to-end against real Postgres, this module provides a network-free stub adapter\n * that is registered ONLY when `OM_ENABLE_TEST_CHANNEL_SEEDING` is set.\n *\n * Production safety: the registration is gated by {@link isTestChannelSeedingEnabled};\n * when the env flag is unset (the production default) the adapter is never registered\n * and the `__test_seed__` provider key resolves to no adapter \u2014 so the connect route\n * returns 404 `no_adapter` exactly as it would for any unknown provider. The dedicated\n * test-seed API route enforces the same gate independently (fail-closed 404 in prod).\n */\n\n/** Provider key for the network-free test stub adapter. */\nexport const TEST_SEED_PROVIDER_KEY = '__test_seed__'\n\n/** Env flag that unlocks test-only channel seeding. Off in production. */\nexport const TEST_CHANNEL_SEEDING_ENV = 'OM_ENABLE_TEST_CHANNEL_SEEDING'\n\n/**\n * True only when the test-seeding env flag is explicitly enabled. Accepts the\n * usual truthy tokens (`1`, `true`, `yes`, `on`) so the harness can opt in via a\n * plain `=true`. Any other value (including unset) is treated as disabled.\n */\nexport function isTestChannelSeedingEnabled(): boolean {\n  const raw = process.env[TEST_CHANNEL_SEEDING_ENV]\n  if (typeof raw !== 'string') return false\n  return ['1', 'true', 'yes', 'on'].includes(raw.trim().toLowerCase())\n}\n\n/**\n * Capabilities for the stub: an email channel that supports neither reactions,\n * edit/delete, nor conversation history \u2014 so the strict registry validator\n * (`validateAdapterCapabilities`) requires only the core method surface.\n */\nconst testSeedCapabilities: ChannelCapabilities = {\n  ...baseEmailCapabilities,\n  conversationHistory: false,\n  realtimePush: false,\n}\n\n/**\n * A `ChannelAdapter` whose `sendMessage` reports a successful send WITHOUT any\n * network I/O. Used exclusively by the integration harness to let the outbound\n * delivery worker reach its success path and emit `communication_channels.message.sent`.\n */\nclass TestSeedChannelAdapter implements ChannelAdapter {\n  readonly providerKey = TEST_SEED_PROVIDER_KEY\n  readonly channelType = 'email'\n  readonly capabilities = testSeedCapabilities\n\n  async sendMessage(input: SendMessageInput): Promise<SendMessageResult> {\n    // Synthesize a deterministic-looking RFC2822-style message id; never touches\n    // the network. The delivery worker persists this as the external message id.\n    const externalMessageId = `test-seed-${Date.now()}-${Math.random().toString(16).slice(2, 10)}@test-seed.local`\n    return {\n      externalMessageId,\n      conversationId: input.conversationId,\n      status: 'sent',\n      metadata: { testSeed: true },\n    }\n  }\n\n  async verifyWebhook(_input: VerifyWebhookInput): Promise<InboundMessage> {\n    // No real webhook \u2014 return the inert event so the generic webhook route 202s\n    // without enqueuing tenant-scoped work (mirrors the IMAP adapter contract).\n    return { raw: {}, eventType: 'other', metadata: { reason: 'test-seed-no-webhook' } }\n  }\n\n  async getStatus(_input: GetMessageStatusInput): Promise<MessageStatus> {\n    return { status: 'sent' }\n  }\n\n  async convertOutbound(input: ConvertOutboundInput): Promise<ChannelNativeContent> {\n    return {\n      content: {\n        text: input.body,\n        bodyFormat: input.bodyFormat,\n      },\n      metadata: input.channelMetadata ?? {},\n    }\n  }\n\n  async normalizeInbound(_raw: InboundMessage): Promise<NormalizedInboundMessage> {\n    // The test-seed inbound path seeds MessageChannelLink rows directly and emits\n    // the hub event, so this adapter never normalizes a raw inbound payload.\n    throw new Error('[internal] TestSeedChannelAdapter.normalizeInbound is not used by the seed harness')\n  }\n\n  async validateCredentials(_input: ValidateCredentialsInput): Promise<ValidateCredentialsResult> {\n    // No real server to authenticate against \u2014 accept any credentials so the\n    // connect command persists a connected channel.\n    return { ok: true }\n  }\n}\n\nlet cachedTestSeedAdapter: TestSeedChannelAdapter | null = null\n\nfunction getTestSeedChannelAdapter(): TestSeedChannelAdapter {\n  if (!cachedTestSeedAdapter) cachedTestSeedAdapter = new TestSeedChannelAdapter()\n  return cachedTestSeedAdapter\n}\n\n/**\n * Register the test-seed adapter exactly once, but ONLY when the env flag is set.\n * Idempotent and safe to call from every container creation (`di.register`) \u2014 a\n * no-op when seeding is disabled or the adapter is already registered.\n */\nexport function ensureTestSeedAdapterRegistered(): void {\n  if (!isTestChannelSeedingEnabled()) return\n  if (hasChannelAdapter(TEST_SEED_PROVIDER_KEY)) return\n  registerChannelAdapter(getTestSeedChannelAdapter())\n}\n"],
+  "mappings": "AAeA,SAAS,6BAA6B;AACtC,SAAS,mBAAmB,8BAA8B;AAyBnD,MAAM,yBAAyB;AAG/B,MAAM,2BAA2B;AAOjC,SAAS,8BAAuC;AACrD,QAAM,MAAM,QAAQ,IAAI,wBAAwB;AAChD,MAAI,OAAO,QAAQ,SAAU,QAAO;AACpC,SAAO,CAAC,KAAK,QAAQ,OAAO,IAAI,EAAE,SAAS,IAAI,KAAK,EAAE,YAAY,CAAC;AACrE;AAOA,MAAM,uBAA4C;AAAA,EAChD,GAAG;AAAA,EACH,qBAAqB;AAAA,EACrB,cAAc;AAChB;AAOA,MAAM,uBAAiD;AAAA,EAAvD;AACE,SAAS,cAAc;AACvB,SAAS,cAAc;AACvB,SAAS,eAAe;AAAA;AAAA,EAExB,MAAM,YAAY,OAAqD;AAGrE,UAAM,oBAAoB,aAAa,KAAK,IAAI,CAAC,IAAI,KAAK,OAAO,EAAE,SAAS,EAAE,EAAE,MAAM,GAAG,EAAE,CAAC;AAC5F,WAAO;AAAA,MACL;AAAA,MACA,gBAAgB,MAAM;AAAA,MACtB,QAAQ;AAAA,MACR,UAAU,EAAE,UAAU,KAAK;AAAA,IAC7B;AAAA,EACF;AAAA,EAEA,MAAM,cAAc,QAAqD;AAGvE,WAAO,EAAE,KAAK,CAAC,GAAG,WAAW,SAAS,UAAU,EAAE,QAAQ,uBAAuB,EAAE;AAAA,EACrF;AAAA,EAEA,MAAM,UAAU,QAAuD;AACrE,WAAO,EAAE,QAAQ,OAAO;AAAA,EAC1B;AAAA,EAEA,MAAM,gBAAgB,OAA4D;AAChF,WAAO;AAAA,MACL,SAAS;AAAA,QACP,MAAM,MAAM;AAAA,QACZ,YAAY,MAAM;AAAA,MACpB;AAAA,MACA,UAAU,MAAM,mBAAmB,CAAC;AAAA,IACtC;AAAA,EACF;AAAA,EAEA,MAAM,iBAAiB,MAAyD;AAG9E,UAAM,IAAI,MAAM,oFAAoF;AAAA,EACtG;AAAA,EAEA,MAAM,oBAAoB,QAAsE;AAG9F,WAAO,EAAE,IAAI,KAAK;AAAA,EACpB;AACF;AAEA,IAAI,wBAAuD;AAE3D,SAAS,4BAAoD;AAC3D,MAAI,CAAC,sBAAuB,yBAAwB,IAAI,uBAAuB;AAC/E,SAAO;AACT;AAOO,SAAS,kCAAwC;AACtD,MAAI,CAAC,4BAA4B,EAAG;AACpC,MAAI,kBAAkB,sBAAsB,EAAG;AAC/C,yBAAuB,0BAA0B,CAAC;AACpD;",
+  "names": []
+}

package/dist/modules/communication_channels/lib/thread-matcher.js

@@ -0,0 +1,263 @@
+import { findOneWithDecryption } from "@open-mercato/shared/lib/encryption/find";
+import { ChannelThreadMapping, ChannelThreadToken } from "../data/entities.js";
+import { extractTokenFromBody, extractTokenFromHeaders } from "./thread-token.js";
+const SUBJECT_PREFIX_PATTERN = /^\s*((?:re|fwd|fw|aw|wg|sv|tr|antw)\s*[:\-]\s*|\[[^\]]+\]\s*)+/i;
+const PARTICIPANT_LOOKBACK_DAYS = 30;
+const MAX_REFERENCES_TO_SCAN = 40;
+function normalizeSubject(subject) {
+  if (typeof subject !== "string") return "";
+  let current = subject.trim();
+  let safety = 16;
+  while (safety > 0 && SUBJECT_PREFIX_PATTERN.test(current)) {
+    current = current.replace(SUBJECT_PREFIX_PATTERN, "").trim();
+    safety -= 1;
+  }
+  return current.toLowerCase();
+}
+async function matchThread(input, deps) {
+  const { em, now } = deps;
+  const tenantId = input.tenantId;
+  const dscope = { tenantId, organizationId: input.organizationId };
+  const headerToken = extractTokenFromHeaders(input.inReplyTo, input.references);
+  if (headerToken) {
+    const threadId = await resolveTokenThread(em, dscope, {
+      tenantId,
+      channelId: input.channelId,
+      token: headerToken,
+      now
+    });
+    if (threadId) {
+      return {
+        messageThreadId: threadId,
+        matchedBy: "token-references",
+        confidence: "high"
+      };
+    }
+  }
+  const bodyToken = extractTokenFromBody(input.bodyHtml, input.bodyPlain);
+  if (bodyToken) {
+    const threadId = await resolveTokenThread(em, dscope, {
+      tenantId,
+      channelId: input.channelId,
+      token: bodyToken,
+      now
+    });
+    if (threadId) {
+      return {
+        messageThreadId: threadId,
+        matchedBy: "token-body",
+        confidence: "high"
+      };
+    }
+  }
+  const candidates = collectReferenceCandidates(input.inReplyTo, input.references);
+  if (candidates.length > 0) {
+    const jwzMatch = await findThreadByMessageIds(em, {
+      tenantId,
+      organizationId: input.organizationId,
+      channelId: input.channelId,
+      messageIds: candidates
+    });
+    if (jwzMatch) {
+      return {
+        messageThreadId: jwzMatch,
+        matchedBy: "jwz-headers",
+        confidence: "medium"
+      };
+    }
+  }
+  const normalizedSubject = normalizeSubject(input.subject);
+  if (normalizedSubject.length > 0) {
+    const cutoff = subtractDays((now ?? (() => /* @__PURE__ */ new Date()))(), PARTICIPANT_LOOKBACK_DAYS);
+    const participants = collectParticipants(input);
+    if (participants.length > 0) {
+      const subjectMatch = await findThreadBySubjectParticipants(em, {
+        tenantId,
+        organizationId: input.organizationId,
+        channelId: input.channelId,
+        normalizedSubject,
+        participants,
+        cutoff
+      });
+      if (subjectMatch) {
+        return {
+          messageThreadId: subjectMatch,
+          matchedBy: "subject-participants",
+          confidence: "low"
+        };
+      }
+    }
+  }
+  return null;
+}
+async function resolveTokenThread(em, dscope, args) {
+  const row = await findOneWithDecryption(
+    em,
+    ChannelThreadToken,
+    {
+      tenantId: args.tenantId,
+      organizationId: dscope.organizationId,
+      token: args.token
+    },
+    void 0,
+    dscope
+  );
+  if (!row) return null;
+  const mapping = await findOneWithDecryption(
+    em,
+    ChannelThreadMapping,
+    {
+      tenantId: args.tenantId,
+      organizationId: dscope.organizationId,
+      messageThreadId: row.messageThreadId,
+      channelId: args.channelId
+    },
+    void 0,
+    dscope
+  );
+  if (!mapping) return null;
+  await em.getConnection().execute(
+    `UPDATE channel_thread_tokens
+        SET last_seen_at = ?
+      WHERE id = ?
+        AND tenant_id = ?
+        AND ((?::uuid IS NULL AND organization_id IS NULL) OR organization_id = ?::uuid)`,
+    [
+      (args.now ?? (() => /* @__PURE__ */ new Date()))(),
+      row.id,
+      args.tenantId,
+      dscope.organizationId,
+      dscope.organizationId
+    ]
+  );
+  return row.messageThreadId;
+}
+function collectReferenceCandidates(inReplyTo, references) {
+  const out = [];
+  const push = (value) => {
+    if (typeof value !== "string") return;
+    const stripped = value.replace(/^<|>$/g, "").trim();
+    if (stripped.length > 0) out.push(stripped);
+  };
+  push(inReplyTo);
+  if (Array.isArray(references)) {
+    for (const ref of references) push(ref);
+  }
+  return Array.from(new Set(out)).slice(0, MAX_REFERENCES_TO_SCAN);
+}
+async function findThreadByMessageIds(em, args) {
+  if (args.messageIds.length === 0) return null;
+  const idArray = `{${args.messageIds.map((id) => `"${id.replace(/\\/g, "\\\\").replace(/"/g, '\\"')}"`).join(",")}}`;
+  const rows = await em.getConnection().execute(
+    `SELECT link.message_id FROM message_channel_links AS link
+       INNER JOIN external_conversations AS conv
+         ON conv.id = link.external_conversation_id
+      WHERE link.tenant_id = ?
+        AND ((?::uuid IS NULL AND link.organization_id IS NULL) OR link.organization_id = ?::uuid)
+        AND conv.tenant_id = ?
+        AND ((?::uuid IS NULL AND conv.organization_id IS NULL) OR conv.organization_id = ?::uuid)
+        AND conv.channel_id = ?
+        AND link.channel_metadata->>'messageId' = ANY(?::text[])
+      LIMIT 1`,
+    [
+      args.tenantId,
+      args.organizationId,
+      args.organizationId,
+      args.tenantId,
+      args.organizationId,
+      args.organizationId,
+      args.channelId,
+      idArray
+    ]
+  );
+  if (!rows || rows.length === 0) return null;
+  const messageId = rows[0].message_id;
+  const threadRows = await em.getConnection().execute(
+    `SELECT thread_id FROM messages
+      WHERE id = ?
+        AND tenant_id = ?
+        AND ((?::uuid IS NULL AND organization_id IS NULL) OR organization_id = ?::uuid)
+        AND deleted_at IS NULL
+      LIMIT 1`,
+    [messageId, args.tenantId, args.organizationId, args.organizationId]
+  );
+  if (!threadRows || threadRows.length === 0) return null;
+  return threadRows[0].thread_id;
+}
+function collectParticipants(input) {
+  const set = /* @__PURE__ */ new Set();
+  const push = (value) => {
+    if (typeof value !== "string") return;
+    const cleaned = value.trim().toLowerCase();
+    if (cleaned.length > 0) set.add(cleaned);
+  };
+  push(input.fromAddress);
+  for (const addr of input.toAddresses) push(addr);
+  for (const addr of input.ccAddresses) push(addr);
+  return Array.from(set);
+}
+async function findThreadBySubjectParticipants(em, args) {
+  const subjectLowerLike = args.normalizedSubject;
+  const participantList = `{${args.participants.map((p) => `"${p.replace(/\\/g, "\\\\").replace(/"/g, '\\"')}"`).join(",")}}`;
+  const rows = await em.getConnection().execute(
+    `SELECT messages.thread_id
+       FROM message_channel_links AS link
+       INNER JOIN external_conversations AS conv
+         ON conv.id = link.external_conversation_id
+       INNER JOIN messages
+         ON messages.id = link.message_id
+         AND messages.tenant_id = link.tenant_id
+         AND ((link.organization_id IS NULL AND messages.organization_id IS NULL) OR messages.organization_id = link.organization_id)
+         AND messages.deleted_at IS NULL
+      WHERE link.tenant_id = ?
+        AND ((?::uuid IS NULL AND link.organization_id IS NULL) OR link.organization_id = ?::uuid)
+        AND conv.tenant_id = ?
+        AND ((?::uuid IS NULL AND conv.organization_id IS NULL) OR conv.organization_id = ?::uuid)
+        AND conv.channel_id = ?
+        AND link.created_at >= ?
+        AND lower(regexp_replace(coalesce(link.channel_metadata->>'subject', ''),
+              '^\\s*((re|fwd|fw|aw|wg|sv|tr|antw)\\s*[:\\-]\\s*|\\[[^\\]]+\\]\\s*)+',
+              '',
+              'i'
+            )) = ?
+        AND (
+          lower(coalesce(link.channel_metadata->>'from', '')) = ANY(?::text[])
+          OR EXISTS (
+            SELECT 1 FROM jsonb_array_elements_text(coalesce(link.channel_metadata->'to', '[]'::jsonb)) AS t(addr)
+              WHERE lower(t.addr) = ANY(?::text[])
+          )
+          OR EXISTS (
+            SELECT 1 FROM jsonb_array_elements_text(coalesce(link.channel_metadata->'cc', '[]'::jsonb)) AS t(addr)
+              WHERE lower(t.addr) = ANY(?::text[])
+          )
+        )
+      ORDER BY link.created_at DESC
+      LIMIT 1`,
+    [
+      args.tenantId,
+      args.organizationId,
+      args.organizationId,
+      args.tenantId,
+      args.organizationId,
+      args.organizationId,
+      args.channelId,
+      args.cutoff,
+      subjectLowerLike,
+      participantList,
+      participantList,
+      participantList
+    ]
+  );
+  if (!rows || rows.length === 0) return null;
+  return rows[0].thread_id;
+}
+function subtractDays(from, days) {
+  const next = new Date(from);
+  next.setUTCDate(next.getUTCDate() - days);
+  return next;
+}
+export {
+  matchThread,
+  normalizeSubject
+};
+//# sourceMappingURL=thread-matcher.js.map

package/dist/modules/communication_channels/lib/thread-matcher.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/communication_channels/lib/thread-matcher.ts"],
+  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { ChannelThreadMapping, ChannelThreadToken, MessageChannelLink } from '../data/entities'\nimport { extractTokenFromBody, extractTokenFromHeaders } from './thread-token'\n\n/**\n * Layered thread-matching for inbound messages. Five ordered strategies;\n * first hit wins.\n *\n *   1. Token in References / In-Reply-To headers  (high confidence)\n *   2. Token in body                              (high confidence)\n *   3. JWZ on Message-Id                          (medium confidence)\n *   4. Subject + participants (last 30 days)      (low confidence)\n *   5. None \u2192 caller creates a new thread\n *\n * All DB queries are tenant-scoped. The matcher returns the resolved\n * thread id (or null) and lets the caller perform the actual ingest. It\n * never flushes the caller's unit of work: the only write is a scoped raw\n * `UPDATE` that bumps a matched token's `last_seen_at` (a future-GC hint),\n * which does not touch the caller's pending entities.\n *\n * See `.ai/specs/2026-05-27-email-integration-inbound-reliability-and-threading.md`\n * \u00A7 4 Threading Algorithm.\n */\n\nexport type ThreadMatchInput = {\n  channelId: string\n  tenantId: string\n  organizationId: string | null\n\n  /** RFC 5322 Message-ID of this inbound message (no angle brackets). */\n  messageId: string | null\n  /** In-Reply-To header value (no angle brackets). */\n  inReplyTo: string | null\n  /** References header, ordered root \u2192 most recent. */\n  references: string[]\n\n  /** Already-normalized subject is preferred; we re-normalize defensively. */\n  subject: string\n  fromAddress: string\n  toAddresses: string[]\n  ccAddresses: string[]\n\n  bodyPlain: string | null\n  bodyHtml: string | null\n\n  receivedAt: Date\n}\n\nexport type ThreadMatchStrategy =\n  | 'token-references'\n  | 'token-body'\n  | 'jwz-headers'\n  | 'subject-participants'\n\nexport type ThreadMatchConfidence = 'high' | 'medium' | 'low'\n\nexport type ThreadMatch = {\n  messageThreadId: string\n  matchedBy: ThreadMatchStrategy\n  confidence: ThreadMatchConfidence\n}\n\nexport type ThreadMatcherDeps = {\n  em: EntityManager\n  /** Stable reference for testing \u2014 defaults to `new Date()`. */\n  now?: () => Date\n}\n\nconst SUBJECT_PREFIX_PATTERN = /^\\s*((?:re|fwd|fw|aw|wg|sv|tr|antw)\\s*[:\\-]\\s*|\\[[^\\]]+\\]\\s*)+/i\nconst PARTICIPANT_LOOKBACK_DAYS = 30\nconst MAX_REFERENCES_TO_SCAN = 40\n\n/**\n * Normalize a subject for low-confidence subject+participants matching:\n *   - Trim whitespace\n *   - Strip leading reply/forward prefixes (`Re:`, `RE:`, `Aw:`, `Fwd:`, `Tr:`, `WG:`, `Sv:`, etc.)\n *   - Strip leading bracketed tags (`[EXTERNAL]`, `[Encrypted]`, `[SPAM?]`, \u2026)\n *   - Repeat until the pattern no longer matches\n *   - Lowercase the result\n *\n * Returns an empty string for `null`/empty input \u2014 the caller should\n * skip the subject+participants strategy in that case.\n */\nexport function normalizeSubject(subject: string | null | undefined): string {\n  if (typeof subject !== 'string') return ''\n  let current = subject.trim()\n  // Loop until no prefix matches \u2014 handles `Re: Fwd: [EXTERNAL] Re: \u2026`.\n  let safety = 16\n  while (safety > 0 && SUBJECT_PREFIX_PATTERN.test(current)) {\n    current = current.replace(SUBJECT_PREFIX_PATTERN, '').trim()\n    safety -= 1\n  }\n  return current.toLowerCase()\n}\n\nexport async function matchThread(\n  input: ThreadMatchInput,\n  deps: ThreadMatcherDeps,\n): Promise<ThreadMatch | null> {\n  const { em, now } = deps\n  const tenantId = input.tenantId\n  const dscope = { tenantId, organizationId: input.organizationId }\n\n  // Strategy 1: token in References / In-Reply-To header.\n  const headerToken = extractTokenFromHeaders(input.inReplyTo, input.references)\n  if (headerToken) {\n    const threadId = await resolveTokenThread(em, dscope, {\n      tenantId,\n      channelId: input.channelId,\n      token: headerToken,\n      now,\n    })\n    if (threadId) {\n      return {\n        messageThreadId: threadId,\n        matchedBy: 'token-references',\n        confidence: 'high',\n      }\n    }\n  }\n\n  // Strategy 2: token in body.\n  const bodyToken = extractTokenFromBody(input.bodyHtml, input.bodyPlain)\n  if (bodyToken) {\n    const threadId = await resolveTokenThread(em, dscope, {\n      tenantId,\n      channelId: input.channelId,\n      token: bodyToken,\n      now,\n    })\n    if (threadId) {\n      return {\n        messageThreadId: threadId,\n        matchedBy: 'token-body',\n        confidence: 'high',\n      }\n    }\n  }\n\n  // Strategy 3: JWZ \u2014 find any MessageChannelLink in this channel whose\n  // recorded `channelMetadata.messageId` matches In-Reply-To or any of the\n  // References values. The first hit's `messages.message.threadId` is our\n  // thread. Bounded by MAX_REFERENCES_TO_SCAN.\n  const candidates = collectReferenceCandidates(input.inReplyTo, input.references)\n  if (candidates.length > 0) {\n    const jwzMatch = await findThreadByMessageIds(em, {\n      tenantId,\n      organizationId: input.organizationId,\n      channelId: input.channelId,\n      messageIds: candidates,\n    })\n    if (jwzMatch) {\n      return {\n        messageThreadId: jwzMatch,\n        matchedBy: 'jwz-headers',\n        confidence: 'medium',\n      }\n    }\n  }\n\n  // Strategy 4: subject + participants in the same channel within 30 days.\n  // Low confidence \u2014 never used to overwrite a stronger token-based match\n  // (we already returned above on hits). The caller may still choose to\n  // create a new thread when confidence === 'low'.\n  const normalizedSubject = normalizeSubject(input.subject)\n  if (normalizedSubject.length > 0) {\n    const cutoff = subtractDays((now ?? (() => new Date()))(), PARTICIPANT_LOOKBACK_DAYS)\n    const participants = collectParticipants(input)\n    if (participants.length > 0) {\n      const subjectMatch = await findThreadBySubjectParticipants(em, {\n        tenantId,\n        organizationId: input.organizationId,\n        channelId: input.channelId,\n        normalizedSubject,\n        participants,\n        cutoff,\n      })\n      if (subjectMatch) {\n        return {\n          messageThreadId: subjectMatch,\n          matchedBy: 'subject-participants',\n          confidence: 'low',\n        }\n      }\n    }\n  }\n\n  // No match \u2014 caller creates a new thread.\n  return null\n}\n\n/**\n * Resolve a thread token to its `messageThreadId`, but ONLY when that thread\n * belongs to the channel that received the inbound message.\n *\n * The token is unguessable + HMAC-signed + tenant-scoped, so it cannot leak\n * across tenants. Within a tenant, though, the same external contact may\n * correspond with several users/channels \u2014 and a thread token that ends up in\n * a *different* mailbox (e.g. a forwarded thread) must not graft the inbound\n * message onto another channel's thread. The `ChannelThreadMapping`\n * (thread \u2194 channel) is the authoritative link; if there's no mapping joining\n * this thread to the receiving channel, we treat the token as a non-match and\n * let the lower-confidence strategies (or a fresh thread) take over.\n *\n * Returns the thread id on a verified hit (and bumps `last_seen_at`), else null.\n */\nasync function resolveTokenThread(\n  em: EntityManager,\n  dscope: { tenantId: string; organizationId: string | null },\n  args: { tenantId: string; channelId: string; token: string; now?: () => Date },\n): Promise<string | null> {\n  const row = await findOneWithDecryption(\n    em,\n    ChannelThreadToken,\n    {\n      tenantId: args.tenantId,\n      organizationId: dscope.organizationId,\n      token: args.token,\n    },\n    undefined,\n    dscope,\n  )\n  if (!row) return null\n\n  const mapping = await findOneWithDecryption(\n    em,\n    ChannelThreadMapping,\n    {\n      tenantId: args.tenantId,\n      organizationId: dscope.organizationId,\n      messageThreadId: row.messageThreadId,\n      channelId: args.channelId,\n    },\n    undefined,\n    dscope,\n  )\n  if (!mapping) return null\n\n  // Bump `last_seen_at` (future-GC hint) via a scoped raw UPDATE rather than\n  // `em.flush()`. A flush here would commit the ENTIRE unit of work, including\n  // any pending mutations the caller (`ingest-inbound-message`, shared by all\n  // provider adapters) holds \u2014 turning this \"pure\" matcher into a hidden commit\n  // boundary. The raw UPDATE keeps the matcher side-effect-free w.r.t. the\n  // caller's EntityManager.\n  await em.getConnection().execute(\n    `UPDATE channel_thread_tokens\n        SET last_seen_at = ?\n      WHERE id = ?\n        AND tenant_id = ?\n        AND ((?::uuid IS NULL AND organization_id IS NULL) OR organization_id = ?::uuid)`,\n    [\n      (args.now ?? (() => new Date()))(),\n      row.id,\n      args.tenantId,\n      dscope.organizationId,\n      dscope.organizationId,\n    ],\n  )\n  return row.messageThreadId\n}\n\nfunction collectReferenceCandidates(\n  inReplyTo: string | null,\n  references: string[] | undefined,\n): string[] {\n  const out: string[] = []\n  const push = (value: string | null | undefined): void => {\n    if (typeof value !== 'string') return\n    const stripped = value.replace(/^<|>$/g, '').trim()\n    if (stripped.length > 0) out.push(stripped)\n  }\n  push(inReplyTo)\n  if (Array.isArray(references)) {\n    for (const ref of references) push(ref)\n  }\n  return Array.from(new Set(out)).slice(0, MAX_REFERENCES_TO_SCAN)\n}\n\nasync function findThreadByMessageIds(\n  em: EntityManager,\n  args: { tenantId: string; organizationId: string | null; channelId: string; messageIds: string[] },\n): Promise<string | null> {\n  if (args.messageIds.length === 0) return null\n  // MikroORM v7 dropped the Knex builder; we use raw SQL via\n  // `em.getConnection().execute()` with positional placeholders. The JSONB\n  // lookup compares `channel_metadata->>'messageId'` against a Postgres\n  // text array built from the candidate message-ids.\n  // Escape backslash BEFORE quote \u2014 a Message-ID can legitimately contain `\\`\n  // (RFC 5322), and an unescaped backslash yields a malformed Postgres array\n  // literal that throws and silently defeats threading.\n  const idArray = `{${args.messageIds\n    .map((id) => `\"${id.replace(/\\\\/g, '\\\\\\\\').replace(/\"/g, '\\\\\"')}\"`)\n    .join(',')}}`\n  const rows = await em.getConnection().execute<Array<{ message_id: string }>>(\n    `SELECT link.message_id FROM message_channel_links AS link\n       INNER JOIN external_conversations AS conv\n         ON conv.id = link.external_conversation_id\n      WHERE link.tenant_id = ?\n        AND ((?::uuid IS NULL AND link.organization_id IS NULL) OR link.organization_id = ?::uuid)\n        AND conv.tenant_id = ?\n        AND ((?::uuid IS NULL AND conv.organization_id IS NULL) OR conv.organization_id = ?::uuid)\n        AND conv.channel_id = ?\n        AND link.channel_metadata->>'messageId' = ANY(?::text[])\n      LIMIT 1`,\n    [\n      args.tenantId,\n      args.organizationId,\n      args.organizationId,\n      args.tenantId,\n      args.organizationId,\n      args.organizationId,\n      args.channelId,\n      idArray,\n    ],\n  )\n  if (!rows || rows.length === 0) return null\n\n  const messageId = rows[0].message_id as string\n  // Translate `messages.message.id` to `messages.message.thread_id`. We\n  // intentionally avoid importing the messages entity (cross-module rule).\n  const threadRows = await em.getConnection().execute<Array<{ thread_id: string | null }>>(\n    `SELECT thread_id FROM messages\n      WHERE id = ?\n        AND tenant_id = ?\n        AND ((?::uuid IS NULL AND organization_id IS NULL) OR organization_id = ?::uuid)\n        AND deleted_at IS NULL\n      LIMIT 1`,\n    [messageId, args.tenantId, args.organizationId, args.organizationId],\n  )\n  if (!threadRows || threadRows.length === 0) return null\n  return threadRows[0].thread_id as string | null\n}\n\nfunction collectParticipants(input: ThreadMatchInput): string[] {\n  const set = new Set<string>()\n  const push = (value: string | null | undefined): void => {\n    if (typeof value !== 'string') return\n    const cleaned = value.trim().toLowerCase()\n    if (cleaned.length > 0) set.add(cleaned)\n  }\n  push(input.fromAddress)\n  for (const addr of input.toAddresses) push(addr)\n  for (const addr of input.ccAddresses) push(addr)\n  return Array.from(set)\n}\n\nasync function findThreadBySubjectParticipants(\n  em: EntityManager,\n  args: {\n    tenantId: string\n    organizationId: string | null\n    channelId: string\n    normalizedSubject: string\n    participants: string[]\n    cutoff: Date\n  },\n): Promise<string | null> {\n  // MikroORM v7 raw SQL \u2014 see `findThreadByMessageIds` for the rationale.\n  // We look at recent links from this channel whose channelMetadata subject\n  // (server-side normalized) equals the inbound subject AND share at least\n  // one participant. The first match wins.\n  const subjectLowerLike = args.normalizedSubject\n  // Escape backslash before quote (see findThreadByMessageIds) \u2014 participant\n  // addresses are attacker-influenced inbound header values.\n  const participantList = `{${args.participants\n    .map((p) => `\"${p.replace(/\\\\/g, '\\\\\\\\').replace(/\"/g, '\\\\\"')}\"`)\n    .join(',')}}`\n  const rows = await em.getConnection().execute<Array<{ thread_id: string | null }>>(\n    `SELECT messages.thread_id\n       FROM message_channel_links AS link\n       INNER JOIN external_conversations AS conv\n         ON conv.id = link.external_conversation_id\n       INNER JOIN messages\n         ON messages.id = link.message_id\n         AND messages.tenant_id = link.tenant_id\n         AND ((link.organization_id IS NULL AND messages.organization_id IS NULL) OR messages.organization_id = link.organization_id)\n         AND messages.deleted_at IS NULL\n      WHERE link.tenant_id = ?\n        AND ((?::uuid IS NULL AND link.organization_id IS NULL) OR link.organization_id = ?::uuid)\n        AND conv.tenant_id = ?\n        AND ((?::uuid IS NULL AND conv.organization_id IS NULL) OR conv.organization_id = ?::uuid)\n        AND conv.channel_id = ?\n        AND link.created_at >= ?\n        AND lower(regexp_replace(coalesce(link.channel_metadata->>'subject', ''),\n              '^\\\\s*((re|fwd|fw|aw|wg|sv|tr|antw)\\\\s*[:\\\\-]\\\\s*|\\\\[[^\\\\]]+\\\\]\\\\s*)+',\n              '',\n              'i'\n            )) = ?\n        AND (\n          lower(coalesce(link.channel_metadata->>'from', '')) = ANY(?::text[])\n          OR EXISTS (\n            SELECT 1 FROM jsonb_array_elements_text(coalesce(link.channel_metadata->'to', '[]'::jsonb)) AS t(addr)\n              WHERE lower(t.addr) = ANY(?::text[])\n          )\n          OR EXISTS (\n            SELECT 1 FROM jsonb_array_elements_text(coalesce(link.channel_metadata->'cc', '[]'::jsonb)) AS t(addr)\n              WHERE lower(t.addr) = ANY(?::text[])\n          )\n        )\n      ORDER BY link.created_at DESC\n      LIMIT 1`,\n    [\n      args.tenantId,\n      args.organizationId,\n      args.organizationId,\n      args.tenantId,\n      args.organizationId,\n      args.organizationId,\n      args.channelId,\n      args.cutoff,\n      subjectLowerLike,\n      participantList,\n      participantList,\n      participantList,\n    ],\n  )\n  if (!rows || rows.length === 0) return null\n  return rows[0].thread_id as string | null\n}\n\nfunction subtractDays(from: Date, days: number): Date {\n  const next = new Date(from)\n  next.setUTCDate(next.getUTCDate() - days)\n  return next\n}\n\n// Re-export `MessageChannelLink` so callers importing types from this module\n// don't have to reach into `data/entities.ts` indirectly.\nexport type { MessageChannelLink }\n"],
+  "mappings": "AACA,SAAS,6BAA6B;AACtC,SAAS,sBAAsB,0BAA8C;AAC7E,SAAS,sBAAsB,+BAA+B;AAkE9D,MAAM,yBAAyB;AAC/B,MAAM,4BAA4B;AAClC,MAAM,yBAAyB;AAaxB,SAAS,iBAAiB,SAA4C;AAC3E,MAAI,OAAO,YAAY,SAAU,QAAO;AACxC,MAAI,UAAU,QAAQ,KAAK;AAE3B,MAAI,SAAS;AACb,SAAO,SAAS,KAAK,uBAAuB,KAAK,OAAO,GAAG;AACzD,cAAU,QAAQ,QAAQ,wBAAwB,EAAE,EAAE,KAAK;AAC3D,cAAU;AAAA,EACZ;AACA,SAAO,QAAQ,YAAY;AAC7B;AAEA,eAAsB,YACpB,OACA,MAC6B;AAC7B,QAAM,EAAE,IAAI,IAAI,IAAI;AACpB,QAAM,WAAW,MAAM;AACvB,QAAM,SAAS,EAAE,UAAU,gBAAgB,MAAM,eAAe;AAGhE,QAAM,cAAc,wBAAwB,MAAM,WAAW,MAAM,UAAU;AAC7E,MAAI,aAAa;AACf,UAAM,WAAW,MAAM,mBAAmB,IAAI,QAAQ;AAAA,MACpD;AAAA,MACA,WAAW,MAAM;AAAA,MACjB,OAAO;AAAA,MACP;AAAA,IACF,CAAC;AACD,QAAI,UAAU;AACZ,aAAO;AAAA,QACL,iBAAiB;AAAA,QACjB,WAAW;AAAA,QACX,YAAY;AAAA,MACd;AAAA,IACF;AAAA,EACF;AAGA,QAAM,YAAY,qBAAqB,MAAM,UAAU,MAAM,SAAS;AACtE,MAAI,WAAW;AACb,UAAM,WAAW,MAAM,mBAAmB,IAAI,QAAQ;AAAA,MACpD;AAAA,MACA,WAAW,MAAM;AAAA,MACjB,OAAO;AAAA,MACP;AAAA,IACF,CAAC;AACD,QAAI,UAAU;AACZ,aAAO;AAAA,QACL,iBAAiB;AAAA,QACjB,WAAW;AAAA,QACX,YAAY;AAAA,MACd;AAAA,IACF;AAAA,EACF;AAMA,QAAM,aAAa,2BAA2B,MAAM,WAAW,MAAM,UAAU;AAC/E,MAAI,WAAW,SAAS,GAAG;AACzB,UAAM,WAAW,MAAM,uBAAuB,IAAI;AAAA,MAChD;AAAA,MACA,gBAAgB,MAAM;AAAA,MACtB,WAAW,MAAM;AAAA,MACjB,YAAY;AAAA,IACd,CAAC;AACD,QAAI,UAAU;AACZ,aAAO;AAAA,QACL,iBAAiB;AAAA,QACjB,WAAW;AAAA,QACX,YAAY;AAAA,MACd;AAAA,IACF;AAAA,EACF;AAMA,QAAM,oBAAoB,iBAAiB,MAAM,OAAO;AACxD,MAAI,kBAAkB,SAAS,GAAG;AAChC,UAAM,SAAS,cAAc,QAAQ,MAAM,oBAAI,KAAK,IAAI,GAAG,yBAAyB;AACpF,UAAM,eAAe,oBAAoB,KAAK;AAC9C,QAAI,aAAa,SAAS,GAAG;AAC3B,YAAM,eAAe,MAAM,gCAAgC,IAAI;AAAA,QAC7D;AAAA,QACA,gBAAgB,MAAM;AAAA,QACtB,WAAW,MAAM;AAAA,QACjB;AAAA,QACA;AAAA,QACA;AAAA,MACF,CAAC;AACD,UAAI,cAAc;AAChB,eAAO;AAAA,UACL,iBAAiB;AAAA,UACjB,WAAW;AAAA,UACX,YAAY;AAAA,QACd;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAGA,SAAO;AACT;AAiBA,eAAe,mBACb,IACA,QACA,MACwB;AACxB,QAAM,MAAM,MAAM;AAAA,IAChB;AAAA,IACA;AAAA,IACA;AAAA,MACE,UAAU,KAAK;AAAA,MACf,gBAAgB,OAAO;AAAA,MACvB,OAAO,KAAK;AAAA,IACd;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACA,MAAI,CAAC,IAAK,QAAO;AAEjB,QAAM,UAAU,MAAM;AAAA,IACpB;AAAA,IACA;AAAA,IACA;AAAA,MACE,UAAU,KAAK;AAAA,MACf,gBAAgB,OAAO;AAAA,MACvB,iBAAiB,IAAI;AAAA,MACrB,WAAW,KAAK;AAAA,IAClB;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACA,MAAI,CAAC,QAAS,QAAO;AAQrB,QAAM,GAAG,cAAc,EAAE;AAAA,IACvB;AAAA;AAAA;AAAA;AAAA;AAAA,IAKA;AAAA,OACG,KAAK,QAAQ,MAAM,oBAAI,KAAK,IAAI;AAAA,MACjC,IAAI;AAAA,MACJ,KAAK;AAAA,MACL,OAAO;AAAA,MACP,OAAO;AAAA,IACT;AAAA,EACF;AACA,SAAO,IAAI;AACb;AAEA,SAAS,2BACP,WACA,YACU;AACV,QAAM,MAAgB,CAAC;AACvB,QAAM,OAAO,CAAC,UAA2C;AACvD,QAAI,OAAO,UAAU,SAAU;AAC/B,UAAM,WAAW,MAAM,QAAQ,UAAU,EAAE,EAAE,KAAK;AAClD,QAAI,SAAS,SAAS,EAAG,KAAI,KAAK,QAAQ;AAAA,EAC5C;AACA,OAAK,SAAS;AACd,MAAI,MAAM,QAAQ,UAAU,GAAG;AAC7B,eAAW,OAAO,WAAY,MAAK,GAAG;AAAA,EACxC;AACA,SAAO,MAAM,KAAK,IAAI,IAAI,GAAG,CAAC,EAAE,MAAM,GAAG,sBAAsB;AACjE;AAEA,eAAe,uBACb,IACA,MACwB;AACxB,MAAI,KAAK,WAAW,WAAW,EAAG,QAAO;AAQzC,QAAM,UAAU,IAAI,KAAK,WACtB,IAAI,CAAC,OAAO,IAAI,GAAG,QAAQ,OAAO,MAAM,EAAE,QAAQ,MAAM,KAAK,CAAC,GAAG,EACjE,KAAK,GAAG,CAAC;AACZ,QAAM,OAAO,MAAM,GAAG,cAAc,EAAE;AAAA,IACpC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAUA;AAAA,MACE,KAAK;AAAA,MACL,KAAK;AAAA,MACL,KAAK;AAAA,MACL,KAAK;AAAA,MACL,KAAK;AAAA,MACL,KAAK;AAAA,MACL,KAAK;AAAA,MACL;AAAA,IACF;AAAA,EACF;AACA,MAAI,CAAC,QAAQ,KAAK,WAAW,EAAG,QAAO;AAEvC,QAAM,YAAY,KAAK,CAAC,EAAE;AAG1B,QAAM,aAAa,MAAM,GAAG,cAAc,EAAE;AAAA,IAC1C;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAMA,CAAC,WAAW,KAAK,UAAU,KAAK,gBAAgB,KAAK,cAAc;AAAA,EACrE;AACA,MAAI,CAAC,cAAc,WAAW,WAAW,EAAG,QAAO;AACnD,SAAO,WAAW,CAAC,EAAE;AACvB;AAEA,SAAS,oBAAoB,OAAmC;AAC9D,QAAM,MAAM,oBAAI,IAAY;AAC5B,QAAM,OAAO,CAAC,UAA2C;AACvD,QAAI,OAAO,UAAU,SAAU;AAC/B,UAAM,UAAU,MAAM,KAAK,EAAE,YAAY;AACzC,QAAI,QAAQ,SAAS,EAAG,KAAI,IAAI,OAAO;AAAA,EACzC;AACA,OAAK,MAAM,WAAW;AACtB,aAAW,QAAQ,MAAM,YAAa,MAAK,IAAI;AAC/C,aAAW,QAAQ,MAAM,YAAa,MAAK,IAAI;AAC/C,SAAO,MAAM,KAAK,GAAG;AACvB;AAEA,eAAe,gCACb,IACA,MAQwB;AAKxB,QAAM,mBAAmB,KAAK;AAG9B,QAAM,kBAAkB,IAAI,KAAK,aAC9B,IAAI,CAAC,MAAM,IAAI,EAAE,QAAQ,OAAO,MAAM,EAAE,QAAQ,MAAM,KAAK,CAAC,GAAG,EAC/D,KAAK,GAAG,CAAC;AACZ,QAAM,OAAO,MAAM,GAAG,cAAc,EAAE;AAAA,IACpC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAiCA;AAAA,MACE,KAAK;AAAA,MACL,KAAK;AAAA,MACL,KAAK;AAAA,MACL,KAAK;AAAA,MACL,KAAK;AAAA,MACL,KAAK;AAAA,MACL,KAAK;AAAA,MACL,KAAK;AAAA,MACL;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AACA,MAAI,CAAC,QAAQ,KAAK,WAAW,EAAG,QAAO;AACvC,SAAO,KAAK,CAAC,EAAE;AACjB;AAEA,SAAS,aAAa,MAAY,MAAoB;AACpD,QAAM,OAAO,IAAI,KAAK,IAAI;AAC1B,OAAK,WAAW,KAAK,WAAW,IAAI,IAAI;AACxC,SAAO;AACT;",
+  "names": []
+}