@open-mercato/core 0.6.4-develop.4382.1.6b4f656b77 → 0.6.4

package/dist/modules/communication_channels/commands/disconnect-channel.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/communication_channels/commands/disconnect-channel.ts"],
+  "sourcesContent": ["import { z } from 'zod'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport type { CommandHandler } from '@open-mercato/shared/lib/commands'\nimport { registerCommand } from '@open-mercato/shared/lib/commands'\nimport { extractUndoPayload as extractSharedUndoPayload } from '@open-mercato/shared/lib/commands/undo'\nimport { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { CommunicationChannel } from '../data/entities'\nimport { emitCommunicationChannelsEvent } from '../events'\nimport { pushUnregister } from './push-unregister'\n\nconst disconnectChannelSchema = z.object({\n  channelId: z.string().uuid(),\n  userId: z.string().uuid(),\n  scope: z.object({\n    tenantId: z.string().uuid(),\n    organizationId: z.string().uuid().nullable(),\n  }),\n})\n\nexport type DisconnectChannelInput = z.infer<typeof disconnectChannelSchema>\n\nexport type DisconnectChannelResult =\n  | {\n      status: 'disconnected'\n      channelId: string\n      undo: DisconnectChannelUndoSnapshot\n    }\n  | { status: 'noop'; reason: string }\n  | { status: 'not_owner'; reason: string }\n\nexport interface DisconnectChannelUndoSnapshot {\n  channelId: string\n  // Optional for backward compatibility with log entries written before tenant\n  // scoping was added to the undo lookup; new snapshots always set it.\n  tenantId?: string\n  previousStatus: string\n  previousIsActive: boolean\n  previousIsPrimary: boolean\n  previousCredentialsRef: string | null\n  previousLastError: string | null\n}\n\nexport const COMMUNICATION_CHANNELS_DISCONNECT_CHANNEL_COMMAND_ID =\n  'communication_channels.channel.disconnect'\n\n/**\n * Disconnect a per-user channel.\n *\n * Setting `status='disconnected'` halts the polling worker (slice 3b filters by\n * status) and clears the credentials reference so the adapter can't pick the\n * channel up by accident. `isPrimary` is cleared too \u2014 keeping it set would\n * leave the user without a working primary and any future `send-as-user` call\n * would 404 the lookup. The `credentials_ref` row in `integration_credentials`\n * is left orphaned; the integrations module's retention policy sweeps it.\n *\n * The command is undoable: the `before` snapshot captures the four-tuple\n * (status, is_active, is_primary, credentials_ref) so undo can restore the\n * channel atomically. Undo is gated by the `beforeUndo` interceptor in\n * `commands/interceptors.ts` \u2014 if another channel became primary while this\n * one was disconnected, undo is blocked to avoid violating the partial-unique\n * \"one primary per user\" constraint.\n */\nconst disconnectChannelCommand: CommandHandler<\n  DisconnectChannelInput,\n  DisconnectChannelResult\n> = {\n  id: COMMUNICATION_CHANNELS_DISCONNECT_CHANNEL_COMMAND_ID,\n  // Explicitly undoable (the bus also infers this from `undo` below, but\n  // declaring it keeps undoability from silently dropping under a refactor).\n  isUndoable: true,\n  async execute(rawInput, ctx) {\n    const input = disconnectChannelSchema.parse(rawInput) as DisconnectChannelInput\n    const em = (ctx.container.resolve('em') as EntityManager).fork()\n    const dscope = {\n      tenantId: input.scope.tenantId,\n      organizationId: input.scope.organizationId ?? null,\n    }\n\n    const channel = await findOneWithDecryption(\n      em,\n      CommunicationChannel,\n      {\n        id: input.channelId,\n        tenantId: input.scope.tenantId,\n        organizationId: input.scope.organizationId ?? null,\n        deletedAt: null,\n      },\n      undefined,\n      dscope,\n    )\n    if (!channel) {\n      return { status: 'noop', reason: 'channel not found' }\n    }\n    if (channel.userId !== input.userId) {\n      return { status: 'not_owner', reason: 'channel is not owned by the current user' }\n    }\n    if (channel.status === 'disconnected' && !channel.isActive) {\n      return { status: 'noop', reason: 'channel is already disconnected' }\n    }\n\n    const undo: DisconnectChannelUndoSnapshot = {\n      channelId: channel.id,\n      tenantId: channel.tenantId,\n      previousStatus: channel.status,\n      previousIsActive: channel.isActive,\n      previousIsPrimary: channel.isPrimary,\n      previousCredentialsRef: channel.credentialsRef ?? null,\n      previousLastError: channel.lastError ?? null,\n    }\n\n    // Spec C \u00A7 Phase C5 \u2014 tear down provider-side push delivery BEFORE we\n    // clear `credentialsRef`. Best-effort: any failure (404, expired token,\n    // adapter error) is logged inside `pushUnregister` and never re-raised.\n    // The teardown needs valid credentials, which we still have at this\n    // point \u2014 clearing them below would make it impossible.\n    if (input.scope.organizationId) {\n      try {\n        await pushUnregister({\n          container: ctx.container,\n          scope: {\n            tenantId: input.scope.tenantId,\n            organizationId: input.scope.organizationId,\n            userId: input.userId,\n          },\n          input: { channelId: channel.id },\n        })\n      } catch (err) {\n        console.warn(\n          `[disconnect-channel] push unregister failed for ${channel.id}: ${\n            err instanceof Error ? err.message : String(err)\n          }`,\n        )\n      }\n    }\n\n    channel.status = 'disconnected'\n    channel.isActive = false\n    channel.isPrimary = false\n    channel.credentialsRef = null\n    channel.lastError = 'user-disconnected'\n    channel.lastPolledAt = new Date()\n    await em.flush()\n\n    // Emit AFTER flush so subscribers observe a committed state. Persistent\n    // delivery so workflows/audit/UI refresh can retry on failure.\n    await emitCommunicationChannelsEvent(\n      'communication_channels.channel.disconnected',\n      {\n        channelId: channel.id,\n        userId: input.userId,\n        providerKey: channel.providerKey,\n        channelType: channel.channelType,\n        tenantId: input.scope.tenantId,\n        organizationId: input.scope.organizationId ?? null,\n      },\n      { persistent: true },\n    )\n\n    return { status: 'disconnected', channelId: channel.id, undo }\n  },\n  // Persist the undo snapshot into the action log. Without this, the command bus\n  // mints an undo token (so the UI offers \"Undo\") but the snapshot returned from\n  // execute() is never stored, and undo() would silently no-op.\n  async buildLog({ input, result }) {\n    if (result.status !== 'disconnected') return null\n    return {\n      resourceKind: 'communication_channels.channel',\n      resourceId: result.channelId,\n      tenantId: result.undo.tenantId ?? input.scope.tenantId,\n      organizationId: input.scope.organizationId ?? null,\n      payload: { undo: result.undo },\n      snapshotBefore: result.undo,\n    }\n  },\n  async undo({ ctx, logEntry }) {\n    const snapshot = extractSnapshotFromLog(logEntry)\n    if (!snapshot) return\n    const em = (ctx.container.resolve('em') as EntityManager).fork()\n    // Never resolve by bare id (cross-tenant). New snapshots always carry\n    // tenantId; refuse the undo if a legacy snapshot lacks it.\n    if (!snapshot.tenantId) return\n    const channel = await findOneWithDecryption(\n      em,\n      CommunicationChannel,\n      { id: snapshot.channelId, tenantId: snapshot.tenantId },\n      undefined,\n      { tenantId: snapshot.tenantId, organizationId: null },\n    )\n    if (!channel) return\n\n    channel.status = snapshot.previousStatus as CommunicationChannel['status']\n    channel.isActive = snapshot.previousIsActive\n    channel.isPrimary = snapshot.previousIsPrimary\n    channel.credentialsRef = snapshot.previousCredentialsRef\n    channel.lastError = snapshot.previousLastError\n    await em.flush()\n  },\n}\n\n/**\n * Read the undo payload defensively \u2014 wraps the shared\n * `@open-mercato/shared/lib/commands/undo.ts` helper with a narrow-by-shape\n * validation so callers get a strongly-typed snapshot or `null`.\n *\n * Kept as a separate export for test ergonomics (tests can mock the snapshot\n * shape directly without round-tripping through a CommandLogEntry).\n */\nexport function extractUndoPayload(value: unknown): DisconnectChannelUndoSnapshot | null {\n  if (!value || typeof value !== 'object') return null\n  const candidate = (value as { undo?: unknown; channelId?: unknown }).undo ?? value\n  if (!candidate || typeof candidate !== 'object') return null\n  const obj = candidate as Record<string, unknown>\n  if (typeof obj.channelId !== 'string') return null\n  return {\n    channelId: obj.channelId,\n    tenantId: typeof obj.tenantId === 'string' ? obj.tenantId : undefined,\n    previousStatus: typeof obj.previousStatus === 'string' ? obj.previousStatus : 'connected',\n    previousIsActive: typeof obj.previousIsActive === 'boolean' ? obj.previousIsActive : true,\n    previousIsPrimary: typeof obj.previousIsPrimary === 'boolean' ? obj.previousIsPrimary : false,\n    previousCredentialsRef:\n      typeof obj.previousCredentialsRef === 'string' ? obj.previousCredentialsRef : null,\n    previousLastError: typeof obj.previousLastError === 'string' ? obj.previousLastError : null,\n  }\n}\n\n/**\n * Pulls the disconnect snapshot from a command log entry \u2014 first via the\n * shared `extractUndoPayload` helper, then through the local shape-validator.\n * Always falls back to `null` so the undo handler can no-op safely.\n */\nexport function extractSnapshotFromLog(logEntry: unknown): DisconnectChannelUndoSnapshot | null {\n  const undo = extractSharedUndoPayload<DisconnectChannelUndoSnapshot>(\n    (logEntry ?? null) as never,\n  )\n  if (undo) return extractUndoPayload(undo)\n  return extractUndoPayload(logEntry)\n}\n\nregisterCommand(disconnectChannelCommand)\n\nexport default disconnectChannelCommand\n"],
+  "mappings": "AAAA,SAAS,SAAS;AAGlB,SAAS,uBAAuB;AAChC,SAAS,sBAAsB,gCAAgC;AAC/D,SAAS,6BAA6B;AACtC,SAAS,4BAA4B;AACrC,SAAS,sCAAsC;AAC/C,SAAS,sBAAsB;AAE/B,MAAM,0BAA0B,EAAE,OAAO;AAAA,EACvC,WAAW,EAAE,OAAO,EAAE,KAAK;AAAA,EAC3B,QAAQ,EAAE,OAAO,EAAE,KAAK;AAAA,EACxB,OAAO,EAAE,OAAO;AAAA,IACd,UAAU,EAAE,OAAO,EAAE,KAAK;AAAA,IAC1B,gBAAgB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EAC7C,CAAC;AACH,CAAC;AAyBM,MAAM,uDACX;AAmBF,MAAM,2BAGF;AAAA,EACF,IAAI;AAAA;AAAA;AAAA,EAGJ,YAAY;AAAA,EACZ,MAAM,QAAQ,UAAU,KAAK;AAC3B,UAAM,QAAQ,wBAAwB,MAAM,QAAQ;AACpD,UAAM,KAAM,IAAI,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC/D,UAAM,SAAS;AAAA,MACb,UAAU,MAAM,MAAM;AAAA,MACtB,gBAAgB,MAAM,MAAM,kBAAkB;AAAA,IAChD;AAEA,UAAM,UAAU,MAAM;AAAA,MACpB;AAAA,MACA;AAAA,MACA;AAAA,QACE,IAAI,MAAM;AAAA,QACV,UAAU,MAAM,MAAM;AAAA,QACtB,gBAAgB,MAAM,MAAM,kBAAkB;AAAA,QAC9C,WAAW;AAAA,MACb;AAAA,MACA;AAAA,MACA;AAAA,IACF;AACA,QAAI,CAAC,SAAS;AACZ,aAAO,EAAE,QAAQ,QAAQ,QAAQ,oBAAoB;AAAA,IACvD;AACA,QAAI,QAAQ,WAAW,MAAM,QAAQ;AACnC,aAAO,EAAE,QAAQ,aAAa,QAAQ,2CAA2C;AAAA,IACnF;AACA,QAAI,QAAQ,WAAW,kBAAkB,CAAC,QAAQ,UAAU;AAC1D,aAAO,EAAE,QAAQ,QAAQ,QAAQ,kCAAkC;AAAA,IACrE;AAEA,UAAM,OAAsC;AAAA,MAC1C,WAAW,QAAQ;AAAA,MACnB,UAAU,QAAQ;AAAA,MAClB,gBAAgB,QAAQ;AAAA,MACxB,kBAAkB,QAAQ;AAAA,MAC1B,mBAAmB,QAAQ;AAAA,MAC3B,wBAAwB,QAAQ,kBAAkB;AAAA,MAClD,mBAAmB,QAAQ,aAAa;AAAA,IAC1C;AAOA,QAAI,MAAM,MAAM,gBAAgB;AAC9B,UAAI;AACF,cAAM,eAAe;AAAA,UACnB,WAAW,IAAI;AAAA,UACf,OAAO;AAAA,YACL,UAAU,MAAM,MAAM;AAAA,YACtB,gBAAgB,MAAM,MAAM;AAAA,YAC5B,QAAQ,MAAM;AAAA,UAChB;AAAA,UACA,OAAO,EAAE,WAAW,QAAQ,GAAG;AAAA,QACjC,CAAC;AAAA,MACH,SAAS,KAAK;AACZ,gBAAQ;AAAA,UACN,mDAAmD,QAAQ,EAAE,KAC3D,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,CACjD;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAEA,YAAQ,SAAS;AACjB,YAAQ,WAAW;AACnB,YAAQ,YAAY;AACpB,YAAQ,iBAAiB;AACzB,YAAQ,YAAY;AACpB,YAAQ,eAAe,oBAAI,KAAK;AAChC,UAAM,GAAG,MAAM;AAIf,UAAM;AAAA,MACJ;AAAA,MACA;AAAA,QACE,WAAW,QAAQ;AAAA,QACnB,QAAQ,MAAM;AAAA,QACd,aAAa,QAAQ;AAAA,QACrB,aAAa,QAAQ;AAAA,QACrB,UAAU,MAAM,MAAM;AAAA,QACtB,gBAAgB,MAAM,MAAM,kBAAkB;AAAA,MAChD;AAAA,MACA,EAAE,YAAY,KAAK;AAAA,IACrB;AAEA,WAAO,EAAE,QAAQ,gBAAgB,WAAW,QAAQ,IAAI,KAAK;AAAA,EAC/D;AAAA;AAAA;AAAA;AAAA,EAIA,MAAM,SAAS,EAAE,OAAO,OAAO,GAAG;AAChC,QAAI,OAAO,WAAW,eAAgB,QAAO;AAC7C,WAAO;AAAA,MACL,cAAc;AAAA,MACd,YAAY,OAAO;AAAA,MACnB,UAAU,OAAO,KAAK,YAAY,MAAM,MAAM;AAAA,MAC9C,gBAAgB,MAAM,MAAM,kBAAkB;AAAA,MAC9C,SAAS,EAAE,MAAM,OAAO,KAAK;AAAA,MAC7B,gBAAgB,OAAO;AAAA,IACzB;AAAA,EACF;AAAA,EACA,MAAM,KAAK,EAAE,KAAK,SAAS,GAAG;AAC5B,UAAM,WAAW,uBAAuB,QAAQ;AAChD,QAAI,CAAC,SAAU;AACf,UAAM,KAAM,IAAI,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAG/D,QAAI,CAAC,SAAS,SAAU;AACxB,UAAM,UAAU,MAAM;AAAA,MACpB;AAAA,MACA;AAAA,MACA,EAAE,IAAI,SAAS,WAAW,UAAU,SAAS,SAAS;AAAA,MACtD;AAAA,MACA,EAAE,UAAU,SAAS,UAAU,gBAAgB,KAAK;AAAA,IACtD;AACA,QAAI,CAAC,QAAS;AAEd,YAAQ,SAAS,SAAS;AAC1B,YAAQ,WAAW,SAAS;AAC5B,YAAQ,YAAY,SAAS;AAC7B,YAAQ,iBAAiB,SAAS;AAClC,YAAQ,YAAY,SAAS;AAC7B,UAAM,GAAG,MAAM;AAAA,EACjB;AACF;AAUO,SAAS,mBAAmB,OAAsD;AACvF,MAAI,CAAC,SAAS,OAAO,UAAU,SAAU,QAAO;AAChD,QAAM,YAAa,MAAkD,QAAQ;AAC7E,MAAI,CAAC,aAAa,OAAO,cAAc,SAAU,QAAO;AACxD,QAAM,MAAM;AACZ,MAAI,OAAO,IAAI,cAAc,SAAU,QAAO;AAC9C,SAAO;AAAA,IACL,WAAW,IAAI;AAAA,IACf,UAAU,OAAO,IAAI,aAAa,WAAW,IAAI,WAAW;AAAA,IAC5D,gBAAgB,OAAO,IAAI,mBAAmB,WAAW,IAAI,iBAAiB;AAAA,IAC9E,kBAAkB,OAAO,IAAI,qBAAqB,YAAY,IAAI,mBAAmB;AAAA,IACrF,mBAAmB,OAAO,IAAI,sBAAsB,YAAY,IAAI,oBAAoB;AAAA,IACxF,wBACE,OAAO,IAAI,2BAA2B,WAAW,IAAI,yBAAyB;AAAA,IAChF,mBAAmB,OAAO,IAAI,sBAAsB,WAAW,IAAI,oBAAoB;AAAA,EACzF;AACF;AAOO,SAAS,uBAAuB,UAAyD;AAC9F,QAAM,OAAO;AAAA,IACV,YAAY;AAAA,EACf;AACA,MAAI,KAAM,QAAO,mBAAmB,IAAI;AACxC,SAAO,mBAAmB,QAAQ;AACpC;AAEA,gBAAgB,wBAAwB;AAExC,IAAO,6BAAQ;",
+  "names": []
+}

package/dist/modules/communication_channels/commands/ingest-inbound-message.js

@@ -0,0 +1,413 @@
+import { randomUUID } from "node:crypto";
+import { z } from "zod";
+import { registerCommand } from "@open-mercato/shared/lib/commands";
+import { findOneWithDecryption } from "@open-mercato/shared/lib/encryption/find";
+import { emitCommunicationChannelsEvent } from "../events.js";
+import { resolveContact } from "../lib/contact-resolver.js";
+import { matchThread } from "../lib/thread-matcher.js";
+import {
+  ChannelThreadMapping,
+  CommunicationChannel,
+  ExternalConversation,
+  ExternalMessage,
+  MessageChannelLink
+} from "../data/entities.js";
+import { normalizedInboundMessageSchema } from "../data/validators.js";
+import { resolveCommunicationChannelsSystemUserId } from "../lib/system-user.js";
+import { isUniqueViolation } from "../lib/pg-errors.js";
+const ingestInputSchema = z.object({
+  channelId: z.string().uuid(),
+  providerKey: z.string().min(1),
+  channelType: z.string().min(1),
+  scope: z.object({
+    tenantId: z.string().uuid(),
+    organizationId: z.string().uuid().nullable()
+  }),
+  message: normalizedInboundMessageSchema
+});
+const COMMUNICATION_CHANNELS_INGEST_INBOUND_COMMAND_ID = "communication_channels.message.ingest_inbound";
+const ingestInboundMessageCommand = {
+  id: COMMUNICATION_CHANNELS_INGEST_INBOUND_COMMAND_ID,
+  async execute(rawInput, ctx) {
+    const input = ingestInputSchema.parse(rawInput);
+    const em = ctx.container.resolve("em").fork();
+    const adapterRegistry = ctx.container.resolve("channelAdapterRegistry");
+    const dscope = {
+      tenantId: input.scope.tenantId,
+      organizationId: input.scope.organizationId ?? null
+    };
+    const existingExternal = await findOneWithDecryption(
+      em,
+      ExternalMessage,
+      {
+        channelId: input.channelId,
+        externalMessageId: input.message.externalMessageId,
+        tenantId: input.scope.tenantId,
+        organizationId: input.scope.organizationId ?? null
+      },
+      void 0,
+      dscope
+    );
+    if (existingExternal) {
+      return {
+        status: "duplicate",
+        externalConversationId: existingExternal.conversationId,
+        externalMessageId: existingExternal.id
+      };
+    }
+    const incomingMessageId = (() => {
+      const fromMeta = input.message.channelMetadata?.messageId;
+      if (typeof fromMeta === "string" && fromMeta.length > 0) return fromMeta;
+      return null;
+    })();
+    if (incomingMessageId) {
+      try {
+        const sentFolderHit = await em.getConnection().execute(
+          `SELECT link.id FROM message_channel_links AS link
+             INNER JOIN external_conversations AS conv
+               ON conv.id = link.external_conversation_id
+            WHERE link.tenant_id = ?
+              AND ((?::uuid IS NULL AND link.organization_id IS NULL) OR link.organization_id = ?::uuid)
+              AND conv.tenant_id = ?
+              AND ((?::uuid IS NULL AND conv.organization_id IS NULL) OR conv.organization_id = ?::uuid)
+              AND conv.channel_id = ?
+              AND link.direction = 'outbound'
+              AND link.channel_metadata->>'messageId' = ?
+            LIMIT 1`,
+          [
+            input.scope.tenantId,
+            input.scope.organizationId ?? null,
+            input.scope.organizationId ?? null,
+            input.scope.tenantId,
+            input.scope.organizationId ?? null,
+            input.scope.organizationId ?? null,
+            input.channelId,
+            incomingMessageId
+          ]
+        );
+        if (Array.isArray(sentFolderHit) && sentFolderHit.length > 0) {
+          return {
+            status: "duplicate",
+            externalConversationId: input.message.externalConversationId,
+            externalMessageId: input.message.externalMessageId
+          };
+        }
+      } catch (dedupErr) {
+        console.warn(
+          "[communication_channels:ingest-inbound] sent-folder dedup query failed, continuing:",
+          dedupErr instanceof Error ? dedupErr.message : dedupErr
+        );
+      }
+    }
+    const channel = await findOneWithDecryption(
+      em,
+      CommunicationChannel,
+      {
+        id: input.channelId,
+        tenantId: input.scope.tenantId,
+        organizationId: input.scope.organizationId ?? null,
+        deletedAt: null
+      },
+      void 0,
+      dscope
+    );
+    if (!channel) {
+      throw new Error(
+        `[internal] Channel ${input.channelId} not found for tenant ${input.scope.tenantId} (or has been deleted)`
+      );
+    }
+    if (!channel.isActive) {
+      throw new Error(`[internal] Channel ${input.channelId} is inactive; refusing to ingest`);
+    }
+    const adapter = adapterRegistry.get(input.providerKey);
+    if (!adapter) {
+      throw new Error(
+        `[internal] No ChannelAdapter registered for providerKey '${input.providerKey}'. Check that the provider package is enabled in modules.ts.`
+      );
+    }
+    const m = input.message;
+    let conversation = await findOneWithDecryption(
+      em,
+      ExternalConversation,
+      {
+        channelId: input.channelId,
+        externalConversationId: m.externalConversationId,
+        tenantId: input.scope.tenantId,
+        organizationId: input.scope.organizationId ?? null
+      },
+      void 0,
+      dscope
+    );
+    let conversationCreated = false;
+    if (!conversation) {
+      conversation = em.create(ExternalConversation, {
+        channelId: input.channelId,
+        externalConversationId: m.externalConversationId,
+        subject: m.subject ?? null,
+        tenantId: input.scope.tenantId,
+        organizationId: input.scope.organizationId ?? null,
+        lastMessageAt: m.timestamp ?? /* @__PURE__ */ new Date()
+      });
+      em.persist(conversation);
+      conversationCreated = true;
+    }
+    let mapping = await findOneWithDecryption(
+      em,
+      ChannelThreadMapping,
+      {
+        externalConversationId: conversation.id,
+        tenantId: input.scope.tenantId,
+        organizationId: input.scope.organizationId ?? null
+      },
+      void 0,
+      dscope
+    );
+    if (!conversationCreated && m.timestamp && (!conversation.lastMessageAt || m.timestamp > conversation.lastMessageAt)) {
+      conversation.lastMessageAt = m.timestamp;
+    }
+    await em.flush();
+    const metaForMatcher = m.channelMetadata ?? {};
+    let threadMatch = null;
+    try {
+      threadMatch = await matchThread(
+        {
+          channelId: input.channelId,
+          tenantId: input.scope.tenantId,
+          organizationId: input.scope.organizationId ?? null,
+          messageId: extractStringFromMeta(metaForMatcher, "messageId") ?? m.externalMessageId,
+          inReplyTo: m.replyToExternalId ?? extractStringFromMeta(metaForMatcher, "inReplyTo"),
+          references: extractStringArrayFromMeta(metaForMatcher, "references"),
+          subject: m.subject ?? "",
+          fromAddress: extractStringFromMeta(metaForMatcher, "from") ?? m.senderIdentifier,
+          toAddresses: extractStringArrayFromMeta(metaForMatcher, "to"),
+          ccAddresses: extractStringArrayFromMeta(metaForMatcher, "cc"),
+          bodyPlain: m.bodyFormat === "html" ? null : m.body ?? null,
+          bodyHtml: m.bodyFormat === "html" ? m.body ?? null : null,
+          receivedAt: m.timestamp ?? /* @__PURE__ */ new Date()
+        },
+        { em }
+      );
+    } catch (matcherErr) {
+      console.warn(
+        "[communication_channels:ingest-inbound] thread matcher failed, falling back to conversation mapping:",
+        matcherErr instanceof Error ? matcherErr.message : matcherErr
+      );
+    }
+    let contactHint = null;
+    try {
+      contactHint = await resolveContact(
+        {
+          adapter,
+          senderIdentifier: m.senderIdentifier,
+          senderDisplayName: m.senderDisplayName,
+          channelMetadata: m.channelMetadata,
+          credentials: {},
+          // credentials decrypted at the webhook route; resolver doesn't re-fetch
+          scope: {
+            tenantId: input.scope.tenantId,
+            organizationId: input.scope.organizationId ?? input.scope.tenantId
+          }
+        },
+        { container: ctx.container }
+      );
+    } catch (contactErr) {
+      console.warn(
+        "[communication_channels:ingest-inbound] contact resolution failed, continuing without a CRM match:",
+        contactErr instanceof Error ? contactErr.message : contactErr
+      );
+      contactHint = null;
+    }
+    const matchedPersonId = contactHint?.matchedPersonId ?? null;
+    if (matchedPersonId && conversation.contactPersonId !== matchedPersonId) {
+      conversation.contactPersonId = matchedPersonId;
+      await em.flush();
+    }
+    const MAX_COMPOSE_BODY = 5e4;
+    const TRUNCATE_MARKER = "\n\n[\u2026message truncated by Open Mercato \u2014 full body preserved in ExternalMessage.rawPayload]";
+    const rawBody = m.body ?? "";
+    const truncatedBody = rawBody.length > MAX_COMPOSE_BODY ? rawBody.slice(0, MAX_COMPOSE_BODY - TRUNCATE_MARKER.length) + TRUNCATE_MARKER : rawBody;
+    const safeSubject = (m.subject ?? "").trim() || "(no subject)";
+    const composeInput = {
+      type: `channel.${input.providerKey}`,
+      visibility: "public",
+      sourceEntityType: "communication_channels.external_conversation",
+      sourceEntityId: conversation.id,
+      externalEmail: contactHint?.email ?? void 0,
+      externalName: contactHint?.displayName ?? m.senderDisplayName,
+      recipients: mapping?.assignedUserId ? [{ userId: mapping.assignedUserId, type: "to" }] : [],
+      subject: safeSubject,
+      body: truncatedBody,
+      bodyFormat: m.bodyFormat === "html" ? "text" : m.bodyFormat,
+      priority: "normal",
+      sendViaEmail: false,
+      // Spec B: matcher-resolved thread id takes priority over the existing
+      // conversation-based mapping. Falls through to `mapping?.messageThreadId`
+      // when the matcher returned null (no token / JWZ / subject hit).
+      parentMessageId: threadMatch?.messageThreadId ?? mapping?.messageThreadId,
+      isDraft: false,
+      // Stable dedup key so a retried ingest (after a transient failure between
+      // compose and the ExternalMessage anchor insert) reuses the message
+      // composed by the first attempt instead of duplicating it. Mirrors the
+      // (channel, externalMessageId) ExternalMessage anchor's natural key.
+      idempotencyKey: m.externalMessageId ? `cc:${input.channelId}:${m.externalMessageId}` : void 0,
+      tenantId: input.scope.tenantId,
+      organizationId: input.scope.organizationId,
+      userId: await resolveCommunicationChannelsSystemUserId(
+        em,
+        input.scope.tenantId,
+        mapping?.assignedUserId ?? null
+      )
+    };
+    const commandBus = ctx.container.resolve("commandBus");
+    const composeResult = await commandBus.execute(
+      "messages.messages.compose",
+      {
+        input: composeInput,
+        ctx: passthroughCommandCtx(ctx, input.scope)
+      }
+    );
+    const message = composeResult.result;
+    if (!message?.id) {
+      throw new Error("messages.messages.compose did not return a message id");
+    }
+    if (!mapping) {
+      mapping = em.create(ChannelThreadMapping, {
+        externalConversationId: conversation.id,
+        messageThreadId: message.threadId ?? message.id,
+        channelId: input.channelId,
+        providerKey: input.providerKey,
+        externalThreadRef: m.externalConversationId,
+        tenantId: input.scope.tenantId,
+        organizationId: input.scope.organizationId ?? null
+      });
+      em.persist(mapping);
+    }
+    const externalMessageRowId = randomUUID();
+    const channelLinkRowId = randomUUID();
+    const externalMessage = em.create(ExternalMessage, {
+      id: externalMessageRowId,
+      channelId: input.channelId,
+      conversationId: conversation.id,
+      externalMessageId: m.externalMessageId,
+      direction: "inbound",
+      senderIdentifier: m.senderIdentifier,
+      senderDisplayName: m.senderDisplayName ?? null,
+      providerTimestamp: m.timestamp,
+      tenantId: input.scope.tenantId,
+      organizationId: input.scope.organizationId ?? null
+    });
+    em.persist(externalMessage);
+    const matcherAnnotatedMetadata = {
+      ...m.channelMetadata ?? {},
+      threadMatchStrategy: threadMatch?.matchedBy ?? "new-thread",
+      threadMatchConfidence: threadMatch?.confidence ?? "low"
+    };
+    const channelLink = em.create(MessageChannelLink, {
+      id: channelLinkRowId,
+      messageId: message.id,
+      externalConversationId: conversation.id,
+      externalMessageId: externalMessageRowId,
+      providerKey: input.providerKey,
+      channelType: input.channelType,
+      direction: "inbound",
+      deliveryStatus: "received",
+      channelPayload: m.channelPayload,
+      channelContentType: m.channelContentType,
+      channelMetadata: matcherAnnotatedMetadata,
+      tenantId: input.scope.tenantId,
+      organizationId: input.scope.organizationId ?? null
+    });
+    em.persist(channelLink);
+    try {
+      await em.flush();
+    } catch (flushErr) {
+      if (isUniqueViolation(flushErr)) {
+        return {
+          status: "duplicate",
+          externalConversationId: conversation.id,
+          externalMessageId: m.externalMessageId
+        };
+      }
+      throw flushErr;
+    }
+    if (conversationCreated) {
+      await emitCommunicationChannelsEvent(
+        "communication_channels.conversation.created",
+        {
+          conversationId: conversation.id,
+          channelId: input.channelId,
+          providerKey: input.providerKey,
+          channelType: input.channelType,
+          externalConversationId: m.externalConversationId,
+          tenantId: input.scope.tenantId,
+          organizationId: input.scope.organizationId ?? null
+        },
+        { persistent: true }
+      );
+    }
+    if (matchedPersonId) {
+      await emitCommunicationChannelsEvent(
+        "communication_channels.contact.resolved",
+        {
+          conversationId: conversation.id,
+          contactPersonId: matchedPersonId,
+          providerKey: input.providerKey,
+          tenantId: input.scope.tenantId,
+          organizationId: input.scope.organizationId ?? null
+        },
+        { persistent: true }
+      );
+    }
+    await emitCommunicationChannelsEvent(
+      "communication_channels.message.received",
+      {
+        messageId: message.id,
+        externalMessageId: externalMessage.id,
+        channelLinkId: channelLink.id,
+        conversationId: conversation.id,
+        channelId: input.channelId,
+        providerKey: input.providerKey,
+        channelType: input.channelType,
+        direction: "inbound",
+        tenantId: input.scope.tenantId,
+        organizationId: input.scope.organizationId ?? null
+      },
+      { persistent: true }
+    );
+    return {
+      status: "created",
+      messageId: message.id,
+      externalConversationId: conversation.id,
+      externalMessageId: externalMessage.id,
+      channelLinkId: channelLink.id,
+      threadMappingId: mapping.id,
+      contactPersonId: matchedPersonId
+    };
+  }
+};
+function passthroughCommandCtx(parent, scope) {
+  return {
+    container: parent.container,
+    auth: null,
+    organizationScope: null,
+    selectedOrganizationId: scope.organizationId ?? null,
+    organizationIds: scope.organizationId ? [scope.organizationId] : null
+  };
+}
+function extractStringFromMeta(meta, key) {
+  const value = meta[key];
+  if (typeof value === "string" && value.length > 0) return value;
+  return null;
+}
+function extractStringArrayFromMeta(meta, key) {
+  const value = meta[key];
+  if (!Array.isArray(value)) return [];
+  return value.filter((item) => typeof item === "string");
+}
+registerCommand(ingestInboundMessageCommand);
+var ingest_inbound_message_default = ingestInboundMessageCommand;
+export {
+  COMMUNICATION_CHANNELS_INGEST_INBOUND_COMMAND_ID,
+  ingest_inbound_message_default as default
+};
+//# sourceMappingURL=ingest-inbound-message.js.map

package/dist/modules/communication_channels/commands/ingest-inbound-message.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/communication_channels/commands/ingest-inbound-message.ts"],
+  "sourcesContent": ["import { randomUUID } from 'node:crypto'\nimport { z } from 'zod'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport type { CommandBus, CommandHandler, CommandRuntimeContext } from '@open-mercato/shared/lib/commands'\nimport { registerCommand } from '@open-mercato/shared/lib/commands'\nimport { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { emitCommunicationChannelsEvent } from '../events'\nimport { resolveContact } from '../lib/contact-resolver'\nimport type { ChannelAdapterRegistry } from '../lib/registry'\nimport type { NormalizedInboundMessage } from '../lib/adapter'\nimport { matchThread, type ThreadMatch } from '../lib/thread-matcher'\nimport {\n  ChannelThreadMapping,\n  CommunicationChannel,\n  ExternalConversation,\n  ExternalMessage,\n  MessageChannelLink,\n} from '../data/entities'\nimport { normalizedInboundMessageSchema } from '../data/validators'\nimport { resolveCommunicationChannelsSystemUserId } from '../lib/system-user'\nimport { isUniqueViolation } from '../lib/pg-errors'\n\nconst ingestInputSchema = z.object({\n  channelId: z.string().uuid(),\n  providerKey: z.string().min(1),\n  channelType: z.string().min(1),\n  scope: z.object({\n    tenantId: z.string().uuid(),\n    organizationId: z.string().uuid().nullable(),\n  }),\n  message: normalizedInboundMessageSchema,\n})\n\nexport type IngestInboundMessageInput = z.infer<typeof ingestInputSchema>\n\nexport type IngestInboundMessageResult = {\n  status: 'created' | 'duplicate'\n  messageId?: string\n  externalConversationId?: string\n  externalMessageId?: string\n  channelLinkId?: string\n  threadMappingId?: string\n  contactPersonId?: string | null\n}\n\nexport const COMMUNICATION_CHANNELS_INGEST_INBOUND_COMMAND_ID = 'communication_channels.message.ingest_inbound'\n\n/**\n * Idempotently ingest a normalized inbound channel message.\n *\n * Steps (per SPEC-045d \u00A76):\n *   1. Dedup by `(channel_id, external_message_id)` \u2014 if a MessageChannelLink already\n *      exists for that pair, return `{ status: 'duplicate' }` without side effects.\n *   2. Create or load `ExternalConversation` by `(channel_id, external_conversation_id)`.\n *   3. Create or load `ChannelThreadMapping` (1:1 with ExternalConversation).\n *   4. Resolve CRM contact via adapter + QueryEngine (best-effort).\n *   5. Compose the platform `Message` via `messages.messages.compose` (separate transaction).\n *   6. Create `ExternalMessage` + `MessageChannelLink`.\n *   7. Emit `communication_channels.message.received` (and `.conversation.created` / `.contact.resolved` when applicable).\n *\n * The two-transaction model (compose-message-then-record-link) is acceptable for v1;\n * the link's unique-on-message-id constraint is the safety net against orphans. See\n * the pre-implementation analysis for a discussion of single-transaction alternatives.\n */\nconst ingestInboundMessageCommand: CommandHandler<IngestInboundMessageInput, IngestInboundMessageResult> = {\n  id: COMMUNICATION_CHANNELS_INGEST_INBOUND_COMMAND_ID,\n  async execute(rawInput, ctx) {\n    const input = ingestInputSchema.parse(rawInput) as IngestInboundMessageInput\n\n    const em = (ctx.container.resolve('em') as EntityManager).fork()\n    const adapterRegistry = ctx.container.resolve('channelAdapterRegistry') as ChannelAdapterRegistry\n    const dscope = {\n      tenantId: input.scope.tenantId,\n      organizationId: input.scope.organizationId ?? null,\n    }\n\n    // (1) Dedup: short-circuit if we've already processed this provider message.\n    // The unique constraint is on `messageId`, not (channel, externalMessageId).\n    // We must dedup by joining against ExternalMessage which IS uniquely indexed by\n    // (channel_id, external_message_id). Hub-side dedup is the authoritative gate.\n    const existingExternal = await findOneWithDecryption(\n      em,\n      ExternalMessage,\n      {\n        channelId: input.channelId,\n        externalMessageId: input.message.externalMessageId,\n        tenantId: input.scope.tenantId,\n        organizationId: input.scope.organizationId ?? null,\n      },\n      undefined,\n      dscope,\n    )\n    if (existingExternal) {\n      return {\n        status: 'duplicate',\n        externalConversationId: existingExternal.conversationId,\n        externalMessageId: existingExternal.id,\n      }\n    }\n\n    // (1b) Spec B \u00A7 Sent-folder dedup.\n    //\n    // When an outbound message lands in the user's IMAP Sent folder (or\n    // when Gmail's \"send and archive\" deposits it in All Mail), the next\n    // poll will re-fetch it from INBOX as if it were inbound. Skip it\n    // here using the RFC 5322 `Message-ID` header \u2014 we recorded it on the\n    // outbound `MessageChannelLink.channelMetadata.messageId` at send time.\n    //\n    // We dedup ONLY on outbound links (direction='outbound') for the same\n    // channel \u2014 that way an inbound copy of someone ELSE's email that\n    // happens to share a Message-ID is still ingested normally.\n    const incomingMessageId = (() => {\n      const fromMeta = (input.message.channelMetadata as Record<string, unknown> | undefined)?.messageId\n      if (typeof fromMeta === 'string' && fromMeta.length > 0) return fromMeta\n      return null\n    })()\n    if (incomingMessageId) {\n      // MikroORM v7 dropped the Knex builder in favour of Kysely/raw SQL.\n      // We use a positional-placeholder raw query for the JSONB\n      // `channel_metadata->>messageId` comparison.\n      try {\n        const sentFolderHit = await em.getConnection().execute<Array<{ id: string }>>(\n          `SELECT link.id FROM message_channel_links AS link\n             INNER JOIN external_conversations AS conv\n               ON conv.id = link.external_conversation_id\n            WHERE link.tenant_id = ?\n              AND ((?::uuid IS NULL AND link.organization_id IS NULL) OR link.organization_id = ?::uuid)\n              AND conv.tenant_id = ?\n              AND ((?::uuid IS NULL AND conv.organization_id IS NULL) OR conv.organization_id = ?::uuid)\n              AND conv.channel_id = ?\n              AND link.direction = 'outbound'\n              AND link.channel_metadata->>'messageId' = ?\n            LIMIT 1`,\n          [\n            input.scope.tenantId,\n            input.scope.organizationId ?? null,\n            input.scope.organizationId ?? null,\n            input.scope.tenantId,\n            input.scope.organizationId ?? null,\n            input.scope.organizationId ?? null,\n            input.channelId,\n            incomingMessageId,\n          ],\n        )\n        if (Array.isArray(sentFolderHit) && sentFolderHit.length > 0) {\n          return {\n            status: 'duplicate',\n            externalConversationId: input.message.externalConversationId,\n            externalMessageId: input.message.externalMessageId,\n          }\n        }\n      } catch (dedupErr) {\n        // Sent-folder dedup is best-effort \u2014 a failure here must not abort\n        // ingest (better a possible duplicate than a lost inbound message).\n        console.warn(\n          '[communication_channels:ingest-inbound] sent-folder dedup query failed, continuing:',\n          dedupErr instanceof Error ? dedupErr.message : dedupErr,\n        )\n      }\n    }\n\n    // Channel + adapter lookup (the channel must exist + be active).\n    const channel = await findOneWithDecryption(\n      em,\n      CommunicationChannel,\n      {\n        id: input.channelId,\n        tenantId: input.scope.tenantId,\n        organizationId: input.scope.organizationId ?? null,\n        deletedAt: null,\n      },\n      undefined,\n      dscope,\n    )\n    if (!channel) {\n      throw new Error(\n        `[internal] Channel ${input.channelId} not found for tenant ${input.scope.tenantId} (or has been deleted)`,\n      )\n    }\n    if (!channel.isActive) {\n      throw new Error(`[internal] Channel ${input.channelId} is inactive; refusing to ingest`)\n    }\n\n    const adapter = adapterRegistry.get(input.providerKey)\n    if (!adapter) {\n      throw new Error(\n        `[internal] No ChannelAdapter registered for providerKey '${input.providerKey}'. ` +\n          'Check that the provider package is enabled in modules.ts.',\n      )\n    }\n\n    // (2) ExternalConversation upsert by (channel_id, externalConversationId).\n    const m = input.message\n    let conversation = await findOneWithDecryption(\n      em,\n      ExternalConversation,\n      {\n        channelId: input.channelId,\n        externalConversationId: m.externalConversationId,\n        tenantId: input.scope.tenantId,\n        organizationId: input.scope.organizationId ?? null,\n      },\n      undefined,\n      dscope,\n    )\n    let conversationCreated = false\n    if (!conversation) {\n      conversation = em.create(ExternalConversation, {\n        channelId: input.channelId,\n        externalConversationId: m.externalConversationId,\n        subject: m.subject ?? null,\n        tenantId: input.scope.tenantId,\n        organizationId: input.scope.organizationId ?? null,\n        lastMessageAt: m.timestamp ?? new Date(),\n      })\n      em.persist(conversation)\n      conversationCreated = true\n    }\n\n    // (3) ChannelThreadMapping upsert (1:1 with ExternalConversation per tenant).\n    let mapping = await findOneWithDecryption(\n      em,\n      ChannelThreadMapping,\n      {\n        externalConversationId: conversation.id,\n        tenantId: input.scope.tenantId,\n        organizationId: input.scope.organizationId ?? null,\n      },\n      undefined,\n      dscope,\n    )\n\n    // Last-activity bump on an existing conversation. Applied AFTER the mapping\n    // lookup, immediately before the flush, so the scalar mutation and its flush\n    // stay adjacent with no query in between (core flush-ordering rule \u2014 a query\n    // between a scalar mutation and `em.flush()` can drop the change under some\n    // flush modes / subscriber configurations).\n    if (\n      !conversationCreated &&\n      m.timestamp &&\n      (!conversation.lastMessageAt || m.timestamp > conversation.lastMessageAt)\n    ) {\n      conversation.lastMessageAt = m.timestamp\n    }\n    // We'll fill `messageThreadId` after composing the platform Message (since the\n    // first inbound message becomes the thread root in the messages module).\n    await em.flush()\n\n    // (3b) Spec B \u2014 layered thread match.\n    //\n    // Resolve the inbound message to an existing platform thread using\n    // (in priority order):\n    //   1. Crypto token in References / In-Reply-To header (high confidence)\n    //   2. Crypto token in body hidden span or plain-text marker (high)\n    //   3. JWZ on Message-Id \u2194 stored `MessageChannelLink.channelMetadata.messageId` (medium)\n    //   4. Subject + participants in last 30 days, same channel (low)\n    //\n    // The matcher returns `null` when nothing hits \u2014 in that case we fall\n    // back to the existing `ChannelThreadMapping`-by-conversation-id lookup\n    // (which also returns null on first-ever inbound, in which case the\n    // compose command opens a new thread).\n    const metaForMatcher = (m.channelMetadata ?? {}) as Record<string, unknown>\n    let threadMatch: ThreadMatch | null = null\n    try {\n      threadMatch = await matchThread(\n        {\n          channelId: input.channelId,\n          tenantId: input.scope.tenantId,\n          organizationId: input.scope.organizationId ?? null,\n          messageId: extractStringFromMeta(metaForMatcher, 'messageId') ?? m.externalMessageId,\n          inReplyTo:\n            m.replyToExternalId ?? extractStringFromMeta(metaForMatcher, 'inReplyTo'),\n          references: extractStringArrayFromMeta(metaForMatcher, 'references'),\n          subject: m.subject ?? '',\n          fromAddress:\n            extractStringFromMeta(metaForMatcher, 'from') ?? m.senderIdentifier,\n          toAddresses: extractStringArrayFromMeta(metaForMatcher, 'to'),\n          ccAddresses: extractStringArrayFromMeta(metaForMatcher, 'cc'),\n          bodyPlain: m.bodyFormat === 'html' ? null : m.body ?? null,\n          bodyHtml: m.bodyFormat === 'html' ? m.body ?? null : null,\n          receivedAt: m.timestamp ?? new Date(),\n        },\n        { em },\n      )\n    } catch (matcherErr) {\n      // Matcher failure must not block ingest \u2014 fall back to the existing\n      // conversation-based thread mapping so the message still lands.\n      console.warn(\n        '[communication_channels:ingest-inbound] thread matcher failed, falling back to conversation mapping:',\n        matcherErr instanceof Error ? matcherErr.message : matcherErr,\n      )\n    }\n\n    // (4) Contact resolution (best-effort, advisory).\n    let contactHint: {\n      matchedPersonId?: string | null\n      email?: string\n      displayName?: string\n    } | null = null\n    try {\n      contactHint = await resolveContact(\n        {\n          adapter,\n          senderIdentifier: m.senderIdentifier,\n          senderDisplayName: m.senderDisplayName,\n          channelMetadata: m.channelMetadata,\n          credentials: {}, // credentials decrypted at the webhook route; resolver doesn't re-fetch\n          scope: {\n            tenantId: input.scope.tenantId,\n            organizationId: input.scope.organizationId ?? input.scope.tenantId,\n          },\n        },\n        { container: ctx.container },\n      )\n    } catch (contactErr) {\n      // Best-effort: contact resolution is advisory and must not abort ingest.\n      // Log like the sibling dedup/matcher catches so a misbehaving resolver is\n      // visible in operator logs instead of failing silently.\n      console.warn(\n        '[communication_channels:ingest-inbound] contact resolution failed, continuing without a CRM match:',\n        contactErr instanceof Error ? contactErr.message : contactErr,\n      )\n      contactHint = null\n    }\n    const matchedPersonId = contactHint?.matchedPersonId ?? null\n    if (matchedPersonId && conversation.contactPersonId !== matchedPersonId) {\n      conversation.contactPersonId = matchedPersonId\n      // Flush this scalar mutation before the system-user lookup below queries the\n      // same EntityManager. SPEC-018: a query between a scalar mutation and its\n      // flush can silently discard the pending UPDATE (mirrors the lastMessageAt\n      // bump above).\n      await em.flush()\n    }\n\n    // (5) Compose the platform Message via the messages module command.\n    //\n    // Sanitize against the `messages` module's validators (max 50_000 char body\n    // + non-empty subject) so real-world emails don't get rejected mid-ingest:\n    //   - HTML emails routinely exceed 50k (Gmail signatures, marketing\n    //     templates, RFC 5322 multipart). Truncate with a marker rather than\n    //     drop the whole message \u2014 the full raw body is still in\n    //     ExternalMessage.rawPayload if needed for forensic / forward use.\n    //   - Some legitimate messages have no subject (notifications, bounce\n    //     digests). Substitute a placeholder instead of failing ingest.\n    const MAX_COMPOSE_BODY = 50_000\n    const TRUNCATE_MARKER =\n      '\\n\\n[\u2026message truncated by Open Mercato \u2014 full body preserved in ExternalMessage.rawPayload]'\n    const rawBody = m.body ?? ''\n    const truncatedBody =\n      rawBody.length > MAX_COMPOSE_BODY\n        ? rawBody.slice(0, MAX_COMPOSE_BODY - TRUNCATE_MARKER.length) + TRUNCATE_MARKER\n        : rawBody\n    const safeSubject = (m.subject ?? '').trim() || '(no subject)'\n\n    const composeInput = {\n      type: `channel.${input.providerKey}`,\n      visibility: 'public' as const,\n      sourceEntityType: 'communication_channels.external_conversation',\n      sourceEntityId: conversation.id,\n      externalEmail: contactHint?.email ?? undefined,\n      externalName: contactHint?.displayName ?? m.senderDisplayName,\n      recipients: mapping?.assignedUserId\n        ? [{ userId: mapping.assignedUserId, type: 'to' as const }]\n        : [],\n      subject: safeSubject,\n      body: truncatedBody,\n      bodyFormat: (m.bodyFormat === 'html' ? 'text' : m.bodyFormat) as 'text' | 'markdown',\n      priority: 'normal' as const,\n      sendViaEmail: false,\n      // Spec B: matcher-resolved thread id takes priority over the existing\n      // conversation-based mapping. Falls through to `mapping?.messageThreadId`\n      // when the matcher returned null (no token / JWZ / subject hit).\n      parentMessageId: threadMatch?.messageThreadId ?? mapping?.messageThreadId,\n      isDraft: false,\n      // Stable dedup key so a retried ingest (after a transient failure between\n      // compose and the ExternalMessage anchor insert) reuses the message\n      // composed by the first attempt instead of duplicating it. Mirrors the\n      // (channel, externalMessageId) ExternalMessage anchor's natural key.\n      idempotencyKey: m.externalMessageId\n        ? `cc:${input.channelId}:${m.externalMessageId}`\n        : undefined,\n      tenantId: input.scope.tenantId,\n      organizationId: input.scope.organizationId,\n      userId: await resolveCommunicationChannelsSystemUserId(\n        em,\n        input.scope.tenantId,\n        mapping?.assignedUserId ?? null,\n      ),\n    }\n\n    const commandBus = ctx.container.resolve('commandBus') as CommandBus\n    const composeResult = await commandBus.execute<typeof composeInput, { id: string; threadId: string | null }>(\n      'messages.messages.compose',\n      {\n        input: composeInput,\n        ctx: passthroughCommandCtx(ctx, input.scope),\n      },\n    )\n    const message = composeResult.result\n    if (!message?.id) {\n      throw new Error('messages.messages.compose did not return a message id')\n    }\n\n    // (3 continued) Create or update ChannelThreadMapping now that we have a threadId.\n    if (!mapping) {\n      mapping = em.create(ChannelThreadMapping, {\n        externalConversationId: conversation.id,\n        messageThreadId: message.threadId ?? message.id,\n        channelId: input.channelId,\n        providerKey: input.providerKey,\n        externalThreadRef: m.externalConversationId,\n        tenantId: input.scope.tenantId,\n        organizationId: input.scope.organizationId ?? null,\n      })\n      em.persist(mapping)\n    }\n\n    // (6) Create ExternalMessage + MessageChannelLink (hub-side records).\n    //\n    // The PrimaryKey for both uses `defaultRaw: 'gen_random_uuid()'` \u2014 a\n    // Postgres-side default that doesn't populate the entity's `id` field\n    // until after the INSERT returns. If we let MikroORM generate both, then\n    // `em.create(MessageChannelLink, { externalMessageId: externalMessage.id })`\n    // reads `undefined` for `externalMessage.id` (it hasn't been flushed yet)\n    // and writes NULL to `message_channel_links.external_message_id`,\n    // breaking the FK and causing downstream joins to silently return 0 rows.\n    //\n    // Pre-generating both UUIDs client-side fixes the cross-row reference\n    // problem and keeps the single-transaction flush semantics intact.\n    const externalMessageRowId = randomUUID()\n    const channelLinkRowId = randomUUID()\n    const externalMessage = em.create(ExternalMessage, {\n      id: externalMessageRowId,\n      channelId: input.channelId,\n      conversationId: conversation.id,\n      externalMessageId: m.externalMessageId,\n      direction: 'inbound',\n      senderIdentifier: m.senderIdentifier,\n      senderDisplayName: m.senderDisplayName ?? null,\n      providerTimestamp: m.timestamp,\n      tenantId: input.scope.tenantId,\n      organizationId: input.scope.organizationId ?? null,\n    })\n    em.persist(externalMessage)\n\n    // Spec B: annotate the link with which thread-matcher strategy resolved\n    // this message (or `'new-thread'` when matcher returned null and we\n    // opened a fresh thread). Surfaced to observability + future UI (\"this\n    // thread match is low-confidence \u2014 confirm or move\").\n    const matcherAnnotatedMetadata: Record<string, unknown> = {\n      ...((m.channelMetadata as Record<string, unknown> | undefined) ?? {}),\n      threadMatchStrategy: threadMatch?.matchedBy ?? 'new-thread',\n      threadMatchConfidence: threadMatch?.confidence ?? 'low',\n    }\n\n    const channelLink = em.create(MessageChannelLink, {\n      id: channelLinkRowId,\n      messageId: message.id,\n      externalConversationId: conversation.id,\n      externalMessageId: externalMessageRowId,\n      providerKey: input.providerKey,\n      channelType: input.channelType,\n      direction: 'inbound',\n      deliveryStatus: 'received',\n      channelPayload: m.channelPayload,\n      channelContentType: m.channelContentType,\n      channelMetadata: matcherAnnotatedMetadata,\n      tenantId: input.scope.tenantId,\n      organizationId: input.scope.organizationId ?? null,\n    })\n    em.persist(channelLink)\n\n    try {\n      await em.flush()\n    } catch (flushErr) {\n      // Concurrency guard: the pre-check at (1) is not atomic with this insert,\n      // so a poll re-fetch racing a push notification (or two push deliveries)\n      // can both pass the check and reach here. The `(channel_id,\n      // external_message_id)` unique index rejects the loser with a 23505. Treat\n      // that as a duplicate \u2014 returning here (instead of throwing) prevents the\n      // message from being dead-lettered and retried forever. The winning job\n      // already recorded the message + link.\n      if (isUniqueViolation(flushErr)) {\n        return {\n          status: 'duplicate',\n          externalConversationId: conversation.id,\n          externalMessageId: m.externalMessageId,\n        }\n      }\n      throw flushErr\n    }\n\n    // (7) Emit events \u2014 order matters for downstream subscribers.\n    if (conversationCreated) {\n      await emitCommunicationChannelsEvent(\n        'communication_channels.conversation.created',\n        {\n          conversationId: conversation.id,\n          channelId: input.channelId,\n          providerKey: input.providerKey,\n          channelType: input.channelType,\n          externalConversationId: m.externalConversationId,\n          tenantId: input.scope.tenantId,\n          organizationId: input.scope.organizationId ?? null,\n        },\n        { persistent: true },\n      )\n    }\n    if (matchedPersonId) {\n      await emitCommunicationChannelsEvent(\n        'communication_channels.contact.resolved',\n        {\n          conversationId: conversation.id,\n          contactPersonId: matchedPersonId,\n          providerKey: input.providerKey,\n          tenantId: input.scope.tenantId,\n          organizationId: input.scope.organizationId ?? null,\n        },\n        { persistent: true },\n      )\n    }\n    await emitCommunicationChannelsEvent(\n      'communication_channels.message.received',\n      {\n        messageId: message.id,\n        externalMessageId: externalMessage.id,\n        channelLinkId: channelLink.id,\n        conversationId: conversation.id,\n        channelId: input.channelId,\n        providerKey: input.providerKey,\n        channelType: input.channelType,\n        direction: 'inbound',\n        tenantId: input.scope.tenantId,\n        organizationId: input.scope.organizationId ?? null,\n      },\n      { persistent: true },\n    )\n\n    return {\n      status: 'created',\n      messageId: message.id,\n      externalConversationId: conversation.id,\n      externalMessageId: externalMessage.id,\n      channelLinkId: channelLink.id,\n      threadMappingId: mapping.id,\n      contactPersonId: matchedPersonId,\n    }\n  },\n}\n\n\n/**\n * Build a runtime context for the nested `messages.messages.compose` call.\n *\n * The compose command expects a `CommandRuntimeContext`. For inbound webhook\n * processing there is no platform user; we pass `auth: null` and use the tenant\n * scope from our input.\n */\nfunction passthroughCommandCtx(\n  parent: CommandRuntimeContext,\n  scope: IngestInboundMessageInput['scope'],\n): CommandRuntimeContext {\n  return {\n    container: parent.container,\n    auth: null,\n    organizationScope: null,\n    selectedOrganizationId: scope.organizationId ?? null,\n    organizationIds: scope.organizationId ? [scope.organizationId] : null,\n  }\n}\n\n/**\n * Pull a string value from the provider's `channelMetadata` map. Returns\n * `null` (not `undefined`) when the key is absent or the value isn't a\n * string \u2014 keeps the matcher's input shape predictable.\n */\nfunction extractStringFromMeta(\n  meta: Record<string, unknown>,\n  key: string,\n): string | null {\n  const value = meta[key]\n  if (typeof value === 'string' && value.length > 0) return value\n  return null\n}\n\n/**\n * Pull a string[] value from the provider's `channelMetadata` map.\n * Filters out non-string entries defensively. Returns an empty array\n * when the key is absent or the value isn't an array.\n */\nfunction extractStringArrayFromMeta(\n  meta: Record<string, unknown>,\n  key: string,\n): string[] {\n  const value = meta[key]\n  if (!Array.isArray(value)) return []\n  return value.filter((item): item is string => typeof item === 'string')\n}\n\nregisterCommand(ingestInboundMessageCommand)\n\nexport default ingestInboundMessageCommand\n"],
+  "mappings": "AAAA,SAAS,kBAAkB;AAC3B,SAAS,SAAS;AAGlB,SAAS,uBAAuB;AAChC,SAAS,6BAA6B;AACtC,SAAS,sCAAsC;AAC/C,SAAS,sBAAsB;AAG/B,SAAS,mBAAqC;AAC9C;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,sCAAsC;AAC/C,SAAS,gDAAgD;AACzD,SAAS,yBAAyB;AAElC,MAAM,oBAAoB,EAAE,OAAO;AAAA,EACjC,WAAW,EAAE,OAAO,EAAE,KAAK;AAAA,EAC3B,aAAa,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EAC7B,aAAa,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EAC7B,OAAO,EAAE,OAAO;AAAA,IACd,UAAU,EAAE,OAAO,EAAE,KAAK;AAAA,IAC1B,gBAAgB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EAC7C,CAAC;AAAA,EACD,SAAS;AACX,CAAC;AAcM,MAAM,mDAAmD;AAmBhE,MAAM,8BAAqG;AAAA,EACzG,IAAI;AAAA,EACJ,MAAM,QAAQ,UAAU,KAAK;AAC3B,UAAM,QAAQ,kBAAkB,MAAM,QAAQ;AAE9C,UAAM,KAAM,IAAI,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC/D,UAAM,kBAAkB,IAAI,UAAU,QAAQ,wBAAwB;AACtE,UAAM,SAAS;AAAA,MACb,UAAU,MAAM,MAAM;AAAA,MACtB,gBAAgB,MAAM,MAAM,kBAAkB;AAAA,IAChD;AAMA,UAAM,mBAAmB,MAAM;AAAA,MAC7B;AAAA,MACA;AAAA,MACA;AAAA,QACE,WAAW,MAAM;AAAA,QACjB,mBAAmB,MAAM,QAAQ;AAAA,QACjC,UAAU,MAAM,MAAM;AAAA,QACtB,gBAAgB,MAAM,MAAM,kBAAkB;AAAA,MAChD;AAAA,MACA;AAAA,MACA;AAAA,IACF;AACA,QAAI,kBAAkB;AACpB,aAAO;AAAA,QACL,QAAQ;AAAA,QACR,wBAAwB,iBAAiB;AAAA,QACzC,mBAAmB,iBAAiB;AAAA,MACtC;AAAA,IACF;AAaA,UAAM,qBAAqB,MAAM;AAC/B,YAAM,WAAY,MAAM,QAAQ,iBAAyD;AACzF,UAAI,OAAO,aAAa,YAAY,SAAS,SAAS,EAAG,QAAO;AAChE,aAAO;AAAA,IACT,GAAG;AACH,QAAI,mBAAmB;AAIrB,UAAI;AACF,cAAM,gBAAgB,MAAM,GAAG,cAAc,EAAE;AAAA,UAC7C;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,UAWA;AAAA,YACE,MAAM,MAAM;AAAA,YACZ,MAAM,MAAM,kBAAkB;AAAA,YAC9B,MAAM,MAAM,kBAAkB;AAAA,YAC9B,MAAM,MAAM;AAAA,YACZ,MAAM,MAAM,kBAAkB;AAAA,YAC9B,MAAM,MAAM,kBAAkB;AAAA,YAC9B,MAAM;AAAA,YACN;AAAA,UACF;AAAA,QACF;AACA,YAAI,MAAM,QAAQ,aAAa,KAAK,cAAc,SAAS,GAAG;AAC5D,iBAAO;AAAA,YACL,QAAQ;AAAA,YACR,wBAAwB,MAAM,QAAQ;AAAA,YACtC,mBAAmB,MAAM,QAAQ;AAAA,UACnC;AAAA,QACF;AAAA,MACF,SAAS,UAAU;AAGjB,gBAAQ;AAAA,UACN;AAAA,UACA,oBAAoB,QAAQ,SAAS,UAAU;AAAA,QACjD;AAAA,MACF;AAAA,IACF;AAGA,UAAM,UAAU,MAAM;AAAA,MACpB;AAAA,MACA;AAAA,MACA;AAAA,QACE,IAAI,MAAM;AAAA,QACV,UAAU,MAAM,MAAM;AAAA,QACtB,gBAAgB,MAAM,MAAM,kBAAkB;AAAA,QAC9C,WAAW;AAAA,MACb;AAAA,MACA;AAAA,MACA;AAAA,IACF;AACA,QAAI,CAAC,SAAS;AACZ,YAAM,IAAI;AAAA,QACR,sBAAsB,MAAM,SAAS,yBAAyB,MAAM,MAAM,QAAQ;AAAA,MACpF;AAAA,IACF;AACA,QAAI,CAAC,QAAQ,UAAU;AACrB,YAAM,IAAI,MAAM,sBAAsB,MAAM,SAAS,kCAAkC;AAAA,IACzF;AAEA,UAAM,UAAU,gBAAgB,IAAI,MAAM,WAAW;AACrD,QAAI,CAAC,SAAS;AACZ,YAAM,IAAI;AAAA,QACR,4DAA4D,MAAM,WAAW;AAAA,MAE/E;AAAA,IACF;AAGA,UAAM,IAAI,MAAM;AAChB,QAAI,eAAe,MAAM;AAAA,MACvB;AAAA,MACA;AAAA,MACA;AAAA,QACE,WAAW,MAAM;AAAA,QACjB,wBAAwB,EAAE;AAAA,QAC1B,UAAU,MAAM,MAAM;AAAA,QACtB,gBAAgB,MAAM,MAAM,kBAAkB;AAAA,MAChD;AAAA,MACA;AAAA,MACA;AAAA,IACF;AACA,QAAI,sBAAsB;AAC1B,QAAI,CAAC,cAAc;AACjB,qBAAe,GAAG,OAAO,sBAAsB;AAAA,QAC7C,WAAW,MAAM;AAAA,QACjB,wBAAwB,EAAE;AAAA,QAC1B,SAAS,EAAE,WAAW;AAAA,QACtB,UAAU,MAAM,MAAM;AAAA,QACtB,gBAAgB,MAAM,MAAM,kBAAkB;AAAA,QAC9C,eAAe,EAAE,aAAa,oBAAI,KAAK;AAAA,MACzC,CAAC;AACD,SAAG,QAAQ,YAAY;AACvB,4BAAsB;AAAA,IACxB;AAGA,QAAI,UAAU,MAAM;AAAA,MAClB;AAAA,MACA;AAAA,MACA;AAAA,QACE,wBAAwB,aAAa;AAAA,QACrC,UAAU,MAAM,MAAM;AAAA,QACtB,gBAAgB,MAAM,MAAM,kBAAkB;AAAA,MAChD;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAOA,QACE,CAAC,uBACD,EAAE,cACD,CAAC,aAAa,iBAAiB,EAAE,YAAY,aAAa,gBAC3D;AACA,mBAAa,gBAAgB,EAAE;AAAA,IACjC;AAGA,UAAM,GAAG,MAAM;AAef,UAAM,iBAAkB,EAAE,mBAAmB,CAAC;AAC9C,QAAI,cAAkC;AACtC,QAAI;AACF,oBAAc,MAAM;AAAA,QAClB;AAAA,UACE,WAAW,MAAM;AAAA,UACjB,UAAU,MAAM,MAAM;AAAA,UACtB,gBAAgB,MAAM,MAAM,kBAAkB;AAAA,UAC9C,WAAW,sBAAsB,gBAAgB,WAAW,KAAK,EAAE;AAAA,UACnE,WACE,EAAE,qBAAqB,sBAAsB,gBAAgB,WAAW;AAAA,UAC1E,YAAY,2BAA2B,gBAAgB,YAAY;AAAA,UACnE,SAAS,EAAE,WAAW;AAAA,UACtB,aACE,sBAAsB,gBAAgB,MAAM,KAAK,EAAE;AAAA,UACrD,aAAa,2BAA2B,gBAAgB,IAAI;AAAA,UAC5D,aAAa,2BAA2B,gBAAgB,IAAI;AAAA,UAC5D,WAAW,EAAE,eAAe,SAAS,OAAO,EAAE,QAAQ;AAAA,UACtD,UAAU,EAAE,eAAe,SAAS,EAAE,QAAQ,OAAO;AAAA,UACrD,YAAY,EAAE,aAAa,oBAAI,KAAK;AAAA,QACtC;AAAA,QACA,EAAE,GAAG;AAAA,MACP;AAAA,IACF,SAAS,YAAY;AAGnB,cAAQ;AAAA,QACN;AAAA,QACA,sBAAsB,QAAQ,WAAW,UAAU;AAAA,MACrD;AAAA,IACF;AAGA,QAAI,cAIO;AACX,QAAI;AACF,oBAAc,MAAM;AAAA,QAClB;AAAA,UACE;AAAA,UACA,kBAAkB,EAAE;AAAA,UACpB,mBAAmB,EAAE;AAAA,UACrB,iBAAiB,EAAE;AAAA,UACnB,aAAa,CAAC;AAAA;AAAA,UACd,OAAO;AAAA,YACL,UAAU,MAAM,MAAM;AAAA,YACtB,gBAAgB,MAAM,MAAM,kBAAkB,MAAM,MAAM;AAAA,UAC5D;AAAA,QACF;AAAA,QACA,EAAE,WAAW,IAAI,UAAU;AAAA,MAC7B;AAAA,IACF,SAAS,YAAY;AAInB,cAAQ;AAAA,QACN;AAAA,QACA,sBAAsB,QAAQ,WAAW,UAAU;AAAA,MACrD;AACA,oBAAc;AAAA,IAChB;AACA,UAAM,kBAAkB,aAAa,mBAAmB;AACxD,QAAI,mBAAmB,aAAa,oBAAoB,iBAAiB;AACvE,mBAAa,kBAAkB;AAK/B,YAAM,GAAG,MAAM;AAAA,IACjB;AAYA,UAAM,mBAAmB;AACzB,UAAM,kBACJ;AACF,UAAM,UAAU,EAAE,QAAQ;AAC1B,UAAM,gBACJ,QAAQ,SAAS,mBACb,QAAQ,MAAM,GAAG,mBAAmB,gBAAgB,MAAM,IAAI,kBAC9D;AACN,UAAM,eAAe,EAAE,WAAW,IAAI,KAAK,KAAK;AAEhD,UAAM,eAAe;AAAA,MACnB,MAAM,WAAW,MAAM,WAAW;AAAA,MAClC,YAAY;AAAA,MACZ,kBAAkB;AAAA,MAClB,gBAAgB,aAAa;AAAA,MAC7B,eAAe,aAAa,SAAS;AAAA,MACrC,cAAc,aAAa,eAAe,EAAE;AAAA,MAC5C,YAAY,SAAS,iBACjB,CAAC,EAAE,QAAQ,QAAQ,gBAAgB,MAAM,KAAc,CAAC,IACxD,CAAC;AAAA,MACL,SAAS;AAAA,MACT,MAAM;AAAA,MACN,YAAa,EAAE,eAAe,SAAS,SAAS,EAAE;AAAA,MAClD,UAAU;AAAA,MACV,cAAc;AAAA;AAAA;AAAA;AAAA,MAId,iBAAiB,aAAa,mBAAmB,SAAS;AAAA,MAC1D,SAAS;AAAA;AAAA;AAAA;AAAA;AAAA,MAKT,gBAAgB,EAAE,oBACd,MAAM,MAAM,SAAS,IAAI,EAAE,iBAAiB,KAC5C;AAAA,MACJ,UAAU,MAAM,MAAM;AAAA,MACtB,gBAAgB,MAAM,MAAM;AAAA,MAC5B,QAAQ,MAAM;AAAA,QACZ;AAAA,QACA,MAAM,MAAM;AAAA,QACZ,SAAS,kBAAkB;AAAA,MAC7B;AAAA,IACF;AAEA,UAAM,aAAa,IAAI,UAAU,QAAQ,YAAY;AACrD,UAAM,gBAAgB,MAAM,WAAW;AAAA,MACrC;AAAA,MACA;AAAA,QACE,OAAO;AAAA,QACP,KAAK,sBAAsB,KAAK,MAAM,KAAK;AAAA,MAC7C;AAAA,IACF;AACA,UAAM,UAAU,cAAc;AAC9B,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,IAAI,MAAM,uDAAuD;AAAA,IACzE;AAGA,QAAI,CAAC,SAAS;AACZ,gBAAU,GAAG,OAAO,sBAAsB;AAAA,QACxC,wBAAwB,aAAa;AAAA,QACrC,iBAAiB,QAAQ,YAAY,QAAQ;AAAA,QAC7C,WAAW,MAAM;AAAA,QACjB,aAAa,MAAM;AAAA,QACnB,mBAAmB,EAAE;AAAA,QACrB,UAAU,MAAM,MAAM;AAAA,QACtB,gBAAgB,MAAM,MAAM,kBAAkB;AAAA,MAChD,CAAC;AACD,SAAG,QAAQ,OAAO;AAAA,IACpB;AAcA,UAAM,uBAAuB,WAAW;AACxC,UAAM,mBAAmB,WAAW;AACpC,UAAM,kBAAkB,GAAG,OAAO,iBAAiB;AAAA,MACjD,IAAI;AAAA,MACJ,WAAW,MAAM;AAAA,MACjB,gBAAgB,aAAa;AAAA,MAC7B,mBAAmB,EAAE;AAAA,MACrB,WAAW;AAAA,MACX,kBAAkB,EAAE;AAAA,MACpB,mBAAmB,EAAE,qBAAqB;AAAA,MAC1C,mBAAmB,EAAE;AAAA,MACrB,UAAU,MAAM,MAAM;AAAA,MACtB,gBAAgB,MAAM,MAAM,kBAAkB;AAAA,IAChD,CAAC;AACD,OAAG,QAAQ,eAAe;AAM1B,UAAM,2BAAoD;AAAA,MACxD,GAAK,EAAE,mBAA2D,CAAC;AAAA,MACnE,qBAAqB,aAAa,aAAa;AAAA,MAC/C,uBAAuB,aAAa,cAAc;AAAA,IACpD;AAEA,UAAM,cAAc,GAAG,OAAO,oBAAoB;AAAA,MAChD,IAAI;AAAA,MACJ,WAAW,QAAQ;AAAA,MACnB,wBAAwB,aAAa;AAAA,MACrC,mBAAmB;AAAA,MACnB,aAAa,MAAM;AAAA,MACnB,aAAa,MAAM;AAAA,MACnB,WAAW;AAAA,MACX,gBAAgB;AAAA,MAChB,gBAAgB,EAAE;AAAA,MAClB,oBAAoB,EAAE;AAAA,MACtB,iBAAiB;AAAA,MACjB,UAAU,MAAM,MAAM;AAAA,MACtB,gBAAgB,MAAM,MAAM,kBAAkB;AAAA,IAChD,CAAC;AACD,OAAG,QAAQ,WAAW;AAEtB,QAAI;AACF,YAAM,GAAG,MAAM;AAAA,IACjB,SAAS,UAAU;AAQjB,UAAI,kBAAkB,QAAQ,GAAG;AAC/B,eAAO;AAAA,UACL,QAAQ;AAAA,UACR,wBAAwB,aAAa;AAAA,UACrC,mBAAmB,EAAE;AAAA,QACvB;AAAA,MACF;AACA,YAAM;AAAA,IACR;AAGA,QAAI,qBAAqB;AACvB,YAAM;AAAA,QACJ;AAAA,QACA;AAAA,UACE,gBAAgB,aAAa;AAAA,UAC7B,WAAW,MAAM;AAAA,UACjB,aAAa,MAAM;AAAA,UACnB,aAAa,MAAM;AAAA,UACnB,wBAAwB,EAAE;AAAA,UAC1B,UAAU,MAAM,MAAM;AAAA,UACtB,gBAAgB,MAAM,MAAM,kBAAkB;AAAA,QAChD;AAAA,QACA,EAAE,YAAY,KAAK;AAAA,MACrB;AAAA,IACF;AACA,QAAI,iBAAiB;AACnB,YAAM;AAAA,QACJ;AAAA,QACA;AAAA,UACE,gBAAgB,aAAa;AAAA,UAC7B,iBAAiB;AAAA,UACjB,aAAa,MAAM;AAAA,UACnB,UAAU,MAAM,MAAM;AAAA,UACtB,gBAAgB,MAAM,MAAM,kBAAkB;AAAA,QAChD;AAAA,QACA,EAAE,YAAY,KAAK;AAAA,MACrB;AAAA,IACF;AACA,UAAM;AAAA,MACJ;AAAA,MACA;AAAA,QACE,WAAW,QAAQ;AAAA,QACnB,mBAAmB,gBAAgB;AAAA,QACnC,eAAe,YAAY;AAAA,QAC3B,gBAAgB,aAAa;AAAA,QAC7B,WAAW,MAAM;AAAA,QACjB,aAAa,MAAM;AAAA,QACnB,aAAa,MAAM;AAAA,QACnB,WAAW;AAAA,QACX,UAAU,MAAM,MAAM;AAAA,QACtB,gBAAgB,MAAM,MAAM,kBAAkB;AAAA,MAChD;AAAA,MACA,EAAE,YAAY,KAAK;AAAA,IACrB;AAEA,WAAO;AAAA,MACL,QAAQ;AAAA,MACR,WAAW,QAAQ;AAAA,MACnB,wBAAwB,aAAa;AAAA,MACrC,mBAAmB,gBAAgB;AAAA,MACnC,eAAe,YAAY;AAAA,MAC3B,iBAAiB,QAAQ;AAAA,MACzB,iBAAiB;AAAA,IACnB;AAAA,EACF;AACF;AAUA,SAAS,sBACP,QACA,OACuB;AACvB,SAAO;AAAA,IACL,WAAW,OAAO;AAAA,IAClB,MAAM;AAAA,IACN,mBAAmB;AAAA,IACnB,wBAAwB,MAAM,kBAAkB;AAAA,IAChD,iBAAiB,MAAM,iBAAiB,CAAC,MAAM,cAAc,IAAI;AAAA,EACnE;AACF;AAOA,SAAS,sBACP,MACA,KACe;AACf,QAAM,QAAQ,KAAK,GAAG;AACtB,MAAI,OAAO,UAAU,YAAY,MAAM,SAAS,EAAG,QAAO;AAC1D,SAAO;AACT;AAOA,SAAS,2BACP,MACA,KACU;AACV,QAAM,QAAQ,KAAK,GAAG;AACtB,MAAI,CAAC,MAAM,QAAQ,KAAK,EAAG,QAAO,CAAC;AACnC,SAAO,MAAM,OAAO,CAAC,SAAyB,OAAO,SAAS,QAAQ;AACxE;AAEA,gBAAgB,2BAA2B;AAE3C,IAAO,iCAAQ;",
+  "names": []
+}

package/dist/modules/communication_channels/commands/interceptors.js

@@ -0,0 +1,68 @@
+import { findOneWithDecryption } from "@open-mercato/shared/lib/encryption/find";
+import { resolveTranslations } from "@open-mercato/shared/lib/i18n/server";
+import { CommunicationChannel } from "../data/entities.js";
+import {
+  COMMUNICATION_CHANNELS_DISCONNECT_CHANNEL_COMMAND_ID,
+  extractSnapshotFromLog
+} from "./disconnect-channel.js";
+const interceptors = [
+  {
+    id: "communication_channels.disconnect-channel-before-undo",
+    targetCommand: COMMUNICATION_CHANNELS_DISCONNECT_CHANNEL_COMMAND_ID,
+    priority: 50,
+    async beforeUndo(undoContext, ctxRuntime) {
+      const snapshot = extractSnapshotFromLog(
+        undoContext.logEntry
+      );
+      if (!snapshot) {
+        return;
+      }
+      if (!snapshot.previousIsPrimary) {
+        return;
+      }
+      const em = ctxRuntime.container.resolve("em").fork();
+      if (!snapshot.tenantId) return;
+      const ownedChannel = await findOneWithDecryption(
+        em,
+        CommunicationChannel,
+        { id: snapshot.channelId, tenantId: snapshot.tenantId },
+        void 0,
+        { tenantId: snapshot.tenantId, organizationId: null }
+      );
+      if (!ownedChannel) return;
+      const otherPrimary = await findOneWithDecryption(
+        em,
+        CommunicationChannel,
+        {
+          tenantId: ownedChannel.tenantId,
+          organizationId: ownedChannel.organizationId ?? null,
+          userId: ownedChannel.userId,
+          isPrimary: true,
+          deletedAt: null
+        },
+        void 0,
+        {
+          tenantId: ownedChannel.tenantId,
+          organizationId: ownedChannel.organizationId ?? null
+        }
+      );
+      if (otherPrimary && otherPrimary.id !== snapshot.channelId) {
+        const fallback = "Another channel is now primary for this user. Set it as non-primary before restoring the disconnected channel as primary.";
+        let message = fallback;
+        try {
+          const { translate } = await resolveTranslations();
+          message = translate("communication_channels.errors.undoBlockedPrimaryConflict", fallback);
+        } catch {
+          message = fallback;
+        }
+        return { ok: false, message };
+      }
+    }
+  }
+];
+var interceptors_default = interceptors;
+export {
+  interceptors_default as default,
+  interceptors
+};
+//# sourceMappingURL=interceptors.js.map

package/dist/modules/communication_channels/commands/interceptors.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/communication_channels/commands/interceptors.ts"],
+  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport type {\n  CommandInterceptor,\n  CommandInterceptorBeforeResult,\n  CommandInterceptorUndoContext,\n} from '@open-mercato/shared/lib/commands/command-interceptor'\nimport { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { CommunicationChannel } from '../data/entities'\nimport {\n  COMMUNICATION_CHANNELS_DISCONNECT_CHANNEL_COMMAND_ID,\n  extractSnapshotFromLog,\n  type DisconnectChannelUndoSnapshot,\n} from './disconnect-channel'\n\n/**\n * Command interceptors for the Communications Hub.\n *\n * Phase 4 deliverable 5 of the email integration spec:\n *   - `beforeUndo` interceptor on `communication_channels.channel.disconnect`.\n *     If a different channel became primary while this one was disconnected,\n *     blocking the undo is the right call \u2014 restoring `is_primary=true` would\n *     violate the partial unique index `communication_channels_one_primary_per_user_uq`,\n *     and silently demoting the *other* channel would surprise the user.\n *\n * Auto-discovered by `commands/interceptors.ts` convention; no DI registration\n * required.\n */\nexport const interceptors: CommandInterceptor[] = [\n  {\n    id: 'communication_channels.disconnect-channel-before-undo',\n    targetCommand: COMMUNICATION_CHANNELS_DISCONNECT_CHANNEL_COMMAND_ID,\n    priority: 50,\n    async beforeUndo(\n      undoContext: CommandInterceptorUndoContext,\n      ctxRuntime,\n    ): Promise<CommandInterceptorBeforeResult | void> {\n      // Read the snapshot exactly as the command's own undo() handler does \u2014 from\n      // the persisted action-log `commandPayload.undo` (written by buildLog). The\n      // earlier `result.undo`/`resultJson`/`resultBody` shapes do not exist on the\n      // ActionLog entity, so this guard previously never fired.\n      const snapshot: DisconnectChannelUndoSnapshot | null = extractSnapshotFromLog(\n        undoContext.logEntry,\n      )\n      if (!snapshot) {\n        // No snapshot we can interpret \u2192 let undo proceed; the command's own\n        // undo() handler will no-op if the channel can't be re-resolved.\n        return\n      }\n      // Only enforce when the disconnected channel was the primary.\n      if (!snapshot.previousIsPrimary) {\n        return\n      }\n\n      const em = (ctxRuntime.container.resolve('em') as EntityManager).fork()\n      // Resolve only within the snapshot's tenant \u2014 never by bare id, which\n      // would cross tenant boundaries. New snapshots always carry tenantId.\n      if (!snapshot.tenantId) return\n      const ownedChannel = await findOneWithDecryption(\n        em,\n        CommunicationChannel,\n        { id: snapshot.channelId, tenantId: snapshot.tenantId },\n        undefined,\n        { tenantId: snapshot.tenantId as string, organizationId: null },\n      )\n      if (!ownedChannel) return // command's undo() will silently no-op\n\n      const otherPrimary = await findOneWithDecryption(\n        em,\n        CommunicationChannel,\n        {\n          tenantId: ownedChannel.tenantId,\n          organizationId: ownedChannel.organizationId ?? null,\n          userId: ownedChannel.userId,\n          isPrimary: true,\n          deletedAt: null,\n        },\n        undefined,\n        {\n          tenantId: ownedChannel.tenantId,\n          organizationId: ownedChannel.organizationId ?? null,\n        },\n      )\n      if (otherPrimary && otherPrimary.id !== snapshot.channelId) {\n        // Operator-facing block reason. Localize via the request locale when\n        // available, but undo can also run outside a request (queue worker / CLI)\n        // where the i18n module registry is uninitialized and resolveTranslations()\n        // throws \u2014 fall back to the English string rather than failing the block.\n        const fallback =\n          'Another channel is now primary for this user. Set it as non-primary before restoring the disconnected channel as primary.'\n        let message = fallback\n        try {\n          const { translate } = await resolveTranslations()\n          message = translate('communication_channels.errors.undoBlockedPrimaryConflict', fallback)\n        } catch {\n          message = fallback\n        }\n        return { ok: false, message }\n      }\n    },\n  },\n]\n\nexport default interceptors\n"],
+  "mappings": "AAMA,SAAS,6BAA6B;AACtC,SAAS,2BAA2B;AACpC,SAAS,4BAA4B;AACrC;AAAA,EACE;AAAA,EACA;AAAA,OAEK;AAeA,MAAM,eAAqC;AAAA,EAChD;AAAA,IACE,IAAI;AAAA,IACJ,eAAe;AAAA,IACf,UAAU;AAAA,IACV,MAAM,WACJ,aACA,YACgD;AAKhD,YAAM,WAAiD;AAAA,QACrD,YAAY;AAAA,MACd;AACA,UAAI,CAAC,UAAU;AAGb;AAAA,MACF;AAEA,UAAI,CAAC,SAAS,mBAAmB;AAC/B;AAAA,MACF;AAEA,YAAM,KAAM,WAAW,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAGtE,UAAI,CAAC,SAAS,SAAU;AACxB,YAAM,eAAe,MAAM;AAAA,QACzB;AAAA,QACA;AAAA,QACA,EAAE,IAAI,SAAS,WAAW,UAAU,SAAS,SAAS;AAAA,QACtD;AAAA,QACA,EAAE,UAAU,SAAS,UAAoB,gBAAgB,KAAK;AAAA,MAChE;AACA,UAAI,CAAC,aAAc;AAEnB,YAAM,eAAe,MAAM;AAAA,QACzB;AAAA,QACA;AAAA,QACA;AAAA,UACE,UAAU,aAAa;AAAA,UACvB,gBAAgB,aAAa,kBAAkB;AAAA,UAC/C,QAAQ,aAAa;AAAA,UACrB,WAAW;AAAA,UACX,WAAW;AAAA,QACb;AAAA,QACA;AAAA,QACA;AAAA,UACE,UAAU,aAAa;AAAA,UACvB,gBAAgB,aAAa,kBAAkB;AAAA,QACjD;AAAA,MACF;AACA,UAAI,gBAAgB,aAAa,OAAO,SAAS,WAAW;AAK1D,cAAM,WACJ;AACF,YAAI,UAAU;AACd,YAAI;AACF,gBAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,oBAAU,UAAU,4DAA4D,QAAQ;AAAA,QAC1F,QAAQ;AACN,oBAAU;AAAA,QACZ;AACA,eAAO,EAAE,IAAI,OAAO,QAAQ;AAAA,MAC9B;AAAA,IACF;AAAA,EACF;AACF;AAEA,IAAO,uBAAQ;",
+  "names": []
+}