@open-mercato/core 0.6.5-develop.4384.1.ce2ec6eaaa → 0.6.5-develop.4393.1.de282b5dfd

package/dist/modules/communication_channels/lib/reaction-semantics.js

@@ -0,0 +1,11 @@
+function allowsMultipleReactionsPerUser(capabilities) {
+  return capabilities?.multiReactionPerUser === true;
+}
+function resolveInboundAddMutation(capabilities) {
+  return allowsMultipleReactionsPerUser(capabilities) ? "insert" : "replace";
+}
+export {
+  allowsMultipleReactionsPerUser,
+  resolveInboundAddMutation
+};
+//# sourceMappingURL=reaction-semantics.js.map

package/dist/modules/communication_channels/lib/reaction-semantics.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/communication_channels/lib/reaction-semantics.ts"],
+  "sourcesContent": ["import type { ChannelCapabilities } from './adapter'\n\n/**\n * Reaction semantics \u2014 capability-driven decisions about how the hub applies an\n * incoming or outgoing reaction.\n *\n * The platform-side `MessageReaction` table can record any number of rows per\n * (messageId, reactor); the channel-specific semantics decide whether to keep\n * existing reactions when a new one arrives:\n *\n *   - **Multi-per-user** (Slack default; `multiReactionPerUser: true`):\n *     keep all existing reactions from the same reactor; just insert the new one.\n *\n *   - **Single-per-user** (WhatsApp default; `multiReactionPerUser: false`):\n *     delete all existing reactions from the same reactor for the same message,\n *     then insert the new one. This matches WhatsApp's \"one reaction per user\"\n *     UI behaviour.\n *\n * The helper functions here are pure \u2014 they don't talk to the database. The\n * command layer that consumes them is responsible for the actual DELETE/INSERT.\n */\n\n/**\n * Returns true when the channel's capabilities allow multiple reactions from\n * the same reactor on the same message (Slack-like).\n */\nexport function allowsMultipleReactionsPerUser(\n  capabilities: Pick<ChannelCapabilities, 'multiReactionPerUser'> | null | undefined,\n): boolean {\n  // Default to false for safety \u2014 a missing capability declaration should not\n  // accidentally enable multi-reactions. Real adapters explicitly declare both\n  // booleans per SPEC-045d \u00A71.1.\n  return capabilities?.multiReactionPerUser === true\n}\n\n/**\n * Computes what mutation a new inbound `added` reaction implies, given the\n * channel's capabilities. Pure \u2014 no DB calls. The caller maps the result to\n * SQL.\n *\n * @returns `'insert'` to just persist the new reaction; `'replace'` to delete\n *   every reaction from the same reactor for the same message before inserting.\n */\nexport function resolveInboundAddMutation(\n  capabilities: Pick<ChannelCapabilities, 'multiReactionPerUser'> | null | undefined,\n): 'insert' | 'replace' {\n  return allowsMultipleReactionsPerUser(capabilities) ? 'insert' : 'replace'\n}\n"],
+  "mappings": "AA0BO,SAAS,+BACd,cACS;AAIT,SAAO,cAAc,yBAAyB;AAChD;AAUO,SAAS,0BACd,cACsB;AACtB,SAAO,+BAA+B,YAAY,IAAI,WAAW;AACnE;",
+  "names": []
+}

package/dist/modules/communication_channels/lib/registry.js

@@ -0,0 +1,67 @@
+import { validateAdapterCapabilities } from "./adapter-compat.js";
+const CHANNEL_ADAPTER_REGISTRY_KEY = /* @__PURE__ */ Symbol.for("@open-mercato/communication-channels/adapter-registry");
+function getRegistryMap() {
+  const scope = globalThis;
+  if (!scope[CHANNEL_ADAPTER_REGISTRY_KEY]) {
+    scope[CHANNEL_ADAPTER_REGISTRY_KEY] = /* @__PURE__ */ new Map();
+  }
+  return scope[CHANNEL_ADAPTER_REGISTRY_KEY];
+}
+function registerChannelAdapter(adapter) {
+  validateAdapterCapabilities(adapter);
+  const map = getRegistryMap();
+  if (map.has(adapter.providerKey)) {
+    throw new Error(
+      `ChannelAdapter '${adapter.providerKey}' is already registered. Each provider package must declare a unique providerKey.`
+    );
+  }
+  map.set(adapter.providerKey, adapter);
+  return () => {
+    map.delete(adapter.providerKey);
+  };
+}
+function getChannelAdapter(providerKey) {
+  return getRegistryMap().get(providerKey);
+}
+function listChannelAdapters() {
+  return Array.from(getRegistryMap().values());
+}
+function listChannelAdapterProviderKeys() {
+  return Array.from(getRegistryMap().keys());
+}
+function hasChannelAdapter(providerKey) {
+  return getRegistryMap().has(providerKey);
+}
+function clearChannelAdapters() {
+  getRegistryMap().clear();
+}
+class ChannelAdapterRegistry {
+  register(adapter) {
+    registerChannelAdapter(adapter);
+  }
+  get(providerKey) {
+    return getChannelAdapter(providerKey);
+  }
+  list() {
+    return listChannelAdapters();
+  }
+  providerKeys() {
+    return listChannelAdapterProviderKeys();
+  }
+  has(providerKey) {
+    return hasChannelAdapter(providerKey);
+  }
+  clear() {
+    clearChannelAdapters();
+  }
+}
+export {
+  ChannelAdapterRegistry,
+  clearChannelAdapters,
+  getChannelAdapter,
+  hasChannelAdapter,
+  listChannelAdapterProviderKeys,
+  listChannelAdapters,
+  registerChannelAdapter
+};
+//# sourceMappingURL=registry.js.map

package/dist/modules/communication_channels/lib/registry.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/communication_channels/lib/registry.ts"],
+  "sourcesContent": ["import type { ChannelAdapter } from './adapter'\nimport { validateAdapterCapabilities } from './adapter-compat'\n\n/**\n * Channel adapter registry \u2014 process-level singleton backed by `globalThis`.\n *\n * Mirrors the `shipping_carriers/lib/adapter-registry.ts` pattern so that\n * unauthenticated webhook routes (which have not yet built a tenant-scoped DI\n * container) can resolve adapters by `providerKey`. DI consumers continue to\n * resolve the same registry via the `channelAdapterRegistry` binding declared\n * in `di.ts` \u2014 that binding is a thin proxy over these functions.\n *\n * The registry validates each adapter at registration time (see\n * `validateAdapterCapabilities`) and refuses duplicate `providerKey` registrations.\n */\n\nconst CHANNEL_ADAPTER_REGISTRY_KEY = Symbol.for('@open-mercato/communication-channels/adapter-registry')\n\ntype GlobalWithChannelRegistry = typeof globalThis & {\n  [CHANNEL_ADAPTER_REGISTRY_KEY]?: Map<string, ChannelAdapter>\n}\n\nfunction getRegistryMap(): Map<string, ChannelAdapter> {\n  const scope = globalThis as GlobalWithChannelRegistry\n  if (!scope[CHANNEL_ADAPTER_REGISTRY_KEY]) {\n    scope[CHANNEL_ADAPTER_REGISTRY_KEY] = new Map<string, ChannelAdapter>()\n  }\n  return scope[CHANNEL_ADAPTER_REGISTRY_KEY]!\n}\n\nexport function registerChannelAdapter(adapter: ChannelAdapter): () => void {\n  validateAdapterCapabilities(adapter)\n  const map = getRegistryMap()\n  if (map.has(adapter.providerKey)) {\n    throw new Error(\n      `ChannelAdapter '${adapter.providerKey}' is already registered. ` +\n        'Each provider package must declare a unique providerKey.',\n    )\n  }\n  map.set(adapter.providerKey, adapter)\n  return () => {\n    map.delete(adapter.providerKey)\n  }\n}\n\nexport function getChannelAdapter(providerKey: string): ChannelAdapter | undefined {\n  return getRegistryMap().get(providerKey)\n}\n\nexport function listChannelAdapters(): ChannelAdapter[] {\n  return Array.from(getRegistryMap().values())\n}\n\nexport function listChannelAdapterProviderKeys(): string[] {\n  return Array.from(getRegistryMap().keys())\n}\n\nexport function hasChannelAdapter(providerKey: string): boolean {\n  return getRegistryMap().has(providerKey)\n}\n\n/**\n * Clear the registry. Primarily for tests that need a fresh registry between cases.\n * NOT for production use \u2014 at runtime, adapters are registered once at boot.\n */\nexport function clearChannelAdapters(): void {\n  getRegistryMap().clear()\n}\n\n/**\n * Class wrapper kept for DI consumers and test ergonomics. All instances back\n * onto the same `globalThis` storage so DI consumers and direct module callers\n * see the same registry.\n */\nexport class ChannelAdapterRegistry {\n  register(adapter: ChannelAdapter): void {\n    registerChannelAdapter(adapter)\n  }\n\n  get(providerKey: string): ChannelAdapter | undefined {\n    return getChannelAdapter(providerKey)\n  }\n\n  list(): ChannelAdapter[] {\n    return listChannelAdapters()\n  }\n\n  providerKeys(): string[] {\n    return listChannelAdapterProviderKeys()\n  }\n\n  has(providerKey: string): boolean {\n    return hasChannelAdapter(providerKey)\n  }\n\n  clear(): void {\n    clearChannelAdapters()\n  }\n}\n"],
+  "mappings": "AACA,SAAS,mCAAmC;AAe5C,MAAM,+BAA+B,uBAAO,IAAI,uDAAuD;AAMvG,SAAS,iBAA8C;AACrD,QAAM,QAAQ;AACd,MAAI,CAAC,MAAM,4BAA4B,GAAG;AACxC,UAAM,4BAA4B,IAAI,oBAAI,IAA4B;AAAA,EACxE;AACA,SAAO,MAAM,4BAA4B;AAC3C;AAEO,SAAS,uBAAuB,SAAqC;AAC1E,8BAA4B,OAAO;AACnC,QAAM,MAAM,eAAe;AAC3B,MAAI,IAAI,IAAI,QAAQ,WAAW,GAAG;AAChC,UAAM,IAAI;AAAA,MACR,mBAAmB,QAAQ,WAAW;AAAA,IAExC;AAAA,EACF;AACA,MAAI,IAAI,QAAQ,aAAa,OAAO;AACpC,SAAO,MAAM;AACX,QAAI,OAAO,QAAQ,WAAW;AAAA,EAChC;AACF;AAEO,SAAS,kBAAkB,aAAiD;AACjF,SAAO,eAAe,EAAE,IAAI,WAAW;AACzC;AAEO,SAAS,sBAAwC;AACtD,SAAO,MAAM,KAAK,eAAe,EAAE,OAAO,CAAC;AAC7C;AAEO,SAAS,iCAA2C;AACzD,SAAO,MAAM,KAAK,eAAe,EAAE,KAAK,CAAC;AAC3C;AAEO,SAAS,kBAAkB,aAA8B;AAC9D,SAAO,eAAe,EAAE,IAAI,WAAW;AACzC;AAMO,SAAS,uBAA6B;AAC3C,iBAAe,EAAE,MAAM;AACzB;AAOO,MAAM,uBAAuB;AAAA,EAClC,SAAS,SAA+B;AACtC,2BAAuB,OAAO;AAAA,EAChC;AAAA,EAEA,IAAI,aAAiD;AACnD,WAAO,kBAAkB,WAAW;AAAA,EACtC;AAAA,EAEA,OAAyB;AACvB,WAAO,oBAAoB;AAAA,EAC7B;AAAA,EAEA,eAAyB;AACvB,WAAO,+BAA+B;AAAA,EACxC;AAAA,EAEA,IAAI,aAA8B;AAChC,WAAO,kBAAkB,WAAW;AAAA,EACtC;AAAA,EAEA,QAAc;AACZ,yBAAqB;AAAA,EACvB;AACF;",
+  "names": []
+}

package/dist/modules/communication_channels/lib/route-mutation-guard.js

@@ -0,0 +1,43 @@
+import {
+  runCrudMutationGuardAfterSuccess,
+  validateCrudMutationGuard
+} from "@open-mercato/shared/lib/crud/mutation-guard";
+async function validateRouteMutationGuard(params) {
+  const { auth, container, input, req } = params;
+  if (!auth.sub || !auth.tenantId) {
+    return { result: null, afterSuccess: async () => void 0 };
+  }
+  const base = {
+    tenantId: auth.tenantId,
+    organizationId: auth.orgId ?? null,
+    userId: auth.sub,
+    resourceKind: input.resourceKind,
+    resourceId: input.resourceId,
+    operation: input.operation ?? "custom",
+    requestMethod: req.method,
+    requestHeaders: req.headers
+  };
+  const result = await validateCrudMutationGuard(container, {
+    ...base,
+    mutationPayload: input.mutationPayload ?? null
+  });
+  if (result && !result.ok) {
+    return {
+      response: Response.json(result.body, { status: result.status })
+    };
+  }
+  return {
+    result,
+    afterSuccess: async () => {
+      if (!result?.ok || !result.shouldRunAfterSuccess) return;
+      await runCrudMutationGuardAfterSuccess(container, {
+        ...base,
+        metadata: result.metadata ?? null
+      });
+    }
+  };
+}
+export {
+  validateRouteMutationGuard
+};
+//# sourceMappingURL=route-mutation-guard.js.map

package/dist/modules/communication_channels/lib/route-mutation-guard.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/communication_channels/lib/route-mutation-guard.ts"],
+  "sourcesContent": ["import type { AwilixContainer } from 'awilix'\nimport {\n  runCrudMutationGuardAfterSuccess,\n  validateCrudMutationGuard,\n  type CrudMutationGuardValidationResult,\n} from '@open-mercato/shared/lib/crud/mutation-guard'\n\ntype RouteAuth = {\n  sub?: string | null\n  tenantId?: string | null\n  orgId?: string | null\n}\n\ntype RouteMutationGuardInput = {\n  resourceKind: string\n  resourceId: string\n  operation?: 'create' | 'update' | 'delete' | 'custom'\n  mutationPayload?: Record<string, unknown> | null\n}\n\nexport type RouteMutationGuardContext = {\n  result: CrudMutationGuardValidationResult | null\n  afterSuccess: () => Promise<void>\n}\n\nexport async function validateRouteMutationGuard(params: {\n  container: AwilixContainer\n  req: Request\n  auth: RouteAuth\n  input: RouteMutationGuardInput\n}): Promise<RouteMutationGuardContext | { response: Response }> {\n  const { auth, container, input, req } = params\n  if (!auth.sub || !auth.tenantId) {\n    return { result: null, afterSuccess: async () => undefined }\n  }\n\n  const base = {\n    tenantId: auth.tenantId,\n    organizationId: auth.orgId ?? null,\n    userId: auth.sub,\n    resourceKind: input.resourceKind,\n    resourceId: input.resourceId,\n    operation: input.operation ?? 'custom',\n    requestMethod: req.method,\n    requestHeaders: req.headers,\n  } as const\n\n  const result = await validateCrudMutationGuard(container, {\n    ...base,\n    mutationPayload: input.mutationPayload ?? null,\n  })\n  if (result && !result.ok) {\n    return {\n      response: Response.json(result.body, { status: result.status }),\n    }\n  }\n\n  return {\n    result,\n    afterSuccess: async () => {\n      if (!result?.ok || !result.shouldRunAfterSuccess) return\n      await runCrudMutationGuardAfterSuccess(container, {\n        ...base,\n        metadata: result.metadata ?? null,\n      })\n    },\n  }\n}\n"],
+  "mappings": "AACA;AAAA,EACE;AAAA,EACA;AAAA,OAEK;AAoBP,eAAsB,2BAA2B,QAKe;AAC9D,QAAM,EAAE,MAAM,WAAW,OAAO,IAAI,IAAI;AACxC,MAAI,CAAC,KAAK,OAAO,CAAC,KAAK,UAAU;AAC/B,WAAO,EAAE,QAAQ,MAAM,cAAc,YAAY,OAAU;AAAA,EAC7D;AAEA,QAAM,OAAO;AAAA,IACX,UAAU,KAAK;AAAA,IACf,gBAAgB,KAAK,SAAS;AAAA,IAC9B,QAAQ,KAAK;AAAA,IACb,cAAc,MAAM;AAAA,IACpB,YAAY,MAAM;AAAA,IAClB,WAAW,MAAM,aAAa;AAAA,IAC9B,eAAe,IAAI;AAAA,IACnB,gBAAgB,IAAI;AAAA,EACtB;AAEA,QAAM,SAAS,MAAM,0BAA0B,WAAW;AAAA,IACxD,GAAG;AAAA,IACH,iBAAiB,MAAM,mBAAmB;AAAA,EAC5C,CAAC;AACD,MAAI,UAAU,CAAC,OAAO,IAAI;AACxB,WAAO;AAAA,MACL,UAAU,SAAS,KAAK,OAAO,MAAM,EAAE,QAAQ,OAAO,OAAO,CAAC;AAAA,IAChE;AAAA,EACF;AAEA,SAAO;AAAA,IACL;AAAA,IACA,cAAc,YAAY;AACxB,UAAI,CAAC,QAAQ,MAAM,CAAC,OAAO,sBAAuB;AAClD,YAAM,iCAAiC,WAAW;AAAA,QAChD,GAAG;AAAA,QACH,UAAU,OAAO,YAAY;AAAA,MAC/B,CAAC;AAAA,IACH;AAAA,EACF;AACF;",
+  "names": []
+}

package/dist/modules/communication_channels/lib/sanitize-channel-html.js

@@ -0,0 +1,96 @@
+import sanitizeHtml from "sanitize-html";
+const ALLOWED_TAGS = [
+  "a",
+  "img",
+  "table",
+  "thead",
+  "tbody",
+  "tfoot",
+  "tr",
+  "td",
+  "th",
+  "p",
+  "br",
+  "hr",
+  "ul",
+  "ol",
+  "li",
+  "h1",
+  "h2",
+  "h3",
+  "h4",
+  "h5",
+  "h6",
+  "strong",
+  "em",
+  "b",
+  "i",
+  "u",
+  "s",
+  "blockquote",
+  "code",
+  "pre",
+  "span",
+  "div"
+];
+const ALLOWED_SCHEMES = ["http", "https", "mailto", "tel"];
+const ALLOWED_SCHEMES_BY_TAG = {
+  img: ["http", "https", "data"]
+};
+const SAFE_CSS_COLOR = /^#(?:[0-9a-f]{3,4}|[0-9a-f]{6}|[0-9a-f]{8})$|^rgba?\(\s*[\d.,\s%]+\)$|^hsla?\(\s*[\d.,\s%]+\)$|^[a-z]+$/i;
+const SANITIZE_OPTIONS = {
+  allowedTags: ALLOWED_TAGS,
+  allowedAttributes: {
+    a: ["href", "title", "class"],
+    img: ["src", "alt", "title", "class", "width", "height"],
+    "*": ["class", "style", "colspan", "rowspan", "width", "height"]
+  },
+  allowedSchemes: ALLOWED_SCHEMES,
+  allowedSchemesByTag: ALLOWED_SCHEMES_BY_TAG,
+  allowedSchemesAppliedToAttributes: ["href", "src"],
+  allowProtocolRelative: false,
+  // disable inline scripts in style attributes
+  allowedStyles: {
+    "*": {
+      "background-color": [SAFE_CSS_COLOR],
+      color: [SAFE_CSS_COLOR],
+      "text-align": [/^left$|^right$|^center$|^justify$/i],
+      "font-size": [/^\d+(?:\.\d+)?(?:px|em|rem|%)$/],
+      "font-weight": [/^\d{3}$|^bold$|^normal$/],
+      "font-style": [/^italic$|^normal$/],
+      "text-decoration": [/^underline$|^line-through$|^none$/],
+      padding: [/^[\d\s.]+(?:px|em|rem|%)?$/],
+      margin: [/^[\d\s.]+(?:px|em|rem|%)?$/],
+      border: [/^[\d\s\w.]+$/],
+      "border-radius": [/^\d+(?:\.\d+)?(?:px|em|rem|%)$/],
+      // Permit only `display:none` so the hidden thread-token footer span
+      // (`buildBodyFooter`) stays hidden when a sent email body is re-rendered.
+      // Every other display value is stripped.
+      display: [/^none$/]
+    }
+  },
+  /**
+   * data:image/<mime>;base64,... URLs in <img src=...> are explicitly allowed so inline
+   * email images render. sanitize-html validates the base64 payload shape; if a future
+   * payload tries to smuggle a non-image MIME type via data URL we strip it.
+   */
+  exclusiveFilter: (frame) => {
+    if (frame.tag === "img" && frame.attribs?.src) {
+      const src = frame.attribs.src;
+      if (src.startsWith("data:") && !/^data:image\/(?:png|jpe?g|gif|webp);base64,/i.test(src)) {
+        return true;
+      }
+    }
+    return false;
+  }
+};
+function sanitizeChannelHtml(html) {
+  if (!html) return "";
+  return sanitizeHtml(html, SANITIZE_OPTIONS);
+}
+var sanitize_channel_html_default = sanitizeChannelHtml;
+export {
+  sanitize_channel_html_default as default,
+  sanitizeChannelHtml
+};
+//# sourceMappingURL=sanitize-channel-html.js.map

package/dist/modules/communication_channels/lib/sanitize-channel-html.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/communication_channels/lib/sanitize-channel-html.ts"],
+  "sourcesContent": ["import sanitizeHtml from 'sanitize-html'\n\n/**\n * HTML sanitizer for channel-supplied payloads (email MIME, Slack rich-text, future channel types).\n *\n * The hub owns this helper; every widget that renders channel HTML \u2014 in the hub itself or in\n * downstream provider packages \u2014 imports it. The Messages module's `channel-payload-renderer`\n * widget calls this before any `dangerouslySetInnerHTML`-style render.\n *\n * Implementation note: backed by `sanitize-html` (CommonJS, server-friendly) rather than\n * DOMPurify so the same code runs in Jest without ESM transform gymnastics. SPEC-045d \u00A74.6\n * specifies \"DOMPurify or equivalent\" \u2014 `sanitize-html` is an allowlist-based equivalent\n * widely used for the same sanitization shape.\n *\n * Allowlist is tuned for email + chat HTML:\n *   - Preserves typical email layout primitives (table-based layouts, inline images, basic typography).\n *   - Strips `<script>`, `<style>`, `<iframe>`, all event-handler attributes (`on*`).\n *   - Blocks `javascript:` and `data:` URLs except `data:image/*;base64,\u2026` (inline base64 images, common in email).\n */\n\nconst ALLOWED_TAGS = [\n  'a',\n  'img',\n  'table',\n  'thead',\n  'tbody',\n  'tfoot',\n  'tr',\n  'td',\n  'th',\n  'p',\n  'br',\n  'hr',\n  'ul',\n  'ol',\n  'li',\n  'h1',\n  'h2',\n  'h3',\n  'h4',\n  'h5',\n  'h6',\n  'strong',\n  'em',\n  'b',\n  'i',\n  'u',\n  's',\n  'blockquote',\n  'code',\n  'pre',\n  'span',\n  'div',\n]\n\nconst ALLOWED_SCHEMES = ['http', 'https', 'mailto', 'tel']\nconst ALLOWED_SCHEMES_BY_TAG = {\n  img: ['http', 'https', 'data'],\n}\n\n/**\n * Safe CSS color value shapes only: hex (#rgb / #rgba / #rrggbb / #rrggbbaa),\n * rgb()/rgba(), hsl()/hsla(), and bare named colors (`red`, `transparent`,\n * `currentcolor`, \u2026). Deliberately rejects any value containing `url(` or\n * `expression(` so a `color`/`background-color` declaration can never smuggle a\n * CSS-based tracking beacon or legacy-IE script expression past the sanitizer.\n */\nconst SAFE_CSS_COLOR =\n  /^#(?:[0-9a-f]{3,4}|[0-9a-f]{6}|[0-9a-f]{8})$|^rgba?\\(\\s*[\\d.,\\s%]+\\)$|^hsla?\\(\\s*[\\d.,\\s%]+\\)$|^[a-z]+$/i\n\nconst SANITIZE_OPTIONS: sanitizeHtml.IOptions = {\n  allowedTags: ALLOWED_TAGS,\n  allowedAttributes: {\n    a: ['href', 'title', 'class'],\n    img: ['src', 'alt', 'title', 'class', 'width', 'height'],\n    '*': ['class', 'style', 'colspan', 'rowspan', 'width', 'height'],\n  },\n  allowedSchemes: ALLOWED_SCHEMES,\n  allowedSchemesByTag: ALLOWED_SCHEMES_BY_TAG,\n  allowedSchemesAppliedToAttributes: ['href', 'src'],\n  allowProtocolRelative: false,\n  // disable inline scripts in style attributes\n  allowedStyles: {\n    '*': {\n      'background-color': [SAFE_CSS_COLOR],\n      color: [SAFE_CSS_COLOR],\n      'text-align': [/^left$|^right$|^center$|^justify$/i],\n      'font-size': [/^\\d+(?:\\.\\d+)?(?:px|em|rem|%)$/],\n      'font-weight': [/^\\d{3}$|^bold$|^normal$/],\n      'font-style': [/^italic$|^normal$/],\n      'text-decoration': [/^underline$|^line-through$|^none$/],\n      padding: [/^[\\d\\s.]+(?:px|em|rem|%)?$/],\n      margin: [/^[\\d\\s.]+(?:px|em|rem|%)?$/],\n      border: [/^[\\d\\s\\w.]+$/],\n      'border-radius': [/^\\d+(?:\\.\\d+)?(?:px|em|rem|%)$/],\n      // Permit only `display:none` so the hidden thread-token footer span\n      // (`buildBodyFooter`) stays hidden when a sent email body is re-rendered.\n      // Every other display value is stripped.\n      display: [/^none$/],\n    },\n  },\n  /**\n   * data:image/<mime>;base64,... URLs in <img src=...> are explicitly allowed so inline\n   * email images render. sanitize-html validates the base64 payload shape; if a future\n   * payload tries to smuggle a non-image MIME type via data URL we strip it.\n   */\n  exclusiveFilter: (frame) => {\n    if (frame.tag === 'img' && frame.attribs?.src) {\n      const src = frame.attribs.src\n      if (src.startsWith('data:') && !/^data:image\\/(?:png|jpe?g|gif|webp);base64,/i.test(src)) {\n        return true\n      }\n    }\n    return false\n  },\n}\n\n/**\n * Sanitize an HTML string for safe rendering.\n *\n * @param html Raw HTML \u2014 may originate from an external channel (email body, Slack mrkdwn rendered to HTML, \u2026).\n * @returns Sanitized HTML safe for `dangerouslySetInnerHTML`.\n */\nexport function sanitizeChannelHtml(html: string): string {\n  if (!html) return ''\n  return sanitizeHtml(html, SANITIZE_OPTIONS)\n}\n\nexport default sanitizeChannelHtml\n"],
+  "mappings": "AAAA,OAAO,kBAAkB;AAoBzB,MAAM,eAAe;AAAA,EACnB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAEA,MAAM,kBAAkB,CAAC,QAAQ,SAAS,UAAU,KAAK;AACzD,MAAM,yBAAyB;AAAA,EAC7B,KAAK,CAAC,QAAQ,SAAS,MAAM;AAC/B;AASA,MAAM,iBACJ;AAEF,MAAM,mBAA0C;AAAA,EAC9C,aAAa;AAAA,EACb,mBAAmB;AAAA,IACjB,GAAG,CAAC,QAAQ,SAAS,OAAO;AAAA,IAC5B,KAAK,CAAC,OAAO,OAAO,SAAS,SAAS,SAAS,QAAQ;AAAA,IACvD,KAAK,CAAC,SAAS,SAAS,WAAW,WAAW,SAAS,QAAQ;AAAA,EACjE;AAAA,EACA,gBAAgB;AAAA,EAChB,qBAAqB;AAAA,EACrB,mCAAmC,CAAC,QAAQ,KAAK;AAAA,EACjD,uBAAuB;AAAA;AAAA,EAEvB,eAAe;AAAA,IACb,KAAK;AAAA,MACH,oBAAoB,CAAC,cAAc;AAAA,MACnC,OAAO,CAAC,cAAc;AAAA,MACtB,cAAc,CAAC,oCAAoC;AAAA,MACnD,aAAa,CAAC,gCAAgC;AAAA,MAC9C,eAAe,CAAC,yBAAyB;AAAA,MACzC,cAAc,CAAC,mBAAmB;AAAA,MAClC,mBAAmB,CAAC,mCAAmC;AAAA,MACvD,SAAS,CAAC,4BAA4B;AAAA,MACtC,QAAQ,CAAC,4BAA4B;AAAA,MACrC,QAAQ,CAAC,cAAc;AAAA,MACvB,iBAAiB,CAAC,gCAAgC;AAAA;AAAA;AAAA;AAAA,MAIlD,SAAS,CAAC,QAAQ;AAAA,IACpB;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,iBAAiB,CAAC,UAAU;AAC1B,QAAI,MAAM,QAAQ,SAAS,MAAM,SAAS,KAAK;AAC7C,YAAM,MAAM,MAAM,QAAQ;AAC1B,UAAI,IAAI,WAAW,OAAO,KAAK,CAAC,+CAA+C,KAAK,GAAG,GAAG;AACxF,eAAO;AAAA,MACT;AAAA,IACF;AACA,WAAO;AAAA,EACT;AACF;AAQO,SAAS,oBAAoB,MAAsB;AACxD,MAAI,CAAC,KAAM,QAAO;AAClB,SAAO,aAAa,MAAM,gBAAgB;AAC5C;AAEA,IAAO,gCAAQ;",
+  "names": []
+}

package/dist/modules/communication_channels/lib/send-as-user.js

@@ -0,0 +1,194 @@
+import { findOneWithDecryption } from "@open-mercato/shared/lib/encryption/find";
+import {
+  ChannelThreadMapping,
+  CommunicationChannel,
+  ExternalConversation,
+  MessageChannelLink
+} from "../data/entities.js";
+import { ChannelMutationBlockedError, guardOutboundCreate } from "./mutation-guards.js";
+import { COMMUNICATION_CHANNELS_QUEUES, getCommunicationChannelsQueue } from "./queue.js";
+import { htmlToText } from "./email-mime.js";
+async function sendAsUser(container, actor, input) {
+  if (!input.body.plain && !input.body.html) {
+    return { ok: false, status: 422, error: "Either body.plain or body.html is required" };
+  }
+  if (!Array.isArray(input.to) || input.to.length === 0) {
+    return { ok: false, status: 422, error: "At least one recipient is required" };
+  }
+  const em = container.resolve("em").fork();
+  const { tenantId } = actor;
+  const organizationId = actor.organizationId;
+  const dscope = { tenantId, organizationId };
+  const channel = await findOneWithDecryption(
+    em,
+    CommunicationChannel,
+    { id: input.userChannelId, tenantId, organizationId, deletedAt: null },
+    void 0,
+    dscope
+  );
+  if (!channel) return { ok: false, status: 404, error: "Channel not found" };
+  if (channel.userId !== actor.userId) {
+    return { ok: false, status: 403, error: "You can only send through channels you own" };
+  }
+  try {
+    await guardOutboundCreate(em, { channelId: channel.id, scope: dscope });
+  } catch (err) {
+    if (err instanceof ChannelMutationBlockedError) {
+      return { ok: false, status: 422, error: err.message, fieldErrors: err.errors };
+    }
+    throw err;
+  }
+  if (!channel.isActive || channel.status !== "connected") {
+    return {
+      ok: false,
+      status: 409,
+      error: `Channel is in status '${channel.status}' (not connected)`
+    };
+  }
+  const commandBus = container.resolve("commandBus");
+  const messageBody = input.body.plain ?? htmlToText(input.body.html ?? "");
+  const composeInput = {
+    type: `channel.${channel.providerKey}`,
+    visibility: "public",
+    sourceEntityType: "communication_channels.send_as_user",
+    sourceEntityId: channel.id,
+    externalEmail: input.to[0],
+    externalName: input.subject,
+    recipients: [],
+    subject: input.subject,
+    body: messageBody,
+    bodyFormat: "text",
+    priority: "normal",
+    sendViaEmail: false,
+    parentMessageId: input.parentMessageId,
+    isDraft: false,
+    tenantId,
+    organizationId,
+    userId: actor.userId
+  };
+  let result;
+  try {
+    result = await commandBus.execute(
+      "messages.messages.compose",
+      {
+        input: composeInput,
+        ctx: {
+          container,
+          auth: actor.auth,
+          organizationScope: null,
+          selectedOrganizationId: organizationId,
+          organizationIds: organizationId ? [organizationId] : null
+        }
+      }
+    );
+  } catch (err) {
+    console.error("[communication_channels] send-as-user compose failed", err);
+    return { ok: false, status: 500, error: "[internal] compose failed" };
+  }
+  const messageId = result.result.id;
+  const messageThreadId = result.result.threadId ?? messageId;
+  const externalThreadRef = `outbound:${messageThreadId}`;
+  await em.transactional(async () => {
+    let conversation = await findOneWithDecryption(
+      em,
+      ExternalConversation,
+      {
+        channelId: channel.id,
+        externalConversationId: externalThreadRef,
+        tenantId,
+        organizationId
+      },
+      void 0,
+      dscope
+    );
+    if (!conversation) {
+      conversation = em.create(ExternalConversation, {
+        channelId: channel.id,
+        externalConversationId: externalThreadRef,
+        subject: input.subject,
+        assignedUserId: actor.userId,
+        tenantId,
+        organizationId,
+        lastMessageAt: /* @__PURE__ */ new Date()
+      });
+      em.persist(conversation);
+      await em.flush();
+    } else {
+      conversation.subject = conversation.subject ?? input.subject;
+      conversation.assignedUserId = conversation.assignedUserId ?? actor.userId;
+      conversation.lastMessageAt = /* @__PURE__ */ new Date();
+      await em.flush();
+    }
+    const existingMapping = await findOneWithDecryption(
+      em,
+      ChannelThreadMapping,
+      {
+        externalConversationId: conversation.id,
+        tenantId,
+        organizationId
+      },
+      void 0,
+      dscope
+    );
+    if (!existingMapping) {
+      const mapping = em.create(ChannelThreadMapping, {
+        externalConversationId: conversation.id,
+        messageThreadId,
+        channelId: channel.id,
+        providerKey: channel.providerKey,
+        externalThreadRef,
+        assignedUserId: actor.userId,
+        tenantId,
+        organizationId
+      });
+      em.persist(mapping);
+    }
+    const channelLink = em.create(MessageChannelLink, {
+      messageId,
+      externalConversationId: conversation.id,
+      providerKey: channel.providerKey,
+      channelType: channel.channelType,
+      direction: "outbound",
+      deliveryStatus: "pending",
+      channelPayload: {
+        text: input.body.plain ?? messageBody,
+        ...input.body.html ? { html: input.body.html } : {}
+      },
+      channelContentType: input.body.html ? "text/html" : "text/plain",
+      channelMetadata: {
+        // Caller-supplied pass-through metadata merged FIRST so the validated
+        // routing fields below always win — a caller cannot override the
+        // recipients/subject/threading headers via `channelMetadata`.
+        ...input.channelMetadata ?? {},
+        to: input.to,
+        cc: input.cc ?? [],
+        bcc: input.bcc ?? [],
+        subject: input.subject,
+        inReplyTo: input.inReplyTo ?? null,
+        references: input.references ?? []
+      },
+      tenantId,
+      organizationId
+    });
+    em.persist(channelLink);
+    await em.flush();
+  });
+  const queue = getCommunicationChannelsQueue(COMMUNICATION_CHANNELS_QUEUES.outbound);
+  const deliveryJob = {
+    messageId,
+    scope: dscope,
+    attempt: 1
+  };
+  await queue.enqueue(deliveryJob);
+  return {
+    ok: true,
+    messageId,
+    threadId: messageThreadId,
+    channelId: channel.id,
+    providerKey: channel.providerKey
+  };
+}
+export {
+  sendAsUser
+};
+//# sourceMappingURL=send-as-user.js.map

package/dist/modules/communication_channels/lib/send-as-user.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/communication_channels/lib/send-as-user.ts"],
+  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport type { AppContainer } from '@open-mercato/shared/lib/di/container'\nimport type { CommandBus } from '@open-mercato/shared/lib/commands'\nimport { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport {\n  ChannelThreadMapping,\n  CommunicationChannel,\n  ExternalConversation,\n  MessageChannelLink,\n} from '../data/entities'\nimport { ChannelMutationBlockedError, guardOutboundCreate } from './mutation-guards'\nimport { COMMUNICATION_CHANNELS_QUEUES, getCommunicationChannelsQueue } from './queue'\nimport type { OutboundDeliveryPayload } from '../workers/outbound-delivery'\nimport { htmlToText } from './email-mime'\n\nexport type SendAsUserActor = {\n  userId: string\n  tenantId: string\n  organizationId: string | null\n  /** Forwarded as the messages compose command `ctx.auth`. */\n  auth?: unknown\n}\n\nexport type SendAsUserInput = {\n  userChannelId: string\n  to: string[]\n  cc?: string[]\n  bcc?: string[]\n  subject: string\n  body: { plain?: string; html?: string }\n  inReplyTo?: string\n  references?: string[]\n  /**\n   * Open Mercato `messages.message` id of the message being replied to. When\n   * set, the composed message joins that message's thread (the messages module\n   * derives `threadId` from the parent), so a CRM reply continues the existing\n   * conversation instead of starting a new thread. Optional \u2014 omitted for new\n   * threads.\n   */\n  parentMessageId?: string\n  /**\n   * Free-form metadata persisted on the resulting MessageChannelLink. Used by\n   * downstream subscribers (e.g. the customers module's link-channel-message\n   * subscriber) to anchor the sent message back to a CRM Person or honor a\n   * caller-specified visibility flag. The hub does not interpret these keys.\n   */\n  channelMetadata?: Record<string, unknown>\n}\n\nexport type SendAsUserResult =\n  | {\n      ok: true\n      messageId: string\n      threadId: string\n      channelId: string\n      providerKey: string\n    }\n  | { ok: false; status: number; error: string; fieldErrors?: Record<string, string> }\n\n/**\n * In-process send-as-user facade.\n *\n * Validates the actor owns `userChannelId`, composes the Message via the\n * messages module command, persists the outbound MessageChannelLink + thread\n * mapping, and enqueues delivery. Returns a discriminated result instead of an\n * HTTP Response so it can be invoked both by the `/send-as-user` route and by\n * other modules via DI (`container.resolve('communicationChannelsSendAsUser')`)\n * \u2014 no HTTP self-call required.\n */\nexport async function sendAsUser(\n  container: AppContainer,\n  actor: SendAsUserActor,\n  input: SendAsUserInput,\n): Promise<SendAsUserResult> {\n  if (!input.body.plain && !input.body.html) {\n    return { ok: false, status: 422, error: 'Either body.plain or body.html is required' }\n  }\n  // Re-validate here (not only in the HTTP route's zod schema) because this\n  // facade is also reachable via DI; `input.to[0]` below would otherwise become\n  // `undefined` for an empty recipient list.\n  if (!Array.isArray(input.to) || input.to.length === 0) {\n    return { ok: false, status: 422, error: 'At least one recipient is required' }\n  }\n\n  const em = (container.resolve('em') as EntityManager).fork()\n  const { tenantId } = actor\n  const organizationId = actor.organizationId\n  const dscope = { tenantId, organizationId }\n\n  const channel = await findOneWithDecryption(\n    em,\n    CommunicationChannel,\n    { id: input.userChannelId, tenantId, organizationId, deletedAt: null },\n    undefined,\n    dscope,\n  )\n  if (!channel) return { ok: false, status: 404, error: 'Channel not found' }\n  if (channel.userId !== actor.userId) {\n    return { ok: false, status: 403, error: 'You can only send through channels you own' }\n  }\n\n  // Hub mutation guard: map known non-deliverable states (`requires_reauth`,\n  // `disconnected`) to a 422 with field-level errors; other transitional states\n  // fall through to the 409 below.\n  try {\n    await guardOutboundCreate(em, { channelId: channel.id, scope: dscope })\n  } catch (err) {\n    if (err instanceof ChannelMutationBlockedError) {\n      return { ok: false, status: 422, error: err.message, fieldErrors: err.errors }\n    }\n    throw err\n  }\n  if (!channel.isActive || channel.status !== 'connected') {\n    return {\n      ok: false,\n      status: 409,\n      error: `Channel is in status '${channel.status}' (not connected)`,\n    }\n  }\n\n  // Create the Message via the messages module compose command. The outbound\n  // subscriber picks it up via `messages.message.sent` and routes through the\n  // adapter chain.\n  const commandBus = container.resolve('commandBus') as CommandBus\n  const messageBody = input.body.plain ?? htmlToText(input.body.html ?? '')\n  const composeInput = {\n    type: `channel.${channel.providerKey}`,\n    visibility: 'public' as const,\n    sourceEntityType: 'communication_channels.send_as_user',\n    sourceEntityId: channel.id,\n    externalEmail: input.to[0],\n    externalName: input.subject,\n    recipients: [],\n    subject: input.subject,\n    body: messageBody,\n    bodyFormat: 'text' as const,\n    priority: 'normal' as const,\n    sendViaEmail: false,\n    parentMessageId: input.parentMessageId,\n    isDraft: false,\n    tenantId,\n    organizationId,\n    userId: actor.userId,\n  }\n  let result\n  try {\n    result = await commandBus.execute<typeof composeInput, { id: string; threadId: string | null }>(\n      'messages.messages.compose',\n      {\n        input: composeInput,\n        ctx: {\n          container,\n          auth: actor.auth as never,\n          organizationScope: null,\n          selectedOrganizationId: organizationId,\n          organizationIds: organizationId ? [organizationId] : null,\n        },\n      },\n    )\n  } catch (err) {\n    console.error('[communication_channels] send-as-user compose failed', err)\n    return { ok: false, status: 500, error: '[internal] compose failed' }\n  }\n\n  const messageId = result.result.id\n  const messageThreadId = result.result.threadId ?? messageId\n  const externalThreadRef = `outbound:${messageThreadId}`\n\n  // Persist the conversation, thread mapping, and channel link as one unit. The\n  // conversation's id is DB-generated (`gen_random_uuid()`), so it must be\n  // flushed before the mapping/link can reference it \u2014 hence the eager flushes\n  // rather than `withAtomicFlush` (single trailing flush). `em.transactional`\n  // wraps the whole sequence so a mid-way failure rolls back all three writes\n  // instead of leaving an orphaned conversation row.\n  await em.transactional(async () => {\n    let conversation = await findOneWithDecryption(\n      em,\n      ExternalConversation,\n      {\n        channelId: channel.id,\n        externalConversationId: externalThreadRef,\n        tenantId,\n        organizationId,\n      },\n      undefined,\n      dscope,\n    )\n    if (!conversation) {\n      conversation = em.create(ExternalConversation, {\n        channelId: channel.id,\n        externalConversationId: externalThreadRef,\n        subject: input.subject,\n        assignedUserId: actor.userId,\n        tenantId,\n        organizationId,\n        lastMessageAt: new Date(),\n      })\n      em.persist(conversation)\n      await em.flush()\n    } else {\n      conversation.subject = conversation.subject ?? input.subject\n      conversation.assignedUserId = conversation.assignedUserId ?? actor.userId\n      conversation.lastMessageAt = new Date()\n      // Flush the scalar updates BEFORE the ChannelThreadMapping lookup below: a\n      // find/findOne on the same EntityManager between a scalar mutation and flush\n      // can silently drop the pending UPDATE (core AGENTS.md \u2192 Entity Update Safety).\n      await em.flush()\n    }\n\n    const existingMapping = await findOneWithDecryption(\n      em,\n      ChannelThreadMapping,\n      {\n        externalConversationId: conversation.id,\n        tenantId,\n        organizationId,\n      },\n      undefined,\n      dscope,\n    )\n    if (!existingMapping) {\n      const mapping = em.create(ChannelThreadMapping, {\n        externalConversationId: conversation.id,\n        messageThreadId,\n        channelId: channel.id,\n        providerKey: channel.providerKey,\n        externalThreadRef,\n        assignedUserId: actor.userId,\n        tenantId,\n        organizationId,\n      })\n      em.persist(mapping)\n    }\n\n    const channelLink = em.create(MessageChannelLink, {\n      messageId,\n      externalConversationId: conversation.id,\n      providerKey: channel.providerKey,\n      channelType: channel.channelType,\n      direction: 'outbound',\n      deliveryStatus: 'pending',\n      channelPayload: {\n        text: input.body.plain ?? messageBody,\n        ...(input.body.html ? { html: input.body.html } : {}),\n      },\n      channelContentType: input.body.html ? 'text/html' : 'text/plain',\n      channelMetadata: {\n        // Caller-supplied pass-through metadata merged FIRST so the validated\n        // routing fields below always win \u2014 a caller cannot override the\n        // recipients/subject/threading headers via `channelMetadata`.\n        ...(input.channelMetadata ?? {}),\n        to: input.to,\n        cc: input.cc ?? [],\n        bcc: input.bcc ?? [],\n        subject: input.subject,\n        inReplyTo: input.inReplyTo ?? null,\n        references: input.references ?? [],\n      },\n      tenantId,\n      organizationId,\n    })\n    em.persist(channelLink)\n    await em.flush()\n  })\n\n  const queue = getCommunicationChannelsQueue(COMMUNICATION_CHANNELS_QUEUES.outbound)\n  const deliveryJob: OutboundDeliveryPayload = {\n    messageId,\n    scope: dscope,\n    attempt: 1,\n  }\n  await queue.enqueue(deliveryJob as unknown as Record<string, unknown>)\n\n  return {\n    ok: true,\n    messageId,\n    threadId: messageThreadId,\n    channelId: channel.id,\n    providerKey: channel.providerKey,\n  }\n}\n\n/** DI service type for cross-module callers (resolve `communicationChannelsSendAsUser`). */\nexport type SendAsUserService = typeof sendAsUser\n"],
+  "mappings": "AAGA,SAAS,6BAA6B;AACtC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,6BAA6B,2BAA2B;AACjE,SAAS,+BAA+B,qCAAqC;AAE7E,SAAS,kBAAkB;AAwD3B,eAAsB,WACpB,WACA,OACA,OAC2B;AAC3B,MAAI,CAAC,MAAM,KAAK,SAAS,CAAC,MAAM,KAAK,MAAM;AACzC,WAAO,EAAE,IAAI,OAAO,QAAQ,KAAK,OAAO,6CAA6C;AAAA,EACvF;AAIA,MAAI,CAAC,MAAM,QAAQ,MAAM,EAAE,KAAK,MAAM,GAAG,WAAW,GAAG;AACrD,WAAO,EAAE,IAAI,OAAO,QAAQ,KAAK,OAAO,qCAAqC;AAAA,EAC/E;AAEA,QAAM,KAAM,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC3D,QAAM,EAAE,SAAS,IAAI;AACrB,QAAM,iBAAiB,MAAM;AAC7B,QAAM,SAAS,EAAE,UAAU,eAAe;AAE1C,QAAM,UAAU,MAAM;AAAA,IACpB;AAAA,IACA;AAAA,IACA,EAAE,IAAI,MAAM,eAAe,UAAU,gBAAgB,WAAW,KAAK;AAAA,IACrE;AAAA,IACA;AAAA,EACF;AACA,MAAI,CAAC,QAAS,QAAO,EAAE,IAAI,OAAO,QAAQ,KAAK,OAAO,oBAAoB;AAC1E,MAAI,QAAQ,WAAW,MAAM,QAAQ;AACnC,WAAO,EAAE,IAAI,OAAO,QAAQ,KAAK,OAAO,6CAA6C;AAAA,EACvF;AAKA,MAAI;AACF,UAAM,oBAAoB,IAAI,EAAE,WAAW,QAAQ,IAAI,OAAO,OAAO,CAAC;AAAA,EACxE,SAAS,KAAK;AACZ,QAAI,eAAe,6BAA6B;AAC9C,aAAO,EAAE,IAAI,OAAO,QAAQ,KAAK,OAAO,IAAI,SAAS,aAAa,IAAI,OAAO;AAAA,IAC/E;AACA,UAAM;AAAA,EACR;AACA,MAAI,CAAC,QAAQ,YAAY,QAAQ,WAAW,aAAa;AACvD,WAAO;AAAA,MACL,IAAI;AAAA,MACJ,QAAQ;AAAA,MACR,OAAO,yBAAyB,QAAQ,MAAM;AAAA,IAChD;AAAA,EACF;AAKA,QAAM,aAAa,UAAU,QAAQ,YAAY;AACjD,QAAM,cAAc,MAAM,KAAK,SAAS,WAAW,MAAM,KAAK,QAAQ,EAAE;AACxE,QAAM,eAAe;AAAA,IACnB,MAAM,WAAW,QAAQ,WAAW;AAAA,IACpC,YAAY;AAAA,IACZ,kBAAkB;AAAA,IAClB,gBAAgB,QAAQ;AAAA,IACxB,eAAe,MAAM,GAAG,CAAC;AAAA,IACzB,cAAc,MAAM;AAAA,IACpB,YAAY,CAAC;AAAA,IACb,SAAS,MAAM;AAAA,IACf,MAAM;AAAA,IACN,YAAY;AAAA,IACZ,UAAU;AAAA,IACV,cAAc;AAAA,IACd,iBAAiB,MAAM;AAAA,IACvB,SAAS;AAAA,IACT;AAAA,IACA;AAAA,IACA,QAAQ,MAAM;AAAA,EAChB;AACA,MAAI;AACJ,MAAI;AACF,aAAS,MAAM,WAAW;AAAA,MACxB;AAAA,MACA;AAAA,QACE,OAAO;AAAA,QACP,KAAK;AAAA,UACH;AAAA,UACA,MAAM,MAAM;AAAA,UACZ,mBAAmB;AAAA,UACnB,wBAAwB;AAAA,UACxB,iBAAiB,iBAAiB,CAAC,cAAc,IAAI;AAAA,QACvD;AAAA,MACF;AAAA,IACF;AAAA,EACF,SAAS,KAAK;AACZ,YAAQ,MAAM,wDAAwD,GAAG;AACzE,WAAO,EAAE,IAAI,OAAO,QAAQ,KAAK,OAAO,4BAA4B;AAAA,EACtE;AAEA,QAAM,YAAY,OAAO,OAAO;AAChC,QAAM,kBAAkB,OAAO,OAAO,YAAY;AAClD,QAAM,oBAAoB,YAAY,eAAe;AAQrD,QAAM,GAAG,cAAc,YAAY;AACjC,QAAI,eAAe,MAAM;AAAA,MACvB;AAAA,MACA;AAAA,MACA;AAAA,QACE,WAAW,QAAQ;AAAA,QACnB,wBAAwB;AAAA,QACxB;AAAA,QACA;AAAA,MACF;AAAA,MACA;AAAA,MACA;AAAA,IACF;AACA,QAAI,CAAC,cAAc;AACjB,qBAAe,GAAG,OAAO,sBAAsB;AAAA,QAC7C,WAAW,QAAQ;AAAA,QACnB,wBAAwB;AAAA,QACxB,SAAS,MAAM;AAAA,QACf,gBAAgB,MAAM;AAAA,QACtB;AAAA,QACA;AAAA,QACA,eAAe,oBAAI,KAAK;AAAA,MAC1B,CAAC;AACD,SAAG,QAAQ,YAAY;AACvB,YAAM,GAAG,MAAM;AAAA,IACjB,OAAO;AACL,mBAAa,UAAU,aAAa,WAAW,MAAM;AACrD,mBAAa,iBAAiB,aAAa,kBAAkB,MAAM;AACnE,mBAAa,gBAAgB,oBAAI,KAAK;AAItC,YAAM,GAAG,MAAM;AAAA,IACjB;AAEA,UAAM,kBAAkB,MAAM;AAAA,MAC5B;AAAA,MACA;AAAA,MACA;AAAA,QACE,wBAAwB,aAAa;AAAA,QACrC;AAAA,QACA;AAAA,MACF;AAAA,MACA;AAAA,MACA;AAAA,IACF;AACA,QAAI,CAAC,iBAAiB;AACpB,YAAM,UAAU,GAAG,OAAO,sBAAsB;AAAA,QAC9C,wBAAwB,aAAa;AAAA,QACrC;AAAA,QACA,WAAW,QAAQ;AAAA,QACnB,aAAa,QAAQ;AAAA,QACrB;AAAA,QACA,gBAAgB,MAAM;AAAA,QACtB;AAAA,QACA;AAAA,MACF,CAAC;AACD,SAAG,QAAQ,OAAO;AAAA,IACpB;AAEA,UAAM,cAAc,GAAG,OAAO,oBAAoB;AAAA,MAChD;AAAA,MACA,wBAAwB,aAAa;AAAA,MACrC,aAAa,QAAQ;AAAA,MACrB,aAAa,QAAQ;AAAA,MACrB,WAAW;AAAA,MACX,gBAAgB;AAAA,MAChB,gBAAgB;AAAA,QACd,MAAM,MAAM,KAAK,SAAS;AAAA,QAC1B,GAAI,MAAM,KAAK,OAAO,EAAE,MAAM,MAAM,KAAK,KAAK,IAAI,CAAC;AAAA,MACrD;AAAA,MACA,oBAAoB,MAAM,KAAK,OAAO,cAAc;AAAA,MACpD,iBAAiB;AAAA;AAAA;AAAA;AAAA,QAIf,GAAI,MAAM,mBAAmB,CAAC;AAAA,QAC9B,IAAI,MAAM;AAAA,QACV,IAAI,MAAM,MAAM,CAAC;AAAA,QACjB,KAAK,MAAM,OAAO,CAAC;AAAA,QACnB,SAAS,MAAM;AAAA,QACf,WAAW,MAAM,aAAa;AAAA,QAC9B,YAAY,MAAM,cAAc,CAAC;AAAA,MACnC;AAAA,MACA;AAAA,MACA;AAAA,IACF,CAAC;AACD,OAAG,QAAQ,WAAW;AACtB,UAAM,GAAG,MAAM;AAAA,EACjB,CAAC;AAED,QAAM,QAAQ,8BAA8B,8BAA8B,QAAQ;AAClF,QAAM,cAAuC;AAAA,IAC3C;AAAA,IACA,OAAO;AAAA,IACP,SAAS;AAAA,EACX;AACA,QAAM,MAAM,QAAQ,WAAiD;AAErE,SAAO;AAAA,IACL,IAAI;AAAA,IACJ;AAAA,IACA,UAAU;AAAA,IACV,WAAW,QAAQ;AAAA,IACnB,aAAa,QAAQ;AAAA,EACvB;AACF;",
+  "names": []
+}

package/dist/modules/communication_channels/lib/system-user.js

@@ -0,0 +1,22 @@
+const COMMUNICATION_CHANNELS_SYSTEM_USER_ID = "00000000-0000-0000-0000-000000000000";
+function systemUserEmail(tenantId) {
+  return `system+communication_channels@${tenantId}.local`;
+}
+async function resolveCommunicationChannelsSystemUserId(em, tenantId, fallbackId) {
+  try {
+    const expectedEmail = systemUserEmail(tenantId);
+    const qb = em.createQueryBuilder("auth.users", "u");
+    const row = await qb.select(["u.id"]).where({ email: expectedEmail, tenant_id: tenantId }).limit(1).execute("get").catch(() => null);
+    const id = row?.id;
+    if (typeof id === "string" && id.length > 0) return id;
+  } catch {
+  }
+  if (typeof fallbackId === "string" && fallbackId.length > 0) return fallbackId;
+  return COMMUNICATION_CHANNELS_SYSTEM_USER_ID;
+}
+export {
+  COMMUNICATION_CHANNELS_SYSTEM_USER_ID,
+  resolveCommunicationChannelsSystemUserId,
+  systemUserEmail
+};
+//# sourceMappingURL=system-user.js.map

package/dist/modules/communication_channels/lib/system-user.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/communication_channels/lib/system-user.ts"],
+  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\n\n/**\n * Sentinel UUID \u2014 used as a last-resort `senderUserId` for inbound channel\n * messages when no per-tenant system user is available. Matches the pattern\n * in `inbox_ops/lib/messagesIntegration.ts`.\n */\nexport const COMMUNICATION_CHANNELS_SYSTEM_USER_ID = '00000000-0000-0000-0000-000000000000'\n\n/**\n * Configurable email pattern for per-tenant channel-bot users. Implementations\n * (provider packages, onboarding scripts) may create a real `auth.user` row\n * matching this convention so inbound channel messages get a meaningful sender\n * display name in the unified inbox.\n *\n * Format: `system+communication_channels@<tenantId>.local`\n */\nexport function systemUserEmail(tenantId: string): string {\n  return `system+communication_channels@${tenantId}.local`\n}\n\n/**\n * Resolve a tenant-scoped system user id to attribute inbound channel messages to.\n *\n * Lookup order:\n *   1. Per-tenant channel-bot user (by convention email \u2014 see `systemUserEmail`).\n *   2. (Optional, caller-supplied) seed fallback \u2014 a specific override id.\n *   3. Sentinel UUID (`00000000-...`) \u2014 backward-compatible default.\n *\n * The function is fail-soft: when the lookup throws, it falls back to the\n * sentinel. The inbound-processor must never refuse to ingest a message\n * because the channel-bot user doesn't exist.\n *\n * @param em            EntityManager scoped to the tenant.\n * @param tenantId      Tenant id for which to resolve the system user.\n * @param fallbackId    Optional caller-supplied fallback (e.g., the channel's\n *                      assigned user) used when the channel-bot lookup misses.\n */\nexport async function resolveCommunicationChannelsSystemUserId(\n  em: EntityManager,\n  tenantId: string,\n  fallbackId?: string | null,\n): Promise<string> {\n  try {\n    const expectedEmail = systemUserEmail(tenantId)\n    // Untyped QB by design \u2014 the helper is intentionally cross-module\n    // (resolving an `auth.user` from the hub) and must not pull the User\n    // entity class. MikroORM v7's typed builder requires an entity ref;\n    // we keep the lookup table-name-driven so the helper compiles without\n    // a cross-module import. The mocks in `__tests__/system-user.test.ts`\n    // exercise this code path through a duck-typed `createQueryBuilder` stub.\n    type RawQueryBuilder = {\n      select: (fields: string[]) => RawQueryBuilder\n      where: (cond: Record<string, unknown>) => RawQueryBuilder\n      limit: (count: number) => RawQueryBuilder\n      execute: (mode: string) => Promise<unknown>\n    }\n    const qb = (\n      em as unknown as { createQueryBuilder: (table: string, alias: string) => RawQueryBuilder }\n    ).createQueryBuilder('auth.users', 'u')\n    const row = await qb\n      .select(['u.id'])\n      .where({ email: expectedEmail, tenant_id: tenantId })\n      .limit(1)\n      .execute('get')\n      .catch(() => null)\n    const id = (row as { id?: string } | null)?.id\n    if (typeof id === 'string' && id.length > 0) return id\n  } catch {\n    // ignore \u2014 fall through to fallback\n  }\n  if (typeof fallbackId === 'string' && fallbackId.length > 0) return fallbackId\n  return COMMUNICATION_CHANNELS_SYSTEM_USER_ID\n}\n"],
+  "mappings": "AAOO,MAAM,wCAAwC;AAU9C,SAAS,gBAAgB,UAA0B;AACxD,SAAO,iCAAiC,QAAQ;AAClD;AAmBA,eAAsB,yCACpB,IACA,UACA,YACiB;AACjB,MAAI;AACF,UAAM,gBAAgB,gBAAgB,QAAQ;AAa9C,UAAM,KACJ,GACA,mBAAmB,cAAc,GAAG;AACtC,UAAM,MAAM,MAAM,GACf,OAAO,CAAC,MAAM,CAAC,EACf,MAAM,EAAE,OAAO,eAAe,WAAW,SAAS,CAAC,EACnD,MAAM,CAAC,EACP,QAAQ,KAAK,EACb,MAAM,MAAM,IAAI;AACnB,UAAM,KAAM,KAAgC;AAC5C,QAAI,OAAO,OAAO,YAAY,GAAG,SAAS,EAAG,QAAO;AAAA,EACtD,QAAQ;AAAA,EAER;AACA,MAAI,OAAO,eAAe,YAAY,WAAW,SAAS,EAAG,QAAO;AACpE,SAAO;AACT;",
+  "names": []
+}

package/dist/modules/communication_channels/lib/test-seed.js

@@ -0,0 +1,68 @@
+import { baseEmailCapabilities } from "./email-capabilities.js";
+import { hasChannelAdapter, registerChannelAdapter } from "./adapter-registry-singleton.js";
+const TEST_SEED_PROVIDER_KEY = "__test_seed__";
+const TEST_CHANNEL_SEEDING_ENV = "OM_ENABLE_TEST_CHANNEL_SEEDING";
+function isTestChannelSeedingEnabled() {
+  const raw = process.env[TEST_CHANNEL_SEEDING_ENV];
+  if (typeof raw !== "string") return false;
+  return ["1", "true", "yes", "on"].includes(raw.trim().toLowerCase());
+}
+const testSeedCapabilities = {
+  ...baseEmailCapabilities,
+  conversationHistory: false,
+  realtimePush: false
+};
+class TestSeedChannelAdapter {
+  constructor() {
+    this.providerKey = TEST_SEED_PROVIDER_KEY;
+    this.channelType = "email";
+    this.capabilities = testSeedCapabilities;
+  }
+  async sendMessage(input) {
+    const externalMessageId = `test-seed-${Date.now()}-${Math.random().toString(16).slice(2, 10)}@test-seed.local`;
+    return {
+      externalMessageId,
+      conversationId: input.conversationId,
+      status: "sent",
+      metadata: { testSeed: true }
+    };
+  }
+  async verifyWebhook(_input) {
+    return { raw: {}, eventType: "other", metadata: { reason: "test-seed-no-webhook" } };
+  }
+  async getStatus(_input) {
+    return { status: "sent" };
+  }
+  async convertOutbound(input) {
+    return {
+      content: {
+        text: input.body,
+        bodyFormat: input.bodyFormat
+      },
+      metadata: input.channelMetadata ?? {}
+    };
+  }
+  async normalizeInbound(_raw) {
+    throw new Error("[internal] TestSeedChannelAdapter.normalizeInbound is not used by the seed harness");
+  }
+  async validateCredentials(_input) {
+    return { ok: true };
+  }
+}
+let cachedTestSeedAdapter = null;
+function getTestSeedChannelAdapter() {
+  if (!cachedTestSeedAdapter) cachedTestSeedAdapter = new TestSeedChannelAdapter();
+  return cachedTestSeedAdapter;
+}
+function ensureTestSeedAdapterRegistered() {
+  if (!isTestChannelSeedingEnabled()) return;
+  if (hasChannelAdapter(TEST_SEED_PROVIDER_KEY)) return;
+  registerChannelAdapter(getTestSeedChannelAdapter());
+}
+export {
+  TEST_CHANNEL_SEEDING_ENV,
+  TEST_SEED_PROVIDER_KEY,
+  ensureTestSeedAdapterRegistered,
+  isTestChannelSeedingEnabled
+};
+//# sourceMappingURL=test-seed.js.map

package/dist/modules/communication_channels/lib/test-seed.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/communication_channels/lib/test-seed.ts"],
+  "sourcesContent": ["import type {\n  ChannelAdapter,\n  ChannelCapabilities,\n  ChannelNativeContent,\n  ConvertOutboundInput,\n  GetMessageStatusInput,\n  InboundMessage,\n  MessageStatus,\n  NormalizedInboundMessage,\n  SendMessageInput,\n  SendMessageResult,\n  ValidateCredentialsInput,\n  ValidateCredentialsResult,\n  VerifyWebhookInput,\n} from './adapter'\nimport { baseEmailCapabilities } from './email-capabilities'\nimport { hasChannelAdapter, registerChannelAdapter } from './adapter-registry-singleton'\n\n/**\n * Test-only channel seeding support.\n *\n * The ephemeral integration harness cannot connect a REAL email channel:\n *   - IMAP/SMTP `validateCredentials` performs a live LOGIN against a mail server\n *     (none exists in CI), so `POST /channels/connect/credentials` returns 422.\n *   - Even with a connected channel, the outbound delivery worker calls the real\n *     SMTP adapter, which fails with no server \u2014 so `communication_channels.message.sent`\n *     never fires and the customers link subscriber never runs.\n *\n * To make the compose \u2192 deliver \u2192 `.sent` \u2192 CRM-link \u2192 cross-user-visibility chain\n * (TC-CRM-EMAIL-001) and the inbound auto-link chain (TC-CRM-EMAIL-002..005) runnable\n * end-to-end against real Postgres, this module provides a network-free stub adapter\n * that is registered ONLY when `OM_ENABLE_TEST_CHANNEL_SEEDING` is set.\n *\n * Production safety: the registration is gated by {@link isTestChannelSeedingEnabled};\n * when the env flag is unset (the production default) the adapter is never registered\n * and the `__test_seed__` provider key resolves to no adapter \u2014 so the connect route\n * returns 404 `no_adapter` exactly as it would for any unknown provider. The dedicated\n * test-seed API route enforces the same gate independently (fail-closed 404 in prod).\n */\n\n/** Provider key for the network-free test stub adapter. */\nexport const TEST_SEED_PROVIDER_KEY = '__test_seed__'\n\n/** Env flag that unlocks test-only channel seeding. Off in production. */\nexport const TEST_CHANNEL_SEEDING_ENV = 'OM_ENABLE_TEST_CHANNEL_SEEDING'\n\n/**\n * True only when the test-seeding env flag is explicitly enabled. Accepts the\n * usual truthy tokens (`1`, `true`, `yes`, `on`) so the harness can opt in via a\n * plain `=true`. Any other value (including unset) is treated as disabled.\n */\nexport function isTestChannelSeedingEnabled(): boolean {\n  const raw = process.env[TEST_CHANNEL_SEEDING_ENV]\n  if (typeof raw !== 'string') return false\n  return ['1', 'true', 'yes', 'on'].includes(raw.trim().toLowerCase())\n}\n\n/**\n * Capabilities for the stub: an email channel that supports neither reactions,\n * edit/delete, nor conversation history \u2014 so the strict registry validator\n * (`validateAdapterCapabilities`) requires only the core method surface.\n */\nconst testSeedCapabilities: ChannelCapabilities = {\n  ...baseEmailCapabilities,\n  conversationHistory: false,\n  realtimePush: false,\n}\n\n/**\n * A `ChannelAdapter` whose `sendMessage` reports a successful send WITHOUT any\n * network I/O. Used exclusively by the integration harness to let the outbound\n * delivery worker reach its success path and emit `communication_channels.message.sent`.\n */\nclass TestSeedChannelAdapter implements ChannelAdapter {\n  readonly providerKey = TEST_SEED_PROVIDER_KEY\n  readonly channelType = 'email'\n  readonly capabilities = testSeedCapabilities\n\n  async sendMessage(input: SendMessageInput): Promise<SendMessageResult> {\n    // Synthesize a deterministic-looking RFC2822-style message id; never touches\n    // the network. The delivery worker persists this as the external message id.\n    const externalMessageId = `test-seed-${Date.now()}-${Math.random().toString(16).slice(2, 10)}@test-seed.local`\n    return {\n      externalMessageId,\n      conversationId: input.conversationId,\n      status: 'sent',\n      metadata: { testSeed: true },\n    }\n  }\n\n  async verifyWebhook(_input: VerifyWebhookInput): Promise<InboundMessage> {\n    // No real webhook \u2014 return the inert event so the generic webhook route 202s\n    // without enqueuing tenant-scoped work (mirrors the IMAP adapter contract).\n    return { raw: {}, eventType: 'other', metadata: { reason: 'test-seed-no-webhook' } }\n  }\n\n  async getStatus(_input: GetMessageStatusInput): Promise<MessageStatus> {\n    return { status: 'sent' }\n  }\n\n  async convertOutbound(input: ConvertOutboundInput): Promise<ChannelNativeContent> {\n    return {\n      content: {\n        text: input.body,\n        bodyFormat: input.bodyFormat,\n      },\n      metadata: input.channelMetadata ?? {},\n    }\n  }\n\n  async normalizeInbound(_raw: InboundMessage): Promise<NormalizedInboundMessage> {\n    // The test-seed inbound path seeds MessageChannelLink rows directly and emits\n    // the hub event, so this adapter never normalizes a raw inbound payload.\n    throw new Error('[internal] TestSeedChannelAdapter.normalizeInbound is not used by the seed harness')\n  }\n\n  async validateCredentials(_input: ValidateCredentialsInput): Promise<ValidateCredentialsResult> {\n    // No real server to authenticate against \u2014 accept any credentials so the\n    // connect command persists a connected channel.\n    return { ok: true }\n  }\n}\n\nlet cachedTestSeedAdapter: TestSeedChannelAdapter | null = null\n\nfunction getTestSeedChannelAdapter(): TestSeedChannelAdapter {\n  if (!cachedTestSeedAdapter) cachedTestSeedAdapter = new TestSeedChannelAdapter()\n  return cachedTestSeedAdapter\n}\n\n/**\n * Register the test-seed adapter exactly once, but ONLY when the env flag is set.\n * Idempotent and safe to call from every container creation (`di.register`) \u2014 a\n * no-op when seeding is disabled or the adapter is already registered.\n */\nexport function ensureTestSeedAdapterRegistered(): void {\n  if (!isTestChannelSeedingEnabled()) return\n  if (hasChannelAdapter(TEST_SEED_PROVIDER_KEY)) return\n  registerChannelAdapter(getTestSeedChannelAdapter())\n}\n"],
+  "mappings": "AAeA,SAAS,6BAA6B;AACtC,SAAS,mBAAmB,8BAA8B;AAyBnD,MAAM,yBAAyB;AAG/B,MAAM,2BAA2B;AAOjC,SAAS,8BAAuC;AACrD,QAAM,MAAM,QAAQ,IAAI,wBAAwB;AAChD,MAAI,OAAO,QAAQ,SAAU,QAAO;AACpC,SAAO,CAAC,KAAK,QAAQ,OAAO,IAAI,EAAE,SAAS,IAAI,KAAK,EAAE,YAAY,CAAC;AACrE;AAOA,MAAM,uBAA4C;AAAA,EAChD,GAAG;AAAA,EACH,qBAAqB;AAAA,EACrB,cAAc;AAChB;AAOA,MAAM,uBAAiD;AAAA,EAAvD;AACE,SAAS,cAAc;AACvB,SAAS,cAAc;AACvB,SAAS,eAAe;AAAA;AAAA,EAExB,MAAM,YAAY,OAAqD;AAGrE,UAAM,oBAAoB,aAAa,KAAK,IAAI,CAAC,IAAI,KAAK,OAAO,EAAE,SAAS,EAAE,EAAE,MAAM,GAAG,EAAE,CAAC;AAC5F,WAAO;AAAA,MACL;AAAA,MACA,gBAAgB,MAAM;AAAA,MACtB,QAAQ;AAAA,MACR,UAAU,EAAE,UAAU,KAAK;AAAA,IAC7B;AAAA,EACF;AAAA,EAEA,MAAM,cAAc,QAAqD;AAGvE,WAAO,EAAE,KAAK,CAAC,GAAG,WAAW,SAAS,UAAU,EAAE,QAAQ,uBAAuB,EAAE;AAAA,EACrF;AAAA,EAEA,MAAM,UAAU,QAAuD;AACrE,WAAO,EAAE,QAAQ,OAAO;AAAA,EAC1B;AAAA,EAEA,MAAM,gBAAgB,OAA4D;AAChF,WAAO;AAAA,MACL,SAAS;AAAA,QACP,MAAM,MAAM;AAAA,QACZ,YAAY,MAAM;AAAA,MACpB;AAAA,MACA,UAAU,MAAM,mBAAmB,CAAC;AAAA,IACtC;AAAA,EACF;AAAA,EAEA,MAAM,iBAAiB,MAAyD;AAG9E,UAAM,IAAI,MAAM,oFAAoF;AAAA,EACtG;AAAA,EAEA,MAAM,oBAAoB,QAAsE;AAG9F,WAAO,EAAE,IAAI,KAAK;AAAA,EACpB;AACF;AAEA,IAAI,wBAAuD;AAE3D,SAAS,4BAAoD;AAC3D,MAAI,CAAC,sBAAuB,yBAAwB,IAAI,uBAAuB;AAC/E,SAAO;AACT;AAOO,SAAS,kCAAwC;AACtD,MAAI,CAAC,4BAA4B,EAAG;AACpC,MAAI,kBAAkB,sBAAsB,EAAG;AAC/C,yBAAuB,0BAA0B,CAAC;AACpD;",
+  "names": []
+}