@open-mercato/core 0.6.5-develop.4384.1.ce2ec6eaaa → 0.6.5-develop.4393.1.de282b5dfd

package/dist/modules/customers/lib/personEmailThreads.js

@@ -0,0 +1,205 @@
+import { findWithDecryption } from "@open-mercato/shared/lib/encryption/find";
+import { CustomerInteraction } from "../data/entities.js";
+import { buildEmailVisibilityMikroFilter } from "./visibilityFilter.js";
+const DEFAULT_MAX_THREADS = 50;
+const DEFAULT_MAX_MESSAGES_PER_THREAD = 200;
+const PREVIEW_LENGTH = 140;
+function extractAddresses(value) {
+  const out = [];
+  const pushOne = (item) => {
+    if (typeof item === "string") {
+      const trimmed = item.trim();
+      if (trimmed) out.push({ email: trimmed, name: null });
+      return;
+    }
+    if (item && typeof item === "object") {
+      const rec = item;
+      const address = typeof rec.address === "string" ? rec.address.trim() : null;
+      const name = typeof rec.name === "string" && rec.name.trim() ? rec.name.trim() : null;
+      if (address) out.push({ email: address, name });
+    }
+  };
+  if (Array.isArray(value)) {
+    for (const item of value) pushOne(item);
+  } else {
+    pushOne(value);
+  }
+  return out;
+}
+function firstString(...values) {
+  for (const value of values) {
+    if (typeof value === "string" && value.trim().length > 0) return value;
+  }
+  return null;
+}
+function toStringArray(...values) {
+  for (const value of values) {
+    if (Array.isArray(value)) {
+      const strings = value.filter((item) => typeof item === "string" && item.trim().length > 0);
+      if (strings.length > 0) return strings;
+    }
+  }
+  return [];
+}
+function truncate(value) {
+  if (!value) return value;
+  const collapsed = value.replace(/\s+/g, " ").trim();
+  if (collapsed.length <= PREVIEW_LENGTH) return collapsed;
+  return `${collapsed.slice(0, PREVIEW_LENGTH - 1)}\u2026`;
+}
+async function buildPersonEmailThreads(em, opts) {
+  const {
+    personId,
+    tenantId,
+    organizationId,
+    viewerUserId,
+    userFeatures,
+    maxThreads = DEFAULT_MAX_THREADS,
+    maxMessagesPerThread = DEFAULT_MAX_MESSAGES_PER_THREAD
+  } = opts;
+  const interactionWhere = {
+    entity: personId,
+    interactionType: "email",
+    deletedAt: null,
+    tenantId
+  };
+  if (organizationId) interactionWhere.organizationId = organizationId;
+  interactionWhere.$or = buildEmailVisibilityMikroFilter({
+    currentUserId: viewerUserId,
+    userFeatures
+  }).$or;
+  const dscope = { tenantId, organizationId: organizationId ?? null };
+  const interactions = await findWithDecryption(
+    em,
+    CustomerInteraction,
+    interactionWhere,
+    { orderBy: { occurredAt: "desc", createdAt: "desc" }, limit: maxThreads * 20 },
+    dscope
+  );
+  const linkIdByInteraction = /* @__PURE__ */ new Map();
+  const linkIds = [];
+  for (const interaction of interactions) {
+    const linkId = interaction.externalMessageId;
+    if (!linkId || linkIdByInteraction.has(linkId)) continue;
+    linkIdByInteraction.set(linkId, { occurredAt: interaction.occurredAt ?? interaction.createdAt });
+    linkIds.push(linkId);
+  }
+  if (linkIds.length === 0) return [];
+  const linkWhere = { id: { $in: linkIds }, tenantId };
+  if (organizationId) linkWhere.organizationId = organizationId;
+  const links = await findWithDecryption(
+    em,
+    "MessageChannelLink",
+    linkWhere,
+    void 0,
+    dscope
+  );
+  const messageIds = Array.from(
+    new Set(
+      links.map((link) => typeof link.messageId === "string" ? link.messageId : null).filter((value) => !!value)
+    )
+  );
+  const messageById = /* @__PURE__ */ new Map();
+  if (messageIds.length > 0) {
+    const messageWhere = { id: { $in: messageIds }, tenantId };
+    if (organizationId) messageWhere.organizationId = organizationId;
+    const messages = await findWithDecryption(
+      em,
+      "Message",
+      messageWhere,
+      void 0,
+      dscope
+    );
+    for (const message of messages) {
+      if (typeof message.id === "string") messageById.set(message.id, message);
+    }
+  }
+  const threadsByKey = /* @__PURE__ */ new Map();
+  for (const link of links) {
+    const linkId = typeof link.id === "string" ? link.id : null;
+    if (!linkId) continue;
+    const direction = link.direction === "outbound" ? "outbound" : "inbound";
+    const providerKey = typeof link.providerKey === "string" ? link.providerKey : null;
+    const payload = link.channelPayload ?? null;
+    const meta = link.channelMetadata ?? null;
+    const messageId = typeof link.messageId === "string" ? link.messageId : null;
+    const message = messageId ? messageById.get(messageId) ?? null : null;
+    const primary = direction === "outbound" ? meta : payload;
+    const secondary = direction === "outbound" ? payload : meta;
+    const fromList = extractAddresses(primary?.from ?? secondary?.from);
+    const toList = extractAddresses(primary?.to ?? secondary?.to);
+    const ccList = extractAddresses(primary?.cc ?? secondary?.cc);
+    const subject = firstString(
+      primary?.subject,
+      secondary?.subject,
+      typeof message?.subject === "string" ? message.subject : null
+    );
+    const bodyText = firstString(
+      direction === "outbound" ? meta?.bodyText : payload?.text,
+      direction === "outbound" ? payload?.text : meta?.bodyText,
+      typeof message?.body === "string" ? message.body : null
+    );
+    const sentAtRaw = (typeof message?.sentAt === "string" || message?.sentAt instanceof Date ? message.sentAt : null) ?? (link.createdAt instanceof Date || typeof link.createdAt === "string" ? link.createdAt : null) ?? linkIdByInteraction.get(linkId)?.occurredAt ?? /* @__PURE__ */ new Date();
+    const sentAt = (sentAtRaw instanceof Date ? sentAtRaw : new Date(sentAtRaw)).toISOString();
+    const threadKey = (typeof message?.threadId === "string" && message.threadId ? message.threadId : null) ?? (messageId ? `message:${messageId}` : `link:${linkId}`);
+    const dto = {
+      id: linkId,
+      messageId,
+      rfcMessageId: firstString(primary?.messageId, secondary?.messageId),
+      references: toStringArray(primary?.references, secondary?.references),
+      direction,
+      fromName: fromList[0]?.name ?? null,
+      fromEmail: fromList[0]?.email ?? null,
+      to: toList.map((a) => a.email),
+      cc: ccList.map((a) => a.email),
+      subject,
+      bodyText,
+      sentAt,
+      providerKey
+    };
+    const existing = threadsByKey.get(threadKey);
+    if (existing) {
+      existing.messages.push(dto);
+    } else {
+      threadsByKey.set(threadKey, {
+        threadKey,
+        subject,
+        preview: null,
+        participants: [],
+        lastMessageAt: sentAt,
+        messageCount: 0,
+        providerKey,
+        lastDirection: direction,
+        messages: [dto]
+      });
+    }
+  }
+  const threads = [];
+  for (const thread of threadsByKey.values()) {
+    thread.messages.sort((a, b) => a.sentAt.localeCompare(b.sentAt));
+    if (thread.messages.length > maxMessagesPerThread) {
+      thread.messages = thread.messages.slice(thread.messages.length - maxMessagesPerThread);
+    }
+    const last = thread.messages[thread.messages.length - 1];
+    const firstWithSubject = thread.messages.find((m) => m.subject);
+    const participantSet = /* @__PURE__ */ new Set();
+    for (const message of thread.messages) {
+      if (message.direction === "inbound" && message.fromEmail) participantSet.add(message.fromEmail);
+      if (message.direction === "outbound") message.to.forEach((email) => participantSet.add(email));
+    }
+    thread.subject = firstWithSubject?.subject ?? thread.subject;
+    thread.preview = truncate(last?.bodyText ?? null);
+    thread.participants = Array.from(participantSet);
+    thread.lastMessageAt = last?.sentAt ?? thread.lastMessageAt;
+    thread.lastDirection = last?.direction ?? thread.lastDirection;
+    thread.providerKey = last?.providerKey ?? thread.providerKey;
+    thread.messageCount = thread.messages.length;
+    threads.push(thread);
+  }
+  threads.sort((a, b) => b.lastMessageAt.localeCompare(a.lastMessageAt));
+  return threads.slice(0, maxThreads);
+}
+export {
+  buildPersonEmailThreads
+};
+//# sourceMappingURL=personEmailThreads.js.map

package/dist/modules/customers/lib/personEmailThreads.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/customers/lib/personEmailThreads.ts"],
+  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport { findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { CustomerInteraction } from '../data/entities'\nimport { buildEmailVisibilityMikroFilter } from './visibilityFilter'\n\n/**\n * Read model that turns a Person's email `CustomerInteraction` rows into\n * Gmail-style threads for the CRM Person page.\n *\n * The Person\u2194email anchor lives only on `CustomerInteraction`\n * (`interactionType='email'`, `externalMessageId` \u2192 `MessageChannelLink.id`).\n * The thread grouping key and the rich per-message content (From/To/Cc, body,\n * direction) live in the communication_channels hub. We read the hub entities\n * by their string class names \u2014 the same cross-module pattern used by\n * `link-channel-message-handler.ts` \u2014 so the customers module never imports the\n * hub's entity classes (root AGENTS.md: no direct ORM relationships between\n * modules).\n */\n\nexport type EmailThreadDirection = 'inbound' | 'outbound'\n\nexport type PersonEmailMessage = {\n  id: string\n  /** Open Mercato `messages.message` id \u2014 used as `parentMessageId` when replying so the reply joins this thread. */\n  messageId: string | null\n  /** RFC2822 Message-ID of this email \u2014 used as `In-Reply-To` on a reply. */\n  rfcMessageId: string | null\n  /** RFC2822 References chain for this email. */\n  references: string[]\n  direction: EmailThreadDirection\n  fromName: string | null\n  fromEmail: string | null\n  to: string[]\n  cc: string[]\n  subject: string | null\n  bodyText: string | null\n  sentAt: string\n  providerKey: string | null\n}\n\nexport type PersonEmailThread = {\n  threadKey: string\n  subject: string | null\n  preview: string | null\n  participants: string[]\n  lastMessageAt: string\n  messageCount: number\n  providerKey: string | null\n  lastDirection: EmailThreadDirection\n  messages: PersonEmailMessage[]\n}\n\nexport type BuildPersonEmailThreadsOptions = {\n  personId: string\n  tenantId: string\n  organizationId: string | null\n  viewerUserId: string | null\n  userFeatures: string[] | null | undefined\n  maxThreads?: number\n  maxMessagesPerThread?: number\n}\n\nconst DEFAULT_MAX_THREADS = 50\nconst DEFAULT_MAX_MESSAGES_PER_THREAD = 200\nconst PREVIEW_LENGTH = 140\n\ntype JsonRecord = Record<string, unknown>\n\n/** Extracts `{ email, name }[]` from the many shapes a channel address field can take. */\nfunction extractAddresses(value: unknown): Array<{ email: string; name: string | null }> {\n  const out: Array<{ email: string; name: string | null }> = []\n  const pushOne = (item: unknown): void => {\n    if (typeof item === 'string') {\n      const trimmed = item.trim()\n      if (trimmed) out.push({ email: trimmed, name: null })\n      return\n    }\n    if (item && typeof item === 'object') {\n      const rec = item as JsonRecord\n      const address = typeof rec.address === 'string' ? rec.address.trim() : null\n      const name = typeof rec.name === 'string' && rec.name.trim() ? rec.name.trim() : null\n      if (address) out.push({ email: address, name })\n    }\n  }\n  if (Array.isArray(value)) {\n    for (const item of value) pushOne(item)\n  } else {\n    pushOne(value)\n  }\n  return out\n}\n\nfunction firstString(...values: unknown[]): string | null {\n  for (const value of values) {\n    if (typeof value === 'string' && value.trim().length > 0) return value\n  }\n  return null\n}\n\nfunction toStringArray(...values: unknown[]): string[] {\n  for (const value of values) {\n    if (Array.isArray(value)) {\n      const strings = value.filter((item): item is string => typeof item === 'string' && item.trim().length > 0)\n      if (strings.length > 0) return strings\n    }\n  }\n  return []\n}\n\nfunction truncate(value: string | null): string | null {\n  if (!value) return value\n  const collapsed = value.replace(/\\s+/g, ' ').trim()\n  if (collapsed.length <= PREVIEW_LENGTH) return collapsed\n  return `${collapsed.slice(0, PREVIEW_LENGTH - 1)}\u2026`\n}\n\n/**\n * Builds the per-Person email-thread read model. Pure data assembly \u2014 callers\n * are responsible for auth and scoping (tenantId/organizationId required).\n */\nexport async function buildPersonEmailThreads(\n  em: EntityManager,\n  opts: BuildPersonEmailThreadsOptions,\n): Promise<PersonEmailThread[]> {\n  const {\n    personId,\n    tenantId,\n    organizationId,\n    viewerUserId,\n    userFeatures,\n    maxThreads = DEFAULT_MAX_THREADS,\n    maxMessagesPerThread = DEFAULT_MAX_MESSAGES_PER_THREAD,\n  } = opts\n\n  // \u2500\u2500 (1) Load the Person's email interactions (the Person\u2194email anchor) \u2500\u2500\n  const interactionWhere: JsonRecord = {\n    entity: personId,\n    interactionType: 'email',\n    deletedAt: null,\n    tenantId,\n  }\n  if (organizationId) interactionWhere.organizationId = organizationId\n\n  // Per-email visibility (v1: strict owner-only, no admin bypass) \u2014 the CRM\n  // Person page applies the SAME rule as every other interactions read path via\n  // `buildEmailVisibilityMikroFilter`, so the Emails tab and the `/interactions`\n  // timeline can never disagree about who sees an email:\n  //   - `visibility = 'shared'` is visible to every user with CRM access to this\n  //     Person (lets a teammate pick up a handed-off thread),\n  //   - `visibility = 'private'` is visible ONLY to its author (the mailbox\n  //     owner) \u2014 never to teammates, not even an admin/superadmin (team\n  //     oversight is a deliberate v2 follow-up),\n  //   - legacy/unset rows (`visibility IS NULL`) stay visible so pre-existing\n  //     CRM history is never silently hidden.\n  // Fail-closed: a null viewer (API-key caller) never matches the author arm, so\n  // it only ever sees shared/legacy rows \u2014 never anyone's private email.\n  interactionWhere.$or = buildEmailVisibilityMikroFilter({\n    currentUserId: viewerUserId,\n    userFeatures,\n  }).$or\n\n  // `customer_interaction.title`/`body` are encrypted at rest, so reads go\n  // through `findWithDecryption` even though we only consume non-encrypted\n  // columns here \u2014 this keeps the encrypted-entity contract intact.\n  const dscope = { tenantId, organizationId: organizationId ?? null }\n  const interactions = (await findWithDecryption(\n    em,\n    CustomerInteraction,\n    interactionWhere as never,\n    { orderBy: { occurredAt: 'desc', createdAt: 'desc' }, limit: maxThreads * 20 },\n    dscope,\n  )) as CustomerInteraction[]\n\n  const linkIdByInteraction = new Map<string, { occurredAt: Date }>()\n  const linkIds: string[] = []\n  for (const interaction of interactions) {\n    const linkId = interaction.externalMessageId\n    if (!linkId || linkIdByInteraction.has(linkId)) continue\n    linkIdByInteraction.set(linkId, { occurredAt: interaction.occurredAt ?? interaction.createdAt })\n    linkIds.push(linkId)\n  }\n  if (linkIds.length === 0) return []\n\n  // \u2500\u2500 (2) Resolve MessageChannelLink rows (rich content + direction) \u2500\u2500\u2500\u2500\u2500\u2500\n  const linkWhere: JsonRecord = { id: { $in: linkIds }, tenantId }\n  if (organizationId) linkWhere.organizationId = organizationId\n  const links = (await findWithDecryption(\n    em,\n    'MessageChannelLink' as never,\n    linkWhere as never,\n    undefined,\n    dscope,\n  )) as JsonRecord[]\n\n  // \u2500\u2500 (3) Resolve hub Message rows (the authoritative thread grouping) \u2500\u2500\u2500\u2500\n  const messageIds = Array.from(\n    new Set(\n      links\n        .map((link) => (typeof link.messageId === 'string' ? (link.messageId as string) : null))\n        .filter((value): value is string => !!value),\n    ),\n  )\n  const messageById = new Map<string, JsonRecord>()\n  if (messageIds.length > 0) {\n    const messageWhere: JsonRecord = { id: { $in: messageIds }, tenantId }\n    if (organizationId) messageWhere.organizationId = organizationId\n    const messages = (await findWithDecryption(\n      em,\n      'Message' as never,\n      messageWhere as never,\n      undefined,\n      dscope,\n    )) as JsonRecord[]\n    for (const message of messages) {\n      if (typeof message.id === 'string') messageById.set(message.id, message)\n    }\n  }\n\n  // \u2500\u2500 (4) Build per-message DTOs grouped by thread \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n  const threadsByKey = new Map<string, PersonEmailThread>()\n\n  for (const link of links) {\n    const linkId = typeof link.id === 'string' ? (link.id as string) : null\n    if (!linkId) continue\n    const direction: EmailThreadDirection = link.direction === 'outbound' ? 'outbound' : 'inbound'\n    const providerKey = typeof link.providerKey === 'string' ? (link.providerKey as string) : null\n    const payload = (link.channelPayload ?? null) as JsonRecord | null\n    const meta = (link.channelMetadata ?? null) as JsonRecord | null\n    const messageId = typeof link.messageId === 'string' ? (link.messageId as string) : null\n    const message = messageId ? messageById.get(messageId) ?? null : null\n\n    // Outbound addresses live in channelMetadata; inbound in channelPayload.\n    // Prefer the direction-appropriate source, fall back to the other.\n    const primary = direction === 'outbound' ? meta : payload\n    const secondary = direction === 'outbound' ? payload : meta\n    const fromList = extractAddresses(primary?.from ?? secondary?.from)\n    const toList = extractAddresses(primary?.to ?? secondary?.to)\n    const ccList = extractAddresses(primary?.cc ?? secondary?.cc)\n\n    const subject = firstString(\n      primary?.subject,\n      secondary?.subject,\n      typeof message?.subject === 'string' ? message.subject : null,\n    )\n    const bodyText = firstString(\n      direction === 'outbound' ? meta?.bodyText : payload?.text,\n      direction === 'outbound' ? payload?.text : meta?.bodyText,\n      typeof message?.body === 'string' ? message.body : null,\n    )\n\n    const sentAtRaw =\n      (typeof message?.sentAt === 'string' || message?.sentAt instanceof Date\n        ? message.sentAt\n        : null) ??\n      (link.createdAt instanceof Date || typeof link.createdAt === 'string' ? link.createdAt : null) ??\n      linkIdByInteraction.get(linkId)?.occurredAt ??\n      new Date()\n    const sentAt = (sentAtRaw instanceof Date ? sentAtRaw : new Date(sentAtRaw)).toISOString()\n\n    const threadKey =\n      (typeof message?.threadId === 'string' && message.threadId ? message.threadId : null) ??\n      (messageId ? `message:${messageId}` : `link:${linkId}`)\n\n    const dto: PersonEmailMessage = {\n      id: linkId,\n      messageId,\n      rfcMessageId: firstString(primary?.messageId, secondary?.messageId),\n      references: toStringArray(primary?.references, secondary?.references),\n      direction,\n      fromName: fromList[0]?.name ?? null,\n      fromEmail: fromList[0]?.email ?? null,\n      to: toList.map((a) => a.email),\n      cc: ccList.map((a) => a.email),\n      subject,\n      bodyText,\n      sentAt,\n      providerKey,\n    }\n\n    const existing = threadsByKey.get(threadKey)\n    if (existing) {\n      existing.messages.push(dto)\n    } else {\n      threadsByKey.set(threadKey, {\n        threadKey,\n        subject,\n        preview: null,\n        participants: [],\n        lastMessageAt: sentAt,\n        messageCount: 0,\n        providerKey,\n        lastDirection: direction,\n        messages: [dto],\n      })\n    }\n  }\n\n  // \u2500\u2500 (5) Finalize thread summaries \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n  const threads: PersonEmailThread[] = []\n  for (const thread of threadsByKey.values()) {\n    thread.messages.sort((a, b) => a.sentAt.localeCompare(b.sentAt))\n    if (thread.messages.length > maxMessagesPerThread) {\n      thread.messages = thread.messages.slice(thread.messages.length - maxMessagesPerThread)\n    }\n    const last = thread.messages[thread.messages.length - 1]\n    const firstWithSubject = thread.messages.find((m) => m.subject)\n    const participantSet = new Set<string>()\n    for (const message of thread.messages) {\n      // External counterpart = the \"from\" for inbound, the \"to\" for outbound.\n      if (message.direction === 'inbound' && message.fromEmail) participantSet.add(message.fromEmail)\n      if (message.direction === 'outbound') message.to.forEach((email) => participantSet.add(email))\n    }\n    thread.subject = firstWithSubject?.subject ?? thread.subject\n    thread.preview = truncate(last?.bodyText ?? null)\n    thread.participants = Array.from(participantSet)\n    thread.lastMessageAt = last?.sentAt ?? thread.lastMessageAt\n    thread.lastDirection = last?.direction ?? thread.lastDirection\n    thread.providerKey = last?.providerKey ?? thread.providerKey\n    thread.messageCount = thread.messages.length\n    threads.push(thread)\n  }\n\n  threads.sort((a, b) => b.lastMessageAt.localeCompare(a.lastMessageAt))\n  return threads.slice(0, maxThreads)\n}\n"],
+  "mappings": "AACA,SAAS,0BAA0B;AACnC,SAAS,2BAA2B;AACpC,SAAS,uCAAuC;AA2DhD,MAAM,sBAAsB;AAC5B,MAAM,kCAAkC;AACxC,MAAM,iBAAiB;AAKvB,SAAS,iBAAiB,OAA+D;AACvF,QAAM,MAAqD,CAAC;AAC5D,QAAM,UAAU,CAAC,SAAwB;AACvC,QAAI,OAAO,SAAS,UAAU;AAC5B,YAAM,UAAU,KAAK,KAAK;AAC1B,UAAI,QAAS,KAAI,KAAK,EAAE,OAAO,SAAS,MAAM,KAAK,CAAC;AACpD;AAAA,IACF;AACA,QAAI,QAAQ,OAAO,SAAS,UAAU;AACpC,YAAM,MAAM;AACZ,YAAM,UAAU,OAAO,IAAI,YAAY,WAAW,IAAI,QAAQ,KAAK,IAAI;AACvE,YAAM,OAAO,OAAO,IAAI,SAAS,YAAY,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,IAAI;AACjF,UAAI,QAAS,KAAI,KAAK,EAAE,OAAO,SAAS,KAAK,CAAC;AAAA,IAChD;AAAA,EACF;AACA,MAAI,MAAM,QAAQ,KAAK,GAAG;AACxB,eAAW,QAAQ,MAAO,SAAQ,IAAI;AAAA,EACxC,OAAO;AACL,YAAQ,KAAK;AAAA,EACf;AACA,SAAO;AACT;AAEA,SAAS,eAAe,QAAkC;AACxD,aAAW,SAAS,QAAQ;AAC1B,QAAI,OAAO,UAAU,YAAY,MAAM,KAAK,EAAE,SAAS,EAAG,QAAO;AAAA,EACnE;AACA,SAAO;AACT;AAEA,SAAS,iBAAiB,QAA6B;AACrD,aAAW,SAAS,QAAQ;AAC1B,QAAI,MAAM,QAAQ,KAAK,GAAG;AACxB,YAAM,UAAU,MAAM,OAAO,CAAC,SAAyB,OAAO,SAAS,YAAY,KAAK,KAAK,EAAE,SAAS,CAAC;AACzG,UAAI,QAAQ,SAAS,EAAG,QAAO;AAAA,IACjC;AAAA,EACF;AACA,SAAO,CAAC;AACV;AAEA,SAAS,SAAS,OAAqC;AACrD,MAAI,CAAC,MAAO,QAAO;AACnB,QAAM,YAAY,MAAM,QAAQ,QAAQ,GAAG,EAAE,KAAK;AAClD,MAAI,UAAU,UAAU,eAAgB,QAAO;AAC/C,SAAO,GAAG,UAAU,MAAM,GAAG,iBAAiB,CAAC,CAAC;AAClD;AAMA,eAAsB,wBACpB,IACA,MAC8B;AAC9B,QAAM;AAAA,IACJ;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,aAAa;AAAA,IACb,uBAAuB;AAAA,EACzB,IAAI;AAGJ,QAAM,mBAA+B;AAAA,IACnC,QAAQ;AAAA,IACR,iBAAiB;AAAA,IACjB,WAAW;AAAA,IACX;AAAA,EACF;AACA,MAAI,eAAgB,kBAAiB,iBAAiB;AAetD,mBAAiB,MAAM,gCAAgC;AAAA,IACrD,eAAe;AAAA,IACf;AAAA,EACF,CAAC,EAAE;AAKH,QAAM,SAAS,EAAE,UAAU,gBAAgB,kBAAkB,KAAK;AAClE,QAAM,eAAgB,MAAM;AAAA,IAC1B;AAAA,IACA;AAAA,IACA;AAAA,IACA,EAAE,SAAS,EAAE,YAAY,QAAQ,WAAW,OAAO,GAAG,OAAO,aAAa,GAAG;AAAA,IAC7E;AAAA,EACF;AAEA,QAAM,sBAAsB,oBAAI,IAAkC;AAClE,QAAM,UAAoB,CAAC;AAC3B,aAAW,eAAe,cAAc;AACtC,UAAM,SAAS,YAAY;AAC3B,QAAI,CAAC,UAAU,oBAAoB,IAAI,MAAM,EAAG;AAChD,wBAAoB,IAAI,QAAQ,EAAE,YAAY,YAAY,cAAc,YAAY,UAAU,CAAC;AAC/F,YAAQ,KAAK,MAAM;AAAA,EACrB;AACA,MAAI,QAAQ,WAAW,EAAG,QAAO,CAAC;AAGlC,QAAM,YAAwB,EAAE,IAAI,EAAE,KAAK,QAAQ,GAAG,SAAS;AAC/D,MAAI,eAAgB,WAAU,iBAAiB;AAC/C,QAAM,QAAS,MAAM;AAAA,IACnB;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AAGA,QAAM,aAAa,MAAM;AAAA,IACvB,IAAI;AAAA,MACF,MACG,IAAI,CAAC,SAAU,OAAO,KAAK,cAAc,WAAY,KAAK,YAAuB,IAAK,EACtF,OAAO,CAAC,UAA2B,CAAC,CAAC,KAAK;AAAA,IAC/C;AAAA,EACF;AACA,QAAM,cAAc,oBAAI,IAAwB;AAChD,MAAI,WAAW,SAAS,GAAG;AACzB,UAAM,eAA2B,EAAE,IAAI,EAAE,KAAK,WAAW,GAAG,SAAS;AACrE,QAAI,eAAgB,cAAa,iBAAiB;AAClD,UAAM,WAAY,MAAM;AAAA,MACtB;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AACA,eAAW,WAAW,UAAU;AAC9B,UAAI,OAAO,QAAQ,OAAO,SAAU,aAAY,IAAI,QAAQ,IAAI,OAAO;AAAA,IACzE;AAAA,EACF;AAGA,QAAM,eAAe,oBAAI,IAA+B;AAExD,aAAW,QAAQ,OAAO;AACxB,UAAM,SAAS,OAAO,KAAK,OAAO,WAAY,KAAK,KAAgB;AACnE,QAAI,CAAC,OAAQ;AACb,UAAM,YAAkC,KAAK,cAAc,aAAa,aAAa;AACrF,UAAM,cAAc,OAAO,KAAK,gBAAgB,WAAY,KAAK,cAAyB;AAC1F,UAAM,UAAW,KAAK,kBAAkB;AACxC,UAAM,OAAQ,KAAK,mBAAmB;AACtC,UAAM,YAAY,OAAO,KAAK,cAAc,WAAY,KAAK,YAAuB;AACpF,UAAM,UAAU,YAAY,YAAY,IAAI,SAAS,KAAK,OAAO;AAIjE,UAAM,UAAU,cAAc,aAAa,OAAO;AAClD,UAAM,YAAY,cAAc,aAAa,UAAU;AACvD,UAAM,WAAW,iBAAiB,SAAS,QAAQ,WAAW,IAAI;AAClE,UAAM,SAAS,iBAAiB,SAAS,MAAM,WAAW,EAAE;AAC5D,UAAM,SAAS,iBAAiB,SAAS,MAAM,WAAW,EAAE;AAE5D,UAAM,UAAU;AAAA,MACd,SAAS;AAAA,MACT,WAAW;AAAA,MACX,OAAO,SAAS,YAAY,WAAW,QAAQ,UAAU;AAAA,IAC3D;AACA,UAAM,WAAW;AAAA,MACf,cAAc,aAAa,MAAM,WAAW,SAAS;AAAA,MACrD,cAAc,aAAa,SAAS,OAAO,MAAM;AAAA,MACjD,OAAO,SAAS,SAAS,WAAW,QAAQ,OAAO;AAAA,IACrD;AAEA,UAAM,aACH,OAAO,SAAS,WAAW,YAAY,SAAS,kBAAkB,OAC/D,QAAQ,SACR,UACH,KAAK,qBAAqB,QAAQ,OAAO,KAAK,cAAc,WAAW,KAAK,YAAY,SACzF,oBAAoB,IAAI,MAAM,GAAG,cACjC,oBAAI,KAAK;AACX,UAAM,UAAU,qBAAqB,OAAO,YAAY,IAAI,KAAK,SAAS,GAAG,YAAY;AAEzF,UAAM,aACH,OAAO,SAAS,aAAa,YAAY,QAAQ,WAAW,QAAQ,WAAW,UAC/E,YAAY,WAAW,SAAS,KAAK,QAAQ,MAAM;AAEtD,UAAM,MAA0B;AAAA,MAC9B,IAAI;AAAA,MACJ;AAAA,MACA,cAAc,YAAY,SAAS,WAAW,WAAW,SAAS;AAAA,MAClE,YAAY,cAAc,SAAS,YAAY,WAAW,UAAU;AAAA,MACpE;AAAA,MACA,UAAU,SAAS,CAAC,GAAG,QAAQ;AAAA,MAC/B,WAAW,SAAS,CAAC,GAAG,SAAS;AAAA,MACjC,IAAI,OAAO,IAAI,CAAC,MAAM,EAAE,KAAK;AAAA,MAC7B,IAAI,OAAO,IAAI,CAAC,MAAM,EAAE,KAAK;AAAA,MAC7B;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAEA,UAAM,WAAW,aAAa,IAAI,SAAS;AAC3C,QAAI,UAAU;AACZ,eAAS,SAAS,KAAK,GAAG;AAAA,IAC5B,OAAO;AACL,mBAAa,IAAI,WAAW;AAAA,QAC1B;AAAA,QACA;AAAA,QACA,SAAS;AAAA,QACT,cAAc,CAAC;AAAA,QACf,eAAe;AAAA,QACf,cAAc;AAAA,QACd;AAAA,QACA,eAAe;AAAA,QACf,UAAU,CAAC,GAAG;AAAA,MAChB,CAAC;AAAA,IACH;AAAA,EACF;AAGA,QAAM,UAA+B,CAAC;AACtC,aAAW,UAAU,aAAa,OAAO,GAAG;AAC1C,WAAO,SAAS,KAAK,CAAC,GAAG,MAAM,EAAE,OAAO,cAAc,EAAE,MAAM,CAAC;AAC/D,QAAI,OAAO,SAAS,SAAS,sBAAsB;AACjD,aAAO,WAAW,OAAO,SAAS,MAAM,OAAO,SAAS,SAAS,oBAAoB;AAAA,IACvF;AACA,UAAM,OAAO,OAAO,SAAS,OAAO,SAAS,SAAS,CAAC;AACvD,UAAM,mBAAmB,OAAO,SAAS,KAAK,CAAC,MAAM,EAAE,OAAO;AAC9D,UAAM,iBAAiB,oBAAI,IAAY;AACvC,eAAW,WAAW,OAAO,UAAU;AAErC,UAAI,QAAQ,cAAc,aAAa,QAAQ,UAAW,gBAAe,IAAI,QAAQ,SAAS;AAC9F,UAAI,QAAQ,cAAc,WAAY,SAAQ,GAAG,QAAQ,CAAC,UAAU,eAAe,IAAI,KAAK,CAAC;AAAA,IAC/F;AACA,WAAO,UAAU,kBAAkB,WAAW,OAAO;AACrD,WAAO,UAAU,SAAS,MAAM,YAAY,IAAI;AAChD,WAAO,eAAe,MAAM,KAAK,cAAc;AAC/C,WAAO,gBAAgB,MAAM,UAAU,OAAO;AAC9C,WAAO,gBAAgB,MAAM,aAAa,OAAO;AACjD,WAAO,cAAc,MAAM,eAAe,OAAO;AACjD,WAAO,eAAe,OAAO,SAAS;AACtC,YAAQ,KAAK,MAAM;AAAA,EACrB;AAEA,UAAQ,KAAK,CAAC,GAAG,MAAM,EAAE,cAAc,cAAc,EAAE,aAAa,CAAC;AACrE,SAAO,QAAQ,MAAM,GAAG,UAAU;AACpC;",
+  "names": []
+}

package/dist/modules/customers/lib/visibilityFilter.js

@@ -0,0 +1,51 @@
+import { hasFeature } from "@open-mercato/shared/security/features";
+const EMAIL_VIEW_PRIVATE_FEATURE = "customers.email.view_private";
+function callerHasEmailViewPrivate(userFeatures) {
+  if (!Array.isArray(userFeatures) || userFeatures.length === 0) return false;
+  return hasFeature(userFeatures, EMAIL_VIEW_PRIVATE_FEATURE);
+}
+function canChangeEmailVisibility(opts) {
+  if (opts.interactionType !== "email") return true;
+  if ((opts.nextVisibility ?? null) === (opts.currentVisibility ?? null)) return true;
+  return Boolean(opts.actorUserId) && opts.authorUserId === opts.actorUserId;
+}
+function applyEmailVisibilityFilter(query, opts) {
+  const currentUserId = opts.currentUserId;
+  return query.where(
+    (eb) => eb.or([
+      eb("interaction_type", "!=", "email"),
+      eb("visibility", "is", null),
+      eb("visibility", "!=", "private"),
+      currentUserId ? eb("author_user_id", "=", currentUserId) : eb.val(false)
+    ])
+  );
+}
+async function resolveCallerEmailFeatures(container, userId, tenantId, organizationId) {
+  if (!userId) return void 0;
+  try {
+    const rbac = container.resolve("rbacService");
+    if (!rbac?.getGrantedFeatures) return void 0;
+    return await rbac.getGrantedFeatures(userId, { tenantId, organizationId });
+  } catch {
+    return void 0;
+  }
+}
+function buildEmailVisibilityMikroFilter(opts) {
+  return {
+    $or: [
+      { interactionType: { $ne: "email" } },
+      { visibility: null },
+      { visibility: { $ne: "private" } },
+      ...opts.currentUserId ? [{ authorUserId: opts.currentUserId }] : []
+    ]
+  };
+}
+export {
+  EMAIL_VIEW_PRIVATE_FEATURE,
+  applyEmailVisibilityFilter,
+  buildEmailVisibilityMikroFilter,
+  callerHasEmailViewPrivate,
+  canChangeEmailVisibility,
+  resolveCallerEmailFeatures
+};
+//# sourceMappingURL=visibilityFilter.js.map

package/dist/modules/customers/lib/visibilityFilter.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/customers/lib/visibilityFilter.ts"],
+  "sourcesContent": ["import type { FilterQuery } from '@mikro-orm/postgresql'\nimport { hasFeature } from '@open-mercato/shared/security/features'\nimport { CustomerInteraction } from '../data/entities'\n\n/**\n * The ACL feature that grants admins the right to see private emails authored\n * by other users. Declared in `acl.ts` but granted to NO role in v1 (reserved\n * for the v2 oversight feature \u2014 see `callerHasEmailViewPrivate`).\n */\nexport const EMAIL_VIEW_PRIVATE_FEATURE = 'customers.email.view_private'\n\n/**\n * Returns true when the caller holds the admin override to see ALL private email\n * interactions. Honours wildcards (`customers.*`, `*`).\n *\n * RESERVED FOR v2 \u2014 NOT wired in v1. The v1 model is strict owner-only with no\n * admin bypass: the visibility filters and `canChangeEmailVisibility` ignore\n * caller features, and `customers.email.view_private` is granted to no role.\n * Kept (with {@link EMAIL_VIEW_PRIVATE_FEATURE}) so v2 oversight can opt back in\n * without re-introducing the helper. Do NOT wire this into a read path without\n * an explicit v2 spec.\n */\nexport function callerHasEmailViewPrivate(userFeatures: string[] | null | undefined): boolean {\n  if (!Array.isArray(userFeatures) || userFeatures.length === 0) return false\n  return hasFeature(userFeatures, EMAIL_VIEW_PRIVATE_FEATURE)\n}\n\n/**\n * Authorization predicate for CHANGING an email interaction's visibility.\n *\n * Personal mailbox privacy (v1: strict owner-only): ONLY the interaction's\n * author may flip their own email between private/shared \u2014 there is no admin\n * bypass. Non-email rows and no-op changes are always allowed. Mirrors the gate\n * in the dedicated `PATCH .../visibility` route so the generic interaction-update\n * path cannot bypass the privacy control. `userFeatures` is reserved for v2.\n */\nexport function canChangeEmailVisibility(opts: {\n  interactionType: string\n  currentVisibility: string | null | undefined\n  nextVisibility: string | null | undefined\n  authorUserId: string | null | undefined\n  actorUserId: string | null | undefined\n  userFeatures: string[] | null | undefined\n}): boolean {\n  if (opts.interactionType !== 'email') return true\n  if ((opts.nextVisibility ?? null) === (opts.currentVisibility ?? null)) return true\n  return Boolean(opts.actorUserId) && opts.authorUserId === opts.actorUserId\n}\n\nexport interface ApplyEmailVisibilityFilterOptions {\n  currentUserId: string | null\n  userFeatures: string[] | null | undefined\n}\n\n/**\n * Adds a `WHERE` predicate to a kysely query so that:\n *   - Non-email interactions (calls, meetings, tasks) pass through unchanged.\n *   - Email interactions with `visibility = 'shared'` are visible to all.\n *   - Email interactions with `visibility = 'private'` are visible ONLY to the\n *     `authorUserId` (channel owner).\n *\n * Personal mailbox privacy (v1: strict owner-only) \u2014 there is NO admin bypass:\n * a private email is hidden from everyone except its author, including\n * admins/superadmins. `opts.userFeatures` is retained for signature stability\n * and reserved for the v2 admin-oversight feature.\n *\n * The function expects a kysely-style builder whose `.where()` accepts an\n * expression-builder callback. Returns the same builder for chaining.\n */\nexport function applyEmailVisibilityFilter<T extends { where: (...args: any[]) => T }>(\n  query: T,\n  opts: ApplyEmailVisibilityFilterOptions,\n): T {\n  const currentUserId = opts.currentUserId\n  // A row is hidden ONLY when it is an email explicitly marked `private` and the\n  // caller is not its author. Everything else stays visible, including:\n  //   - non-email interactions (calls, meetings, tasks),\n  //   - emails marked `shared`,\n  //   - legacy/unset rows where `visibility IS NULL` (e.g. email-log entries\n  //     created before per-email visibility shipped) \u2014 these must remain\n  //     visible to avoid silently hiding pre-existing CRM history.\n  return query.where((eb: any) =>\n    eb.or([\n      eb('interaction_type', '!=', 'email'),\n      eb('visibility', 'is', null),\n      eb('visibility', '!=', 'private'),\n      currentUserId\n        ? eb('author_user_id', '=', currentUserId)\n        : eb.val(false),\n    ]),\n  )\n}\n\ntype RbacServiceLike = {\n  getGrantedFeatures?: (\n    userId: string,\n    scope: { tenantId: string | null; organizationId: string | null },\n  ) => Promise<string[] | undefined>\n}\n\n/**\n * Resolve the caller's granted features (wildcard-aware downstream) so a v2\n * visibility filter could honour the `customers.email.view_private` admin\n * override. Returns `undefined` when there is no user or the RBAC service is\n * unavailable \u2014 callers MUST treat `undefined` as \"no bypass\" (fail closed).\n *\n * RESERVED FOR v2 \u2014 NOT called by any v1 read path. v1 is strict owner-only, so\n * the read routes pass `userFeatures: undefined` to the filters rather than\n * resolving features here (which would be a wasted RBAC round-trip). Re-wire\n * only under an explicit v2 oversight spec.\n */\nexport async function resolveCallerEmailFeatures(\n  container: { resolve: (name: string) => unknown },\n  userId: string | null,\n  tenantId: string | null,\n  organizationId: string | null,\n): Promise<string[] | undefined> {\n  if (!userId) return undefined\n  try {\n    const rbac = container.resolve('rbacService') as RbacServiceLike | undefined\n    if (!rbac?.getGrantedFeatures) return undefined\n    return await rbac.getGrantedFeatures(userId, { tenantId, organizationId })\n  } catch {\n    return undefined\n  }\n}\n\n/**\n * MikroORM equivalent of {@link applyEmailVisibilityFilter}. Returns a\n * `FilterQuery` fragment to merge (implicit AND) into a `CustomerInteraction`\n * where-clause so private email rows are excluded for non-owner, non-admin\n * callers on MikroORM read paths (`findWithDecryption`/`em.find`/`em.count`).\n *\n * Mirrors the kysely predicate exactly, including the legacy `visibility IS NULL`\n * passthrough so pre-existing CRM history is never hidden. Personal mailbox\n * privacy (v1: strict owner-only): no admin bypass \u2014 a private email is hidden\n * from everyone except its author. `opts.userFeatures` is reserved for v2.\n */\nexport type EmailVisibilityMikroFilter = { $or?: FilterQuery<CustomerInteraction>[] }\n\nexport function buildEmailVisibilityMikroFilter(\n  opts: ApplyEmailVisibilityFilterOptions,\n): EmailVisibilityMikroFilter {\n  return {\n    $or: [\n      { interactionType: { $ne: 'email' } },\n      { visibility: null },\n      { visibility: { $ne: 'private' } },\n      ...(opts.currentUserId ? [{ authorUserId: opts.currentUserId }] : []),\n    ],\n  }\n}\n"],
+  "mappings": "AACA,SAAS,kBAAkB;AAQpB,MAAM,6BAA6B;AAanC,SAAS,0BAA0B,cAAoD;AAC5F,MAAI,CAAC,MAAM,QAAQ,YAAY,KAAK,aAAa,WAAW,EAAG,QAAO;AACtE,SAAO,WAAW,cAAc,0BAA0B;AAC5D;AAWO,SAAS,yBAAyB,MAO7B;AACV,MAAI,KAAK,oBAAoB,QAAS,QAAO;AAC7C,OAAK,KAAK,kBAAkB,WAAW,KAAK,qBAAqB,MAAO,QAAO;AAC/E,SAAO,QAAQ,KAAK,WAAW,KAAK,KAAK,iBAAiB,KAAK;AACjE;AAsBO,SAAS,2BACd,OACA,MACG;AACH,QAAM,gBAAgB,KAAK;AAQ3B,SAAO,MAAM;AAAA,IAAM,CAAC,OAClB,GAAG,GAAG;AAAA,MACJ,GAAG,oBAAoB,MAAM,OAAO;AAAA,MACpC,GAAG,cAAc,MAAM,IAAI;AAAA,MAC3B,GAAG,cAAc,MAAM,SAAS;AAAA,MAChC,gBACI,GAAG,kBAAkB,KAAK,aAAa,IACvC,GAAG,IAAI,KAAK;AAAA,IAClB,CAAC;AAAA,EACH;AACF;AAoBA,eAAsB,2BACpB,WACA,QACA,UACA,gBAC+B;AAC/B,MAAI,CAAC,OAAQ,QAAO;AACpB,MAAI;AACF,UAAM,OAAO,UAAU,QAAQ,aAAa;AAC5C,QAAI,CAAC,MAAM,mBAAoB,QAAO;AACtC,WAAO,MAAM,KAAK,mBAAmB,QAAQ,EAAE,UAAU,eAAe,CAAC;AAAA,EAC3E,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAeO,SAAS,gCACd,MAC4B;AAC5B,SAAO;AAAA,IACL,KAAK;AAAA,MACH,EAAE,iBAAiB,EAAE,KAAK,QAAQ,EAAE;AAAA,MACpC,EAAE,YAAY,KAAK;AAAA,MACnB,EAAE,YAAY,EAAE,KAAK,UAAU,EAAE;AAAA,MACjC,GAAI,KAAK,gBAAgB,CAAC,EAAE,cAAc,KAAK,cAAc,CAAC,IAAI,CAAC;AAAA,IACrE;AAAA,EACF;AACF;",
+  "names": []
+}

package/dist/modules/customers/migrations/Migration20260527012240_customers.js

@@ -0,0 +1,20 @@
+import { Migration } from "@mikro-orm/migrations";
+class Migration20260527012240_customers extends Migration {
+  up() {
+    this.addSql(`alter table "customer_interactions" add "external_message_id" uuid null, add "channel_provider_key" text null;`);
+    this.addSql(`update "customer_interactions" set "visibility" = 'shared' where "interaction_type" = 'email' and "visibility" is null and "external_message_id" is null;`);
+    this.addSql(`create index "customer_interactions_external_msg_idx" on "customer_interactions" ("external_message_id") where "external_message_id" is not null;`);
+    this.addSql(`create unique index "customer_interactions_email_dedupe_uq" on "customer_interactions" ("entity_id", "external_message_id") where "external_message_id" is not null and "deleted_at" is null;`);
+    this.addSql(`create index "customer_interactions_email_visibility_idx" on "customer_interactions" ("entity_id", "interaction_type", "visibility", "author_user_id") where "interaction_type" = 'email' and "deleted_at" is null;`);
+  }
+  down() {
+    this.addSql(`drop index if exists "customer_interactions_email_visibility_idx";`);
+    this.addSql(`drop index if exists "customer_interactions_email_dedupe_uq";`);
+    this.addSql(`drop index if exists "customer_interactions_external_msg_idx";`);
+    this.addSql(`alter table "customer_interactions" drop column "external_message_id", drop column "channel_provider_key";`);
+  }
+}
+export {
+  Migration20260527012240_customers
+};
+//# sourceMappingURL=Migration20260527012240_customers.js.map

package/dist/modules/customers/migrations/Migration20260527012240_customers.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/customers/migrations/Migration20260527012240_customers.ts"],
+  "sourcesContent": ["import { Migration } from '@mikro-orm/migrations';\n\nexport class Migration20260527012240_customers extends Migration {\n\n  override up(): void | Promise<void> {\n    this.addSql(`alter table \"customer_interactions\" add \"external_message_id\" uuid null, add \"channel_provider_key\" text null;`);\n    // Backfill: pre-existing email-log interactions predate per-email visibility\n    // and have null visibility. Mark them 'shared' so they keep their prior\n    // visible-to-all behavior once the visibility filter is enabled.\n    this.addSql(`update \"customer_interactions\" set \"visibility\" = 'shared' where \"interaction_type\" = 'email' and \"visibility\" is null and \"external_message_id\" is null;`);\n    this.addSql(`create index \"customer_interactions_external_msg_idx\" on \"customer_interactions\" (\"external_message_id\") where \"external_message_id\" is not null;`);\n    this.addSql(`create unique index \"customer_interactions_email_dedupe_uq\" on \"customer_interactions\" (\"entity_id\", \"external_message_id\") where \"external_message_id\" is not null and \"deleted_at\" is null;`);\n    this.addSql(`create index \"customer_interactions_email_visibility_idx\" on \"customer_interactions\" (\"entity_id\", \"interaction_type\", \"visibility\", \"author_user_id\") where \"interaction_type\" = 'email' and \"deleted_at\" is null;`);\n  }\n\n  override down(): void | Promise<void> {\n    this.addSql(`drop index if exists \"customer_interactions_email_visibility_idx\";`);\n    this.addSql(`drop index if exists \"customer_interactions_email_dedupe_uq\";`);\n    this.addSql(`drop index if exists \"customer_interactions_external_msg_idx\";`);\n    this.addSql(`alter table \"customer_interactions\" drop column \"external_message_id\", drop column \"channel_provider_key\";`);\n  }\n\n}\n"],
+  "mappings": "AAAA,SAAS,iBAAiB;AAEnB,MAAM,0CAA0C,UAAU;AAAA,EAEtD,KAA2B;AAClC,SAAK,OAAO,gHAAgH;AAI5H,SAAK,OAAO,2JAA2J;AACvK,SAAK,OAAO,mJAAmJ;AAC/J,SAAK,OAAO,+LAA+L;AAC3M,SAAK,OAAO,qNAAqN;AAAA,EACnO;AAAA,EAES,OAA6B;AACpC,SAAK,OAAO,oEAAoE;AAChF,SAAK,OAAO,+DAA+D;AAC3E,SAAK,OAAO,gEAAgE;AAC5E,SAAK,OAAO,4GAA4G;AAAA,EAC1H;AAEF;",
+  "names": []
+}

package/dist/modules/customers/setup.js

@@ -94,7 +94,8 @@ const setup = {
       "customers.widgets.new-customers",
       "customers.widgets.new-deals",
       "customers.roles.view",
-      "customers.roles.manage"
+      "customers.roles.manage",
+      "customers.email.compose"
     ]
   }
 };

package/dist/modules/customers/setup.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../src/modules/customers/setup.ts"],
-  "sourcesContent": ["import type { ModuleSetupConfig } from '@open-mercato/shared/modules/setup'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { FeatureToggle } from '@open-mercato/core/modules/feature_toggles/data/entities'\nimport {\n  ensureCustomerCustomFieldDefinitions,\n  seedCustomerDictionaries,\n  seedCurrencyDictionary,\n  seedCustomerExamples,\n  seedDefaultPipeline,\n} from './cli'\nimport { ensureDictionaryEntry } from './commands/shared'\nimport { DEFAULT_CUSTOMER_ROLE_TYPES } from './lib/customerRoleTypes'\n\nconst interactionFeatureToggles = [\n  {\n    identifier: 'customers.interactions.unified',\n    name: 'Unified Interactions',\n    description: 'When enabled, interactions use the unified canonical model instead of per-entity activity tracking.',\n    category: 'customers',\n    type: 'boolean' as const,\n    defaultValue: false,\n  },\n  {\n    identifier: 'customers.interactions.legacy-adapters',\n    name: 'Interaction Legacy Adapters',\n    description: 'When enabled, legacy activity/todo APIs are bridged to the canonical interaction model.',\n    category: 'customers',\n    type: 'boolean' as const,\n    defaultValue: true,\n  },\n  {\n    identifier: 'customers.interactions.external-sync',\n    name: 'Interaction External Sync',\n    description: 'When enabled, interactions can be synced from external systems (calendars, email providers).',\n    category: 'customers',\n    type: 'boolean' as const,\n    defaultValue: false,\n  },\n]\n\nasync function seedInteractionFeatureToggles(em: EntityManager): Promise<void> {\n  for (const toggle of interactionFeatureToggles) {\n    const existing = await em.findOne(FeatureToggle, { identifier: toggle.identifier, deletedAt: null })\n    if (existing) continue\n    const entity = em.create(FeatureToggle, {\n      identifier: toggle.identifier,\n      name: toggle.name,\n      description: toggle.description,\n      category: toggle.category,\n      type: toggle.type,\n      defaultValue: toggle.defaultValue,\n    })\n    em.persist(entity)\n  }\n  await em.flush()\n}\n\nexport const setup: ModuleSetupConfig = {\n  seedDefaults: async (ctx) => {\n    const scope = { tenantId: ctx.tenantId, organizationId: ctx.organizationId }\n    await seedCustomerDictionaries(ctx.em, scope)\n    await seedCurrencyDictionary(ctx.em, scope)\n    await seedDefaultPipeline(ctx.em, scope)\n    await ensureCustomerCustomFieldDefinitions(ctx.em, ctx.tenantId)\n    await seedInteractionFeatureToggles(ctx.em)\n    for (const entry of DEFAULT_CUSTOMER_ROLE_TYPES) {\n      await ensureDictionaryEntry(ctx.em, {\n        tenantId: ctx.tenantId,\n        organizationId: ctx.organizationId,\n        kind: 'customer_role_type',\n        value: entry.value,\n        label: entry.label,\n        color: entry.color,\n        icon: entry.icon,\n      })\n    }\n  },\n\n  seedExamples: async (ctx) => {\n    const scope = { tenantId: ctx.tenantId, organizationId: ctx.organizationId }\n    await seedCustomerExamples(ctx.em, ctx.container, scope)\n  },\n\n  defaultRoleFeatures: {\n    admin: [\n      'customers.*',\n    ],\n    employee: [\n      'customers.people.view',\n      'customers.people.manage',\n      'customers.companies.view',\n      'customers.companies.manage',\n      'customers.deals.view',\n      'customers.deals.manage',\n      'customers.activities.view',\n      'customers.activities.manage',\n      'customers.pipelines.view',\n      'customers.interactions.view',\n      'customers.widgets.todos',\n      'customers.widgets.next-interactions',\n      'customers.widgets.new-customers',\n      'customers.widgets.new-deals',\n      'customers.roles.view',\n      'customers.roles.manage',\n    ],\n  },\n}\n\nexport default setup\n"],
-  "mappings": "AAEA,SAAS,qBAAqB;AAC9B;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,6BAA6B;AACtC,SAAS,mCAAmC;AAE5C,MAAM,4BAA4B;AAAA,EAChC;AAAA,IACE,YAAY;AAAA,IACZ,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,IACV,MAAM;AAAA,IACN,cAAc;AAAA,EAChB;AAAA,EACA;AAAA,IACE,YAAY;AAAA,IACZ,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,IACV,MAAM;AAAA,IACN,cAAc;AAAA,EAChB;AAAA,EACA;AAAA,IACE,YAAY;AAAA,IACZ,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,IACV,MAAM;AAAA,IACN,cAAc;AAAA,EAChB;AACF;AAEA,eAAe,8BAA8B,IAAkC;AAC7E,aAAW,UAAU,2BAA2B;AAC9C,UAAM,WAAW,MAAM,GAAG,QAAQ,eAAe,EAAE,YAAY,OAAO,YAAY,WAAW,KAAK,CAAC;AACnG,QAAI,SAAU;AACd,UAAM,SAAS,GAAG,OAAO,eAAe;AAAA,MACtC,YAAY,OAAO;AAAA,MACnB,MAAM,OAAO;AAAA,MACb,aAAa,OAAO;AAAA,MACpB,UAAU,OAAO;AAAA,MACjB,MAAM,OAAO;AAAA,MACb,cAAc,OAAO;AAAA,IACvB,CAAC;AACD,OAAG,QAAQ,MAAM;AAAA,EACnB;AACA,QAAM,GAAG,MAAM;AACjB;AAEO,MAAM,QAA2B;AAAA,EACtC,cAAc,OAAO,QAAQ;AAC3B,UAAM,QAAQ,EAAE,UAAU,IAAI,UAAU,gBAAgB,IAAI,eAAe;AAC3E,UAAM,yBAAyB,IAAI,IAAI,KAAK;AAC5C,UAAM,uBAAuB,IAAI,IAAI,KAAK;AAC1C,UAAM,oBAAoB,IAAI,IAAI,KAAK;AACvC,UAAM,qCAAqC,IAAI,IAAI,IAAI,QAAQ;AAC/D,UAAM,8BAA8B,IAAI,EAAE;AAC1C,eAAW,SAAS,6BAA6B;AAC/C,YAAM,sBAAsB,IAAI,IAAI;AAAA,QAClC,UAAU,IAAI;AAAA,QACd,gBAAgB,IAAI;AAAA,QACpB,MAAM;AAAA,QACN,OAAO,MAAM;AAAA,QACb,OAAO,MAAM;AAAA,QACb,OAAO,MAAM;AAAA,QACb,MAAM,MAAM;AAAA,MACd,CAAC;AAAA,IACH;AAAA,EACF;AAAA,EAEA,cAAc,OAAO,QAAQ;AAC3B,UAAM,QAAQ,EAAE,UAAU,IAAI,UAAU,gBAAgB,IAAI,eAAe;AAC3E,UAAM,qBAAqB,IAAI,IAAI,IAAI,WAAW,KAAK;AAAA,EACzD;AAAA,EAEA,qBAAqB;AAAA,IACnB,OAAO;AAAA,MACL;AAAA,IACF;AAAA,IACA,UAAU;AAAA,MACR;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AACF;AAEA,IAAO,gBAAQ;",
+  "sourcesContent": ["import type { ModuleSetupConfig } from '@open-mercato/shared/modules/setup'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { FeatureToggle } from '@open-mercato/core/modules/feature_toggles/data/entities'\nimport {\n  ensureCustomerCustomFieldDefinitions,\n  seedCustomerDictionaries,\n  seedCurrencyDictionary,\n  seedCustomerExamples,\n  seedDefaultPipeline,\n} from './cli'\nimport { ensureDictionaryEntry } from './commands/shared'\nimport { DEFAULT_CUSTOMER_ROLE_TYPES } from './lib/customerRoleTypes'\n\nconst interactionFeatureToggles = [\n  {\n    identifier: 'customers.interactions.unified',\n    name: 'Unified Interactions',\n    description: 'When enabled, interactions use the unified canonical model instead of per-entity activity tracking.',\n    category: 'customers',\n    type: 'boolean' as const,\n    defaultValue: false,\n  },\n  {\n    identifier: 'customers.interactions.legacy-adapters',\n    name: 'Interaction Legacy Adapters',\n    description: 'When enabled, legacy activity/todo APIs are bridged to the canonical interaction model.',\n    category: 'customers',\n    type: 'boolean' as const,\n    defaultValue: true,\n  },\n  {\n    identifier: 'customers.interactions.external-sync',\n    name: 'Interaction External Sync',\n    description: 'When enabled, interactions can be synced from external systems (calendars, email providers).',\n    category: 'customers',\n    type: 'boolean' as const,\n    defaultValue: false,\n  },\n]\n\nasync function seedInteractionFeatureToggles(em: EntityManager): Promise<void> {\n  for (const toggle of interactionFeatureToggles) {\n    const existing = await em.findOne(FeatureToggle, { identifier: toggle.identifier, deletedAt: null })\n    if (existing) continue\n    const entity = em.create(FeatureToggle, {\n      identifier: toggle.identifier,\n      name: toggle.name,\n      description: toggle.description,\n      category: toggle.category,\n      type: toggle.type,\n      defaultValue: toggle.defaultValue,\n    })\n    em.persist(entity)\n  }\n  await em.flush()\n}\n\nexport const setup: ModuleSetupConfig = {\n  seedDefaults: async (ctx) => {\n    const scope = { tenantId: ctx.tenantId, organizationId: ctx.organizationId }\n    await seedCustomerDictionaries(ctx.em, scope)\n    await seedCurrencyDictionary(ctx.em, scope)\n    await seedDefaultPipeline(ctx.em, scope)\n    await ensureCustomerCustomFieldDefinitions(ctx.em, ctx.tenantId)\n    await seedInteractionFeatureToggles(ctx.em)\n    for (const entry of DEFAULT_CUSTOMER_ROLE_TYPES) {\n      await ensureDictionaryEntry(ctx.em, {\n        tenantId: ctx.tenantId,\n        organizationId: ctx.organizationId,\n        kind: 'customer_role_type',\n        value: entry.value,\n        label: entry.label,\n        color: entry.color,\n        icon: entry.icon,\n      })\n    }\n  },\n\n  seedExamples: async (ctx) => {\n    const scope = { tenantId: ctx.tenantId, organizationId: ctx.organizationId }\n    await seedCustomerExamples(ctx.em, ctx.container, scope)\n  },\n\n  defaultRoleFeatures: {\n    admin: [\n      'customers.*',\n    ],\n    employee: [\n      'customers.people.view',\n      'customers.people.manage',\n      'customers.companies.view',\n      'customers.companies.manage',\n      'customers.deals.view',\n      'customers.deals.manage',\n      'customers.activities.view',\n      'customers.activities.manage',\n      'customers.pipelines.view',\n      'customers.interactions.view',\n      'customers.widgets.todos',\n      'customers.widgets.next-interactions',\n      'customers.widgets.new-customers',\n      'customers.widgets.new-deals',\n      'customers.roles.view',\n      'customers.roles.manage',\n      'customers.email.compose',\n    ],\n  },\n}\n\nexport default setup\n"],
+  "mappings": "AAEA,SAAS,qBAAqB;AAC9B;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,6BAA6B;AACtC,SAAS,mCAAmC;AAE5C,MAAM,4BAA4B;AAAA,EAChC;AAAA,IACE,YAAY;AAAA,IACZ,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,IACV,MAAM;AAAA,IACN,cAAc;AAAA,EAChB;AAAA,EACA;AAAA,IACE,YAAY;AAAA,IACZ,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,IACV,MAAM;AAAA,IACN,cAAc;AAAA,EAChB;AAAA,EACA;AAAA,IACE,YAAY;AAAA,IACZ,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,IACV,MAAM;AAAA,IACN,cAAc;AAAA,EAChB;AACF;AAEA,eAAe,8BAA8B,IAAkC;AAC7E,aAAW,UAAU,2BAA2B;AAC9C,UAAM,WAAW,MAAM,GAAG,QAAQ,eAAe,EAAE,YAAY,OAAO,YAAY,WAAW,KAAK,CAAC;AACnG,QAAI,SAAU;AACd,UAAM,SAAS,GAAG,OAAO,eAAe;AAAA,MACtC,YAAY,OAAO;AAAA,MACnB,MAAM,OAAO;AAAA,MACb,aAAa,OAAO;AAAA,MACpB,UAAU,OAAO;AAAA,MACjB,MAAM,OAAO;AAAA,MACb,cAAc,OAAO;AAAA,IACvB,CAAC;AACD,OAAG,QAAQ,MAAM;AAAA,EACnB;AACA,QAAM,GAAG,MAAM;AACjB;AAEO,MAAM,QAA2B;AAAA,EACtC,cAAc,OAAO,QAAQ;AAC3B,UAAM,QAAQ,EAAE,UAAU,IAAI,UAAU,gBAAgB,IAAI,eAAe;AAC3E,UAAM,yBAAyB,IAAI,IAAI,KAAK;AAC5C,UAAM,uBAAuB,IAAI,IAAI,KAAK;AAC1C,UAAM,oBAAoB,IAAI,IAAI,KAAK;AACvC,UAAM,qCAAqC,IAAI,IAAI,IAAI,QAAQ;AAC/D,UAAM,8BAA8B,IAAI,EAAE;AAC1C,eAAW,SAAS,6BAA6B;AAC/C,YAAM,sBAAsB,IAAI,IAAI;AAAA,QAClC,UAAU,IAAI;AAAA,QACd,gBAAgB,IAAI;AAAA,QACpB,MAAM;AAAA,QACN,OAAO,MAAM;AAAA,QACb,OAAO,MAAM;AAAA,QACb,OAAO,MAAM;AAAA,QACb,MAAM,MAAM;AAAA,MACd,CAAC;AAAA,IACH;AAAA,EACF;AAAA,EAEA,cAAc,OAAO,QAAQ;AAC3B,UAAM,QAAQ,EAAE,UAAU,IAAI,UAAU,gBAAgB,IAAI,eAAe;AAC3E,UAAM,qBAAqB,IAAI,IAAI,IAAI,WAAW,KAAK;AAAA,EACzD;AAAA,EAEA,qBAAqB;AAAA,IACnB,OAAO;AAAA,MACL;AAAA,IACF;AAAA,IACA,UAAU;AAAA,MACR;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AACF;AAEA,IAAO,gBAAQ;",
   "names": []
 }

package/dist/modules/customers/subscribers/link-channel-message-received.js

@@ -0,0 +1,12 @@
+import linkChannelMessageHandler from "../lib/link-channel-message-handler.js";
+const metadata = {
+  event: "communication_channels.message.received",
+  persistent: true,
+  id: "customers:link-channel-message-received"
+};
+var link_channel_message_received_default = linkChannelMessageHandler;
+export {
+  link_channel_message_received_default as default,
+  metadata
+};
+//# sourceMappingURL=link-channel-message-received.js.map

package/dist/modules/customers/subscribers/link-channel-message-received.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/customers/subscribers/link-channel-message-received.ts"],
+  "sourcesContent": ["/**\n * Persistent subscriber for `communication_channels.message.received`.\n *\n * When an inbound email arrives, resolves People by address from the linked\n * MessageChannelLink and creates CustomerInteraction rows (one per match).\n * Falls back to threading-inheritance (In-Reply-To chain) when no direct\n * address match is found.\n *\n * Logic lives in `../lib/link-channel-message-handler.ts`; both this file\n * and `link-channel-message-sent.ts` delegate there so the two subscriber\n * registrations can share a single implementation.\n */\nimport linkChannelMessageHandler from '../lib/link-channel-message-handler'\n\nexport const metadata = {\n  event: 'communication_channels.message.received',\n  persistent: true,\n  id: 'customers:link-channel-message-received',\n}\n\nexport default linkChannelMessageHandler\n"],
+  "mappings": "AAYA,OAAO,+BAA+B;AAE/B,MAAM,WAAW;AAAA,EACtB,OAAO;AAAA,EACP,YAAY;AAAA,EACZ,IAAI;AACN;AAEA,IAAO,wCAAQ;",
+  "names": []
+}

package/dist/modules/customers/subscribers/link-channel-message-sent.js

@@ -0,0 +1,12 @@
+import linkChannelMessageHandler from "../lib/link-channel-message-handler.js";
+const metadata = {
+  event: "communication_channels.message.sent",
+  persistent: true,
+  id: "customers:link-channel-message-sent"
+};
+var link_channel_message_sent_default = linkChannelMessageHandler;
+export {
+  link_channel_message_sent_default as default,
+  metadata
+};
+//# sourceMappingURL=link-channel-message-sent.js.map

package/dist/modules/customers/subscribers/link-channel-message-sent.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/customers/subscribers/link-channel-message-sent.ts"],
+  "sourcesContent": ["/**\n * Persistent subscriber for `communication_channels.message.sent`.\n *\n * When an outbound email is delivered, resolves People by address (or by the\n * `crmPersonId` hint written by the compose route) and creates CustomerInteraction\n * rows. Reads `crmVisibility` from `channelMetadata` to set the per-row\n * visibility ('private' | 'shared').\n *\n * Logic lives in `../lib/link-channel-message-handler.ts`; both this file\n * and `link-channel-message-received.ts` delegate there so the two subscriber\n * registrations can share a single implementation.\n */\nimport linkChannelMessageHandler from '../lib/link-channel-message-handler'\n\nexport const metadata = {\n  event: 'communication_channels.message.sent',\n  persistent: true,\n  id: 'customers:link-channel-message-sent',\n}\n\nexport default linkChannelMessageHandler\n"],
+  "mappings": "AAYA,OAAO,+BAA+B;AAE/B,MAAM,WAAW;AAAA,EACtB,OAAO;AAAA,EACP,YAAY;AAAA,EACZ,IAAI;AACN;AAEA,IAAO,oCAAQ;",
+  "names": []
+}

package/dist/modules/integrations/data/entities.js

@@ -81,6 +81,9 @@ __decorateClass([
 __decorateClass([
   Property({ name: "tenant_id", type: "uuid" })
 ], IntegrationCredentials.prototype, "tenantId", 2);
+__decorateClass([
+  Property({ name: "user_id", type: "uuid", nullable: true })
+], IntegrationCredentials.prototype, "userId", 2);
 __decorateClass([
   Property({ name: "created_at", type: Date, onCreate: () => /* @__PURE__ */ new Date() })
 ], IntegrationCredentials.prototype, "createdAt", 2);
@@ -92,7 +95,11 @@ __decorateClass([
 ], IntegrationCredentials.prototype, "deletedAt", 2);
 IntegrationCredentials = __decorateClass([
   Entity({ tableName: "integration_credentials" }),
-  Index({ properties: ["integrationId", "organizationId", "tenantId"] })
+  Index({ properties: ["integrationId", "organizationId", "tenantId"] }),
+  Index({
+    name: "integration_credentials_user_lookup_idx",
+    expression: `create unique index "integration_credentials_user_lookup_idx" on "integration_credentials" ("integration_id", "organization_id", "tenant_id", "user_id") where "user_id" is not null and "deleted_at" is null`
+  })
 ], IntegrationCredentials);
 OptionalProps;
 let IntegrationState = class {

package/dist/modules/integrations/data/entities.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/integrations/data/entities.ts"],
-  "sourcesContent": ["import { OptionalProps } from '@mikro-orm/core'\nimport { Entity, Index, PrimaryKey, Property } from '@mikro-orm/decorators/legacy'\n\n@Entity({ tableName: 'sync_external_id_mappings' })\n@Index({ properties: ['internalEntityType', 'internalEntityId', 'organizationId'] })\n@Index({ properties: ['integrationId', 'externalId', 'organizationId'] })\nexport class SyncExternalIdMapping {\n  [OptionalProps]?: 'syncStatus' | 'lastSyncedAt' | 'createdAt' | 'updatedAt' | 'deletedAt'\n  @PrimaryKey({ type: 'uuid', defaultRaw: 'gen_random_uuid()' })\n  id!: string\n\n  @Property({ name: 'integration_id', type: 'text' })\n  integrationId!: string\n\n  @Property({ name: 'internal_entity_type', type: 'text' })\n  internalEntityType!: string\n\n  @Property({ name: 'internal_entity_id', type: 'uuid' })\n  internalEntityId!: string\n\n  @Property({ name: 'external_id', type: 'text' })\n  externalId!: string\n\n  @Property({ name: 'sync_status', type: 'text', default: 'not_synced' })\n  syncStatus: 'synced' | 'pending' | 'error' | 'not_synced' = 'not_synced'\n\n  @Property({ name: 'last_synced_at', type: Date, nullable: true })\n  lastSyncedAt?: Date | null\n\n  @Property({ name: 'organization_id', type: 'uuid' })\n  organizationId!: string\n\n  @Property({ name: 'tenant_id', type: 'uuid' })\n  tenantId!: string\n\n  @Property({ name: 'created_at', type: Date, onCreate: () => new Date() })\n  createdAt: Date = new Date()\n\n  @Property({ name: 'updated_at', type: Date, onUpdate: () => new Date() })\n  updatedAt: Date = new Date()\n\n  @Property({ name: 'deleted_at', type: Date, nullable: true })\n  deletedAt?: Date | null\n}\n\n@Entity({ tableName: 'integration_credentials' })\n@Index({ properties: ['integrationId', 'organizationId', 'tenantId'] })\nexport class IntegrationCredentials {\n  [OptionalProps]?: 'createdAt' | 'updatedAt' | 'deletedAt'\n  @PrimaryKey({ type: 'uuid', defaultRaw: 'gen_random_uuid()' })\n  id!: string\n\n  @Property({ name: 'integration_id', type: 'text' })\n  integrationId!: string\n\n  @Property({ name: 'credentials', type: 'json' })\n  credentials!: Record<string, unknown>\n\n  @Property({ name: 'organization_id', type: 'uuid' })\n  organizationId!: string\n\n  @Property({ name: 'tenant_id', type: 'uuid' })\n  tenantId!: string\n\n  @Property({ name: 'created_at', type: Date, onCreate: () => new Date() })\n  createdAt: Date = new Date()\n\n  @Property({ name: 'updated_at', type: Date, onUpdate: () => new Date() })\n  updatedAt: Date = new Date()\n\n  @Property({ name: 'deleted_at', type: Date, nullable: true })\n  deletedAt?: Date | null\n}\n\n@Entity({ tableName: 'integration_states' })\n@Index({ properties: ['integrationId', 'organizationId', 'tenantId'] })\nexport class IntegrationState {\n  [OptionalProps]?: 'isEnabled' | 'apiVersion' | 'reauthRequired' | 'lastHealthStatus' | 'lastHealthCheckedAt' | 'lastHealthLatencyMs' | 'enabledAt' | 'createdAt' | 'updatedAt' | 'deletedAt'\n  @PrimaryKey({ type: 'uuid', defaultRaw: 'gen_random_uuid()' })\n  id!: string\n\n  @Property({ name: 'integration_id', type: 'text' })\n  integrationId!: string\n\n  @Property({ name: 'is_enabled', type: 'boolean', default: true })\n  isEnabled: boolean = true\n\n  @Property({ name: 'api_version', type: 'text', nullable: true })\n  apiVersion?: string | null\n\n  @Property({ name: 'reauth_required', type: 'boolean', default: false })\n  reauthRequired: boolean = false\n\n  @Property({ name: 'last_health_status', type: 'text', nullable: true })\n  lastHealthStatus?: 'healthy' | 'degraded' | 'unhealthy' | null\n\n  @Property({ name: 'last_health_checked_at', type: Date, nullable: true })\n  lastHealthCheckedAt?: Date | null\n\n  @Property({ name: 'last_health_latency_ms', type: 'int', nullable: true })\n  lastHealthLatencyMs?: number | null\n\n  @Property({ name: 'enabled_at', type: Date, nullable: true })\n  enabledAt?: Date | null\n\n  @Property({ name: 'organization_id', type: 'uuid' })\n  organizationId!: string\n\n  @Property({ name: 'tenant_id', type: 'uuid' })\n  tenantId!: string\n\n  @Property({ name: 'created_at', type: Date, onCreate: () => new Date() })\n  createdAt: Date = new Date()\n\n  @Property({ name: 'updated_at', type: Date, onUpdate: () => new Date() })\n  updatedAt: Date = new Date()\n\n  @Property({ name: 'deleted_at', type: Date, nullable: true })\n  deletedAt?: Date | null\n}\n\n@Entity({ tableName: 'integration_logs' })\n@Index({ properties: ['integrationId', 'organizationId', 'tenantId', 'createdAt'] })\n@Index({ properties: ['level', 'organizationId', 'tenantId', 'createdAt'] })\nexport class IntegrationLog {\n  [OptionalProps]?: 'runId' | 'scopeEntityType' | 'scopeEntityId' | 'code' | 'payload' | 'createdAt'\n  @PrimaryKey({ type: 'uuid', defaultRaw: 'gen_random_uuid()' })\n  id!: string\n\n  @Property({ name: 'integration_id', type: 'text' })\n  integrationId!: string\n\n  @Property({ name: 'run_id', type: 'uuid', nullable: true })\n  runId?: string | null\n\n  @Property({ name: 'scope_entity_type', type: 'text', nullable: true })\n  scopeEntityType?: string | null\n\n  @Property({ name: 'scope_entity_id', type: 'uuid', nullable: true })\n  scopeEntityId?: string | null\n\n  @Property({ name: 'level', type: 'text' })\n  level!: 'info' | 'warn' | 'error'\n\n  @Property({ name: 'message', type: 'text' })\n  message!: string\n\n  @Property({ name: 'code', type: 'text', nullable: true })\n  code?: string | null\n\n  @Property({ name: 'payload', type: 'json', nullable: true })\n  payload?: Record<string, unknown> | null\n\n  @Property({ name: 'organization_id', type: 'uuid' })\n  organizationId!: string\n\n  @Property({ name: 'tenant_id', type: 'uuid' })\n  tenantId!: string\n\n  @Property({ name: 'created_at', type: Date, onCreate: () => new Date() })\n  createdAt: Date = new Date()\n}\n"],
-  "mappings": ";;;;;;;;;;AAAA,SAAS,qBAAqB;AAC9B,SAAS,QAAQ,OAAO,YAAY,gBAAgB;AAMjD;AADI,IAAM,wBAAN,MAA4B;AAAA,EAA5B;AAkBL,sBAA4D;AAY5D,qBAAkB,oBAAI,KAAK;AAG3B,qBAAkB,oBAAI,KAAK;AAAA;AAI7B;AAlCE;AAAA,EADC,WAAW,EAAE,MAAM,QAAQ,YAAY,oBAAoB,CAAC;AAAA,GAFlD,sBAGX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,kBAAkB,MAAM,OAAO,CAAC;AAAA,GALvC,sBAMX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,wBAAwB,MAAM,OAAO,CAAC;AAAA,GAR7C,sBASX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,sBAAsB,MAAM,OAAO,CAAC;AAAA,GAX3C,sBAYX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,eAAe,MAAM,OAAO,CAAC;AAAA,GAdpC,sBAeX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,eAAe,MAAM,QAAQ,SAAS,aAAa,CAAC;AAAA,GAjB3D,sBAkBX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,kBAAkB,MAAM,MAAM,UAAU,KAAK,CAAC;AAAA,GApBrD,sBAqBX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,mBAAmB,MAAM,OAAO,CAAC;AAAA,GAvBxC,sBAwBX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,aAAa,MAAM,OAAO,CAAC;AAAA,GA1BlC,sBA2BX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,MAAM,UAAU,MAAM,oBAAI,KAAK,EAAE,CAAC;AAAA,GA7B7D,sBA8BX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,MAAM,UAAU,MAAM,oBAAI,KAAK,EAAE,CAAC;AAAA,GAhC7D,sBAiCX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,MAAM,UAAU,KAAK,CAAC;AAAA,GAnCjD,sBAoCX;AApCW,wBAAN;AAAA,EAHN,OAAO,EAAE,WAAW,4BAA4B,CAAC;AAAA,EACjD,MAAM,EAAE,YAAY,CAAC,sBAAsB,oBAAoB,gBAAgB,EAAE,CAAC;AAAA,EAClF,MAAM,EAAE,YAAY,CAAC,iBAAiB,cAAc,gBAAgB,EAAE,CAAC;AAAA,GAC3D;AA0CV;AADI,IAAM,yBAAN,MAA6B;AAAA,EAA7B;AAkBL,qBAAkB,oBAAI,KAAK;AAG3B,qBAAkB,oBAAI,KAAK;AAAA;AAI7B;AAtBE;AAAA,EADC,WAAW,EAAE,MAAM,QAAQ,YAAY,oBAAoB,CAAC;AAAA,GAFlD,uBAGX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,kBAAkB,MAAM,OAAO,CAAC;AAAA,GALvC,uBAMX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,eAAe,MAAM,OAAO,CAAC;AAAA,GARpC,uBASX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,mBAAmB,MAAM,OAAO,CAAC;AAAA,GAXxC,uBAYX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,aAAa,MAAM,OAAO,CAAC;AAAA,GAdlC,uBAeX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,MAAM,UAAU,MAAM,oBAAI,KAAK,EAAE,CAAC;AAAA,GAjB7D,uBAkBX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,MAAM,UAAU,MAAM,oBAAI,KAAK,EAAE,CAAC;AAAA,GApB7D,uBAqBX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,MAAM,UAAU,KAAK,CAAC;AAAA,GAvBjD,uBAwBX;AAxBW,yBAAN;AAAA,EAFN,OAAO,EAAE,WAAW,0BAA0B,CAAC;AAAA,EAC/C,MAAM,EAAE,YAAY,CAAC,iBAAiB,kBAAkB,UAAU,EAAE,CAAC;AAAA,GACzD;AA8BV;AADI,IAAM,mBAAN,MAAuB;AAAA,EAAvB;AASL,qBAAqB;AAMrB,0BAA0B;AAqB1B,qBAAkB,oBAAI,KAAK;AAG3B,qBAAkB,oBAAI,KAAK;AAAA;AAI7B;AAxCE;AAAA,EADC,WAAW,EAAE,MAAM,QAAQ,YAAY,oBAAoB,CAAC;AAAA,GAFlD,iBAGX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,kBAAkB,MAAM,OAAO,CAAC;AAAA,GALvC,iBAMX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,WAAW,SAAS,KAAK,CAAC;AAAA,GARrD,iBASX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,eAAe,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GAXpD,iBAYX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,mBAAmB,MAAM,WAAW,SAAS,MAAM,CAAC;AAAA,GAd3D,iBAeX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,sBAAsB,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GAjB3D,iBAkBX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,0BAA0B,MAAM,MAAM,UAAU,KAAK,CAAC;AAAA,GApB7D,iBAqBX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,0BAA0B,MAAM,OAAO,UAAU,KAAK,CAAC;AAAA,GAvB9D,iBAwBX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,MAAM,UAAU,KAAK,CAAC;AAAA,GA1BjD,iBA2BX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,mBAAmB,MAAM,OAAO,CAAC;AAAA,GA7BxC,iBA8BX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,aAAa,MAAM,OAAO,CAAC;AAAA,GAhClC,iBAiCX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,MAAM,UAAU,MAAM,oBAAI,KAAK,EAAE,CAAC;AAAA,GAnC7D,iBAoCX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,MAAM,UAAU,MAAM,oBAAI,KAAK,EAAE,CAAC;AAAA,GAtC7D,iBAuCX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,MAAM,UAAU,KAAK,CAAC;AAAA,GAzCjD,iBA0CX;AA1CW,mBAAN;AAAA,EAFN,OAAO,EAAE,WAAW,qBAAqB,CAAC;AAAA,EAC1C,MAAM,EAAE,YAAY,CAAC,iBAAiB,kBAAkB,UAAU,EAAE,CAAC;AAAA,GACzD;AAiDV;AADI,IAAM,iBAAN,MAAqB;AAAA,EAArB;AAoCL,qBAAkB,oBAAI,KAAK;AAAA;AAC7B;AAlCE;AAAA,EADC,WAAW,EAAE,MAAM,QAAQ,YAAY,oBAAoB,CAAC;AAAA,GAFlD,eAGX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,kBAAkB,MAAM,OAAO,CAAC;AAAA,GALvC,eAMX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,UAAU,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GAR/C,eASX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,qBAAqB,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GAX1D,eAYX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,mBAAmB,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GAdxD,eAeX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,SAAS,MAAM,OAAO,CAAC;AAAA,GAjB9B,eAkBX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,WAAW,MAAM,OAAO,CAAC;AAAA,GApBhC,eAqBX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,QAAQ,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GAvB7C,eAwBX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,WAAW,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GA1BhD,eA2BX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,mBAAmB,MAAM,OAAO,CAAC;AAAA,GA7BxC,eA8BX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,aAAa,MAAM,OAAO,CAAC;AAAA,GAhClC,eAiCX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,MAAM,UAAU,MAAM,oBAAI,KAAK,EAAE,CAAC;AAAA,GAnC7D,eAoCX;AApCW,iBAAN;AAAA,EAHN,OAAO,EAAE,WAAW,mBAAmB,CAAC;AAAA,EACxC,MAAM,EAAE,YAAY,CAAC,iBAAiB,kBAAkB,YAAY,WAAW,EAAE,CAAC;AAAA,EAClF,MAAM,EAAE,YAAY,CAAC,SAAS,kBAAkB,YAAY,WAAW,EAAE,CAAC;AAAA,GAC9D;",
+  "sourcesContent": ["import { OptionalProps } from '@mikro-orm/core'\nimport { Entity, Index, PrimaryKey, Property } from '@mikro-orm/decorators/legacy'\n\n@Entity({ tableName: 'sync_external_id_mappings' })\n@Index({ properties: ['internalEntityType', 'internalEntityId', 'organizationId'] })\n@Index({ properties: ['integrationId', 'externalId', 'organizationId'] })\nexport class SyncExternalIdMapping {\n  [OptionalProps]?: 'syncStatus' | 'lastSyncedAt' | 'createdAt' | 'updatedAt' | 'deletedAt'\n  @PrimaryKey({ type: 'uuid', defaultRaw: 'gen_random_uuid()' })\n  id!: string\n\n  @Property({ name: 'integration_id', type: 'text' })\n  integrationId!: string\n\n  @Property({ name: 'internal_entity_type', type: 'text' })\n  internalEntityType!: string\n\n  @Property({ name: 'internal_entity_id', type: 'uuid' })\n  internalEntityId!: string\n\n  @Property({ name: 'external_id', type: 'text' })\n  externalId!: string\n\n  @Property({ name: 'sync_status', type: 'text', default: 'not_synced' })\n  syncStatus: 'synced' | 'pending' | 'error' | 'not_synced' = 'not_synced'\n\n  @Property({ name: 'last_synced_at', type: Date, nullable: true })\n  lastSyncedAt?: Date | null\n\n  @Property({ name: 'organization_id', type: 'uuid' })\n  organizationId!: string\n\n  @Property({ name: 'tenant_id', type: 'uuid' })\n  tenantId!: string\n\n  @Property({ name: 'created_at', type: Date, onCreate: () => new Date() })\n  createdAt: Date = new Date()\n\n  @Property({ name: 'updated_at', type: Date, onUpdate: () => new Date() })\n  updatedAt: Date = new Date()\n\n  @Property({ name: 'deleted_at', type: Date, nullable: true })\n  deletedAt?: Date | null\n}\n\n@Entity({ tableName: 'integration_credentials' })\n@Index({ properties: ['integrationId', 'organizationId', 'tenantId'] })\n@Index({\n  name: 'integration_credentials_user_lookup_idx',\n  expression:\n    `create unique index \"integration_credentials_user_lookup_idx\" on \"integration_credentials\" (\"integration_id\", \"organization_id\", \"tenant_id\", \"user_id\") where \"user_id\" is not null and \"deleted_at\" is null`,\n})\nexport class IntegrationCredentials {\n  [OptionalProps]?: 'createdAt' | 'updatedAt' | 'deletedAt' | 'userId'\n  @PrimaryKey({ type: 'uuid', defaultRaw: 'gen_random_uuid()' })\n  id!: string\n\n  @Property({ name: 'integration_id', type: 'text' })\n  integrationId!: string\n\n  @Property({ name: 'credentials', type: 'json' })\n  credentials!: Record<string, unknown>\n\n  @Property({ name: 'organization_id', type: 'uuid' })\n  organizationId!: string\n\n  @Property({ name: 'tenant_id', type: 'uuid' })\n  tenantId!: string\n\n  /**\n   * Per-user secret scoping (additive \u2014 added by the email integration spec).\n   *\n   * NULL = tenant-wide secret (existing behaviour, e.g. shared WhatsApp Business token).\n   * Set  = per-user secret (e.g. Jane's personal Gmail OAuth refresh token).\n   *\n   * Cross-module link to `auth:user` is declared in\n   * `packages/core/src/modules/communication_channels/data/extensions.ts` via\n   * `EntityExtension` \u2014 no raw FOREIGN KEY constraint (root `AGENTS.md` rule:\n   * \"No direct ORM relationships between modules\"). App-layer query callers\n   * MUST scope by `user_id` on every per-user credential read.\n   */\n  @Property({ name: 'user_id', type: 'uuid', nullable: true })\n  userId?: string | null\n\n  @Property({ name: 'created_at', type: Date, onCreate: () => new Date() })\n  createdAt: Date = new Date()\n\n  @Property({ name: 'updated_at', type: Date, onUpdate: () => new Date() })\n  updatedAt: Date = new Date()\n\n  @Property({ name: 'deleted_at', type: Date, nullable: true })\n  deletedAt?: Date | null\n}\n\n@Entity({ tableName: 'integration_states' })\n@Index({ properties: ['integrationId', 'organizationId', 'tenantId'] })\nexport class IntegrationState {\n  [OptionalProps]?: 'isEnabled' | 'apiVersion' | 'reauthRequired' | 'lastHealthStatus' | 'lastHealthCheckedAt' | 'lastHealthLatencyMs' | 'enabledAt' | 'createdAt' | 'updatedAt' | 'deletedAt'\n  @PrimaryKey({ type: 'uuid', defaultRaw: 'gen_random_uuid()' })\n  id!: string\n\n  @Property({ name: 'integration_id', type: 'text' })\n  integrationId!: string\n\n  @Property({ name: 'is_enabled', type: 'boolean', default: true })\n  isEnabled: boolean = true\n\n  @Property({ name: 'api_version', type: 'text', nullable: true })\n  apiVersion?: string | null\n\n  @Property({ name: 'reauth_required', type: 'boolean', default: false })\n  reauthRequired: boolean = false\n\n  @Property({ name: 'last_health_status', type: 'text', nullable: true })\n  lastHealthStatus?: 'healthy' | 'degraded' | 'unhealthy' | null\n\n  @Property({ name: 'last_health_checked_at', type: Date, nullable: true })\n  lastHealthCheckedAt?: Date | null\n\n  @Property({ name: 'last_health_latency_ms', type: 'int', nullable: true })\n  lastHealthLatencyMs?: number | null\n\n  @Property({ name: 'enabled_at', type: Date, nullable: true })\n  enabledAt?: Date | null\n\n  @Property({ name: 'organization_id', type: 'uuid' })\n  organizationId!: string\n\n  @Property({ name: 'tenant_id', type: 'uuid' })\n  tenantId!: string\n\n  @Property({ name: 'created_at', type: Date, onCreate: () => new Date() })\n  createdAt: Date = new Date()\n\n  @Property({ name: 'updated_at', type: Date, onUpdate: () => new Date() })\n  updatedAt: Date = new Date()\n\n  @Property({ name: 'deleted_at', type: Date, nullable: true })\n  deletedAt?: Date | null\n}\n\n@Entity({ tableName: 'integration_logs' })\n@Index({ properties: ['integrationId', 'organizationId', 'tenantId', 'createdAt'] })\n@Index({ properties: ['level', 'organizationId', 'tenantId', 'createdAt'] })\nexport class IntegrationLog {\n  [OptionalProps]?: 'runId' | 'scopeEntityType' | 'scopeEntityId' | 'code' | 'payload' | 'createdAt'\n  @PrimaryKey({ type: 'uuid', defaultRaw: 'gen_random_uuid()' })\n  id!: string\n\n  @Property({ name: 'integration_id', type: 'text' })\n  integrationId!: string\n\n  @Property({ name: 'run_id', type: 'uuid', nullable: true })\n  runId?: string | null\n\n  @Property({ name: 'scope_entity_type', type: 'text', nullable: true })\n  scopeEntityType?: string | null\n\n  @Property({ name: 'scope_entity_id', type: 'uuid', nullable: true })\n  scopeEntityId?: string | null\n\n  @Property({ name: 'level', type: 'text' })\n  level!: 'info' | 'warn' | 'error'\n\n  @Property({ name: 'message', type: 'text' })\n  message!: string\n\n  @Property({ name: 'code', type: 'text', nullable: true })\n  code?: string | null\n\n  @Property({ name: 'payload', type: 'json', nullable: true })\n  payload?: Record<string, unknown> | null\n\n  @Property({ name: 'organization_id', type: 'uuid' })\n  organizationId!: string\n\n  @Property({ name: 'tenant_id', type: 'uuid' })\n  tenantId!: string\n\n  @Property({ name: 'created_at', type: Date, onCreate: () => new Date() })\n  createdAt: Date = new Date()\n}\n"],
+  "mappings": ";;;;;;;;;;AAAA,SAAS,qBAAqB;AAC9B,SAAS,QAAQ,OAAO,YAAY,gBAAgB;AAMjD;AADI,IAAM,wBAAN,MAA4B;AAAA,EAA5B;AAkBL,sBAA4D;AAY5D,qBAAkB,oBAAI,KAAK;AAG3B,qBAAkB,oBAAI,KAAK;AAAA;AAI7B;AAlCE;AAAA,EADC,WAAW,EAAE,MAAM,QAAQ,YAAY,oBAAoB,CAAC;AAAA,GAFlD,sBAGX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,kBAAkB,MAAM,OAAO,CAAC;AAAA,GALvC,sBAMX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,wBAAwB,MAAM,OAAO,CAAC;AAAA,GAR7C,sBASX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,sBAAsB,MAAM,OAAO,CAAC;AAAA,GAX3C,sBAYX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,eAAe,MAAM,OAAO,CAAC;AAAA,GAdpC,sBAeX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,eAAe,MAAM,QAAQ,SAAS,aAAa,CAAC;AAAA,GAjB3D,sBAkBX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,kBAAkB,MAAM,MAAM,UAAU,KAAK,CAAC;AAAA,GApBrD,sBAqBX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,mBAAmB,MAAM,OAAO,CAAC;AAAA,GAvBxC,sBAwBX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,aAAa,MAAM,OAAO,CAAC;AAAA,GA1BlC,sBA2BX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,MAAM,UAAU,MAAM,oBAAI,KAAK,EAAE,CAAC;AAAA,GA7B7D,sBA8BX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,MAAM,UAAU,MAAM,oBAAI,KAAK,EAAE,CAAC;AAAA,GAhC7D,sBAiCX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,MAAM,UAAU,KAAK,CAAC;AAAA,GAnCjD,sBAoCX;AApCW,wBAAN;AAAA,EAHN,OAAO,EAAE,WAAW,4BAA4B,CAAC;AAAA,EACjD,MAAM,EAAE,YAAY,CAAC,sBAAsB,oBAAoB,gBAAgB,EAAE,CAAC;AAAA,EAClF,MAAM,EAAE,YAAY,CAAC,iBAAiB,cAAc,gBAAgB,EAAE,CAAC;AAAA,GAC3D;AA+CV;AADI,IAAM,yBAAN,MAA6B;AAAA,EAA7B;AAiCL,qBAAkB,oBAAI,KAAK;AAG3B,qBAAkB,oBAAI,KAAK;AAAA;AAI7B;AArCE;AAAA,EADC,WAAW,EAAE,MAAM,QAAQ,YAAY,oBAAoB,CAAC;AAAA,GAFlD,uBAGX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,kBAAkB,MAAM,OAAO,CAAC;AAAA,GALvC,uBAMX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,eAAe,MAAM,OAAO,CAAC;AAAA,GARpC,uBASX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,mBAAmB,MAAM,OAAO,CAAC;AAAA,GAXxC,uBAYX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,aAAa,MAAM,OAAO,CAAC;AAAA,GAdlC,uBAeX;AAeA;AAAA,EADC,SAAS,EAAE,MAAM,WAAW,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GA7BhD,uBA8BX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,MAAM,UAAU,MAAM,oBAAI,KAAK,EAAE,CAAC;AAAA,GAhC7D,uBAiCX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,MAAM,UAAU,MAAM,oBAAI,KAAK,EAAE,CAAC;AAAA,GAnC7D,uBAoCX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,MAAM,UAAU,KAAK,CAAC;AAAA,GAtCjD,uBAuCX;AAvCW,yBAAN;AAAA,EAPN,OAAO,EAAE,WAAW,0BAA0B,CAAC;AAAA,EAC/C,MAAM,EAAE,YAAY,CAAC,iBAAiB,kBAAkB,UAAU,EAAE,CAAC;AAAA,EACrE,MAAM;AAAA,IACL,MAAM;AAAA,IACN,YACE;AAAA,EACJ,CAAC;AAAA,GACY;AA6CV;AADI,IAAM,mBAAN,MAAuB;AAAA,EAAvB;AASL,qBAAqB;AAMrB,0BAA0B;AAqB1B,qBAAkB,oBAAI,KAAK;AAG3B,qBAAkB,oBAAI,KAAK;AAAA;AAI7B;AAxCE;AAAA,EADC,WAAW,EAAE,MAAM,QAAQ,YAAY,oBAAoB,CAAC;AAAA,GAFlD,iBAGX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,kBAAkB,MAAM,OAAO,CAAC;AAAA,GALvC,iBAMX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,WAAW,SAAS,KAAK,CAAC;AAAA,GARrD,iBASX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,eAAe,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GAXpD,iBAYX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,mBAAmB,MAAM,WAAW,SAAS,MAAM,CAAC;AAAA,GAd3D,iBAeX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,sBAAsB,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GAjB3D,iBAkBX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,0BAA0B,MAAM,MAAM,UAAU,KAAK,CAAC;AAAA,GApB7D,iBAqBX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,0BAA0B,MAAM,OAAO,UAAU,KAAK,CAAC;AAAA,GAvB9D,iBAwBX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,MAAM,UAAU,KAAK,CAAC;AAAA,GA1BjD,iBA2BX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,mBAAmB,MAAM,OAAO,CAAC;AAAA,GA7BxC,iBA8BX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,aAAa,MAAM,OAAO,CAAC;AAAA,GAhClC,iBAiCX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,MAAM,UAAU,MAAM,oBAAI,KAAK,EAAE,CAAC;AAAA,GAnC7D,iBAoCX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,MAAM,UAAU,MAAM,oBAAI,KAAK,EAAE,CAAC;AAAA,GAtC7D,iBAuCX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,MAAM,UAAU,KAAK,CAAC;AAAA,GAzCjD,iBA0CX;AA1CW,mBAAN;AAAA,EAFN,OAAO,EAAE,WAAW,qBAAqB,CAAC;AAAA,EAC1C,MAAM,EAAE,YAAY,CAAC,iBAAiB,kBAAkB,UAAU,EAAE,CAAC;AAAA,GACzD;AAiDV;AADI,IAAM,iBAAN,MAAqB;AAAA,EAArB;AAoCL,qBAAkB,oBAAI,KAAK;AAAA;AAC7B;AAlCE;AAAA,EADC,WAAW,EAAE,MAAM,QAAQ,YAAY,oBAAoB,CAAC;AAAA,GAFlD,eAGX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,kBAAkB,MAAM,OAAO,CAAC;AAAA,GALvC,eAMX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,UAAU,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GAR/C,eASX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,qBAAqB,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GAX1D,eAYX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,mBAAmB,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GAdxD,eAeX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,SAAS,MAAM,OAAO,CAAC;AAAA,GAjB9B,eAkBX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,WAAW,MAAM,OAAO,CAAC;AAAA,GApBhC,eAqBX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,QAAQ,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GAvB7C,eAwBX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,WAAW,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GA1BhD,eA2BX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,mBAAmB,MAAM,OAAO,CAAC;AAAA,GA7BxC,eA8BX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,aAAa,MAAM,OAAO,CAAC;AAAA,GAhClC,eAiCX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,MAAM,UAAU,MAAM,oBAAI,KAAK,EAAE,CAAC;AAAA,GAnC7D,eAoCX;AApCW,iBAAN;AAAA,EAHN,OAAO,EAAE,WAAW,mBAAmB,CAAC;AAAA,EACxC,MAAM,EAAE,YAAY,CAAC,iBAAiB,kBAAkB,YAAY,WAAW,EAAE,CAAC;AAAA,EAClF,MAAM,EAAE,YAAY,CAAC,SAAS,kBAAkB,YAAY,WAAW,EAAE,CAAC;AAAA,GAC9D;",
   "names": []
 }

package/dist/modules/integrations/lib/credentials-service.js

@@ -29,6 +29,20 @@ function normalizeCredentialsRecord(value) {
   const parsed = parseDecryptedFieldValue(value);
   return isRecordValue(parsed) ? parsed : {};
 }
+function buildCredentialsFilter(integrationId, scope) {
+  const base = {
+    integrationId,
+    organizationId: scope.organizationId,
+    tenantId: scope.tenantId,
+    deletedAt: null
+  };
+  if (scope.userId) {
+    base.userId = scope.userId;
+  } else {
+    base.userId = null;
+  }
+  return base;
+}
 function createCredentialsService(em) {
   const credentialsEncryptionSpec = [{ field: "credentials" }];
   async function ensureCredentialsEncryptionMap(scope) {
@@ -89,18 +103,22 @@ function createCredentialsService(em) {
   }
   return {
     async getRaw(integrationId, scope) {
-      const row = await findOneWithDecryption(
+      let row = await findOneWithDecryption(
         em,
         IntegrationCredentials,
-        {
-          integrationId,
-          organizationId: scope.organizationId,
-          tenantId: scope.tenantId,
-          deletedAt: null
-        },
+        buildCredentialsFilter(integrationId, scope),
         void 0,
         scope
       );
+      if (!row && scope.userId) {
+        row = await findOneWithDecryption(
+          em,
+          IntegrationCredentials,
+          buildCredentialsFilter(integrationId, { ...scope, userId: null }),
+          void 0,
+          scope
+        );
+      }
       if (!row) return null;
       return decryptCredentialsBlob(row.credentials, scope);
     },
@@ -117,12 +135,7 @@ function createCredentialsService(em) {
       const row = await findOneWithDecryption(
         em,
         IntegrationCredentials,
-        {
-          integrationId,
-          organizationId: scope.organizationId,
-          tenantId: scope.tenantId,
-          deletedAt: null
-        },
+        buildCredentialsFilter(integrationId, scope),
         void 0,
         scope
       );
@@ -135,7 +148,8 @@ function createCredentialsService(em) {
         integrationId,
         credentials: encryptedCredentials,
         organizationId: scope.organizationId,
-        tenantId: scope.tenantId
+        tenantId: scope.tenantId,
+        ...scope.userId ? { userId: scope.userId } : {}
       });
       await em.persist(created).flush();
     },
@@ -158,6 +172,7 @@ function createCredentialsService(em) {
 }
 export {
   CredentialsEncryptionUnavailableError,
+  buildCredentialsFilter,
   createCredentialsService,
   isCredentialsEncryptionUnavailableError
 };