@open-mercato/core 0.6.4-develop.4382.1.6b4f656b77 → 0.6.4

package/dist/modules/integrations/lib/credentials-service.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/integrations/lib/credentials-service.ts"],
-  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport { decryptWithAesGcm, encryptWithAesGcm } from '@open-mercato/shared/lib/encryption/aes'\nimport { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { createKmsService } from '@open-mercato/shared/lib/encryption/kms'\nimport { parseDecryptedFieldValue } from '@open-mercato/shared/lib/encryption/tenantDataEncryptionService'\nimport {\n  getBundle,\n  getIntegration,\n  resolveIntegrationCredentialsSchema,\n  type IntegrationScope,\n} from '@open-mercato/shared/modules/integrations/types'\nimport { EncryptionMap } from '../../entities/data/entities'\nimport { IntegrationCredentials } from '../data/entities'\n\nconst ENCRYPTED_CREDENTIALS_BLOB_KEY = '__om_encrypted_credentials_blob_v1'\nconst CREDENTIALS_ENCRYPTION_UNAVAILABLE_MESSAGE =\n  'Integration credentials encryption key is unavailable. Configure Vault KMS or TENANT_DATA_ENCRYPTION_FALLBACK_KEY.'\n\nexport class CredentialsEncryptionUnavailableError extends Error {\n  constructor() {\n    super(CREDENTIALS_ENCRYPTION_UNAVAILABLE_MESSAGE)\n    this.name = 'CredentialsEncryptionUnavailableError'\n  }\n}\n\nexport function isCredentialsEncryptionUnavailableError(error: unknown): error is CredentialsEncryptionUnavailableError {\n  return error instanceof CredentialsEncryptionUnavailableError\n}\n\nfunction isRecordValue(value: unknown): value is Record<string, unknown> {\n  return !!value && typeof value === 'object' && !Array.isArray(value)\n}\n\nfunction normalizeCredentialsRecord(value: unknown): Record<string, unknown> {\n  if (isRecordValue(value)) return value\n  if (typeof value !== 'string') return {}\n\n  const parsed = parseDecryptedFieldValue(value)\n  return isRecordValue(parsed) ? parsed : {}\n}\n\nexport function createCredentialsService(em: EntityManager) {\n  const credentialsEncryptionSpec = [{ field: 'credentials' }]\n\n  async function ensureCredentialsEncryptionMap(scope: IntegrationScope): Promise<void> {\n    const existing = await findOneWithDecryption(\n      em,\n      EncryptionMap,\n      {\n        entityId: 'integrations:integration_credentials',\n        tenantId: scope.tenantId,\n        organizationId: scope.organizationId,\n        deletedAt: null,\n      },\n      undefined,\n      scope,\n    )\n\n    if (!existing) {\n      const created = em.create(EncryptionMap, {\n        entityId: 'integrations:integration_credentials',\n        tenantId: scope.tenantId,\n        organizationId: scope.organizationId,\n        fieldsJson: credentialsEncryptionSpec,\n        isActive: true,\n        createdAt: new Date(),\n        updatedAt: new Date(),\n      })\n      em.persist(created)\n      return\n    }\n\n    existing.fieldsJson = credentialsEncryptionSpec\n    existing.isActive = true\n  }\n\n  async function resolveCredentialsDek(scope: IntegrationScope): Promise<string> {\n    const kms = createKmsService()\n    const existing = await kms.getTenantDek(scope.tenantId)\n    if (existing?.key) return existing.key\n\n    const created = await kms.createTenantDek(scope.tenantId)\n    if (created?.key) return created.key\n\n    throw new CredentialsEncryptionUnavailableError()\n  }\n\n  async function encryptCredentialsBlob(\n    credentials: Record<string, unknown>,\n    scope: IntegrationScope,\n  ): Promise<Record<string, unknown>> {\n    const dek = await resolveCredentialsDek(scope)\n    const payload = encryptWithAesGcm(JSON.stringify(credentials), dek)\n    return { [ENCRYPTED_CREDENTIALS_BLOB_KEY]: payload.value }\n  }\n\n  async function decryptCredentialsBlob(\n    credentialsInput: unknown,\n    scope: IntegrationScope,\n  ): Promise<Record<string, unknown>> {\n    const credentials = normalizeCredentialsRecord(credentialsInput)\n    const encrypted = credentials[ENCRYPTED_CREDENTIALS_BLOB_KEY]\n    if (typeof encrypted !== 'string' || !encrypted) return credentials\n\n    const dek = await resolveCredentialsDek(scope)\n    const decryptedRaw = decryptWithAesGcm(encrypted, dek)\n    if (!decryptedRaw) return {}\n\n    try {\n      const parsed = JSON.parse(decryptedRaw) as unknown\n      return parsed && typeof parsed === 'object' && !Array.isArray(parsed)\n        ? (parsed as Record<string, unknown>)\n        : {}\n    } catch {\n      return {}\n    }\n  }\n\n  return {\n    async getRaw(integrationId: string, scope: IntegrationScope): Promise<Record<string, unknown> | null> {\n      const row = await findOneWithDecryption(\n        em,\n        IntegrationCredentials,\n        {\n          integrationId,\n          organizationId: scope.organizationId,\n          tenantId: scope.tenantId,\n          deletedAt: null,\n        },\n        undefined,\n        scope,\n      )\n      if (!row) return null\n      return decryptCredentialsBlob(row.credentials, scope)\n    },\n\n    async resolve(integrationId: string, scope: IntegrationScope): Promise<Record<string, unknown> | null> {\n      const direct = await this.getRaw(integrationId, scope)\n      if (direct) return direct\n\n      const definition = getIntegration(integrationId)\n      if (!definition?.bundleId) return null\n      return this.getRaw(definition.bundleId, scope)\n    },\n\n    async save(integrationId: string, credentials: Record<string, unknown>, scope: IntegrationScope): Promise<void> {\n      const encryptedCredentials = await encryptCredentialsBlob(credentials, scope)\n      await ensureCredentialsEncryptionMap(scope)\n\n      const row = await findOneWithDecryption(\n        em,\n        IntegrationCredentials,\n        {\n          integrationId,\n          organizationId: scope.organizationId,\n          tenantId: scope.tenantId,\n          deletedAt: null,\n        },\n        undefined,\n        scope,\n      )\n\n      if (row) {\n        row.credentials = encryptedCredentials\n        await em.flush()\n        return\n      }\n\n      const created = em.create(IntegrationCredentials, {\n        integrationId,\n        credentials: encryptedCredentials,\n        organizationId: scope.organizationId,\n        tenantId: scope.tenantId,\n      })\n      await em.persist(created).flush()\n    },\n\n    async saveField(\n      integrationId: string,\n      fieldKey: string,\n      value: unknown,\n      scope: IntegrationScope,\n    ): Promise<Record<string, unknown>> {\n      const current = (await this.getRaw(integrationId, scope)) ?? {}\n      const updated = { ...current, [fieldKey]: value }\n      await this.save(integrationId, updated, scope)\n      return updated\n    },\n\n    getSchema(integrationId: string) {\n      const definition = getIntegration(integrationId)\n      if (!definition) return undefined\n\n      if (definition.bundleId) {\n        const bundle = getBundle(definition.bundleId)\n        return bundle?.credentials ?? resolveIntegrationCredentialsSchema(integrationId)\n      }\n\n      return definition.credentials ?? resolveIntegrationCredentialsSchema(integrationId)\n    },\n  }\n}\n\nexport type CredentialsService = ReturnType<typeof createCredentialsService>\n"],
-  "mappings": "AACA,SAAS,mBAAmB,yBAAyB;AACrD,SAAS,6BAA6B;AACtC,SAAS,wBAAwB;AACjC,SAAS,gCAAgC;AACzC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OAEK;AACP,SAAS,qBAAqB;AAC9B,SAAS,8BAA8B;AAEvC,MAAM,iCAAiC;AACvC,MAAM,6CACJ;AAEK,MAAM,8CAA8C,MAAM;AAAA,EAC/D,cAAc;AACZ,UAAM,0CAA0C;AAChD,SAAK,OAAO;AAAA,EACd;AACF;AAEO,SAAS,wCAAwC,OAAgE;AACtH,SAAO,iBAAiB;AAC1B;AAEA,SAAS,cAAc,OAAkD;AACvE,SAAO,CAAC,CAAC,SAAS,OAAO,UAAU,YAAY,CAAC,MAAM,QAAQ,KAAK;AACrE;AAEA,SAAS,2BAA2B,OAAyC;AAC3E,MAAI,cAAc,KAAK,EAAG,QAAO;AACjC,MAAI,OAAO,UAAU,SAAU,QAAO,CAAC;AAEvC,QAAM,SAAS,yBAAyB,KAAK;AAC7C,SAAO,cAAc,MAAM,IAAI,SAAS,CAAC;AAC3C;AAEO,SAAS,yBAAyB,IAAmB;AAC1D,QAAM,4BAA4B,CAAC,EAAE,OAAO,cAAc,CAAC;AAE3D,iBAAe,+BAA+B,OAAwC;AACpF,UAAM,WAAW,MAAM;AAAA,MACrB;AAAA,MACA;AAAA,MACA;AAAA,QACE,UAAU;AAAA,QACV,UAAU,MAAM;AAAA,QAChB,gBAAgB,MAAM;AAAA,QACtB,WAAW;AAAA,MACb;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAEA,QAAI,CAAC,UAAU;AACb,YAAM,UAAU,GAAG,OAAO,eAAe;AAAA,QACvC,UAAU;AAAA,QACV,UAAU,MAAM;AAAA,QAChB,gBAAgB,MAAM;AAAA,QACtB,YAAY;AAAA,QACZ,UAAU;AAAA,QACV,WAAW,oBAAI,KAAK;AAAA,QACpB,WAAW,oBAAI,KAAK;AAAA,MACtB,CAAC;AACD,SAAG,QAAQ,OAAO;AAClB;AAAA,IACF;AAEA,aAAS,aAAa;AACtB,aAAS,WAAW;AAAA,EACtB;AAEA,iBAAe,sBAAsB,OAA0C;AAC7E,UAAM,MAAM,iBAAiB;AAC7B,UAAM,WAAW,MAAM,IAAI,aAAa,MAAM,QAAQ;AACtD,QAAI,UAAU,IAAK,QAAO,SAAS;AAEnC,UAAM,UAAU,MAAM,IAAI,gBAAgB,MAAM,QAAQ;AACxD,QAAI,SAAS,IAAK,QAAO,QAAQ;AAEjC,UAAM,IAAI,sCAAsC;AAAA,EAClD;AAEA,iBAAe,uBACb,aACA,OACkC;AAClC,UAAM,MAAM,MAAM,sBAAsB,KAAK;AAC7C,UAAM,UAAU,kBAAkB,KAAK,UAAU,WAAW,GAAG,GAAG;AAClE,WAAO,EAAE,CAAC,8BAA8B,GAAG,QAAQ,MAAM;AAAA,EAC3D;AAEA,iBAAe,uBACb,kBACA,OACkC;AAClC,UAAM,cAAc,2BAA2B,gBAAgB;AAC/D,UAAM,YAAY,YAAY,8BAA8B;AAC5D,QAAI,OAAO,cAAc,YAAY,CAAC,UAAW,QAAO;AAExD,UAAM,MAAM,MAAM,sBAAsB,KAAK;AAC7C,UAAM,eAAe,kBAAkB,WAAW,GAAG;AACrD,QAAI,CAAC,aAAc,QAAO,CAAC;AAE3B,QAAI;AACF,YAAM,SAAS,KAAK,MAAM,YAAY;AACtC,aAAO,UAAU,OAAO,WAAW,YAAY,CAAC,MAAM,QAAQ,MAAM,IAC/D,SACD,CAAC;AAAA,IACP,QAAQ;AACN,aAAO,CAAC;AAAA,IACV;AAAA,EACF;AAEA,SAAO;AAAA,IACL,MAAM,OAAO,eAAuB,OAAkE;AACpG,YAAM,MAAM,MAAM;AAAA,QAChB;AAAA,QACA;AAAA,QACA;AAAA,UACE;AAAA,UACA,gBAAgB,MAAM;AAAA,UACtB,UAAU,MAAM;AAAA,UAChB,WAAW;AAAA,QACb;AAAA,QACA;AAAA,QACA;AAAA,MACF;AACA,UAAI,CAAC,IAAK,QAAO;AACjB,aAAO,uBAAuB,IAAI,aAAa,KAAK;AAAA,IACtD;AAAA,IAEA,MAAM,QAAQ,eAAuB,OAAkE;AACrG,YAAM,SAAS,MAAM,KAAK,OAAO,eAAe,KAAK;AACrD,UAAI,OAAQ,QAAO;AAEnB,YAAM,aAAa,eAAe,aAAa;AAC/C,UAAI,CAAC,YAAY,SAAU,QAAO;AAClC,aAAO,KAAK,OAAO,WAAW,UAAU,KAAK;AAAA,IAC/C;AAAA,IAEA,MAAM,KAAK,eAAuB,aAAsC,OAAwC;AAC9G,YAAM,uBAAuB,MAAM,uBAAuB,aAAa,KAAK;AAC5E,YAAM,+BAA+B,KAAK;AAE1C,YAAM,MAAM,MAAM;AAAA,QAChB;AAAA,QACA;AAAA,QACA;AAAA,UACE;AAAA,UACA,gBAAgB,MAAM;AAAA,UACtB,UAAU,MAAM;AAAA,UAChB,WAAW;AAAA,QACb;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAEA,UAAI,KAAK;AACP,YAAI,cAAc;AAClB,cAAM,GAAG,MAAM;AACf;AAAA,MACF;AAEA,YAAM,UAAU,GAAG,OAAO,wBAAwB;AAAA,QAChD;AAAA,QACA,aAAa;AAAA,QACb,gBAAgB,MAAM;AAAA,QACtB,UAAU,MAAM;AAAA,MAClB,CAAC;AACD,YAAM,GAAG,QAAQ,OAAO,EAAE,MAAM;AAAA,IAClC;AAAA,IAEA,MAAM,UACJ,eACA,UACA,OACA,OACkC;AAClC,YAAM,UAAW,MAAM,KAAK,OAAO,eAAe,KAAK,KAAM,CAAC;AAC9D,YAAM,UAAU,EAAE,GAAG,SAAS,CAAC,QAAQ,GAAG,MAAM;AAChD,YAAM,KAAK,KAAK,eAAe,SAAS,KAAK;AAC7C,aAAO;AAAA,IACT;AAAA,IAEA,UAAU,eAAuB;AAC/B,YAAM,aAAa,eAAe,aAAa;AAC/C,UAAI,CAAC,WAAY,QAAO;AAExB,UAAI,WAAW,UAAU;AACvB,cAAM,SAAS,UAAU,WAAW,QAAQ;AAC5C,eAAO,QAAQ,eAAe,oCAAoC,aAAa;AAAA,MACjF;AAEA,aAAO,WAAW,eAAe,oCAAoC,aAAa;AAAA,IACpF;AAAA,EACF;AACF;",
+  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport { decryptWithAesGcm, encryptWithAesGcm } from '@open-mercato/shared/lib/encryption/aes'\nimport { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { createKmsService } from '@open-mercato/shared/lib/encryption/kms'\nimport { parseDecryptedFieldValue } from '@open-mercato/shared/lib/encryption/tenantDataEncryptionService'\nimport {\n  getBundle,\n  getIntegration,\n  resolveIntegrationCredentialsSchema,\n  type IntegrationScope,\n} from '@open-mercato/shared/modules/integrations/types'\nimport { EncryptionMap } from '../../entities/data/entities'\nimport { IntegrationCredentials } from '../data/entities'\n\nconst ENCRYPTED_CREDENTIALS_BLOB_KEY = '__om_encrypted_credentials_blob_v1'\nconst CREDENTIALS_ENCRYPTION_UNAVAILABLE_MESSAGE =\n  'Integration credentials encryption key is unavailable. Configure Vault KMS or TENANT_DATA_ENCRYPTION_FALLBACK_KEY.'\n\nexport class CredentialsEncryptionUnavailableError extends Error {\n  constructor() {\n    super(CREDENTIALS_ENCRYPTION_UNAVAILABLE_MESSAGE)\n    this.name = 'CredentialsEncryptionUnavailableError'\n  }\n}\n\nexport function isCredentialsEncryptionUnavailableError(error: unknown): error is CredentialsEncryptionUnavailableError {\n  return error instanceof CredentialsEncryptionUnavailableError\n}\n\nfunction isRecordValue(value: unknown): value is Record<string, unknown> {\n  return !!value && typeof value === 'object' && !Array.isArray(value)\n}\n\nfunction normalizeCredentialsRecord(value: unknown): Record<string, unknown> {\n  if (isRecordValue(value)) return value\n  if (typeof value !== 'string') return {}\n\n  const parsed = parseDecryptedFieldValue(value)\n  return isRecordValue(parsed) ? parsed : {}\n}\n\n/**\n * Build the where-filter for credential lookups.\n *\n * Per-user scoping (added 2026-05-26): when `scope.userId` is set, the filter\n * matches the row owned by that user \u2014 different users on the same tenant get\n * their OWN row for the same provider. When `scope.userId` is `undefined` /\n * `null`, the filter matches tenant-wide credentials (existing behaviour,\n * e.g. shared Stripe/Akeneo API keys).\n *\n * The partial unique index `integration_credentials_user_lookup_idx` enforces\n * uniqueness across `(integration_id, organization_id, tenant_id, user_id)`\n * when `user_id IS NOT NULL`.\n */\nexport function buildCredentialsFilter(integrationId: string, scope: IntegrationScope) {\n  const base = {\n    integrationId,\n    organizationId: scope.organizationId,\n    tenantId: scope.tenantId,\n    deletedAt: null,\n  } as Record<string, unknown>\n  if (scope.userId) {\n    base.userId = scope.userId\n  } else {\n    base.userId = null\n  }\n  return base\n}\n\nexport function createCredentialsService(em: EntityManager) {\n  const credentialsEncryptionSpec = [{ field: 'credentials' }]\n\n  async function ensureCredentialsEncryptionMap(scope: IntegrationScope): Promise<void> {\n    const existing = await findOneWithDecryption(\n      em,\n      EncryptionMap,\n      {\n        entityId: 'integrations:integration_credentials',\n        tenantId: scope.tenantId,\n        organizationId: scope.organizationId,\n        deletedAt: null,\n      },\n      undefined,\n      scope,\n    )\n\n    if (!existing) {\n      const created = em.create(EncryptionMap, {\n        entityId: 'integrations:integration_credentials',\n        tenantId: scope.tenantId,\n        organizationId: scope.organizationId,\n        fieldsJson: credentialsEncryptionSpec,\n        isActive: true,\n        createdAt: new Date(),\n        updatedAt: new Date(),\n      })\n      em.persist(created)\n      return\n    }\n\n    existing.fieldsJson = credentialsEncryptionSpec\n    existing.isActive = true\n  }\n\n  async function resolveCredentialsDek(scope: IntegrationScope): Promise<string> {\n    const kms = createKmsService()\n    const existing = await kms.getTenantDek(scope.tenantId)\n    if (existing?.key) return existing.key\n\n    const created = await kms.createTenantDek(scope.tenantId)\n    if (created?.key) return created.key\n\n    throw new CredentialsEncryptionUnavailableError()\n  }\n\n  async function encryptCredentialsBlob(\n    credentials: Record<string, unknown>,\n    scope: IntegrationScope,\n  ): Promise<Record<string, unknown>> {\n    const dek = await resolveCredentialsDek(scope)\n    const payload = encryptWithAesGcm(JSON.stringify(credentials), dek)\n    return { [ENCRYPTED_CREDENTIALS_BLOB_KEY]: payload.value }\n  }\n\n  async function decryptCredentialsBlob(\n    credentialsInput: unknown,\n    scope: IntegrationScope,\n  ): Promise<Record<string, unknown>> {\n    const credentials = normalizeCredentialsRecord(credentialsInput)\n    const encrypted = credentials[ENCRYPTED_CREDENTIALS_BLOB_KEY]\n    if (typeof encrypted !== 'string' || !encrypted) return credentials\n\n    const dek = await resolveCredentialsDek(scope)\n    const decryptedRaw = decryptWithAesGcm(encrypted, dek)\n    if (!decryptedRaw) return {}\n\n    try {\n      const parsed = JSON.parse(decryptedRaw) as unknown\n      return parsed && typeof parsed === 'object' && !Array.isArray(parsed)\n        ? (parsed as Record<string, unknown>)\n        : {}\n    } catch {\n      return {}\n    }\n  }\n\n  return {\n    async getRaw(integrationId: string, scope: IntegrationScope): Promise<Record<string, unknown> | null> {\n      let row = await findOneWithDecryption(\n        em,\n        IntegrationCredentials,\n        buildCredentialsFilter(integrationId, scope),\n        undefined,\n        scope,\n      )\n      // Spec 2026-05-21 (email-integration-foundation) \"Hub credentials store\":\n      // per-user secrets resolve as `WHERE user_id = currentUser.id OR user_id IS NULL`.\n      // A user-scoped read of a TENANT-WIDE integration (sync_excel, Stripe, Akeneo,\n      // S3, the channel OAuth *client* config) MUST still find the shared\n      // `user_id = NULL` row \u2014 the per-user row takes precedence, and we only fall\n      // back to the tenant-wide row when the user has none of their own. Writes stay\n      // strict (`save` uses the unmodified filter) so a per-user save never clobbers\n      // the shared credential.\n      if (!row && scope.userId) {\n        row = await findOneWithDecryption(\n          em,\n          IntegrationCredentials,\n          buildCredentialsFilter(integrationId, { ...scope, userId: null }),\n          undefined,\n          scope,\n        )\n      }\n      if (!row) return null\n      return decryptCredentialsBlob(row.credentials, scope)\n    },\n\n    async resolve(integrationId: string, scope: IntegrationScope): Promise<Record<string, unknown> | null> {\n      const direct = await this.getRaw(integrationId, scope)\n      if (direct) return direct\n\n      const definition = getIntegration(integrationId)\n      if (!definition?.bundleId) return null\n      return this.getRaw(definition.bundleId, scope)\n    },\n\n    async save(integrationId: string, credentials: Record<string, unknown>, scope: IntegrationScope): Promise<void> {\n      const encryptedCredentials = await encryptCredentialsBlob(credentials, scope)\n      await ensureCredentialsEncryptionMap(scope)\n\n      const row = await findOneWithDecryption(\n        em,\n        IntegrationCredentials,\n        buildCredentialsFilter(integrationId, scope),\n        undefined,\n        scope,\n      )\n\n      if (row) {\n        row.credentials = encryptedCredentials\n        await em.flush()\n        return\n      }\n\n      const created = em.create(IntegrationCredentials, {\n        integrationId,\n        credentials: encryptedCredentials,\n        organizationId: scope.organizationId,\n        tenantId: scope.tenantId,\n        ...(scope.userId ? { userId: scope.userId } : {}),\n      })\n      await em.persist(created).flush()\n    },\n\n    async saveField(\n      integrationId: string,\n      fieldKey: string,\n      value: unknown,\n      scope: IntegrationScope,\n    ): Promise<Record<string, unknown>> {\n      const current = (await this.getRaw(integrationId, scope)) ?? {}\n      const updated = { ...current, [fieldKey]: value }\n      await this.save(integrationId, updated, scope)\n      return updated\n    },\n\n    getSchema(integrationId: string) {\n      const definition = getIntegration(integrationId)\n      if (!definition) return undefined\n\n      if (definition.bundleId) {\n        const bundle = getBundle(definition.bundleId)\n        return bundle?.credentials ?? resolveIntegrationCredentialsSchema(integrationId)\n      }\n\n      return definition.credentials ?? resolveIntegrationCredentialsSchema(integrationId)\n    },\n  }\n}\n\nexport type CredentialsService = ReturnType<typeof createCredentialsService>\n"],
+  "mappings": "AACA,SAAS,mBAAmB,yBAAyB;AACrD,SAAS,6BAA6B;AACtC,SAAS,wBAAwB;AACjC,SAAS,gCAAgC;AACzC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OAEK;AACP,SAAS,qBAAqB;AAC9B,SAAS,8BAA8B;AAEvC,MAAM,iCAAiC;AACvC,MAAM,6CACJ;AAEK,MAAM,8CAA8C,MAAM;AAAA,EAC/D,cAAc;AACZ,UAAM,0CAA0C;AAChD,SAAK,OAAO;AAAA,EACd;AACF;AAEO,SAAS,wCAAwC,OAAgE;AACtH,SAAO,iBAAiB;AAC1B;AAEA,SAAS,cAAc,OAAkD;AACvE,SAAO,CAAC,CAAC,SAAS,OAAO,UAAU,YAAY,CAAC,MAAM,QAAQ,KAAK;AACrE;AAEA,SAAS,2BAA2B,OAAyC;AAC3E,MAAI,cAAc,KAAK,EAAG,QAAO;AACjC,MAAI,OAAO,UAAU,SAAU,QAAO,CAAC;AAEvC,QAAM,SAAS,yBAAyB,KAAK;AAC7C,SAAO,cAAc,MAAM,IAAI,SAAS,CAAC;AAC3C;AAeO,SAAS,uBAAuB,eAAuB,OAAyB;AACrF,QAAM,OAAO;AAAA,IACX;AAAA,IACA,gBAAgB,MAAM;AAAA,IACtB,UAAU,MAAM;AAAA,IAChB,WAAW;AAAA,EACb;AACA,MAAI,MAAM,QAAQ;AAChB,SAAK,SAAS,MAAM;AAAA,EACtB,OAAO;AACL,SAAK,SAAS;AAAA,EAChB;AACA,SAAO;AACT;AAEO,SAAS,yBAAyB,IAAmB;AAC1D,QAAM,4BAA4B,CAAC,EAAE,OAAO,cAAc,CAAC;AAE3D,iBAAe,+BAA+B,OAAwC;AACpF,UAAM,WAAW,MAAM;AAAA,MACrB;AAAA,MACA;AAAA,MACA;AAAA,QACE,UAAU;AAAA,QACV,UAAU,MAAM;AAAA,QAChB,gBAAgB,MAAM;AAAA,QACtB,WAAW;AAAA,MACb;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAEA,QAAI,CAAC,UAAU;AACb,YAAM,UAAU,GAAG,OAAO,eAAe;AAAA,QACvC,UAAU;AAAA,QACV,UAAU,MAAM;AAAA,QAChB,gBAAgB,MAAM;AAAA,QACtB,YAAY;AAAA,QACZ,UAAU;AAAA,QACV,WAAW,oBAAI,KAAK;AAAA,QACpB,WAAW,oBAAI,KAAK;AAAA,MACtB,CAAC;AACD,SAAG,QAAQ,OAAO;AAClB;AAAA,IACF;AAEA,aAAS,aAAa;AACtB,aAAS,WAAW;AAAA,EACtB;AAEA,iBAAe,sBAAsB,OAA0C;AAC7E,UAAM,MAAM,iBAAiB;AAC7B,UAAM,WAAW,MAAM,IAAI,aAAa,MAAM,QAAQ;AACtD,QAAI,UAAU,IAAK,QAAO,SAAS;AAEnC,UAAM,UAAU,MAAM,IAAI,gBAAgB,MAAM,QAAQ;AACxD,QAAI,SAAS,IAAK,QAAO,QAAQ;AAEjC,UAAM,IAAI,sCAAsC;AAAA,EAClD;AAEA,iBAAe,uBACb,aACA,OACkC;AAClC,UAAM,MAAM,MAAM,sBAAsB,KAAK;AAC7C,UAAM,UAAU,kBAAkB,KAAK,UAAU,WAAW,GAAG,GAAG;AAClE,WAAO,EAAE,CAAC,8BAA8B,GAAG,QAAQ,MAAM;AAAA,EAC3D;AAEA,iBAAe,uBACb,kBACA,OACkC;AAClC,UAAM,cAAc,2BAA2B,gBAAgB;AAC/D,UAAM,YAAY,YAAY,8BAA8B;AAC5D,QAAI,OAAO,cAAc,YAAY,CAAC,UAAW,QAAO;AAExD,UAAM,MAAM,MAAM,sBAAsB,KAAK;AAC7C,UAAM,eAAe,kBAAkB,WAAW,GAAG;AACrD,QAAI,CAAC,aAAc,QAAO,CAAC;AAE3B,QAAI;AACF,YAAM,SAAS,KAAK,MAAM,YAAY;AACtC,aAAO,UAAU,OAAO,WAAW,YAAY,CAAC,MAAM,QAAQ,MAAM,IAC/D,SACD,CAAC;AAAA,IACP,QAAQ;AACN,aAAO,CAAC;AAAA,IACV;AAAA,EACF;AAEA,SAAO;AAAA,IACL,MAAM,OAAO,eAAuB,OAAkE;AACpG,UAAI,MAAM,MAAM;AAAA,QACd;AAAA,QACA;AAAA,QACA,uBAAuB,eAAe,KAAK;AAAA,QAC3C;AAAA,QACA;AAAA,MACF;AASA,UAAI,CAAC,OAAO,MAAM,QAAQ;AACxB,cAAM,MAAM;AAAA,UACV;AAAA,UACA;AAAA,UACA,uBAAuB,eAAe,EAAE,GAAG,OAAO,QAAQ,KAAK,CAAC;AAAA,UAChE;AAAA,UACA;AAAA,QACF;AAAA,MACF;AACA,UAAI,CAAC,IAAK,QAAO;AACjB,aAAO,uBAAuB,IAAI,aAAa,KAAK;AAAA,IACtD;AAAA,IAEA,MAAM,QAAQ,eAAuB,OAAkE;AACrG,YAAM,SAAS,MAAM,KAAK,OAAO,eAAe,KAAK;AACrD,UAAI,OAAQ,QAAO;AAEnB,YAAM,aAAa,eAAe,aAAa;AAC/C,UAAI,CAAC,YAAY,SAAU,QAAO;AAClC,aAAO,KAAK,OAAO,WAAW,UAAU,KAAK;AAAA,IAC/C;AAAA,IAEA,MAAM,KAAK,eAAuB,aAAsC,OAAwC;AAC9G,YAAM,uBAAuB,MAAM,uBAAuB,aAAa,KAAK;AAC5E,YAAM,+BAA+B,KAAK;AAE1C,YAAM,MAAM,MAAM;AAAA,QAChB;AAAA,QACA;AAAA,QACA,uBAAuB,eAAe,KAAK;AAAA,QAC3C;AAAA,QACA;AAAA,MACF;AAEA,UAAI,KAAK;AACP,YAAI,cAAc;AAClB,cAAM,GAAG,MAAM;AACf;AAAA,MACF;AAEA,YAAM,UAAU,GAAG,OAAO,wBAAwB;AAAA,QAChD;AAAA,QACA,aAAa;AAAA,QACb,gBAAgB,MAAM;AAAA,QACtB,UAAU,MAAM;AAAA,QAChB,GAAI,MAAM,SAAS,EAAE,QAAQ,MAAM,OAAO,IAAI,CAAC;AAAA,MACjD,CAAC;AACD,YAAM,GAAG,QAAQ,OAAO,EAAE,MAAM;AAAA,IAClC;AAAA,IAEA,MAAM,UACJ,eACA,UACA,OACA,OACkC;AAClC,YAAM,UAAW,MAAM,KAAK,OAAO,eAAe,KAAK,KAAM,CAAC;AAC9D,YAAM,UAAU,EAAE,GAAG,SAAS,CAAC,QAAQ,GAAG,MAAM;AAChD,YAAM,KAAK,KAAK,eAAe,SAAS,KAAK;AAC7C,aAAO;AAAA,IACT;AAAA,IAEA,UAAU,eAAuB;AAC/B,YAAM,aAAa,eAAe,aAAa;AAC/C,UAAI,CAAC,WAAY,QAAO;AAExB,UAAI,WAAW,UAAU;AACvB,cAAM,SAAS,UAAU,WAAW,QAAQ;AAC5C,eAAO,QAAQ,eAAe,oCAAoC,aAAa;AAAA,MACjF;AAEA,aAAO,WAAW,eAAe,oCAAoC,aAAa;AAAA,IACpF;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/modules/integrations/migrations/Migration20260526154136_integrations.js

@@ -0,0 +1,15 @@
+import { Migration } from "@mikro-orm/migrations";
+class Migration20260526154136_integrations extends Migration {
+  up() {
+    this.addSql(`alter table "integration_credentials" add "user_id" uuid null;`);
+    this.addSql(`create unique index "integration_credentials_user_lookup_idx" on "integration_credentials" ("integration_id", "organization_id", "tenant_id", "user_id") where "user_id" is not null and "deleted_at" is null;`);
+  }
+  down() {
+    this.addSql(`drop index "integration_credentials_user_lookup_idx";`);
+    this.addSql(`alter table "integration_credentials" drop column "user_id";`);
+  }
+}
+export {
+  Migration20260526154136_integrations
+};
+//# sourceMappingURL=Migration20260526154136_integrations.js.map

package/dist/modules/integrations/migrations/Migration20260526154136_integrations.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/integrations/migrations/Migration20260526154136_integrations.ts"],
+  "sourcesContent": ["import { Migration } from '@mikro-orm/migrations';\n\nexport class Migration20260526154136_integrations extends Migration {\n\n  override up(): void | Promise<void> {\n    this.addSql(`alter table \"integration_credentials\" add \"user_id\" uuid null;`);\n    this.addSql(`create unique index \"integration_credentials_user_lookup_idx\" on \"integration_credentials\" (\"integration_id\", \"organization_id\", \"tenant_id\", \"user_id\") where \"user_id\" is not null and \"deleted_at\" is null;`);\n  }\n\n  override down(): void | Promise<void> {\n    this.addSql(`drop index \"integration_credentials_user_lookup_idx\";`);\n    this.addSql(`alter table \"integration_credentials\" drop column \"user_id\";`);\n  }\n\n}\n"],
+  "mappings": "AAAA,SAAS,iBAAiB;AAEnB,MAAM,6CAA6C,UAAU;AAAA,EAEzD,KAA2B;AAClC,SAAK,OAAO,gEAAgE;AAC5E,SAAK,OAAO,gNAAgN;AAAA,EAC9N;AAAA,EAES,OAA6B;AACpC,SAAK,OAAO,uDAAuD;AACnE,SAAK,OAAO,8DAA8D;AAAA,EAC5E;AAEF;",
+  "names": []
+}

package/dist/modules/messages/api/route.js

@@ -1,7 +1,7 @@
 import { z } from "zod";
 import { sql } from "kysely";
 import { findWithDecryption } from "@open-mercato/shared/lib/encryption/find";
-import { hashForLookup } from "@open-mercato/shared/lib/encryption/aes";
+import { lookupHashCandidates } from "@open-mercato/shared/lib/encryption/aes";
 import { User } from "../../auth/data/entities.js";
 import { Message, MessageObject } from "../data/entities.js";
 import { composeMessageSchema, listMessagesSchema } from "../data/validators.js";
@@ -82,7 +82,7 @@ async function GET(req) {
     if (input.visibility) q = q.where("m.visibility", "=", input.visibility);
     if (input.sourceEntityType) q = q.where("m.source_entity_type", "=", input.sourceEntityType);
     if (input.sourceEntityId) q = q.where("m.source_entity_id", "=", input.sourceEntityId);
-    if (input.externalEmail) q = q.where("m.external_email_hash", "=", hashForLookup(input.externalEmail));
+    if (input.externalEmail) q = q.where("m.external_email_hash", "in", lookupHashCandidates(input.externalEmail));
     if (input.senderId) q = q.where("m.sender_user_id", "=", input.senderId);
     if (input.search) {
       if (!searchIds || searchIds.length === 0) {

package/dist/modules/messages/api/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/messages/api/route.ts"],
-  "sourcesContent": ["import { z } from 'zod'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { type Kysely, sql } from 'kysely'\nimport type { CommandBus } from '@open-mercato/shared/lib/commands/command-bus'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi/types'\nimport { findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { hashForLookup } from '@open-mercato/shared/lib/encryption/aes'\nimport { User } from '../../auth/data/entities'\nimport { Message, MessageObject } from '../data/entities'\nimport { composeMessageSchema, listMessagesSchema } from '../data/validators'\nimport { MESSAGE_ATTACHMENT_ENTITY_ID } from '../lib/constants'\nimport { getMessageType } from '../lib/message-types-registry'\nimport { validateMessageObjectsForType } from '../lib/object-validation'\nimport { attachOperationMetadataHeader } from '../lib/operationMetadata'\nimport { canUseMessageEmailFeature, resolveMessageContext } from '../lib/routeHelpers'\nimport { findMessageIdsBySearchTokens } from '../lib/searchLookup'\nimport { MessageCommandExecuteResult } from '../commands/shared'\nimport {\n  composeMessageSchema as composeSchema,\n  composeResponseSchema,\n  listMessagesSchema as listSchema,\n  messageListItemSchema,\n} from './openapi'\n\ntype MessageCommandExecuteResultWithThreadId = MessageCommandExecuteResult & {\n  threadId: string\n}\n\nconst NO_MATCH_ID = '00000000-0000-0000-0000-000000000000'\n\nfunction getDb(em: EntityManager): Kysely<any> {\n  return em.getKysely<any>()\n}\n\ntype MessageListScopeRow = {\n  id: string\n  sender_user_id: string\n  is_draft: boolean\n  recipient_status: string | null\n  read_at: string | null\n}\n\ntype AttachmentCountRow = {\n  record_id: string\n  count: string | number\n}\n\ntype RecipientCountRow = {\n  message_id: string\n  count: string | number\n}\n\nexport const metadata = {\n  GET: { requireAuth: true },\n  POST: { requireAuth: true, requireFeatures: ['messages.compose'] },\n}\n\nexport async function GET(req: Request) {\n  const { ctx, scope } = await resolveMessageContext(req)\n  const em = ctx.container.resolve('em') as EntityManager\n  const url = new URL(req.url)\n  const params = Object.fromEntries(url.searchParams)\n  const input = listMessagesSchema.parse(params)\n  const db = getDb(em) as any\n\n  const searchIds = input.search\n    ? await findMessageIdsBySearchTokens({\n        em,\n        query: input.search,\n        tenantId: scope.tenantId ?? null,\n        organizationId: scope.organizationId,\n      })\n    : undefined\n\n  const buildBaseQuery = () => {\n    let q: any = db\n      .selectFrom('messages as m')\n      .where('m.tenant_id', '=', scope.tenantId)\n      .where('m.deleted_at', 'is', null)\n\n    if (scope.organizationId) {\n      q = q.where('m.organization_id', '=', scope.organizationId)\n    } else {\n      q = q.where('m.organization_id', 'is', null)\n    }\n\n    const joinRecipient = () => {\n      q = q.leftJoin('message_recipients as r', (jb: any) => jb\n        .onRef('m.id', '=', 'r.message_id')\n        .on('r.recipient_user_id', '=', scope.userId))\n    }\n\n    switch (input.folder) {\n      case 'inbox':\n        joinRecipient()\n        q = q\n          .where('r.message_id', 'is not', null)\n          .where('r.deleted_at', 'is', null)\n          .where('r.archived_at', 'is', null)\n          .where('m.is_draft', '=', false)\n        break\n      case 'archived':\n        joinRecipient()\n        q = q\n          .where('r.message_id', 'is not', null)\n          .where('r.deleted_at', 'is', null)\n          .where('r.archived_at', 'is not', null)\n        break\n      case 'sent':\n        q = q\n          .where('m.sender_user_id', '=', scope.userId)\n          .where('m.is_draft', '=', false)\n        joinRecipient()\n        break\n      case 'drafts':\n        q = q\n          .where('m.sender_user_id', '=', scope.userId)\n          .where('m.is_draft', '=', true)\n        joinRecipient()\n        break\n      case 'all':\n        joinRecipient()\n        q = q.where((eb: any) => eb.or([\n          eb('m.sender_user_id', '=', scope.userId),\n          eb('r.message_id', 'is not', null),\n        ]))\n        break\n      default: {\n        const unsupportedFolder: never = input.folder\n        throw new Error(`Unsupported folder: ${String(unsupportedFolder)}`)\n      }\n    }\n\n    if (input.status) q = q.where('r.status', '=', input.status)\n    if (input.type) q = q.where('m.type', '=', input.type)\n    if (input.visibility) q = q.where('m.visibility', '=', input.visibility)\n    if (input.sourceEntityType) q = q.where('m.source_entity_type', '=', input.sourceEntityType)\n    if (input.sourceEntityId) q = q.where('m.source_entity_id', '=', input.sourceEntityId)\n    if (input.externalEmail) q = q.where('m.external_email_hash', '=', hashForLookup(input.externalEmail))\n    if (input.senderId) q = q.where('m.sender_user_id', '=', input.senderId)\n\n    if (input.search) {\n      if (!searchIds || searchIds.length === 0) {\n        q = q.where('m.id', '=', NO_MATCH_ID)\n      } else {\n        q = q.where('m.id', 'in', searchIds)\n      }\n    }\n\n    if (input.since) q = q.where('m.sent_at', '>', new Date(input.since))\n\n    if (input.hasObjects !== undefined) {\n      const existsFn = (eb: any) => eb.exists(\n        eb.selectFrom('message_objects')\n          .select(sql<number>`1`.as('one'))\n          .whereRef('message_objects.message_id', '=', 'm.id')\n      )\n      const notExistsFn = (eb: any) => eb.not(eb.exists(\n        eb.selectFrom('message_objects')\n          .select(sql<number>`1`.as('one'))\n          .whereRef('message_objects.message_id', '=', 'm.id')\n      ))\n      q = input.hasObjects ? q.where(existsFn) : q.where(notExistsFn)\n    }\n\n    if (input.hasAttachments !== undefined) {\n      const existsFn = (eb: any) => eb.exists(\n        eb.selectFrom('attachments')\n          .select(sql<number>`1`.as('one'))\n          .where('attachments.entity_id', '=', MESSAGE_ATTACHMENT_ENTITY_ID)\n          .where(sql<boolean>`attachments.record_id = m.id::text`)\n      )\n      const notExistsFn = (eb: any) => eb.not(eb.exists(\n        eb.selectFrom('attachments')\n          .select(sql<number>`1`.as('one'))\n          .where('attachments.entity_id', '=', MESSAGE_ATTACHMENT_ENTITY_ID)\n          .where(sql<boolean>`attachments.record_id = m.id::text`)\n      ))\n      q = input.hasAttachments ? q.where(existsFn) : q.where(notExistsFn)\n    }\n\n    if (input.hasActions !== undefined) {\n      q = input.hasActions\n        ? q.where('m.action_data', 'is not', null)\n        : q.where('m.action_data', 'is', null)\n    }\n\n    return q\n  }\n\n  const countResult = await buildBaseQuery()\n    .select(sql<number>`count(*)`.as('count'))\n    .executeTakeFirst() as { count: string | number } | undefined\n  const total = Number(countResult?.count ?? 0)\n\n  const offset = (input.page - 1) * input.pageSize\n  const scopeRows = await buildBaseQuery()\n    .select([\n      'm.id',\n      'm.sender_user_id',\n      'm.is_draft',\n      'r.status as recipient_status',\n      'r.read_at',\n    ])\n    .orderBy('m.sent_at', 'desc')\n    .offset(offset)\n    .limit(input.pageSize)\n    .execute()\n\n  const typedRows = scopeRows as MessageListScopeRow[]\n  const messageIds = typedRows.map((row) => row.id)\n\n  const messageEntities = messageIds.length > 0\n    ? await findWithDecryption(\n        em,\n        Message,\n        { id: { $in: messageIds } },\n        undefined,\n        { tenantId: scope.tenantId, organizationId: scope.organizationId }\n      )\n    : []\n\n  const messagesById = new Map<string, Message>()\n  for (const message of messageEntities) {\n    messagesById.set(message.id, message)\n  }\n\n  const objects = messageIds.length > 0\n    ? await em.find(MessageObject, { messageId: { $in: messageIds } })\n    : []\n\n  const objectsByMessage = objects.reduce((acc, obj) => {\n    if (!acc[obj.messageId]) acc[obj.messageId] = []\n    acc[obj.messageId].push(obj)\n    return acc\n  }, {} as Record<string, MessageObject[]>)\n\n  const attachmentCounts: AttachmentCountRow[] = messageIds.length > 0\n    ? await (getDb(em) as any)\n        .selectFrom('attachments')\n        .select(['record_id', sql<string>`count(*)`.as('count')])\n        .where('entity_id', '=', MESSAGE_ATTACHMENT_ENTITY_ID)\n        .where('record_id', 'in', messageIds)\n        .groupBy('record_id')\n        .execute()\n    : []\n\n  const attachmentCountByMessage = attachmentCounts.reduce((acc: Record<string, number>, row) => {\n    acc[row.record_id] = Number(row.count)\n    return acc\n  }, {})\n\n  const recipientCounts: RecipientCountRow[] = messageIds.length > 0\n    ? await (getDb(em) as any)\n        .selectFrom('message_recipients')\n        .select(['message_id', sql<string>`count(*)`.as('count')])\n        .where('message_id', 'in', messageIds)\n        .where('deleted_at', 'is', null)\n        .groupBy('message_id')\n        .execute()\n    : []\n\n  const recipientCountByMessage = recipientCounts.reduce((acc: Record<string, number>, row) => {\n    acc[row.message_id] = Number(row.count)\n    return acc\n  }, {})\n\n  const senderUserIds = Array.from(new Set(typedRows.map((row) => row.sender_user_id).filter(Boolean)))\n  const senderUsers = senderUserIds.length > 0\n    ? await findWithDecryption(\n        em,\n        User,\n        { id: { $in: senderUserIds } },\n        undefined,\n        { tenantId: scope.tenantId, organizationId: scope.organizationId }\n      )\n    : []\n\n  const senderMetaById = new Map<string, { name: string | null; email: string | null }>()\n  senderUsers.forEach((user) => {\n    const name = typeof user.name === 'string' && user.name.trim().length ? user.name.trim() : null\n    senderMetaById.set(user.id, { name, email: user.email ?? null })\n  })\n\n  return Response.json({\n    items: typedRows\n      .map((row) => {\n        const message = messagesById.get(row.id)\n        if (!message) return null\n        const body = typeof message.body === 'string' ? message.body : ''\n        const bodyPreview = body.substring(0, 150) + (body.length > 150 ? '...' : '')\n        const actionData = message.actionData ?? null\n        return {\n          ...(senderMetaById.get(row.sender_user_id)\n            ? {\n                senderName: senderMetaById.get(row.sender_user_id)?.name ?? null,\n                senderEmail: senderMetaById.get(row.sender_user_id)?.email ?? null,\n              }\n            : { senderName: null, senderEmail: null }),\n          id: message.id,\n          type: message.type,\n          visibility: message.visibility ?? null,\n          sourceEntityType: message.sourceEntityType ?? null,\n          sourceEntityId: message.sourceEntityId ?? null,\n          externalEmail: message.externalEmail ?? null,\n          externalName: message.externalName ?? null,\n          subject: message.subject,\n          bodyPreview,\n          senderUserId: message.senderUserId,\n          priority: message.priority,\n          status: row.recipient_status ?? (row.is_draft ? 'draft' : 'sent'),\n          hasObjects: (objectsByMessage[message.id] || []).length > 0,\n          objectCount: (objectsByMessage[message.id] || []).length,\n          hasAttachments: (attachmentCountByMessage[message.id] || 0) > 0,\n          attachmentCount: attachmentCountByMessage[message.id] || 0,\n          recipientCount: recipientCountByMessage[message.id] || 0,\n          hasActions:\n            Boolean(actionData?.actions?.length)\n            || Boolean(getMessageType(message.type)?.defaultActions?.length)\n            || (objectsByMessage[message.id] || []).some((item) => item.actionRequired && Boolean(item.actionType)),\n          actionTaken: message.actionTaken ?? null,\n          sentAt: message.sentAt ? message.sentAt.toISOString() : null,\n          readAt: row.read_at,\n          threadId: message.threadId ?? null,\n        }\n      })\n      .filter((item): item is NonNullable<typeof item> => item !== null),\n    page: input.page,\n    pageSize: input.pageSize,\n    total,\n    totalPages: Math.ceil(total / input.pageSize),\n  })\n}\n\nexport async function POST(req: Request) {\n  const { ctx, scope } = await resolveMessageContext(req)\n  const commandBus = ctx.container.resolve('commandBus') as CommandBus\n  const body = await req.json().catch(() => ({}))\n  const input = composeMessageSchema.parse(body)\n\n  const isPublicVisibility = input.visibility === 'public'\n  const sendViaEmail = isPublicVisibility ? true : input.sendViaEmail\n  if (sendViaEmail && !(await canUseMessageEmailFeature(ctx, scope))) {\n    return Response.json({ error: 'Missing feature: messages.email' }, { status: 403 })\n  }\n\n  if (input.objects?.length) {\n    const objectValidationError = validateMessageObjectsForType(input.type, input.objects)\n    if (objectValidationError) {\n      return Response.json({ error: objectValidationError }, { status: 400 })\n    }\n  }\n\n  const { result, logEntry } = await commandBus.execute('messages.messages.compose', {\n    input: {\n      ...input,\n      sendViaEmail,\n      tenantId: scope.tenantId,\n      organizationId: scope.organizationId,\n      userId: scope.userId,\n    },\n    ctx: {\n      container: ctx.container,\n      auth: ctx.auth ?? null,\n      organizationScope: null,\n      selectedOrganizationId: scope.organizationId,\n      organizationIds: scope.organizationId ? [scope.organizationId] : null,\n      request: req,\n    },\n  })\n  const { id: messageId, threadId: responseThreadId } = result as unknown as MessageCommandExecuteResultWithThreadId\n\n  const response = Response.json({ id: messageId, threadId: responseThreadId }, { status: 201 })\n  attachOperationMetadataHeader(response, logEntry, {\n    resourceKind: 'messages.message',\n    resourceId: messageId,\n  })\n  return response\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Messages',\n  methods: {\n    GET: {\n      summary: 'List messages',\n      query: listSchema,\n      responses: [\n        {\n          status: 200,\n          description: 'Message list',\n          schema: z.object({\n            items: z.array(messageListItemSchema),\n            page: z.number(),\n            pageSize: z.number(),\n            total: z.number(),\n            totalPages: z.number(),\n          }),\n        },\n      ],\n    },\n    POST: {\n      summary: 'Compose a message',\n      requestBody: {\n        schema: composeSchema,\n      },\n      responses: [\n        {\n          status: 201,\n          description: 'Message created',\n          schema: composeResponseSchema,\n        },\n      ],\n    },\n  },\n}\n"],
-  "mappings": "AAAA,SAAS,SAAS;AAElB,SAAsB,WAAW;AAGjC,SAAS,0BAA0B;AACnC,SAAS,qBAAqB;AAC9B,SAAS,YAAY;AACrB,SAAS,SAAS,qBAAqB;AACvC,SAAS,sBAAsB,0BAA0B;AACzD,SAAS,oCAAoC;AAC7C,SAAS,sBAAsB;AAC/B,SAAS,qCAAqC;AAC9C,SAAS,qCAAqC;AAC9C,SAAS,2BAA2B,6BAA6B;AACjE,SAAS,oCAAoC;AAE7C;AAAA,EACE,wBAAwB;AAAA,EACxB;AAAA,EACA,sBAAsB;AAAA,EACtB;AAAA,OACK;AAMP,MAAM,cAAc;AAEpB,SAAS,MAAM,IAAgC;AAC7C,SAAO,GAAG,UAAe;AAC3B;AAoBO,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,KAAK;AAAA,EACzB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,kBAAkB,EAAE;AACnE;AAEA,eAAsB,IAAI,KAAc;AACtC,QAAM,EAAE,KAAK,MAAM,IAAI,MAAM,sBAAsB,GAAG;AACtD,QAAM,KAAK,IAAI,UAAU,QAAQ,IAAI;AACrC,QAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAC3B,QAAM,SAAS,OAAO,YAAY,IAAI,YAAY;AAClD,QAAM,QAAQ,mBAAmB,MAAM,MAAM;AAC7C,QAAM,KAAK,MAAM,EAAE;AAEnB,QAAM,YAAY,MAAM,SACpB,MAAM,6BAA6B;AAAA,IACjC;AAAA,IACA,OAAO,MAAM;AAAA,IACb,UAAU,MAAM,YAAY;AAAA,IAC5B,gBAAgB,MAAM;AAAA,EACxB,CAAC,IACD;AAEJ,QAAM,iBAAiB,MAAM;AAC3B,QAAI,IAAS,GACV,WAAW,eAAe,EAC1B,MAAM,eAAe,KAAK,MAAM,QAAQ,EACxC,MAAM,gBAAgB,MAAM,IAAI;AAEnC,QAAI,MAAM,gBAAgB;AACxB,UAAI,EAAE,MAAM,qBAAqB,KAAK,MAAM,cAAc;AAAA,IAC5D,OAAO;AACL,UAAI,EAAE,MAAM,qBAAqB,MAAM,IAAI;AAAA,IAC7C;AAEA,UAAM,gBAAgB,MAAM;AAC1B,UAAI,EAAE,SAAS,2BAA2B,CAAC,OAAY,GACpD,MAAM,QAAQ,KAAK,cAAc,EACjC,GAAG,uBAAuB,KAAK,MAAM,MAAM,CAAC;AAAA,IACjD;AAEA,YAAQ,MAAM,QAAQ;AAAA,MACpB,KAAK;AACH,sBAAc;AACd,YAAI,EACD,MAAM,gBAAgB,UAAU,IAAI,EACpC,MAAM,gBAAgB,MAAM,IAAI,EAChC,MAAM,iBAAiB,MAAM,IAAI,EACjC,MAAM,cAAc,KAAK,KAAK;AACjC;AAAA,MACF,KAAK;AACH,sBAAc;AACd,YAAI,EACD,MAAM,gBAAgB,UAAU,IAAI,EACpC,MAAM,gBAAgB,MAAM,IAAI,EAChC,MAAM,iBAAiB,UAAU,IAAI;AACxC;AAAA,MACF,KAAK;AACH,YAAI,EACD,MAAM,oBAAoB,KAAK,MAAM,MAAM,EAC3C,MAAM,cAAc,KAAK,KAAK;AACjC,sBAAc;AACd;AAAA,MACF,KAAK;AACH,YAAI,EACD,MAAM,oBAAoB,KAAK,MAAM,MAAM,EAC3C,MAAM,cAAc,KAAK,IAAI;AAChC,sBAAc;AACd;AAAA,MACF,KAAK;AACH,sBAAc;AACd,YAAI,EAAE,MAAM,CAAC,OAAY,GAAG,GAAG;AAAA,UAC7B,GAAG,oBAAoB,KAAK,MAAM,MAAM;AAAA,UACxC,GAAG,gBAAgB,UAAU,IAAI;AAAA,QACnC,CAAC,CAAC;AACF;AAAA,MACF,SAAS;AACP,cAAM,oBAA2B,MAAM;AACvC,cAAM,IAAI,MAAM,uBAAuB,OAAO,iBAAiB,CAAC,EAAE;AAAA,MACpE;AAAA,IACF;AAEA,QAAI,MAAM,OAAQ,KAAI,EAAE,MAAM,YAAY,KAAK,MAAM,MAAM;AAC3D,QAAI,MAAM,KAAM,KAAI,EAAE,MAAM,UAAU,KAAK,MAAM,IAAI;AACrD,QAAI,MAAM,WAAY,KAAI,EAAE,MAAM,gBAAgB,KAAK,MAAM,UAAU;AACvE,QAAI,MAAM,iBAAkB,KAAI,EAAE,MAAM,wBAAwB,KAAK,MAAM,gBAAgB;AAC3F,QAAI,MAAM,eAAgB,KAAI,EAAE,MAAM,sBAAsB,KAAK,MAAM,cAAc;AACrF,QAAI,MAAM,cAAe,KAAI,EAAE,MAAM,yBAAyB,KAAK,cAAc,MAAM,aAAa,CAAC;AACrG,QAAI,MAAM,SAAU,KAAI,EAAE,MAAM,oBAAoB,KAAK,MAAM,QAAQ;AAEvE,QAAI,MAAM,QAAQ;AAChB,UAAI,CAAC,aAAa,UAAU,WAAW,GAAG;AACxC,YAAI,EAAE,MAAM,QAAQ,KAAK,WAAW;AAAA,MACtC,OAAO;AACL,YAAI,EAAE,MAAM,QAAQ,MAAM,SAAS;AAAA,MACrC;AAAA,IACF;AAEA,QAAI,MAAM,MAAO,KAAI,EAAE,MAAM,aAAa,KAAK,IAAI,KAAK,MAAM,KAAK,CAAC;AAEpE,QAAI,MAAM,eAAe,QAAW;AAClC,YAAM,WAAW,CAAC,OAAY,GAAG;AAAA,QAC/B,GAAG,WAAW,iBAAiB,EAC5B,OAAO,OAAe,GAAG,KAAK,CAAC,EAC/B,SAAS,8BAA8B,KAAK,MAAM;AAAA,MACvD;AACA,YAAM,cAAc,CAAC,OAAY,GAAG,IAAI,GAAG;AAAA,QACzC,GAAG,WAAW,iBAAiB,EAC5B,OAAO,OAAe,GAAG,KAAK,CAAC,EAC/B,SAAS,8BAA8B,KAAK,MAAM;AAAA,MACvD,CAAC;AACD,UAAI,MAAM,aAAa,EAAE,MAAM,QAAQ,IAAI,EAAE,MAAM,WAAW;AAAA,IAChE;AAEA,QAAI,MAAM,mBAAmB,QAAW;AACtC,YAAM,WAAW,CAAC,OAAY,GAAG;AAAA,QAC/B,GAAG,WAAW,aAAa,EACxB,OAAO,OAAe,GAAG,KAAK,CAAC,EAC/B,MAAM,yBAAyB,KAAK,4BAA4B,EAChE,MAAM,uCAAgD;AAAA,MAC3D;AACA,YAAM,cAAc,CAAC,OAAY,GAAG,IAAI,GAAG;AAAA,QACzC,GAAG,WAAW,aAAa,EACxB,OAAO,OAAe,GAAG,KAAK,CAAC,EAC/B,MAAM,yBAAyB,KAAK,4BAA4B,EAChE,MAAM,uCAAgD;AAAA,MAC3D,CAAC;AACD,UAAI,MAAM,iBAAiB,EAAE,MAAM,QAAQ,IAAI,EAAE,MAAM,WAAW;AAAA,IACpE;AAEA,QAAI,MAAM,eAAe,QAAW;AAClC,UAAI,MAAM,aACN,EAAE,MAAM,iBAAiB,UAAU,IAAI,IACvC,EAAE,MAAM,iBAAiB,MAAM,IAAI;AAAA,IACzC;AAEA,WAAO;AAAA,EACT;AAEA,QAAM,cAAc,MAAM,eAAe,EACtC,OAAO,cAAsB,GAAG,OAAO,CAAC,EACxC,iBAAiB;AACpB,QAAM,QAAQ,OAAO,aAAa,SAAS,CAAC;AAE5C,QAAM,UAAU,MAAM,OAAO,KAAK,MAAM;AACxC,QAAM,YAAY,MAAM,eAAe,EACpC,OAAO;AAAA,IACN;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,CAAC,EACA,QAAQ,aAAa,MAAM,EAC3B,OAAO,MAAM,EACb,MAAM,MAAM,QAAQ,EACpB,QAAQ;AAEX,QAAM,YAAY;AAClB,QAAM,aAAa,UAAU,IAAI,CAAC,QAAQ,IAAI,EAAE;AAEhD,QAAM,kBAAkB,WAAW,SAAS,IACxC,MAAM;AAAA,IACJ;AAAA,IACA;AAAA,IACA,EAAE,IAAI,EAAE,KAAK,WAAW,EAAE;AAAA,IAC1B;AAAA,IACA,EAAE,UAAU,MAAM,UAAU,gBAAgB,MAAM,eAAe;AAAA,EACnE,IACA,CAAC;AAEL,QAAM,eAAe,oBAAI,IAAqB;AAC9C,aAAW,WAAW,iBAAiB;AACrC,iBAAa,IAAI,QAAQ,IAAI,OAAO;AAAA,EACtC;AAEA,QAAM,UAAU,WAAW,SAAS,IAChC,MAAM,GAAG,KAAK,eAAe,EAAE,WAAW,EAAE,KAAK,WAAW,EAAE,CAAC,IAC/D,CAAC;AAEL,QAAM,mBAAmB,QAAQ,OAAO,CAAC,KAAK,QAAQ;AACpD,QAAI,CAAC,IAAI,IAAI,SAAS,EAAG,KAAI,IAAI,SAAS,IAAI,CAAC;AAC/C,QAAI,IAAI,SAAS,EAAE,KAAK,GAAG;AAC3B,WAAO;AAAA,EACT,GAAG,CAAC,CAAoC;AAExC,QAAM,mBAAyC,WAAW,SAAS,IAC/D,MAAO,MAAM,EAAE,EACZ,WAAW,aAAa,EACxB,OAAO,CAAC,aAAa,cAAsB,GAAG,OAAO,CAAC,CAAC,EACvD,MAAM,aAAa,KAAK,4BAA4B,EACpD,MAAM,aAAa,MAAM,UAAU,EACnC,QAAQ,WAAW,EACnB,QAAQ,IACX,CAAC;AAEL,QAAM,2BAA2B,iBAAiB,OAAO,CAAC,KAA6B,QAAQ;AAC7F,QAAI,IAAI,SAAS,IAAI,OAAO,IAAI,KAAK;AACrC,WAAO;AAAA,EACT,GAAG,CAAC,CAAC;AAEL,QAAM,kBAAuC,WAAW,SAAS,IAC7D,MAAO,MAAM,EAAE,EACZ,WAAW,oBAAoB,EAC/B,OAAO,CAAC,cAAc,cAAsB,GAAG,OAAO,CAAC,CAAC,EACxD,MAAM,cAAc,MAAM,UAAU,EACpC,MAAM,cAAc,MAAM,IAAI,EAC9B,QAAQ,YAAY,EACpB,QAAQ,IACX,CAAC;AAEL,QAAM,0BAA0B,gBAAgB,OAAO,CAAC,KAA6B,QAAQ;AAC3F,QAAI,IAAI,UAAU,IAAI,OAAO,IAAI,KAAK;AACtC,WAAO;AAAA,EACT,GAAG,CAAC,CAAC;AAEL,QAAM,gBAAgB,MAAM,KAAK,IAAI,IAAI,UAAU,IAAI,CAAC,QAAQ,IAAI,cAAc,EAAE,OAAO,OAAO,CAAC,CAAC;AACpG,QAAM,cAAc,cAAc,SAAS,IACvC,MAAM;AAAA,IACJ;AAAA,IACA;AAAA,IACA,EAAE,IAAI,EAAE,KAAK,cAAc,EAAE;AAAA,IAC7B;AAAA,IACA,EAAE,UAAU,MAAM,UAAU,gBAAgB,MAAM,eAAe;AAAA,EACnE,IACA,CAAC;AAEL,QAAM,iBAAiB,oBAAI,IAA2D;AACtF,cAAY,QAAQ,CAAC,SAAS;AAC5B,UAAM,OAAO,OAAO,KAAK,SAAS,YAAY,KAAK,KAAK,KAAK,EAAE,SAAS,KAAK,KAAK,KAAK,IAAI;AAC3F,mBAAe,IAAI,KAAK,IAAI,EAAE,MAAM,OAAO,KAAK,SAAS,KAAK,CAAC;AAAA,EACjE,CAAC;AAED,SAAO,SAAS,KAAK;AAAA,IACnB,OAAO,UACJ,IAAI,CAAC,QAAQ;AACZ,YAAM,UAAU,aAAa,IAAI,IAAI,EAAE;AACvC,UAAI,CAAC,QAAS,QAAO;AACrB,YAAM,OAAO,OAAO,QAAQ,SAAS,WAAW,QAAQ,OAAO;AAC/D,YAAM,cAAc,KAAK,UAAU,GAAG,GAAG,KAAK,KAAK,SAAS,MAAM,QAAQ;AAC1E,YAAM,aAAa,QAAQ,cAAc;AACzC,aAAO;AAAA,QACL,GAAI,eAAe,IAAI,IAAI,cAAc,IACrC;AAAA,UACE,YAAY,eAAe,IAAI,IAAI,cAAc,GAAG,QAAQ;AAAA,UAC5D,aAAa,eAAe,IAAI,IAAI,cAAc,GAAG,SAAS;AAAA,QAChE,IACA,EAAE,YAAY,MAAM,aAAa,KAAK;AAAA,QAC1C,IAAI,QAAQ;AAAA,QACZ,MAAM,QAAQ;AAAA,QACd,YAAY,QAAQ,cAAc;AAAA,QAClC,kBAAkB,QAAQ,oBAAoB;AAAA,QAC9C,gBAAgB,QAAQ,kBAAkB;AAAA,QAC1C,eAAe,QAAQ,iBAAiB;AAAA,QACxC,cAAc,QAAQ,gBAAgB;AAAA,QACtC,SAAS,QAAQ;AAAA,QACjB;AAAA,QACA,cAAc,QAAQ;AAAA,QACtB,UAAU,QAAQ;AAAA,QAClB,QAAQ,IAAI,qBAAqB,IAAI,WAAW,UAAU;AAAA,QAC1D,aAAa,iBAAiB,QAAQ,EAAE,KAAK,CAAC,GAAG,SAAS;AAAA,QAC1D,cAAc,iBAAiB,QAAQ,EAAE,KAAK,CAAC,GAAG;AAAA,QAClD,iBAAiB,yBAAyB,QAAQ,EAAE,KAAK,KAAK;AAAA,QAC9D,iBAAiB,yBAAyB,QAAQ,EAAE,KAAK;AAAA,QACzD,gBAAgB,wBAAwB,QAAQ,EAAE,KAAK;AAAA,QACvD,YACE,QAAQ,YAAY,SAAS,MAAM,KAChC,QAAQ,eAAe,QAAQ,IAAI,GAAG,gBAAgB,MAAM,MAC3D,iBAAiB,QAAQ,EAAE,KAAK,CAAC,GAAG,KAAK,CAAC,SAAS,KAAK,kBAAkB,QAAQ,KAAK,UAAU,CAAC;AAAA,QACxG,aAAa,QAAQ,eAAe;AAAA,QACpC,QAAQ,QAAQ,SAAS,QAAQ,OAAO,YAAY,IAAI;AAAA,QACxD,QAAQ,IAAI;AAAA,QACZ,UAAU,QAAQ,YAAY;AAAA,MAChC;AAAA,IACF,CAAC,EACA,OAAO,CAAC,SAA2C,SAAS,IAAI;AAAA,IACnE,MAAM,MAAM;AAAA,IACZ,UAAU,MAAM;AAAA,IAChB;AAAA,IACA,YAAY,KAAK,KAAK,QAAQ,MAAM,QAAQ;AAAA,EAC9C,CAAC;AACH;AAEA,eAAsB,KAAK,KAAc;AACvC,QAAM,EAAE,KAAK,MAAM,IAAI,MAAM,sBAAsB,GAAG;AACtD,QAAM,aAAa,IAAI,UAAU,QAAQ,YAAY;AACrD,QAAM,OAAO,MAAM,IAAI,KAAK,EAAE,MAAM,OAAO,CAAC,EAAE;AAC9C,QAAM,QAAQ,qBAAqB,MAAM,IAAI;AAE7C,QAAM,qBAAqB,MAAM,eAAe;AAChD,QAAM,eAAe,qBAAqB,OAAO,MAAM;AACvD,MAAI,gBAAgB,CAAE,MAAM,0BAA0B,KAAK,KAAK,GAAI;AAClE,WAAO,SAAS,KAAK,EAAE,OAAO,kCAAkC,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACpF;AAEA,MAAI,MAAM,SAAS,QAAQ;AACzB,UAAM,wBAAwB,8BAA8B,MAAM,MAAM,MAAM,OAAO;AACrF,QAAI,uBAAuB;AACzB,aAAO,SAAS,KAAK,EAAE,OAAO,sBAAsB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACxE;AAAA,EACF;AAEA,QAAM,EAAE,QAAQ,SAAS,IAAI,MAAM,WAAW,QAAQ,6BAA6B;AAAA,IACjF,OAAO;AAAA,MACL,GAAG;AAAA,MACH;AAAA,MACA,UAAU,MAAM;AAAA,MAChB,gBAAgB,MAAM;AAAA,MACtB,QAAQ,MAAM;AAAA,IAChB;AAAA,IACA,KAAK;AAAA,MACH,WAAW,IAAI;AAAA,MACf,MAAM,IAAI,QAAQ;AAAA,MAClB,mBAAmB;AAAA,MACnB,wBAAwB,MAAM;AAAA,MAC9B,iBAAiB,MAAM,iBAAiB,CAAC,MAAM,cAAc,IAAI;AAAA,MACjE,SAAS;AAAA,IACX;AAAA,EACF,CAAC;AACD,QAAM,EAAE,IAAI,WAAW,UAAU,iBAAiB,IAAI;AAEtD,QAAM,WAAW,SAAS,KAAK,EAAE,IAAI,WAAW,UAAU,iBAAiB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAC7F,gCAA8B,UAAU,UAAU;AAAA,IAChD,cAAc;AAAA,IACd,YAAY;AAAA,EACd,CAAC;AACD,SAAO;AACT;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,OAAO;AAAA,MACP,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO;AAAA,YACf,OAAO,EAAE,MAAM,qBAAqB;AAAA,YACpC,MAAM,EAAE,OAAO;AAAA,YACf,UAAU,EAAE,OAAO;AAAA,YACnB,OAAO,EAAE,OAAO;AAAA,YAChB,YAAY,EAAE,OAAO;AAAA,UACvB,CAAC;AAAA,QACH;AAAA,MACF;AAAA,IACF;AAAA,IACA,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aAAa;AAAA,QACX,QAAQ;AAAA,MACV;AAAA,MACA,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;",
+  "sourcesContent": ["import { z } from 'zod'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { type Kysely, sql } from 'kysely'\nimport type { CommandBus } from '@open-mercato/shared/lib/commands/command-bus'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi/types'\nimport { findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { lookupHashCandidates } from '@open-mercato/shared/lib/encryption/aes'\nimport { User } from '../../auth/data/entities'\nimport { Message, MessageObject } from '../data/entities'\nimport { composeMessageSchema, listMessagesSchema } from '../data/validators'\nimport { MESSAGE_ATTACHMENT_ENTITY_ID } from '../lib/constants'\nimport { getMessageType } from '../lib/message-types-registry'\nimport { validateMessageObjectsForType } from '../lib/object-validation'\nimport { attachOperationMetadataHeader } from '../lib/operationMetadata'\nimport { canUseMessageEmailFeature, resolveMessageContext } from '../lib/routeHelpers'\nimport { findMessageIdsBySearchTokens } from '../lib/searchLookup'\nimport { MessageCommandExecuteResult } from '../commands/shared'\nimport {\n  composeMessageSchema as composeSchema,\n  composeResponseSchema,\n  listMessagesSchema as listSchema,\n  messageListItemSchema,\n} from './openapi'\n\ntype MessageCommandExecuteResultWithThreadId = MessageCommandExecuteResult & {\n  threadId: string\n}\n\nconst NO_MATCH_ID = '00000000-0000-0000-0000-000000000000'\n\nfunction getDb(em: EntityManager): Kysely<any> {\n  return em.getKysely<any>()\n}\n\ntype MessageListScopeRow = {\n  id: string\n  sender_user_id: string\n  is_draft: boolean\n  recipient_status: string | null\n  read_at: string | null\n}\n\ntype AttachmentCountRow = {\n  record_id: string\n  count: string | number\n}\n\ntype RecipientCountRow = {\n  message_id: string\n  count: string | number\n}\n\nexport const metadata = {\n  GET: { requireAuth: true },\n  POST: { requireAuth: true, requireFeatures: ['messages.compose'] },\n}\n\nexport async function GET(req: Request) {\n  const { ctx, scope } = await resolveMessageContext(req)\n  const em = ctx.container.resolve('em') as EntityManager\n  const url = new URL(req.url)\n  const params = Object.fromEntries(url.searchParams)\n  const input = listMessagesSchema.parse(params)\n  const db = getDb(em) as any\n\n  const searchIds = input.search\n    ? await findMessageIdsBySearchTokens({\n        em,\n        query: input.search,\n        tenantId: scope.tenantId ?? null,\n        organizationId: scope.organizationId,\n      })\n    : undefined\n\n  const buildBaseQuery = () => {\n    let q: any = db\n      .selectFrom('messages as m')\n      .where('m.tenant_id', '=', scope.tenantId)\n      .where('m.deleted_at', 'is', null)\n\n    if (scope.organizationId) {\n      q = q.where('m.organization_id', '=', scope.organizationId)\n    } else {\n      q = q.where('m.organization_id', 'is', null)\n    }\n\n    const joinRecipient = () => {\n      q = q.leftJoin('message_recipients as r', (jb: any) => jb\n        .onRef('m.id', '=', 'r.message_id')\n        .on('r.recipient_user_id', '=', scope.userId))\n    }\n\n    switch (input.folder) {\n      case 'inbox':\n        joinRecipient()\n        q = q\n          .where('r.message_id', 'is not', null)\n          .where('r.deleted_at', 'is', null)\n          .where('r.archived_at', 'is', null)\n          .where('m.is_draft', '=', false)\n        break\n      case 'archived':\n        joinRecipient()\n        q = q\n          .where('r.message_id', 'is not', null)\n          .where('r.deleted_at', 'is', null)\n          .where('r.archived_at', 'is not', null)\n        break\n      case 'sent':\n        q = q\n          .where('m.sender_user_id', '=', scope.userId)\n          .where('m.is_draft', '=', false)\n        joinRecipient()\n        break\n      case 'drafts':\n        q = q\n          .where('m.sender_user_id', '=', scope.userId)\n          .where('m.is_draft', '=', true)\n        joinRecipient()\n        break\n      case 'all':\n        joinRecipient()\n        q = q.where((eb: any) => eb.or([\n          eb('m.sender_user_id', '=', scope.userId),\n          eb('r.message_id', 'is not', null),\n        ]))\n        break\n      default: {\n        const unsupportedFolder: never = input.folder\n        throw new Error(`Unsupported folder: ${String(unsupportedFolder)}`)\n      }\n    }\n\n    if (input.status) q = q.where('r.status', '=', input.status)\n    if (input.type) q = q.where('m.type', '=', input.type)\n    if (input.visibility) q = q.where('m.visibility', '=', input.visibility)\n    if (input.sourceEntityType) q = q.where('m.source_entity_type', '=', input.sourceEntityType)\n    if (input.sourceEntityId) q = q.where('m.source_entity_id', '=', input.sourceEntityId)\n    if (input.externalEmail) q = q.where('m.external_email_hash', 'in', lookupHashCandidates(input.externalEmail))\n    if (input.senderId) q = q.where('m.sender_user_id', '=', input.senderId)\n\n    if (input.search) {\n      if (!searchIds || searchIds.length === 0) {\n        q = q.where('m.id', '=', NO_MATCH_ID)\n      } else {\n        q = q.where('m.id', 'in', searchIds)\n      }\n    }\n\n    if (input.since) q = q.where('m.sent_at', '>', new Date(input.since))\n\n    if (input.hasObjects !== undefined) {\n      const existsFn = (eb: any) => eb.exists(\n        eb.selectFrom('message_objects')\n          .select(sql<number>`1`.as('one'))\n          .whereRef('message_objects.message_id', '=', 'm.id')\n      )\n      const notExistsFn = (eb: any) => eb.not(eb.exists(\n        eb.selectFrom('message_objects')\n          .select(sql<number>`1`.as('one'))\n          .whereRef('message_objects.message_id', '=', 'm.id')\n      ))\n      q = input.hasObjects ? q.where(existsFn) : q.where(notExistsFn)\n    }\n\n    if (input.hasAttachments !== undefined) {\n      const existsFn = (eb: any) => eb.exists(\n        eb.selectFrom('attachments')\n          .select(sql<number>`1`.as('one'))\n          .where('attachments.entity_id', '=', MESSAGE_ATTACHMENT_ENTITY_ID)\n          .where(sql<boolean>`attachments.record_id = m.id::text`)\n      )\n      const notExistsFn = (eb: any) => eb.not(eb.exists(\n        eb.selectFrom('attachments')\n          .select(sql<number>`1`.as('one'))\n          .where('attachments.entity_id', '=', MESSAGE_ATTACHMENT_ENTITY_ID)\n          .where(sql<boolean>`attachments.record_id = m.id::text`)\n      ))\n      q = input.hasAttachments ? q.where(existsFn) : q.where(notExistsFn)\n    }\n\n    if (input.hasActions !== undefined) {\n      q = input.hasActions\n        ? q.where('m.action_data', 'is not', null)\n        : q.where('m.action_data', 'is', null)\n    }\n\n    return q\n  }\n\n  const countResult = await buildBaseQuery()\n    .select(sql<number>`count(*)`.as('count'))\n    .executeTakeFirst() as { count: string | number } | undefined\n  const total = Number(countResult?.count ?? 0)\n\n  const offset = (input.page - 1) * input.pageSize\n  const scopeRows = await buildBaseQuery()\n    .select([\n      'm.id',\n      'm.sender_user_id',\n      'm.is_draft',\n      'r.status as recipient_status',\n      'r.read_at',\n    ])\n    .orderBy('m.sent_at', 'desc')\n    .offset(offset)\n    .limit(input.pageSize)\n    .execute()\n\n  const typedRows = scopeRows as MessageListScopeRow[]\n  const messageIds = typedRows.map((row) => row.id)\n\n  const messageEntities = messageIds.length > 0\n    ? await findWithDecryption(\n        em,\n        Message,\n        { id: { $in: messageIds } },\n        undefined,\n        { tenantId: scope.tenantId, organizationId: scope.organizationId }\n      )\n    : []\n\n  const messagesById = new Map<string, Message>()\n  for (const message of messageEntities) {\n    messagesById.set(message.id, message)\n  }\n\n  const objects = messageIds.length > 0\n    ? await em.find(MessageObject, { messageId: { $in: messageIds } })\n    : []\n\n  const objectsByMessage = objects.reduce((acc, obj) => {\n    if (!acc[obj.messageId]) acc[obj.messageId] = []\n    acc[obj.messageId].push(obj)\n    return acc\n  }, {} as Record<string, MessageObject[]>)\n\n  const attachmentCounts: AttachmentCountRow[] = messageIds.length > 0\n    ? await (getDb(em) as any)\n        .selectFrom('attachments')\n        .select(['record_id', sql<string>`count(*)`.as('count')])\n        .where('entity_id', '=', MESSAGE_ATTACHMENT_ENTITY_ID)\n        .where('record_id', 'in', messageIds)\n        .groupBy('record_id')\n        .execute()\n    : []\n\n  const attachmentCountByMessage = attachmentCounts.reduce((acc: Record<string, number>, row) => {\n    acc[row.record_id] = Number(row.count)\n    return acc\n  }, {})\n\n  const recipientCounts: RecipientCountRow[] = messageIds.length > 0\n    ? await (getDb(em) as any)\n        .selectFrom('message_recipients')\n        .select(['message_id', sql<string>`count(*)`.as('count')])\n        .where('message_id', 'in', messageIds)\n        .where('deleted_at', 'is', null)\n        .groupBy('message_id')\n        .execute()\n    : []\n\n  const recipientCountByMessage = recipientCounts.reduce((acc: Record<string, number>, row) => {\n    acc[row.message_id] = Number(row.count)\n    return acc\n  }, {})\n\n  const senderUserIds = Array.from(new Set(typedRows.map((row) => row.sender_user_id).filter(Boolean)))\n  const senderUsers = senderUserIds.length > 0\n    ? await findWithDecryption(\n        em,\n        User,\n        { id: { $in: senderUserIds } },\n        undefined,\n        { tenantId: scope.tenantId, organizationId: scope.organizationId }\n      )\n    : []\n\n  const senderMetaById = new Map<string, { name: string | null; email: string | null }>()\n  senderUsers.forEach((user) => {\n    const name = typeof user.name === 'string' && user.name.trim().length ? user.name.trim() : null\n    senderMetaById.set(user.id, { name, email: user.email ?? null })\n  })\n\n  return Response.json({\n    items: typedRows\n      .map((row) => {\n        const message = messagesById.get(row.id)\n        if (!message) return null\n        const body = typeof message.body === 'string' ? message.body : ''\n        const bodyPreview = body.substring(0, 150) + (body.length > 150 ? '...' : '')\n        const actionData = message.actionData ?? null\n        return {\n          ...(senderMetaById.get(row.sender_user_id)\n            ? {\n                senderName: senderMetaById.get(row.sender_user_id)?.name ?? null,\n                senderEmail: senderMetaById.get(row.sender_user_id)?.email ?? null,\n              }\n            : { senderName: null, senderEmail: null }),\n          id: message.id,\n          type: message.type,\n          visibility: message.visibility ?? null,\n          sourceEntityType: message.sourceEntityType ?? null,\n          sourceEntityId: message.sourceEntityId ?? null,\n          externalEmail: message.externalEmail ?? null,\n          externalName: message.externalName ?? null,\n          subject: message.subject,\n          bodyPreview,\n          senderUserId: message.senderUserId,\n          priority: message.priority,\n          status: row.recipient_status ?? (row.is_draft ? 'draft' : 'sent'),\n          hasObjects: (objectsByMessage[message.id] || []).length > 0,\n          objectCount: (objectsByMessage[message.id] || []).length,\n          hasAttachments: (attachmentCountByMessage[message.id] || 0) > 0,\n          attachmentCount: attachmentCountByMessage[message.id] || 0,\n          recipientCount: recipientCountByMessage[message.id] || 0,\n          hasActions:\n            Boolean(actionData?.actions?.length)\n            || Boolean(getMessageType(message.type)?.defaultActions?.length)\n            || (objectsByMessage[message.id] || []).some((item) => item.actionRequired && Boolean(item.actionType)),\n          actionTaken: message.actionTaken ?? null,\n          sentAt: message.sentAt ? message.sentAt.toISOString() : null,\n          readAt: row.read_at,\n          threadId: message.threadId ?? null,\n        }\n      })\n      .filter((item): item is NonNullable<typeof item> => item !== null),\n    page: input.page,\n    pageSize: input.pageSize,\n    total,\n    totalPages: Math.ceil(total / input.pageSize),\n  })\n}\n\nexport async function POST(req: Request) {\n  const { ctx, scope } = await resolveMessageContext(req)\n  const commandBus = ctx.container.resolve('commandBus') as CommandBus\n  const body = await req.json().catch(() => ({}))\n  const input = composeMessageSchema.parse(body)\n\n  const isPublicVisibility = input.visibility === 'public'\n  const sendViaEmail = isPublicVisibility ? true : input.sendViaEmail\n  if (sendViaEmail && !(await canUseMessageEmailFeature(ctx, scope))) {\n    return Response.json({ error: 'Missing feature: messages.email' }, { status: 403 })\n  }\n\n  if (input.objects?.length) {\n    const objectValidationError = validateMessageObjectsForType(input.type, input.objects)\n    if (objectValidationError) {\n      return Response.json({ error: objectValidationError }, { status: 400 })\n    }\n  }\n\n  const { result, logEntry } = await commandBus.execute('messages.messages.compose', {\n    input: {\n      ...input,\n      sendViaEmail,\n      tenantId: scope.tenantId,\n      organizationId: scope.organizationId,\n      userId: scope.userId,\n    },\n    ctx: {\n      container: ctx.container,\n      auth: ctx.auth ?? null,\n      organizationScope: null,\n      selectedOrganizationId: scope.organizationId,\n      organizationIds: scope.organizationId ? [scope.organizationId] : null,\n      request: req,\n    },\n  })\n  const { id: messageId, threadId: responseThreadId } = result as unknown as MessageCommandExecuteResultWithThreadId\n\n  const response = Response.json({ id: messageId, threadId: responseThreadId }, { status: 201 })\n  attachOperationMetadataHeader(response, logEntry, {\n    resourceKind: 'messages.message',\n    resourceId: messageId,\n  })\n  return response\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Messages',\n  methods: {\n    GET: {\n      summary: 'List messages',\n      query: listSchema,\n      responses: [\n        {\n          status: 200,\n          description: 'Message list',\n          schema: z.object({\n            items: z.array(messageListItemSchema),\n            page: z.number(),\n            pageSize: z.number(),\n            total: z.number(),\n            totalPages: z.number(),\n          }),\n        },\n      ],\n    },\n    POST: {\n      summary: 'Compose a message',\n      requestBody: {\n        schema: composeSchema,\n      },\n      responses: [\n        {\n          status: 201,\n          description: 'Message created',\n          schema: composeResponseSchema,\n        },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,SAAS;AAElB,SAAsB,WAAW;AAGjC,SAAS,0BAA0B;AACnC,SAAS,4BAA4B;AACrC,SAAS,YAAY;AACrB,SAAS,SAAS,qBAAqB;AACvC,SAAS,sBAAsB,0BAA0B;AACzD,SAAS,oCAAoC;AAC7C,SAAS,sBAAsB;AAC/B,SAAS,qCAAqC;AAC9C,SAAS,qCAAqC;AAC9C,SAAS,2BAA2B,6BAA6B;AACjE,SAAS,oCAAoC;AAE7C;AAAA,EACE,wBAAwB;AAAA,EACxB;AAAA,EACA,sBAAsB;AAAA,EACtB;AAAA,OACK;AAMP,MAAM,cAAc;AAEpB,SAAS,MAAM,IAAgC;AAC7C,SAAO,GAAG,UAAe;AAC3B;AAoBO,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,KAAK;AAAA,EACzB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,kBAAkB,EAAE;AACnE;AAEA,eAAsB,IAAI,KAAc;AACtC,QAAM,EAAE,KAAK,MAAM,IAAI,MAAM,sBAAsB,GAAG;AACtD,QAAM,KAAK,IAAI,UAAU,QAAQ,IAAI;AACrC,QAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAC3B,QAAM,SAAS,OAAO,YAAY,IAAI,YAAY;AAClD,QAAM,QAAQ,mBAAmB,MAAM,MAAM;AAC7C,QAAM,KAAK,MAAM,EAAE;AAEnB,QAAM,YAAY,MAAM,SACpB,MAAM,6BAA6B;AAAA,IACjC;AAAA,IACA,OAAO,MAAM;AAAA,IACb,UAAU,MAAM,YAAY;AAAA,IAC5B,gBAAgB,MAAM;AAAA,EACxB,CAAC,IACD;AAEJ,QAAM,iBAAiB,MAAM;AAC3B,QAAI,IAAS,GACV,WAAW,eAAe,EAC1B,MAAM,eAAe,KAAK,MAAM,QAAQ,EACxC,MAAM,gBAAgB,MAAM,IAAI;AAEnC,QAAI,MAAM,gBAAgB;AACxB,UAAI,EAAE,MAAM,qBAAqB,KAAK,MAAM,cAAc;AAAA,IAC5D,OAAO;AACL,UAAI,EAAE,MAAM,qBAAqB,MAAM,IAAI;AAAA,IAC7C;AAEA,UAAM,gBAAgB,MAAM;AAC1B,UAAI,EAAE,SAAS,2BAA2B,CAAC,OAAY,GACpD,MAAM,QAAQ,KAAK,cAAc,EACjC,GAAG,uBAAuB,KAAK,MAAM,MAAM,CAAC;AAAA,IACjD;AAEA,YAAQ,MAAM,QAAQ;AAAA,MACpB,KAAK;AACH,sBAAc;AACd,YAAI,EACD,MAAM,gBAAgB,UAAU,IAAI,EACpC,MAAM,gBAAgB,MAAM,IAAI,EAChC,MAAM,iBAAiB,MAAM,IAAI,EACjC,MAAM,cAAc,KAAK,KAAK;AACjC;AAAA,MACF,KAAK;AACH,sBAAc;AACd,YAAI,EACD,MAAM,gBAAgB,UAAU,IAAI,EACpC,MAAM,gBAAgB,MAAM,IAAI,EAChC,MAAM,iBAAiB,UAAU,IAAI;AACxC;AAAA,MACF,KAAK;AACH,YAAI,EACD,MAAM,oBAAoB,KAAK,MAAM,MAAM,EAC3C,MAAM,cAAc,KAAK,KAAK;AACjC,sBAAc;AACd;AAAA,MACF,KAAK;AACH,YAAI,EACD,MAAM,oBAAoB,KAAK,MAAM,MAAM,EAC3C,MAAM,cAAc,KAAK,IAAI;AAChC,sBAAc;AACd;AAAA,MACF,KAAK;AACH,sBAAc;AACd,YAAI,EAAE,MAAM,CAAC,OAAY,GAAG,GAAG;AAAA,UAC7B,GAAG,oBAAoB,KAAK,MAAM,MAAM;AAAA,UACxC,GAAG,gBAAgB,UAAU,IAAI;AAAA,QACnC,CAAC,CAAC;AACF;AAAA,MACF,SAAS;AACP,cAAM,oBAA2B,MAAM;AACvC,cAAM,IAAI,MAAM,uBAAuB,OAAO,iBAAiB,CAAC,EAAE;AAAA,MACpE;AAAA,IACF;AAEA,QAAI,MAAM,OAAQ,KAAI,EAAE,MAAM,YAAY,KAAK,MAAM,MAAM;AAC3D,QAAI,MAAM,KAAM,KAAI,EAAE,MAAM,UAAU,KAAK,MAAM,IAAI;AACrD,QAAI,MAAM,WAAY,KAAI,EAAE,MAAM,gBAAgB,KAAK,MAAM,UAAU;AACvE,QAAI,MAAM,iBAAkB,KAAI,EAAE,MAAM,wBAAwB,KAAK,MAAM,gBAAgB;AAC3F,QAAI,MAAM,eAAgB,KAAI,EAAE,MAAM,sBAAsB,KAAK,MAAM,cAAc;AACrF,QAAI,MAAM,cAAe,KAAI,EAAE,MAAM,yBAAyB,MAAM,qBAAqB,MAAM,aAAa,CAAC;AAC7G,QAAI,MAAM,SAAU,KAAI,EAAE,MAAM,oBAAoB,KAAK,MAAM,QAAQ;AAEvE,QAAI,MAAM,QAAQ;AAChB,UAAI,CAAC,aAAa,UAAU,WAAW,GAAG;AACxC,YAAI,EAAE,MAAM,QAAQ,KAAK,WAAW;AAAA,MACtC,OAAO;AACL,YAAI,EAAE,MAAM,QAAQ,MAAM,SAAS;AAAA,MACrC;AAAA,IACF;AAEA,QAAI,MAAM,MAAO,KAAI,EAAE,MAAM,aAAa,KAAK,IAAI,KAAK,MAAM,KAAK,CAAC;AAEpE,QAAI,MAAM,eAAe,QAAW;AAClC,YAAM,WAAW,CAAC,OAAY,GAAG;AAAA,QAC/B,GAAG,WAAW,iBAAiB,EAC5B,OAAO,OAAe,GAAG,KAAK,CAAC,EAC/B,SAAS,8BAA8B,KAAK,MAAM;AAAA,MACvD;AACA,YAAM,cAAc,CAAC,OAAY,GAAG,IAAI,GAAG;AAAA,QACzC,GAAG,WAAW,iBAAiB,EAC5B,OAAO,OAAe,GAAG,KAAK,CAAC,EAC/B,SAAS,8BAA8B,KAAK,MAAM;AAAA,MACvD,CAAC;AACD,UAAI,MAAM,aAAa,EAAE,MAAM,QAAQ,IAAI,EAAE,MAAM,WAAW;AAAA,IAChE;AAEA,QAAI,MAAM,mBAAmB,QAAW;AACtC,YAAM,WAAW,CAAC,OAAY,GAAG;AAAA,QAC/B,GAAG,WAAW,aAAa,EACxB,OAAO,OAAe,GAAG,KAAK,CAAC,EAC/B,MAAM,yBAAyB,KAAK,4BAA4B,EAChE,MAAM,uCAAgD;AAAA,MAC3D;AACA,YAAM,cAAc,CAAC,OAAY,GAAG,IAAI,GAAG;AAAA,QACzC,GAAG,WAAW,aAAa,EACxB,OAAO,OAAe,GAAG,KAAK,CAAC,EAC/B,MAAM,yBAAyB,KAAK,4BAA4B,EAChE,MAAM,uCAAgD;AAAA,MAC3D,CAAC;AACD,UAAI,MAAM,iBAAiB,EAAE,MAAM,QAAQ,IAAI,EAAE,MAAM,WAAW;AAAA,IACpE;AAEA,QAAI,MAAM,eAAe,QAAW;AAClC,UAAI,MAAM,aACN,EAAE,MAAM,iBAAiB,UAAU,IAAI,IACvC,EAAE,MAAM,iBAAiB,MAAM,IAAI;AAAA,IACzC;AAEA,WAAO;AAAA,EACT;AAEA,QAAM,cAAc,MAAM,eAAe,EACtC,OAAO,cAAsB,GAAG,OAAO,CAAC,EACxC,iBAAiB;AACpB,QAAM,QAAQ,OAAO,aAAa,SAAS,CAAC;AAE5C,QAAM,UAAU,MAAM,OAAO,KAAK,MAAM;AACxC,QAAM,YAAY,MAAM,eAAe,EACpC,OAAO;AAAA,IACN;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,CAAC,EACA,QAAQ,aAAa,MAAM,EAC3B,OAAO,MAAM,EACb,MAAM,MAAM,QAAQ,EACpB,QAAQ;AAEX,QAAM,YAAY;AAClB,QAAM,aAAa,UAAU,IAAI,CAAC,QAAQ,IAAI,EAAE;AAEhD,QAAM,kBAAkB,WAAW,SAAS,IACxC,MAAM;AAAA,IACJ;AAAA,IACA;AAAA,IACA,EAAE,IAAI,EAAE,KAAK,WAAW,EAAE;AAAA,IAC1B;AAAA,IACA,EAAE,UAAU,MAAM,UAAU,gBAAgB,MAAM,eAAe;AAAA,EACnE,IACA,CAAC;AAEL,QAAM,eAAe,oBAAI,IAAqB;AAC9C,aAAW,WAAW,iBAAiB;AACrC,iBAAa,IAAI,QAAQ,IAAI,OAAO;AAAA,EACtC;AAEA,QAAM,UAAU,WAAW,SAAS,IAChC,MAAM,GAAG,KAAK,eAAe,EAAE,WAAW,EAAE,KAAK,WAAW,EAAE,CAAC,IAC/D,CAAC;AAEL,QAAM,mBAAmB,QAAQ,OAAO,CAAC,KAAK,QAAQ;AACpD,QAAI,CAAC,IAAI,IAAI,SAAS,EAAG,KAAI,IAAI,SAAS,IAAI,CAAC;AAC/C,QAAI,IAAI,SAAS,EAAE,KAAK,GAAG;AAC3B,WAAO;AAAA,EACT,GAAG,CAAC,CAAoC;AAExC,QAAM,mBAAyC,WAAW,SAAS,IAC/D,MAAO,MAAM,EAAE,EACZ,WAAW,aAAa,EACxB,OAAO,CAAC,aAAa,cAAsB,GAAG,OAAO,CAAC,CAAC,EACvD,MAAM,aAAa,KAAK,4BAA4B,EACpD,MAAM,aAAa,MAAM,UAAU,EACnC,QAAQ,WAAW,EACnB,QAAQ,IACX,CAAC;AAEL,QAAM,2BAA2B,iBAAiB,OAAO,CAAC,KAA6B,QAAQ;AAC7F,QAAI,IAAI,SAAS,IAAI,OAAO,IAAI,KAAK;AACrC,WAAO;AAAA,EACT,GAAG,CAAC,CAAC;AAEL,QAAM,kBAAuC,WAAW,SAAS,IAC7D,MAAO,MAAM,EAAE,EACZ,WAAW,oBAAoB,EAC/B,OAAO,CAAC,cAAc,cAAsB,GAAG,OAAO,CAAC,CAAC,EACxD,MAAM,cAAc,MAAM,UAAU,EACpC,MAAM,cAAc,MAAM,IAAI,EAC9B,QAAQ,YAAY,EACpB,QAAQ,IACX,CAAC;AAEL,QAAM,0BAA0B,gBAAgB,OAAO,CAAC,KAA6B,QAAQ;AAC3F,QAAI,IAAI,UAAU,IAAI,OAAO,IAAI,KAAK;AACtC,WAAO;AAAA,EACT,GAAG,CAAC,CAAC;AAEL,QAAM,gBAAgB,MAAM,KAAK,IAAI,IAAI,UAAU,IAAI,CAAC,QAAQ,IAAI,cAAc,EAAE,OAAO,OAAO,CAAC,CAAC;AACpG,QAAM,cAAc,cAAc,SAAS,IACvC,MAAM;AAAA,IACJ;AAAA,IACA;AAAA,IACA,EAAE,IAAI,EAAE,KAAK,cAAc,EAAE;AAAA,IAC7B;AAAA,IACA,EAAE,UAAU,MAAM,UAAU,gBAAgB,MAAM,eAAe;AAAA,EACnE,IACA,CAAC;AAEL,QAAM,iBAAiB,oBAAI,IAA2D;AACtF,cAAY,QAAQ,CAAC,SAAS;AAC5B,UAAM,OAAO,OAAO,KAAK,SAAS,YAAY,KAAK,KAAK,KAAK,EAAE,SAAS,KAAK,KAAK,KAAK,IAAI;AAC3F,mBAAe,IAAI,KAAK,IAAI,EAAE,MAAM,OAAO,KAAK,SAAS,KAAK,CAAC;AAAA,EACjE,CAAC;AAED,SAAO,SAAS,KAAK;AAAA,IACnB,OAAO,UACJ,IAAI,CAAC,QAAQ;AACZ,YAAM,UAAU,aAAa,IAAI,IAAI,EAAE;AACvC,UAAI,CAAC,QAAS,QAAO;AACrB,YAAM,OAAO,OAAO,QAAQ,SAAS,WAAW,QAAQ,OAAO;AAC/D,YAAM,cAAc,KAAK,UAAU,GAAG,GAAG,KAAK,KAAK,SAAS,MAAM,QAAQ;AAC1E,YAAM,aAAa,QAAQ,cAAc;AACzC,aAAO;AAAA,QACL,GAAI,eAAe,IAAI,IAAI,cAAc,IACrC;AAAA,UACE,YAAY,eAAe,IAAI,IAAI,cAAc,GAAG,QAAQ;AAAA,UAC5D,aAAa,eAAe,IAAI,IAAI,cAAc,GAAG,SAAS;AAAA,QAChE,IACA,EAAE,YAAY,MAAM,aAAa,KAAK;AAAA,QAC1C,IAAI,QAAQ;AAAA,QACZ,MAAM,QAAQ;AAAA,QACd,YAAY,QAAQ,cAAc;AAAA,QAClC,kBAAkB,QAAQ,oBAAoB;AAAA,QAC9C,gBAAgB,QAAQ,kBAAkB;AAAA,QAC1C,eAAe,QAAQ,iBAAiB;AAAA,QACxC,cAAc,QAAQ,gBAAgB;AAAA,QACtC,SAAS,QAAQ;AAAA,QACjB;AAAA,QACA,cAAc,QAAQ;AAAA,QACtB,UAAU,QAAQ;AAAA,QAClB,QAAQ,IAAI,qBAAqB,IAAI,WAAW,UAAU;AAAA,QAC1D,aAAa,iBAAiB,QAAQ,EAAE,KAAK,CAAC,GAAG,SAAS;AAAA,QAC1D,cAAc,iBAAiB,QAAQ,EAAE,KAAK,CAAC,GAAG;AAAA,QAClD,iBAAiB,yBAAyB,QAAQ,EAAE,KAAK,KAAK;AAAA,QAC9D,iBAAiB,yBAAyB,QAAQ,EAAE,KAAK;AAAA,QACzD,gBAAgB,wBAAwB,QAAQ,EAAE,KAAK;AAAA,QACvD,YACE,QAAQ,YAAY,SAAS,MAAM,KAChC,QAAQ,eAAe,QAAQ,IAAI,GAAG,gBAAgB,MAAM,MAC3D,iBAAiB,QAAQ,EAAE,KAAK,CAAC,GAAG,KAAK,CAAC,SAAS,KAAK,kBAAkB,QAAQ,KAAK,UAAU,CAAC;AAAA,QACxG,aAAa,QAAQ,eAAe;AAAA,QACpC,QAAQ,QAAQ,SAAS,QAAQ,OAAO,YAAY,IAAI;AAAA,QACxD,QAAQ,IAAI;AAAA,QACZ,UAAU,QAAQ,YAAY;AAAA,MAChC;AAAA,IACF,CAAC,EACA,OAAO,CAAC,SAA2C,SAAS,IAAI;AAAA,IACnE,MAAM,MAAM;AAAA,IACZ,UAAU,MAAM;AAAA,IAChB;AAAA,IACA,YAAY,KAAK,KAAK,QAAQ,MAAM,QAAQ;AAAA,EAC9C,CAAC;AACH;AAEA,eAAsB,KAAK,KAAc;AACvC,QAAM,EAAE,KAAK,MAAM,IAAI,MAAM,sBAAsB,GAAG;AACtD,QAAM,aAAa,IAAI,UAAU,QAAQ,YAAY;AACrD,QAAM,OAAO,MAAM,IAAI,KAAK,EAAE,MAAM,OAAO,CAAC,EAAE;AAC9C,QAAM,QAAQ,qBAAqB,MAAM,IAAI;AAE7C,QAAM,qBAAqB,MAAM,eAAe;AAChD,QAAM,eAAe,qBAAqB,OAAO,MAAM;AACvD,MAAI,gBAAgB,CAAE,MAAM,0BAA0B,KAAK,KAAK,GAAI;AAClE,WAAO,SAAS,KAAK,EAAE,OAAO,kCAAkC,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACpF;AAEA,MAAI,MAAM,SAAS,QAAQ;AACzB,UAAM,wBAAwB,8BAA8B,MAAM,MAAM,MAAM,OAAO;AACrF,QAAI,uBAAuB;AACzB,aAAO,SAAS,KAAK,EAAE,OAAO,sBAAsB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACxE;AAAA,EACF;AAEA,QAAM,EAAE,QAAQ,SAAS,IAAI,MAAM,WAAW,QAAQ,6BAA6B;AAAA,IACjF,OAAO;AAAA,MACL,GAAG;AAAA,MACH;AAAA,MACA,UAAU,MAAM;AAAA,MAChB,gBAAgB,MAAM;AAAA,MACtB,QAAQ,MAAM;AAAA,IAChB;AAAA,IACA,KAAK;AAAA,MACH,WAAW,IAAI;AAAA,MACf,MAAM,IAAI,QAAQ;AAAA,MAClB,mBAAmB;AAAA,MACnB,wBAAwB,MAAM;AAAA,MAC9B,iBAAiB,MAAM,iBAAiB,CAAC,MAAM,cAAc,IAAI;AAAA,MACjE,SAAS;AAAA,IACX;AAAA,EACF,CAAC;AACD,QAAM,EAAE,IAAI,WAAW,UAAU,iBAAiB,IAAI;AAEtD,QAAM,WAAW,SAAS,KAAK,EAAE,IAAI,WAAW,UAAU,iBAAiB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAC7F,gCAA8B,UAAU,UAAU;AAAA,IAChD,cAAc;AAAA,IACd,YAAY;AAAA,EACd,CAAC;AACD,SAAO;AACT;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,OAAO;AAAA,MACP,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO;AAAA,YACf,OAAO,EAAE,MAAM,qBAAqB;AAAA,YACpC,MAAM,EAAE,OAAO;AAAA,YACf,UAAU,EAAE,OAAO;AAAA,YACnB,OAAO,EAAE,OAAO;AAAA,YAChB,YAAY,EAAE,OAAO;AAAA,UACvB,CAAC;AAAA,QACH;AAAA,MACF;AAAA,IACF;AAAA,IACA,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aAAa;AAAA,QACX,QAAQ;AAAA,MACV;AAAA,MACA,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/modules/messages/api/token/[token]/route.js

@@ -26,7 +26,7 @@ function responseForTokenError(error) {
 }
 async function resolveTokenAccess(em, token) {
   const hashedToken = hashAuthToken(token);
-  const accessToken = await findOneWithDecryption(em, MessageAccessToken, { token: hashedToken }) ?? await findOneWithDecryption(em, MessageAccessToken, { token });
+  const accessToken = await findOneWithDecryption(em, MessageAccessToken, { token: hashedToken });
   if (!accessToken) {
     throw new Error("Invalid or expired link");
   }

package/dist/modules/messages/api/token/[token]/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../src/modules/messages/api/token/%5Btoken%5D/route.ts"],
-  "sourcesContent": ["import type { CommandBus } from '@open-mercato/shared/lib/commands/command-bus'\nimport { getAuthFromRequest, type AuthContext } from '@open-mercato/shared/lib/auth/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi/types'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { findOneWithDecryption, findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { Message, MessageAccessToken, MessageObject, MessageRecipient } from '../../../data/entities'\nimport { MAX_TOKEN_USE_COUNT } from '../../../commands/tokens'\nimport { messageTokenResponseSchema } from '../../openapi'\nimport { hashAuthToken } from '../../../../auth/lib/tokenHash'\n\nexport const metadata = {\n  GET: { requireAuth: false },\n}\n\ntype TokenAccess = {\n  message: Message\n  recipientUserId: string\n}\n\nfunction responseForTokenError(error: unknown): Response | null {\n  if (!(error instanceof Error)) return null\n  if (error.message === 'Invalid or expired link') {\n    return Response.json({ error: 'Invalid or expired link' }, { status: 404 })\n  }\n  if (error.message === 'This link has expired') {\n    return Response.json({ error: 'This link has expired' }, { status: 410 })\n  }\n  if (error.message === 'This link can no longer be used') {\n    return Response.json({ error: 'This link can no longer be used' }, { status: 409 })\n  }\n  if (error.message === 'Message not found') {\n    return Response.json({ error: 'Message not found' }, { status: 404 })\n  }\n  return null\n}\n\nasync function resolveTokenAccess(em: EntityManager, token: string): Promise<TokenAccess> {\n  const hashedToken = hashAuthToken(token)\n  const accessToken =\n    (await findOneWithDecryption(em, MessageAccessToken, { token: hashedToken })) ??\n    (await findOneWithDecryption(em, MessageAccessToken, { token }))\n  if (!accessToken) {\n    throw new Error('Invalid or expired link')\n  }\n  if (accessToken.expiresAt < new Date()) {\n    throw new Error('This link has expired')\n  }\n  if (accessToken.useCount >= MAX_TOKEN_USE_COUNT) {\n    throw new Error('This link can no longer be used')\n  }\n\n  const message = await findOneWithDecryption(em, Message, {\n    id: accessToken.messageId,\n    deletedAt: null,\n  })\n  if (!message) {\n    throw new Error('Message not found')\n  }\n\n  const tenantScope = { tenantId: message.tenantId, organizationId: message.organizationId ?? null }\n\n  const recipient = await findOneWithDecryption(\n    em,\n    MessageRecipient,\n    {\n      messageId: accessToken.messageId,\n      recipientUserId: accessToken.recipientUserId,\n      deletedAt: null,\n    },\n    undefined,\n    tenantScope,\n  )\n  if (!recipient) {\n    throw new Error('Invalid or expired link')\n  }\n\n  return {\n    message,\n    recipientUserId: accessToken.recipientUserId,\n  }\n}\n\nfunction resolveAuthenticatedUserId(auth: AuthContext): string | null {\n  if (!auth) return null\n  if (auth.isApiKey && typeof auth.userId === 'string') return auth.userId\n  return auth.sub\n}\n\nexport async function GET(req: Request, { params }: { params: { token: string } }) {\n  const container = await createRequestContainer()\n  const commandBus = container.resolve('commandBus') as CommandBus\n  const em = container.resolve('em') as EntityManager\n\n  let access: TokenAccess\n  try {\n    access = await resolveTokenAccess(em, params.token)\n  } catch (error) {\n    const errorResponse = responseForTokenError(error)\n    if (errorResponse) return errorResponse\n    throw error\n  }\n\n  const tenantScope = { tenantId: access.message.tenantId, organizationId: access.message.organizationId ?? null }\n  const objects = await findWithDecryption(\n    em,\n    MessageObject,\n    { messageId: access.message.id },\n    undefined,\n    tenantScope,\n  )\n  const requiresAuth = objects.some((item) => item.actionRequired)\n  let auth: AuthContext = null\n  if (requiresAuth) {\n    auth = await getAuthFromRequest(req)\n    if (!auth) {\n      return Response.json({ requiresAuth: true })\n    }\n    if (resolveAuthenticatedUserId(auth) !== access.recipientUserId) {\n      return Response.json({ error: 'Forbidden', requiresAuth: true }, { status: 403 })\n    }\n  }\n\n  let commandResult: { messageId: string; recipientUserId: string }\n  try {\n    const executed = await commandBus.execute<unknown, { messageId: string; recipientUserId: string }>('messages.tokens.consume', {\n      input: { token: params.token },\n      ctx: {\n        container,\n        auth,\n        organizationScope: null,\n        selectedOrganizationId: null,\n        organizationIds: null,\n        request: req,\n      },\n    })\n    commandResult = executed.result\n  } catch (error) {\n    const errorResponse = responseForTokenError(error)\n    if (errorResponse) return errorResponse\n    throw error\n  }\n\n  const message = await findOneWithDecryption(\n    em,\n    Message,\n    { id: commandResult.messageId, tenantId: access.message.tenantId, deletedAt: null },\n    undefined,\n    tenantScope,\n  )\n  if (!message) {\n    return Response.json({ error: 'Message not found' }, { status: 404 })\n  }\n\n  return Response.json({\n    id: message.id,\n    type: message.type,\n    subject: message.subject,\n    body: message.body,\n    bodyFormat: message.bodyFormat,\n    priority: message.priority,\n    senderUserId: message.senderUserId,\n    sentAt: message.sentAt,\n    actionData: message.actionData,\n    actionTaken: message.actionTaken,\n    actionTakenAt: message.actionTakenAt,\n    actionTakenByUserId: message.actionTakenByUserId,\n    objects: objects.map((item) => ({\n      id: item.id,\n      entityModule: item.entityModule,\n      entityType: item.entityType,\n      entityId: item.entityId,\n      actionRequired: item.actionRequired,\n      actionType: item.actionType,\n      actionLabel: item.actionLabel,\n      snapshot: item.entitySnapshot,\n    })),\n    requiresAuth: objects.some((item) => item.actionRequired),\n    recipientUserId: commandResult.recipientUserId,\n  })\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Messages',\n  methods: {\n    GET: {\n      summary: 'Access message via token',\n      responses: [\n        {\n          status: 200,\n          description: 'Message detail via token',\n          schema: messageTokenResponseSchema,\n        },\n        { status: 404, description: 'Invalid or expired link' },\n        { status: 409, description: 'Token usage exceeded' },\n        { status: 410, description: 'Token expired' },\n      ],\n    },\n  },\n}\n"],
-  "mappings": "AACA,SAAS,0BAA4C;AACrD,SAAS,8BAA8B;AAGvC,SAAS,uBAAuB,0BAA0B;AAC1D,SAAS,SAAS,oBAAoB,eAAe,wBAAwB;AAC7E,SAAS,2BAA2B;AACpC,SAAS,kCAAkC;AAC3C,SAAS,qBAAqB;AAEvB,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM;AAC5B;AAOA,SAAS,sBAAsB,OAAiC;AAC9D,MAAI,EAAE,iBAAiB,OAAQ,QAAO;AACtC,MAAI,MAAM,YAAY,2BAA2B;AAC/C,WAAO,SAAS,KAAK,EAAE,OAAO,0BAA0B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC5E;AACA,MAAI,MAAM,YAAY,yBAAyB;AAC7C,WAAO,SAAS,KAAK,EAAE,OAAO,wBAAwB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC1E;AACA,MAAI,MAAM,YAAY,mCAAmC;AACvD,WAAO,SAAS,KAAK,EAAE,OAAO,kCAAkC,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACpF;AACA,MAAI,MAAM,YAAY,qBAAqB;AACzC,WAAO,SAAS,KAAK,EAAE,OAAO,oBAAoB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACtE;AACA,SAAO;AACT;AAEA,eAAe,mBAAmB,IAAmB,OAAqC;AACxF,QAAM,cAAc,cAAc,KAAK;AACvC,QAAM,cACH,MAAM,sBAAsB,IAAI,oBAAoB,EAAE,OAAO,YAAY,CAAC,KAC1E,MAAM,sBAAsB,IAAI,oBAAoB,EAAE,MAAM,CAAC;AAChE,MAAI,CAAC,aAAa;AAChB,UAAM,IAAI,MAAM,yBAAyB;AAAA,EAC3C;AACA,MAAI,YAAY,YAAY,oBAAI,KAAK,GAAG;AACtC,UAAM,IAAI,MAAM,uBAAuB;AAAA,EACzC;AACA,MAAI,YAAY,YAAY,qBAAqB;AAC/C,UAAM,IAAI,MAAM,iCAAiC;AAAA,EACnD;AAEA,QAAM,UAAU,MAAM,sBAAsB,IAAI,SAAS;AAAA,IACvD,IAAI,YAAY;AAAA,IAChB,WAAW;AAAA,EACb,CAAC;AACD,MAAI,CAAC,SAAS;AACZ,UAAM,IAAI,MAAM,mBAAmB;AAAA,EACrC;AAEA,QAAM,cAAc,EAAE,UAAU,QAAQ,UAAU,gBAAgB,QAAQ,kBAAkB,KAAK;AAEjG,QAAM,YAAY,MAAM;AAAA,IACtB;AAAA,IACA;AAAA,IACA;AAAA,MACE,WAAW,YAAY;AAAA,MACvB,iBAAiB,YAAY;AAAA,MAC7B,WAAW;AAAA,IACb;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACA,MAAI,CAAC,WAAW;AACd,UAAM,IAAI,MAAM,yBAAyB;AAAA,EAC3C;AAEA,SAAO;AAAA,IACL;AAAA,IACA,iBAAiB,YAAY;AAAA,EAC/B;AACF;AAEA,SAAS,2BAA2B,MAAkC;AACpE,MAAI,CAAC,KAAM,QAAO;AAClB,MAAI,KAAK,YAAY,OAAO,KAAK,WAAW,SAAU,QAAO,KAAK;AAClE,SAAO,KAAK;AACd;AAEA,eAAsB,IAAI,KAAc,EAAE,OAAO,GAAkC;AACjF,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,aAAa,UAAU,QAAQ,YAAY;AACjD,QAAM,KAAK,UAAU,QAAQ,IAAI;AAEjC,MAAI;AACJ,MAAI;AACF,aAAS,MAAM,mBAAmB,IAAI,OAAO,KAAK;AAAA,EACpD,SAAS,OAAO;AACd,UAAM,gBAAgB,sBAAsB,KAAK;AACjD,QAAI,cAAe,QAAO;AAC1B,UAAM;AAAA,EACR;AAEA,QAAM,cAAc,EAAE,UAAU,OAAO,QAAQ,UAAU,gBAAgB,OAAO,QAAQ,kBAAkB,KAAK;AAC/G,QAAM,UAAU,MAAM;AAAA,IACpB;AAAA,IACA;AAAA,IACA,EAAE,WAAW,OAAO,QAAQ,GAAG;AAAA,IAC/B;AAAA,IACA;AAAA,EACF;AACA,QAAM,eAAe,QAAQ,KAAK,CAAC,SAAS,KAAK,cAAc;AAC/D,MAAI,OAAoB;AACxB,MAAI,cAAc;AAChB,WAAO,MAAM,mBAAmB,GAAG;AACnC,QAAI,CAAC,MAAM;AACT,aAAO,SAAS,KAAK,EAAE,cAAc,KAAK,CAAC;AAAA,IAC7C;AACA,QAAI,2BAA2B,IAAI,MAAM,OAAO,iBAAiB;AAC/D,aAAO,SAAS,KAAK,EAAE,OAAO,aAAa,cAAc,KAAK,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAClF;AAAA,EACF;AAEA,MAAI;AACJ,MAAI;AACF,UAAM,WAAW,MAAM,WAAW,QAAiE,2BAA2B;AAAA,MAC5H,OAAO,EAAE,OAAO,OAAO,MAAM;AAAA,MAC7B,KAAK;AAAA,QACH;AAAA,QACA;AAAA,QACA,mBAAmB;AAAA,QACnB,wBAAwB;AAAA,QACxB,iBAAiB;AAAA,QACjB,SAAS;AAAA,MACX;AAAA,IACF,CAAC;AACD,oBAAgB,SAAS;AAAA,EAC3B,SAAS,OAAO;AACd,UAAM,gBAAgB,sBAAsB,KAAK;AACjD,QAAI,cAAe,QAAO;AAC1B,UAAM;AAAA,EACR;AAEA,QAAM,UAAU,MAAM;AAAA,IACpB;AAAA,IACA;AAAA,IACA,EAAE,IAAI,cAAc,WAAW,UAAU,OAAO,QAAQ,UAAU,WAAW,KAAK;AAAA,IAClF;AAAA,IACA;AAAA,EACF;AACA,MAAI,CAAC,SAAS;AACZ,WAAO,SAAS,KAAK,EAAE,OAAO,oBAAoB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACtE;AAEA,SAAO,SAAS,KAAK;AAAA,IACnB,IAAI,QAAQ;AAAA,IACZ,MAAM,QAAQ;AAAA,IACd,SAAS,QAAQ;AAAA,IACjB,MAAM,QAAQ;AAAA,IACd,YAAY,QAAQ;AAAA,IACpB,UAAU,QAAQ;AAAA,IAClB,cAAc,QAAQ;AAAA,IACtB,QAAQ,QAAQ;AAAA,IAChB,YAAY,QAAQ;AAAA,IACpB,aAAa,QAAQ;AAAA,IACrB,eAAe,QAAQ;AAAA,IACvB,qBAAqB,QAAQ;AAAA,IAC7B,SAAS,QAAQ,IAAI,CAAC,UAAU;AAAA,MAC9B,IAAI,KAAK;AAAA,MACT,cAAc,KAAK;AAAA,MACnB,YAAY,KAAK;AAAA,MACjB,UAAU,KAAK;AAAA,MACf,gBAAgB,KAAK;AAAA,MACrB,YAAY,KAAK;AAAA,MACjB,aAAa,KAAK;AAAA,MAClB,UAAU,KAAK;AAAA,IACjB,EAAE;AAAA,IACF,cAAc,QAAQ,KAAK,CAAC,SAAS,KAAK,cAAc;AAAA,IACxD,iBAAiB,cAAc;AAAA,EACjC,CAAC;AACH;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ;AAAA,QACV;AAAA,QACA,EAAE,QAAQ,KAAK,aAAa,0BAA0B;AAAA,QACtD,EAAE,QAAQ,KAAK,aAAa,uBAAuB;AAAA,QACnD,EAAE,QAAQ,KAAK,aAAa,gBAAgB;AAAA,MAC9C;AAAA,IACF;AAAA,EACF;AACF;",
+  "sourcesContent": ["import type { CommandBus } from '@open-mercato/shared/lib/commands/command-bus'\nimport { getAuthFromRequest, type AuthContext } from '@open-mercato/shared/lib/auth/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi/types'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { findOneWithDecryption, findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { Message, MessageAccessToken, MessageObject, MessageRecipient } from '../../../data/entities'\nimport { MAX_TOKEN_USE_COUNT } from '../../../commands/tokens'\nimport { messageTokenResponseSchema } from '../../openapi'\nimport { hashAuthToken } from '../../../../auth/lib/tokenHash'\n\nexport const metadata = {\n  GET: { requireAuth: false },\n}\n\ntype TokenAccess = {\n  message: Message\n  recipientUserId: string\n}\n\nfunction responseForTokenError(error: unknown): Response | null {\n  if (!(error instanceof Error)) return null\n  if (error.message === 'Invalid or expired link') {\n    return Response.json({ error: 'Invalid or expired link' }, { status: 404 })\n  }\n  if (error.message === 'This link has expired') {\n    return Response.json({ error: 'This link has expired' }, { status: 410 })\n  }\n  if (error.message === 'This link can no longer be used') {\n    return Response.json({ error: 'This link can no longer be used' }, { status: 409 })\n  }\n  if (error.message === 'Message not found') {\n    return Response.json({ error: 'Message not found' }, { status: 404 })\n  }\n  return null\n}\n\nasync function resolveTokenAccess(em: EntityManager, token: string): Promise<TokenAccess> {\n  const hashedToken = hashAuthToken(token)\n  const accessToken = await findOneWithDecryption(em, MessageAccessToken, { token: hashedToken })\n  if (!accessToken) {\n    throw new Error('Invalid or expired link')\n  }\n  if (accessToken.expiresAt < new Date()) {\n    throw new Error('This link has expired')\n  }\n  if (accessToken.useCount >= MAX_TOKEN_USE_COUNT) {\n    throw new Error('This link can no longer be used')\n  }\n\n  const message = await findOneWithDecryption(em, Message, {\n    id: accessToken.messageId,\n    deletedAt: null,\n  })\n  if (!message) {\n    throw new Error('Message not found')\n  }\n\n  const tenantScope = { tenantId: message.tenantId, organizationId: message.organizationId ?? null }\n\n  const recipient = await findOneWithDecryption(\n    em,\n    MessageRecipient,\n    {\n      messageId: accessToken.messageId,\n      recipientUserId: accessToken.recipientUserId,\n      deletedAt: null,\n    },\n    undefined,\n    tenantScope,\n  )\n  if (!recipient) {\n    throw new Error('Invalid or expired link')\n  }\n\n  return {\n    message,\n    recipientUserId: accessToken.recipientUserId,\n  }\n}\n\nfunction resolveAuthenticatedUserId(auth: AuthContext): string | null {\n  if (!auth) return null\n  if (auth.isApiKey && typeof auth.userId === 'string') return auth.userId\n  return auth.sub\n}\n\nexport async function GET(req: Request, { params }: { params: { token: string } }) {\n  const container = await createRequestContainer()\n  const commandBus = container.resolve('commandBus') as CommandBus\n  const em = container.resolve('em') as EntityManager\n\n  let access: TokenAccess\n  try {\n    access = await resolveTokenAccess(em, params.token)\n  } catch (error) {\n    const errorResponse = responseForTokenError(error)\n    if (errorResponse) return errorResponse\n    throw error\n  }\n\n  const tenantScope = { tenantId: access.message.tenantId, organizationId: access.message.organizationId ?? null }\n  const objects = await findWithDecryption(\n    em,\n    MessageObject,\n    { messageId: access.message.id },\n    undefined,\n    tenantScope,\n  )\n  const requiresAuth = objects.some((item) => item.actionRequired)\n  let auth: AuthContext = null\n  if (requiresAuth) {\n    auth = await getAuthFromRequest(req)\n    if (!auth) {\n      return Response.json({ requiresAuth: true })\n    }\n    if (resolveAuthenticatedUserId(auth) !== access.recipientUserId) {\n      return Response.json({ error: 'Forbidden', requiresAuth: true }, { status: 403 })\n    }\n  }\n\n  let commandResult: { messageId: string; recipientUserId: string }\n  try {\n    const executed = await commandBus.execute<unknown, { messageId: string; recipientUserId: string }>('messages.tokens.consume', {\n      input: { token: params.token },\n      ctx: {\n        container,\n        auth,\n        organizationScope: null,\n        selectedOrganizationId: null,\n        organizationIds: null,\n        request: req,\n      },\n    })\n    commandResult = executed.result\n  } catch (error) {\n    const errorResponse = responseForTokenError(error)\n    if (errorResponse) return errorResponse\n    throw error\n  }\n\n  const message = await findOneWithDecryption(\n    em,\n    Message,\n    { id: commandResult.messageId, tenantId: access.message.tenantId, deletedAt: null },\n    undefined,\n    tenantScope,\n  )\n  if (!message) {\n    return Response.json({ error: 'Message not found' }, { status: 404 })\n  }\n\n  return Response.json({\n    id: message.id,\n    type: message.type,\n    subject: message.subject,\n    body: message.body,\n    bodyFormat: message.bodyFormat,\n    priority: message.priority,\n    senderUserId: message.senderUserId,\n    sentAt: message.sentAt,\n    actionData: message.actionData,\n    actionTaken: message.actionTaken,\n    actionTakenAt: message.actionTakenAt,\n    actionTakenByUserId: message.actionTakenByUserId,\n    objects: objects.map((item) => ({\n      id: item.id,\n      entityModule: item.entityModule,\n      entityType: item.entityType,\n      entityId: item.entityId,\n      actionRequired: item.actionRequired,\n      actionType: item.actionType,\n      actionLabel: item.actionLabel,\n      snapshot: item.entitySnapshot,\n    })),\n    requiresAuth: objects.some((item) => item.actionRequired),\n    recipientUserId: commandResult.recipientUserId,\n  })\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Messages',\n  methods: {\n    GET: {\n      summary: 'Access message via token',\n      responses: [\n        {\n          status: 200,\n          description: 'Message detail via token',\n          schema: messageTokenResponseSchema,\n        },\n        { status: 404, description: 'Invalid or expired link' },\n        { status: 409, description: 'Token usage exceeded' },\n        { status: 410, description: 'Token expired' },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AACA,SAAS,0BAA4C;AACrD,SAAS,8BAA8B;AAGvC,SAAS,uBAAuB,0BAA0B;AAC1D,SAAS,SAAS,oBAAoB,eAAe,wBAAwB;AAC7E,SAAS,2BAA2B;AACpC,SAAS,kCAAkC;AAC3C,SAAS,qBAAqB;AAEvB,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM;AAC5B;AAOA,SAAS,sBAAsB,OAAiC;AAC9D,MAAI,EAAE,iBAAiB,OAAQ,QAAO;AACtC,MAAI,MAAM,YAAY,2BAA2B;AAC/C,WAAO,SAAS,KAAK,EAAE,OAAO,0BAA0B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC5E;AACA,MAAI,MAAM,YAAY,yBAAyB;AAC7C,WAAO,SAAS,KAAK,EAAE,OAAO,wBAAwB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC1E;AACA,MAAI,MAAM,YAAY,mCAAmC;AACvD,WAAO,SAAS,KAAK,EAAE,OAAO,kCAAkC,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACpF;AACA,MAAI,MAAM,YAAY,qBAAqB;AACzC,WAAO,SAAS,KAAK,EAAE,OAAO,oBAAoB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACtE;AACA,SAAO;AACT;AAEA,eAAe,mBAAmB,IAAmB,OAAqC;AACxF,QAAM,cAAc,cAAc,KAAK;AACvC,QAAM,cAAc,MAAM,sBAAsB,IAAI,oBAAoB,EAAE,OAAO,YAAY,CAAC;AAC9F,MAAI,CAAC,aAAa;AAChB,UAAM,IAAI,MAAM,yBAAyB;AAAA,EAC3C;AACA,MAAI,YAAY,YAAY,oBAAI,KAAK,GAAG;AACtC,UAAM,IAAI,MAAM,uBAAuB;AAAA,EACzC;AACA,MAAI,YAAY,YAAY,qBAAqB;AAC/C,UAAM,IAAI,MAAM,iCAAiC;AAAA,EACnD;AAEA,QAAM,UAAU,MAAM,sBAAsB,IAAI,SAAS;AAAA,IACvD,IAAI,YAAY;AAAA,IAChB,WAAW;AAAA,EACb,CAAC;AACD,MAAI,CAAC,SAAS;AACZ,UAAM,IAAI,MAAM,mBAAmB;AAAA,EACrC;AAEA,QAAM,cAAc,EAAE,UAAU,QAAQ,UAAU,gBAAgB,QAAQ,kBAAkB,KAAK;AAEjG,QAAM,YAAY,MAAM;AAAA,IACtB;AAAA,IACA;AAAA,IACA;AAAA,MACE,WAAW,YAAY;AAAA,MACvB,iBAAiB,YAAY;AAAA,MAC7B,WAAW;AAAA,IACb;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACA,MAAI,CAAC,WAAW;AACd,UAAM,IAAI,MAAM,yBAAyB;AAAA,EAC3C;AAEA,SAAO;AAAA,IACL;AAAA,IACA,iBAAiB,YAAY;AAAA,EAC/B;AACF;AAEA,SAAS,2BAA2B,MAAkC;AACpE,MAAI,CAAC,KAAM,QAAO;AAClB,MAAI,KAAK,YAAY,OAAO,KAAK,WAAW,SAAU,QAAO,KAAK;AAClE,SAAO,KAAK;AACd;AAEA,eAAsB,IAAI,KAAc,EAAE,OAAO,GAAkC;AACjF,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,aAAa,UAAU,QAAQ,YAAY;AACjD,QAAM,KAAK,UAAU,QAAQ,IAAI;AAEjC,MAAI;AACJ,MAAI;AACF,aAAS,MAAM,mBAAmB,IAAI,OAAO,KAAK;AAAA,EACpD,SAAS,OAAO;AACd,UAAM,gBAAgB,sBAAsB,KAAK;AACjD,QAAI,cAAe,QAAO;AAC1B,UAAM;AAAA,EACR;AAEA,QAAM,cAAc,EAAE,UAAU,OAAO,QAAQ,UAAU,gBAAgB,OAAO,QAAQ,kBAAkB,KAAK;AAC/G,QAAM,UAAU,MAAM;AAAA,IACpB;AAAA,IACA;AAAA,IACA,EAAE,WAAW,OAAO,QAAQ,GAAG;AAAA,IAC/B;AAAA,IACA;AAAA,EACF;AACA,QAAM,eAAe,QAAQ,KAAK,CAAC,SAAS,KAAK,cAAc;AAC/D,MAAI,OAAoB;AACxB,MAAI,cAAc;AAChB,WAAO,MAAM,mBAAmB,GAAG;AACnC,QAAI,CAAC,MAAM;AACT,aAAO,SAAS,KAAK,EAAE,cAAc,KAAK,CAAC;AAAA,IAC7C;AACA,QAAI,2BAA2B,IAAI,MAAM,OAAO,iBAAiB;AAC/D,aAAO,SAAS,KAAK,EAAE,OAAO,aAAa,cAAc,KAAK,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAClF;AAAA,EACF;AAEA,MAAI;AACJ,MAAI;AACF,UAAM,WAAW,MAAM,WAAW,QAAiE,2BAA2B;AAAA,MAC5H,OAAO,EAAE,OAAO,OAAO,MAAM;AAAA,MAC7B,KAAK;AAAA,QACH;AAAA,QACA;AAAA,QACA,mBAAmB;AAAA,QACnB,wBAAwB;AAAA,QACxB,iBAAiB;AAAA,QACjB,SAAS;AAAA,MACX;AAAA,IACF,CAAC;AACD,oBAAgB,SAAS;AAAA,EAC3B,SAAS,OAAO;AACd,UAAM,gBAAgB,sBAAsB,KAAK;AACjD,QAAI,cAAe,QAAO;AAC1B,UAAM;AAAA,EACR;AAEA,QAAM,UAAU,MAAM;AAAA,IACpB;AAAA,IACA;AAAA,IACA,EAAE,IAAI,cAAc,WAAW,UAAU,OAAO,QAAQ,UAAU,WAAW,KAAK;AAAA,IAClF;AAAA,IACA;AAAA,EACF;AACA,MAAI,CAAC,SAAS;AACZ,WAAO,SAAS,KAAK,EAAE,OAAO,oBAAoB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACtE;AAEA,SAAO,SAAS,KAAK;AAAA,IACnB,IAAI,QAAQ;AAAA,IACZ,MAAM,QAAQ;AAAA,IACd,SAAS,QAAQ;AAAA,IACjB,MAAM,QAAQ;AAAA,IACd,YAAY,QAAQ;AAAA,IACpB,UAAU,QAAQ;AAAA,IAClB,cAAc,QAAQ;AAAA,IACtB,QAAQ,QAAQ;AAAA,IAChB,YAAY,QAAQ;AAAA,IACpB,aAAa,QAAQ;AAAA,IACrB,eAAe,QAAQ;AAAA,IACvB,qBAAqB,QAAQ;AAAA,IAC7B,SAAS,QAAQ,IAAI,CAAC,UAAU;AAAA,MAC9B,IAAI,KAAK;AAAA,MACT,cAAc,KAAK;AAAA,MACnB,YAAY,KAAK;AAAA,MACjB,UAAU,KAAK;AAAA,MACf,gBAAgB,KAAK;AAAA,MACrB,YAAY,KAAK;AAAA,MACjB,aAAa,KAAK;AAAA,MAClB,UAAU,KAAK;AAAA,IACjB,EAAE;AAAA,IACF,cAAc,QAAQ,KAAK,CAAC,SAAS,KAAK,cAAc;AAAA,IACxD,iBAAiB,cAAc;AAAA,EACjC,CAAC;AACH;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ;AAAA,QACV;AAAA,QACA,EAAE,QAAQ,KAAK,aAAa,0BAA0B;AAAA,QACtD,EAAE,QAAQ,KAAK,aAAa,uBAAuB;AAAA,QACnD,EAAE,QAAQ,KAAK,aAAa,gBAAgB;AAAA,MAC9C;AAAA,IACF;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/modules/messages/commands/actions.js

@@ -226,13 +226,15 @@ const executeActionCommand = {
         throw new Error("Action failed");
       }
     } else if (action.href) {
-      result = {
-        redirect: resolveActionHref(action, message, {
-          tenantId: input.tenantId,
-          organizationId: input.organizationId,
-          userId: input.userId
-        }) ?? action.href
-      };
+      const safeRedirect = resolveActionHref(action, message, {
+        tenantId: input.tenantId,
+        organizationId: input.organizationId,
+        userId: input.userId
+      });
+      if (!safeRedirect) {
+        throw new Error("Action has an unsafe redirect target");
+      }
+      result = { redirect: safeRedirect };
     } else {
       throw new Error("Action has no executable target");
     }

package/dist/modules/messages/commands/actions.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/messages/commands/actions.ts"],
-  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport { z } from 'zod'\nimport { registerCommand, type CommandHandler } from '@open-mercato/shared/lib/commands'\nimport { extractUndoPayload, type UndoPayload } from '@open-mercato/shared/lib/commands/undo'\nimport { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { Message, MessageObject, MessageRecipient } from '../data/entities'\nimport { emitMessagesEvent } from '../events'\nimport {\n  findResolvedMessageActionById,\n  isTerminalMessageAction,\n  resolveActionCommandInput,\n  resolveActionHref,\n  resolveMessageActionData,\n} from '../lib/actions'\nimport { getMessageType } from '../lib/message-types-registry'\nimport { assertOrganizationAccess, type MessageScopeInput } from './shared'\n\nconst recordTerminalActionSchema = z.object({\n  messageId: z.string().uuid(),\n  actionId: z.string().min(1),\n  result: z.record(z.string(), z.unknown()),\n  tenantId: z.string().uuid(),\n  organizationId: z.string().uuid().nullable(),\n  userId: z.string().uuid(),\n})\n\ntype RecordTerminalActionInput = z.infer<typeof recordTerminalActionSchema>\n\nconst executeActionSchema = z.object({\n  messageId: z.string().uuid(),\n  actionId: z.string().min(1),\n  payload: z.record(z.string(), z.unknown()).optional(),\n  tenantId: z.string().uuid(),\n  organizationId: z.string().uuid().nullable(),\n  userId: z.string().uuid(),\n})\n\ntype ExecuteActionInput = z.infer<typeof executeActionSchema>\n\ntype ActionStateSnapshot = {\n  actionTaken: string | null\n  actionTakenByUserId: string | null\n  actionTakenAt: string | null\n  actionResult: Record<string, unknown> | null\n}\n\nfunction toIso(value: Date | null | undefined): string | null {\n  return value ? value.toISOString() : null\n}\n\nfunction toDate(value: string | null | undefined): Date | null {\n  if (!value) return null\n  return new Date(value)\n}\n\nasync function requireActionTarget(em: EntityManager, input: RecordTerminalActionInput) {\n  const message = await findOneWithDecryption(\n    em,\n    Message,\n    {\n      id: input.messageId,\n      tenantId: input.tenantId,\n      deletedAt: null,\n    },\n    undefined,\n    { tenantId: input.tenantId, organizationId: input.organizationId },\n  )\n  if (!message) throw new Error('Message not found')\n  assertOrganizationAccess(input as MessageScopeInput, message)\n\n  const recipient = await em.findOne(MessageRecipient, {\n    messageId: input.messageId,\n    recipientUserId: input.userId,\n    deletedAt: null,\n  })\n  if (!recipient) throw new Error('Access denied')\n  return message\n}\n\nasync function requireActionMessage(em: EntityManager, input: ExecuteActionInput) {\n  const message = await findOneWithDecryption(\n    em,\n    Message,\n    {\n      id: input.messageId,\n      tenantId: input.tenantId,\n      deletedAt: null,\n    },\n    undefined,\n    { tenantId: input.tenantId, organizationId: input.organizationId },\n  )\n  if (!message) throw new Error('Message not found')\n  assertOrganizationAccess(input as MessageScopeInput, message)\n  const recipient = await em.findOne(MessageRecipient, {\n    messageId: input.messageId,\n    recipientUserId: input.userId,\n    deletedAt: null,\n  })\n  if (!recipient) throw new Error('Access denied')\n  return message\n}\n\nfunction snapshotActionState(message: Message): ActionStateSnapshot {\n  return {\n    actionTaken: message.actionTaken ?? null,\n    actionTakenByUserId: message.actionTakenByUserId ?? null,\n    actionTakenAt: toIso(message.actionTakenAt),\n    actionResult: message.actionResult ?? null,\n  }\n}\n\nconst recordTerminalActionCommand: CommandHandler<unknown, { ok: true }> = {\n  id: 'messages.actions.record_terminal',\n  async prepare(rawInput, ctx) {\n    const input = recordTerminalActionSchema.parse(rawInput)\n    const em = (ctx.container.resolve('em') as EntityManager).fork()\n    const message = await requireActionTarget(em, input)\n    return { before: snapshotActionState(message) }\n  },\n  async execute(rawInput, ctx) {\n    const input = recordTerminalActionSchema.parse(rawInput)\n    const em = (ctx.container.resolve('em') as EntityManager).fork()\n    const message = await requireActionTarget(em, input)\n    if (message.actionTaken) {\n      throw new Error('Action already taken')\n    }\n    message.actionTaken = input.actionId\n    message.actionTakenByUserId = input.userId\n    message.actionTakenAt = new Date()\n    message.actionResult = input.result\n    await em.flush()\n    return { ok: true }\n  },\n  async captureAfter(rawInput, _result, ctx) {\n    const input = recordTerminalActionSchema.parse(rawInput)\n    const em = (ctx.container.resolve('em') as EntityManager).fork()\n    const message = await requireActionTarget(em, input)\n    return snapshotActionState(message)\n  },\n  buildLog: async ({ input, snapshots }) => {\n    const parsed = recordTerminalActionSchema.parse(input)\n    return {\n      actionLabel: 'Execute message terminal action',\n      resourceKind: 'messages.message',\n      resourceId: parsed.messageId,\n      tenantId: parsed.tenantId,\n      organizationId: parsed.organizationId,\n      payload: {\n        undo: {\n          before: (snapshots.before as ActionStateSnapshot | undefined) ?? null,\n          after: (snapshots.after as ActionStateSnapshot | undefined) ?? null,\n        } satisfies UndoPayload<ActionStateSnapshot>,\n      },\n      snapshotBefore: snapshots.before ?? null,\n      snapshotAfter: snapshots.after ?? null,\n    }\n  },\n  undo: async ({ logEntry, ctx }) => {\n    const undo = extractUndoPayload<UndoPayload<ActionStateSnapshot>>(logEntry)\n    const before = undo?.before\n    if (!before) return\n    const messageId = logEntry?.resourceId as string | null\n    if (!messageId) return\n    const em = (ctx.container.resolve('em') as EntityManager).fork()\n    const message = await findOneWithDecryption(em, Message, { id: messageId })\n    if (!message) return\n    message.actionTaken = before.actionTaken\n    message.actionTakenByUserId = before.actionTakenByUserId\n    message.actionTakenAt = toDate(before.actionTakenAt)\n    message.actionResult = before.actionResult\n    await em.flush()\n  },\n}\n\nconst executeActionCommand: CommandHandler<\n  unknown,\n  { ok: true; actionId: string; result: Record<string, unknown>; operationLogEntry: unknown | null }\n> = {\n  id: 'messages.actions.execute',\n  async execute(rawInput, ctx) {\n    const input = executeActionSchema.parse(rawInput)\n    const em = (ctx.container.resolve('em') as EntityManager).fork()\n    const message = await requireActionMessage(em, input)\n    const objects = await em.find(MessageObject, { messageId: message.id })\n    const action = findResolvedMessageActionById(message, objects, input.actionId)\n\n    if (!action) {\n      throw new Error('Action not found')\n    }\n\n    if (message.actionTaken) {\n      throw Object.assign(new Error('Action already taken'), { actionTaken: message.actionTaken })\n    }\n\n    const shouldRecordActionTaken = isTerminalMessageAction(action)\n\n    const actionData = resolveMessageActionData(message)\n    if (actionData?.expiresAt) {\n      if (new Date(actionData.expiresAt) < new Date()) {\n        throw new Error('Actions have expired')\n      }\n    } else {\n      const messageType = getMessageType(message.type)\n      if (messageType?.actionsExpireAfterHours && message.sentAt) {\n        const expiry = new Date(message.sentAt.getTime() + messageType.actionsExpireAfterHours * 60 * 60 * 1000)\n        if (expiry < new Date()) {\n          throw new Error('Actions have expired')\n        }\n      }\n    }\n\n    const commandBus = ctx.container.resolve('commandBus') as {\n      execute: (\n        commandId: string,\n        options: { input: unknown; ctx: unknown; metadata?: unknown }\n      ) => Promise<{ result: unknown; logEntry?: unknown }>\n    }\n\n    let result: Record<string, unknown> = {}\n    let operationLogEntry: unknown | null = null\n\n    if (action.commandId) {\n      try {\n        const actionInput = resolveActionCommandInput(\n          action,\n          message,\n          {\n            tenantId: input.tenantId,\n            organizationId: input.organizationId,\n            userId: input.userId,\n          },\n          input.payload ?? {},\n        )\n\n        if (actionInput.id == null) {\n          const fallbackId = action.objectRef?.entityId ?? message.sourceEntityId ?? null\n          if (typeof fallbackId === 'string' && fallbackId.trim().length > 0) {\n            actionInput.id = fallbackId\n          }\n        }\n\n        const commandResult = await commandBus.execute(action.commandId, {\n          input: actionInput,\n          ctx: {\n            container: ctx.container,\n            auth: {\n              sub: input.userId,\n              tenantId: input.tenantId,\n              orgId: input.organizationId,\n            },\n            organizationScope: null,\n            selectedOrganizationId: input.organizationId,\n            organizationIds: input.organizationId ? [input.organizationId] : null,\n          },\n          metadata: {\n            tenantId: input.tenantId,\n            organizationId: input.organizationId,\n            resourceKind: 'messages',\n          },\n        })\n\n        result = (commandResult.result as Record<string, unknown>) ?? {}\n        operationLogEntry = commandResult.logEntry ?? null\n      } catch (err) {\n        console.error('[messages] executeActionCommand sub-command failed', err)\n        throw new Error('Action failed')\n      }\n    } else if (action.href) {\n      result = {\n        redirect: resolveActionHref(action, message, {\n          tenantId: input.tenantId,\n          organizationId: input.organizationId,\n          userId: input.userId,\n        }) ?? action.href,\n      }\n    } else {\n      throw new Error('Action has no executable target')\n    }\n\n    if (shouldRecordActionTaken) {\n      const terminalResult = await commandBus.execute('messages.actions.record_terminal', {\n        input: {\n          messageId: message.id,\n          actionId: action.id,\n          result,\n          tenantId: input.tenantId,\n          organizationId: input.organizationId,\n          userId: input.userId,\n        },\n        ctx: {\n          container: ctx.container,\n          auth: ctx.auth ?? null,\n          organizationScope: null,\n          selectedOrganizationId: input.organizationId,\n          organizationIds: input.organizationId ? [input.organizationId] : null,\n        },\n      })\n      if (!operationLogEntry) {\n        operationLogEntry = terminalResult.logEntry ?? null\n      }\n      await emitMessagesEvent(\n        'messages.message.action_taken',\n        {\n          messageId: message.id,\n          actionId: action.id,\n          userId: input.userId,\n          recipientUserId: input.userId,\n          result,\n          tenantId: input.tenantId,\n          organizationId: input.organizationId,\n        },\n        { persistent: true }\n      )\n    }\n\n    return {\n      ok: true,\n      actionId: action.id,\n      result,\n      operationLogEntry,\n    }\n  },\n}\n\nregisterCommand(recordTerminalActionCommand)\nregisterCommand(executeActionCommand)\n"],
-  "mappings": "AACA,SAAS,SAAS;AAClB,SAAS,uBAA4C;AACrD,SAAS,0BAA4C;AACrD,SAAS,6BAA6B;AACtC,SAAS,SAAS,eAAe,wBAAwB;AACzD,SAAS,yBAAyB;AAClC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,sBAAsB;AAC/B,SAAS,gCAAwD;AAEjE,MAAM,6BAA6B,EAAE,OAAO;AAAA,EAC1C,WAAW,EAAE,OAAO,EAAE,KAAK;AAAA,EAC3B,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EAC1B,QAAQ,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC;AAAA,EACxC,UAAU,EAAE,OAAO,EAAE,KAAK;AAAA,EAC1B,gBAAgB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EAC3C,QAAQ,EAAE,OAAO,EAAE,KAAK;AAC1B,CAAC;AAID,MAAM,sBAAsB,EAAE,OAAO;AAAA,EACnC,WAAW,EAAE,OAAO,EAAE,KAAK;AAAA,EAC3B,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EAC1B,SAAS,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,EAAE,SAAS;AAAA,EACpD,UAAU,EAAE,OAAO,EAAE,KAAK;AAAA,EAC1B,gBAAgB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EAC3C,QAAQ,EAAE,OAAO,EAAE,KAAK;AAC1B,CAAC;AAWD,SAAS,MAAM,OAA+C;AAC5D,SAAO,QAAQ,MAAM,YAAY,IAAI;AACvC;AAEA,SAAS,OAAO,OAA+C;AAC7D,MAAI,CAAC,MAAO,QAAO;AACnB,SAAO,IAAI,KAAK,KAAK;AACvB;AAEA,eAAe,oBAAoB,IAAmB,OAAkC;AACtF,QAAM,UAAU,MAAM;AAAA,IACpB;AAAA,IACA;AAAA,IACA;AAAA,MACE,IAAI,MAAM;AAAA,MACV,UAAU,MAAM;AAAA,MAChB,WAAW;AAAA,IACb;AAAA,IACA;AAAA,IACA,EAAE,UAAU,MAAM,UAAU,gBAAgB,MAAM,eAAe;AAAA,EACnE;AACA,MAAI,CAAC,QAAS,OAAM,IAAI,MAAM,mBAAmB;AACjD,2BAAyB,OAA4B,OAAO;AAE5D,QAAM,YAAY,MAAM,GAAG,QAAQ,kBAAkB;AAAA,IACnD,WAAW,MAAM;AAAA,IACjB,iBAAiB,MAAM;AAAA,IACvB,WAAW;AAAA,EACb,CAAC;AACD,MAAI,CAAC,UAAW,OAAM,IAAI,MAAM,eAAe;AAC/C,SAAO;AACT;AAEA,eAAe,qBAAqB,IAAmB,OAA2B;AAChF,QAAM,UAAU,MAAM;AAAA,IACpB;AAAA,IACA;AAAA,IACA;AAAA,MACE,IAAI,MAAM;AAAA,MACV,UAAU,MAAM;AAAA,MAChB,WAAW;AAAA,IACb;AAAA,IACA;AAAA,IACA,EAAE,UAAU,MAAM,UAAU,gBAAgB,MAAM,eAAe;AAAA,EACnE;AACA,MAAI,CAAC,QAAS,OAAM,IAAI,MAAM,mBAAmB;AACjD,2BAAyB,OAA4B,OAAO;AAC5D,QAAM,YAAY,MAAM,GAAG,QAAQ,kBAAkB;AAAA,IACnD,WAAW,MAAM;AAAA,IACjB,iBAAiB,MAAM;AAAA,IACvB,WAAW;AAAA,EACb,CAAC;AACD,MAAI,CAAC,UAAW,OAAM,IAAI,MAAM,eAAe;AAC/C,SAAO;AACT;AAEA,SAAS,oBAAoB,SAAuC;AAClE,SAAO;AAAA,IACL,aAAa,QAAQ,eAAe;AAAA,IACpC,qBAAqB,QAAQ,uBAAuB;AAAA,IACpD,eAAe,MAAM,QAAQ,aAAa;AAAA,IAC1C,cAAc,QAAQ,gBAAgB;AAAA,EACxC;AACF;AAEA,MAAM,8BAAqE;AAAA,EACzE,IAAI;AAAA,EACJ,MAAM,QAAQ,UAAU,KAAK;AAC3B,UAAM,QAAQ,2BAA2B,MAAM,QAAQ;AACvD,UAAM,KAAM,IAAI,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC/D,UAAM,UAAU,MAAM,oBAAoB,IAAI,KAAK;AACnD,WAAO,EAAE,QAAQ,oBAAoB,OAAO,EAAE;AAAA,EAChD;AAAA,EACA,MAAM,QAAQ,UAAU,KAAK;AAC3B,UAAM,QAAQ,2BAA2B,MAAM,QAAQ;AACvD,UAAM,KAAM,IAAI,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC/D,UAAM,UAAU,MAAM,oBAAoB,IAAI,KAAK;AACnD,QAAI,QAAQ,aAAa;AACvB,YAAM,IAAI,MAAM,sBAAsB;AAAA,IACxC;AACA,YAAQ,cAAc,MAAM;AAC5B,YAAQ,sBAAsB,MAAM;AACpC,YAAQ,gBAAgB,oBAAI,KAAK;AACjC,YAAQ,eAAe,MAAM;AAC7B,UAAM,GAAG,MAAM;AACf,WAAO,EAAE,IAAI,KAAK;AAAA,EACpB;AAAA,EACA,MAAM,aAAa,UAAU,SAAS,KAAK;AACzC,UAAM,QAAQ,2BAA2B,MAAM,QAAQ;AACvD,UAAM,KAAM,IAAI,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC/D,UAAM,UAAU,MAAM,oBAAoB,IAAI,KAAK;AACnD,WAAO,oBAAoB,OAAO;AAAA,EACpC;AAAA,EACA,UAAU,OAAO,EAAE,OAAO,UAAU,MAAM;AACxC,UAAM,SAAS,2BAA2B,MAAM,KAAK;AACrD,WAAO;AAAA,MACL,aAAa;AAAA,MACb,cAAc;AAAA,MACd,YAAY,OAAO;AAAA,MACnB,UAAU,OAAO;AAAA,MACjB,gBAAgB,OAAO;AAAA,MACvB,SAAS;AAAA,QACP,MAAM;AAAA,UACJ,QAAS,UAAU,UAA8C;AAAA,UACjE,OAAQ,UAAU,SAA6C;AAAA,QACjE;AAAA,MACF;AAAA,MACA,gBAAgB,UAAU,UAAU;AAAA,MACpC,eAAe,UAAU,SAAS;AAAA,IACpC;AAAA,EACF;AAAA,EACA,MAAM,OAAO,EAAE,UAAU,IAAI,MAAM;AACjC,UAAM,OAAO,mBAAqD,QAAQ;AAC1E,UAAM,SAAS,MAAM;AACrB,QAAI,CAAC,OAAQ;AACb,UAAM,YAAY,UAAU;AAC5B,QAAI,CAAC,UAAW;AAChB,UAAM,KAAM,IAAI,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC/D,UAAM,UAAU,MAAM,sBAAsB,IAAI,SAAS,EAAE,IAAI,UAAU,CAAC;AAC1E,QAAI,CAAC,QAAS;AACd,YAAQ,cAAc,OAAO;AAC7B,YAAQ,sBAAsB,OAAO;AACrC,YAAQ,gBAAgB,OAAO,OAAO,aAAa;AACnD,YAAQ,eAAe,OAAO;AAC9B,UAAM,GAAG,MAAM;AAAA,EACjB;AACF;AAEA,MAAM,uBAGF;AAAA,EACF,IAAI;AAAA,EACJ,MAAM,QAAQ,UAAU,KAAK;AAC3B,UAAM,QAAQ,oBAAoB,MAAM,QAAQ;AAChD,UAAM,KAAM,IAAI,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC/D,UAAM,UAAU,MAAM,qBAAqB,IAAI,KAAK;AACpD,UAAM,UAAU,MAAM,GAAG,KAAK,eAAe,EAAE,WAAW,QAAQ,GAAG,CAAC;AACtE,UAAM,SAAS,8BAA8B,SAAS,SAAS,MAAM,QAAQ;AAE7E,QAAI,CAAC,QAAQ;AACX,YAAM,IAAI,MAAM,kBAAkB;AAAA,IACpC;AAEA,QAAI,QAAQ,aAAa;AACvB,YAAM,OAAO,OAAO,IAAI,MAAM,sBAAsB,GAAG,EAAE,aAAa,QAAQ,YAAY,CAAC;AAAA,IAC7F;AAEA,UAAM,0BAA0B,wBAAwB,MAAM;AAE9D,UAAM,aAAa,yBAAyB,OAAO;AACnD,QAAI,YAAY,WAAW;AACzB,UAAI,IAAI,KAAK,WAAW,SAAS,IAAI,oBAAI,KAAK,GAAG;AAC/C,cAAM,IAAI,MAAM,sBAAsB;AAAA,MACxC;AAAA,IACF,OAAO;AACL,YAAM,cAAc,eAAe,QAAQ,IAAI;AAC/C,UAAI,aAAa,2BAA2B,QAAQ,QAAQ;AAC1D,cAAM,SAAS,IAAI,KAAK,QAAQ,OAAO,QAAQ,IAAI,YAAY,0BAA0B,KAAK,KAAK,GAAI;AACvG,YAAI,SAAS,oBAAI,KAAK,GAAG;AACvB,gBAAM,IAAI,MAAM,sBAAsB;AAAA,QACxC;AAAA,MACF;AAAA,IACF;AAEA,UAAM,aAAa,IAAI,UAAU,QAAQ,YAAY;AAOrD,QAAI,SAAkC,CAAC;AACvC,QAAI,oBAAoC;AAExC,QAAI,OAAO,WAAW;AACpB,UAAI;AACF,cAAM,cAAc;AAAA,UAClB;AAAA,UACA;AAAA,UACA;AAAA,YACE,UAAU,MAAM;AAAA,YAChB,gBAAgB,MAAM;AAAA,YACtB,QAAQ,MAAM;AAAA,UAChB;AAAA,UACA,MAAM,WAAW,CAAC;AAAA,QACpB;AAEA,YAAI,YAAY,MAAM,MAAM;AAC1B,gBAAM,aAAa,OAAO,WAAW,YAAY,QAAQ,kBAAkB;AAC3E,cAAI,OAAO,eAAe,YAAY,WAAW,KAAK,EAAE,SAAS,GAAG;AAClE,wBAAY,KAAK;AAAA,UACnB;AAAA,QACF;AAEA,cAAM,gBAAgB,MAAM,WAAW,QAAQ,OAAO,WAAW;AAAA,UAC/D,OAAO;AAAA,UACP,KAAK;AAAA,YACH,WAAW,IAAI;AAAA,YACf,MAAM;AAAA,cACJ,KAAK,MAAM;AAAA,cACX,UAAU,MAAM;AAAA,cAChB,OAAO,MAAM;AAAA,YACf;AAAA,YACA,mBAAmB;AAAA,YACnB,wBAAwB,MAAM;AAAA,YAC9B,iBAAiB,MAAM,iBAAiB,CAAC,MAAM,cAAc,IAAI;AAAA,UACnE;AAAA,UACA,UAAU;AAAA,YACR,UAAU,MAAM;AAAA,YAChB,gBAAgB,MAAM;AAAA,YACtB,cAAc;AAAA,UAChB;AAAA,QACF,CAAC;AAED,iBAAU,cAAc,UAAsC,CAAC;AAC/D,4BAAoB,cAAc,YAAY;AAAA,MAChD,SAAS,KAAK;AACZ,gBAAQ,MAAM,sDAAsD,GAAG;AACvE,cAAM,IAAI,MAAM,eAAe;AAAA,MACjC;AAAA,IACF,WAAW,OAAO,MAAM;AACtB,eAAS;AAAA,QACP,UAAU,kBAAkB,QAAQ,SAAS;AAAA,UAC3C,UAAU,MAAM;AAAA,UAChB,gBAAgB,MAAM;AAAA,UACtB,QAAQ,MAAM;AAAA,QAChB,CAAC,KAAK,OAAO;AAAA,MACf;AAAA,IACF,OAAO;AACL,YAAM,IAAI,MAAM,iCAAiC;AAAA,IACnD;AAEA,QAAI,yBAAyB;AAC3B,YAAM,iBAAiB,MAAM,WAAW,QAAQ,oCAAoC;AAAA,QAClF,OAAO;AAAA,UACL,WAAW,QAAQ;AAAA,UACnB,UAAU,OAAO;AAAA,UACjB;AAAA,UACA,UAAU,MAAM;AAAA,UAChB,gBAAgB,MAAM;AAAA,UACtB,QAAQ,MAAM;AAAA,QAChB;AAAA,QACA,KAAK;AAAA,UACH,WAAW,IAAI;AAAA,UACf,MAAM,IAAI,QAAQ;AAAA,UAClB,mBAAmB;AAAA,UACnB,wBAAwB,MAAM;AAAA,UAC9B,iBAAiB,MAAM,iBAAiB,CAAC,MAAM,cAAc,IAAI;AAAA,QACnE;AAAA,MACF,CAAC;AACD,UAAI,CAAC,mBAAmB;AACtB,4BAAoB,eAAe,YAAY;AAAA,MACjD;AACA,YAAM;AAAA,QACJ;AAAA,QACA;AAAA,UACE,WAAW,QAAQ;AAAA,UACnB,UAAU,OAAO;AAAA,UACjB,QAAQ,MAAM;AAAA,UACd,iBAAiB,MAAM;AAAA,UACvB;AAAA,UACA,UAAU,MAAM;AAAA,UAChB,gBAAgB,MAAM;AAAA,QACxB;AAAA,QACA,EAAE,YAAY,KAAK;AAAA,MACrB;AAAA,IACF;AAEA,WAAO;AAAA,MACL,IAAI;AAAA,MACJ,UAAU,OAAO;AAAA,MACjB;AAAA,MACA;AAAA,IACF;AAAA,EACF;AACF;AAEA,gBAAgB,2BAA2B;AAC3C,gBAAgB,oBAAoB;",
+  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport { z } from 'zod'\nimport { registerCommand, type CommandHandler } from '@open-mercato/shared/lib/commands'\nimport { extractUndoPayload, type UndoPayload } from '@open-mercato/shared/lib/commands/undo'\nimport { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { Message, MessageObject, MessageRecipient } from '../data/entities'\nimport { emitMessagesEvent } from '../events'\nimport {\n  findResolvedMessageActionById,\n  isTerminalMessageAction,\n  resolveActionCommandInput,\n  resolveActionHref,\n  resolveMessageActionData,\n} from '../lib/actions'\nimport { getMessageType } from '../lib/message-types-registry'\nimport { assertOrganizationAccess, type MessageScopeInput } from './shared'\n\nconst recordTerminalActionSchema = z.object({\n  messageId: z.string().uuid(),\n  actionId: z.string().min(1),\n  result: z.record(z.string(), z.unknown()),\n  tenantId: z.string().uuid(),\n  organizationId: z.string().uuid().nullable(),\n  userId: z.string().uuid(),\n})\n\ntype RecordTerminalActionInput = z.infer<typeof recordTerminalActionSchema>\n\nconst executeActionSchema = z.object({\n  messageId: z.string().uuid(),\n  actionId: z.string().min(1),\n  payload: z.record(z.string(), z.unknown()).optional(),\n  tenantId: z.string().uuid(),\n  organizationId: z.string().uuid().nullable(),\n  userId: z.string().uuid(),\n})\n\ntype ExecuteActionInput = z.infer<typeof executeActionSchema>\n\ntype ActionStateSnapshot = {\n  actionTaken: string | null\n  actionTakenByUserId: string | null\n  actionTakenAt: string | null\n  actionResult: Record<string, unknown> | null\n}\n\nfunction toIso(value: Date | null | undefined): string | null {\n  return value ? value.toISOString() : null\n}\n\nfunction toDate(value: string | null | undefined): Date | null {\n  if (!value) return null\n  return new Date(value)\n}\n\nasync function requireActionTarget(em: EntityManager, input: RecordTerminalActionInput) {\n  const message = await findOneWithDecryption(\n    em,\n    Message,\n    {\n      id: input.messageId,\n      tenantId: input.tenantId,\n      deletedAt: null,\n    },\n    undefined,\n    { tenantId: input.tenantId, organizationId: input.organizationId },\n  )\n  if (!message) throw new Error('Message not found')\n  assertOrganizationAccess(input as MessageScopeInput, message)\n\n  const recipient = await em.findOne(MessageRecipient, {\n    messageId: input.messageId,\n    recipientUserId: input.userId,\n    deletedAt: null,\n  })\n  if (!recipient) throw new Error('Access denied')\n  return message\n}\n\nasync function requireActionMessage(em: EntityManager, input: ExecuteActionInput) {\n  const message = await findOneWithDecryption(\n    em,\n    Message,\n    {\n      id: input.messageId,\n      tenantId: input.tenantId,\n      deletedAt: null,\n    },\n    undefined,\n    { tenantId: input.tenantId, organizationId: input.organizationId },\n  )\n  if (!message) throw new Error('Message not found')\n  assertOrganizationAccess(input as MessageScopeInput, message)\n  const recipient = await em.findOne(MessageRecipient, {\n    messageId: input.messageId,\n    recipientUserId: input.userId,\n    deletedAt: null,\n  })\n  if (!recipient) throw new Error('Access denied')\n  return message\n}\n\nfunction snapshotActionState(message: Message): ActionStateSnapshot {\n  return {\n    actionTaken: message.actionTaken ?? null,\n    actionTakenByUserId: message.actionTakenByUserId ?? null,\n    actionTakenAt: toIso(message.actionTakenAt),\n    actionResult: message.actionResult ?? null,\n  }\n}\n\nconst recordTerminalActionCommand: CommandHandler<unknown, { ok: true }> = {\n  id: 'messages.actions.record_terminal',\n  async prepare(rawInput, ctx) {\n    const input = recordTerminalActionSchema.parse(rawInput)\n    const em = (ctx.container.resolve('em') as EntityManager).fork()\n    const message = await requireActionTarget(em, input)\n    return { before: snapshotActionState(message) }\n  },\n  async execute(rawInput, ctx) {\n    const input = recordTerminalActionSchema.parse(rawInput)\n    const em = (ctx.container.resolve('em') as EntityManager).fork()\n    const message = await requireActionTarget(em, input)\n    if (message.actionTaken) {\n      throw new Error('Action already taken')\n    }\n    message.actionTaken = input.actionId\n    message.actionTakenByUserId = input.userId\n    message.actionTakenAt = new Date()\n    message.actionResult = input.result\n    await em.flush()\n    return { ok: true }\n  },\n  async captureAfter(rawInput, _result, ctx) {\n    const input = recordTerminalActionSchema.parse(rawInput)\n    const em = (ctx.container.resolve('em') as EntityManager).fork()\n    const message = await requireActionTarget(em, input)\n    return snapshotActionState(message)\n  },\n  buildLog: async ({ input, snapshots }) => {\n    const parsed = recordTerminalActionSchema.parse(input)\n    return {\n      actionLabel: 'Execute message terminal action',\n      resourceKind: 'messages.message',\n      resourceId: parsed.messageId,\n      tenantId: parsed.tenantId,\n      organizationId: parsed.organizationId,\n      payload: {\n        undo: {\n          before: (snapshots.before as ActionStateSnapshot | undefined) ?? null,\n          after: (snapshots.after as ActionStateSnapshot | undefined) ?? null,\n        } satisfies UndoPayload<ActionStateSnapshot>,\n      },\n      snapshotBefore: snapshots.before ?? null,\n      snapshotAfter: snapshots.after ?? null,\n    }\n  },\n  undo: async ({ logEntry, ctx }) => {\n    const undo = extractUndoPayload<UndoPayload<ActionStateSnapshot>>(logEntry)\n    const before = undo?.before\n    if (!before) return\n    const messageId = logEntry?.resourceId as string | null\n    if (!messageId) return\n    const em = (ctx.container.resolve('em') as EntityManager).fork()\n    const message = await findOneWithDecryption(em, Message, { id: messageId })\n    if (!message) return\n    message.actionTaken = before.actionTaken\n    message.actionTakenByUserId = before.actionTakenByUserId\n    message.actionTakenAt = toDate(before.actionTakenAt)\n    message.actionResult = before.actionResult\n    await em.flush()\n  },\n}\n\nconst executeActionCommand: CommandHandler<\n  unknown,\n  { ok: true; actionId: string; result: Record<string, unknown>; operationLogEntry: unknown | null }\n> = {\n  id: 'messages.actions.execute',\n  async execute(rawInput, ctx) {\n    const input = executeActionSchema.parse(rawInput)\n    const em = (ctx.container.resolve('em') as EntityManager).fork()\n    const message = await requireActionMessage(em, input)\n    const objects = await em.find(MessageObject, { messageId: message.id })\n    const action = findResolvedMessageActionById(message, objects, input.actionId)\n\n    if (!action) {\n      throw new Error('Action not found')\n    }\n\n    if (message.actionTaken) {\n      throw Object.assign(new Error('Action already taken'), { actionTaken: message.actionTaken })\n    }\n\n    const shouldRecordActionTaken = isTerminalMessageAction(action)\n\n    const actionData = resolveMessageActionData(message)\n    if (actionData?.expiresAt) {\n      if (new Date(actionData.expiresAt) < new Date()) {\n        throw new Error('Actions have expired')\n      }\n    } else {\n      const messageType = getMessageType(message.type)\n      if (messageType?.actionsExpireAfterHours && message.sentAt) {\n        const expiry = new Date(message.sentAt.getTime() + messageType.actionsExpireAfterHours * 60 * 60 * 1000)\n        if (expiry < new Date()) {\n          throw new Error('Actions have expired')\n        }\n      }\n    }\n\n    const commandBus = ctx.container.resolve('commandBus') as {\n      execute: (\n        commandId: string,\n        options: { input: unknown; ctx: unknown; metadata?: unknown }\n      ) => Promise<{ result: unknown; logEntry?: unknown }>\n    }\n\n    let result: Record<string, unknown> = {}\n    let operationLogEntry: unknown | null = null\n\n    if (action.commandId) {\n      try {\n        const actionInput = resolveActionCommandInput(\n          action,\n          message,\n          {\n            tenantId: input.tenantId,\n            organizationId: input.organizationId,\n            userId: input.userId,\n          },\n          input.payload ?? {},\n        )\n\n        if (actionInput.id == null) {\n          const fallbackId = action.objectRef?.entityId ?? message.sourceEntityId ?? null\n          if (typeof fallbackId === 'string' && fallbackId.trim().length > 0) {\n            actionInput.id = fallbackId\n          }\n        }\n\n        const commandResult = await commandBus.execute(action.commandId, {\n          input: actionInput,\n          ctx: {\n            container: ctx.container,\n            auth: {\n              sub: input.userId,\n              tenantId: input.tenantId,\n              orgId: input.organizationId,\n            },\n            organizationScope: null,\n            selectedOrganizationId: input.organizationId,\n            organizationIds: input.organizationId ? [input.organizationId] : null,\n          },\n          metadata: {\n            tenantId: input.tenantId,\n            organizationId: input.organizationId,\n            resourceKind: 'messages',\n          },\n        })\n\n        result = (commandResult.result as Record<string, unknown>) ?? {}\n        operationLogEntry = commandResult.logEntry ?? null\n      } catch (err) {\n        console.error('[messages] executeActionCommand sub-command failed', err)\n        throw new Error('Action failed')\n      }\n    } else if (action.href) {\n      const safeRedirect = resolveActionHref(action, message, {\n        tenantId: input.tenantId,\n        organizationId: input.organizationId,\n        userId: input.userId,\n      })\n      if (!safeRedirect) {\n        throw new Error('Action has an unsafe redirect target')\n      }\n      result = { redirect: safeRedirect }\n    } else {\n      throw new Error('Action has no executable target')\n    }\n\n    if (shouldRecordActionTaken) {\n      const terminalResult = await commandBus.execute('messages.actions.record_terminal', {\n        input: {\n          messageId: message.id,\n          actionId: action.id,\n          result,\n          tenantId: input.tenantId,\n          organizationId: input.organizationId,\n          userId: input.userId,\n        },\n        ctx: {\n          container: ctx.container,\n          auth: ctx.auth ?? null,\n          organizationScope: null,\n          selectedOrganizationId: input.organizationId,\n          organizationIds: input.organizationId ? [input.organizationId] : null,\n        },\n      })\n      if (!operationLogEntry) {\n        operationLogEntry = terminalResult.logEntry ?? null\n      }\n      await emitMessagesEvent(\n        'messages.message.action_taken',\n        {\n          messageId: message.id,\n          actionId: action.id,\n          userId: input.userId,\n          recipientUserId: input.userId,\n          result,\n          tenantId: input.tenantId,\n          organizationId: input.organizationId,\n        },\n        { persistent: true }\n      )\n    }\n\n    return {\n      ok: true,\n      actionId: action.id,\n      result,\n      operationLogEntry,\n    }\n  },\n}\n\nregisterCommand(recordTerminalActionCommand)\nregisterCommand(executeActionCommand)\n"],
+  "mappings": "AACA,SAAS,SAAS;AAClB,SAAS,uBAA4C;AACrD,SAAS,0BAA4C;AACrD,SAAS,6BAA6B;AACtC,SAAS,SAAS,eAAe,wBAAwB;AACzD,SAAS,yBAAyB;AAClC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,sBAAsB;AAC/B,SAAS,gCAAwD;AAEjE,MAAM,6BAA6B,EAAE,OAAO;AAAA,EAC1C,WAAW,EAAE,OAAO,EAAE,KAAK;AAAA,EAC3B,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EAC1B,QAAQ,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC;AAAA,EACxC,UAAU,EAAE,OAAO,EAAE,KAAK;AAAA,EAC1B,gBAAgB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EAC3C,QAAQ,EAAE,OAAO,EAAE,KAAK;AAC1B,CAAC;AAID,MAAM,sBAAsB,EAAE,OAAO;AAAA,EACnC,WAAW,EAAE,OAAO,EAAE,KAAK;AAAA,EAC3B,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EAC1B,SAAS,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,EAAE,SAAS;AAAA,EACpD,UAAU,EAAE,OAAO,EAAE,KAAK;AAAA,EAC1B,gBAAgB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EAC3C,QAAQ,EAAE,OAAO,EAAE,KAAK;AAC1B,CAAC;AAWD,SAAS,MAAM,OAA+C;AAC5D,SAAO,QAAQ,MAAM,YAAY,IAAI;AACvC;AAEA,SAAS,OAAO,OAA+C;AAC7D,MAAI,CAAC,MAAO,QAAO;AACnB,SAAO,IAAI,KAAK,KAAK;AACvB;AAEA,eAAe,oBAAoB,IAAmB,OAAkC;AACtF,QAAM,UAAU,MAAM;AAAA,IACpB;AAAA,IACA;AAAA,IACA;AAAA,MACE,IAAI,MAAM;AAAA,MACV,UAAU,MAAM;AAAA,MAChB,WAAW;AAAA,IACb;AAAA,IACA;AAAA,IACA,EAAE,UAAU,MAAM,UAAU,gBAAgB,MAAM,eAAe;AAAA,EACnE;AACA,MAAI,CAAC,QAAS,OAAM,IAAI,MAAM,mBAAmB;AACjD,2BAAyB,OAA4B,OAAO;AAE5D,QAAM,YAAY,MAAM,GAAG,QAAQ,kBAAkB;AAAA,IACnD,WAAW,MAAM;AAAA,IACjB,iBAAiB,MAAM;AAAA,IACvB,WAAW;AAAA,EACb,CAAC;AACD,MAAI,CAAC,UAAW,OAAM,IAAI,MAAM,eAAe;AAC/C,SAAO;AACT;AAEA,eAAe,qBAAqB,IAAmB,OAA2B;AAChF,QAAM,UAAU,MAAM;AAAA,IACpB;AAAA,IACA;AAAA,IACA;AAAA,MACE,IAAI,MAAM;AAAA,MACV,UAAU,MAAM;AAAA,MAChB,WAAW;AAAA,IACb;AAAA,IACA;AAAA,IACA,EAAE,UAAU,MAAM,UAAU,gBAAgB,MAAM,eAAe;AAAA,EACnE;AACA,MAAI,CAAC,QAAS,OAAM,IAAI,MAAM,mBAAmB;AACjD,2BAAyB,OAA4B,OAAO;AAC5D,QAAM,YAAY,MAAM,GAAG,QAAQ,kBAAkB;AAAA,IACnD,WAAW,MAAM;AAAA,IACjB,iBAAiB,MAAM;AAAA,IACvB,WAAW;AAAA,EACb,CAAC;AACD,MAAI,CAAC,UAAW,OAAM,IAAI,MAAM,eAAe;AAC/C,SAAO;AACT;AAEA,SAAS,oBAAoB,SAAuC;AAClE,SAAO;AAAA,IACL,aAAa,QAAQ,eAAe;AAAA,IACpC,qBAAqB,QAAQ,uBAAuB;AAAA,IACpD,eAAe,MAAM,QAAQ,aAAa;AAAA,IAC1C,cAAc,QAAQ,gBAAgB;AAAA,EACxC;AACF;AAEA,MAAM,8BAAqE;AAAA,EACzE,IAAI;AAAA,EACJ,MAAM,QAAQ,UAAU,KAAK;AAC3B,UAAM,QAAQ,2BAA2B,MAAM,QAAQ;AACvD,UAAM,KAAM,IAAI,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC/D,UAAM,UAAU,MAAM,oBAAoB,IAAI,KAAK;AACnD,WAAO,EAAE,QAAQ,oBAAoB,OAAO,EAAE;AAAA,EAChD;AAAA,EACA,MAAM,QAAQ,UAAU,KAAK;AAC3B,UAAM,QAAQ,2BAA2B,MAAM,QAAQ;AACvD,UAAM,KAAM,IAAI,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC/D,UAAM,UAAU,MAAM,oBAAoB,IAAI,KAAK;AACnD,QAAI,QAAQ,aAAa;AACvB,YAAM,IAAI,MAAM,sBAAsB;AAAA,IACxC;AACA,YAAQ,cAAc,MAAM;AAC5B,YAAQ,sBAAsB,MAAM;AACpC,YAAQ,gBAAgB,oBAAI,KAAK;AACjC,YAAQ,eAAe,MAAM;AAC7B,UAAM,GAAG,MAAM;AACf,WAAO,EAAE,IAAI,KAAK;AAAA,EACpB;AAAA,EACA,MAAM,aAAa,UAAU,SAAS,KAAK;AACzC,UAAM,QAAQ,2BAA2B,MAAM,QAAQ;AACvD,UAAM,KAAM,IAAI,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC/D,UAAM,UAAU,MAAM,oBAAoB,IAAI,KAAK;AACnD,WAAO,oBAAoB,OAAO;AAAA,EACpC;AAAA,EACA,UAAU,OAAO,EAAE,OAAO,UAAU,MAAM;AACxC,UAAM,SAAS,2BAA2B,MAAM,KAAK;AACrD,WAAO;AAAA,MACL,aAAa;AAAA,MACb,cAAc;AAAA,MACd,YAAY,OAAO;AAAA,MACnB,UAAU,OAAO;AAAA,MACjB,gBAAgB,OAAO;AAAA,MACvB,SAAS;AAAA,QACP,MAAM;AAAA,UACJ,QAAS,UAAU,UAA8C;AAAA,UACjE,OAAQ,UAAU,SAA6C;AAAA,QACjE;AAAA,MACF;AAAA,MACA,gBAAgB,UAAU,UAAU;AAAA,MACpC,eAAe,UAAU,SAAS;AAAA,IACpC;AAAA,EACF;AAAA,EACA,MAAM,OAAO,EAAE,UAAU,IAAI,MAAM;AACjC,UAAM,OAAO,mBAAqD,QAAQ;AAC1E,UAAM,SAAS,MAAM;AACrB,QAAI,CAAC,OAAQ;AACb,UAAM,YAAY,UAAU;AAC5B,QAAI,CAAC,UAAW;AAChB,UAAM,KAAM,IAAI,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC/D,UAAM,UAAU,MAAM,sBAAsB,IAAI,SAAS,EAAE,IAAI,UAAU,CAAC;AAC1E,QAAI,CAAC,QAAS;AACd,YAAQ,cAAc,OAAO;AAC7B,YAAQ,sBAAsB,OAAO;AACrC,YAAQ,gBAAgB,OAAO,OAAO,aAAa;AACnD,YAAQ,eAAe,OAAO;AAC9B,UAAM,GAAG,MAAM;AAAA,EACjB;AACF;AAEA,MAAM,uBAGF;AAAA,EACF,IAAI;AAAA,EACJ,MAAM,QAAQ,UAAU,KAAK;AAC3B,UAAM,QAAQ,oBAAoB,MAAM,QAAQ;AAChD,UAAM,KAAM,IAAI,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC/D,UAAM,UAAU,MAAM,qBAAqB,IAAI,KAAK;AACpD,UAAM,UAAU,MAAM,GAAG,KAAK,eAAe,EAAE,WAAW,QAAQ,GAAG,CAAC;AACtE,UAAM,SAAS,8BAA8B,SAAS,SAAS,MAAM,QAAQ;AAE7E,QAAI,CAAC,QAAQ;AACX,YAAM,IAAI,MAAM,kBAAkB;AAAA,IACpC;AAEA,QAAI,QAAQ,aAAa;AACvB,YAAM,OAAO,OAAO,IAAI,MAAM,sBAAsB,GAAG,EAAE,aAAa,QAAQ,YAAY,CAAC;AAAA,IAC7F;AAEA,UAAM,0BAA0B,wBAAwB,MAAM;AAE9D,UAAM,aAAa,yBAAyB,OAAO;AACnD,QAAI,YAAY,WAAW;AACzB,UAAI,IAAI,KAAK,WAAW,SAAS,IAAI,oBAAI,KAAK,GAAG;AAC/C,cAAM,IAAI,MAAM,sBAAsB;AAAA,MACxC;AAAA,IACF,OAAO;AACL,YAAM,cAAc,eAAe,QAAQ,IAAI;AAC/C,UAAI,aAAa,2BAA2B,QAAQ,QAAQ;AAC1D,cAAM,SAAS,IAAI,KAAK,QAAQ,OAAO,QAAQ,IAAI,YAAY,0BAA0B,KAAK,KAAK,GAAI;AACvG,YAAI,SAAS,oBAAI,KAAK,GAAG;AACvB,gBAAM,IAAI,MAAM,sBAAsB;AAAA,QACxC;AAAA,MACF;AAAA,IACF;AAEA,UAAM,aAAa,IAAI,UAAU,QAAQ,YAAY;AAOrD,QAAI,SAAkC,CAAC;AACvC,QAAI,oBAAoC;AAExC,QAAI,OAAO,WAAW;AACpB,UAAI;AACF,cAAM,cAAc;AAAA,UAClB;AAAA,UACA;AAAA,UACA;AAAA,YACE,UAAU,MAAM;AAAA,YAChB,gBAAgB,MAAM;AAAA,YACtB,QAAQ,MAAM;AAAA,UAChB;AAAA,UACA,MAAM,WAAW,CAAC;AAAA,QACpB;AAEA,YAAI,YAAY,MAAM,MAAM;AAC1B,gBAAM,aAAa,OAAO,WAAW,YAAY,QAAQ,kBAAkB;AAC3E,cAAI,OAAO,eAAe,YAAY,WAAW,KAAK,EAAE,SAAS,GAAG;AAClE,wBAAY,KAAK;AAAA,UACnB;AAAA,QACF;AAEA,cAAM,gBAAgB,MAAM,WAAW,QAAQ,OAAO,WAAW;AAAA,UAC/D,OAAO;AAAA,UACP,KAAK;AAAA,YACH,WAAW,IAAI;AAAA,YACf,MAAM;AAAA,cACJ,KAAK,MAAM;AAAA,cACX,UAAU,MAAM;AAAA,cAChB,OAAO,MAAM;AAAA,YACf;AAAA,YACA,mBAAmB;AAAA,YACnB,wBAAwB,MAAM;AAAA,YAC9B,iBAAiB,MAAM,iBAAiB,CAAC,MAAM,cAAc,IAAI;AAAA,UACnE;AAAA,UACA,UAAU;AAAA,YACR,UAAU,MAAM;AAAA,YAChB,gBAAgB,MAAM;AAAA,YACtB,cAAc;AAAA,UAChB;AAAA,QACF,CAAC;AAED,iBAAU,cAAc,UAAsC,CAAC;AAC/D,4BAAoB,cAAc,YAAY;AAAA,MAChD,SAAS,KAAK;AACZ,gBAAQ,MAAM,sDAAsD,GAAG;AACvE,cAAM,IAAI,MAAM,eAAe;AAAA,MACjC;AAAA,IACF,WAAW,OAAO,MAAM;AACtB,YAAM,eAAe,kBAAkB,QAAQ,SAAS;AAAA,QACtD,UAAU,MAAM;AAAA,QAChB,gBAAgB,MAAM;AAAA,QACtB,QAAQ,MAAM;AAAA,MAChB,CAAC;AACD,UAAI,CAAC,cAAc;AACjB,cAAM,IAAI,MAAM,sCAAsC;AAAA,MACxD;AACA,eAAS,EAAE,UAAU,aAAa;AAAA,IACpC,OAAO;AACL,YAAM,IAAI,MAAM,iCAAiC;AAAA,IACnD;AAEA,QAAI,yBAAyB;AAC3B,YAAM,iBAAiB,MAAM,WAAW,QAAQ,oCAAoC;AAAA,QAClF,OAAO;AAAA,UACL,WAAW,QAAQ;AAAA,UACnB,UAAU,OAAO;AAAA,UACjB;AAAA,UACA,UAAU,MAAM;AAAA,UAChB,gBAAgB,MAAM;AAAA,UACtB,QAAQ,MAAM;AAAA,QAChB;AAAA,QACA,KAAK;AAAA,UACH,WAAW,IAAI;AAAA,UACf,MAAM,IAAI,QAAQ;AAAA,UAClB,mBAAmB;AAAA,UACnB,wBAAwB,MAAM;AAAA,UAC9B,iBAAiB,MAAM,iBAAiB,CAAC,MAAM,cAAc,IAAI;AAAA,QACnE;AAAA,MACF,CAAC;AACD,UAAI,CAAC,mBAAmB;AACtB,4BAAoB,eAAe,YAAY;AAAA,MACjD;AACA,YAAM;AAAA,QACJ;AAAA,QACA;AAAA,UACE,WAAW,QAAQ;AAAA,UACnB,UAAU,OAAO;AAAA,UACjB,QAAQ,MAAM;AAAA,UACd,iBAAiB,MAAM;AAAA,UACvB;AAAA,UACA,UAAU,MAAM;AAAA,UAChB,gBAAgB,MAAM;AAAA,QACxB;AAAA,QACA,EAAE,YAAY,KAAK;AAAA,MACrB;AAAA,IACF;AAEA,WAAO;AAAA,MACL,IAAI;AAAA,MACJ,UAAU,OAAO;AAAA,MACjB;AAAA,MACA;AAAA,IACF;AAAA,EACF;AACF;AAEA,gBAAgB,2BAA2B;AAC3C,gBAAgB,oBAAoB;",
   "names": []
 }

package/dist/modules/messages/commands/messages.js

@@ -78,7 +78,11 @@ const scopeSchema = z.object({
 const composeCommandSchema = composeMessageSchema.safeExtend({
   tenantId: scopeSchema.shape.tenantId,
   organizationId: scopeSchema.shape.organizationId,
-  userId: scopeSchema.shape.userId
+  userId: scopeSchema.shape.userId,
+  // Optional dedup key (inbound email ingest sets it; other callers leave it
+  // undefined). When set, a re-issued compose returns the first message instead
+  // of creating a duplicate.
+  idempotencyKey: z.string().min(1).max(255).optional()
 });
 const updateDraftCommandSchema = updateDraftSchema.safeExtend({
   messageId: z.string().uuid(),
@@ -134,6 +138,30 @@ async function requireMessageById(em, scope, messageId) {
   assertOrganizationAccess(scope, message);
   return message;
 }
+function isUniqueViolation(err) {
+  if (!err || typeof err !== "object") return false;
+  const code = err.code;
+  if (code === "23505") return true;
+  const message = err.message;
+  return typeof message === "string" && /duplicate key value|unique constraint/i.test(message);
+}
+async function buildComposeResultFromExisting(em, message) {
+  const recipients = await findWithDecryption(
+    em,
+    MessageRecipient,
+    { messageId: message.id, deletedAt: null },
+    void 0,
+    { tenantId: message.tenantId, organizationId: message.organizationId ?? null }
+  );
+  return {
+    id: message.id,
+    threadId: message.threadId ?? null,
+    externalEmail: message.externalEmail ?? null,
+    isDraft: message.isDraft,
+    recipientUserIds: recipients.map((recipient) => recipient.recipientUserId),
+    deduplicated: true
+  };
+}
 const composeMessageCommand = {
   id: "messages.messages.compose",
   async execute(rawInput, ctx) {
@@ -143,16 +171,33 @@ const composeMessageCommand = {
       if (objectValidationError) throw new Error(objectValidationError);
     }
     const em = ctx.container.resolve("em").fork();
+    const scope = { tenantId: input.tenantId, organizationId: input.organizationId };
+    if (input.idempotencyKey) {
+      const existing = await findOneWithDecryption(
+        em,
+        Message,
+        { tenantId: input.tenantId, idempotencyKey: input.idempotencyKey },
+        void 0,
+        scope
+      );
+      if (existing) return buildComposeResultFromExisting(em, existing);
+    }
     let messageId = "";
     let responseThreadId = null;
     let responseExternalEmail = null;
-    await em.transactional(async (trx) => {
-      const threadId = input.parentMessageId ? (await trx.findOne(Message, {
-        id: input.parentMessageId,
-        tenantId: input.tenantId,
-        organizationId: input.organizationId,
-        deletedAt: null
-      }))?.threadId ?? input.parentMessageId : void 0;
+    const composeTx = em.transactional(async (trx) => {
+      const threadId = input.parentMessageId ? (await findOneWithDecryption(
+        trx,
+        Message,
+        {
+          id: input.parentMessageId,
+          tenantId: input.tenantId,
+          organizationId: input.organizationId,
+          deletedAt: null
+        },
+        void 0,
+        scope
+      ))?.threadId ?? input.parentMessageId : void 0;
       const isPublicVisibility = input.visibility === "public";
       const sendViaEmail = isPublicVisibility ? true : input.sendViaEmail;
       const message = trx.create(Message, {
@@ -174,6 +219,7 @@ const composeMessageCommand = {
         sentAt: input.isDraft ? null : /* @__PURE__ */ new Date(),
         actionData: input.actionData,
         sendViaEmail,
+        idempotencyKey: input.idempotencyKey ?? null,
         tenantId: input.tenantId,
         organizationId: input.organizationId
       });
@@ -226,6 +272,21 @@ const composeMessageCommand = {
       responseThreadId = message.threadId ?? null;
       responseExternalEmail = message.externalEmail ?? null;
     });
+    try {
+      await composeTx;
+    } catch (err) {
+      if (input.idempotencyKey && isUniqueViolation(err)) {
+        const existing = await findOneWithDecryption(
+          em.fork(),
+          Message,
+          { tenantId: input.tenantId, idempotencyKey: input.idempotencyKey },
+          void 0,
+          scope
+        );
+        if (existing) return buildComposeResultFromExisting(em.fork(), existing);
+      }
+      throw err;
+    }
     if (!input.isDraft) {
       await emitMessageSentEvent(ctx.container, {
         messageId,
@@ -255,6 +316,7 @@ const composeMessageCommand = {
     return loadMessageAggregateSnapshot(em, result.id);
   },
   buildLog: async ({ input, result, snapshots }) => {
+    if (result.deduplicated) return { skipLog: true };
     const parsed = composeCommandSchema.parse(input);
     return {
       actionLabel: parsed.isDraft ? "Create draft message" : "Compose message",
@@ -336,7 +398,18 @@ const updateDraftCommand = {
         if (objectValidationError) throw new Error(objectValidationError);
       }
     }
-    await withAtomicFlush(em, [async () => {
+    if (isSending) {
+      const finalVisibility = input.visibility ?? message.visibility;
+      const finalSubject = input.subject ?? message.subject;
+      const finalBody = input.body ?? message.body;
+      const finalRecipientCount = input.recipients ? input.recipients.length : preloadedRecipients?.length ?? 0;
+      if (finalVisibility !== "public" && finalRecipientCount === 0) {
+        throw new Error("at least one recipient is required");
+      }
+      if (!finalSubject?.trim()) throw new Error("subject is required");
+      if (!finalBody?.trim()) throw new Error("body is required");
+    }
+    await withAtomicFlush(em, [() => {
       if (input.type !== void 0) message.type = input.type;
       if (input.visibility !== void 0) message.visibility = input.visibility;
       if (input.sourceEntityType !== void 0) message.sourceEntityType = input.sourceEntityType;
@@ -349,6 +422,7 @@ const updateDraftCommand = {
       if (input.priority !== void 0) message.priority = input.priority;
       if (input.actionData !== void 0) message.actionData = input.actionData;
       if (input.sendViaEmail !== void 0) message.sendViaEmail = input.sendViaEmail;
+    }, async () => {
       if (input.recipients) {
         await em.nativeDelete(MessageRecipient, { messageId: message.id });
         for (const recipient of input.recipients) {
@@ -401,15 +475,6 @@ const updateDraftCommand = {
         );
       }
       if (isSending) {
-        const finalVisibility = input.visibility ?? message.visibility;
-        const finalSubject = input.subject ?? message.subject;
-        const finalBody = input.body ?? message.body;
-        const finalRecipientCount = input.recipients ? input.recipients.length : preloadedRecipients?.length ?? 0;
-        if (finalVisibility !== "public" && finalRecipientCount === 0) {
-          throw new Error("at least one recipient is required");
-        }
-        if (!finalSubject?.trim()) throw new Error("subject is required");
-        if (!finalBody?.trim()) throw new Error("body is required");
         message.isDraft = false;
         message.status = "sent";
         message.sentAt = /* @__PURE__ */ new Date();