@open-mercato/core 0.6.4-develop.4382.1.6b4f656b77 → 0.6.4

package/dist/modules/feature_toggles/data/validators.js

@@ -1,10 +1,11 @@
 import { z } from "zod";
-const IDENTIFIER_PATTERN = /^[a-z][a-z0-9_]*$/;
+const IDENTIFIER_PATTERN = /^[a-z][a-z0-9_.-]*$/;
+const IDENTIFIER_PATTERN_MESSAGE = "identifier must start with a lowercase letter and contain only lowercase letters, numbers, dots, dashes, and underscores";
 const toggleTypeSchema = z.enum(["boolean", "string", "number", "json"]);
 const toggleCreateSchema = z.object({
   identifier: z.string().min(1).regex(
     IDENTIFIER_PATTERN,
-    "identifier must start with a lowercase letter and contain only lowercase letters, numbers, and underscores"
+    IDENTIFIER_PATTERN_MESSAGE
   ),
   name: z.string().min(1),
   description: z.string().nullable().optional(),
@@ -29,7 +30,8 @@ const featureToggleOverrideResponseSchema = z.object({
   value: z.any().optional(),
   tenantName: z.string(),
   tenantId: z.string().uuid(),
-  toggleType: toggleTypeSchema
+  toggleType: toggleTypeSchema,
+  updatedAt: z.string().nullable().optional()
 });
 const featureToggleOverrideWithValueSchema = featureToggleOverrideResponseSchema;
 const getToggleOverrideQuerySchema = z.object({
@@ -49,7 +51,7 @@ const featureToggleSchema = z.object({
   id: z.string().uuid().optional(),
   identifier: z.string().min(1).regex(
     IDENTIFIER_PATTERN,
-    "identifier must start with a lowercase letter and contain only lowercase letters, numbers, and underscores"
+    IDENTIFIER_PATTERN_MESSAGE
   ),
   name: z.string().min(1),
   description: z.string().nullable().optional(),
@@ -71,6 +73,7 @@ const overrideListResponseSchema = z.object({
 });
 export {
   IDENTIFIER_PATTERN,
+  IDENTIFIER_PATTERN_MESSAGE,
   changeOverrideStateBaseSchema,
   featureToggleOverrideResponseSchema,
   featureToggleOverrideWithValueSchema,

package/dist/modules/feature_toggles/data/validators.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/feature_toggles/data/validators.ts"],
-  "sourcesContent": ["import { z } from 'zod'\n\nexport const IDENTIFIER_PATTERN = /^[a-z][a-z0-9_]*$/\n\nexport const toggleTypeSchema = z.enum(['boolean', 'string', 'number', 'json'])\n\nexport const toggleCreateSchema = z.object({\n  identifier: z.string().min(1).regex(\n    IDENTIFIER_PATTERN,\n    'identifier must start with a lowercase letter and contain only lowercase letters, numbers, and underscores',\n  ),\n  name: z.string().min(1),\n  description: z.string().nullable().optional(),\n  category: z.string().nullable().optional(),\n\n  type: toggleTypeSchema,\n  defaultValue: z.any().nullable().optional(),\n})\n\nexport const toggleCreateSchemaList = z.array(toggleCreateSchema)\n\nexport const toggleUpdateSchema = z\n  .object({\n    id: z.string().uuid(),\n  })\n  .merge(toggleCreateSchema.partial())\n\nexport const changeOverrideStateBaseSchema = z.object({\n  toggleId: z.string().uuid(),\n  isOverride: z.boolean(),\n  overrideValue: z.any().optional(),\n})\n\n\nexport const processedChangeOverrideStateSchema = changeOverrideStateBaseSchema.extend({\n  tenantId: z.string().uuid(),\n})\n\nexport const featureToggleOverrideResponseSchema = z.object({\n  id: z.string().uuid(),\n  value: z.any().optional(),\n  tenantName: z.string(),\n  tenantId: z.string().uuid(),\n  toggleType: toggleTypeSchema,\n})\n\nexport type FeatureToggleOverrideResponse = z.infer<typeof featureToggleOverrideResponseSchema>\n\nexport const featureToggleOverrideWithValueSchema = featureToggleOverrideResponseSchema\nexport type FeatureToggleOverrideWithValue = FeatureToggleOverrideResponse\n\nexport const getToggleOverrideQuerySchema = z.object({\n  toggleId: z.string().uuid(),\n  tenantId: z.string().uuid().optional(),\n})\n\nexport const overrideListQuerySchema = z\n  .object({\n    category: z.string().optional(),\n    name: z.string().optional(),\n    identifier: z.string().optional(),\n    sortField: z.enum(['identifier', 'name', 'category']).optional(),\n    sortDir: z.enum(['asc', 'desc']).optional(),\n    page: z.coerce.number().min(1).optional().default(1),\n    pageSize: z.coerce.number().min(1).max(100).optional().default(25),\n  })\n  .passthrough()\n\nexport const featureToggleSchema = z.object({\n  id: z.string().uuid().optional(),\n  identifier: z.string().min(1).regex(\n    IDENTIFIER_PATTERN,\n    'identifier must start with a lowercase letter and contain only lowercase letters, numbers, and underscores',\n  ),\n  name: z.string().min(1),\n  description: z.string().nullable().optional(),\n  category: z.string().nullable().optional(),\n\n  type: z.enum(['boolean', 'string', 'number', 'json']),\n  defaultValue: z.any().nullable().optional(),\n  createdAt: z.string().optional(),\n  updatedAt: z.string().optional(),\n})\n\nexport const overrideListResponseSchema = z.object({\n  id: z.string().uuid(),\n  toggleId: z.string().uuid(),\n  tenantName: z.string(),\n  tenantId: z.string().uuid(),\n  identifier: z.string(),\n  name: z.string(),\n  category: z.string(),\n  isOverride: z.boolean(),\n});\n\nexport type OverrideListResponse = z.infer<typeof overrideListResponseSchema>\n\nexport type ToggleCreateInput = z.infer<typeof toggleCreateSchema>\nexport type ToggleUpdateInput = z.infer<typeof toggleUpdateSchema>\nexport type ChangeOverrideStateBaseInput = z.infer<typeof changeOverrideStateBaseSchema>\nexport type ProcessedChangeOverrideStateInput = z.infer<typeof processedChangeOverrideStateSchema>\nexport type GetToggleOverrideQuery = z.infer<typeof getToggleOverrideQuerySchema>\nexport type GetOverridesQuery = z.infer<typeof overrideListQuerySchema>\nexport type FeatureToggle = z.infer<typeof featureToggleSchema>\n"],
-  "mappings": "AAAA,SAAS,SAAS;AAEX,MAAM,qBAAqB;AAE3B,MAAM,mBAAmB,EAAE,KAAK,CAAC,WAAW,UAAU,UAAU,MAAM,CAAC;AAEvE,MAAM,qBAAqB,EAAE,OAAO;AAAA,EACzC,YAAY,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE;AAAA,IAC5B;AAAA,IACA;AAAA,EACF;AAAA,EACA,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EACtB,aAAa,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC5C,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAEzC,MAAM;AAAA,EACN,cAAc,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS;AAC5C,CAAC;AAEM,MAAM,yBAAyB,EAAE,MAAM,kBAAkB;AAEzD,MAAM,qBAAqB,EAC/B,OAAO;AAAA,EACN,IAAI,EAAE,OAAO,EAAE,KAAK;AACtB,CAAC,EACA,MAAM,mBAAmB,QAAQ,CAAC;AAE9B,MAAM,gCAAgC,EAAE,OAAO;AAAA,EACpD,UAAU,EAAE,OAAO,EAAE,KAAK;AAAA,EAC1B,YAAY,EAAE,QAAQ;AAAA,EACtB,eAAe,EAAE,IAAI,EAAE,SAAS;AAClC,CAAC;AAGM,MAAM,qCAAqC,8BAA8B,OAAO;AAAA,EACrF,UAAU,EAAE,OAAO,EAAE,KAAK;AAC5B,CAAC;AAEM,MAAM,sCAAsC,EAAE,OAAO;AAAA,EAC1D,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,EACpB,OAAO,EAAE,IAAI,EAAE,SAAS;AAAA,EACxB,YAAY,EAAE,OAAO;AAAA,EACrB,UAAU,EAAE,OAAO,EAAE,KAAK;AAAA,EAC1B,YAAY;AACd,CAAC;AAIM,MAAM,uCAAuC;AAG7C,MAAM,+BAA+B,EAAE,OAAO;AAAA,EACnD,UAAU,EAAE,OAAO,EAAE,KAAK;AAAA,EAC1B,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AACvC,CAAC;AAEM,MAAM,0BAA0B,EACpC,OAAO;AAAA,EACN,UAAU,EAAE,OAAO,EAAE,SAAS;AAAA,EAC9B,MAAM,EAAE,OAAO,EAAE,SAAS;AAAA,EAC1B,YAAY,EAAE,OAAO,EAAE,SAAS;AAAA,EAChC,WAAW,EAAE,KAAK,CAAC,cAAc,QAAQ,UAAU,CAAC,EAAE,SAAS;AAAA,EAC/D,SAAS,EAAE,KAAK,CAAC,OAAO,MAAM,CAAC,EAAE,SAAS;AAAA,EAC1C,MAAM,EAAE,OAAO,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS,EAAE,QAAQ,CAAC;AAAA,EACnD,UAAU,EAAE,OAAO,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,SAAS,EAAE,QAAQ,EAAE;AACnE,CAAC,EACA,YAAY;AAER,MAAM,sBAAsB,EAAE,OAAO;AAAA,EAC1C,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EAC/B,YAAY,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE;AAAA,IAC5B;AAAA,IACA;AAAA,EACF;AAAA,EACA,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EACtB,aAAa,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC5C,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAEzC,MAAM,EAAE,KAAK,CAAC,WAAW,UAAU,UAAU,MAAM,CAAC;AAAA,EACpD,cAAc,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS;AAAA,EAC1C,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,EAC/B,WAAW,EAAE,OAAO,EAAE,SAAS;AACjC,CAAC;AAEM,MAAM,6BAA6B,EAAE,OAAO;AAAA,EACjD,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,EACpB,UAAU,EAAE,OAAO,EAAE,KAAK;AAAA,EAC1B,YAAY,EAAE,OAAO;AAAA,EACrB,UAAU,EAAE,OAAO,EAAE,KAAK;AAAA,EAC1B,YAAY,EAAE,OAAO;AAAA,EACrB,MAAM,EAAE,OAAO;AAAA,EACf,UAAU,EAAE,OAAO;AAAA,EACnB,YAAY,EAAE,QAAQ;AACxB,CAAC;",
+  "sourcesContent": ["import { z } from 'zod'\n\n// Namespaced feature-flag identifiers use dots and dashes as separators\n// (e.g. the seeded `customers.interactions.legacy-adapters`), so the validator\n// accepts lowercase letters, digits, `_`, `.`, and `-` after the leading\n// lowercase letter (#2055 QA round-6).\nexport const IDENTIFIER_PATTERN = /^[a-z][a-z0-9_.-]*$/\n\nexport const IDENTIFIER_PATTERN_MESSAGE =\n  'identifier must start with a lowercase letter and contain only lowercase letters, numbers, dots, dashes, and underscores'\n\nexport const toggleTypeSchema = z.enum(['boolean', 'string', 'number', 'json'])\n\nexport const toggleCreateSchema = z.object({\n  identifier: z.string().min(1).regex(\n    IDENTIFIER_PATTERN,\n    IDENTIFIER_PATTERN_MESSAGE,\n  ),\n  name: z.string().min(1),\n  description: z.string().nullable().optional(),\n  category: z.string().nullable().optional(),\n\n  type: toggleTypeSchema,\n  defaultValue: z.any().nullable().optional(),\n})\n\nexport const toggleCreateSchemaList = z.array(toggleCreateSchema)\n\nexport const toggleUpdateSchema = z\n  .object({\n    id: z.string().uuid(),\n  })\n  .merge(toggleCreateSchema.partial())\n\nexport const changeOverrideStateBaseSchema = z.object({\n  toggleId: z.string().uuid(),\n  isOverride: z.boolean(),\n  overrideValue: z.any().optional(),\n})\n\n\nexport const processedChangeOverrideStateSchema = changeOverrideStateBaseSchema.extend({\n  tenantId: z.string().uuid(),\n})\n\nexport const featureToggleOverrideResponseSchema = z.object({\n  id: z.string().uuid(),\n  value: z.any().optional(),\n  tenantName: z.string(),\n  tenantId: z.string().uuid(),\n  toggleType: toggleTypeSchema,\n  updatedAt: z.string().nullable().optional(),\n})\n\nexport type FeatureToggleOverrideResponse = z.infer<typeof featureToggleOverrideResponseSchema>\n\nexport const featureToggleOverrideWithValueSchema = featureToggleOverrideResponseSchema\nexport type FeatureToggleOverrideWithValue = FeatureToggleOverrideResponse\n\nexport const getToggleOverrideQuerySchema = z.object({\n  toggleId: z.string().uuid(),\n  tenantId: z.string().uuid().optional(),\n})\n\nexport const overrideListQuerySchema = z\n  .object({\n    category: z.string().optional(),\n    name: z.string().optional(),\n    identifier: z.string().optional(),\n    sortField: z.enum(['identifier', 'name', 'category']).optional(),\n    sortDir: z.enum(['asc', 'desc']).optional(),\n    page: z.coerce.number().min(1).optional().default(1),\n    pageSize: z.coerce.number().min(1).max(100).optional().default(25),\n  })\n  .passthrough()\n\nexport const featureToggleSchema = z.object({\n  id: z.string().uuid().optional(),\n  identifier: z.string().min(1).regex(\n    IDENTIFIER_PATTERN,\n    IDENTIFIER_PATTERN_MESSAGE,\n  ),\n  name: z.string().min(1),\n  description: z.string().nullable().optional(),\n  category: z.string().nullable().optional(),\n\n  type: z.enum(['boolean', 'string', 'number', 'json']),\n  defaultValue: z.any().nullable().optional(),\n  createdAt: z.string().optional(),\n  updatedAt: z.string().optional(),\n})\n\nexport const overrideListResponseSchema = z.object({\n  id: z.string().uuid(),\n  toggleId: z.string().uuid(),\n  tenantName: z.string(),\n  tenantId: z.string().uuid(),\n  identifier: z.string(),\n  name: z.string(),\n  category: z.string(),\n  isOverride: z.boolean(),\n});\n\nexport type OverrideListResponse = z.infer<typeof overrideListResponseSchema>\n\nexport type ToggleCreateInput = z.infer<typeof toggleCreateSchema>\nexport type ToggleUpdateInput = z.infer<typeof toggleUpdateSchema>\nexport type ChangeOverrideStateBaseInput = z.infer<typeof changeOverrideStateBaseSchema>\nexport type ProcessedChangeOverrideStateInput = z.infer<typeof processedChangeOverrideStateSchema>\nexport type GetToggleOverrideQuery = z.infer<typeof getToggleOverrideQuerySchema>\nexport type GetOverridesQuery = z.infer<typeof overrideListQuerySchema>\nexport type FeatureToggle = z.infer<typeof featureToggleSchema>\n"],
+  "mappings": "AAAA,SAAS,SAAS;AAMX,MAAM,qBAAqB;AAE3B,MAAM,6BACX;AAEK,MAAM,mBAAmB,EAAE,KAAK,CAAC,WAAW,UAAU,UAAU,MAAM,CAAC;AAEvE,MAAM,qBAAqB,EAAE,OAAO;AAAA,EACzC,YAAY,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE;AAAA,IAC5B;AAAA,IACA;AAAA,EACF;AAAA,EACA,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EACtB,aAAa,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC5C,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAEzC,MAAM;AAAA,EACN,cAAc,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS;AAC5C,CAAC;AAEM,MAAM,yBAAyB,EAAE,MAAM,kBAAkB;AAEzD,MAAM,qBAAqB,EAC/B,OAAO;AAAA,EACN,IAAI,EAAE,OAAO,EAAE,KAAK;AACtB,CAAC,EACA,MAAM,mBAAmB,QAAQ,CAAC;AAE9B,MAAM,gCAAgC,EAAE,OAAO;AAAA,EACpD,UAAU,EAAE,OAAO,EAAE,KAAK;AAAA,EAC1B,YAAY,EAAE,QAAQ;AAAA,EACtB,eAAe,EAAE,IAAI,EAAE,SAAS;AAClC,CAAC;AAGM,MAAM,qCAAqC,8BAA8B,OAAO;AAAA,EACrF,UAAU,EAAE,OAAO,EAAE,KAAK;AAC5B,CAAC;AAEM,MAAM,sCAAsC,EAAE,OAAO;AAAA,EAC1D,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,EACpB,OAAO,EAAE,IAAI,EAAE,SAAS;AAAA,EACxB,YAAY,EAAE,OAAO;AAAA,EACrB,UAAU,EAAE,OAAO,EAAE,KAAK;AAAA,EAC1B,YAAY;AAAA,EACZ,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAC5C,CAAC;AAIM,MAAM,uCAAuC;AAG7C,MAAM,+BAA+B,EAAE,OAAO;AAAA,EACnD,UAAU,EAAE,OAAO,EAAE,KAAK;AAAA,EAC1B,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AACvC,CAAC;AAEM,MAAM,0BAA0B,EACpC,OAAO;AAAA,EACN,UAAU,EAAE,OAAO,EAAE,SAAS;AAAA,EAC9B,MAAM,EAAE,OAAO,EAAE,SAAS;AAAA,EAC1B,YAAY,EAAE,OAAO,EAAE,SAAS;AAAA,EAChC,WAAW,EAAE,KAAK,CAAC,cAAc,QAAQ,UAAU,CAAC,EAAE,SAAS;AAAA,EAC/D,SAAS,EAAE,KAAK,CAAC,OAAO,MAAM,CAAC,EAAE,SAAS;AAAA,EAC1C,MAAM,EAAE,OAAO,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS,EAAE,QAAQ,CAAC;AAAA,EACnD,UAAU,EAAE,OAAO,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,SAAS,EAAE,QAAQ,EAAE;AACnE,CAAC,EACA,YAAY;AAER,MAAM,sBAAsB,EAAE,OAAO;AAAA,EAC1C,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EAC/B,YAAY,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE;AAAA,IAC5B;AAAA,IACA;AAAA,EACF;AAAA,EACA,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EACtB,aAAa,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC5C,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAEzC,MAAM,EAAE,KAAK,CAAC,WAAW,UAAU,UAAU,MAAM,CAAC;AAAA,EACpD,cAAc,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS;AAAA,EAC1C,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,EAC/B,WAAW,EAAE,OAAO,EAAE,SAAS;AACjC,CAAC;AAEM,MAAM,6BAA6B,EAAE,OAAO;AAAA,EACjD,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,EACpB,UAAU,EAAE,OAAO,EAAE,KAAK;AAAA,EAC1B,YAAY,EAAE,OAAO;AAAA,EACrB,UAAU,EAAE,OAAO,EAAE,KAAK;AAAA,EAC1B,YAAY,EAAE,OAAO;AAAA,EACrB,MAAM,EAAE,OAAO;AAAA,EACf,UAAU,EAAE,OAAO;AAAA,EACnB,YAAY,EAAE,QAAQ;AACxB,CAAC;",
   "names": []
 }

package/dist/modules/feature_toggles/lib/queries.js

@@ -1,17 +1,17 @@
 import { FeatureToggle, FeatureToggleOverride } from "../data/entities.js";
 import { escapeLikePattern } from "@open-mercato/shared/lib/db/escapeLikePattern";
 async function getOverrides(em, tenant, query) {
-  const filters = [];
+  const filters = { deletedAt: null };
   if (query.category) {
-    filters.push({ category: { $ilike: `%${escapeLikePattern(query.category)}%` } });
+    filters.category = { $ilike: `%${escapeLikePattern(query.category)}%` };
   }
   if (query.name) {
-    filters.push({ name: { $ilike: `%${escapeLikePattern(query.name)}%` } });
+    filters.name = { $ilike: `%${escapeLikePattern(query.name)}%` };
   }
   if (query.identifier) {
-    filters.push({ identifier: { $ilike: `%${escapeLikePattern(query.identifier)}%` } });
+    filters.identifier = { $ilike: `%${escapeLikePattern(query.identifier)}%` };
   }
-  const globalToggles = await em.find(FeatureToggle, filters.length > 0 ? filters : {});
+  const globalToggles = await em.find(FeatureToggle, filters);
   const overrides = await em.find(FeatureToggleOverride, {
     tenantId: tenant.id,
     toggle: { id: { $in: globalToggles.map((toggle) => toggle.id) } }

package/dist/modules/feature_toggles/lib/queries.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/feature_toggles/lib/queries.ts"],
-  "sourcesContent": ["import { EntityManager, FilterQuery } from '@mikro-orm/postgresql'\nimport { FeatureToggle, FeatureToggleOverride } from '../data/entities'\nimport { Tenant } from '@open-mercato/core/modules/directory/data/entities'\nimport { escapeLikePattern } from '@open-mercato/shared/lib/db/escapeLikePattern'\nimport { OverrideListResponse } from '../data/validators'\n\nexport type FeatureToggleOverrideResponse = {\n    id: string\n    toggleId: string\n    overrideState: 'enabled' | 'disabled' | 'inherit'\n    tenantName: string\n    tenantId: string\n    identifier: string\n    name: string\n    category: string\n    defaultState: boolean\n}\n\nexport type GetOverridesQuery = {\n    category?: string\n    name?: string\n    identifier?: string\n    defaultState?: 'enabled' | 'disabled'\n    overrideState?: 'enabled' | 'disabled' | 'inherit'\n    sortField?: 'identifier' | 'name' | 'category' | 'defaultState' | 'overrideState'\n    sortDir?: 'asc' | 'desc'\n    page?: number\n    pageSize?: number\n}\n\ntype GetOverridesResult = {\n    items: OverrideListResponse[]\n    total: number\n    totalPages: number\n    page: number\n    pageSize: number\n    raw: {\n        toggles: FeatureToggle[]\n        overrides: FeatureToggleOverride[]\n    }\n}\n\nexport async function getOverrides(\n    em: EntityManager,\n    tenant: Tenant,\n    query: GetOverridesQuery\n): Promise<GetOverridesResult> {\n    const filters: FilterQuery<FeatureToggle>[] = []\n    if (query.category) {\n        filters.push({ category: { $ilike: `%${escapeLikePattern(query.category)}%` } })\n    }\n    if (query.name) {\n        filters.push({ name: { $ilike: `%${escapeLikePattern(query.name)}%` } })\n    }\n    if (query.identifier) {\n        filters.push({ identifier: { $ilike: `%${escapeLikePattern(query.identifier)}%` } })\n    }\n\n    const globalToggles = await em.find(FeatureToggle, filters.length > 0 ? filters : {})\n\n    const overrides = await em.find(FeatureToggleOverride, {\n        tenantId: tenant.id,\n        toggle: { id: { $in: globalToggles.map((toggle) => toggle.id) } },\n    })\n\n    const response: OverrideListResponse[] = []\n\n    globalToggles.forEach((toggle) => {\n        const override = overrides.find((o) => o.toggle.id === toggle.id)\n        if (override) {\n            response.push({\n                id: override?.id ?? '',\n                toggleId: toggle.id,\n                tenantName: tenant.name,\n                tenantId: tenant.id,\n                identifier: toggle.identifier,\n                name: toggle.name,\n                category: toggle.category ?? '',\n                isOverride: true,\n            })\n        } else {\n            response.push({\n                id: '',\n                toggleId: toggle.id,\n                tenantName: tenant.name,\n                tenantId: tenant.id,\n                identifier: toggle.identifier,\n                name: toggle.name,\n                category: toggle.category ?? '',\n                isOverride: false,\n            })\n        }\n    })\n\n    if (query.sortField && query.sortDir) {\n        const sortField = query.sortField\n        const sortDir = query.sortDir\n\n        response.sort((a, b) => {\n            let aValue: any = a[sortField as keyof typeof a]\n            let bValue: any = b[sortField as keyof typeof b]\n\n\n\n            if (typeof aValue === 'string' && typeof bValue === 'string') {\n                const comparison = aValue.localeCompare(bValue)\n                return sortDir === 'asc' ? comparison : -comparison\n            }\n\n            if (typeof aValue === 'number' && typeof bValue === 'number') {\n                return sortDir === 'asc' ? aValue - bValue : bValue - aValue\n            }\n\n            return 0\n        })\n    }\n\n    const totalItems = response.length\n    const page = query.page ?? 1\n    const pageSize = query.pageSize ?? 25\n    const totalPages = Math.ceil(totalItems / pageSize)\n    const startIndex = (page - 1) * pageSize\n    const endIndex = startIndex + pageSize\n\n    const paginatedItems = response.slice(startIndex, endIndex)\n\n    return {\n        items: paginatedItems,\n        total: totalItems,\n        totalPages,\n        page,\n        pageSize,\n        raw: {\n            toggles: globalToggles,\n            overrides,\n        },\n    }\n}\n"],
-  "mappings": "AACA,SAAS,eAAe,6BAA6B;AAErD,SAAS,yBAAyB;AAuClC,eAAsB,aAClB,IACA,QACA,OAC2B;AAC3B,QAAM,UAAwC,CAAC;AAC/C,MAAI,MAAM,UAAU;AAChB,YAAQ,KAAK,EAAE,UAAU,EAAE,QAAQ,IAAI,kBAAkB,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;AAAA,EACnF;AACA,MAAI,MAAM,MAAM;AACZ,YAAQ,KAAK,EAAE,MAAM,EAAE,QAAQ,IAAI,kBAAkB,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;AAAA,EAC3E;AACA,MAAI,MAAM,YAAY;AAClB,YAAQ,KAAK,EAAE,YAAY,EAAE,QAAQ,IAAI,kBAAkB,MAAM,UAAU,CAAC,IAAI,EAAE,CAAC;AAAA,EACvF;AAEA,QAAM,gBAAgB,MAAM,GAAG,KAAK,eAAe,QAAQ,SAAS,IAAI,UAAU,CAAC,CAAC;AAEpF,QAAM,YAAY,MAAM,GAAG,KAAK,uBAAuB;AAAA,IACnD,UAAU,OAAO;AAAA,IACjB,QAAQ,EAAE,IAAI,EAAE,KAAK,cAAc,IAAI,CAAC,WAAW,OAAO,EAAE,EAAE,EAAE;AAAA,EACpE,CAAC;AAED,QAAM,WAAmC,CAAC;AAE1C,gBAAc,QAAQ,CAAC,WAAW;AAC9B,UAAM,WAAW,UAAU,KAAK,CAAC,MAAM,EAAE,OAAO,OAAO,OAAO,EAAE;AAChE,QAAI,UAAU;AACV,eAAS,KAAK;AAAA,QACV,IAAI,UAAU,MAAM;AAAA,QACpB,UAAU,OAAO;AAAA,QACjB,YAAY,OAAO;AAAA,QACnB,UAAU,OAAO;AAAA,QACjB,YAAY,OAAO;AAAA,QACnB,MAAM,OAAO;AAAA,QACb,UAAU,OAAO,YAAY;AAAA,QAC7B,YAAY;AAAA,MAChB,CAAC;AAAA,IACL,OAAO;AACH,eAAS,KAAK;AAAA,QACV,IAAI;AAAA,QACJ,UAAU,OAAO;AAAA,QACjB,YAAY,OAAO;AAAA,QACnB,UAAU,OAAO;AAAA,QACjB,YAAY,OAAO;AAAA,QACnB,MAAM,OAAO;AAAA,QACb,UAAU,OAAO,YAAY;AAAA,QAC7B,YAAY;AAAA,MAChB,CAAC;AAAA,IACL;AAAA,EACJ,CAAC;AAED,MAAI,MAAM,aAAa,MAAM,SAAS;AAClC,UAAM,YAAY,MAAM;AACxB,UAAM,UAAU,MAAM;AAEtB,aAAS,KAAK,CAAC,GAAG,MAAM;AACpB,UAAI,SAAc,EAAE,SAA2B;AAC/C,UAAI,SAAc,EAAE,SAA2B;AAI/C,UAAI,OAAO,WAAW,YAAY,OAAO,WAAW,UAAU;AAC1D,cAAM,aAAa,OAAO,cAAc,MAAM;AAC9C,eAAO,YAAY,QAAQ,aAAa,CAAC;AAAA,MAC7C;AAEA,UAAI,OAAO,WAAW,YAAY,OAAO,WAAW,UAAU;AAC1D,eAAO,YAAY,QAAQ,SAAS,SAAS,SAAS;AAAA,MAC1D;AAEA,aAAO;AAAA,IACX,CAAC;AAAA,EACL;AAEA,QAAM,aAAa,SAAS;AAC5B,QAAM,OAAO,MAAM,QAAQ;AAC3B,QAAM,WAAW,MAAM,YAAY;AACnC,QAAM,aAAa,KAAK,KAAK,aAAa,QAAQ;AAClD,QAAM,cAAc,OAAO,KAAK;AAChC,QAAM,WAAW,aAAa;AAE9B,QAAM,iBAAiB,SAAS,MAAM,YAAY,QAAQ;AAE1D,SAAO;AAAA,IACH,OAAO;AAAA,IACP,OAAO;AAAA,IACP;AAAA,IACA;AAAA,IACA;AAAA,IACA,KAAK;AAAA,MACD,SAAS;AAAA,MACT;AAAA,IACJ;AAAA,EACJ;AACJ;",
+  "sourcesContent": ["import { EntityManager, FilterQuery } from '@mikro-orm/postgresql'\nimport { FeatureToggle, FeatureToggleOverride } from '../data/entities'\nimport { Tenant } from '@open-mercato/core/modules/directory/data/entities'\nimport { escapeLikePattern } from '@open-mercato/shared/lib/db/escapeLikePattern'\nimport { OverrideListResponse } from '../data/validators'\n\nexport type FeatureToggleOverrideResponse = {\n    id: string\n    toggleId: string\n    overrideState: 'enabled' | 'disabled' | 'inherit'\n    tenantName: string\n    tenantId: string\n    identifier: string\n    name: string\n    category: string\n    defaultState: boolean\n}\n\nexport type GetOverridesQuery = {\n    category?: string\n    name?: string\n    identifier?: string\n    defaultState?: 'enabled' | 'disabled'\n    overrideState?: 'enabled' | 'disabled' | 'inherit'\n    sortField?: 'identifier' | 'name' | 'category' | 'defaultState' | 'overrideState'\n    sortDir?: 'asc' | 'desc'\n    page?: number\n    pageSize?: number\n}\n\ntype GetOverridesResult = {\n    items: OverrideListResponse[]\n    total: number\n    totalPages: number\n    page: number\n    pageSize: number\n    raw: {\n        toggles: FeatureToggle[]\n        overrides: FeatureToggleOverride[]\n    }\n}\n\nexport async function getOverrides(\n    em: EntityManager,\n    tenant: Tenant,\n    query: GetOverridesQuery\n): Promise<GetOverridesResult> {\n    const filters: FilterQuery<FeatureToggle> = { deletedAt: null }\n    if (query.category) {\n        filters.category = { $ilike: `%${escapeLikePattern(query.category)}%` }\n    }\n    if (query.name) {\n        filters.name = { $ilike: `%${escapeLikePattern(query.name)}%` }\n    }\n    if (query.identifier) {\n        filters.identifier = { $ilike: `%${escapeLikePattern(query.identifier)}%` }\n    }\n\n    const globalToggles = await em.find(FeatureToggle, filters)\n\n    const overrides = await em.find(FeatureToggleOverride, {\n        tenantId: tenant.id,\n        toggle: { id: { $in: globalToggles.map((toggle) => toggle.id) } },\n    })\n\n    const response: OverrideListResponse[] = []\n\n    globalToggles.forEach((toggle) => {\n        const override = overrides.find((o) => o.toggle.id === toggle.id)\n        if (override) {\n            response.push({\n                id: override?.id ?? '',\n                toggleId: toggle.id,\n                tenantName: tenant.name,\n                tenantId: tenant.id,\n                identifier: toggle.identifier,\n                name: toggle.name,\n                category: toggle.category ?? '',\n                isOverride: true,\n            })\n        } else {\n            response.push({\n                id: '',\n                toggleId: toggle.id,\n                tenantName: tenant.name,\n                tenantId: tenant.id,\n                identifier: toggle.identifier,\n                name: toggle.name,\n                category: toggle.category ?? '',\n                isOverride: false,\n            })\n        }\n    })\n\n    if (query.sortField && query.sortDir) {\n        const sortField = query.sortField\n        const sortDir = query.sortDir\n\n        response.sort((a, b) => {\n            let aValue: any = a[sortField as keyof typeof a]\n            let bValue: any = b[sortField as keyof typeof b]\n\n\n\n            if (typeof aValue === 'string' && typeof bValue === 'string') {\n                const comparison = aValue.localeCompare(bValue)\n                return sortDir === 'asc' ? comparison : -comparison\n            }\n\n            if (typeof aValue === 'number' && typeof bValue === 'number') {\n                return sortDir === 'asc' ? aValue - bValue : bValue - aValue\n            }\n\n            return 0\n        })\n    }\n\n    const totalItems = response.length\n    const page = query.page ?? 1\n    const pageSize = query.pageSize ?? 25\n    const totalPages = Math.ceil(totalItems / pageSize)\n    const startIndex = (page - 1) * pageSize\n    const endIndex = startIndex + pageSize\n\n    const paginatedItems = response.slice(startIndex, endIndex)\n\n    return {\n        items: paginatedItems,\n        total: totalItems,\n        totalPages,\n        page,\n        pageSize,\n        raw: {\n            toggles: globalToggles,\n            overrides,\n        },\n    }\n}\n"],
+  "mappings": "AACA,SAAS,eAAe,6BAA6B;AAErD,SAAS,yBAAyB;AAuClC,eAAsB,aAClB,IACA,QACA,OAC2B;AAC3B,QAAM,UAAsC,EAAE,WAAW,KAAK;AAC9D,MAAI,MAAM,UAAU;AAChB,YAAQ,WAAW,EAAE,QAAQ,IAAI,kBAAkB,MAAM,QAAQ,CAAC,IAAI;AAAA,EAC1E;AACA,MAAI,MAAM,MAAM;AACZ,YAAQ,OAAO,EAAE,QAAQ,IAAI,kBAAkB,MAAM,IAAI,CAAC,IAAI;AAAA,EAClE;AACA,MAAI,MAAM,YAAY;AAClB,YAAQ,aAAa,EAAE,QAAQ,IAAI,kBAAkB,MAAM,UAAU,CAAC,IAAI;AAAA,EAC9E;AAEA,QAAM,gBAAgB,MAAM,GAAG,KAAK,eAAe,OAAO;AAE1D,QAAM,YAAY,MAAM,GAAG,KAAK,uBAAuB;AAAA,IACnD,UAAU,OAAO;AAAA,IACjB,QAAQ,EAAE,IAAI,EAAE,KAAK,cAAc,IAAI,CAAC,WAAW,OAAO,EAAE,EAAE,EAAE;AAAA,EACpE,CAAC;AAED,QAAM,WAAmC,CAAC;AAE1C,gBAAc,QAAQ,CAAC,WAAW;AAC9B,UAAM,WAAW,UAAU,KAAK,CAAC,MAAM,EAAE,OAAO,OAAO,OAAO,EAAE;AAChE,QAAI,UAAU;AACV,eAAS,KAAK;AAAA,QACV,IAAI,UAAU,MAAM;AAAA,QACpB,UAAU,OAAO;AAAA,QACjB,YAAY,OAAO;AAAA,QACnB,UAAU,OAAO;AAAA,QACjB,YAAY,OAAO;AAAA,QACnB,MAAM,OAAO;AAAA,QACb,UAAU,OAAO,YAAY;AAAA,QAC7B,YAAY;AAAA,MAChB,CAAC;AAAA,IACL,OAAO;AACH,eAAS,KAAK;AAAA,QACV,IAAI;AAAA,QACJ,UAAU,OAAO;AAAA,QACjB,YAAY,OAAO;AAAA,QACnB,UAAU,OAAO;AAAA,QACjB,YAAY,OAAO;AAAA,QACnB,MAAM,OAAO;AAAA,QACb,UAAU,OAAO,YAAY;AAAA,QAC7B,YAAY;AAAA,MAChB,CAAC;AAAA,IACL;AAAA,EACJ,CAAC;AAED,MAAI,MAAM,aAAa,MAAM,SAAS;AAClC,UAAM,YAAY,MAAM;AACxB,UAAM,UAAU,MAAM;AAEtB,aAAS,KAAK,CAAC,GAAG,MAAM;AACpB,UAAI,SAAc,EAAE,SAA2B;AAC/C,UAAI,SAAc,EAAE,SAA2B;AAI/C,UAAI,OAAO,WAAW,YAAY,OAAO,WAAW,UAAU;AAC1D,cAAM,aAAa,OAAO,cAAc,MAAM;AAC9C,eAAO,YAAY,QAAQ,aAAa,CAAC;AAAA,MAC7C;AAEA,UAAI,OAAO,WAAW,YAAY,OAAO,WAAW,UAAU;AAC1D,eAAO,YAAY,QAAQ,SAAS,SAAS,SAAS;AAAA,MAC1D;AAEA,aAAO;AAAA,IACX,CAAC;AAAA,EACL;AAEA,QAAM,aAAa,SAAS;AAC5B,QAAM,OAAO,MAAM,QAAQ;AAC3B,QAAM,WAAW,MAAM,YAAY;AACnC,QAAM,aAAa,KAAK,KAAK,aAAa,QAAQ;AAClD,QAAM,cAAc,OAAO,KAAK;AAChC,QAAM,WAAW,aAAa;AAE9B,QAAM,iBAAiB,SAAS,MAAM,YAAY,QAAQ;AAE1D,SAAO;AAAA,IACH,OAAO;AAAA,IACP,OAAO;AAAA,IACP;AAAA,IACA;AAAA,IACA;AAAA,IACA,KAAK;AAAA,MACD,SAAS;AAAA,MACT;AAAA,IACJ;AAAA,EACJ;AACJ;",
   "names": []
 }

package/dist/modules/feature_toggles/lib/utils.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/feature_toggles/lib/utils.ts"],
-  "sourcesContent": ["import { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { resolveFeatureCheckContext } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport type { CommandRuntimeContext } from '@open-mercato/shared/lib/commands'\nimport { CrudHttpError } from '@open-mercato/shared/lib/crud/errors'\n\nexport async function buildContext(\n    req: Request\n): Promise<{\n    ctx: CommandRuntimeContext\n    auth: NonNullable<Awaited<ReturnType<typeof getAuthFromRequest>>>\n    organizationId: string | null\n    scope: { allowedIds: string[] | null }\n}> {\n    const container = await createRequestContainer()\n    const auth = await getAuthFromRequest(req)\n    if (!auth) throw new CrudHttpError(401, { error: 'Unauthorized' })\n\n    const { organizationId, scope } = await resolveFeatureCheckContext({ container, auth, request: req })\n\n    const ctx: CommandRuntimeContext = {\n        container,\n        auth,\n        organizationScope: scope,\n        selectedOrganizationId: organizationId ?? null,\n        organizationIds: scope.allowedIds ?? (auth.orgId ? [auth.orgId] : null),\n        request: req,\n    }\n\n    return { ctx, auth, organizationId: organizationId ?? null, scope }\n}"],
-  "mappings": "AAAA,SAAS,0BAA0B;AACnC,SAAS,8BAA8B;AACvC,SAAS,kCAAkC;AAE3C,SAAS,qBAAqB;AAE9B,eAAsB,aAClB,KAMD;AACC,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,KAAM,OAAM,IAAI,cAAc,KAAK,EAAE,OAAO,eAAe,CAAC;AAEjE,QAAM,EAAE,gBAAgB,MAAM,IAAI,MAAM,2BAA2B,EAAE,WAAW,MAAM,SAAS,IAAI,CAAC;AAEpG,QAAM,MAA6B;AAAA,IAC/B;AAAA,IACA;AAAA,IACA,mBAAmB;AAAA,IACnB,wBAAwB,kBAAkB;AAAA,IAC1C,iBAAiB,MAAM,eAAe,KAAK,QAAQ,CAAC,KAAK,KAAK,IAAI;AAAA,IAClE,SAAS;AAAA,EACb;AAEA,SAAO,EAAE,KAAK,MAAM,gBAAgB,kBAAkB,MAAM,MAAM;AACtE;",
+  "sourcesContent": ["import { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { resolveFeatureCheckContext, type OrganizationScope } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport type { CommandRuntimeContext } from '@open-mercato/shared/lib/commands'\nimport { CrudHttpError } from '@open-mercato/shared/lib/crud/errors'\n\nexport async function buildContext(\n    req: Request\n): Promise<{\n    ctx: CommandRuntimeContext\n    auth: NonNullable<Awaited<ReturnType<typeof getAuthFromRequest>>>\n    organizationId: string | null\n    scope: OrganizationScope\n}> {\n    const container = await createRequestContainer()\n    const auth = await getAuthFromRequest(req)\n    if (!auth) throw new CrudHttpError(401, { error: 'Unauthorized' })\n\n    const { organizationId, scope } = await resolveFeatureCheckContext({ container, auth, request: req })\n\n    const ctx: CommandRuntimeContext = {\n        container,\n        auth,\n        organizationScope: scope,\n        selectedOrganizationId: organizationId ?? null,\n        organizationIds: scope.allowedIds ?? (auth.orgId ? [auth.orgId] : null),\n        request: req,\n    }\n\n    return { ctx, auth, organizationId: organizationId ?? null, scope }\n}\n"],
+  "mappings": "AAAA,SAAS,0BAA0B;AACnC,SAAS,8BAA8B;AACvC,SAAS,kCAA0D;AAEnE,SAAS,qBAAqB;AAE9B,eAAsB,aAClB,KAMD;AACC,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,KAAM,OAAM,IAAI,cAAc,KAAK,EAAE,OAAO,eAAe,CAAC;AAEjE,QAAM,EAAE,gBAAgB,MAAM,IAAI,MAAM,2BAA2B,EAAE,WAAW,MAAM,SAAS,IAAI,CAAC;AAEpG,QAAM,MAA6B;AAAA,IAC/B;AAAA,IACA;AAAA,IACA,mBAAmB;AAAA,IACnB,wBAAwB,kBAAkB;AAAA,IAC1C,iBAAiB,MAAM,eAAe,KAAK,QAAQ,CAAC,KAAK,KAAK,IAAI;AAAA,IAClE,SAAS;AAAA,EACb;AAEA,SAAO,EAAE,KAAK,MAAM,gBAAgB,kBAAkB,MAAM,MAAM;AACtE;",
   "names": []
 }

package/dist/modules/inbox_ops/api/proposals/[id]/replies/[replyId]/send/route.js

@@ -50,6 +50,13 @@ async function POST(req) {
         { status: 409 }
       );
     }
+    const existingMetadata = action.metadata && typeof action.metadata === "object" ? action.metadata : {};
+    if (existingMetadata.replySentAt) {
+      return NextResponse.json(
+        { error: "Reply has already been sent for this action" },
+        { status: 409 }
+      );
+    }
     const email = await findOneWithDecryption(
       ctx.em,
       InboxEmail,
@@ -112,7 +119,7 @@ async function POST(req) {
       }
     );
     action.metadata = {
-      ...action.metadata && typeof action.metadata === "object" ? action.metadata : {},
+      ...existingMetadata,
       replySentAt: (/* @__PURE__ */ new Date()).toISOString(),
       sentMessageId,
       ...messagesResult ? { messageRecordId: messagesResult.messageId } : {}

package/dist/modules/inbox_ops/api/proposals/[id]/replies/[replyId]/send/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../../../../src/modules/inbox_ops/api/proposals/%5Bid%5D/replies/%5BreplyId%5D/send/route.ts"],
-  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { Resend } from 'resend'\nimport { parseBooleanWithDefault } from '@open-mercato/shared/lib/boolean'\nimport { resolveDefaultEmailFromAddress } from '@open-mercato/shared/lib/email/config'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { InboxProposalAction, InboxEmail } from '../../../../../../data/entities'\nimport { draftReplyPayloadSchema } from '../../../../../../data/validators'\nimport { emitInboxOpsEvent } from '../../../../../../events'\nimport { createMessageRecordForReply } from '../../../../../../lib/messagesIntegration'\nimport {\n  resolveRequestContext,\n  resolveProposal,\n  extractPathSegment,\n  handleRouteError,\n  isErrorResponse,\n} from '../../../../../routeHelpers'\n\nexport const metadata = {\n  POST: { requireAuth: true, requireFeatures: ['inbox_ops.replies.send'] },\n}\n\nexport async function POST(req: Request) {\n  try {\n    const ctx = await resolveRequestContext(req)\n    const url = new URL(req.url)\n    const proposal = await resolveProposal(url, ctx)\n    if (isErrorResponse(proposal)) return proposal\n\n    const replyId = extractPathSegment(url, 'replies')\n    if (!replyId) {\n      return NextResponse.json({ error: 'Missing reply ID' }, { status: 400 })\n    }\n\n    const action = await findOneWithDecryption(\n      ctx.em,\n      InboxProposalAction,\n      {\n        id: replyId,\n        proposalId: proposal.id,\n        actionType: 'draft_reply',\n        organizationId: ctx.organizationId,\n        tenantId: ctx.tenantId,\n        deletedAt: null,\n      },\n      undefined,\n      ctx.scope,\n    )\n\n    if (!action) {\n      return NextResponse.json({ error: 'Reply action not found' }, { status: 404 })\n    }\n\n    if (action.status !== 'executed') {\n      return NextResponse.json(\n        { error: `Cannot send reply \u2014 action must be accepted first (current status: \"${action.status}\")` },\n        { status: 409 },\n      )\n    }\n\n    const email = await findOneWithDecryption(\n      ctx.em,\n      InboxEmail,\n      { id: proposal.inboxEmailId, deletedAt: null },\n      undefined,\n      ctx.scope,\n    )\n\n    const payloadResult = draftReplyPayloadSchema.safeParse(action.payload)\n    if (!payloadResult.success) {\n      return NextResponse.json({ error: 'Reply payload missing required fields (to, subject, body)' }, { status: 400 })\n    }\n    const { to: toAddress, toName, subject, body } = payloadResult.data\n\n    const apiKey = process.env.RESEND_API_KEY\n    if (!apiKey) {\n      return NextResponse.json({ error: 'Email service not configured' }, { status: 503 })\n    }\n\n    const emailDisabled =\n      parseBooleanWithDefault(process.env.OM_DISABLE_EMAIL_DELIVERY, false) ||\n      parseBooleanWithDefault(process.env.OM_TEST_MODE, false)\n    if (emailDisabled) {\n      return NextResponse.json({ error: 'Email delivery is disabled' }, { status: 503 })\n    }\n\n    const { inReplyToMessageId, references: payloadReferences } = payloadResult.data\n    const fromAddress = resolveDefaultEmailFromAddress()\n    if (!fromAddress) {\n      return NextResponse.json({\n        error: 'Email sender is not configured. Set NOTIFICATIONS_EMAIL_FROM, EMAIL_FROM, or ADMIN_EMAIL.',\n      }, { status: 503 })\n    }\n\n    const headers: Record<string, string> = {}\n    const inReplyTo = inReplyToMessageId || email?.messageId\n    if (inReplyTo) {\n      headers['In-Reply-To'] = inReplyTo\n    }\n    const references = payloadReferences || (email?.emailReferences as string[])\n    if (references && references.length > 0) {\n      headers['References'] = references.join(' ')\n    }\n\n    const resend = new Resend(apiKey)\n    const { data: sendData, error: sendError } = await resend.emails.send({\n      to: toAddress,\n      from: fromAddress,\n      subject,\n      text: body,\n      ...(Object.keys(headers).length > 0 ? { headers } : {}),\n    })\n\n    if (sendError) {\n      const errorMessage = sendError.message || 'Unknown error'\n      return NextResponse.json({ error: `Failed to send email: ${errorMessage}` }, { status: 502 })\n    }\n\n    const sentMessageId = sendData?.id || null\n    const messagesResult = await createMessageRecordForReply(\n      { to: toAddress, toName, subject, body },\n      proposal.inboxEmailId,\n      {\n        container: ctx.container,\n        scope: {\n          tenantId: ctx.tenantId,\n          organizationId: ctx.organizationId,\n          userId: ctx.userId,\n        },\n      },\n    )\n\n    action.metadata = {\n      ...(action.metadata && typeof action.metadata === 'object' ? action.metadata : {}),\n      replySentAt: new Date().toISOString(),\n      sentMessageId,\n      ...(messagesResult ? { messageRecordId: messagesResult.messageId } : {}),\n    }\n    await ctx.em.flush()\n\n    try {\n      await emitInboxOpsEvent('inbox_ops.reply.sent', {\n        proposalId: proposal.id,\n        actionId: replyId,\n        tenantId: ctx.tenantId,\n        organizationId: ctx.organizationId,\n        toAddress,\n        sentMessageId,\n        messageRecordId: messagesResult?.messageId ?? null,\n      })\n    } catch (eventError) {\n      console.error('[inbox_ops:reply:send] Failed to emit event:', eventError)\n    }\n\n    return NextResponse.json({\n      ok: true,\n      sentMessageId,\n      ...(messagesResult ? { messageRecordId: messagesResult.messageId } : {}),\n    })\n  } catch (err) {\n    return handleRouteError(err, 'send reply')\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'InboxOps',\n  summary: 'Send draft reply',\n  methods: {\n    POST: {\n      summary: 'Send a draft reply email and register it in messages when available',\n      description: 'Sends the draft_reply action payload via the configured email provider. When the messages module is available, also records the sent reply as an internal message record. Sets In-Reply-To and References headers for threading.',\n      responses: [\n        { status: 200, description: 'Reply sent successfully' },\n        { status: 400, description: 'Missing required payload fields' },\n        { status: 404, description: 'Reply action not found' },\n        { status: 409, description: 'Action in invalid state for sending' },\n        { status: 502, description: 'Email delivery failed' },\n        { status: 503, description: 'Email service not configured or disabled' },\n      ],\n    },\n  },\n}\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,cAAc;AACvB,SAAS,+BAA+B;AACxC,SAAS,sCAAsC;AAE/C,SAAS,6BAA6B;AACtC,SAAS,qBAAqB,kBAAkB;AAChD,SAAS,+BAA+B;AACxC,SAAS,yBAAyB;AAClC,SAAS,mCAAmC;AAC5C;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEA,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,wBAAwB,EAAE;AACzE;AAEA,eAAsB,KAAK,KAAc;AACvC,MAAI;AACF,UAAM,MAAM,MAAM,sBAAsB,GAAG;AAC3C,UAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAC3B,UAAM,WAAW,MAAM,gBAAgB,KAAK,GAAG;AAC/C,QAAI,gBAAgB,QAAQ,EAAG,QAAO;AAEtC,UAAM,UAAU,mBAAmB,KAAK,SAAS;AACjD,QAAI,CAAC,SAAS;AACZ,aAAO,aAAa,KAAK,EAAE,OAAO,mBAAmB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACzE;AAEA,UAAM,SAAS,MAAM;AAAA,MACnB,IAAI;AAAA,MACJ;AAAA,MACA;AAAA,QACE,IAAI;AAAA,QACJ,YAAY,SAAS;AAAA,QACrB,YAAY;AAAA,QACZ,gBAAgB,IAAI;AAAA,QACpB,UAAU,IAAI;AAAA,QACd,WAAW;AAAA,MACb;AAAA,MACA;AAAA,MACA,IAAI;AAAA,IACN;AAEA,QAAI,CAAC,QAAQ;AACX,aAAO,aAAa,KAAK,EAAE,OAAO,yBAAyB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC/E;AAEA,QAAI,OAAO,WAAW,YAAY;AAChC,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,4EAAuE,OAAO,MAAM,KAAK;AAAA,QAClG,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAEA,UAAM,QAAQ,MAAM;AAAA,MAClB,IAAI;AAAA,MACJ;AAAA,MACA,EAAE,IAAI,SAAS,cAAc,WAAW,KAAK;AAAA,MAC7C;AAAA,MACA,IAAI;AAAA,IACN;AAEA,UAAM,gBAAgB,wBAAwB,UAAU,OAAO,OAAO;AACtE,QAAI,CAAC,cAAc,SAAS;AAC1B,aAAO,aAAa,KAAK,EAAE,OAAO,4DAA4D,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAClH;AACA,UAAM,EAAE,IAAI,WAAW,QAAQ,SAAS,KAAK,IAAI,cAAc;AAE/D,UAAM,SAAS,QAAQ,IAAI;AAC3B,QAAI,CAAC,QAAQ;AACX,aAAO,aAAa,KAAK,EAAE,OAAO,+BAA+B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACrF;AAEA,UAAM,gBACJ,wBAAwB,QAAQ,IAAI,2BAA2B,KAAK,KACpE,wBAAwB,QAAQ,IAAI,cAAc,KAAK;AACzD,QAAI,eAAe;AACjB,aAAO,aAAa,KAAK,EAAE,OAAO,6BAA6B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACnF;AAEA,UAAM,EAAE,oBAAoB,YAAY,kBAAkB,IAAI,cAAc;AAC5E,UAAM,cAAc,+BAA+B;AACnD,QAAI,CAAC,aAAa;AAChB,aAAO,aAAa,KAAK;AAAA,QACvB,OAAO;AAAA,MACT,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACpB;AAEA,UAAM,UAAkC,CAAC;AACzC,UAAM,YAAY,sBAAsB,OAAO;AAC/C,QAAI,WAAW;AACb,cAAQ,aAAa,IAAI;AAAA,IAC3B;AACA,UAAM,aAAa,qBAAsB,OAAO;AAChD,QAAI,cAAc,WAAW,SAAS,GAAG;AACvC,cAAQ,YAAY,IAAI,WAAW,KAAK,GAAG;AAAA,IAC7C;AAEA,UAAM,SAAS,IAAI,OAAO,MAAM;AAChC,UAAM,EAAE,MAAM,UAAU,OAAO,UAAU,IAAI,MAAM,OAAO,OAAO,KAAK;AAAA,MACpE,IAAI;AAAA,MACJ,MAAM;AAAA,MACN;AAAA,MACA,MAAM;AAAA,MACN,GAAI,OAAO,KAAK,OAAO,EAAE,SAAS,IAAI,EAAE,QAAQ,IAAI,CAAC;AAAA,IACvD,CAAC;AAED,QAAI,WAAW;AACb,YAAM,eAAe,UAAU,WAAW;AAC1C,aAAO,aAAa,KAAK,EAAE,OAAO,yBAAyB,YAAY,GAAG,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC9F;AAEA,UAAM,gBAAgB,UAAU,MAAM;AACtC,UAAM,iBAAiB,MAAM;AAAA,MAC3B,EAAE,IAAI,WAAW,QAAQ,SAAS,KAAK;AAAA,MACvC,SAAS;AAAA,MACT;AAAA,QACE,WAAW,IAAI;AAAA,QACf,OAAO;AAAA,UACL,UAAU,IAAI;AAAA,UACd,gBAAgB,IAAI;AAAA,UACpB,QAAQ,IAAI;AAAA,QACd;AAAA,MACF;AAAA,IACF;AAEA,WAAO,WAAW;AAAA,MAChB,GAAI,OAAO,YAAY,OAAO,OAAO,aAAa,WAAW,OAAO,WAAW,CAAC;AAAA,MAChF,cAAa,oBAAI,KAAK,GAAE,YAAY;AAAA,MACpC;AAAA,MACA,GAAI,iBAAiB,EAAE,iBAAiB,eAAe,UAAU,IAAI,CAAC;AAAA,IACxE;AACA,UAAM,IAAI,GAAG,MAAM;AAEnB,QAAI;AACF,YAAM,kBAAkB,wBAAwB;AAAA,QAC9C,YAAY,SAAS;AAAA,QACrB,UAAU;AAAA,QACV,UAAU,IAAI;AAAA,QACd,gBAAgB,IAAI;AAAA,QACpB;AAAA,QACA;AAAA,QACA,iBAAiB,gBAAgB,aAAa;AAAA,MAChD,CAAC;AAAA,IACH,SAAS,YAAY;AACnB,cAAQ,MAAM,gDAAgD,UAAU;AAAA,IAC1E;AAEA,WAAO,aAAa,KAAK;AAAA,MACvB,IAAI;AAAA,MACJ;AAAA,MACA,GAAI,iBAAiB,EAAE,iBAAiB,eAAe,UAAU,IAAI,CAAC;AAAA,IACxE,CAAC;AAAA,EACH,SAAS,KAAK;AACZ,WAAO,iBAAiB,KAAK,YAAY;AAAA,EAC3C;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aAAa;AAAA,MACb,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,0BAA0B;AAAA,QACtD,EAAE,QAAQ,KAAK,aAAa,kCAAkC;AAAA,QAC9D,EAAE,QAAQ,KAAK,aAAa,yBAAyB;AAAA,QACrD,EAAE,QAAQ,KAAK,aAAa,sCAAsC;AAAA,QAClE,EAAE,QAAQ,KAAK,aAAa,wBAAwB;AAAA,QACpD,EAAE,QAAQ,KAAK,aAAa,2CAA2C;AAAA,MACzE;AAAA,IACF;AAAA,EACF;AACF;",
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { Resend } from 'resend'\nimport { parseBooleanWithDefault } from '@open-mercato/shared/lib/boolean'\nimport { resolveDefaultEmailFromAddress } from '@open-mercato/shared/lib/email/config'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { InboxProposalAction, InboxEmail } from '../../../../../../data/entities'\nimport { draftReplyPayloadSchema } from '../../../../../../data/validators'\nimport { emitInboxOpsEvent } from '../../../../../../events'\nimport { createMessageRecordForReply } from '../../../../../../lib/messagesIntegration'\nimport {\n  resolveRequestContext,\n  resolveProposal,\n  extractPathSegment,\n  handleRouteError,\n  isErrorResponse,\n} from '../../../../../routeHelpers'\n\nexport const metadata = {\n  POST: { requireAuth: true, requireFeatures: ['inbox_ops.replies.send'] },\n}\n\nexport async function POST(req: Request) {\n  try {\n    const ctx = await resolveRequestContext(req)\n    const url = new URL(req.url)\n    const proposal = await resolveProposal(url, ctx)\n    if (isErrorResponse(proposal)) return proposal\n\n    const replyId = extractPathSegment(url, 'replies')\n    if (!replyId) {\n      return NextResponse.json({ error: 'Missing reply ID' }, { status: 400 })\n    }\n\n    const action = await findOneWithDecryption(\n      ctx.em,\n      InboxProposalAction,\n      {\n        id: replyId,\n        proposalId: proposal.id,\n        actionType: 'draft_reply',\n        organizationId: ctx.organizationId,\n        tenantId: ctx.tenantId,\n        deletedAt: null,\n      },\n      undefined,\n      ctx.scope,\n    )\n\n    if (!action) {\n      return NextResponse.json({ error: 'Reply action not found' }, { status: 404 })\n    }\n\n    if (action.status !== 'executed') {\n      return NextResponse.json(\n        { error: `Cannot send reply \u2014 action must be accepted first (current status: \"${action.status}\")` },\n        { status: 409 },\n      )\n    }\n\n    const existingMetadata =\n      action.metadata && typeof action.metadata === 'object' ? action.metadata : {}\n    if ((existingMetadata as Record<string, unknown>).replySentAt) {\n      return NextResponse.json(\n        { error: 'Reply has already been sent for this action' },\n        { status: 409 },\n      )\n    }\n\n    const email = await findOneWithDecryption(\n      ctx.em,\n      InboxEmail,\n      { id: proposal.inboxEmailId, deletedAt: null },\n      undefined,\n      ctx.scope,\n    )\n\n    const payloadResult = draftReplyPayloadSchema.safeParse(action.payload)\n    if (!payloadResult.success) {\n      return NextResponse.json({ error: 'Reply payload missing required fields (to, subject, body)' }, { status: 400 })\n    }\n    const { to: toAddress, toName, subject, body } = payloadResult.data\n\n    const apiKey = process.env.RESEND_API_KEY\n    if (!apiKey) {\n      return NextResponse.json({ error: 'Email service not configured' }, { status: 503 })\n    }\n\n    const emailDisabled =\n      parseBooleanWithDefault(process.env.OM_DISABLE_EMAIL_DELIVERY, false) ||\n      parseBooleanWithDefault(process.env.OM_TEST_MODE, false)\n    if (emailDisabled) {\n      return NextResponse.json({ error: 'Email delivery is disabled' }, { status: 503 })\n    }\n\n    const { inReplyToMessageId, references: payloadReferences } = payloadResult.data\n    const fromAddress = resolveDefaultEmailFromAddress()\n    if (!fromAddress) {\n      return NextResponse.json({\n        error: 'Email sender is not configured. Set NOTIFICATIONS_EMAIL_FROM, EMAIL_FROM, or ADMIN_EMAIL.',\n      }, { status: 503 })\n    }\n\n    const headers: Record<string, string> = {}\n    const inReplyTo = inReplyToMessageId || email?.messageId\n    if (inReplyTo) {\n      headers['In-Reply-To'] = inReplyTo\n    }\n    const references = payloadReferences || (email?.emailReferences as string[])\n    if (references && references.length > 0) {\n      headers['References'] = references.join(' ')\n    }\n\n    const resend = new Resend(apiKey)\n    const { data: sendData, error: sendError } = await resend.emails.send({\n      to: toAddress,\n      from: fromAddress,\n      subject,\n      text: body,\n      ...(Object.keys(headers).length > 0 ? { headers } : {}),\n    })\n\n    if (sendError) {\n      const errorMessage = sendError.message || 'Unknown error'\n      return NextResponse.json({ error: `Failed to send email: ${errorMessage}` }, { status: 502 })\n    }\n\n    const sentMessageId = sendData?.id || null\n    const messagesResult = await createMessageRecordForReply(\n      { to: toAddress, toName, subject, body },\n      proposal.inboxEmailId,\n      {\n        container: ctx.container,\n        scope: {\n          tenantId: ctx.tenantId,\n          organizationId: ctx.organizationId,\n          userId: ctx.userId,\n        },\n      },\n    )\n\n    action.metadata = {\n      ...existingMetadata,\n      replySentAt: new Date().toISOString(),\n      sentMessageId,\n      ...(messagesResult ? { messageRecordId: messagesResult.messageId } : {}),\n    }\n    await ctx.em.flush()\n\n    try {\n      await emitInboxOpsEvent('inbox_ops.reply.sent', {\n        proposalId: proposal.id,\n        actionId: replyId,\n        tenantId: ctx.tenantId,\n        organizationId: ctx.organizationId,\n        toAddress,\n        sentMessageId,\n        messageRecordId: messagesResult?.messageId ?? null,\n      })\n    } catch (eventError) {\n      console.error('[inbox_ops:reply:send] Failed to emit event:', eventError)\n    }\n\n    return NextResponse.json({\n      ok: true,\n      sentMessageId,\n      ...(messagesResult ? { messageRecordId: messagesResult.messageId } : {}),\n    })\n  } catch (err) {\n    return handleRouteError(err, 'send reply')\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'InboxOps',\n  summary: 'Send draft reply',\n  methods: {\n    POST: {\n      summary: 'Send a draft reply email and register it in messages when available',\n      description: 'Sends the draft_reply action payload via the configured email provider. When the messages module is available, also records the sent reply as an internal message record. Sets In-Reply-To and References headers for threading.',\n      responses: [\n        { status: 200, description: 'Reply sent successfully' },\n        { status: 400, description: 'Missing required payload fields' },\n        { status: 404, description: 'Reply action not found' },\n        { status: 409, description: 'Action in invalid state for sending' },\n        { status: 502, description: 'Email delivery failed' },\n        { status: 503, description: 'Email service not configured or disabled' },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,cAAc;AACvB,SAAS,+BAA+B;AACxC,SAAS,sCAAsC;AAE/C,SAAS,6BAA6B;AACtC,SAAS,qBAAqB,kBAAkB;AAChD,SAAS,+BAA+B;AACxC,SAAS,yBAAyB;AAClC,SAAS,mCAAmC;AAC5C;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEA,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,wBAAwB,EAAE;AACzE;AAEA,eAAsB,KAAK,KAAc;AACvC,MAAI;AACF,UAAM,MAAM,MAAM,sBAAsB,GAAG;AAC3C,UAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAC3B,UAAM,WAAW,MAAM,gBAAgB,KAAK,GAAG;AAC/C,QAAI,gBAAgB,QAAQ,EAAG,QAAO;AAEtC,UAAM,UAAU,mBAAmB,KAAK,SAAS;AACjD,QAAI,CAAC,SAAS;AACZ,aAAO,aAAa,KAAK,EAAE,OAAO,mBAAmB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACzE;AAEA,UAAM,SAAS,MAAM;AAAA,MACnB,IAAI;AAAA,MACJ;AAAA,MACA;AAAA,QACE,IAAI;AAAA,QACJ,YAAY,SAAS;AAAA,QACrB,YAAY;AAAA,QACZ,gBAAgB,IAAI;AAAA,QACpB,UAAU,IAAI;AAAA,QACd,WAAW;AAAA,MACb;AAAA,MACA;AAAA,MACA,IAAI;AAAA,IACN;AAEA,QAAI,CAAC,QAAQ;AACX,aAAO,aAAa,KAAK,EAAE,OAAO,yBAAyB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC/E;AAEA,QAAI,OAAO,WAAW,YAAY;AAChC,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,4EAAuE,OAAO,MAAM,KAAK;AAAA,QAClG,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAEA,UAAM,mBACJ,OAAO,YAAY,OAAO,OAAO,aAAa,WAAW,OAAO,WAAW,CAAC;AAC9E,QAAK,iBAA6C,aAAa;AAC7D,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,8CAA8C;AAAA,QACvD,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAEA,UAAM,QAAQ,MAAM;AAAA,MAClB,IAAI;AAAA,MACJ;AAAA,MACA,EAAE,IAAI,SAAS,cAAc,WAAW,KAAK;AAAA,MAC7C;AAAA,MACA,IAAI;AAAA,IACN;AAEA,UAAM,gBAAgB,wBAAwB,UAAU,OAAO,OAAO;AACtE,QAAI,CAAC,cAAc,SAAS;AAC1B,aAAO,aAAa,KAAK,EAAE,OAAO,4DAA4D,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAClH;AACA,UAAM,EAAE,IAAI,WAAW,QAAQ,SAAS,KAAK,IAAI,cAAc;AAE/D,UAAM,SAAS,QAAQ,IAAI;AAC3B,QAAI,CAAC,QAAQ;AACX,aAAO,aAAa,KAAK,EAAE,OAAO,+BAA+B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACrF;AAEA,UAAM,gBACJ,wBAAwB,QAAQ,IAAI,2BAA2B,KAAK,KACpE,wBAAwB,QAAQ,IAAI,cAAc,KAAK;AACzD,QAAI,eAAe;AACjB,aAAO,aAAa,KAAK,EAAE,OAAO,6BAA6B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACnF;AAEA,UAAM,EAAE,oBAAoB,YAAY,kBAAkB,IAAI,cAAc;AAC5E,UAAM,cAAc,+BAA+B;AACnD,QAAI,CAAC,aAAa;AAChB,aAAO,aAAa,KAAK;AAAA,QACvB,OAAO;AAAA,MACT,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACpB;AAEA,UAAM,UAAkC,CAAC;AACzC,UAAM,YAAY,sBAAsB,OAAO;AAC/C,QAAI,WAAW;AACb,cAAQ,aAAa,IAAI;AAAA,IAC3B;AACA,UAAM,aAAa,qBAAsB,OAAO;AAChD,QAAI,cAAc,WAAW,SAAS,GAAG;AACvC,cAAQ,YAAY,IAAI,WAAW,KAAK,GAAG;AAAA,IAC7C;AAEA,UAAM,SAAS,IAAI,OAAO,MAAM;AAChC,UAAM,EAAE,MAAM,UAAU,OAAO,UAAU,IAAI,MAAM,OAAO,OAAO,KAAK;AAAA,MACpE,IAAI;AAAA,MACJ,MAAM;AAAA,MACN;AAAA,MACA,MAAM;AAAA,MACN,GAAI,OAAO,KAAK,OAAO,EAAE,SAAS,IAAI,EAAE,QAAQ,IAAI,CAAC;AAAA,IACvD,CAAC;AAED,QAAI,WAAW;AACb,YAAM,eAAe,UAAU,WAAW;AAC1C,aAAO,aAAa,KAAK,EAAE,OAAO,yBAAyB,YAAY,GAAG,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC9F;AAEA,UAAM,gBAAgB,UAAU,MAAM;AACtC,UAAM,iBAAiB,MAAM;AAAA,MAC3B,EAAE,IAAI,WAAW,QAAQ,SAAS,KAAK;AAAA,MACvC,SAAS;AAAA,MACT;AAAA,QACE,WAAW,IAAI;AAAA,QACf,OAAO;AAAA,UACL,UAAU,IAAI;AAAA,UACd,gBAAgB,IAAI;AAAA,UACpB,QAAQ,IAAI;AAAA,QACd;AAAA,MACF;AAAA,IACF;AAEA,WAAO,WAAW;AAAA,MAChB,GAAG;AAAA,MACH,cAAa,oBAAI,KAAK,GAAE,YAAY;AAAA,MACpC;AAAA,MACA,GAAI,iBAAiB,EAAE,iBAAiB,eAAe,UAAU,IAAI,CAAC;AAAA,IACxE;AACA,UAAM,IAAI,GAAG,MAAM;AAEnB,QAAI;AACF,YAAM,kBAAkB,wBAAwB;AAAA,QAC9C,YAAY,SAAS;AAAA,QACrB,UAAU;AAAA,QACV,UAAU,IAAI;AAAA,QACd,gBAAgB,IAAI;AAAA,QACpB;AAAA,QACA;AAAA,QACA,iBAAiB,gBAAgB,aAAa;AAAA,MAChD,CAAC;AAAA,IACH,SAAS,YAAY;AACnB,cAAQ,MAAM,gDAAgD,UAAU;AAAA,IAC1E;AAEA,WAAO,aAAa,KAAK;AAAA,MACvB,IAAI;AAAA,MACJ;AAAA,MACA,GAAI,iBAAiB,EAAE,iBAAiB,eAAe,UAAU,IAAI,CAAC;AAAA,IACxE,CAAC;AAAA,EACH,SAAS,KAAK;AACZ,WAAO,iBAAiB,KAAK,YAAY;AAAA,EAC3C;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aAAa;AAAA,MACb,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,0BAA0B;AAAA,QACtD,EAAE,QAAQ,KAAK,aAAa,kCAAkC;AAAA,QAC9D,EAAE,QAAQ,KAAK,aAAa,yBAAyB;AAAA,QACrD,EAAE,QAAQ,KAAK,aAAa,sCAAsC;AAAA,QAClE,EAAE,QAAQ,KAAK,aAAa,wBAAwB;AAAA,QACpD,EAAE,QAAQ,KAAK,aAAa,2CAA2C;AAAA,MACzE;AAAA,IACF;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/modules/inbox_ops/api/settings/route.js

@@ -1,6 +1,8 @@
 import { NextResponse } from "next/server";
 import { runWithCacheTenant } from "@open-mercato/cache";
 import { findOneWithDecryption } from "@open-mercato/shared/lib/encryption/find";
+import { enforceCommandOptimisticLock } from "@open-mercato/shared/lib/crud/optimistic-lock-command";
+import { isCrudHttpError } from "@open-mercato/shared/lib/crud/errors";
 import { InboxSettings } from "../../data/entities.js";
 import { updateSettingsSchema } from "../../data/validators.js";
 import { resolveRequestContext, handleRouteError } from "../routeHelpers.js";
@@ -42,7 +44,10 @@ async function GET(req) {
         id: settings.id,
         inboxAddress: settings.inboxAddress,
         isActive: settings.isActive,
-        workingLanguage: settings.workingLanguage
+        workingLanguage: settings.workingLanguage,
+        // Surface only whether a per-tenant secret exists — never the value.
+        webhookSecretSet: Boolean(settings.webhookSecret),
+        updatedAt: settings.updatedAt instanceof Date ? settings.updatedAt.toISOString() : settings.updatedAt ?? null
       } : null
     };
     if (cache) {
@@ -84,12 +89,26 @@ async function PATCH(req) {
     if (!settings) {
       return NextResponse.json({ error: "Settings not found" }, { status: 404 });
     }
+    try {
+      enforceCommandOptimisticLock({
+        resourceKind: "inbox_ops.settings",
+        resourceId: settings.id,
+        current: settings.updatedAt ?? null,
+        request: req
+      });
+    } catch (err) {
+      if (isCrudHttpError(err)) return NextResponse.json(err.body, { status: err.status });
+      throw err;
+    }
     if (parsed.data.workingLanguage !== void 0) {
       settings.workingLanguage = parsed.data.workingLanguage;
     }
     if (parsed.data.isActive !== void 0) {
       settings.isActive = parsed.data.isActive;
     }
+    if (parsed.data.webhookSecret !== void 0) {
+      settings.webhookSecret = parsed.data.webhookSecret ? parsed.data.webhookSecret : null;
+    }
     await ctx.em.flush();
     const cache = resolveCache(ctx.container);
     await runWithCacheTenant(ctx.tenantId, () => invalidateSettingsCache(cache, ctx.tenantId));
@@ -99,7 +118,9 @@ async function PATCH(req) {
         id: settings.id,
         inboxAddress: settings.inboxAddress,
         isActive: settings.isActive,
-        workingLanguage: settings.workingLanguage
+        workingLanguage: settings.workingLanguage,
+        webhookSecretSet: Boolean(settings.webhookSecret),
+        updatedAt: settings.updatedAt instanceof Date ? settings.updatedAt.toISOString() : settings.updatedAt ?? null
       }
     });
   } catch (err) {

package/dist/modules/inbox_ops/api/settings/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../src/modules/inbox_ops/api/settings/route.ts"],
-  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { runWithCacheTenant } from '@open-mercato/cache'\nimport { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { InboxSettings } from '../../data/entities'\nimport { updateSettingsSchema } from '../../data/validators'\nimport { resolveRequestContext, handleRouteError } from '../routeHelpers'\nimport {\n  resolveCache,\n  createSettingsCacheKey,\n  createSettingsCacheTag,\n  invalidateSettingsCache,\n  SETTINGS_CACHE_TTL_MS,\n} from '../../lib/cache'\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['inbox_ops.settings.manage'] },\n  PATCH: { requireAuth: true, requireFeatures: ['inbox_ops.settings.manage'] },\n}\n\nexport async function GET(req: Request) {\n  try {\n    const ctx = await resolveRequestContext(req)\n    const cache = resolveCache(ctx.container)\n\n    if (cache) {\n      const cacheKey = createSettingsCacheKey(ctx.tenantId)\n      const cached = await runWithCacheTenant(ctx.tenantId, () => cache.get(cacheKey))\n      if (cached) {\n        return NextResponse.json(cached)\n      }\n    }\n\n    const settings = await findOneWithDecryption(\n      ctx.em,\n      InboxSettings,\n      {\n        organizationId: ctx.organizationId,\n        tenantId: ctx.tenantId,\n        deletedAt: null,\n      },\n      undefined,\n      ctx.scope,\n    )\n\n    const responseBody = {\n      settings: settings ? {\n        id: settings.id,\n        inboxAddress: settings.inboxAddress,\n        isActive: settings.isActive,\n        workingLanguage: settings.workingLanguage,\n      } : null,\n    }\n\n    if (cache) {\n      const cacheKey = createSettingsCacheKey(ctx.tenantId)\n      const tag = createSettingsCacheTag(ctx.tenantId)\n      try {\n        await runWithCacheTenant(ctx.tenantId, () =>\n          cache.set(cacheKey, responseBody, { ttl: SETTINGS_CACHE_TTL_MS, tags: [tag] }),\n        )\n      } catch (err) {\n        console.warn('[inbox_ops:settings] Failed to set cache', err)\n      }\n    }\n\n    return NextResponse.json(responseBody)\n  } catch (err) {\n    return handleRouteError(err, 'load settings')\n  }\n}\n\nexport async function PATCH(req: Request) {\n  try {\n    const ctx = await resolveRequestContext(req)\n\n    const body = await req.json()\n    const parsed = updateSettingsSchema.safeParse(body)\n    if (!parsed.success) {\n      return NextResponse.json({ error: 'Invalid request', details: parsed.error.issues }, { status: 400 })\n    }\n\n    const settings = await findOneWithDecryption(\n      ctx.em,\n      InboxSettings,\n      {\n        organizationId: ctx.organizationId,\n        tenantId: ctx.tenantId,\n        deletedAt: null,\n      },\n      undefined,\n      ctx.scope,\n    )\n\n    if (!settings) {\n      return NextResponse.json({ error: 'Settings not found' }, { status: 404 })\n    }\n\n    if (parsed.data.workingLanguage !== undefined) {\n      settings.workingLanguage = parsed.data.workingLanguage\n    }\n    if (parsed.data.isActive !== undefined) {\n      settings.isActive = parsed.data.isActive\n    }\n\n    await ctx.em.flush()\n\n    const cache = resolveCache(ctx.container)\n    await runWithCacheTenant(ctx.tenantId, () => invalidateSettingsCache(cache, ctx.tenantId))\n\n    return NextResponse.json({\n      ok: true,\n      settings: {\n        id: settings.id,\n        inboxAddress: settings.inboxAddress,\n        isActive: settings.isActive,\n        workingLanguage: settings.workingLanguage,\n      },\n    })\n  } catch (err) {\n    return handleRouteError(err, 'update settings')\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'InboxOps',\n  summary: 'Settings',\n  methods: {\n    GET: {\n      summary: 'Get tenant inbox configuration',\n      description: 'Returns the forwarding address and configuration for this tenant',\n      responses: [\n        { status: 200, description: 'Inbox settings' },\n      ],\n    },\n    PATCH: {\n      summary: 'Update tenant inbox configuration',\n      description: 'Updates working language and/or active status',\n      responses: [\n        { status: 200, description: 'Updated settings' },\n        { status: 404, description: 'Settings not found' },\n      ],\n    },\n  },\n}\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAE7B,SAAS,0BAA0B;AACnC,SAAS,6BAA6B;AACtC,SAAS,qBAAqB;AAC9B,SAAS,4BAA4B;AACrC,SAAS,uBAAuB,wBAAwB;AACxD;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEA,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,2BAA2B,EAAE;AAAA,EACzE,OAAO,EAAE,aAAa,MAAM,iBAAiB,CAAC,2BAA2B,EAAE;AAC7E;AAEA,eAAsB,IAAI,KAAc;AACtC,MAAI;AACF,UAAM,MAAM,MAAM,sBAAsB,GAAG;AAC3C,UAAM,QAAQ,aAAa,IAAI,SAAS;AAExC,QAAI,OAAO;AACT,YAAM,WAAW,uBAAuB,IAAI,QAAQ;AACpD,YAAM,SAAS,MAAM,mBAAmB,IAAI,UAAU,MAAM,MAAM,IAAI,QAAQ,CAAC;AAC/E,UAAI,QAAQ;AACV,eAAO,aAAa,KAAK,MAAM;AAAA,MACjC;AAAA,IACF;AAEA,UAAM,WAAW,MAAM;AAAA,MACrB,IAAI;AAAA,MACJ;AAAA,MACA;AAAA,QACE,gBAAgB,IAAI;AAAA,QACpB,UAAU,IAAI;AAAA,QACd,WAAW;AAAA,MACb;AAAA,MACA;AAAA,MACA,IAAI;AAAA,IACN;AAEA,UAAM,eAAe;AAAA,MACnB,UAAU,WAAW;AAAA,QACnB,IAAI,SAAS;AAAA,QACb,cAAc,SAAS;AAAA,QACvB,UAAU,SAAS;AAAA,QACnB,iBAAiB,SAAS;AAAA,MAC5B,IAAI;AAAA,IACN;AAEA,QAAI,OAAO;AACT,YAAM,WAAW,uBAAuB,IAAI,QAAQ;AACpD,YAAM,MAAM,uBAAuB,IAAI,QAAQ;AAC/C,UAAI;AACF,cAAM;AAAA,UAAmB,IAAI;AAAA,UAAU,MACrC,MAAM,IAAI,UAAU,cAAc,EAAE,KAAK,uBAAuB,MAAM,CAAC,GAAG,EAAE,CAAC;AAAA,QAC/E;AAAA,MACF,SAAS,KAAK;AACZ,gBAAQ,KAAK,4CAA4C,GAAG;AAAA,MAC9D;AAAA,IACF;AAEA,WAAO,aAAa,KAAK,YAAY;AAAA,EACvC,SAAS,KAAK;AACZ,WAAO,iBAAiB,KAAK,eAAe;AAAA,EAC9C;AACF;AAEA,eAAsB,MAAM,KAAc;AACxC,MAAI;AACF,UAAM,MAAM,MAAM,sBAAsB,GAAG;AAE3C,UAAM,OAAO,MAAM,IAAI,KAAK;AAC5B,UAAM,SAAS,qBAAqB,UAAU,IAAI;AAClD,QAAI,CAAC,OAAO,SAAS;AACnB,aAAO,aAAa,KAAK,EAAE,OAAO,mBAAmB,SAAS,OAAO,MAAM,OAAO,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACtG;AAEA,UAAM,WAAW,MAAM;AAAA,MACrB,IAAI;AAAA,MACJ;AAAA,MACA;AAAA,QACE,gBAAgB,IAAI;AAAA,QACpB,UAAU,IAAI;AAAA,QACd,WAAW;AAAA,MACb;AAAA,MACA;AAAA,MACA,IAAI;AAAA,IACN;AAEA,QAAI,CAAC,UAAU;AACb,aAAO,aAAa,KAAK,EAAE,OAAO,qBAAqB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC3E;AAEA,QAAI,OAAO,KAAK,oBAAoB,QAAW;AAC7C,eAAS,kBAAkB,OAAO,KAAK;AAAA,IACzC;AACA,QAAI,OAAO,KAAK,aAAa,QAAW;AACtC,eAAS,WAAW,OAAO,KAAK;AAAA,IAClC;AAEA,UAAM,IAAI,GAAG,MAAM;AAEnB,UAAM,QAAQ,aAAa,IAAI,SAAS;AACxC,UAAM,mBAAmB,IAAI,UAAU,MAAM,wBAAwB,OAAO,IAAI,QAAQ,CAAC;AAEzF,WAAO,aAAa,KAAK;AAAA,MACvB,IAAI;AAAA,MACJ,UAAU;AAAA,QACR,IAAI,SAAS;AAAA,QACb,cAAc,SAAS;AAAA,QACvB,UAAU,SAAS;AAAA,QACnB,iBAAiB,SAAS;AAAA,MAC5B;AAAA,IACF,CAAC;AAAA,EACH,SAAS,KAAK;AACZ,WAAO,iBAAiB,KAAK,iBAAiB;AAAA,EAChD;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,aAAa;AAAA,MACb,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,iBAAiB;AAAA,MAC/C;AAAA,IACF;AAAA,IACA,OAAO;AAAA,MACL,SAAS;AAAA,MACT,aAAa;AAAA,MACb,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,mBAAmB;AAAA,QAC/C,EAAE,QAAQ,KAAK,aAAa,qBAAqB;AAAA,MACnD;AAAA,IACF;AAAA,EACF;AACF;",
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { runWithCacheTenant } from '@open-mercato/cache'\nimport { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { enforceCommandOptimisticLock } from '@open-mercato/shared/lib/crud/optimistic-lock-command'\nimport { isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { InboxSettings } from '../../data/entities'\nimport { updateSettingsSchema } from '../../data/validators'\nimport { resolveRequestContext, handleRouteError } from '../routeHelpers'\nimport {\n  resolveCache,\n  createSettingsCacheKey,\n  createSettingsCacheTag,\n  invalidateSettingsCache,\n  SETTINGS_CACHE_TTL_MS,\n} from '../../lib/cache'\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['inbox_ops.settings.manage'] },\n  PATCH: { requireAuth: true, requireFeatures: ['inbox_ops.settings.manage'] },\n}\n\nexport async function GET(req: Request) {\n  try {\n    const ctx = await resolveRequestContext(req)\n    const cache = resolveCache(ctx.container)\n\n    if (cache) {\n      const cacheKey = createSettingsCacheKey(ctx.tenantId)\n      const cached = await runWithCacheTenant(ctx.tenantId, () => cache.get(cacheKey))\n      if (cached) {\n        return NextResponse.json(cached)\n      }\n    }\n\n    const settings = await findOneWithDecryption(\n      ctx.em,\n      InboxSettings,\n      {\n        organizationId: ctx.organizationId,\n        tenantId: ctx.tenantId,\n        deletedAt: null,\n      },\n      undefined,\n      ctx.scope,\n    )\n\n    const responseBody = {\n      settings: settings ? {\n        id: settings.id,\n        inboxAddress: settings.inboxAddress,\n        isActive: settings.isActive,\n        workingLanguage: settings.workingLanguage,\n        // Surface only whether a per-tenant secret exists \u2014 never the value.\n        webhookSecretSet: Boolean(settings.webhookSecret),\n        updatedAt: settings.updatedAt instanceof Date ? settings.updatedAt.toISOString() : (settings.updatedAt ?? null),\n      } : null,\n    }\n\n    if (cache) {\n      const cacheKey = createSettingsCacheKey(ctx.tenantId)\n      const tag = createSettingsCacheTag(ctx.tenantId)\n      try {\n        await runWithCacheTenant(ctx.tenantId, () =>\n          cache.set(cacheKey, responseBody, { ttl: SETTINGS_CACHE_TTL_MS, tags: [tag] }),\n        )\n      } catch (err) {\n        console.warn('[inbox_ops:settings] Failed to set cache', err)\n      }\n    }\n\n    return NextResponse.json(responseBody)\n  } catch (err) {\n    return handleRouteError(err, 'load settings')\n  }\n}\n\nexport async function PATCH(req: Request) {\n  try {\n    const ctx = await resolveRequestContext(req)\n\n    const body = await req.json()\n    const parsed = updateSettingsSchema.safeParse(body)\n    if (!parsed.success) {\n      return NextResponse.json({ error: 'Invalid request', details: parsed.error.issues }, { status: 400 })\n    }\n\n    const settings = await findOneWithDecryption(\n      ctx.em,\n      InboxSettings,\n      {\n        organizationId: ctx.organizationId,\n        tenantId: ctx.tenantId,\n        deletedAt: null,\n      },\n      undefined,\n      ctx.scope,\n    )\n\n    if (!settings) {\n      return NextResponse.json({ error: 'Settings not found' }, { status: 404 })\n    }\n\n    // Optimistic lock: refuse a stale overwrite when two tabs edit the same inbox\n    // settings record. Strictly additive \u2014 a no-op without the expected-version header.\n    try {\n      enforceCommandOptimisticLock({\n        resourceKind: 'inbox_ops.settings',\n        resourceId: settings.id,\n        current: settings.updatedAt ?? null,\n        request: req,\n      })\n    } catch (err) {\n      if (isCrudHttpError(err)) return NextResponse.json(err.body, { status: err.status })\n      throw err\n    }\n\n    if (parsed.data.workingLanguage !== undefined) {\n      settings.workingLanguage = parsed.data.workingLanguage\n    }\n    if (parsed.data.isActive !== undefined) {\n      settings.isActive = parsed.data.isActive\n    }\n    if (parsed.data.webhookSecret !== undefined) {\n      // Empty/null clears the per-tenant secret (reverts to the global key).\n      settings.webhookSecret = parsed.data.webhookSecret ? parsed.data.webhookSecret : null\n    }\n\n    await ctx.em.flush()\n\n    const cache = resolveCache(ctx.container)\n    await runWithCacheTenant(ctx.tenantId, () => invalidateSettingsCache(cache, ctx.tenantId))\n\n    return NextResponse.json({\n      ok: true,\n      settings: {\n        id: settings.id,\n        inboxAddress: settings.inboxAddress,\n        isActive: settings.isActive,\n        workingLanguage: settings.workingLanguage,\n        webhookSecretSet: Boolean(settings.webhookSecret),\n        updatedAt: settings.updatedAt instanceof Date ? settings.updatedAt.toISOString() : (settings.updatedAt ?? null),\n      },\n    })\n  } catch (err) {\n    return handleRouteError(err, 'update settings')\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'InboxOps',\n  summary: 'Settings',\n  methods: {\n    GET: {\n      summary: 'Get tenant inbox configuration',\n      description: 'Returns the forwarding address and configuration for this tenant',\n      responses: [\n        { status: 200, description: 'Inbox settings' },\n      ],\n    },\n    PATCH: {\n      summary: 'Update tenant inbox configuration',\n      description: 'Updates working language and/or active status',\n      responses: [\n        { status: 200, description: 'Updated settings' },\n        { status: 404, description: 'Settings not found' },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAE7B,SAAS,0BAA0B;AACnC,SAAS,6BAA6B;AACtC,SAAS,oCAAoC;AAC7C,SAAS,uBAAuB;AAChC,SAAS,qBAAqB;AAC9B,SAAS,4BAA4B;AACrC,SAAS,uBAAuB,wBAAwB;AACxD;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEA,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,2BAA2B,EAAE;AAAA,EACzE,OAAO,EAAE,aAAa,MAAM,iBAAiB,CAAC,2BAA2B,EAAE;AAC7E;AAEA,eAAsB,IAAI,KAAc;AACtC,MAAI;AACF,UAAM,MAAM,MAAM,sBAAsB,GAAG;AAC3C,UAAM,QAAQ,aAAa,IAAI,SAAS;AAExC,QAAI,OAAO;AACT,YAAM,WAAW,uBAAuB,IAAI,QAAQ;AACpD,YAAM,SAAS,MAAM,mBAAmB,IAAI,UAAU,MAAM,MAAM,IAAI,QAAQ,CAAC;AAC/E,UAAI,QAAQ;AACV,eAAO,aAAa,KAAK,MAAM;AAAA,MACjC;AAAA,IACF;AAEA,UAAM,WAAW,MAAM;AAAA,MACrB,IAAI;AAAA,MACJ;AAAA,MACA;AAAA,QACE,gBAAgB,IAAI;AAAA,QACpB,UAAU,IAAI;AAAA,QACd,WAAW;AAAA,MACb;AAAA,MACA;AAAA,MACA,IAAI;AAAA,IACN;AAEA,UAAM,eAAe;AAAA,MACnB,UAAU,WAAW;AAAA,QACnB,IAAI,SAAS;AAAA,QACb,cAAc,SAAS;AAAA,QACvB,UAAU,SAAS;AAAA,QACnB,iBAAiB,SAAS;AAAA;AAAA,QAE1B,kBAAkB,QAAQ,SAAS,aAAa;AAAA,QAChD,WAAW,SAAS,qBAAqB,OAAO,SAAS,UAAU,YAAY,IAAK,SAAS,aAAa;AAAA,MAC5G,IAAI;AAAA,IACN;AAEA,QAAI,OAAO;AACT,YAAM,WAAW,uBAAuB,IAAI,QAAQ;AACpD,YAAM,MAAM,uBAAuB,IAAI,QAAQ;AAC/C,UAAI;AACF,cAAM;AAAA,UAAmB,IAAI;AAAA,UAAU,MACrC,MAAM,IAAI,UAAU,cAAc,EAAE,KAAK,uBAAuB,MAAM,CAAC,GAAG,EAAE,CAAC;AAAA,QAC/E;AAAA,MACF,SAAS,KAAK;AACZ,gBAAQ,KAAK,4CAA4C,GAAG;AAAA,MAC9D;AAAA,IACF;AAEA,WAAO,aAAa,KAAK,YAAY;AAAA,EACvC,SAAS,KAAK;AACZ,WAAO,iBAAiB,KAAK,eAAe;AAAA,EAC9C;AACF;AAEA,eAAsB,MAAM,KAAc;AACxC,MAAI;AACF,UAAM,MAAM,MAAM,sBAAsB,GAAG;AAE3C,UAAM,OAAO,MAAM,IAAI,KAAK;AAC5B,UAAM,SAAS,qBAAqB,UAAU,IAAI;AAClD,QAAI,CAAC,OAAO,SAAS;AACnB,aAAO,aAAa,KAAK,EAAE,OAAO,mBAAmB,SAAS,OAAO,MAAM,OAAO,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACtG;AAEA,UAAM,WAAW,MAAM;AAAA,MACrB,IAAI;AAAA,MACJ;AAAA,MACA;AAAA,QACE,gBAAgB,IAAI;AAAA,QACpB,UAAU,IAAI;AAAA,QACd,WAAW;AAAA,MACb;AAAA,MACA;AAAA,MACA,IAAI;AAAA,IACN;AAEA,QAAI,CAAC,UAAU;AACb,aAAO,aAAa,KAAK,EAAE,OAAO,qBAAqB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC3E;AAIA,QAAI;AACF,mCAA6B;AAAA,QAC3B,cAAc;AAAA,QACd,YAAY,SAAS;AAAA,QACrB,SAAS,SAAS,aAAa;AAAA,QAC/B,SAAS;AAAA,MACX,CAAC;AAAA,IACH,SAAS,KAAK;AACZ,UAAI,gBAAgB,GAAG,EAAG,QAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AACnF,YAAM;AAAA,IACR;AAEA,QAAI,OAAO,KAAK,oBAAoB,QAAW;AAC7C,eAAS,kBAAkB,OAAO,KAAK;AAAA,IACzC;AACA,QAAI,OAAO,KAAK,aAAa,QAAW;AACtC,eAAS,WAAW,OAAO,KAAK;AAAA,IAClC;AACA,QAAI,OAAO,KAAK,kBAAkB,QAAW;AAE3C,eAAS,gBAAgB,OAAO,KAAK,gBAAgB,OAAO,KAAK,gBAAgB;AAAA,IACnF;AAEA,UAAM,IAAI,GAAG,MAAM;AAEnB,UAAM,QAAQ,aAAa,IAAI,SAAS;AACxC,UAAM,mBAAmB,IAAI,UAAU,MAAM,wBAAwB,OAAO,IAAI,QAAQ,CAAC;AAEzF,WAAO,aAAa,KAAK;AAAA,MACvB,IAAI;AAAA,MACJ,UAAU;AAAA,QACR,IAAI,SAAS;AAAA,QACb,cAAc,SAAS;AAAA,QACvB,UAAU,SAAS;AAAA,QACnB,iBAAiB,SAAS;AAAA,QAC1B,kBAAkB,QAAQ,SAAS,aAAa;AAAA,QAChD,WAAW,SAAS,qBAAqB,OAAO,SAAS,UAAU,YAAY,IAAK,SAAS,aAAa;AAAA,MAC5G;AAAA,IACF,CAAC;AAAA,EACH,SAAS,KAAK;AACZ,WAAO,iBAAiB,KAAK,iBAAiB;AAAA,EAChD;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,aAAa;AAAA,MACb,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,iBAAiB;AAAA,MAC/C;AAAA,IACF;AAAA,IACA,OAAO;AAAA,MACL,SAAS;AAAA,MACT,aAAa;AAAA,MACb,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,mBAAmB;AAAA,QAC/C,EAAE,QAAQ,KAAK,aAAa,qBAAqB;AAAA,MACnD;AAAA,IACF;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/modules/inbox_ops/api/webhook/inbound.js

@@ -14,11 +14,15 @@ const metadata = {
 };
 const MAX_PAYLOAD_SIZE = 2 * 1024 * 1024;
 const REPLAY_WINDOW_MS = 5 * 60 * 1e3;
-function verifyHmacSignature(payload, signature, timestamp, secret) {
-  if (!signature || !timestamp || !secret) return false;
+function isTimestampFresh(timestamp) {
+  if (!timestamp) return false;
   const timestampMs = parseInt(timestamp, 10) * 1e3;
   if (isNaN(timestampMs)) return false;
-  if (Math.abs(Date.now() - timestampMs) > REPLAY_WINDOW_MS) return false;
+  return Math.abs(Date.now() - timestampMs) <= REPLAY_WINDOW_MS;
+}
+function verifyHmacSignature(payload, signature, timestamp, secret) {
+  if (!signature || !timestamp || !secret) return false;
+  if (!isTimestampFresh(timestamp)) return false;
   const expected = createHmac("sha256", secret).update(`${timestamp}.${payload}`).digest("hex");
   const received = signature.startsWith("sha256=") ? signature.slice("sha256=".length) : signature;
   try {
@@ -31,6 +35,15 @@ function verifyHmacSignature(payload, signature, timestamp, secret) {
     return false;
   }
 }
+function verifyHmacAgainstAny(payload, signature, timestamp, secrets) {
+  for (const secret of secrets) {
+    if (secret && verifyHmacSignature(payload, signature, timestamp, secret)) return true;
+  }
+  return false;
+}
+function secretFingerprint(secret) {
+  return createHmac("sha256", "inbox_ops:rate_limit:salt").update(secret).digest("hex").slice(0, 32);
+}
 function verifySvixSignature(rawBody, headers, secret) {
   try {
     const wh = new Webhook(secret);
@@ -74,7 +87,7 @@ async function verifyAndParse(req, rawBody) {
       return { ok: false, response: NextResponse.json({ error: "Service unavailable" }, { status: 503 }) };
     }
     const timestamp = req.headers.get("x-webhook-timestamp") || "";
-    if (!verifyHmacSignature(rawBody, customSig, timestamp, webhookSecret)) {
+    if (!isTimestampFresh(timestamp)) {
       return { ok: false, response: NextResponse.json({ error: "Invalid signature" }, { status: 400 }) };
     }
     let payload;
@@ -83,7 +96,7 @@ async function verifyAndParse(req, rawBody) {
     } catch {
       return { ok: false, response: NextResponse.json({ error: "Invalid JSON" }, { status: 400 }) };
     }
-    return { ok: true, data: { kind: "custom", payload } };
+    return { ok: true, data: { kind: "custom", payload, signature: customSig, timestamp } };
   }
   if (svixId) {
     const signingSecret = process.env.RESEND_WEBHOOK_SIGNING_SECRET;
@@ -182,15 +195,10 @@ async function POST(req) {
     cache = container.resolve("cache");
   } catch {
   }
-  const rateCheck = await checkRateLimit(cache, `webhook:${toAddress}`);
-  if (!rateCheck.allowed) {
-    return NextResponse.json(
-      { error: "Rate limit exceeded" },
-      {
-        status: 429,
-        headers: rateCheck.retryAfterSeconds ? { "Retry-After": String(rateCheck.retryAfterSeconds) } : void 0
-      }
-    );
+  const globalBucketKey = verified.data.kind === "custom" ? `webhook:secret:${secretFingerprint(process.env.INBOX_OPS_WEBHOOK_SECRET || "")}` : "webhook:resend";
+  const globalRateCheck = await checkRateLimit(cache, globalBucketKey);
+  if (!globalRateCheck.allowed) {
+    return rateLimitedResponse(globalRateCheck.retryAfterSeconds);
   }
   const em = container.resolve("em").fork();
   const settings = await findOneWithDecryption(
@@ -202,9 +210,31 @@ async function POST(req) {
       deletedAt: null
     }
   );
+  if (verified.data.kind === "custom") {
+    const globalSecret = process.env.INBOX_OPS_WEBHOOK_SECRET || "";
+    const inboxSecret = settings?.webhookSecret || "";
+    const acceptableSecrets = inboxSecret ? [inboxSecret] : [globalSecret];
+    const signatureValid = verifyHmacAgainstAny(
+      rawBody,
+      verified.data.signature,
+      verified.data.timestamp,
+      acceptableSecrets
+    );
+    if (!signatureValid) {
+      return NextResponse.json({ error: "Invalid signature" }, { status: 400 });
+    }
+  }
   if (!settings) {
     return NextResponse.json({ ok: true });
   }
+  const tenantRateCheck = await checkRateLimit(
+    cache,
+    `webhook:tenant:${settings.tenantId}`,
+    settings.tenantId
+  );
+  if (!tenantRateCheck.allowed) {
+    return rateLimitedResponse(tenantRateCheck.retryAfterSeconds);
+  }
   const parsed = parseInboundEmail(emailInput);
   const isDuplicate = await checkDuplicate(em, settings, parsed.messageId, parsed.contentHash);
   if (isDuplicate) {
@@ -257,6 +287,15 @@ async function POST(req) {
   }
   return NextResponse.json({ ok: true });
 }
+function rateLimitedResponse(retryAfterSeconds) {
+  return NextResponse.json(
+    { error: "Rate limit exceeded" },
+    {
+      status: 429,
+      headers: retryAfterSeconds ? { "Retry-After": String(retryAfterSeconds) } : void 0
+    }
+  );
+}
 function extractToAddress(payload) {
   const to = payload.to;
   if (typeof to === "string") {

package/dist/modules/inbox_ops/api/webhook/inbound.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../src/modules/inbox_ops/api/webhook/inbound.ts"],
-  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { createHmac, timingSafeEqual } from 'node:crypto'\nimport { z } from 'zod'\nimport { Webhook } from 'svix'\nimport { Resend } from 'resend'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport type { CacheStrategy } from '@open-mercato/cache'\nimport { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { InboxSettings, InboxEmail } from '../../data/entities'\nimport { parseInboundEmail } from '../../lib/emailParser'\nimport { checkRateLimit } from '../../lib/rateLimiter'\nimport { emitInboxOpsEvent } from '../../events'\n\nexport const metadata = {\n  POST: { requireAuth: false },\n}\n\nconst MAX_PAYLOAD_SIZE = 2 * 1024 * 1024 // 2MB\nconst REPLAY_WINDOW_MS = 5 * 60 * 1000 // 5 minutes\n\nfunction verifyHmacSignature(\n  payload: string,\n  signature: string,\n  timestamp: string,\n  secret: string,\n): boolean {\n  if (!signature || !timestamp || !secret) return false\n\n  const timestampMs = parseInt(timestamp, 10) * 1000\n  if (isNaN(timestampMs)) return false\n  if (Math.abs(Date.now() - timestampMs) > REPLAY_WINDOW_MS) return false\n\n  const expected = createHmac('sha256', secret)\n    .update(`${timestamp}.${payload}`)\n    .digest('hex')\n  const received = signature.startsWith('sha256=')\n    ? signature.slice('sha256='.length)\n    : signature\n\n  try {\n    if (received.length !== expected.length) return false\n    return timingSafeEqual(\n      Buffer.from(received, 'hex'),\n      Buffer.from(expected, 'hex'),\n    )\n  } catch {\n    return false\n  }\n}\n\nfunction verifySvixSignature(\n  rawBody: string,\n  headers: Record<string, string>,\n  secret: string,\n): boolean {\n  try {\n    const wh = new Webhook(secret)\n    wh.verify(rawBody, {\n      'svix-id': headers['svix-id'],\n      'svix-timestamp': headers['svix-timestamp'],\n      'svix-signature': headers['svix-signature'],\n    })\n    return true\n  } catch {\n    return false\n  }\n}\n\nasync function fetchResendEmail(emailId: string): Promise<{\n  from?: string\n  to?: string[]\n  subject?: string\n  text?: string\n  html?: string\n  messageId?: string\n  replyTo?: string\n  inReplyTo?: string\n  references?: string[]\n}> {\n  const apiKey = process.env.RESEND_API_KEY\n  if (!apiKey) throw new Error('RESEND_API_KEY is required to fetch Resend inbound emails')\n\n  const resend = new Resend(apiKey)\n  const { data, error } = await resend.emails.receiving.get(emailId)\n  if (error || !data) {\n    throw new Error(`Failed to fetch Resend email ${emailId}: ${error?.message || 'unknown error'}`)\n  }\n\n  return {\n    from: data.from,\n    to: data.to,\n    subject: data.subject,\n    text: data.text ?? undefined,\n    html: data.html ?? undefined,\n    messageId: data.message_id,\n    replyTo: data.reply_to?.[0] ?? undefined,\n    inReplyTo: data.headers?.['in-reply-to'] ?? undefined,\n    references: data.headers?.['references']?.split(/\\s+/).filter(Boolean),\n  }\n}\n\ntype VerifiedPayload =\n  | { kind: 'custom'; payload: Record<string, unknown> }\n  | { kind: 'resend'; emailFields: Awaited<ReturnType<typeof fetchResendEmail>>; to: string[] }\n\nasync function verifyAndParse(req: Request, rawBody: string): Promise<\n  | { ok: true; data: VerifiedPayload }\n  | { ok: false; response: NextResponse }\n> {\n  const customSig = req.headers.get('x-webhook-signature')\n  const svixId = req.headers.get('svix-id')\n\n  if (customSig) {\n    const webhookSecret = process.env.INBOX_OPS_WEBHOOK_SECRET\n    if (!webhookSecret) {\n      console.error('[inbox_ops:webhook] INBOX_OPS_WEBHOOK_SECRET not configured')\n      return { ok: false, response: NextResponse.json({ error: 'Service unavailable' }, { status: 503 }) }\n    }\n    const timestamp = req.headers.get('x-webhook-timestamp') || ''\n    if (!verifyHmacSignature(rawBody, customSig, timestamp, webhookSecret)) {\n      return { ok: false, response: NextResponse.json({ error: 'Invalid signature' }, { status: 400 }) }\n    }\n    let payload: Record<string, unknown>\n    try {\n      payload = JSON.parse(rawBody)\n    } catch {\n      return { ok: false, response: NextResponse.json({ error: 'Invalid JSON' }, { status: 400 }) }\n    }\n    return { ok: true, data: { kind: 'custom', payload } }\n  }\n\n  if (svixId) {\n    const signingSecret = process.env.RESEND_WEBHOOK_SIGNING_SECRET\n    if (!signingSecret) {\n      console.error('[inbox_ops:webhook] RESEND_WEBHOOK_SIGNING_SECRET not configured')\n      return { ok: false, response: NextResponse.json({ error: 'Service unavailable' }, { status: 503 }) }\n    }\n    const headers: Record<string, string> = {\n      'svix-id': svixId,\n      'svix-timestamp': req.headers.get('svix-timestamp') || '',\n      'svix-signature': req.headers.get('svix-signature') || '',\n    }\n    if (!verifySvixSignature(rawBody, headers, signingSecret)) {\n      return { ok: false, response: NextResponse.json({ error: 'Invalid signature' }, { status: 400 }) }\n    }\n    let envelope: { type?: string; data?: { email_id?: string; from?: string; to?: string[] } }\n    try {\n      envelope = JSON.parse(rawBody)\n    } catch {\n      return { ok: false, response: NextResponse.json({ error: 'Invalid JSON' }, { status: 400 }) }\n    }\n    if (envelope.type !== 'email.received') {\n      return { ok: false, response: NextResponse.json({ ok: true }) }\n    }\n    const emailId = envelope.data?.email_id\n    if (!emailId) {\n      return { ok: false, response: NextResponse.json({ error: 'Missing email_id in Resend payload' }, { status: 400 }) }\n    }\n    const emailFields = await fetchResendEmail(emailId)\n    const to = emailFields.to || envelope.data?.to || []\n    return { ok: true, data: { kind: 'resend', emailFields, to } }\n  }\n\n  return { ok: false, response: NextResponse.json({ error: 'Missing signature headers' }, { status: 400 }) }\n}\n\nexport async function POST(req: Request) {\n  const hasCustomSecret = Boolean(process.env.INBOX_OPS_WEBHOOK_SECRET)\n  const hasResendSecret = Boolean(process.env.RESEND_WEBHOOK_SIGNING_SECRET)\n  if (!hasCustomSecret && !hasResendSecret) {\n    console.error('[inbox_ops:webhook] Neither INBOX_OPS_WEBHOOK_SECRET nor RESEND_WEBHOOK_SIGNING_SECRET is configured')\n    return NextResponse.json({ error: 'Service unavailable' }, { status: 503 })\n  }\n\n  const contentLength = parseInt(req.headers.get('content-length') || '0', 10)\n  if (contentLength > MAX_PAYLOAD_SIZE) {\n    return NextResponse.json({ error: 'Payload too large' }, { status: 413 })\n  }\n\n  let rawBody: string\n  try {\n    rawBody = await req.text()\n  } catch {\n    return NextResponse.json({ error: 'Bad request' }, { status: 400 })\n  }\n\n  if (rawBody.length > MAX_PAYLOAD_SIZE) {\n    return NextResponse.json({ error: 'Payload too large' }, { status: 413 })\n  }\n\n  const verified = await verifyAndParse(req, rawBody)\n  if (!verified.ok) {\n    return verified.response\n  }\n\n  let toAddress: string | null\n  let emailInput: Parameters<typeof parseInboundEmail>[0]\n\n  if (verified.data.kind === 'custom') {\n    const payload = verified.data.payload\n    toAddress = extractToAddress(payload)\n    emailInput = {\n      from: payload.from as string | undefined,\n      to: payload.to as string | string[] | undefined,\n      subject: payload.subject as string | undefined,\n      text: payload.text as string | undefined,\n      html: payload.html as string | undefined,\n      messageId: payload.messageId as string | undefined,\n      replyTo: payload.replyTo as string | undefined,\n      inReplyTo: payload.inReplyTo as string | undefined,\n      references: payload.references as string | string[] | undefined,\n    }\n  } else {\n    const { emailFields, to } = verified.data\n    toAddress = to.length > 0 ? to[0].toLowerCase() : null\n    emailInput = {\n      from: emailFields.from,\n      to: emailFields.to,\n      subject: emailFields.subject,\n      text: emailFields.text,\n      html: emailFields.html,\n      messageId: emailFields.messageId,\n      replyTo: emailFields.replyTo,\n      inReplyTo: emailFields.inReplyTo,\n      references: emailFields.references,\n    }\n  }\n\n  if (!toAddress) {\n    return NextResponse.json({ error: 'Missing recipient address' }, { status: 400 })\n  }\n\n  const container = await createRequestContainer()\n\n  let cache: CacheStrategy | null = null\n  try {\n    cache = container.resolve('cache') as CacheStrategy\n  } catch {\n    // Cache not available \u2014 proceed without rate limiting\n  }\n\n  const rateCheck = await checkRateLimit(cache, `webhook:${toAddress}`)\n  if (!rateCheck.allowed) {\n    return NextResponse.json(\n      { error: 'Rate limit exceeded' },\n      {\n        status: 429,\n        headers: rateCheck.retryAfterSeconds\n          ? { 'Retry-After': String(rateCheck.retryAfterSeconds) }\n          : undefined,\n      },\n    )\n  }\n  const em = (container.resolve('em') as EntityManager).fork()\n\n  const settings = await findOneWithDecryption(\n    em,\n    InboxSettings,\n    {\n      inboxAddress: toAddress.toLowerCase(),\n      isActive: true,\n      deletedAt: null,\n    },\n  )\n\n  if (!settings) {\n    return NextResponse.json({ ok: true })\n  }\n\n  const parsed = parseInboundEmail(emailInput)\n\n  const isDuplicate = await checkDuplicate(em, settings, parsed.messageId, parsed.contentHash)\n  if (isDuplicate) {\n    try {\n      await emitInboxOpsEvent('inbox_ops.email.deduplicated', {\n        tenantId: settings.tenantId,\n        organizationId: settings.organizationId,\n        toAddress,\n      })\n    } catch (eventError) {\n      console.error('[inbox_ops:webhook] Failed to emit deduplicated event:', eventError)\n    }\n    return NextResponse.json({ ok: true })\n  }\n\n  const maxTextSize = parseInt(process.env.INBOX_OPS_MAX_TEXT_SIZE || '204800', 10)\n  const cleanedText = parsed.cleanedText.slice(0, maxTextSize)\n\n  const email = em.create(InboxEmail, {\n    messageId: parsed.messageId,\n    contentHash: parsed.contentHash,\n    forwardedByAddress: parsed.from.email,\n    forwardedByName: parsed.from.name || null,\n    toAddress,\n    subject: parsed.subject,\n    replyTo: parsed.replyTo,\n    inReplyTo: parsed.inReplyTo,\n    emailReferences: parsed.references,\n    rawText: parsed.rawText,\n    rawHtml: parsed.rawHtml,\n    cleanedText,\n    threadMessages: parsed.threadMessages,\n    detectedLanguage: parsed.detectedLanguage,\n    receivedAt: new Date(),\n    status: 'received' as const,\n    isActive: true,\n    organizationId: settings.organizationId,\n    tenantId: settings.tenantId,\n  })\n\n  em.persist(email)\n  await em.flush()\n\n  try {\n    await emitInboxOpsEvent('inbox_ops.email.received', {\n      emailId: email.id,\n      tenantId: settings.tenantId,\n      organizationId: settings.organizationId,\n      forwardedByAddress: parsed.from.email,\n      subject: parsed.subject,\n    })\n  } catch (eventError) {\n    console.error('[inbox_ops:webhook] Failed to emit email.received event:', eventError)\n  }\n\n  return NextResponse.json({ ok: true })\n}\n\nfunction extractToAddress(payload: Record<string, unknown>): string | null {\n  const to = payload.to\n  if (typeof to === 'string') {\n    const match = to.match(/<([^>]+)>/)\n    return match ? match[1].toLowerCase() : to.trim().toLowerCase()\n  }\n  if (Array.isArray(to) && to.length > 0) {\n    const first = to[0]\n    if (typeof first === 'string') {\n      const match = first.match(/<([^>]+)>/)\n      return match ? match[1].toLowerCase() : first.trim().toLowerCase()\n    }\n  }\n  return null\n}\n\nasync function checkDuplicate(\n  em: EntityManager,\n  settings: InboxSettings,\n  messageId: string | null | undefined,\n  contentHash: string | null | undefined,\n): Promise<boolean> {\n  const encScope = {\n    tenantId: settings.tenantId,\n    organizationId: settings.organizationId,\n  }\n  const whereBase = {\n    organizationId: settings.organizationId,\n    tenantId: settings.tenantId,\n    deletedAt: null,\n  }\n\n  if (messageId) {\n    const byMessageId = await findOneWithDecryption(em, InboxEmail, { ...whereBase, messageId }, undefined, encScope)\n    if (byMessageId) return true\n  }\n\n  if (contentHash) {\n    const byHash = await findOneWithDecryption(em, InboxEmail, { ...whereBase, contentHash }, undefined, encScope)\n    if (byHash) return true\n  }\n\n  return false\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'InboxOps',\n  summary: 'Inbound email webhook',\n  methods: {\n    POST: {\n      summary: 'Receive forwarded email from provider webhook',\n      description: 'Public endpoint \u2014 validated by provider HMAC signature or Resend/Svix signature. Rate limited per tenant.',\n      requestBody: {\n        contentType: 'application/json',\n        schema: z.object({\n          from: z.string().optional(),\n          to: z.union([z.string(), z.array(z.string())]).optional(),\n          subject: z.string().optional(),\n          text: z.string().optional(),\n          html: z.string().optional(),\n          messageId: z.string().optional(),\n          replyTo: z.string().optional(),\n          inReplyTo: z.string().optional(),\n          references: z.union([z.string(), z.array(z.string())]).optional(),\n        }),\n      },\n      responses: [\n        { status: 200, description: 'Email received and queued for processing' },\n        { status: 400, description: 'Invalid payload or signature' },\n        { status: 413, description: 'Payload too large' },\n        { status: 429, description: 'Rate limit exceeded' },\n        { status: 503, description: 'Webhook secret not configured' },\n      ],\n    },\n  },\n}\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,YAAY,uBAAuB;AAC5C,SAAS,SAAS;AAClB,SAAS,eAAe;AACxB,SAAS,cAAc;AACvB,SAAS,8BAA8B;AAIvC,SAAS,6BAA6B;AACtC,SAAS,eAAe,kBAAkB;AAC1C,SAAS,yBAAyB;AAClC,SAAS,sBAAsB;AAC/B,SAAS,yBAAyB;AAE3B,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,MAAM;AAC7B;AAEA,MAAM,mBAAmB,IAAI,OAAO;AACpC,MAAM,mBAAmB,IAAI,KAAK;AAElC,SAAS,oBACP,SACA,WACA,WACA,QACS;AACT,MAAI,CAAC,aAAa,CAAC,aAAa,CAAC,OAAQ,QAAO;AAEhD,QAAM,cAAc,SAAS,WAAW,EAAE,IAAI;AAC9C,MAAI,MAAM,WAAW,EAAG,QAAO;AAC/B,MAAI,KAAK,IAAI,KAAK,IAAI,IAAI,WAAW,IAAI,iBAAkB,QAAO;AAElE,QAAM,WAAW,WAAW,UAAU,MAAM,EACzC,OAAO,GAAG,SAAS,IAAI,OAAO,EAAE,EAChC,OAAO,KAAK;AACf,QAAM,WAAW,UAAU,WAAW,SAAS,IAC3C,UAAU,MAAM,UAAU,MAAM,IAChC;AAEJ,MAAI;AACF,QAAI,SAAS,WAAW,SAAS,OAAQ,QAAO;AAChD,WAAO;AAAA,MACL,OAAO,KAAK,UAAU,KAAK;AAAA,MAC3B,OAAO,KAAK,UAAU,KAAK;AAAA,IAC7B;AAAA,EACF,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,SAAS,oBACP,SACA,SACA,QACS;AACT,MAAI;AACF,UAAM,KAAK,IAAI,QAAQ,MAAM;AAC7B,OAAG,OAAO,SAAS;AAAA,MACjB,WAAW,QAAQ,SAAS;AAAA,MAC5B,kBAAkB,QAAQ,gBAAgB;AAAA,MAC1C,kBAAkB,QAAQ,gBAAgB;AAAA,IAC5C,CAAC;AACD,WAAO;AAAA,EACT,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,eAAe,iBAAiB,SAU7B;AACD,QAAM,SAAS,QAAQ,IAAI;AAC3B,MAAI,CAAC,OAAQ,OAAM,IAAI,MAAM,2DAA2D;AAExF,QAAM,SAAS,IAAI,OAAO,MAAM;AAChC,QAAM,EAAE,MAAM,MAAM,IAAI,MAAM,OAAO,OAAO,UAAU,IAAI,OAAO;AACjE,MAAI,SAAS,CAAC,MAAM;AAClB,UAAM,IAAI,MAAM,gCAAgC,OAAO,KAAK,OAAO,WAAW,eAAe,EAAE;AAAA,EACjG;AAEA,SAAO;AAAA,IACL,MAAM,KAAK;AAAA,IACX,IAAI,KAAK;AAAA,IACT,SAAS,KAAK;AAAA,IACd,MAAM,KAAK,QAAQ;AAAA,IACnB,MAAM,KAAK,QAAQ;AAAA,IACnB,WAAW,KAAK;AAAA,IAChB,SAAS,KAAK,WAAW,CAAC,KAAK;AAAA,IAC/B,WAAW,KAAK,UAAU,aAAa,KAAK;AAAA,IAC5C,YAAY,KAAK,UAAU,YAAY,GAAG,MAAM,KAAK,EAAE,OAAO,OAAO;AAAA,EACvE;AACF;AAMA,eAAe,eAAe,KAAc,SAG1C;AACA,QAAM,YAAY,IAAI,QAAQ,IAAI,qBAAqB;AACvD,QAAM,SAAS,IAAI,QAAQ,IAAI,SAAS;AAExC,MAAI,WAAW;AACb,UAAM,gBAAgB,QAAQ,IAAI;AAClC,QAAI,CAAC,eAAe;AAClB,cAAQ,MAAM,6DAA6D;AAC3E,aAAO,EAAE,IAAI,OAAO,UAAU,aAAa,KAAK,EAAE,OAAO,sBAAsB,GAAG,EAAE,QAAQ,IAAI,CAAC,EAAE;AAAA,IACrG;AACA,UAAM,YAAY,IAAI,QAAQ,IAAI,qBAAqB,KAAK;AAC5D,QAAI,CAAC,oBAAoB,SAAS,WAAW,WAAW,aAAa,GAAG;AACtE,aAAO,EAAE,IAAI,OAAO,UAAU,aAAa,KAAK,EAAE,OAAO,oBAAoB,GAAG,EAAE,QAAQ,IAAI,CAAC,EAAE;AAAA,IACnG;AACA,QAAI;AACJ,QAAI;AACF,gBAAU,KAAK,MAAM,OAAO;AAAA,IAC9B,QAAQ;AACN,aAAO,EAAE,IAAI,OAAO,UAAU,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC,EAAE;AAAA,IAC9F;AACA,WAAO,EAAE,IAAI,MAAM,MAAM,EAAE,MAAM,UAAU,QAAQ,EAAE;AAAA,EACvD;AAEA,MAAI,QAAQ;AACV,UAAM,gBAAgB,QAAQ,IAAI;AAClC,QAAI,CAAC,eAAe;AAClB,cAAQ,MAAM,kEAAkE;AAChF,aAAO,EAAE,IAAI,OAAO,UAAU,aAAa,KAAK,EAAE,OAAO,sBAAsB,GAAG,EAAE,QAAQ,IAAI,CAAC,EAAE;AAAA,IACrG;AACA,UAAM,UAAkC;AAAA,MACtC,WAAW;AAAA,MACX,kBAAkB,IAAI,QAAQ,IAAI,gBAAgB,KAAK;AAAA,MACvD,kBAAkB,IAAI,QAAQ,IAAI,gBAAgB,KAAK;AAAA,IACzD;AACA,QAAI,CAAC,oBAAoB,SAAS,SAAS,aAAa,GAAG;AACzD,aAAO,EAAE,IAAI,OAAO,UAAU,aAAa,KAAK,EAAE,OAAO,oBAAoB,GAAG,EAAE,QAAQ,IAAI,CAAC,EAAE;AAAA,IACnG;AACA,QAAI;AACJ,QAAI;AACF,iBAAW,KAAK,MAAM,OAAO;AAAA,IAC/B,QAAQ;AACN,aAAO,EAAE,IAAI,OAAO,UAAU,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC,EAAE;AAAA,IAC9F;AACA,QAAI,SAAS,SAAS,kBAAkB;AACtC,aAAO,EAAE,IAAI,OAAO,UAAU,aAAa,KAAK,EAAE,IAAI,KAAK,CAAC,EAAE;AAAA,IAChE;AACA,UAAM,UAAU,SAAS,MAAM;AAC/B,QAAI,CAAC,SAAS;AACZ,aAAO,EAAE,IAAI,OAAO,UAAU,aAAa,KAAK,EAAE,OAAO,qCAAqC,GAAG,EAAE,QAAQ,IAAI,CAAC,EAAE;AAAA,IACpH;AACA,UAAM,cAAc,MAAM,iBAAiB,OAAO;AAClD,UAAM,KAAK,YAAY,MAAM,SAAS,MAAM,MAAM,CAAC;AACnD,WAAO,EAAE,IAAI,MAAM,MAAM,EAAE,MAAM,UAAU,aAAa,GAAG,EAAE;AAAA,EAC/D;AAEA,SAAO,EAAE,IAAI,OAAO,UAAU,aAAa,KAAK,EAAE,OAAO,4BAA4B,GAAG,EAAE,QAAQ,IAAI,CAAC,EAAE;AAC3G;AAEA,eAAsB,KAAK,KAAc;AACvC,QAAM,kBAAkB,QAAQ,QAAQ,IAAI,wBAAwB;AACpE,QAAM,kBAAkB,QAAQ,QAAQ,IAAI,6BAA6B;AACzE,MAAI,CAAC,mBAAmB,CAAC,iBAAiB;AACxC,YAAQ,MAAM,sGAAsG;AACpH,WAAO,aAAa,KAAK,EAAE,OAAO,sBAAsB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC5E;AAEA,QAAM,gBAAgB,SAAS,IAAI,QAAQ,IAAI,gBAAgB,KAAK,KAAK,EAAE;AAC3E,MAAI,gBAAgB,kBAAkB;AACpC,WAAO,aAAa,KAAK,EAAE,OAAO,oBAAoB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC1E;AAEA,MAAI;AACJ,MAAI;AACF,cAAU,MAAM,IAAI,KAAK;AAAA,EAC3B,QAAQ;AACN,WAAO,aAAa,KAAK,EAAE,OAAO,cAAc,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACpE;AAEA,MAAI,QAAQ,SAAS,kBAAkB;AACrC,WAAO,aAAa,KAAK,EAAE,OAAO,oBAAoB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC1E;AAEA,QAAM,WAAW,MAAM,eAAe,KAAK,OAAO;AAClD,MAAI,CAAC,SAAS,IAAI;AAChB,WAAO,SAAS;AAAA,EAClB;AAEA,MAAI;AACJ,MAAI;AAEJ,MAAI,SAAS,KAAK,SAAS,UAAU;AACnC,UAAM,UAAU,SAAS,KAAK;AAC9B,gBAAY,iBAAiB,OAAO;AACpC,iBAAa;AAAA,MACX,MAAM,QAAQ;AAAA,MACd,IAAI,QAAQ;AAAA,MACZ,SAAS,QAAQ;AAAA,MACjB,MAAM,QAAQ;AAAA,MACd,MAAM,QAAQ;AAAA,MACd,WAAW,QAAQ;AAAA,MACnB,SAAS,QAAQ;AAAA,MACjB,WAAW,QAAQ;AAAA,MACnB,YAAY,QAAQ;AAAA,IACtB;AAAA,EACF,OAAO;AACL,UAAM,EAAE,aAAa,GAAG,IAAI,SAAS;AACrC,gBAAY,GAAG,SAAS,IAAI,GAAG,CAAC,EAAE,YAAY,IAAI;AAClD,iBAAa;AAAA,MACX,MAAM,YAAY;AAAA,MAClB,IAAI,YAAY;AAAA,MAChB,SAAS,YAAY;AAAA,MACrB,MAAM,YAAY;AAAA,MAClB,MAAM,YAAY;AAAA,MAClB,WAAW,YAAY;AAAA,MACvB,SAAS,YAAY;AAAA,MACrB,WAAW,YAAY;AAAA,MACvB,YAAY,YAAY;AAAA,IAC1B;AAAA,EACF;AAEA,MAAI,CAAC,WAAW;AACd,WAAO,aAAa,KAAK,EAAE,OAAO,4BAA4B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAClF;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAE/C,MAAI,QAA8B;AAClC,MAAI;AACF,YAAQ,UAAU,QAAQ,OAAO;AAAA,EACnC,QAAQ;AAAA,EAER;AAEA,QAAM,YAAY,MAAM,eAAe,OAAO,WAAW,SAAS,EAAE;AACpE,MAAI,CAAC,UAAU,SAAS;AACtB,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,sBAAsB;AAAA,MAC/B;AAAA,QACE,QAAQ;AAAA,QACR,SAAS,UAAU,oBACf,EAAE,eAAe,OAAO,UAAU,iBAAiB,EAAE,IACrD;AAAA,MACN;AAAA,IACF;AAAA,EACF;AACA,QAAM,KAAM,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAE3D,QAAM,WAAW,MAAM;AAAA,IACrB;AAAA,IACA;AAAA,IACA;AAAA,MACE,cAAc,UAAU,YAAY;AAAA,MACpC,UAAU;AAAA,MACV,WAAW;AAAA,IACb;AAAA,EACF;AAEA,MAAI,CAAC,UAAU;AACb,WAAO,aAAa,KAAK,EAAE,IAAI,KAAK,CAAC;AAAA,EACvC;AAEA,QAAM,SAAS,kBAAkB,UAAU;AAE3C,QAAM,cAAc,MAAM,eAAe,IAAI,UAAU,OAAO,WAAW,OAAO,WAAW;AAC3F,MAAI,aAAa;AACf,QAAI;AACF,YAAM,kBAAkB,gCAAgC;AAAA,QACtD,UAAU,SAAS;AAAA,QACnB,gBAAgB,SAAS;AAAA,QACzB;AAAA,MACF,CAAC;AAAA,IACH,SAAS,YAAY;AACnB,cAAQ,MAAM,0DAA0D,UAAU;AAAA,IACpF;AACA,WAAO,aAAa,KAAK,EAAE,IAAI,KAAK,CAAC;AAAA,EACvC;AAEA,QAAM,cAAc,SAAS,QAAQ,IAAI,2BAA2B,UAAU,EAAE;AAChF,QAAM,cAAc,OAAO,YAAY,MAAM,GAAG,WAAW;AAE3D,QAAM,QAAQ,GAAG,OAAO,YAAY;AAAA,IAClC,WAAW,OAAO;AAAA,IAClB,aAAa,OAAO;AAAA,IACpB,oBAAoB,OAAO,KAAK;AAAA,IAChC,iBAAiB,OAAO,KAAK,QAAQ;AAAA,IACrC;AAAA,IACA,SAAS,OAAO;AAAA,IAChB,SAAS,OAAO;AAAA,IAChB,WAAW,OAAO;AAAA,IAClB,iBAAiB,OAAO;AAAA,IACxB,SAAS,OAAO;AAAA,IAChB,SAAS,OAAO;AAAA,IAChB;AAAA,IACA,gBAAgB,OAAO;AAAA,IACvB,kBAAkB,OAAO;AAAA,IACzB,YAAY,oBAAI,KAAK;AAAA,IACrB,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,gBAAgB,SAAS;AAAA,IACzB,UAAU,SAAS;AAAA,EACrB,CAAC;AAED,KAAG,QAAQ,KAAK;AAChB,QAAM,GAAG,MAAM;AAEf,MAAI;AACF,UAAM,kBAAkB,4BAA4B;AAAA,MAClD,SAAS,MAAM;AAAA,MACf,UAAU,SAAS;AAAA,MACnB,gBAAgB,SAAS;AAAA,MACzB,oBAAoB,OAAO,KAAK;AAAA,MAChC,SAAS,OAAO;AAAA,IAClB,CAAC;AAAA,EACH,SAAS,YAAY;AACnB,YAAQ,MAAM,4DAA4D,UAAU;AAAA,EACtF;AAEA,SAAO,aAAa,KAAK,EAAE,IAAI,KAAK,CAAC;AACvC;AAEA,SAAS,iBAAiB,SAAiD;AACzE,QAAM,KAAK,QAAQ;AACnB,MAAI,OAAO,OAAO,UAAU;AAC1B,UAAM,QAAQ,GAAG,MAAM,WAAW;AAClC,WAAO,QAAQ,MAAM,CAAC,EAAE,YAAY,IAAI,GAAG,KAAK,EAAE,YAAY;AAAA,EAChE;AACA,MAAI,MAAM,QAAQ,EAAE,KAAK,GAAG,SAAS,GAAG;AACtC,UAAM,QAAQ,GAAG,CAAC;AAClB,QAAI,OAAO,UAAU,UAAU;AAC7B,YAAM,QAAQ,MAAM,MAAM,WAAW;AACrC,aAAO,QAAQ,MAAM,CAAC,EAAE,YAAY,IAAI,MAAM,KAAK,EAAE,YAAY;AAAA,IACnE;AAAA,EACF;AACA,SAAO;AACT;AAEA,eAAe,eACb,IACA,UACA,WACA,aACkB;AAClB,QAAM,WAAW;AAAA,IACf,UAAU,SAAS;AAAA,IACnB,gBAAgB,SAAS;AAAA,EAC3B;AACA,QAAM,YAAY;AAAA,IAChB,gBAAgB,SAAS;AAAA,IACzB,UAAU,SAAS;AAAA,IACnB,WAAW;AAAA,EACb;AAEA,MAAI,WAAW;AACb,UAAM,cAAc,MAAM,sBAAsB,IAAI,YAAY,EAAE,GAAG,WAAW,UAAU,GAAG,QAAW,QAAQ;AAChH,QAAI,YAAa,QAAO;AAAA,EAC1B;AAEA,MAAI,aAAa;AACf,UAAM,SAAS,MAAM,sBAAsB,IAAI,YAAY,EAAE,GAAG,WAAW,YAAY,GAAG,QAAW,QAAQ;AAC7G,QAAI,OAAQ,QAAO;AAAA,EACrB;AAEA,SAAO;AACT;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aAAa;AAAA,MACb,aAAa;AAAA,QACX,aAAa;AAAA,QACb,QAAQ,EAAE,OAAO;AAAA,UACf,MAAM,EAAE,OAAO,EAAE,SAAS;AAAA,UAC1B,IAAI,EAAE,MAAM,CAAC,EAAE,OAAO,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,SAAS;AAAA,UACxD,SAAS,EAAE,OAAO,EAAE,SAAS;AAAA,UAC7B,MAAM,EAAE,OAAO,EAAE,SAAS;AAAA,UAC1B,MAAM,EAAE,OAAO,EAAE,SAAS;AAAA,UAC1B,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,UAC/B,SAAS,EAAE,OAAO,EAAE,SAAS;AAAA,UAC7B,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,UAC/B,YAAY,EAAE,MAAM,CAAC,EAAE,OAAO,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,SAAS;AAAA,QAClE,CAAC;AAAA,MACH;AAAA,MACA,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,2CAA2C;AAAA,QACvE,EAAE,QAAQ,KAAK,aAAa,+BAA+B;AAAA,QAC3D,EAAE,QAAQ,KAAK,aAAa,oBAAoB;AAAA,QAChD,EAAE,QAAQ,KAAK,aAAa,sBAAsB;AAAA,QAClD,EAAE,QAAQ,KAAK,aAAa,gCAAgC;AAAA,MAC9D;AAAA,IACF;AAAA,EACF;AACF;",
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { createHmac, timingSafeEqual } from 'node:crypto'\nimport { z } from 'zod'\nimport { Webhook } from 'svix'\nimport { Resend } from 'resend'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport type { CacheStrategy } from '@open-mercato/cache'\nimport { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { InboxSettings, InboxEmail } from '../../data/entities'\nimport { parseInboundEmail } from '../../lib/emailParser'\nimport { checkRateLimit } from '../../lib/rateLimiter'\nimport { emitInboxOpsEvent } from '../../events'\n\nexport const metadata = {\n  POST: { requireAuth: false },\n}\n\nconst MAX_PAYLOAD_SIZE = 2 * 1024 * 1024 // 2MB\nconst REPLAY_WINDOW_MS = 5 * 60 * 1000 // 5 minutes\n\nfunction isTimestampFresh(timestamp: string): boolean {\n  if (!timestamp) return false\n  const timestampMs = parseInt(timestamp, 10) * 1000\n  if (isNaN(timestampMs)) return false\n  return Math.abs(Date.now() - timestampMs) <= REPLAY_WINDOW_MS\n}\n\nfunction verifyHmacSignature(\n  payload: string,\n  signature: string,\n  timestamp: string,\n  secret: string,\n): boolean {\n  if (!signature || !timestamp || !secret) return false\n\n  if (!isTimestampFresh(timestamp)) return false\n\n  const expected = createHmac('sha256', secret)\n    .update(`${timestamp}.${payload}`)\n    .digest('hex')\n  const received = signature.startsWith('sha256=')\n    ? signature.slice('sha256='.length)\n    : signature\n\n  try {\n    if (received.length !== expected.length) return false\n    return timingSafeEqual(\n      Buffer.from(received, 'hex'),\n      Buffer.from(expected, 'hex'),\n    )\n  } catch {\n    return false\n  }\n}\n\n// True when the signature verifies against ANY of the candidate secrets. Used\n// to bind the inbound signature to the resolved tenant: once the target inbox\n// declares its own per-tenant secret, the global INBOX_OPS_WEBHOOK_SECRET is no\n// longer accepted for that inbox, so a holder of the global key alone cannot\n// forge mail into a tenant that opted into a dedicated secret.\nfunction verifyHmacAgainstAny(\n  payload: string,\n  signature: string,\n  timestamp: string,\n  secrets: string[],\n): boolean {\n  for (const secret of secrets) {\n    if (secret && verifyHmacSignature(payload, signature, timestamp, secret)) return true\n  }\n  return false\n}\n\n// Stable, non-reversible identifier for the pre-DB global rate-limit bucket.\n// Keying on the configured signing secret (rather than the attacker-set `to` or\n// the per-request signature) means the bucket is request-invariant for a given\n// secret, so rotating recipients or mutating the body cannot dilute the limit.\nfunction secretFingerprint(secret: string): string {\n  return createHmac('sha256', 'inbox_ops:rate_limit:salt').update(secret).digest('hex').slice(0, 32)\n}\n\nfunction verifySvixSignature(\n  rawBody: string,\n  headers: Record<string, string>,\n  secret: string,\n): boolean {\n  try {\n    const wh = new Webhook(secret)\n    wh.verify(rawBody, {\n      'svix-id': headers['svix-id'],\n      'svix-timestamp': headers['svix-timestamp'],\n      'svix-signature': headers['svix-signature'],\n    })\n    return true\n  } catch {\n    return false\n  }\n}\n\nasync function fetchResendEmail(emailId: string): Promise<{\n  from?: string\n  to?: string[]\n  subject?: string\n  text?: string\n  html?: string\n  messageId?: string\n  replyTo?: string\n  inReplyTo?: string\n  references?: string[]\n}> {\n  const apiKey = process.env.RESEND_API_KEY\n  if (!apiKey) throw new Error('RESEND_API_KEY is required to fetch Resend inbound emails')\n\n  const resend = new Resend(apiKey)\n  const { data, error } = await resend.emails.receiving.get(emailId)\n  if (error || !data) {\n    throw new Error(`Failed to fetch Resend email ${emailId}: ${error?.message || 'unknown error'}`)\n  }\n\n  return {\n    from: data.from,\n    to: data.to,\n    subject: data.subject,\n    text: data.text ?? undefined,\n    html: data.html ?? undefined,\n    messageId: data.message_id,\n    replyTo: data.reply_to?.[0] ?? undefined,\n    inReplyTo: data.headers?.['in-reply-to'] ?? undefined,\n    references: data.headers?.['references']?.split(/\\s+/).filter(Boolean),\n  }\n}\n\ntype VerifiedPayload =\n  | { kind: 'custom'; payload: Record<string, unknown>; signature: string; timestamp: string }\n  | { kind: 'resend'; emailFields: Awaited<ReturnType<typeof fetchResendEmail>>; to: string[] }\n\nasync function verifyAndParse(req: Request, rawBody: string): Promise<\n  | { ok: true; data: VerifiedPayload }\n  | { ok: false; response: NextResponse }\n> {\n  const customSig = req.headers.get('x-webhook-signature')\n  const svixId = req.headers.get('svix-id')\n\n  if (customSig) {\n    const webhookSecret = process.env.INBOX_OPS_WEBHOOK_SECRET\n    if (!webhookSecret) {\n      console.error('[inbox_ops:webhook] INBOX_OPS_WEBHOOK_SECRET not configured')\n      return { ok: false, response: NextResponse.json({ error: 'Service unavailable' }, { status: 503 }) }\n    }\n    const timestamp = req.headers.get('x-webhook-timestamp') || ''\n    // Cheap, secret-independent gate first: reject replayed/stale requests\n    // before parsing. The HMAC itself is verified later, against the secret\n    // bound to the resolved inbox (see the POST handler), so a holder of the\n    // global secret cannot inject into a tenant that owns its own secret.\n    if (!isTimestampFresh(timestamp)) {\n      return { ok: false, response: NextResponse.json({ error: 'Invalid signature' }, { status: 400 }) }\n    }\n    let payload: Record<string, unknown>\n    try {\n      payload = JSON.parse(rawBody)\n    } catch {\n      return { ok: false, response: NextResponse.json({ error: 'Invalid JSON' }, { status: 400 }) }\n    }\n    return { ok: true, data: { kind: 'custom', payload, signature: customSig, timestamp } }\n  }\n\n  if (svixId) {\n    const signingSecret = process.env.RESEND_WEBHOOK_SIGNING_SECRET\n    if (!signingSecret) {\n      console.error('[inbox_ops:webhook] RESEND_WEBHOOK_SIGNING_SECRET not configured')\n      return { ok: false, response: NextResponse.json({ error: 'Service unavailable' }, { status: 503 }) }\n    }\n    const headers: Record<string, string> = {\n      'svix-id': svixId,\n      'svix-timestamp': req.headers.get('svix-timestamp') || '',\n      'svix-signature': req.headers.get('svix-signature') || '',\n    }\n    if (!verifySvixSignature(rawBody, headers, signingSecret)) {\n      return { ok: false, response: NextResponse.json({ error: 'Invalid signature' }, { status: 400 }) }\n    }\n    let envelope: { type?: string; data?: { email_id?: string; from?: string; to?: string[] } }\n    try {\n      envelope = JSON.parse(rawBody)\n    } catch {\n      return { ok: false, response: NextResponse.json({ error: 'Invalid JSON' }, { status: 400 }) }\n    }\n    if (envelope.type !== 'email.received') {\n      return { ok: false, response: NextResponse.json({ ok: true }) }\n    }\n    const emailId = envelope.data?.email_id\n    if (!emailId) {\n      return { ok: false, response: NextResponse.json({ error: 'Missing email_id in Resend payload' }, { status: 400 }) }\n    }\n    const emailFields = await fetchResendEmail(emailId)\n    const to = emailFields.to || envelope.data?.to || []\n    return { ok: true, data: { kind: 'resend', emailFields, to } }\n  }\n\n  return { ok: false, response: NextResponse.json({ error: 'Missing signature headers' }, { status: 400 }) }\n}\n\nexport async function POST(req: Request) {\n  const hasCustomSecret = Boolean(process.env.INBOX_OPS_WEBHOOK_SECRET)\n  const hasResendSecret = Boolean(process.env.RESEND_WEBHOOK_SIGNING_SECRET)\n  if (!hasCustomSecret && !hasResendSecret) {\n    console.error('[inbox_ops:webhook] Neither INBOX_OPS_WEBHOOK_SECRET nor RESEND_WEBHOOK_SIGNING_SECRET is configured')\n    return NextResponse.json({ error: 'Service unavailable' }, { status: 503 })\n  }\n\n  const contentLength = parseInt(req.headers.get('content-length') || '0', 10)\n  if (contentLength > MAX_PAYLOAD_SIZE) {\n    return NextResponse.json({ error: 'Payload too large' }, { status: 413 })\n  }\n\n  let rawBody: string\n  try {\n    rawBody = await req.text()\n  } catch {\n    return NextResponse.json({ error: 'Bad request' }, { status: 400 })\n  }\n\n  if (rawBody.length > MAX_PAYLOAD_SIZE) {\n    return NextResponse.json({ error: 'Payload too large' }, { status: 413 })\n  }\n\n  const verified = await verifyAndParse(req, rawBody)\n  if (!verified.ok) {\n    return verified.response\n  }\n\n  let toAddress: string | null\n  let emailInput: Parameters<typeof parseInboundEmail>[0]\n\n  if (verified.data.kind === 'custom') {\n    const payload = verified.data.payload\n    toAddress = extractToAddress(payload)\n    emailInput = {\n      from: payload.from as string | undefined,\n      to: payload.to as string | string[] | undefined,\n      subject: payload.subject as string | undefined,\n      text: payload.text as string | undefined,\n      html: payload.html as string | undefined,\n      messageId: payload.messageId as string | undefined,\n      replyTo: payload.replyTo as string | undefined,\n      inReplyTo: payload.inReplyTo as string | undefined,\n      references: payload.references as string | string[] | undefined,\n    }\n  } else {\n    const { emailFields, to } = verified.data\n    toAddress = to.length > 0 ? to[0].toLowerCase() : null\n    emailInput = {\n      from: emailFields.from,\n      to: emailFields.to,\n      subject: emailFields.subject,\n      text: emailFields.text,\n      html: emailFields.html,\n      messageId: emailFields.messageId,\n      replyTo: emailFields.replyTo,\n      inReplyTo: emailFields.inReplyTo,\n      references: emailFields.references,\n    }\n  }\n\n  if (!toAddress) {\n    return NextResponse.json({ error: 'Missing recipient address' }, { status: 400 })\n  }\n\n  const container = await createRequestContainer()\n\n  let cache: CacheStrategy | null = null\n  try {\n    cache = container.resolve('cache') as CacheStrategy\n  } catch {\n    // Cache not available \u2014 the limiter now fails closed with a process-local\n    // bucket instead of waving the request through.\n  }\n\n  // Pre-DB global bucket keyed on the configured signing secret (custom) or the\n  // static Resend path, NOT on the attacker-controllable `to` and NOT on the\n  // per-request signature (which mutates with timestamp/body, so it would mint a\n  // fresh bucket every request and never throttle). The per-tenant secret lives\n  // behind the encrypted-column lookup, so the only secret available here without\n  // a DB hit is the global one \u2014 keying on it caps total inbound volume for the\n  // custom path and runs BEFORE the lookup so a flood cannot amplify DB work.\n  const globalBucketKey = verified.data.kind === 'custom'\n    ? `webhook:secret:${secretFingerprint(process.env.INBOX_OPS_WEBHOOK_SECRET || '')}`\n    : 'webhook:resend'\n  const globalRateCheck = await checkRateLimit(cache, globalBucketKey)\n  if (!globalRateCheck.allowed) {\n    return rateLimitedResponse(globalRateCheck.retryAfterSeconds)\n  }\n\n  const em = (container.resolve('em') as EntityManager).fork()\n\n  // No explicit scope: decryptEntitiesWithFallbackScope reads tenant/org off the\n  // resolved row, which is exactly what binds webhook_secret to its own tenant.\n  const settings = await findOneWithDecryption(\n    em,\n    InboxSettings,\n    {\n      inboxAddress: toAddress.toLowerCase(),\n      isActive: true,\n      deletedAt: null,\n    },\n  )\n\n  // Final HMAC verification for the custom provider path: bind the signature to\n  // the resolved tenant. When the inbox declares its own secret, ONLY that\n  // secret is accepted; otherwise the global secret is accepted (back-compat).\n  // For an unknown `to` we still require the global secret so the endpoint never\n  // behaves as an unauthenticated probe oracle.\n  if (verified.data.kind === 'custom') {\n    const globalSecret = process.env.INBOX_OPS_WEBHOOK_SECRET || ''\n    const inboxSecret = settings?.webhookSecret || ''\n    const acceptableSecrets = inboxSecret ? [inboxSecret] : [globalSecret]\n    const signatureValid = verifyHmacAgainstAny(\n      rawBody,\n      verified.data.signature,\n      verified.data.timestamp,\n      acceptableSecrets,\n    )\n    if (!signatureValid) {\n      return NextResponse.json({ error: 'Invalid signature' }, { status: 400 })\n    }\n  }\n\n  if (!settings) {\n    return NextResponse.json({ ok: true })\n  }\n\n  // Per-tenant bucket keyed on the RESOLVED tenant (not the raw `to`), so it\n  // cannot be diluted by alias addresses that map to the same inbox.\n  const tenantRateCheck = await checkRateLimit(\n    cache,\n    `webhook:tenant:${settings.tenantId}`,\n    settings.tenantId,\n  )\n  if (!tenantRateCheck.allowed) {\n    return rateLimitedResponse(tenantRateCheck.retryAfterSeconds)\n  }\n\n  const parsed = parseInboundEmail(emailInput)\n\n  const isDuplicate = await checkDuplicate(em, settings, parsed.messageId, parsed.contentHash)\n  if (isDuplicate) {\n    try {\n      await emitInboxOpsEvent('inbox_ops.email.deduplicated', {\n        tenantId: settings.tenantId,\n        organizationId: settings.organizationId,\n        toAddress,\n      })\n    } catch (eventError) {\n      console.error('[inbox_ops:webhook] Failed to emit deduplicated event:', eventError)\n    }\n    return NextResponse.json({ ok: true })\n  }\n\n  const maxTextSize = parseInt(process.env.INBOX_OPS_MAX_TEXT_SIZE || '204800', 10)\n  const cleanedText = parsed.cleanedText.slice(0, maxTextSize)\n\n  const email = em.create(InboxEmail, {\n    messageId: parsed.messageId,\n    contentHash: parsed.contentHash,\n    forwardedByAddress: parsed.from.email,\n    forwardedByName: parsed.from.name || null,\n    toAddress,\n    subject: parsed.subject,\n    replyTo: parsed.replyTo,\n    inReplyTo: parsed.inReplyTo,\n    emailReferences: parsed.references,\n    rawText: parsed.rawText,\n    rawHtml: parsed.rawHtml,\n    cleanedText,\n    threadMessages: parsed.threadMessages,\n    detectedLanguage: parsed.detectedLanguage,\n    receivedAt: new Date(),\n    status: 'received' as const,\n    isActive: true,\n    organizationId: settings.organizationId,\n    tenantId: settings.tenantId,\n  })\n\n  em.persist(email)\n  await em.flush()\n\n  try {\n    await emitInboxOpsEvent('inbox_ops.email.received', {\n      emailId: email.id,\n      tenantId: settings.tenantId,\n      organizationId: settings.organizationId,\n      forwardedByAddress: parsed.from.email,\n      subject: parsed.subject,\n    })\n  } catch (eventError) {\n    console.error('[inbox_ops:webhook] Failed to emit email.received event:', eventError)\n  }\n\n  return NextResponse.json({ ok: true })\n}\n\nfunction rateLimitedResponse(retryAfterSeconds?: number): NextResponse {\n  return NextResponse.json(\n    { error: 'Rate limit exceeded' },\n    {\n      status: 429,\n      headers: retryAfterSeconds ? { 'Retry-After': String(retryAfterSeconds) } : undefined,\n    },\n  )\n}\n\nfunction extractToAddress(payload: Record<string, unknown>): string | null {\n  const to = payload.to\n  if (typeof to === 'string') {\n    const match = to.match(/<([^>]+)>/)\n    return match ? match[1].toLowerCase() : to.trim().toLowerCase()\n  }\n  if (Array.isArray(to) && to.length > 0) {\n    const first = to[0]\n    if (typeof first === 'string') {\n      const match = first.match(/<([^>]+)>/)\n      return match ? match[1].toLowerCase() : first.trim().toLowerCase()\n    }\n  }\n  return null\n}\n\nasync function checkDuplicate(\n  em: EntityManager,\n  settings: InboxSettings,\n  messageId: string | null | undefined,\n  contentHash: string | null | undefined,\n): Promise<boolean> {\n  const encScope = {\n    tenantId: settings.tenantId,\n    organizationId: settings.organizationId,\n  }\n  const whereBase = {\n    organizationId: settings.organizationId,\n    tenantId: settings.tenantId,\n    deletedAt: null,\n  }\n\n  if (messageId) {\n    const byMessageId = await findOneWithDecryption(em, InboxEmail, { ...whereBase, messageId }, undefined, encScope)\n    if (byMessageId) return true\n  }\n\n  if (contentHash) {\n    const byHash = await findOneWithDecryption(em, InboxEmail, { ...whereBase, contentHash }, undefined, encScope)\n    if (byHash) return true\n  }\n\n  return false\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'InboxOps',\n  summary: 'Inbound email webhook',\n  methods: {\n    POST: {\n      summary: 'Receive forwarded email from provider webhook',\n      description: 'Public endpoint \u2014 validated by provider HMAC signature or Resend/Svix signature. Rate limited per tenant.',\n      requestBody: {\n        contentType: 'application/json',\n        schema: z.object({\n          from: z.string().optional(),\n          to: z.union([z.string(), z.array(z.string())]).optional(),\n          subject: z.string().optional(),\n          text: z.string().optional(),\n          html: z.string().optional(),\n          messageId: z.string().optional(),\n          replyTo: z.string().optional(),\n          inReplyTo: z.string().optional(),\n          references: z.union([z.string(), z.array(z.string())]).optional(),\n        }),\n      },\n      responses: [\n        { status: 200, description: 'Email received and queued for processing' },\n        { status: 400, description: 'Invalid payload or signature' },\n        { status: 413, description: 'Payload too large' },\n        { status: 429, description: 'Rate limit exceeded' },\n        { status: 503, description: 'Webhook secret not configured' },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,YAAY,uBAAuB;AAC5C,SAAS,SAAS;AAClB,SAAS,eAAe;AACxB,SAAS,cAAc;AACvB,SAAS,8BAA8B;AAIvC,SAAS,6BAA6B;AACtC,SAAS,eAAe,kBAAkB;AAC1C,SAAS,yBAAyB;AAClC,SAAS,sBAAsB;AAC/B,SAAS,yBAAyB;AAE3B,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,MAAM;AAC7B;AAEA,MAAM,mBAAmB,IAAI,OAAO;AACpC,MAAM,mBAAmB,IAAI,KAAK;AAElC,SAAS,iBAAiB,WAA4B;AACpD,MAAI,CAAC,UAAW,QAAO;AACvB,QAAM,cAAc,SAAS,WAAW,EAAE,IAAI;AAC9C,MAAI,MAAM,WAAW,EAAG,QAAO;AAC/B,SAAO,KAAK,IAAI,KAAK,IAAI,IAAI,WAAW,KAAK;AAC/C;AAEA,SAAS,oBACP,SACA,WACA,WACA,QACS;AACT,MAAI,CAAC,aAAa,CAAC,aAAa,CAAC,OAAQ,QAAO;AAEhD,MAAI,CAAC,iBAAiB,SAAS,EAAG,QAAO;AAEzC,QAAM,WAAW,WAAW,UAAU,MAAM,EACzC,OAAO,GAAG,SAAS,IAAI,OAAO,EAAE,EAChC,OAAO,KAAK;AACf,QAAM,WAAW,UAAU,WAAW,SAAS,IAC3C,UAAU,MAAM,UAAU,MAAM,IAChC;AAEJ,MAAI;AACF,QAAI,SAAS,WAAW,SAAS,OAAQ,QAAO;AAChD,WAAO;AAAA,MACL,OAAO,KAAK,UAAU,KAAK;AAAA,MAC3B,OAAO,KAAK,UAAU,KAAK;AAAA,IAC7B;AAAA,EACF,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAOA,SAAS,qBACP,SACA,WACA,WACA,SACS;AACT,aAAW,UAAU,SAAS;AAC5B,QAAI,UAAU,oBAAoB,SAAS,WAAW,WAAW,MAAM,EAAG,QAAO;AAAA,EACnF;AACA,SAAO;AACT;AAMA,SAAS,kBAAkB,QAAwB;AACjD,SAAO,WAAW,UAAU,2BAA2B,EAAE,OAAO,MAAM,EAAE,OAAO,KAAK,EAAE,MAAM,GAAG,EAAE;AACnG;AAEA,SAAS,oBACP,SACA,SACA,QACS;AACT,MAAI;AACF,UAAM,KAAK,IAAI,QAAQ,MAAM;AAC7B,OAAG,OAAO,SAAS;AAAA,MACjB,WAAW,QAAQ,SAAS;AAAA,MAC5B,kBAAkB,QAAQ,gBAAgB;AAAA,MAC1C,kBAAkB,QAAQ,gBAAgB;AAAA,IAC5C,CAAC;AACD,WAAO;AAAA,EACT,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,eAAe,iBAAiB,SAU7B;AACD,QAAM,SAAS,QAAQ,IAAI;AAC3B,MAAI,CAAC,OAAQ,OAAM,IAAI,MAAM,2DAA2D;AAExF,QAAM,SAAS,IAAI,OAAO,MAAM;AAChC,QAAM,EAAE,MAAM,MAAM,IAAI,MAAM,OAAO,OAAO,UAAU,IAAI,OAAO;AACjE,MAAI,SAAS,CAAC,MAAM;AAClB,UAAM,IAAI,MAAM,gCAAgC,OAAO,KAAK,OAAO,WAAW,eAAe,EAAE;AAAA,EACjG;AAEA,SAAO;AAAA,IACL,MAAM,KAAK;AAAA,IACX,IAAI,KAAK;AAAA,IACT,SAAS,KAAK;AAAA,IACd,MAAM,KAAK,QAAQ;AAAA,IACnB,MAAM,KAAK,QAAQ;AAAA,IACnB,WAAW,KAAK;AAAA,IAChB,SAAS,KAAK,WAAW,CAAC,KAAK;AAAA,IAC/B,WAAW,KAAK,UAAU,aAAa,KAAK;AAAA,IAC5C,YAAY,KAAK,UAAU,YAAY,GAAG,MAAM,KAAK,EAAE,OAAO,OAAO;AAAA,EACvE;AACF;AAMA,eAAe,eAAe,KAAc,SAG1C;AACA,QAAM,YAAY,IAAI,QAAQ,IAAI,qBAAqB;AACvD,QAAM,SAAS,IAAI,QAAQ,IAAI,SAAS;AAExC,MAAI,WAAW;AACb,UAAM,gBAAgB,QAAQ,IAAI;AAClC,QAAI,CAAC,eAAe;AAClB,cAAQ,MAAM,6DAA6D;AAC3E,aAAO,EAAE,IAAI,OAAO,UAAU,aAAa,KAAK,EAAE,OAAO,sBAAsB,GAAG,EAAE,QAAQ,IAAI,CAAC,EAAE;AAAA,IACrG;AACA,UAAM,YAAY,IAAI,QAAQ,IAAI,qBAAqB,KAAK;AAK5D,QAAI,CAAC,iBAAiB,SAAS,GAAG;AAChC,aAAO,EAAE,IAAI,OAAO,UAAU,aAAa,KAAK,EAAE,OAAO,oBAAoB,GAAG,EAAE,QAAQ,IAAI,CAAC,EAAE;AAAA,IACnG;AACA,QAAI;AACJ,QAAI;AACF,gBAAU,KAAK,MAAM,OAAO;AAAA,IAC9B,QAAQ;AACN,aAAO,EAAE,IAAI,OAAO,UAAU,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC,EAAE;AAAA,IAC9F;AACA,WAAO,EAAE,IAAI,MAAM,MAAM,EAAE,MAAM,UAAU,SAAS,WAAW,WAAW,UAAU,EAAE;AAAA,EACxF;AAEA,MAAI,QAAQ;AACV,UAAM,gBAAgB,QAAQ,IAAI;AAClC,QAAI,CAAC,eAAe;AAClB,cAAQ,MAAM,kEAAkE;AAChF,aAAO,EAAE,IAAI,OAAO,UAAU,aAAa,KAAK,EAAE,OAAO,sBAAsB,GAAG,EAAE,QAAQ,IAAI,CAAC,EAAE;AAAA,IACrG;AACA,UAAM,UAAkC;AAAA,MACtC,WAAW;AAAA,MACX,kBAAkB,IAAI,QAAQ,IAAI,gBAAgB,KAAK;AAAA,MACvD,kBAAkB,IAAI,QAAQ,IAAI,gBAAgB,KAAK;AAAA,IACzD;AACA,QAAI,CAAC,oBAAoB,SAAS,SAAS,aAAa,GAAG;AACzD,aAAO,EAAE,IAAI,OAAO,UAAU,aAAa,KAAK,EAAE,OAAO,oBAAoB,GAAG,EAAE,QAAQ,IAAI,CAAC,EAAE;AAAA,IACnG;AACA,QAAI;AACJ,QAAI;AACF,iBAAW,KAAK,MAAM,OAAO;AAAA,IAC/B,QAAQ;AACN,aAAO,EAAE,IAAI,OAAO,UAAU,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC,EAAE;AAAA,IAC9F;AACA,QAAI,SAAS,SAAS,kBAAkB;AACtC,aAAO,EAAE,IAAI,OAAO,UAAU,aAAa,KAAK,EAAE,IAAI,KAAK,CAAC,EAAE;AAAA,IAChE;AACA,UAAM,UAAU,SAAS,MAAM;AAC/B,QAAI,CAAC,SAAS;AACZ,aAAO,EAAE,IAAI,OAAO,UAAU,aAAa,KAAK,EAAE,OAAO,qCAAqC,GAAG,EAAE,QAAQ,IAAI,CAAC,EAAE;AAAA,IACpH;AACA,UAAM,cAAc,MAAM,iBAAiB,OAAO;AAClD,UAAM,KAAK,YAAY,MAAM,SAAS,MAAM,MAAM,CAAC;AACnD,WAAO,EAAE,IAAI,MAAM,MAAM,EAAE,MAAM,UAAU,aAAa,GAAG,EAAE;AAAA,EAC/D;AAEA,SAAO,EAAE,IAAI,OAAO,UAAU,aAAa,KAAK,EAAE,OAAO,4BAA4B,GAAG,EAAE,QAAQ,IAAI,CAAC,EAAE;AAC3G;AAEA,eAAsB,KAAK,KAAc;AACvC,QAAM,kBAAkB,QAAQ,QAAQ,IAAI,wBAAwB;AACpE,QAAM,kBAAkB,QAAQ,QAAQ,IAAI,6BAA6B;AACzE,MAAI,CAAC,mBAAmB,CAAC,iBAAiB;AACxC,YAAQ,MAAM,sGAAsG;AACpH,WAAO,aAAa,KAAK,EAAE,OAAO,sBAAsB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC5E;AAEA,QAAM,gBAAgB,SAAS,IAAI,QAAQ,IAAI,gBAAgB,KAAK,KAAK,EAAE;AAC3E,MAAI,gBAAgB,kBAAkB;AACpC,WAAO,aAAa,KAAK,EAAE,OAAO,oBAAoB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC1E;AAEA,MAAI;AACJ,MAAI;AACF,cAAU,MAAM,IAAI,KAAK;AAAA,EAC3B,QAAQ;AACN,WAAO,aAAa,KAAK,EAAE,OAAO,cAAc,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACpE;AAEA,MAAI,QAAQ,SAAS,kBAAkB;AACrC,WAAO,aAAa,KAAK,EAAE,OAAO,oBAAoB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC1E;AAEA,QAAM,WAAW,MAAM,eAAe,KAAK,OAAO;AAClD,MAAI,CAAC,SAAS,IAAI;AAChB,WAAO,SAAS;AAAA,EAClB;AAEA,MAAI;AACJ,MAAI;AAEJ,MAAI,SAAS,KAAK,SAAS,UAAU;AACnC,UAAM,UAAU,SAAS,KAAK;AAC9B,gBAAY,iBAAiB,OAAO;AACpC,iBAAa;AAAA,MACX,MAAM,QAAQ;AAAA,MACd,IAAI,QAAQ;AAAA,MACZ,SAAS,QAAQ;AAAA,MACjB,MAAM,QAAQ;AAAA,MACd,MAAM,QAAQ;AAAA,MACd,WAAW,QAAQ;AAAA,MACnB,SAAS,QAAQ;AAAA,MACjB,WAAW,QAAQ;AAAA,MACnB,YAAY,QAAQ;AAAA,IACtB;AAAA,EACF,OAAO;AACL,UAAM,EAAE,aAAa,GAAG,IAAI,SAAS;AACrC,gBAAY,GAAG,SAAS,IAAI,GAAG,CAAC,EAAE,YAAY,IAAI;AAClD,iBAAa;AAAA,MACX,MAAM,YAAY;AAAA,MAClB,IAAI,YAAY;AAAA,MAChB,SAAS,YAAY;AAAA,MACrB,MAAM,YAAY;AAAA,MAClB,MAAM,YAAY;AAAA,MAClB,WAAW,YAAY;AAAA,MACvB,SAAS,YAAY;AAAA,MACrB,WAAW,YAAY;AAAA,MACvB,YAAY,YAAY;AAAA,IAC1B;AAAA,EACF;AAEA,MAAI,CAAC,WAAW;AACd,WAAO,aAAa,KAAK,EAAE,OAAO,4BAA4B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAClF;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAE/C,MAAI,QAA8B;AAClC,MAAI;AACF,YAAQ,UAAU,QAAQ,OAAO;AAAA,EACnC,QAAQ;AAAA,EAGR;AASA,QAAM,kBAAkB,SAAS,KAAK,SAAS,WAC3C,kBAAkB,kBAAkB,QAAQ,IAAI,4BAA4B,EAAE,CAAC,KAC/E;AACJ,QAAM,kBAAkB,MAAM,eAAe,OAAO,eAAe;AACnE,MAAI,CAAC,gBAAgB,SAAS;AAC5B,WAAO,oBAAoB,gBAAgB,iBAAiB;AAAA,EAC9D;AAEA,QAAM,KAAM,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAI3D,QAAM,WAAW,MAAM;AAAA,IACrB;AAAA,IACA;AAAA,IACA;AAAA,MACE,cAAc,UAAU,YAAY;AAAA,MACpC,UAAU;AAAA,MACV,WAAW;AAAA,IACb;AAAA,EACF;AAOA,MAAI,SAAS,KAAK,SAAS,UAAU;AACnC,UAAM,eAAe,QAAQ,IAAI,4BAA4B;AAC7D,UAAM,cAAc,UAAU,iBAAiB;AAC/C,UAAM,oBAAoB,cAAc,CAAC,WAAW,IAAI,CAAC,YAAY;AACrE,UAAM,iBAAiB;AAAA,MACrB;AAAA,MACA,SAAS,KAAK;AAAA,MACd,SAAS,KAAK;AAAA,MACd;AAAA,IACF;AACA,QAAI,CAAC,gBAAgB;AACnB,aAAO,aAAa,KAAK,EAAE,OAAO,oBAAoB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC1E;AAAA,EACF;AAEA,MAAI,CAAC,UAAU;AACb,WAAO,aAAa,KAAK,EAAE,IAAI,KAAK,CAAC;AAAA,EACvC;AAIA,QAAM,kBAAkB,MAAM;AAAA,IAC5B;AAAA,IACA,kBAAkB,SAAS,QAAQ;AAAA,IACnC,SAAS;AAAA,EACX;AACA,MAAI,CAAC,gBAAgB,SAAS;AAC5B,WAAO,oBAAoB,gBAAgB,iBAAiB;AAAA,EAC9D;AAEA,QAAM,SAAS,kBAAkB,UAAU;AAE3C,QAAM,cAAc,MAAM,eAAe,IAAI,UAAU,OAAO,WAAW,OAAO,WAAW;AAC3F,MAAI,aAAa;AACf,QAAI;AACF,YAAM,kBAAkB,gCAAgC;AAAA,QACtD,UAAU,SAAS;AAAA,QACnB,gBAAgB,SAAS;AAAA,QACzB;AAAA,MACF,CAAC;AAAA,IACH,SAAS,YAAY;AACnB,cAAQ,MAAM,0DAA0D,UAAU;AAAA,IACpF;AACA,WAAO,aAAa,KAAK,EAAE,IAAI,KAAK,CAAC;AAAA,EACvC;AAEA,QAAM,cAAc,SAAS,QAAQ,IAAI,2BAA2B,UAAU,EAAE;AAChF,QAAM,cAAc,OAAO,YAAY,MAAM,GAAG,WAAW;AAE3D,QAAM,QAAQ,GAAG,OAAO,YAAY;AAAA,IAClC,WAAW,OAAO;AAAA,IAClB,aAAa,OAAO;AAAA,IACpB,oBAAoB,OAAO,KAAK;AAAA,IAChC,iBAAiB,OAAO,KAAK,QAAQ;AAAA,IACrC;AAAA,IACA,SAAS,OAAO;AAAA,IAChB,SAAS,OAAO;AAAA,IAChB,WAAW,OAAO;AAAA,IAClB,iBAAiB,OAAO;AAAA,IACxB,SAAS,OAAO;AAAA,IAChB,SAAS,OAAO;AAAA,IAChB;AAAA,IACA,gBAAgB,OAAO;AAAA,IACvB,kBAAkB,OAAO;AAAA,IACzB,YAAY,oBAAI,KAAK;AAAA,IACrB,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,gBAAgB,SAAS;AAAA,IACzB,UAAU,SAAS;AAAA,EACrB,CAAC;AAED,KAAG,QAAQ,KAAK;AAChB,QAAM,GAAG,MAAM;AAEf,MAAI;AACF,UAAM,kBAAkB,4BAA4B;AAAA,MAClD,SAAS,MAAM;AAAA,MACf,UAAU,SAAS;AAAA,MACnB,gBAAgB,SAAS;AAAA,MACzB,oBAAoB,OAAO,KAAK;AAAA,MAChC,SAAS,OAAO;AAAA,IAClB,CAAC;AAAA,EACH,SAAS,YAAY;AACnB,YAAQ,MAAM,4DAA4D,UAAU;AAAA,EACtF;AAEA,SAAO,aAAa,KAAK,EAAE,IAAI,KAAK,CAAC;AACvC;AAEA,SAAS,oBAAoB,mBAA0C;AACrE,SAAO,aAAa;AAAA,IAClB,EAAE,OAAO,sBAAsB;AAAA,IAC/B;AAAA,MACE,QAAQ;AAAA,MACR,SAAS,oBAAoB,EAAE,eAAe,OAAO,iBAAiB,EAAE,IAAI;AAAA,IAC9E;AAAA,EACF;AACF;AAEA,SAAS,iBAAiB,SAAiD;AACzE,QAAM,KAAK,QAAQ;AACnB,MAAI,OAAO,OAAO,UAAU;AAC1B,UAAM,QAAQ,GAAG,MAAM,WAAW;AAClC,WAAO,QAAQ,MAAM,CAAC,EAAE,YAAY,IAAI,GAAG,KAAK,EAAE,YAAY;AAAA,EAChE;AACA,MAAI,MAAM,QAAQ,EAAE,KAAK,GAAG,SAAS,GAAG;AACtC,UAAM,QAAQ,GAAG,CAAC;AAClB,QAAI,OAAO,UAAU,UAAU;AAC7B,YAAM,QAAQ,MAAM,MAAM,WAAW;AACrC,aAAO,QAAQ,MAAM,CAAC,EAAE,YAAY,IAAI,MAAM,KAAK,EAAE,YAAY;AAAA,IACnE;AAAA,EACF;AACA,SAAO;AACT;AAEA,eAAe,eACb,IACA,UACA,WACA,aACkB;AAClB,QAAM,WAAW;AAAA,IACf,UAAU,SAAS;AAAA,IACnB,gBAAgB,SAAS;AAAA,EAC3B;AACA,QAAM,YAAY;AAAA,IAChB,gBAAgB,SAAS;AAAA,IACzB,UAAU,SAAS;AAAA,IACnB,WAAW;AAAA,EACb;AAEA,MAAI,WAAW;AACb,UAAM,cAAc,MAAM,sBAAsB,IAAI,YAAY,EAAE,GAAG,WAAW,UAAU,GAAG,QAAW,QAAQ;AAChH,QAAI,YAAa,QAAO;AAAA,EAC1B;AAEA,MAAI,aAAa;AACf,UAAM,SAAS,MAAM,sBAAsB,IAAI,YAAY,EAAE,GAAG,WAAW,YAAY,GAAG,QAAW,QAAQ;AAC7G,QAAI,OAAQ,QAAO;AAAA,EACrB;AAEA,SAAO;AACT;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aAAa;AAAA,MACb,aAAa;AAAA,QACX,aAAa;AAAA,QACb,QAAQ,EAAE,OAAO;AAAA,UACf,MAAM,EAAE,OAAO,EAAE,SAAS;AAAA,UAC1B,IAAI,EAAE,MAAM,CAAC,EAAE,OAAO,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,SAAS;AAAA,UACxD,SAAS,EAAE,OAAO,EAAE,SAAS;AAAA,UAC7B,MAAM,EAAE,OAAO,EAAE,SAAS;AAAA,UAC1B,MAAM,EAAE,OAAO,EAAE,SAAS;AAAA,UAC1B,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,UAC/B,SAAS,EAAE,OAAO,EAAE,SAAS;AAAA,UAC7B,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,UAC/B,YAAY,EAAE,MAAM,CAAC,EAAE,OAAO,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,SAAS;AAAA,QAClE,CAAC;AAAA,MACH;AAAA,MACA,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,2CAA2C;AAAA,QACvE,EAAE,QAAQ,KAAK,aAAa,+BAA+B;AAAA,QAC3D,EAAE,QAAQ,KAAK,aAAa,oBAAoB;AAAA,QAChD,EAAE,QAAQ,KAAK,aAAa,sBAAsB;AAAA,QAClD,EAAE,QAAQ,KAAK,aAAa,gCAAgC;AAAA,MAC9D;AAAA,IACF;AAAA,EACF;AACF;",
   "names": []
 }