@open-mercato/core 0.6.4-develop.4382.1.6b4f656b77 → 0.6.4

package/dist/modules/customers/lib/link-channel-message-handler.js

@@ -0,0 +1,303 @@
+import { findOneWithDecryption, findWithDecryption } from "@open-mercato/shared/lib/encryption/find";
+import { CustomerEntity, CustomerInteraction } from "../data/entities.js";
+import { findPeopleByAddresses, normalizeAddresses } from "./findPeopleByAddresses.js";
+import { emitCustomersEvent } from "../events.js";
+const POSTGRES_UNIQUE_VIOLATION = "23505";
+async function handler(payload, ctx) {
+  const linkId = payload?.channelLinkId ?? payload?.messageChannelLinkId;
+  if (typeof linkId !== "string" || !linkId) return;
+  if (typeof payload.tenantId !== "string" || !payload.tenantId) return;
+  const tenantId = payload.tenantId;
+  const organizationId = payload.organizationId ?? null;
+  if (!organizationId) return;
+  const dscope = { tenantId, organizationId };
+  const em = ctx.resolve("em").fork();
+  const link = await findOneWithDecryption(
+    em,
+    "MessageChannelLink",
+    { id: linkId, tenantId, organizationId },
+    void 0,
+    dscope
+  );
+  if (!link) return;
+  const metaJson = link.channelMetadata ?? null;
+  const payloadJson = link.channelPayload ?? null;
+  let channelUserId = null;
+  if (typeof payload.channelId === "string" && payload.channelId) {
+    const channel = await findOneWithDecryption(
+      em,
+      "CommunicationChannel",
+      { id: payload.channelId, tenantId, organizationId },
+      void 0,
+      dscope
+    );
+    channelUserId = channel?.userId ?? null;
+  }
+  const rawAddresses = [];
+  if (payloadJson) {
+    collectAddressField(rawAddresses, payloadJson.from);
+    collectAddressField(rawAddresses, payloadJson.to);
+    collectAddressField(rawAddresses, payloadJson.cc);
+    collectAddressField(rawAddresses, payloadJson.bcc);
+  }
+  if (rawAddresses.length === 0 && metaJson) {
+    collectAddressField(rawAddresses, metaJson.from);
+    collectAddressField(rawAddresses, metaJson.to);
+    collectAddressField(rawAddresses, metaJson.cc);
+    collectAddressField(rawAddresses, metaJson.bcc);
+  }
+  const normalized = normalizeAddresses(rawAddresses);
+  const crmPersonIdHint = typeof metaJson?.crmPersonId === "string" ? metaJson.crmPersonId : null;
+  let crmPersonId = null;
+  if (crmPersonIdHint) {
+    const hintedPerson = await findOneWithDecryption(
+      em,
+      CustomerEntity,
+      { id: crmPersonIdHint, kind: "person", tenantId, organizationId, deletedAt: null },
+      void 0,
+      dscope
+    );
+    if (hintedPerson) crmPersonId = crmPersonIdHint;
+  }
+  if (normalized.length === 0 && !crmPersonId) {
+    await handleThreadingInheritance(em, link, linkId, tenantId, organizationId, channelUserId, metaJson, payloadJson);
+    return;
+  }
+  const matched = await findPeopleByAddresses(em, normalized, tenantId, organizationId);
+  const personIdSet = new Set(matched.map((m) => m.id));
+  if (crmPersonId) personIdSet.add(crmPersonId);
+  if (personIdSet.size === 0) {
+    await handleThreadingInheritance(em, link, linkId, tenantId, organizationId, channelUserId, metaJson, payloadJson);
+    return;
+  }
+  const linkDirection = link.direction === "inbound" || link.direction === "outbound" ? link.direction : null;
+  const visibility = resolveVisibility(metaJson, channelUserId, linkDirection);
+  const subject = typeof metaJson?.subject === "string" ? metaJson.subject : typeof payloadJson?.subject === "string" ? payloadJson.subject : null;
+  const bodyText = typeof metaJson?.bodyText === "string" ? metaJson.bodyText : typeof payloadJson?.text === "string" ? payloadJson.text : null;
+  const occurredAt = link.createdAt instanceof Date ? link.createdAt : /* @__PURE__ */ new Date();
+  const providerKey = typeof link.providerKey === "string" ? link.providerKey : null;
+  await persistInteractions(
+    em,
+    personIdSet,
+    {
+      linkId,
+      tenantId,
+      organizationId,
+      interactionType: "email",
+      title: subject,
+      body: bodyText,
+      authorUserId: channelUserId,
+      occurredAt,
+      visibility,
+      channelProviderKey: providerKey
+    }
+  );
+}
+async function handleThreadingInheritance(em, _link, linkId, tenantId, organizationId, channelUserId, metaJson, payloadJson) {
+  const inboundMessageId = typeof _link.messageId === "string" ? _link.messageId : null;
+  if (inboundMessageId && organizationId) {
+    const threadPersonRows = await em.getConnection().execute(
+      `SELECT DISTINCT ci.entity_id AS entity_id
+       FROM messages inbound_m
+       JOIN messages thread_m ON thread_m.thread_id = inbound_m.thread_id
+       JOIN message_channel_links mcl ON mcl.message_id = thread_m.id
+       JOIN customer_interactions ci ON ci.external_message_id = mcl.id
+       WHERE inbound_m.id = ?
+         AND inbound_m.tenant_id = ?
+         AND inbound_m.organization_id = ?
+         AND inbound_m.deleted_at IS NULL
+         AND inbound_m.thread_id IS NOT NULL
+         AND thread_m.tenant_id = ?
+         AND thread_m.organization_id = ?
+         AND thread_m.deleted_at IS NULL
+         AND mcl.tenant_id = ?
+         AND mcl.organization_id = ?
+         AND ci.tenant_id = ?
+         AND ci.organization_id = ?
+         AND ci.interaction_type = 'email'
+         AND ci.deleted_at IS NULL
+         AND ci.entity_id IS NOT NULL
+       LIMIT 200`,
+      [
+        inboundMessageId,
+        tenantId,
+        organizationId,
+        tenantId,
+        organizationId,
+        tenantId,
+        organizationId,
+        tenantId,
+        organizationId
+      ]
+    );
+    const threadPersonIds = new Set(
+      threadPersonRows.map((row) => row.entity_id).filter((id) => !!id)
+    );
+    if (threadPersonIds.size > 0) {
+      const subject2 = typeof metaJson?.subject === "string" ? metaJson.subject : typeof payloadJson?.subject === "string" ? payloadJson.subject : null;
+      const bodyText = typeof payloadJson?.text === "string" ? payloadJson.text : typeof metaJson?.bodyText === "string" ? metaJson.bodyText : null;
+      const occurredAt2 = _link.createdAt instanceof Date ? _link.createdAt : /* @__PURE__ */ new Date();
+      const providerKey2 = typeof _link.providerKey === "string" ? _link.providerKey : null;
+      await persistInteractions(em, threadPersonIds, {
+        linkId,
+        tenantId,
+        organizationId,
+        interactionType: "email",
+        title: subject2,
+        body: bodyText,
+        authorUserId: channelUserId,
+        occurredAt: occurredAt2,
+        visibility: channelUserId ? "private" : "shared",
+        channelProviderKey: providerKey2
+      });
+      return;
+    }
+  }
+  const refIds = [];
+  const inReplyTo = typeof metaJson?.inReplyTo === "string" ? stripBrackets(metaJson.inReplyTo) : typeof payloadJson?.inReplyTo === "string" ? stripBrackets(payloadJson.inReplyTo) : null;
+  if (inReplyTo) refIds.push(inReplyTo);
+  const refs = Array.isArray(metaJson?.references) ? metaJson.references : Array.isArray(payloadJson?.references) ? payloadJson.references : [];
+  for (const r of refs) {
+    if (typeof r === "string") {
+      const stripped = stripBrackets(r);
+      if (stripped && !refIds.includes(stripped)) refIds.push(stripped);
+    }
+  }
+  if (refIds.length === 0) return;
+  const dscope = { tenantId, organizationId };
+  const messageIdCandidates = Array.from(
+    new Set(refIds.flatMap((ref) => [ref, `<${ref}>`]))
+  );
+  const placeholders = messageIdCandidates.map(() => "?").join(", ");
+  const parentLinkRows = await em.getConnection().execute(
+    `SELECT id FROM message_channel_links
+     WHERE tenant_id = ?
+       AND organization_id = ?
+       AND channel_metadata->>'messageId' IN (${placeholders})
+     LIMIT 200`,
+    [tenantId, organizationId, ...messageIdCandidates]
+  );
+  const matchedParentIds = parentLinkRows.map((parentLink) => parentLink.id);
+  if (matchedParentIds.length === 0) return;
+  const parentInteractions = await findWithDecryption(
+    em,
+    CustomerInteraction,
+    {
+      externalMessageId: { $in: matchedParentIds },
+      tenantId,
+      organizationId,
+      interactionType: "email",
+      deletedAt: null
+    },
+    void 0,
+    dscope
+  );
+  const inheritedPersonIdSet = new Set(
+    parentInteractions.map((pi) => pi.entity?.id).filter(Boolean)
+  );
+  if (inheritedPersonIdSet.size === 0) return;
+  const visibility = channelUserId ? "private" : "shared";
+  const link = _link;
+  const inheritedMeta = link.channelMetadata ?? null;
+  const subject = typeof inheritedMeta?.subject === "string" ? inheritedMeta.subject : null;
+  const occurredAt = link.createdAt instanceof Date ? link.createdAt : /* @__PURE__ */ new Date();
+  const providerKey = typeof link.providerKey === "string" ? link.providerKey : null;
+  await persistInteractions(
+    em,
+    inheritedPersonIdSet,
+    {
+      linkId,
+      tenantId,
+      organizationId,
+      interactionType: "email",
+      title: subject,
+      body: null,
+      authorUserId: channelUserId,
+      occurredAt,
+      visibility,
+      channelProviderKey: providerKey
+    }
+  );
+}
+async function persistInteractions(em, personIdSet, data) {
+  for (const personId of personIdSet) {
+    const rowEm = em.fork();
+    const entityRef = rowEm.getReference(CustomerEntity, personId);
+    const interaction = rowEm.create(CustomerInteraction, {
+      tenantId: data.tenantId,
+      organizationId: data.organizationId,
+      entity: entityRef,
+      interactionType: data.interactionType,
+      title: data.title,
+      body: data.body,
+      authorUserId: data.authorUserId,
+      occurredAt: data.occurredAt,
+      // Emails are logged AFTER they're sent/received — they are not
+      // scheduled work. Without an explicit status the entity default
+      // ('planned') combined with a past `occurredAt` makes the activity
+      // timeline render the email as "overdue", which is the wrong UX.
+      // The canonical "completed" value is `'done'` per
+      // `validators.ts:interactionStatusValues = ['planned', 'done', 'canceled']`
+      // — `'completed'` is a legacy spelling that the enricher accepts
+      // defensively but the activity timeline `isOverdue` predicate does NOT.
+      status: "done",
+      externalMessageId: data.linkId,
+      visibility: data.visibility,
+      channelProviderKey: data.channelProviderKey
+    });
+    try {
+      await rowEm.flush();
+    } catch (err) {
+      const code = err.code;
+      if (code !== POSTGRES_UNIQUE_VIOLATION) throw err;
+      continue;
+    }
+    try {
+      await emitCustomersEvent("customers.email.linked", {
+        personId,
+        interactionId: interaction.id,
+        tenantId: data.tenantId,
+        organizationId: data.organizationId
+      });
+    } catch {
+    }
+  }
+}
+function resolveVisibility(metaJson, channelUserId, direction) {
+  if (direction === "outbound") {
+    if (metaJson?.crmVisibility === "shared") return "shared";
+    if (metaJson?.crmVisibility === "private") return "private";
+  }
+  return channelUserId ? "private" : "shared";
+}
+function collectAddressField(out, value) {
+  if (!value) return;
+  if (typeof value === "string") {
+    out.push(value);
+    return;
+  }
+  if (Array.isArray(value)) {
+    for (const item of value) {
+      if (typeof item === "string") {
+        out.push(item);
+      } else if (item && typeof item === "object" && typeof item.address === "string") {
+        out.push(item.address);
+      }
+    }
+    return;
+  }
+  if (typeof value === "object" && typeof value.address === "string") {
+    out.push(value.address);
+  }
+}
+function stripBrackets(value) {
+  const trimmed = value.trim();
+  if (trimmed.startsWith("<") && trimmed.endsWith(">")) {
+    return trimmed.slice(1, -1);
+  }
+  return trimmed;
+}
+export {
+  handler as default
+};
+//# sourceMappingURL=link-channel-message-handler.js.map

package/dist/modules/customers/lib/link-channel-message-handler.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/customers/lib/link-channel-message-handler.ts"],
+  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport { findOneWithDecryption, findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { CustomerEntity, CustomerInteraction } from '../data/entities'\nimport { findPeopleByAddresses, normalizeAddresses } from './findPeopleByAddresses'\nimport { emitCustomersEvent } from '../events'\n\n/**\n * Shared implementation for the link-channel-message subscribers.\n *\n * The auto-discovery scanner requires a single string `event` value on each\n * subscriber file. Because we must handle both `communication_channels.message.received`\n * AND `.sent`, we use TWO thin subscriber files (link-channel-message-received.ts\n * and link-channel-message-sent.ts) that both delegate here.\n */\n\n// \u2500\u2500 Types \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\n/**\n * Payload emitted by `communication_channels.message.received` and\n * `communication_channels.message.sent`.\n *\n * The canonical field is `channelLinkId` (as emitted by the hub). The alias\n * `messageChannelLinkId` is kept for test stubs and legacy compatibility.\n */\ntype LinkChannelMessagePayload = {\n  eventType?: string\n  /** UUID of the MessageChannelLink row (canonical hub field name). */\n  channelLinkId?: string\n  /** Alias used in some older stubs / test payloads. Prefer channelLinkId. */\n  messageChannelLinkId?: string\n  channelId?: string | null\n  tenantId?: string\n  organizationId?: string | null\n  providerKey?: string | null\n  direction?: 'inbound' | 'outbound' | null\n}\n\ntype SubscriberContext = {\n  resolve: <T = unknown>(name: string) => T\n}\n\n// \u2500\u2500 Constants \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\nconst POSTGRES_UNIQUE_VIOLATION = '23505'\n\n// \u2500\u2500 Main handler \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\nexport default async function handler(\n  payload: LinkChannelMessagePayload,\n  ctx: SubscriberContext,\n): Promise<void> {\n  // Resolve the link ID from either field name.\n  const linkId = payload?.channelLinkId ?? payload?.messageChannelLinkId\n  if (typeof linkId !== 'string' || !linkId) return\n\n  // Fail-closed when tenantId is missing \u2014 unscoped queries are unsafe.\n  if (typeof payload.tenantId !== 'string' || !payload.tenantId) return\n\n  const tenantId = payload.tenantId\n  const organizationId = payload.organizationId ?? null\n  // CustomerEntity and CustomerInteraction are organization-scoped. Without an\n  // organization id, fail closed instead of linking tenant-wide by email/thread.\n  if (!organizationId) return\n  const dscope = { tenantId, organizationId }\n\n  // em.fork() gives us an isolated identity map for this event.\n  const em = (ctx.resolve('em') as EntityManager).fork()\n\n  // \u2500\u2500 (1) Load the MessageChannelLink row \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n  //\n  // The customers module MUST NOT import MessageChannelLink from the\n  // communication_channels module (cross-module ORM boundary rule in AGENTS.md).\n  // We use the entity class name as a string so MikroORM's identity map resolves\n  // it at runtime \u2014 the generated entity registry includes the hub's entities.\n  // Read through findOneWithDecryption so any encrypted columns on the hub\n  // entity are transparently decrypted (per the Encryption section in AGENTS.md).\n  const link = (await findOneWithDecryption(\n    em,\n    'MessageChannelLink' as any,\n    { id: linkId, tenantId, organizationId } as any,\n    undefined,\n    dscope,\n  )) as Record<string, unknown> | null\n\n  if (!link) return\n\n  const metaJson = (link.channelMetadata ?? null) as Record<string, unknown> | null\n  const payloadJson = (link.channelPayload ?? null) as Record<string, unknown> | null\n\n  // \u2500\u2500 (2) Resolve the channel to get its owner userId \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n  //\n  // The channel.userId is needed for two purposes:\n  //   - authorUserId on the CustomerInteraction row\n  //   - default visibility ('private' for user-scoped, 'shared' for tenant-scoped)\n  //\n  // We look up the channel only when channelId is provided in the event payload.\n  let channelUserId: string | null = null\n  if (typeof payload.channelId === 'string' && payload.channelId) {\n    const channel = (await findOneWithDecryption(\n      em,\n      'CommunicationChannel' as any,\n      { id: payload.channelId, tenantId, organizationId } as any,\n      undefined,\n      dscope,\n    )) as { userId?: string | null } | null\n    channelUserId = channel?.userId ?? null\n  }\n\n  // \u2500\u2500 (3) Collect recipient addresses \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n  //\n  // The channel metadata shape differs by provider and direction:\n  //   - Outbound (Gmail): subject/to/cc/bcc/from are in channelMetadata\n  //     (merged from GmailEmailNativeMetadata by deliver-outbound-message.ts)\n  //   - Inbound (Gmail): from/to/cc/bcc/subject are in channelPayload\n  //     (from NormalizedInboundMessage.channelPayload)\n  //\n  // We check channelMetadata first (works for outbound + any provider that\n  // writes addresses there), then fall back to channelPayload for inbound.\n  const rawAddresses: unknown[] = []\n\n  // For inbound IMAP messages we ALWAYS read addresses from `channelPayload`,\n  // not `channelMetadata`. The IMAP adapter stores raw provider headers in\n  // `channelMetadata` (where `from` is a JSON-stringified string that's\n  // useless for address matching), and the structured normalized addresses\n  // in `channelPayload.from` / `.to` / `.cc` / `.bcc`. Reading metadata\n  // first poisoned `rawAddresses` with stringified-JSON garbage so the\n  // payload-fallback never ran.\n  //\n  // Priority: payloadJson (canonical normalized shape) \u2192 metaJson fallback\n  // (for legacy/outbound providers that still write addresses there).\n  if (payloadJson) {\n    collectAddressField(rawAddresses, payloadJson.from)\n    collectAddressField(rawAddresses, payloadJson.to)\n    collectAddressField(rawAddresses, payloadJson.cc)\n    collectAddressField(rawAddresses, payloadJson.bcc)\n  }\n\n  if (rawAddresses.length === 0 && metaJson) {\n    collectAddressField(rawAddresses, metaJson.from)\n    collectAddressField(rawAddresses, metaJson.to)\n    collectAddressField(rawAddresses, metaJson.cc)\n    collectAddressField(rawAddresses, metaJson.bcc)\n  }\n\n  const normalized = normalizeAddresses(rawAddresses as string[])\n\n  // \u2500\u2500 (4) Optional explicit crmPersonId hint \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n  //\n  // The outbound compose route stores `crmPersonId` in channelMetadata so the\n  // subscriber can link to the intended Person even if their address isn't in\n  // the recipient list (e.g. typo in To: field).\n  const crmPersonIdHint =\n    typeof metaJson?.crmPersonId === 'string' ? (metaJson!.crmPersonId as string) : null\n\n  // Defense-in-depth: the crmPersonId hint is written by the compose route\n  // (which already verifies tenant ownership), but the subscriber MUST re-verify\n  // the hinted Person belongs to THIS tenant before linking. Otherwise a stale or\n  // forged hint could attach an interaction to a Person in another tenant.\n  let crmPersonId: string | null = null\n  if (crmPersonIdHint) {\n    const hintedPerson = await findOneWithDecryption(\n      em,\n      CustomerEntity,\n      { id: crmPersonIdHint, kind: 'person', tenantId, organizationId, deletedAt: null } as any,\n      undefined,\n      dscope,\n    )\n    if (hintedPerson) crmPersonId = crmPersonIdHint\n  }\n\n  // Early exit: no addresses AND no hint \u2192 nothing to link.\n  if (normalized.length === 0 && !crmPersonId) {\n    // Before giving up, try threading-inheritance (TC-CRM-EMAIL-005).\n    await handleThreadingInheritance(em, link, linkId, tenantId, organizationId, channelUserId, metaJson, payloadJson)\n    return\n  }\n\n  // \u2500\u2500 (5) Resolve People by address \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n  const matched = await findPeopleByAddresses(em, normalized, tenantId, organizationId)\n  const personIdSet = new Set<string>(matched.map((m) => m.id))\n  if (crmPersonId) personIdSet.add(crmPersonId)\n\n  if (personIdSet.size === 0) {\n    // Try threading-inheritance before giving up.\n    await handleThreadingInheritance(em, link, linkId, tenantId, organizationId, channelUserId, metaJson, payloadJson)\n    return\n  }\n\n  // \u2500\u2500 (6) Determine visibility \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n  //\n  // Priority order:\n  //   1. Explicit `crmVisibility` in channelMetadata (set by compose route)\n  //   2. Channel owner: 'private' if user-scoped, 'shared' if tenant-scoped\n  const linkDirection =\n    link.direction === 'inbound' || link.direction === 'outbound' ? link.direction : null\n  const visibility: 'private' | 'shared' = resolveVisibility(metaJson, channelUserId, linkDirection)\n\n  // \u2500\u2500 (7) Extract subject / body / timestamps \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n  const subject =\n    typeof metaJson?.subject === 'string'\n      ? (metaJson!.subject as string)\n      : typeof payloadJson?.subject === 'string'\n        ? (payloadJson!.subject as string)\n        : null\n\n  const bodyText =\n    typeof metaJson?.bodyText === 'string'\n      ? (metaJson!.bodyText as string)\n      : typeof payloadJson?.text === 'string'\n        ? (payloadJson!.text as string)\n        : null\n\n  const occurredAt = link.createdAt instanceof Date ? link.createdAt : new Date()\n  const providerKey =\n    typeof link.providerKey === 'string' ? (link.providerKey as string) : null\n\n  // \u2500\u2500 (8) INSERT one CustomerInteraction per matched Person \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n  await persistInteractions(\n    em,\n    personIdSet,\n    {\n      linkId,\n      tenantId,\n      organizationId,\n      interactionType: 'email',\n      title: subject,\n      body: bodyText,\n      authorUserId: channelUserId,\n      occurredAt,\n      visibility,\n      channelProviderKey: providerKey,\n    },\n  )\n}\n\n// \u2500\u2500 Threading-inheritance fallback \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\n/**\n * When direct address matching finds 0 people AND crmPersonId is absent, look\n * up parent message references from channelMetadata (`inReplyTo` + `references`).\n *\n * For each reference (an RFC2822 Message-ID), find a prior MessageChannelLink\n * in this tenant whose `channelMetadata.messageId` matches. For each such\n * parent link, find any existing email CustomerInteraction rows where\n * `externalMessageId = parent.id` \u2014 and link THIS message to the same Persons.\n *\n * This enables TC-CRM-EMAIL-005: a reply from an unknown address is still\n * attached to alice's timeline because the original thread was.\n */\nasync function handleThreadingInheritance(\n  em: EntityManager,\n  _link: Record<string, unknown>,\n  linkId: string,\n  tenantId: string,\n  organizationId: string | null,\n  channelUserId: string | null,\n  metaJson: Record<string, unknown> | null,\n  payloadJson: Record<string, unknown> | null,\n): Promise<void> {\n  // \u2500\u2500 Primary: inherit Person(s) from the hub's authoritative thread \u2500\u2500\u2500\u2500\u2500\u2500\n  //\n  // The hub threads an inbound reply into the same `messages.message.thread_id`\n  // as the outbound that started the conversation (via the thread token /\n  // subject+participants matcher). That outbound is already linked to the CRM\n  // Person (through the `crmPersonId` hint set by the compose route). So a reply\n  // inherits the Person of any existing email interaction in the same thread.\n  //\n  // This is the dependable join where the alternatives are not:\n  //   - Address matching (`findPeopleByAddresses`) filters the *encrypted*\n  //     `primary_email` column by a plaintext value, which never matches when\n  //     tenant data encryption is on (ciphertext != plaintext).\n  //   - RFC Message-IDs are rewritten by some providers (e.g. Gmail) on send,\n  //     so the legacy In-Reply-To/References inheritance below also misses.\n  // The hub thread id survives both, so we resolve by it first.\n  const inboundMessageId = typeof _link.messageId === 'string' ? _link.messageId : null\n  if (inboundMessageId && organizationId) {\n    const threadPersonRows = (await em.getConnection().execute(\n      `SELECT DISTINCT ci.entity_id AS entity_id\n       FROM messages inbound_m\n       JOIN messages thread_m ON thread_m.thread_id = inbound_m.thread_id\n       JOIN message_channel_links mcl ON mcl.message_id = thread_m.id\n       JOIN customer_interactions ci ON ci.external_message_id = mcl.id\n       WHERE inbound_m.id = ?\n         AND inbound_m.tenant_id = ?\n         AND inbound_m.organization_id = ?\n         AND inbound_m.deleted_at IS NULL\n         AND inbound_m.thread_id IS NOT NULL\n         AND thread_m.tenant_id = ?\n         AND thread_m.organization_id = ?\n         AND thread_m.deleted_at IS NULL\n         AND mcl.tenant_id = ?\n         AND mcl.organization_id = ?\n         AND ci.tenant_id = ?\n         AND ci.organization_id = ?\n         AND ci.interaction_type = 'email'\n         AND ci.deleted_at IS NULL\n         AND ci.entity_id IS NOT NULL\n       LIMIT 200`,\n      [\n        inboundMessageId,\n        tenantId,\n        organizationId,\n        tenantId,\n        organizationId,\n        tenantId,\n        organizationId,\n        tenantId,\n        organizationId,\n      ],\n    )) as Array<{ entity_id: string }>\n    const threadPersonIds = new Set<string>(\n      threadPersonRows.map((row) => row.entity_id).filter((id): id is string => !!id),\n    )\n    if (threadPersonIds.size > 0) {\n      const subject =\n        typeof metaJson?.subject === 'string'\n          ? (metaJson.subject as string)\n          : typeof payloadJson?.subject === 'string'\n            ? (payloadJson.subject as string)\n            : null\n      const bodyText =\n        typeof payloadJson?.text === 'string'\n          ? (payloadJson.text as string)\n          : typeof metaJson?.bodyText === 'string'\n            ? (metaJson.bodyText as string)\n            : null\n      const occurredAt = _link.createdAt instanceof Date ? (_link.createdAt as Date) : new Date()\n      const providerKey = typeof _link.providerKey === 'string' ? (_link.providerKey as string) : null\n      await persistInteractions(em, threadPersonIds, {\n        linkId,\n        tenantId,\n        organizationId,\n        interactionType: 'email',\n        title: subject,\n        body: bodyText,\n        authorUserId: channelUserId,\n        occurredAt,\n        visibility: channelUserId ? 'private' : 'shared',\n        channelProviderKey: providerKey,\n      })\n      return\n    }\n  }\n\n  // \u2500\u2500 Fallback: legacy In-Reply-To / References Message-ID inheritance \u2500\u2500\u2500\u2500\u2500\n  // Collect reference message-ids from inReplyTo + references\n  const refIds: string[] = []\n  const inReplyTo =\n    typeof metaJson?.inReplyTo === 'string'\n      ? stripBrackets(metaJson!.inReplyTo as string)\n      : typeof payloadJson?.inReplyTo === 'string'\n        ? stripBrackets(payloadJson!.inReplyTo as string)\n        : null\n  if (inReplyTo) refIds.push(inReplyTo)\n\n  const refs =\n    Array.isArray(metaJson?.references)\n      ? (metaJson!.references as unknown[])\n      : Array.isArray(payloadJson?.references)\n        ? (payloadJson!.references as unknown[])\n        : []\n  for (const r of refs) {\n    if (typeof r === 'string') {\n      const stripped = stripBrackets(r)\n      if (stripped && !refIds.includes(stripped)) refIds.push(stripped)\n    }\n  }\n\n  if (refIds.length === 0) return\n\n  // Find parent MessageChannelLinks whose channelMetadata.messageId is in refIds.\n  // Bounded lookup: narrow to the candidate Message-IDs directly in SQL instead\n  // of loading every link in the tenant and filtering in JS (which does not scale\n  // on a busy mailbox \u2014 this path runs for every inbound reply that didn't match a\n  // Person by address). channel_metadata is NOT an encrypted column, so a\n  // parameterized raw query is safe; we match both bracketed (`<id>`) and\n  // unbracketed (`id`) Message-ID storage forms, capped to a sane page.\n  const dscope = { tenantId, organizationId }\n  const messageIdCandidates = Array.from(\n    new Set(refIds.flatMap((ref) => [ref, `<${ref}>`])),\n  )\n  const placeholders = messageIdCandidates.map(() => '?').join(', ')\n  const parentLinkRows = (await em.getConnection().execute(\n    `SELECT id FROM message_channel_links\n     WHERE tenant_id = ?\n       AND organization_id = ?\n       AND channel_metadata->>'messageId' IN (${placeholders})\n     LIMIT 200`,\n    [tenantId, organizationId, ...messageIdCandidates],\n  )) as Array<{ id: string }>\n\n  const matchedParentIds = parentLinkRows.map((parentLink) => parentLink.id)\n\n  if (matchedParentIds.length === 0) return\n\n  // Find existing email CustomerInteraction rows for those parent links.\n  const parentInteractions = (await findWithDecryption(\n    em,\n    CustomerInteraction,\n    {\n      externalMessageId: { $in: matchedParentIds },\n      tenantId,\n      organizationId,\n      interactionType: 'email',\n      deletedAt: null,\n    } as any,\n    undefined,\n    dscope,\n  )) as Array<{ entity: { id: string } }>\n\n  const inheritedPersonIdSet = new Set<string>(\n    parentInteractions.map((pi) => pi.entity?.id).filter(Boolean) as string[],\n  )\n\n  if (inheritedPersonIdSet.size === 0) return\n\n  const visibility: 'private' | 'shared' = channelUserId ? 'private' : 'shared'\n  const link = _link\n  const inheritedMeta = (link.channelMetadata ?? null) as Record<string, unknown> | null\n  const subject =\n    typeof inheritedMeta?.subject === 'string' ? (inheritedMeta.subject as string) : null\n  const occurredAt = link.createdAt instanceof Date ? (link.createdAt as Date) : new Date()\n  const providerKey =\n    typeof link.providerKey === 'string' ? (link.providerKey as string) : null\n\n  await persistInteractions(\n    em,\n    inheritedPersonIdSet,\n    {\n      linkId,\n      tenantId,\n      organizationId,\n      interactionType: 'email',\n      title: subject,\n      body: null,\n      authorUserId: channelUserId,\n      occurredAt,\n      visibility,\n      channelProviderKey: providerKey,\n    },\n  )\n}\n\n// \u2500\u2500 Helpers \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\ninterface InteractionData {\n  linkId: string\n  tenantId: string\n  organizationId: string | null\n  interactionType: string\n  title: string | null\n  body: string | null\n  authorUserId: string | null\n  occurredAt: Date\n  visibility: 'private' | 'shared'\n  channelProviderKey: string | null\n}\n\nasync function persistInteractions(\n  em: EntityManager,\n  personIdSet: Set<string>,\n  data: InteractionData,\n): Promise<void> {\n  for (const personId of personIdSet) {\n    // Fork per row so a unique-violation on one row doesn't poison the identity\n    // map for subsequent rows. The parent em's connection pool is reused.\n    const rowEm = em.fork()\n    // Use em.getReference so we satisfy the ManyToOne relation without a\n    // redundant SELECT \u2014 MikroORM will flush the FK column directly.\n    const entityRef = rowEm.getReference(CustomerEntity, personId)\n    const interaction = rowEm.create(CustomerInteraction, {\n      tenantId: data.tenantId,\n      organizationId: data.organizationId,\n      entity: entityRef,\n      interactionType: data.interactionType,\n      title: data.title,\n      body: data.body,\n      authorUserId: data.authorUserId,\n      occurredAt: data.occurredAt,\n      // Emails are logged AFTER they're sent/received \u2014 they are not\n      // scheduled work. Without an explicit status the entity default\n      // ('planned') combined with a past `occurredAt` makes the activity\n      // timeline render the email as \"overdue\", which is the wrong UX.\n      // The canonical \"completed\" value is `'done'` per\n      // `validators.ts:interactionStatusValues = ['planned', 'done', 'canceled']`\n      // \u2014 `'completed'` is a legacy spelling that the enricher accepts\n      // defensively but the activity timeline `isOverdue` predicate does NOT.\n      status: 'done',\n      externalMessageId: data.linkId,\n      visibility: data.visibility,\n      channelProviderKey: data.channelProviderKey,\n    } as any)\n    try {\n      await rowEm.flush()\n    } catch (err) {\n      // Idempotency: swallow unique-violation on (entity_id, external_message_id).\n      // The partial unique index `customer_interactions_email_dedupe_uq` guarantees\n      // at-most-once semantics across retries.\n      const code = (err as { code?: string }).code\n      if (code !== POSTGRES_UNIQUE_VIOLATION) throw err\n      // Duplicate (retried delivery) \u2014 already linked, skip the refresh signal.\n      continue\n    }\n    // Live-refresh signal for the CRM Person page (clientBroadcast \u2192 SSE). The\n    // interaction is already persisted, so a failed emit must not abort linking\n    // or fail this persistent (retried) subscriber.\n    try {\n      await emitCustomersEvent('customers.email.linked', {\n        personId,\n        interactionId: interaction.id,\n        tenantId: data.tenantId,\n        organizationId: data.organizationId,\n      })\n    } catch {\n      /* swallow \u2014 UI refresh signal is non-critical */\n    }\n  }\n}\n\nfunction resolveVisibility(\n  metaJson: Record<string, unknown> | null,\n  channelUserId: string | null,\n  direction: 'inbound' | 'outbound' | null,\n): 'private' | 'shared' {\n  // The explicit `crmVisibility` override is written ONLY by the outbound compose\n  // route. Inbound `channelMetadata` is provider-derived (and therefore attacker-\n  // influenceable), so it MUST NOT be able to downgrade a user-owned channel's\n  // inbound mail from private \u2192 shared. Honor the override on outbound only.\n  if (direction === 'outbound') {\n    if (metaJson?.crmVisibility === 'shared') return 'shared'\n    if (metaJson?.crmVisibility === 'private') return 'private'\n  }\n  // Tenant-scoped channels (no userId) \u2192 shared; user-scoped \u2192 private.\n  return channelUserId ? 'private' : 'shared'\n}\n\n/**\n * Collect email address strings from a field that may be:\n *   - a plain string: 'alice@example.com'\n *   - an array of strings: ['alice@example.com', 'bob@example.com']\n *   - an object with an `address` property: { address: 'alice@example.com', name: 'Alice' }\n *   - an array of such objects\n */\nfunction collectAddressField(out: unknown[], value: unknown): void {\n  if (!value) return\n  if (typeof value === 'string') {\n    out.push(value)\n    return\n  }\n  if (Array.isArray(value)) {\n    for (const item of value) {\n      if (typeof item === 'string') {\n        out.push(item)\n      } else if (item && typeof item === 'object' && typeof (item as Record<string, unknown>).address === 'string') {\n        out.push((item as Record<string, unknown>).address as string)\n      }\n    }\n    return\n  }\n  if (typeof value === 'object' && typeof (value as Record<string, unknown>).address === 'string') {\n    out.push((value as Record<string, unknown>).address as string)\n  }\n}\n\nfunction stripBrackets(value: string): string {\n  const trimmed = value.trim()\n  if (trimmed.startsWith('<') && trimmed.endsWith('>')) {\n    return trimmed.slice(1, -1)\n  }\n  return trimmed\n}\n"],
+  "mappings": "AACA,SAAS,uBAAuB,0BAA0B;AAC1D,SAAS,gBAAgB,2BAA2B;AACpD,SAAS,uBAAuB,0BAA0B;AAC1D,SAAS,0BAA0B;AAuCnC,MAAM,4BAA4B;AAIlC,eAAO,QACL,SACA,KACe;AAEf,QAAM,SAAS,SAAS,iBAAiB,SAAS;AAClD,MAAI,OAAO,WAAW,YAAY,CAAC,OAAQ;AAG3C,MAAI,OAAO,QAAQ,aAAa,YAAY,CAAC,QAAQ,SAAU;AAE/D,QAAM,WAAW,QAAQ;AACzB,QAAM,iBAAiB,QAAQ,kBAAkB;AAGjD,MAAI,CAAC,eAAgB;AACrB,QAAM,SAAS,EAAE,UAAU,eAAe;AAG1C,QAAM,KAAM,IAAI,QAAQ,IAAI,EAAoB,KAAK;AAUrD,QAAM,OAAQ,MAAM;AAAA,IAClB;AAAA,IACA;AAAA,IACA,EAAE,IAAI,QAAQ,UAAU,eAAe;AAAA,IACvC;AAAA,IACA;AAAA,EACF;AAEA,MAAI,CAAC,KAAM;AAEX,QAAM,WAAY,KAAK,mBAAmB;AAC1C,QAAM,cAAe,KAAK,kBAAkB;AAS5C,MAAI,gBAA+B;AACnC,MAAI,OAAO,QAAQ,cAAc,YAAY,QAAQ,WAAW;AAC9D,UAAM,UAAW,MAAM;AAAA,MACrB;AAAA,MACA;AAAA,MACA,EAAE,IAAI,QAAQ,WAAW,UAAU,eAAe;AAAA,MAClD;AAAA,MACA;AAAA,IACF;AACA,oBAAgB,SAAS,UAAU;AAAA,EACrC;AAYA,QAAM,eAA0B,CAAC;AAYjC,MAAI,aAAa;AACf,wBAAoB,cAAc,YAAY,IAAI;AAClD,wBAAoB,cAAc,YAAY,EAAE;AAChD,wBAAoB,cAAc,YAAY,EAAE;AAChD,wBAAoB,cAAc,YAAY,GAAG;AAAA,EACnD;AAEA,MAAI,aAAa,WAAW,KAAK,UAAU;AACzC,wBAAoB,cAAc,SAAS,IAAI;AAC/C,wBAAoB,cAAc,SAAS,EAAE;AAC7C,wBAAoB,cAAc,SAAS,EAAE;AAC7C,wBAAoB,cAAc,SAAS,GAAG;AAAA,EAChD;AAEA,QAAM,aAAa,mBAAmB,YAAwB;AAO9D,QAAM,kBACJ,OAAO,UAAU,gBAAgB,WAAY,SAAU,cAAyB;AAMlF,MAAI,cAA6B;AACjC,MAAI,iBAAiB;AACnB,UAAM,eAAe,MAAM;AAAA,MACzB;AAAA,MACA;AAAA,MACA,EAAE,IAAI,iBAAiB,MAAM,UAAU,UAAU,gBAAgB,WAAW,KAAK;AAAA,MACjF;AAAA,MACA;AAAA,IACF;AACA,QAAI,aAAc,eAAc;AAAA,EAClC;AAGA,MAAI,WAAW,WAAW,KAAK,CAAC,aAAa;AAE3C,UAAM,2BAA2B,IAAI,MAAM,QAAQ,UAAU,gBAAgB,eAAe,UAAU,WAAW;AACjH;AAAA,EACF;AAGA,QAAM,UAAU,MAAM,sBAAsB,IAAI,YAAY,UAAU,cAAc;AACpF,QAAM,cAAc,IAAI,IAAY,QAAQ,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;AAC5D,MAAI,YAAa,aAAY,IAAI,WAAW;AAE5C,MAAI,YAAY,SAAS,GAAG;AAE1B,UAAM,2BAA2B,IAAI,MAAM,QAAQ,UAAU,gBAAgB,eAAe,UAAU,WAAW;AACjH;AAAA,EACF;AAOA,QAAM,gBACJ,KAAK,cAAc,aAAa,KAAK,cAAc,aAAa,KAAK,YAAY;AACnF,QAAM,aAAmC,kBAAkB,UAAU,eAAe,aAAa;AAGjG,QAAM,UACJ,OAAO,UAAU,YAAY,WACxB,SAAU,UACX,OAAO,aAAa,YAAY,WAC7B,YAAa,UACd;AAER,QAAM,WACJ,OAAO,UAAU,aAAa,WACzB,SAAU,WACX,OAAO,aAAa,SAAS,WAC1B,YAAa,OACd;AAER,QAAM,aAAa,KAAK,qBAAqB,OAAO,KAAK,YAAY,oBAAI,KAAK;AAC9E,QAAM,cACJ,OAAO,KAAK,gBAAgB,WAAY,KAAK,cAAyB;AAGxE,QAAM;AAAA,IACJ;AAAA,IACA;AAAA,IACA;AAAA,MACE;AAAA,MACA;AAAA,MACA;AAAA,MACA,iBAAiB;AAAA,MACjB,OAAO;AAAA,MACP,MAAM;AAAA,MACN,cAAc;AAAA,MACd;AAAA,MACA;AAAA,MACA,oBAAoB;AAAA,IACtB;AAAA,EACF;AACF;AAgBA,eAAe,2BACb,IACA,OACA,QACA,UACA,gBACA,eACA,UACA,aACe;AAgBf,QAAM,mBAAmB,OAAO,MAAM,cAAc,WAAW,MAAM,YAAY;AACjF,MAAI,oBAAoB,gBAAgB;AACtC,UAAM,mBAAoB,MAAM,GAAG,cAAc,EAAE;AAAA,MACjD;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAqBA;AAAA,QACE;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AACA,UAAM,kBAAkB,IAAI;AAAA,MAC1B,iBAAiB,IAAI,CAAC,QAAQ,IAAI,SAAS,EAAE,OAAO,CAAC,OAAqB,CAAC,CAAC,EAAE;AAAA,IAChF;AACA,QAAI,gBAAgB,OAAO,GAAG;AAC5B,YAAMA,WACJ,OAAO,UAAU,YAAY,WACxB,SAAS,UACV,OAAO,aAAa,YAAY,WAC7B,YAAY,UACb;AACR,YAAM,WACJ,OAAO,aAAa,SAAS,WACxB,YAAY,OACb,OAAO,UAAU,aAAa,WAC3B,SAAS,WACV;AACR,YAAMC,cAAa,MAAM,qBAAqB,OAAQ,MAAM,YAAqB,oBAAI,KAAK;AAC1F,YAAMC,eAAc,OAAO,MAAM,gBAAgB,WAAY,MAAM,cAAyB;AAC5F,YAAM,oBAAoB,IAAI,iBAAiB;AAAA,QAC7C;AAAA,QACA;AAAA,QACA;AAAA,QACA,iBAAiB;AAAA,QACjB,OAAOF;AAAA,QACP,MAAM;AAAA,QACN,cAAc;AAAA,QACd,YAAAC;AAAA,QACA,YAAY,gBAAgB,YAAY;AAAA,QACxC,oBAAoBC;AAAA,MACtB,CAAC;AACD;AAAA,IACF;AAAA,EACF;AAIA,QAAM,SAAmB,CAAC;AAC1B,QAAM,YACJ,OAAO,UAAU,cAAc,WAC3B,cAAc,SAAU,SAAmB,IAC3C,OAAO,aAAa,cAAc,WAChC,cAAc,YAAa,SAAmB,IAC9C;AACR,MAAI,UAAW,QAAO,KAAK,SAAS;AAEpC,QAAM,OACJ,MAAM,QAAQ,UAAU,UAAU,IAC7B,SAAU,aACX,MAAM,QAAQ,aAAa,UAAU,IAClC,YAAa,aACd,CAAC;AACT,aAAW,KAAK,MAAM;AACpB,QAAI,OAAO,MAAM,UAAU;AACzB,YAAM,WAAW,cAAc,CAAC;AAChC,UAAI,YAAY,CAAC,OAAO,SAAS,QAAQ,EAAG,QAAO,KAAK,QAAQ;AAAA,IAClE;AAAA,EACF;AAEA,MAAI,OAAO,WAAW,EAAG;AASzB,QAAM,SAAS,EAAE,UAAU,eAAe;AAC1C,QAAM,sBAAsB,MAAM;AAAA,IAChC,IAAI,IAAI,OAAO,QAAQ,CAAC,QAAQ,CAAC,KAAK,IAAI,GAAG,GAAG,CAAC,CAAC;AAAA,EACpD;AACA,QAAM,eAAe,oBAAoB,IAAI,MAAM,GAAG,EAAE,KAAK,IAAI;AACjE,QAAM,iBAAkB,MAAM,GAAG,cAAc,EAAE;AAAA,IAC/C;AAAA;AAAA;AAAA,gDAG4C,YAAY;AAAA;AAAA,IAExD,CAAC,UAAU,gBAAgB,GAAG,mBAAmB;AAAA,EACnD;AAEA,QAAM,mBAAmB,eAAe,IAAI,CAAC,eAAe,WAAW,EAAE;AAEzE,MAAI,iBAAiB,WAAW,EAAG;AAGnC,QAAM,qBAAsB,MAAM;AAAA,IAChC;AAAA,IACA;AAAA,IACA;AAAA,MACE,mBAAmB,EAAE,KAAK,iBAAiB;AAAA,MAC3C;AAAA,MACA;AAAA,MACA,iBAAiB;AAAA,MACjB,WAAW;AAAA,IACb;AAAA,IACA;AAAA,IACA;AAAA,EACF;AAEA,QAAM,uBAAuB,IAAI;AAAA,IAC/B,mBAAmB,IAAI,CAAC,OAAO,GAAG,QAAQ,EAAE,EAAE,OAAO,OAAO;AAAA,EAC9D;AAEA,MAAI,qBAAqB,SAAS,EAAG;AAErC,QAAM,aAAmC,gBAAgB,YAAY;AACrE,QAAM,OAAO;AACb,QAAM,gBAAiB,KAAK,mBAAmB;AAC/C,QAAM,UACJ,OAAO,eAAe,YAAY,WAAY,cAAc,UAAqB;AACnF,QAAM,aAAa,KAAK,qBAAqB,OAAQ,KAAK,YAAqB,oBAAI,KAAK;AACxF,QAAM,cACJ,OAAO,KAAK,gBAAgB,WAAY,KAAK,cAAyB;AAExE,QAAM;AAAA,IACJ;AAAA,IACA;AAAA,IACA;AAAA,MACE;AAAA,MACA;AAAA,MACA;AAAA,MACA,iBAAiB;AAAA,MACjB,OAAO;AAAA,MACP,MAAM;AAAA,MACN,cAAc;AAAA,MACd;AAAA,MACA;AAAA,MACA,oBAAoB;AAAA,IACtB;AAAA,EACF;AACF;AAiBA,eAAe,oBACb,IACA,aACA,MACe;AACf,aAAW,YAAY,aAAa;AAGlC,UAAM,QAAQ,GAAG,KAAK;AAGtB,UAAM,YAAY,MAAM,aAAa,gBAAgB,QAAQ;AAC7D,UAAM,cAAc,MAAM,OAAO,qBAAqB;AAAA,MACpD,UAAU,KAAK;AAAA,MACf,gBAAgB,KAAK;AAAA,MACrB,QAAQ;AAAA,MACR,iBAAiB,KAAK;AAAA,MACtB,OAAO,KAAK;AAAA,MACZ,MAAM,KAAK;AAAA,MACX,cAAc,KAAK;AAAA,MACnB,YAAY,KAAK;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MASjB,QAAQ;AAAA,MACR,mBAAmB,KAAK;AAAA,MACxB,YAAY,KAAK;AAAA,MACjB,oBAAoB,KAAK;AAAA,IAC3B,CAAQ;AACR,QAAI;AACF,YAAM,MAAM,MAAM;AAAA,IACpB,SAAS,KAAK;AAIZ,YAAM,OAAQ,IAA0B;AACxC,UAAI,SAAS,0BAA2B,OAAM;AAE9C;AAAA,IACF;AAIA,QAAI;AACF,YAAM,mBAAmB,0BAA0B;AAAA,QACjD;AAAA,QACA,eAAe,YAAY;AAAA,QAC3B,UAAU,KAAK;AAAA,QACf,gBAAgB,KAAK;AAAA,MACvB,CAAC;AAAA,IACH,QAAQ;AAAA,IAER;AAAA,EACF;AACF;AAEA,SAAS,kBACP,UACA,eACA,WACsB;AAKtB,MAAI,cAAc,YAAY;AAC5B,QAAI,UAAU,kBAAkB,SAAU,QAAO;AACjD,QAAI,UAAU,kBAAkB,UAAW,QAAO;AAAA,EACpD;AAEA,SAAO,gBAAgB,YAAY;AACrC;AASA,SAAS,oBAAoB,KAAgB,OAAsB;AACjE,MAAI,CAAC,MAAO;AACZ,MAAI,OAAO,UAAU,UAAU;AAC7B,QAAI,KAAK,KAAK;AACd;AAAA,EACF;AACA,MAAI,MAAM,QAAQ,KAAK,GAAG;AACxB,eAAW,QAAQ,OAAO;AACxB,UAAI,OAAO,SAAS,UAAU;AAC5B,YAAI,KAAK,IAAI;AAAA,MACf,WAAW,QAAQ,OAAO,SAAS,YAAY,OAAQ,KAAiC,YAAY,UAAU;AAC5G,YAAI,KAAM,KAAiC,OAAiB;AAAA,MAC9D;AAAA,IACF;AACA;AAAA,EACF;AACA,MAAI,OAAO,UAAU,YAAY,OAAQ,MAAkC,YAAY,UAAU;AAC/F,QAAI,KAAM,MAAkC,OAAiB;AAAA,EAC/D;AACF;AAEA,SAAS,cAAc,OAAuB;AAC5C,QAAM,UAAU,MAAM,KAAK;AAC3B,MAAI,QAAQ,WAAW,GAAG,KAAK,QAAQ,SAAS,GAAG,GAAG;AACpD,WAAO,QAAQ,MAAM,GAAG,EAAE;AAAA,EAC5B;AACA,SAAO;AACT;",
+  "names": ["subject", "occurredAt", "providerKey"]
+}

package/dist/modules/customers/lib/personCompanyLinkTable.js

@@ -10,10 +10,24 @@ function filterActivePersonCompanyLinks(links) {
   if (!Array.isArray(links)) return [];
   return links.filter((entry) => entry?.deletedAt == null);
 }
+function withCustomerPersonCompanyLinkScope(where, scope) {
+  const scoped = { ...where };
+  if (scope.tenantId) scoped.tenantId = scope.tenantId;
+  if (scope.organizationId) scoped.organizationId = scope.organizationId;
+  return scoped;
+}
+function withScopedCustomerDealLinkWhere(dealId, scope) {
+  const deal = { id: dealId };
+  if (scope.tenantId) deal.tenantId = scope.tenantId;
+  if (scope.organizationId) deal.organizationId = scope.organizationId;
+  return { deal };
+}
 export {
   customerPersonCompanyLinksSupportDeletedAt,
   filterActivePersonCompanyLinks,
   warnMissingCustomerPersonCompanyLinksDeletedAt,
-  withActiveCustomerPersonCompanyLinkFilter
+  withActiveCustomerPersonCompanyLinkFilter,
+  withCustomerPersonCompanyLinkScope,
+  withScopedCustomerDealLinkWhere
 };
 //# sourceMappingURL=personCompanyLinkTable.js.map

package/dist/modules/customers/lib/personCompanyLinkTable.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/customers/lib/personCompanyLinkTable.ts"],
-  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\n\n// The previous implementation probed `information_schema.columns` on every\n// first call via `em.getKysely()` to decide whether to add a `deletedAt: null`\n// filter. When that probe ran inside an already-active MikroORM transaction it\n// shared the transaction's connection \u2014 and any failure (including transient\n// connection-pool state, an aborted TX from a sibling query, or pg returning\n// 25P02) propagated back into the host transaction, poisoning every following\n// query with `current transaction is aborted, commands ignored until end of\n// transaction block`. That is what produced the standalone-CI failure burst\n// (loadPersonCompanyLinks \u2192 25P02 \u2192 customers.people.create \u2192 500) and the\n// sync_excel worker `failedCount: 1` regression.\n//\n// The `deleted_at` column on `customer_person_company_links` has been part of\n// the committed module snapshot since `Migration20260415095203` (April 2026)\n// and is referenced by `Migration20260417140000` (partial unique index uses\n// `where deleted_at is null`). Any environment running these migrations\n// already has the column. So the probe is no longer load-bearing \u2014 it only\n// adds risk. We now unconditionally include `deletedAt: null` in the filter.\n// If a downstream DB is genuinely un-migrated, the underlying `em.find` will\n// surface the authentic `column \"deleted_at\" of relation\n// \"customer_person_company_links\" does not exist` (pg 42703) pointing the\n// operator at the real fix (`yarn db:migrate`).\n//\n// `customerPersonCompanyLinksSupportDeletedAt` and\n// `warnMissingCustomerPersonCompanyLinksDeletedAt` are kept as exported\n// no-op-equivalents so external callers (and the published @open-mercato/core\n// API surface) don't break.\n\nexport async function customerPersonCompanyLinksSupportDeletedAt(_em: EntityManager): Promise<boolean> {\n  return true\n}\n\nexport function warnMissingCustomerPersonCompanyLinksDeletedAt(_source: string): void {\n  // No-op: column is guaranteed present by Migration20260415095203 and the\n  // module snapshot. Kept for backward-compatible exports.\n}\n\nexport async function withActiveCustomerPersonCompanyLinkFilter<T extends Record<string, unknown>>(\n  _em: EntityManager,\n  where: T,\n  _source: string,\n): Promise<T & { deletedAt?: null }> {\n  return { ...where, deletedAt: null }\n}\n\n/**\n * Drop soft-deleted link rows from a result set as a defense-in-depth fallback.\n * MikroORM has historically dropped `deletedAt: null` from the WHERE clause for\n * nullable date columns under certain configurations, so callers SHOULD apply this\n * after `findWithDecryption(...)` until the upstream query filter is verified to\n * fully cover all callers.\n */\nexport function filterActivePersonCompanyLinks<T extends { deletedAt?: Date | string | null | undefined }>(\n  links: T[] | null | undefined,\n): T[] {\n  if (!Array.isArray(links)) return []\n  return links.filter((entry) => entry?.deletedAt == null)\n}\n"],
-  "mappings": "AA6BA,eAAsB,2CAA2C,KAAsC;AACrG,SAAO;AACT;AAEO,SAAS,+CAA+C,SAAuB;AAGtF;AAEA,eAAsB,0CACpB,KACA,OACA,SACmC;AACnC,SAAO,EAAE,GAAG,OAAO,WAAW,KAAK;AACrC;AASO,SAAS,+BACd,OACK;AACL,MAAI,CAAC,MAAM,QAAQ,KAAK,EAAG,QAAO,CAAC;AACnC,SAAO,MAAM,OAAO,CAAC,UAAU,OAAO,aAAa,IAAI;AACzD;",
+  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\n\n// The previous implementation probed `information_schema.columns` on every\n// first call via `em.getKysely()` to decide whether to add a `deletedAt: null`\n// filter. When that probe ran inside an already-active MikroORM transaction it\n// shared the transaction's connection \u2014 and any failure (including transient\n// connection-pool state, an aborted TX from a sibling query, or pg returning\n// 25P02) propagated back into the host transaction, poisoning every following\n// query with `current transaction is aborted, commands ignored until end of\n// transaction block`. That is what produced the standalone-CI failure burst\n// (loadPersonCompanyLinks \u2192 25P02 \u2192 customers.people.create \u2192 500) and the\n// sync_excel worker `failedCount: 1` regression.\n//\n// The `deleted_at` column on `customer_person_company_links` has been part of\n// the committed module snapshot since `Migration20260415095203` (April 2026)\n// and is referenced by `Migration20260417140000` (partial unique index uses\n// `where deleted_at is null`). Any environment running these migrations\n// already has the column. So the probe is no longer load-bearing \u2014 it only\n// adds risk. We now unconditionally include `deletedAt: null` in the filter.\n// If a downstream DB is genuinely un-migrated, the underlying `em.find` will\n// surface the authentic `column \"deleted_at\" of relation\n// \"customer_person_company_links\" does not exist` (pg 42703) pointing the\n// operator at the real fix (`yarn db:migrate`).\n//\n// `customerPersonCompanyLinksSupportDeletedAt` and\n// `warnMissingCustomerPersonCompanyLinksDeletedAt` are kept as exported\n// no-op-equivalents so external callers (and the published @open-mercato/core\n// API surface) don't break.\n\nexport async function customerPersonCompanyLinksSupportDeletedAt(_em: EntityManager): Promise<boolean> {\n  return true\n}\n\nexport function warnMissingCustomerPersonCompanyLinksDeletedAt(_source: string): void {\n  // No-op: column is guaranteed present by Migration20260415095203 and the\n  // module snapshot. Kept for backward-compatible exports.\n}\n\nexport async function withActiveCustomerPersonCompanyLinkFilter<T extends Record<string, unknown>>(\n  _em: EntityManager,\n  where: T,\n  _source: string,\n): Promise<T & { deletedAt?: null }> {\n  return { ...where, deletedAt: null }\n}\n\n/**\n * Drop soft-deleted link rows from a result set as a defense-in-depth fallback.\n * MikroORM has historically dropped `deletedAt: null` from the WHERE clause for\n * nullable date columns under certain configurations, so callers SHOULD apply this\n * after `findWithDecryption(...)` until the upstream query filter is verified to\n * fully cover all callers.\n */\nexport function filterActivePersonCompanyLinks<T extends { deletedAt?: Date | string | null | undefined }>(\n  links: T[] | null | undefined,\n): T[] {\n  if (!Array.isArray(links)) return []\n  return links.filter((entry) => entry?.deletedAt == null)\n}\n\nexport type CustomerLinkTenantScope = {\n  tenantId?: string | null\n  organizationId?: string | null\n}\n\n/**\n * Bound a person\u2194company link lookup to the caller's tenant/organization.\n * `customer_person_company_links` carries `tenant_id`/`organization_id`\n * directly, so each scope column is added to the WHERE clause when present.\n * The people/companies list routes use this when resolving `excludeLinked*`\n * params so the lookup is bounded by tenant instead of scanning the whole link\n * table \u2014 `findWithDecryption` forwards the WHERE verbatim and treats the\n * tenant/org scope as decryption-only (#2736).\n */\nexport function withCustomerPersonCompanyLinkScope<T extends Record<string, unknown>>(\n  where: T,\n  scope: CustomerLinkTenantScope,\n): T & { tenantId?: string; organizationId?: string } {\n  const scoped: T & { tenantId?: string; organizationId?: string } = { ...where }\n  if (scope.tenantId) scoped.tenantId = scope.tenantId\n  if (scope.organizationId) scoped.organizationId = scope.organizationId\n  return scoped\n}\n\n/**\n * Build a tenant/organization-scoped WHERE for deal\u2194person and deal\u2194company\n * link lookups. Those link tables carry no tenant columns, so the scope is\n * applied through the tenant-owned `deal` aggregate (#2736).\n */\nexport function withScopedCustomerDealLinkWhere(\n  dealId: string,\n  scope: CustomerLinkTenantScope,\n): { deal: { id: string; tenantId?: string; organizationId?: string } } {\n  const deal: { id: string; tenantId?: string; organizationId?: string } = { id: dealId }\n  if (scope.tenantId) deal.tenantId = scope.tenantId\n  if (scope.organizationId) deal.organizationId = scope.organizationId\n  return { deal }\n}\n"],
+  "mappings": "AA6BA,eAAsB,2CAA2C,KAAsC;AACrG,SAAO;AACT;AAEO,SAAS,+CAA+C,SAAuB;AAGtF;AAEA,eAAsB,0CACpB,KACA,OACA,SACmC;AACnC,SAAO,EAAE,GAAG,OAAO,WAAW,KAAK;AACrC;AASO,SAAS,+BACd,OACK;AACL,MAAI,CAAC,MAAM,QAAQ,KAAK,EAAG,QAAO,CAAC;AACnC,SAAO,MAAM,OAAO,CAAC,UAAU,OAAO,aAAa,IAAI;AACzD;AAgBO,SAAS,mCACd,OACA,OACoD;AACpD,QAAM,SAA6D,EAAE,GAAG,MAAM;AAC9E,MAAI,MAAM,SAAU,QAAO,WAAW,MAAM;AAC5C,MAAI,MAAM,eAAgB,QAAO,iBAAiB,MAAM;AACxD,SAAO;AACT;AAOO,SAAS,gCACd,QACA,OACsE;AACtE,QAAM,OAAmE,EAAE,IAAI,OAAO;AACtF,MAAI,MAAM,SAAU,MAAK,WAAW,MAAM;AAC1C,MAAI,MAAM,eAAgB,MAAK,iBAAiB,MAAM;AACtD,SAAO,EAAE,KAAK;AAChB;",
   "names": []
 }

package/dist/modules/customers/lib/personEmailThreads.js

@@ -0,0 +1,205 @@
+import { findWithDecryption } from "@open-mercato/shared/lib/encryption/find";
+import { CustomerInteraction } from "../data/entities.js";
+import { buildEmailVisibilityMikroFilter } from "./visibilityFilter.js";
+const DEFAULT_MAX_THREADS = 50;
+const DEFAULT_MAX_MESSAGES_PER_THREAD = 200;
+const PREVIEW_LENGTH = 140;
+function extractAddresses(value) {
+  const out = [];
+  const pushOne = (item) => {
+    if (typeof item === "string") {
+      const trimmed = item.trim();
+      if (trimmed) out.push({ email: trimmed, name: null });
+      return;
+    }
+    if (item && typeof item === "object") {
+      const rec = item;
+      const address = typeof rec.address === "string" ? rec.address.trim() : null;
+      const name = typeof rec.name === "string" && rec.name.trim() ? rec.name.trim() : null;
+      if (address) out.push({ email: address, name });
+    }
+  };
+  if (Array.isArray(value)) {
+    for (const item of value) pushOne(item);
+  } else {
+    pushOne(value);
+  }
+  return out;
+}
+function firstString(...values) {
+  for (const value of values) {
+    if (typeof value === "string" && value.trim().length > 0) return value;
+  }
+  return null;
+}
+function toStringArray(...values) {
+  for (const value of values) {
+    if (Array.isArray(value)) {
+      const strings = value.filter((item) => typeof item === "string" && item.trim().length > 0);
+      if (strings.length > 0) return strings;
+    }
+  }
+  return [];
+}
+function truncate(value) {
+  if (!value) return value;
+  const collapsed = value.replace(/\s+/g, " ").trim();
+  if (collapsed.length <= PREVIEW_LENGTH) return collapsed;
+  return `${collapsed.slice(0, PREVIEW_LENGTH - 1)}\u2026`;
+}
+async function buildPersonEmailThreads(em, opts) {
+  const {
+    personId,
+    tenantId,
+    organizationId,
+    viewerUserId,
+    userFeatures,
+    maxThreads = DEFAULT_MAX_THREADS,
+    maxMessagesPerThread = DEFAULT_MAX_MESSAGES_PER_THREAD
+  } = opts;
+  const interactionWhere = {
+    entity: personId,
+    interactionType: "email",
+    deletedAt: null,
+    tenantId
+  };
+  if (organizationId) interactionWhere.organizationId = organizationId;
+  interactionWhere.$or = buildEmailVisibilityMikroFilter({
+    currentUserId: viewerUserId,
+    userFeatures
+  }).$or;
+  const dscope = { tenantId, organizationId: organizationId ?? null };
+  const interactions = await findWithDecryption(
+    em,
+    CustomerInteraction,
+    interactionWhere,
+    { orderBy: { occurredAt: "desc", createdAt: "desc" }, limit: maxThreads * 20 },
+    dscope
+  );
+  const linkIdByInteraction = /* @__PURE__ */ new Map();
+  const linkIds = [];
+  for (const interaction of interactions) {
+    const linkId = interaction.externalMessageId;
+    if (!linkId || linkIdByInteraction.has(linkId)) continue;
+    linkIdByInteraction.set(linkId, { occurredAt: interaction.occurredAt ?? interaction.createdAt });
+    linkIds.push(linkId);
+  }
+  if (linkIds.length === 0) return [];
+  const linkWhere = { id: { $in: linkIds }, tenantId };
+  if (organizationId) linkWhere.organizationId = organizationId;
+  const links = await findWithDecryption(
+    em,
+    "MessageChannelLink",
+    linkWhere,
+    void 0,
+    dscope
+  );
+  const messageIds = Array.from(
+    new Set(
+      links.map((link) => typeof link.messageId === "string" ? link.messageId : null).filter((value) => !!value)
+    )
+  );
+  const messageById = /* @__PURE__ */ new Map();
+  if (messageIds.length > 0) {
+    const messageWhere = { id: { $in: messageIds }, tenantId };
+    if (organizationId) messageWhere.organizationId = organizationId;
+    const messages = await findWithDecryption(
+      em,
+      "Message",
+      messageWhere,
+      void 0,
+      dscope
+    );
+    for (const message of messages) {
+      if (typeof message.id === "string") messageById.set(message.id, message);
+    }
+  }
+  const threadsByKey = /* @__PURE__ */ new Map();
+  for (const link of links) {
+    const linkId = typeof link.id === "string" ? link.id : null;
+    if (!linkId) continue;
+    const direction = link.direction === "outbound" ? "outbound" : "inbound";
+    const providerKey = typeof link.providerKey === "string" ? link.providerKey : null;
+    const payload = link.channelPayload ?? null;
+    const meta = link.channelMetadata ?? null;
+    const messageId = typeof link.messageId === "string" ? link.messageId : null;
+    const message = messageId ? messageById.get(messageId) ?? null : null;
+    const primary = direction === "outbound" ? meta : payload;
+    const secondary = direction === "outbound" ? payload : meta;
+    const fromList = extractAddresses(primary?.from ?? secondary?.from);
+    const toList = extractAddresses(primary?.to ?? secondary?.to);
+    const ccList = extractAddresses(primary?.cc ?? secondary?.cc);
+    const subject = firstString(
+      primary?.subject,
+      secondary?.subject,
+      typeof message?.subject === "string" ? message.subject : null
+    );
+    const bodyText = firstString(
+      direction === "outbound" ? meta?.bodyText : payload?.text,
+      direction === "outbound" ? payload?.text : meta?.bodyText,
+      typeof message?.body === "string" ? message.body : null
+    );
+    const sentAtRaw = (typeof message?.sentAt === "string" || message?.sentAt instanceof Date ? message.sentAt : null) ?? (link.createdAt instanceof Date || typeof link.createdAt === "string" ? link.createdAt : null) ?? linkIdByInteraction.get(linkId)?.occurredAt ?? /* @__PURE__ */ new Date();
+    const sentAt = (sentAtRaw instanceof Date ? sentAtRaw : new Date(sentAtRaw)).toISOString();
+    const threadKey = (typeof message?.threadId === "string" && message.threadId ? message.threadId : null) ?? (messageId ? `message:${messageId}` : `link:${linkId}`);
+    const dto = {
+      id: linkId,
+      messageId,
+      rfcMessageId: firstString(primary?.messageId, secondary?.messageId),
+      references: toStringArray(primary?.references, secondary?.references),
+      direction,
+      fromName: fromList[0]?.name ?? null,
+      fromEmail: fromList[0]?.email ?? null,
+      to: toList.map((a) => a.email),
+      cc: ccList.map((a) => a.email),
+      subject,
+      bodyText,
+      sentAt,
+      providerKey
+    };
+    const existing = threadsByKey.get(threadKey);
+    if (existing) {
+      existing.messages.push(dto);
+    } else {
+      threadsByKey.set(threadKey, {
+        threadKey,
+        subject,
+        preview: null,
+        participants: [],
+        lastMessageAt: sentAt,
+        messageCount: 0,
+        providerKey,
+        lastDirection: direction,
+        messages: [dto]
+      });
+    }
+  }
+  const threads = [];
+  for (const thread of threadsByKey.values()) {
+    thread.messages.sort((a, b) => a.sentAt.localeCompare(b.sentAt));
+    if (thread.messages.length > maxMessagesPerThread) {
+      thread.messages = thread.messages.slice(thread.messages.length - maxMessagesPerThread);
+    }
+    const last = thread.messages[thread.messages.length - 1];
+    const firstWithSubject = thread.messages.find((m) => m.subject);
+    const participantSet = /* @__PURE__ */ new Set();
+    for (const message of thread.messages) {
+      if (message.direction === "inbound" && message.fromEmail) participantSet.add(message.fromEmail);
+      if (message.direction === "outbound") message.to.forEach((email) => participantSet.add(email));
+    }
+    thread.subject = firstWithSubject?.subject ?? thread.subject;
+    thread.preview = truncate(last?.bodyText ?? null);
+    thread.participants = Array.from(participantSet);
+    thread.lastMessageAt = last?.sentAt ?? thread.lastMessageAt;
+    thread.lastDirection = last?.direction ?? thread.lastDirection;
+    thread.providerKey = last?.providerKey ?? thread.providerKey;
+    thread.messageCount = thread.messages.length;
+    threads.push(thread);
+  }
+  threads.sort((a, b) => b.lastMessageAt.localeCompare(a.lastMessageAt));
+  return threads.slice(0, maxThreads);
+}
+export {
+  buildPersonEmailThreads
+};
+//# sourceMappingURL=personEmailThreads.js.map