@open-mercato/core 0.6.8-develop.6984.1.f0cf23f0f6 → 0.6.8-develop.6985.1.fb93574faa

package/dist/modules/communication_channels/commands/deliver-outbound-message.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/communication_channels/commands/deliver-outbound-message.ts"],
-  "sourcesContent": ["import { randomUUID } from 'node:crypto'\nimport { z } from 'zod'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport type { CommandHandler } from '@open-mercato/shared/lib/commands'\nimport { registerCommand } from '@open-mercato/shared/lib/commands'\nimport { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { emitCommunicationChannelsEvent } from '../events'\nimport { refreshCredentialsIfNeeded } from '../lib/credential-refresh'\nimport { classifyOutboundError, isReauthError } from '../lib/error-classification'\nimport {\n  buildBodyFooter,\n  buildReferencesId,\n  getOrCreateThreadToken,\n} from '../lib/thread-token'\nimport { stringOrUndefined, stripBrackets } from '../lib/email-mime'\nimport type { ChannelAdapterRegistry } from '../lib/registry'\nimport { isUniqueViolation } from '../lib/pg-errors'\nimport { Message } from '../../messages/data/entities'\nimport {\n  ChannelThreadMapping,\n  CommunicationChannel,\n  ExternalMessage,\n  MessageChannelLink,\n} from '../data/entities'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst moduleLogger = createLogger('communication_channels').child({ component: 'deliver-outbound-message' })\n\n/**\n * Sentinel \u2014 `Message.threadId` of an internal-only (no channel link) message\n * has no matching `ChannelThreadMapping`. In that case outbound delivery is a no-op.\n */\nconst NO_THREAD_MAPPING_RESULT = { status: 'no_channel_link' as const }\n\nconst deliverInputSchema = z.object({\n  messageId: z.string().uuid(),\n  scope: z.object({\n    tenantId: z.string().uuid(),\n    organizationId: z.string().uuid().nullable(),\n  }),\n  /**\n   * If true, force a credential refresh before sending \u2014 used by retry attempts\n   * after a 401 from the provider.\n   */\n  forceCredentialRefresh: z.boolean().optional(),\n})\n\nexport type DeliverOutboundMessageInput = z.infer<typeof deliverInputSchema>\n\nexport type DeliverOutboundMessageResult =\n  | { status: 'no_channel_link' }\n  | { status: 'already_delivered'; messageId: string; channelLinkId: string }\n  | {\n      status: 'delivered'\n      messageId: string\n      channelLinkId: string\n      externalMessageId: string\n      providerKey: string\n    }\n  | {\n      status: 'failed'\n      messageId: string\n      channelLinkId: string\n      providerKey: string\n      error: string\n      transient: boolean\n      /**\n       * True when the failure was a 401 / invalid_grant \u2014 the channel was\n       * flipped to `requires_reauth`. The worker uses this to attempt one\n       * forced credential refresh before giving up.\n       */\n      requiresReauth: boolean\n    }\n\nexport const COMMUNICATION_CHANNELS_DELIVER_OUTBOUND_COMMAND_ID =\n  'communication_channels.message.deliver_outbound'\n\ntype CredentialsServiceLike = {\n  resolve: (\n    integrationId: string,\n    scope: { organizationId: string; tenantId: string; userId?: string | null },\n  ) => Promise<Record<string, unknown> | null>\n  save?: (\n    integrationId: string,\n    credentials: Record<string, unknown>,\n    scope: { organizationId: string; tenantId: string; userId?: string | null },\n  ) => Promise<void>\n}\n\ntype IntegrationLogLike = {\n  log?: (entry: Record<string, unknown>) => Promise<void> | void\n  warn?: (entry: Record<string, unknown>) => Promise<void> | void\n  error?: (entry: Record<string, unknown>) => Promise<void> | void\n}\n\n/**\n * Outbound delivery command. Called from the outbound worker.\n *\n * Steps (SPEC-045d \u00A77):\n *   1. Re-fetch the Message by ID. Bail if internal-only (no ChannelThreadMapping).\n *   2. Resolve channel + adapter + credentials.\n *   3. Idempotently upsert a 'pending' MessageChannelLink (unique on `messageId`).\n *      Skip if a 'sent'/'delivered' link already exists.\n *   4. Refresh credentials when OAuth + near expiry (or when caller forces it).\n *   5. Call `adapter.convertOutbound(...)` \u2192 channel-native content.\n *   6. Call `adapter.sendMessage(...)`.\n *   7. On success: persist ExternalMessage + flip link to 'sent', emit `.message.sent`.\n *   8. On failure: flip link to 'failed' + classify error, log to integrationLog,\n *      emit `.delivery_failed`. The worker decides whether to retry based on\n *      `result.transient`.\n *\n * Idempotency: the unique constraint on `message_channel_links.message_id`\n * prevents the same Message being sent twice through the channel even if the\n * subscriber fires repeatedly. Combined with the link's lifecycle state\n * (pending \u2192 sent | failed), we get safe retries.\n */\nconst deliverOutboundMessageCommand: CommandHandler<\n  DeliverOutboundMessageInput,\n  DeliverOutboundMessageResult\n> = {\n  id: COMMUNICATION_CHANNELS_DELIVER_OUTBOUND_COMMAND_ID,\n  async execute(rawInput, ctx) {\n    const input = deliverInputSchema.parse(rawInput) as DeliverOutboundMessageInput\n    const em = (ctx.container.resolve('em') as EntityManager).fork()\n    const dscope = {\n      tenantId: input.scope.tenantId,\n      organizationId: input.scope.organizationId ?? null,\n    }\n\n    // (1) Re-fetch Message by ID \u2014 never trust the event payload shape.\n    const message = await findOneWithDecryption(\n      em,\n      Message,\n      {\n        id: input.messageId,\n        tenantId: input.scope.tenantId,\n        organizationId: input.scope.organizationId ?? null,\n        deletedAt: null,\n      },\n      undefined,\n      dscope,\n    )\n    if (!message) {\n      // Message was deleted before we got to deliver. Treat as no-op.\n      return NO_THREAD_MAPPING_RESULT\n    }\n    if (!message.threadId) {\n      // Message has no thread \u2192 no channel routing.\n      return NO_THREAD_MAPPING_RESULT\n    }\n\n    // (1 cont.) Look up the channel link via ChannelThreadMapping.threadId.\n    const mapping = await findOneWithDecryption(\n      em,\n      ChannelThreadMapping,\n      {\n        messageThreadId: message.threadId,\n        tenantId: input.scope.tenantId,\n        organizationId: input.scope.organizationId ?? null,\n      },\n      undefined,\n      dscope,\n    )\n    if (!mapping) {\n      // Internal-only message \u2014 no channel delivery needed.\n      return NO_THREAD_MAPPING_RESULT\n    }\n\n    // (2) Channel + adapter.\n    const channel = await findOneWithDecryption(\n      em,\n      CommunicationChannel,\n      {\n        id: mapping.channelId,\n        tenantId: input.scope.tenantId,\n        organizationId: input.scope.organizationId ?? null,\n        deletedAt: null,\n      },\n      undefined,\n      dscope,\n    )\n    if (!channel) {\n      throw new Error(\n        `[internal] Channel ${mapping.channelId} not found for tenant ${input.scope.tenantId} (or has been deleted)`,\n      )\n    }\n    if (!channel.isActive) {\n      throw new Error(`[internal] Channel ${mapping.channelId} is inactive; refusing to deliver outbound`)\n    }\n\n    const adapterRegistry = ctx.container.resolve('channelAdapterRegistry') as ChannelAdapterRegistry\n    const adapter = adapterRegistry.get(channel.providerKey)\n    if (!adapter) {\n      throw new Error(\n        `[internal] No ChannelAdapter registered for providerKey '${channel.providerKey}'. ` +\n          'Check that the provider package is enabled in modules.ts.',\n      )\n    }\n\n    // (3) Idempotently upsert a 'pending' MessageChannelLink.\n    let link = await findOneWithDecryption(\n      em,\n      MessageChannelLink,\n      {\n        messageId: message.id,\n        tenantId: input.scope.tenantId,\n        organizationId: input.scope.organizationId ?? null,\n      },\n      undefined,\n      dscope,\n    )\n    if (\n      link &&\n      (link.deliveryStatus === 'queued' ||\n        link.deliveryStatus === 'sent' ||\n        link.deliveryStatus === 'delivered' ||\n        link.deliveryStatus === 'read')\n    ) {\n      // Already sent (or accepted by the provider as 'queued') \u2014 short-circuit\n      // so a retried job does not re-invoke the adapter and double-send.\n      return {\n        status: 'already_delivered',\n        messageId: message.id,\n        channelLinkId: link.id,\n      }\n    }\n    if (!link) {\n      link = em.create(MessageChannelLink, {\n        messageId: message.id,\n        externalConversationId: mapping.externalConversationId,\n        providerKey: channel.providerKey,\n        channelType: channel.channelType,\n        direction: 'outbound',\n        deliveryStatus: 'pending',\n        tenantId: input.scope.tenantId,\n        organizationId: input.scope.organizationId ?? null,\n      })\n      em.persist(link)\n      try {\n        await em.flush()\n      } catch (flushErr) {\n        // Concurrency guard: the link lookup above is not atomic with this\n        // insert, so two deliveries of the same message (a replayed\n        // `messages.message.sent`, or an overlapping worker retry) can both\n        // reach here. The `message_channel_links_message_uq` index rejects the\n        // loser with a 23505. Defer to the winning job \u2014 re-read its link on a\n        // fresh fork and report `already_delivered` \u2014 instead of re-invoking the\n        // adapter (double send) or letting the raw error dead-letter the job.\n        if (isUniqueViolation(flushErr)) {\n          const winner = await findOneWithDecryption(\n            em.fork(),\n            MessageChannelLink,\n            {\n              messageId: message.id,\n              tenantId: input.scope.tenantId,\n              organizationId: input.scope.organizationId ?? null,\n            },\n            undefined,\n            dscope,\n          )\n          if (winner) {\n            return {\n              status: 'already_delivered',\n              messageId: message.id,\n              channelLinkId: winner.id,\n            }\n          }\n        }\n        throw flushErr\n      }\n    }\n\n    // (2 cont.) Decrypted credentials via the integrations module (if available).\n    let credentialsService: CredentialsServiceLike | null = null\n    try {\n      credentialsService = ctx.container.resolve(\n        'integrationCredentialsService',\n      ) as CredentialsServiceLike\n    } catch {\n      credentialsService = null\n    }\n    // Per-user credentials scope: pass `channel.userId` so the credentials\n    // service returns this user's row, not whoever connected last. See\n    // review R2-C1 / N1 (2026-05-26).\n    const credentialsScope = {\n      tenantId: input.scope.tenantId,\n      organizationId: input.scope.organizationId ?? input.scope.tenantId,\n      userId: channel.userId ?? null,\n    }\n    let credentials: Record<string, unknown> = {}\n    if (channel.credentialsRef && credentialsService) {\n      try {\n        credentials =\n          (await credentialsService.resolve(`channel_${channel.providerKey}`, credentialsScope)) ?? {}\n      } catch {\n        credentials = {}\n      }\n    }\n\n    // (4) Credential refresh if OAuth + near expiry, or forced by retry.\n    let integrationLog: IntegrationLogLike | null = null\n    try {\n      integrationLog = ctx.container.resolve('integrationLogService') as IntegrationLogLike\n    } catch {\n      integrationLog = null\n    }\n    const refreshResult = await refreshCredentialsIfNeeded(\n      {\n        adapter,\n        channelId: channel.id,\n        credentials,\n        scope: credentialsScope,\n        force: Boolean(input.forceCredentialRefresh),\n      },\n      {\n        credentialsService,\n        logger: (...args) => moduleLogger.warn('credential refresh diagnostic', { details: args }),\n      },\n    )\n    credentials = refreshResult.credentials\n\n    // (4b) Spec B \u2014 get-or-create the per-thread crypto token and inject it\n    // into the outbound payload BEFORE the adapter converts it. The token\n    // travels as both a `References` header (via channelMetadata.references)\n    // and a hidden body marker so inbound replies can be threaded back to\n    // this conversation even when the recipient's MUA strips RFC 5322\n    // headers. Idempotent on retry \u2014 same token reused per thread.\n    let threadToken: string | null = null\n    try {\n      const { token } = await getOrCreateThreadToken(em, {\n        tenantId: input.scope.tenantId,\n        organizationId: input.scope.organizationId ?? null,\n        messageThreadId: mapping.messageThreadId,\n      })\n      threadToken = token\n    } catch (tokenErr) {\n      // Token creation should never block a send \u2014 if it fails, the message\n      // still goes out, just without our thread-token attachment point.\n      // Threading falls back to the JWZ strategy via Message-Id headers.\n      moduleLogger.warn('thread token unavailable, proceeding without it', { err: tokenErr })\n    }\n\n    // (5) + (6) Convert + send.\n    try {\n      const outboundPayload = (link.channelPayload as Record<string, unknown> | null) ?? {}\n      const outboundHtml = typeof outboundPayload.html === 'string' ? outboundPayload.html : null\n      const outboundText = typeof outboundPayload.text === 'string' ? outboundPayload.text : null\n      let outboundBody = outboundHtml ?? outboundText ?? message.body ?? ''\n      const outboundBodyFormat = outboundHtml\n        ? 'html'\n        : ((message.bodyFormat as 'text' | 'markdown' | 'html') ?? 'text')\n\n      // Pre-existing channelMetadata.references (string[]) so we can extend\n      // it with the synthetic thread-token id without disturbing other refs\n      // (e.g. the recipient's own reply chain).\n      const baseMetadata = (link.channelMetadata as Record<string, unknown> | undefined) ?? {}\n      const existingRefs = Array.isArray(baseMetadata.references)\n        ? (baseMetadata.references as unknown[]).filter(\n            (value): value is string => typeof value === 'string',\n          )\n        : []\n      let mergedReferences = existingRefs\n      if (threadToken && !outboundBody.includes(`[OM:${threadToken}]`)) {\n        // Append the body footer for the corresponding format. The hidden\n        // HTML span is `display:none`; the plain-text trailer is a small\n        // bracketed marker on its own line. Both survive most reply clients.\n        const footer = buildBodyFooter(threadToken)\n        if (outboundBodyFormat === 'html') {\n          const closingBody = outboundBody.lastIndexOf('</body>')\n          outboundBody =\n            closingBody >= 0\n              ? `${outboundBody.slice(0, closingBody)}${footer.html}${outboundBody.slice(closingBody)}`\n              : `${outboundBody}${footer.html}`\n        } else {\n          outboundBody = `${outboundBody}${footer.plain}`\n        }\n        const refId = buildReferencesId(threadToken)\n        if (!mergedReferences.includes(refId)) {\n          mergedReferences = [...mergedReferences, refId]\n        }\n      }\n      const converted = await adapter.convertOutbound({\n        body: outboundBody,\n        bodyFormat: outboundBodyFormat,\n        channelMetadata: {\n          thread_id: mapping.externalThreadRef,\n          ...baseMetadata,\n          references: mergedReferences,\n          ...(threadToken ? { omThreadToken: threadToken } : {}),\n        },\n      })\n\n      // NOTE \u2014 at-least-once delivery (accepted v1 semantics). This provider\n      // send is a non-transactional external side effect. The terminal-status\n      // short-circuit above and the `message_channel_links_message_uq` index\n      // prevent duplicate link records and re-sends after a *completed*\n      // delivery, but if the process crashes in the narrow window between this\n      // call returning and the success flush below, the link stays `pending`\n      // and a worker retry re-invokes the adapter \u2014 the recipient may receive a\n      // duplicate. This is deliberate: email providers (Gmail/SMTP) expose no\n      // idempotent-send key nor a reliable \"did message X send?\" query, so\n      // re-sending is preferred over risking a dropped message.\n      const sendResult = await adapter.sendMessage({\n        conversationId: mapping.externalThreadRef,\n        content: converted.content,\n        credentials,\n        scope: {\n          tenantId: input.scope.tenantId,\n          organizationId: input.scope.organizationId ?? input.scope.tenantId,\n        },\n        metadata: converted.metadata,\n      })\n\n      if (sendResult.status === 'failed') {\n        throw new Error(sendResult.error ?? `Adapter '${adapter.providerKey}' reported send failure`)\n      }\n\n      // (7) Persist success records.\n      //\n      // Pre-generate the ExternalMessage PK client-side. The PK uses\n      // `defaultRaw: 'gen_random_uuid()'`, so `externalMessage.id` is undefined\n      // until after the INSERT returns \u2014 writing `link.externalMessageId =\n      // externalMessage.id` before the flush would silently persist NULL on the\n      // link's FK. Mirrors the inbound ingest path (ingest-inbound-message.ts).\n      const externalMessageRowId = randomUUID()\n      const externalMessage = em.create(ExternalMessage, {\n        id: externalMessageRowId,\n        channelId: channel.id,\n        conversationId: mapping.externalConversationId,\n        externalMessageId: sendResult.externalMessageId,\n        direction: 'outbound',\n        senderIdentifier: null,\n        senderDisplayName: null,\n        providerTimestamp: new Date(),\n        tenantId: input.scope.tenantId,\n        organizationId: input.scope.organizationId ?? null,\n      })\n      em.persist(externalMessage)\n\n      // A successful send proves the credentials are valid \u2014 clear any prior\n      // `requires_reauth` / `error` state so a recovered channel doesn't keep\n      // showing a stale reconnect banner (e.g. after a forced-refresh retry).\n      if (channel.status === 'requires_reauth' || channel.status === 'error') {\n        channel.status = 'connected'\n      }\n\n      link.deliveryStatus = sendResult.status === 'sent' ? 'sent' : 'queued'\n      link.externalMessageId = externalMessageRowId\n      link.channelMetadata = {\n        ...((link.channelMetadata as Record<string, unknown> | undefined) ?? {}),\n        ...(converted.metadata ?? {}),\n        externalMessageId: sendResult.externalMessageId,\n        // Always persist the RFC2822 Message-ID so inbound reply matching (JWZ\n        // strategy in lib/thread-matcher) and sent-folder dedup can resolve this\n        // outbound message. Adapters that build the message themselves (Gmail)\n        // return it in `converted.metadata.messageId`; IMAP/SMTP lets\n        // the transport mint it, surfacing it only as `sendResult.externalMessageId`\n        // (the RFC2822 id the recipient replies to) \u2014 fall back to that.\n        // Store it bracket-stripped to match the inbound convention\n        // (`normalizeMimeInbound` strips), so the JWZ matcher and sent-folder dedup \u2014\n        // which compare against stripped ids \u2014 resolve it. `assembleRfc2822`\n        // re-applies brackets when this id is later used to build reply headers.\n        messageId: stripBrackets(\n          stringOrUndefined((converted.metadata as Record<string, unknown> | undefined)?.messageId) ??\n            sendResult.externalMessageId,\n        ),\n      }\n      await em.flush()\n\n      await emitCommunicationChannelsEvent(\n        'communication_channels.message.sent',\n        {\n          messageId: message.id,\n          externalMessageId: externalMessage.id,\n          channelLinkId: link.id,\n          conversationId: mapping.externalConversationId,\n          channelId: channel.id,\n          providerKey: channel.providerKey,\n          channelType: channel.channelType,\n          direction: 'outbound',\n          tenantId: input.scope.tenantId,\n          organizationId: input.scope.organizationId ?? null,\n        },\n        { persistent: true },\n      )\n\n      return {\n        status: 'delivered',\n        messageId: message.id,\n        channelLinkId: link.id,\n        externalMessageId: externalMessage.id,\n        providerKey: channel.providerKey,\n      }\n    } catch (sendErr) {\n      // (8) Failure path \u2014 classify, persist, emit, return.\n      const classification = classifyOutboundError(sendErr)\n      const requiresReauth = isReauthError(classification)\n      link.deliveryStatus = 'failed'\n      link.channelMetadata = {\n        ...((link.channelMetadata as Record<string, unknown> | undefined) ?? {}),\n        lastError: classification.message,\n        lastErrorAt: new Date().toISOString(),\n        transient: classification.transient,\n        requiresReauth,\n      }\n      // A 401 / invalid_grant means the stored credentials are dead and no\n      // retry will help \u2014 flip the channel to `requires_reauth` (mirrors the\n      // inbound poll path) so the operator gets a reconnect signal instead of\n      // silently-failing sends. A later successful send self-heals back to\n      // `connected` (see the success path above).\n      if (requiresReauth) {\n        channel.status = 'requires_reauth'\n      }\n      await em.flush()\n\n      try {\n        await integrationLog?.error?.({\n          integrationId: `channel_${channel.providerKey}`,\n          tenantId: input.scope.tenantId,\n          organizationId: input.scope.organizationId ?? null,\n          channelId: channel.id,\n          messageId: message.id,\n          status: classification.status ?? null,\n          transient: classification.transient,\n          message: classification.message,\n        })\n      } catch {\n        // best-effort logging\n      }\n\n      if (requiresReauth) {\n        await emitCommunicationChannelsEvent(\n          'communication_channels.channel.requires_reauth',\n          {\n            channelId: channel.id,\n            providerKey: channel.providerKey,\n            channelType: channel.channelType,\n            reason: classification.message,\n            tenantId: input.scope.tenantId,\n            organizationId: input.scope.organizationId ?? null,\n          },\n          { persistent: true },\n        )\n      }\n\n      await emitCommunicationChannelsEvent(\n        'communication_channels.message.delivery_failed',\n        {\n          messageId: message.id,\n          channelLinkId: link.id,\n          conversationId: mapping.externalConversationId,\n          channelId: channel.id,\n          providerKey: channel.providerKey,\n          channelType: channel.channelType,\n          transient: classification.transient,\n          error: classification.message,\n          status: classification.status ?? null,\n          tenantId: input.scope.tenantId,\n          organizationId: input.scope.organizationId ?? null,\n        },\n        { persistent: true },\n      )\n\n      return {\n        status: 'failed',\n        messageId: message.id,\n        channelLinkId: link.id,\n        providerKey: channel.providerKey,\n        error: classification.message,\n        transient: classification.transient,\n        requiresReauth,\n      }\n    }\n  },\n}\n\nregisterCommand(deliverOutboundMessageCommand)\n\nexport default deliverOutboundMessageCommand\n"],
-  "mappings": "AAAA,SAAS,kBAAkB;AAC3B,SAAS,SAAS;AAGlB,SAAS,uBAAuB;AAChC,SAAS,6BAA6B;AACtC,SAAS,sCAAsC;AAC/C,SAAS,kCAAkC;AAC3C,SAAS,uBAAuB,qBAAqB;AACrD;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,mBAAmB,qBAAqB;AAEjD,SAAS,yBAAyB;AAClC,SAAS,eAAe;AACxB;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,oBAAoB;AAE7B,MAAM,eAAe,aAAa,wBAAwB,EAAE,MAAM,EAAE,WAAW,2BAA2B,CAAC;AAM3G,MAAM,2BAA2B,EAAE,QAAQ,kBAA2B;AAEtE,MAAM,qBAAqB,EAAE,OAAO;AAAA,EAClC,WAAW,EAAE,OAAO,EAAE,KAAK;AAAA,EAC3B,OAAO,EAAE,OAAO;AAAA,IACd,UAAU,EAAE,OAAO,EAAE,KAAK;AAAA,IAC1B,gBAAgB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EAC7C,CAAC;AAAA;AAAA;AAAA;AAAA;AAAA,EAKD,wBAAwB,EAAE,QAAQ,EAAE,SAAS;AAC/C,CAAC;AA6BM,MAAM,qDACX;AAyCF,MAAM,gCAGF;AAAA,EACF,IAAI;AAAA,EACJ,MAAM,QAAQ,UAAU,KAAK;AAC3B,UAAM,QAAQ,mBAAmB,MAAM,QAAQ;AAC/C,UAAM,KAAM,IAAI,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC/D,UAAM,SAAS;AAAA,MACb,UAAU,MAAM,MAAM;AAAA,MACtB,gBAAgB,MAAM,MAAM,kBAAkB;AAAA,IAChD;AAGA,UAAM,UAAU,MAAM;AAAA,MACpB;AAAA,MACA;AAAA,MACA;AAAA,QACE,IAAI,MAAM;AAAA,QACV,UAAU,MAAM,MAAM;AAAA,QACtB,gBAAgB,MAAM,MAAM,kBAAkB;AAAA,QAC9C,WAAW;AAAA,MACb;AAAA,MACA;AAAA,MACA;AAAA,IACF;AACA,QAAI,CAAC,SAAS;AAEZ,aAAO;AAAA,IACT;AACA,QAAI,CAAC,QAAQ,UAAU;AAErB,aAAO;AAAA,IACT;AAGA,UAAM,UAAU,MAAM;AAAA,MACpB;AAAA,MACA;AAAA,MACA;AAAA,QACE,iBAAiB,QAAQ;AAAA,QACzB,UAAU,MAAM,MAAM;AAAA,QACtB,gBAAgB,MAAM,MAAM,kBAAkB;AAAA,MAChD;AAAA,MACA;AAAA,MACA;AAAA,IACF;AACA,QAAI,CAAC,SAAS;AAEZ,aAAO;AAAA,IACT;AAGA,UAAM,UAAU,MAAM;AAAA,MACpB;AAAA,MACA;AAAA,MACA;AAAA,QACE,IAAI,QAAQ;AAAA,QACZ,UAAU,MAAM,MAAM;AAAA,QACtB,gBAAgB,MAAM,MAAM,kBAAkB;AAAA,QAC9C,WAAW;AAAA,MACb;AAAA,MACA;AAAA,MACA;AAAA,IACF;AACA,QAAI,CAAC,SAAS;AACZ,YAAM,IAAI;AAAA,QACR,sBAAsB,QAAQ,SAAS,yBAAyB,MAAM,MAAM,QAAQ;AAAA,MACtF;AAAA,IACF;AACA,QAAI,CAAC,QAAQ,UAAU;AACrB,YAAM,IAAI,MAAM,sBAAsB,QAAQ,SAAS,4CAA4C;AAAA,IACrG;AAEA,UAAM,kBAAkB,IAAI,UAAU,QAAQ,wBAAwB;AACtE,UAAM,UAAU,gBAAgB,IAAI,QAAQ,WAAW;AACvD,QAAI,CAAC,SAAS;AACZ,YAAM,IAAI;AAAA,QACR,4DAA4D,QAAQ,WAAW;AAAA,MAEjF;AAAA,IACF;AAGA,QAAI,OAAO,MAAM;AAAA,MACf;AAAA,MACA;AAAA,MACA;AAAA,QACE,WAAW,QAAQ;AAAA,QACnB,UAAU,MAAM,MAAM;AAAA,QACtB,gBAAgB,MAAM,MAAM,kBAAkB;AAAA,MAChD;AAAA,MACA;AAAA,MACA;AAAA,IACF;AACA,QACE,SACC,KAAK,mBAAmB,YACvB,KAAK,mBAAmB,UACxB,KAAK,mBAAmB,eACxB,KAAK,mBAAmB,SAC1B;AAGA,aAAO;AAAA,QACL,QAAQ;AAAA,QACR,WAAW,QAAQ;AAAA,QACnB,eAAe,KAAK;AAAA,MACtB;AAAA,IACF;AACA,QAAI,CAAC,MAAM;AACT,aAAO,GAAG,OAAO,oBAAoB;AAAA,QACnC,WAAW,QAAQ;AAAA,QACnB,wBAAwB,QAAQ;AAAA,QAChC,aAAa,QAAQ;AAAA,QACrB,aAAa,QAAQ;AAAA,QACrB,WAAW;AAAA,QACX,gBAAgB;AAAA,QAChB,UAAU,MAAM,MAAM;AAAA,QACtB,gBAAgB,MAAM,MAAM,kBAAkB;AAAA,MAChD,CAAC;AACD,SAAG,QAAQ,IAAI;AACf,UAAI;AACF,cAAM,GAAG,MAAM;AAAA,MACjB,SAAS,UAAU;AAQjB,YAAI,kBAAkB,QAAQ,GAAG;AAC/B,gBAAM,SAAS,MAAM;AAAA,YACnB,GAAG,KAAK;AAAA,YACR;AAAA,YACA;AAAA,cACE,WAAW,QAAQ;AAAA,cACnB,UAAU,MAAM,MAAM;AAAA,cACtB,gBAAgB,MAAM,MAAM,kBAAkB;AAAA,YAChD;AAAA,YACA;AAAA,YACA;AAAA,UACF;AACA,cAAI,QAAQ;AACV,mBAAO;AAAA,cACL,QAAQ;AAAA,cACR,WAAW,QAAQ;AAAA,cACnB,eAAe,OAAO;AAAA,YACxB;AAAA,UACF;AAAA,QACF;AACA,cAAM;AAAA,MACR;AAAA,IACF;AAGA,QAAI,qBAAoD;AACxD,QAAI;AACF,2BAAqB,IAAI,UAAU;AAAA,QACjC;AAAA,MACF;AAAA,IACF,QAAQ;AACN,2BAAqB;AAAA,IACvB;AAIA,UAAM,mBAAmB;AAAA,MACvB,UAAU,MAAM,MAAM;AAAA,MACtB,gBAAgB,MAAM,MAAM,kBAAkB,MAAM,MAAM;AAAA,MAC1D,QAAQ,QAAQ,UAAU;AAAA,IAC5B;AACA,QAAI,cAAuC,CAAC;AAC5C,QAAI,QAAQ,kBAAkB,oBAAoB;AAChD,UAAI;AACF,sBACG,MAAM,mBAAmB,QAAQ,WAAW,QAAQ,WAAW,IAAI,gBAAgB,KAAM,CAAC;AAAA,MAC/F,QAAQ;AACN,sBAAc,CAAC;AAAA,MACjB;AAAA,IACF;AAGA,QAAI,iBAA4C;AAChD,QAAI;AACF,uBAAiB,IAAI,UAAU,QAAQ,uBAAuB;AAAA,IAChE,QAAQ;AACN,uBAAiB;AAAA,IACnB;AACA,UAAM,gBAAgB,MAAM;AAAA,MAC1B;AAAA,QACE;AAAA,QACA,WAAW,QAAQ;AAAA,QACnB;AAAA,QACA,OAAO;AAAA,QACP,OAAO,QAAQ,MAAM,sBAAsB;AAAA,MAC7C;AAAA,MACA;AAAA,QACE;AAAA,QACA,QAAQ,IAAI,SAAS,aAAa,KAAK,iCAAiC,EAAE,SAAS,KAAK,CAAC;AAAA,MAC3F;AAAA,IACF;AACA,kBAAc,cAAc;AAQ5B,QAAI,cAA6B;AACjC,QAAI;AACF,YAAM,EAAE,MAAM,IAAI,MAAM,uBAAuB,IAAI;AAAA,QACjD,UAAU,MAAM,MAAM;AAAA,QACtB,gBAAgB,MAAM,MAAM,kBAAkB;AAAA,QAC9C,iBAAiB,QAAQ;AAAA,MAC3B,CAAC;AACD,oBAAc;AAAA,IAChB,SAAS,UAAU;AAIjB,mBAAa,KAAK,mDAAmD,EAAE,KAAK,SAAS,CAAC;AAAA,IACxF;AAGA,QAAI;AACF,YAAM,kBAAmB,KAAK,kBAAqD,CAAC;AACpF,YAAM,eAAe,OAAO,gBAAgB,SAAS,WAAW,gBAAgB,OAAO;AACvF,YAAM,eAAe,OAAO,gBAAgB,SAAS,WAAW,gBAAgB,OAAO;AACvF,UAAI,eAAe,gBAAgB,gBAAgB,QAAQ,QAAQ;AACnE,YAAM,qBAAqB,eACvB,SACE,QAAQ,cAA+C;AAK7D,YAAM,eAAgB,KAAK,mBAA2D,CAAC;AACvF,YAAM,eAAe,MAAM,QAAQ,aAAa,UAAU,IACrD,aAAa,WAAyB;AAAA,QACrC,CAAC,UAA2B,OAAO,UAAU;AAAA,MAC/C,IACA,CAAC;AACL,UAAI,mBAAmB;AACvB,UAAI,eAAe,CAAC,aAAa,SAAS,OAAO,WAAW,GAAG,GAAG;AAIhE,cAAM,SAAS,gBAAgB,WAAW;AAC1C,YAAI,uBAAuB,QAAQ;AACjC,gBAAM,cAAc,aAAa,YAAY,SAAS;AACtD,yBACE,eAAe,IACX,GAAG,aAAa,MAAM,GAAG,WAAW,CAAC,GAAG,OAAO,IAAI,GAAG,aAAa,MAAM,WAAW,CAAC,KACrF,GAAG,YAAY,GAAG,OAAO,IAAI;AAAA,QACrC,OAAO;AACL,yBAAe,GAAG,YAAY,GAAG,OAAO,KAAK;AAAA,QAC/C;AACA,cAAM,QAAQ,kBAAkB,WAAW;AAC3C,YAAI,CAAC,iBAAiB,SAAS,KAAK,GAAG;AACrC,6BAAmB,CAAC,GAAG,kBAAkB,KAAK;AAAA,QAChD;AAAA,MACF;AACA,YAAM,YAAY,MAAM,QAAQ,gBAAgB;AAAA,QAC9C,MAAM;AAAA,QACN,YAAY;AAAA,QACZ,iBAAiB;AAAA,UACf,WAAW,QAAQ;AAAA,UACnB,GAAG;AAAA,UACH,YAAY;AAAA,UACZ,GAAI,cAAc,EAAE,eAAe,YAAY,IAAI,CAAC;AAAA,QACtD;AAAA,MACF,CAAC;AAYD,YAAM,aAAa,MAAM,QAAQ,YAAY;AAAA,QAC3C,gBAAgB,QAAQ;AAAA,QACxB,SAAS,UAAU;AAAA,QACnB;AAAA,QACA,OAAO;AAAA,UACL,UAAU,MAAM,MAAM;AAAA,UACtB,gBAAgB,MAAM,MAAM,kBAAkB,MAAM,MAAM;AAAA,QAC5D;AAAA,QACA,UAAU,UAAU;AAAA,MACtB,CAAC;AAED,UAAI,WAAW,WAAW,UAAU;AAClC,cAAM,IAAI,MAAM,WAAW,SAAS,YAAY,QAAQ,WAAW,yBAAyB;AAAA,MAC9F;AASA,YAAM,uBAAuB,WAAW;AACxC,YAAM,kBAAkB,GAAG,OAAO,iBAAiB;AAAA,QACjD,IAAI;AAAA,QACJ,WAAW,QAAQ;AAAA,QACnB,gBAAgB,QAAQ;AAAA,QACxB,mBAAmB,WAAW;AAAA,QAC9B,WAAW;AAAA,QACX,kBAAkB;AAAA,QAClB,mBAAmB;AAAA,QACnB,mBAAmB,oBAAI,KAAK;AAAA,QAC5B,UAAU,MAAM,MAAM;AAAA,QACtB,gBAAgB,MAAM,MAAM,kBAAkB;AAAA,MAChD,CAAC;AACD,SAAG,QAAQ,eAAe;AAK1B,UAAI,QAAQ,WAAW,qBAAqB,QAAQ,WAAW,SAAS;AACtE,gBAAQ,SAAS;AAAA,MACnB;AAEA,WAAK,iBAAiB,WAAW,WAAW,SAAS,SAAS;AAC9D,WAAK,oBAAoB;AACzB,WAAK,kBAAkB;AAAA,QACrB,GAAK,KAAK,mBAA2D,CAAC;AAAA,QACtE,GAAI,UAAU,YAAY,CAAC;AAAA,QAC3B,mBAAmB,WAAW;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,QAW9B,WAAW;AAAA,UACT,kBAAmB,UAAU,UAAkD,SAAS,KACtF,WAAW;AAAA,QACf;AAAA,MACF;AACA,YAAM,GAAG,MAAM;AAEf,YAAM;AAAA,QACJ;AAAA,QACA;AAAA,UACE,WAAW,QAAQ;AAAA,UACnB,mBAAmB,gBAAgB;AAAA,UACnC,eAAe,KAAK;AAAA,UACpB,gBAAgB,QAAQ;AAAA,UACxB,WAAW,QAAQ;AAAA,UACnB,aAAa,QAAQ;AAAA,UACrB,aAAa,QAAQ;AAAA,UACrB,WAAW;AAAA,UACX,UAAU,MAAM,MAAM;AAAA,UACtB,gBAAgB,MAAM,MAAM,kBAAkB;AAAA,QAChD;AAAA,QACA,EAAE,YAAY,KAAK;AAAA,MACrB;AAEA,aAAO;AAAA,QACL,QAAQ;AAAA,QACR,WAAW,QAAQ;AAAA,QACnB,eAAe,KAAK;AAAA,QACpB,mBAAmB,gBAAgB;AAAA,QACnC,aAAa,QAAQ;AAAA,MACvB;AAAA,IACF,SAAS,SAAS;AAEhB,YAAM,iBAAiB,sBAAsB,OAAO;AACpD,YAAM,iBAAiB,cAAc,cAAc;AACnD,WAAK,iBAAiB;AACtB,WAAK,kBAAkB;AAAA,QACrB,GAAK,KAAK,mBAA2D,CAAC;AAAA,QACtE,WAAW,eAAe;AAAA,QAC1B,cAAa,oBAAI,KAAK,GAAE,YAAY;AAAA,QACpC,WAAW,eAAe;AAAA,QAC1B;AAAA,MACF;AAMA,UAAI,gBAAgB;AAClB,gBAAQ,SAAS;AAAA,MACnB;AACA,YAAM,GAAG,MAAM;AAEf,UAAI;AACF,cAAM,gBAAgB,QAAQ;AAAA,UAC5B,eAAe,WAAW,QAAQ,WAAW;AAAA,UAC7C,UAAU,MAAM,MAAM;AAAA,UACtB,gBAAgB,MAAM,MAAM,kBAAkB;AAAA,UAC9C,WAAW,QAAQ;AAAA,UACnB,WAAW,QAAQ;AAAA,UACnB,QAAQ,eAAe,UAAU;AAAA,UACjC,WAAW,eAAe;AAAA,UAC1B,SAAS,eAAe;AAAA,QAC1B,CAAC;AAAA,MACH,QAAQ;AAAA,MAER;AAEA,UAAI,gBAAgB;AAClB,cAAM;AAAA,UACJ;AAAA,UACA;AAAA,YACE,WAAW,QAAQ;AAAA,YACnB,aAAa,QAAQ;AAAA,YACrB,aAAa,QAAQ;AAAA,YACrB,QAAQ,eAAe;AAAA,YACvB,UAAU,MAAM,MAAM;AAAA,YACtB,gBAAgB,MAAM,MAAM,kBAAkB;AAAA,UAChD;AAAA,UACA,EAAE,YAAY,KAAK;AAAA,QACrB;AAAA,MACF;AAEA,YAAM;AAAA,QACJ;AAAA,QACA;AAAA,UACE,WAAW,QAAQ;AAAA,UACnB,eAAe,KAAK;AAAA,UACpB,gBAAgB,QAAQ;AAAA,UACxB,WAAW,QAAQ;AAAA,UACnB,aAAa,QAAQ;AAAA,UACrB,aAAa,QAAQ;AAAA,UACrB,WAAW,eAAe;AAAA,UAC1B,OAAO,eAAe;AAAA,UACtB,QAAQ,eAAe,UAAU;AAAA,UACjC,UAAU,MAAM,MAAM;AAAA,UACtB,gBAAgB,MAAM,MAAM,kBAAkB;AAAA,QAChD;AAAA,QACA,EAAE,YAAY,KAAK;AAAA,MACrB;AAEA,aAAO;AAAA,QACL,QAAQ;AAAA,QACR,WAAW,QAAQ;AAAA,QACnB,eAAe,KAAK;AAAA,QACpB,aAAa,QAAQ;AAAA,QACrB,OAAO,eAAe;AAAA,QACtB,WAAW,eAAe;AAAA,QAC1B;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;AAEA,gBAAgB,6BAA6B;AAE7C,IAAO,mCAAQ;",
+  "sourcesContent": ["import { randomUUID } from 'node:crypto'\nimport { z } from 'zod'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport type { CommandHandler } from '@open-mercato/shared/lib/commands'\nimport { registerCommand } from '@open-mercato/shared/lib/commands'\nimport { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { emitCommunicationChannelsEvent } from '../events'\nimport { refreshCredentialsIfNeeded } from '../lib/credential-refresh'\nimport { classifyOutboundError, isReauthError } from '../lib/error-classification'\nimport {\n  buildBodyFooter,\n  buildReferencesId,\n  getOrCreateThreadToken,\n} from '../lib/thread-token'\nimport { stringOrUndefined, stripBrackets } from '../lib/email-mime'\nimport type { ChannelAdapterRegistry } from '../lib/registry'\nimport { isUniqueViolation } from '../lib/pg-errors'\nimport { Message } from '../../messages/data/entities'\nimport {\n  ChannelThreadMapping,\n  CommunicationChannel,\n  ExternalMessage,\n  MessageChannelLink,\n} from '../data/entities'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst moduleLogger = createLogger('communication_channels').child({ component: 'deliver-outbound-message' })\n\n/**\n * Sentinel \u2014 `Message.threadId` of an internal-only (no channel link) message\n * has no matching `ChannelThreadMapping`. In that case outbound delivery is a no-op.\n */\nconst NO_THREAD_MAPPING_RESULT = { status: 'no_channel_link' as const }\n\nconst deliverInputSchema = z.object({\n  messageId: z.string().uuid(),\n  scope: z.object({\n    tenantId: z.string().uuid(),\n    organizationId: z.string().uuid().nullable(),\n  }),\n  /**\n   * If true, force a credential refresh before sending \u2014 used by retry attempts\n   * after a 401 from the provider.\n   */\n  forceCredentialRefresh: z.boolean().optional(),\n})\n\nexport type DeliverOutboundMessageInput = z.infer<typeof deliverInputSchema>\n\nexport type DeliverOutboundMessageResult =\n  | { status: 'no_channel_link' }\n  | { status: 'already_delivered'; messageId: string; channelLinkId: string }\n  | {\n      status: 'delivered'\n      messageId: string\n      channelLinkId: string\n      externalMessageId: string\n      providerKey: string\n    }\n  | {\n      status: 'failed'\n      messageId: string\n      channelLinkId: string\n      providerKey: string\n      error: string\n      transient: boolean\n      /**\n       * True when the failure was a 401 / invalid_grant \u2014 the channel was\n       * flipped to `requires_reauth`. The worker uses this to attempt one\n       * forced credential refresh before giving up.\n       */\n      requiresReauth: boolean\n    }\n\nexport const COMMUNICATION_CHANNELS_DELIVER_OUTBOUND_COMMAND_ID =\n  'communication_channels.message.deliver_outbound'\n\ntype CredentialsServiceLike = {\n  resolve: (\n    integrationId: string,\n    scope: { organizationId: string; tenantId: string; userId?: string | null },\n  ) => Promise<Record<string, unknown> | null>\n  save?: (\n    integrationId: string,\n    credentials: Record<string, unknown>,\n    scope: { organizationId: string; tenantId: string; userId?: string | null },\n  ) => Promise<void>\n}\n\ntype IntegrationLogLike = {\n  log?: (entry: Record<string, unknown>) => Promise<void> | void\n  warn?: (entry: Record<string, unknown>) => Promise<void> | void\n  error?: (entry: Record<string, unknown>) => Promise<void> | void\n}\n\n/**\n * Outbound delivery command. Called from the outbound worker.\n *\n * Steps (SPEC-045d \u00A77):\n *   1. Re-fetch the Message by ID. Bail if internal-only (no ChannelThreadMapping).\n *   2. Resolve channel + adapter + credentials.\n *   3. Idempotently upsert a 'pending' MessageChannelLink (unique on `messageId`).\n *      Skip if a 'sent'/'delivered' link already exists.\n *   4. Refresh credentials when OAuth + near expiry (or when caller forces it).\n *   5. Call `adapter.convertOutbound(...)` \u2192 channel-native content.\n *   6. Call `adapter.sendMessage(...)`.\n *   7. On success: persist ExternalMessage + flip link to 'sent', emit `.message.sent`.\n *   8. On failure: flip link to 'failed' + classify error, log to integrationLog,\n *      emit `.delivery_failed`. The worker decides whether to retry based on\n *      `result.transient`.\n *\n * Idempotency: the unique constraint on `message_channel_links.message_id`\n * prevents the same Message being sent twice through the channel even if the\n * subscriber fires repeatedly. Combined with the link's lifecycle state\n * (pending \u2192 sent | failed), we get safe retries.\n */\nconst deliverOutboundMessageCommand: CommandHandler<\n  DeliverOutboundMessageInput,\n  DeliverOutboundMessageResult\n> = {\n  id: COMMUNICATION_CHANNELS_DELIVER_OUTBOUND_COMMAND_ID,\n  async execute(rawInput, ctx) {\n    const input = deliverInputSchema.parse(rawInput) as DeliverOutboundMessageInput\n    const em = (ctx.container.resolve('em') as EntityManager).fork()\n    const dscope = {\n      tenantId: input.scope.tenantId,\n      organizationId: input.scope.organizationId ?? null,\n    }\n\n    // (1) Re-fetch Message by ID \u2014 never trust the event payload shape.\n    const message = await findOneWithDecryption(\n      em,\n      Message,\n      {\n        id: input.messageId,\n        tenantId: input.scope.tenantId,\n        organizationId: input.scope.organizationId ?? null,\n        deletedAt: null,\n      },\n      undefined,\n      dscope,\n    )\n    if (!message) {\n      // Message was deleted before we got to deliver. Treat as no-op.\n      return NO_THREAD_MAPPING_RESULT\n    }\n    if (!message.threadId) {\n      // Message has no thread \u2192 no channel routing.\n      return NO_THREAD_MAPPING_RESULT\n    }\n\n    // (1 cont.) Look up the channel link via ChannelThreadMapping.threadId.\n    const mapping = await findOneWithDecryption(\n      em,\n      ChannelThreadMapping,\n      {\n        messageThreadId: message.threadId,\n        tenantId: input.scope.tenantId,\n        organizationId: input.scope.organizationId ?? null,\n      },\n      undefined,\n      dscope,\n    )\n    if (!mapping) {\n      // Internal-only message \u2014 no channel delivery needed.\n      return NO_THREAD_MAPPING_RESULT\n    }\n\n    // (2) Channel + adapter.\n    const channel = await findOneWithDecryption(\n      em,\n      CommunicationChannel,\n      {\n        id: mapping.channelId,\n        tenantId: input.scope.tenantId,\n        organizationId: input.scope.organizationId ?? null,\n        deletedAt: null,\n      },\n      undefined,\n      dscope,\n    )\n    if (!channel) {\n      throw new Error(\n        `[internal] Channel ${mapping.channelId} not found for tenant ${input.scope.tenantId} (or has been deleted)`,\n      )\n    }\n    if (!channel.isActive) {\n      throw new Error(`[internal] Channel ${mapping.channelId} is inactive; refusing to deliver outbound`)\n    }\n\n    const adapterRegistry = ctx.container.resolve('channelAdapterRegistry') as ChannelAdapterRegistry\n    const adapter = adapterRegistry.get(channel.providerKey)\n    if (!adapter) {\n      throw new Error(\n        `[internal] No ChannelAdapter registered for providerKey '${channel.providerKey}'. ` +\n          'Check that the provider package is enabled in modules.ts.',\n      )\n    }\n\n    // (3) Idempotently upsert a 'pending' MessageChannelLink.\n    let link = await findOneWithDecryption(\n      em,\n      MessageChannelLink,\n      {\n        messageId: message.id,\n        tenantId: input.scope.tenantId,\n        organizationId: input.scope.organizationId ?? null,\n      },\n      undefined,\n      dscope,\n    )\n    if (\n      link &&\n      (link.deliveryStatus === 'queued' ||\n        link.deliveryStatus === 'sent' ||\n        link.deliveryStatus === 'delivered' ||\n        link.deliveryStatus === 'read')\n    ) {\n      // Already sent (or accepted by the provider as 'queued') \u2014 short-circuit\n      // so a retried job does not re-invoke the adapter and double-send.\n      return {\n        status: 'already_delivered',\n        messageId: message.id,\n        channelLinkId: link.id,\n      }\n    }\n    if (!link) {\n      link = em.create(MessageChannelLink, {\n        messageId: message.id,\n        externalConversationId: mapping.externalConversationId,\n        providerKey: channel.providerKey,\n        channelType: channel.channelType,\n        direction: 'outbound',\n        deliveryStatus: 'pending',\n        tenantId: input.scope.tenantId,\n        organizationId: input.scope.organizationId ?? null,\n      })\n      em.persist(link)\n      try {\n        await em.flush()\n      } catch (flushErr) {\n        // Concurrency guard: the link lookup above is not atomic with this\n        // insert, so two deliveries of the same message (a replayed\n        // `messages.message.sent`, or an overlapping worker retry) can both\n        // reach here. The `message_channel_links_message_uq` index rejects the\n        // loser with a 23505. Defer to the winning job \u2014 re-read its link on a\n        // fresh fork and report `already_delivered` \u2014 instead of re-invoking the\n        // adapter (double send) or letting the raw error dead-letter the job.\n        if (isUniqueViolation(flushErr)) {\n          const winner = await findOneWithDecryption(\n            em.fork(),\n            MessageChannelLink,\n            {\n              messageId: message.id,\n              tenantId: input.scope.tenantId,\n              organizationId: input.scope.organizationId ?? null,\n            },\n            undefined,\n            dscope,\n          )\n          if (winner) {\n            return {\n              status: 'already_delivered',\n              messageId: message.id,\n              channelLinkId: winner.id,\n            }\n          }\n        }\n        throw flushErr\n      }\n    }\n\n    // (2 cont.) Decrypted credentials via the integrations module (if available).\n    let credentialsService: CredentialsServiceLike | null = null\n    try {\n      credentialsService = ctx.container.resolve(\n        'integrationCredentialsService',\n      ) as CredentialsServiceLike\n    } catch {\n      credentialsService = null\n    }\n    // Per-user credentials scope: pass `channel.userId` so the credentials\n    // service returns this user's row, not whoever connected last. See\n    // review R2-C1 / N1 (2026-05-26).\n    //\n    // Key the org on the CHANNEL's own org, not the message's org. Tenant-wide\n    // channels store `organization_id = NULL` and their credentials live at\n    // `organization_id = tenantId` (see connect-credential-channel.ts), so\n    // `channel.organizationId ?? tenantId` matches the write key for both\n    // org-scoped and tenant-wide channels. Keying on the message org would\n    // resolve `{}` the moment a tenant-wide provider delivers from a message\n    // that carries a non-null org.\n    const credentialsScope = {\n      tenantId: input.scope.tenantId,\n      organizationId: channel.organizationId ?? input.scope.tenantId,\n      userId: channel.userId ?? null,\n    }\n    let credentials: Record<string, unknown> = {}\n    if (channel.credentialsRef && credentialsService) {\n      try {\n        credentials =\n          (await credentialsService.resolve(`channel_${channel.providerKey}`, credentialsScope)) ?? {}\n      } catch {\n        credentials = {}\n      }\n    }\n\n    // (4) Credential refresh if OAuth + near expiry, or forced by retry.\n    let integrationLog: IntegrationLogLike | null = null\n    try {\n      integrationLog = ctx.container.resolve('integrationLogService') as IntegrationLogLike\n    } catch {\n      integrationLog = null\n    }\n    const refreshResult = await refreshCredentialsIfNeeded(\n      {\n        adapter,\n        channelId: channel.id,\n        credentials,\n        scope: credentialsScope,\n        force: Boolean(input.forceCredentialRefresh),\n      },\n      {\n        credentialsService,\n        logger: (...args) => moduleLogger.warn('credential refresh diagnostic', { details: args }),\n      },\n    )\n    credentials = refreshResult.credentials\n\n    // (4b) Spec B \u2014 get-or-create the per-thread crypto token and inject it\n    // into the outbound payload BEFORE the adapter converts it. The token\n    // travels as both a `References` header (via channelMetadata.references)\n    // and a hidden body marker so inbound replies can be threaded back to\n    // this conversation even when the recipient's MUA strips RFC 5322\n    // headers. Idempotent on retry \u2014 same token reused per thread.\n    let threadToken: string | null = null\n    try {\n      const { token } = await getOrCreateThreadToken(em, {\n        tenantId: input.scope.tenantId,\n        organizationId: input.scope.organizationId ?? null,\n        messageThreadId: mapping.messageThreadId,\n      })\n      threadToken = token\n    } catch (tokenErr) {\n      // Token creation should never block a send \u2014 if it fails, the message\n      // still goes out, just without our thread-token attachment point.\n      // Threading falls back to the JWZ strategy via Message-Id headers.\n      moduleLogger.warn('thread token unavailable, proceeding without it', { err: tokenErr })\n    }\n\n    // (5) + (6) Convert + send.\n    try {\n      const outboundPayload = (link.channelPayload as Record<string, unknown> | null) ?? {}\n      const outboundHtml = typeof outboundPayload.html === 'string' ? outboundPayload.html : null\n      const outboundText = typeof outboundPayload.text === 'string' ? outboundPayload.text : null\n      let outboundBody = outboundHtml ?? outboundText ?? message.body ?? ''\n      const outboundBodyFormat = outboundHtml\n        ? 'html'\n        : ((message.bodyFormat as 'text' | 'markdown' | 'html') ?? 'text')\n\n      // Pre-existing channelMetadata.references (string[]) so we can extend\n      // it with the synthetic thread-token id without disturbing other refs\n      // (e.g. the recipient's own reply chain).\n      const baseMetadata = (link.channelMetadata as Record<string, unknown> | undefined) ?? {}\n      const existingRefs = Array.isArray(baseMetadata.references)\n        ? (baseMetadata.references as unknown[]).filter(\n            (value): value is string => typeof value === 'string',\n          )\n        : []\n      let mergedReferences = existingRefs\n      if (threadToken && !outboundBody.includes(`[OM:${threadToken}]`)) {\n        // Append the body footer for the corresponding format. The hidden\n        // HTML span is `display:none`; the plain-text trailer is a small\n        // bracketed marker on its own line. Both survive most reply clients.\n        const footer = buildBodyFooter(threadToken)\n        if (outboundBodyFormat === 'html') {\n          const closingBody = outboundBody.lastIndexOf('</body>')\n          outboundBody =\n            closingBody >= 0\n              ? `${outboundBody.slice(0, closingBody)}${footer.html}${outboundBody.slice(closingBody)}`\n              : `${outboundBody}${footer.html}`\n        } else {\n          outboundBody = `${outboundBody}${footer.plain}`\n        }\n        const refId = buildReferencesId(threadToken)\n        if (!mergedReferences.includes(refId)) {\n          mergedReferences = [...mergedReferences, refId]\n        }\n      }\n      const converted = await adapter.convertOutbound({\n        body: outboundBody,\n        bodyFormat: outboundBodyFormat,\n        channelMetadata: {\n          thread_id: mapping.externalThreadRef,\n          ...baseMetadata,\n          references: mergedReferences,\n          ...(threadToken ? { omThreadToken: threadToken } : {}),\n        },\n      })\n\n      // NOTE \u2014 at-least-once delivery (accepted v1 semantics). This provider\n      // send is a non-transactional external side effect. The terminal-status\n      // short-circuit above and the `message_channel_links_message_uq` index\n      // prevent duplicate link records and re-sends after a *completed*\n      // delivery, but if the process crashes in the narrow window between this\n      // call returning and the success flush below, the link stays `pending`\n      // and a worker retry re-invokes the adapter \u2014 the recipient may receive a\n      // duplicate. This is deliberate: email providers (Gmail/SMTP) expose no\n      // idempotent-send key nor a reliable \"did message X send?\" query, so\n      // re-sending is preferred over risking a dropped message.\n      const sendResult = await adapter.sendMessage({\n        conversationId: mapping.externalThreadRef,\n        content: converted.content,\n        credentials,\n        scope: {\n          tenantId: input.scope.tenantId,\n          organizationId: channel.organizationId ?? input.scope.tenantId,\n        },\n        metadata: converted.metadata,\n      })\n\n      if (sendResult.status === 'failed') {\n        throw new Error(sendResult.error ?? `Adapter '${adapter.providerKey}' reported send failure`)\n      }\n\n      // (7) Persist success records.\n      //\n      // Pre-generate the ExternalMessage PK client-side. The PK uses\n      // `defaultRaw: 'gen_random_uuid()'`, so `externalMessage.id` is undefined\n      // until after the INSERT returns \u2014 writing `link.externalMessageId =\n      // externalMessage.id` before the flush would silently persist NULL on the\n      // link's FK. Mirrors the inbound ingest path (ingest-inbound-message.ts).\n      const externalMessageRowId = randomUUID()\n      const externalMessage = em.create(ExternalMessage, {\n        id: externalMessageRowId,\n        channelId: channel.id,\n        conversationId: mapping.externalConversationId,\n        externalMessageId: sendResult.externalMessageId,\n        direction: 'outbound',\n        senderIdentifier: null,\n        senderDisplayName: null,\n        providerTimestamp: new Date(),\n        tenantId: input.scope.tenantId,\n        organizationId: input.scope.organizationId ?? null,\n      })\n      em.persist(externalMessage)\n\n      // A successful send proves the credentials are valid \u2014 clear any prior\n      // `requires_reauth` / `error` state so a recovered channel doesn't keep\n      // showing a stale reconnect banner (e.g. after a forced-refresh retry).\n      if (channel.status === 'requires_reauth' || channel.status === 'error') {\n        channel.status = 'connected'\n      }\n\n      link.deliveryStatus = sendResult.status === 'sent' ? 'sent' : 'queued'\n      link.externalMessageId = externalMessageRowId\n      link.channelMetadata = {\n        ...((link.channelMetadata as Record<string, unknown> | undefined) ?? {}),\n        ...(converted.metadata ?? {}),\n        externalMessageId: sendResult.externalMessageId,\n        // Always persist the RFC2822 Message-ID so inbound reply matching (JWZ\n        // strategy in lib/thread-matcher) and sent-folder dedup can resolve this\n        // outbound message. Adapters that build the message themselves (Gmail)\n        // return it in `converted.metadata.messageId`; IMAP/SMTP lets\n        // the transport mint it, surfacing it only as `sendResult.externalMessageId`\n        // (the RFC2822 id the recipient replies to) \u2014 fall back to that.\n        // Store it bracket-stripped to match the inbound convention\n        // (`normalizeMimeInbound` strips), so the JWZ matcher and sent-folder dedup \u2014\n        // which compare against stripped ids \u2014 resolve it. `assembleRfc2822`\n        // re-applies brackets when this id is later used to build reply headers.\n        messageId: stripBrackets(\n          stringOrUndefined((converted.metadata as Record<string, unknown> | undefined)?.messageId) ??\n            sendResult.externalMessageId,\n        ),\n      }\n      await em.flush()\n\n      await emitCommunicationChannelsEvent(\n        'communication_channels.message.sent',\n        {\n          messageId: message.id,\n          externalMessageId: externalMessage.id,\n          channelLinkId: link.id,\n          conversationId: mapping.externalConversationId,\n          channelId: channel.id,\n          providerKey: channel.providerKey,\n          channelType: channel.channelType,\n          direction: 'outbound',\n          tenantId: input.scope.tenantId,\n          organizationId: input.scope.organizationId ?? null,\n        },\n        { persistent: true },\n      )\n\n      return {\n        status: 'delivered',\n        messageId: message.id,\n        channelLinkId: link.id,\n        externalMessageId: externalMessage.id,\n        providerKey: channel.providerKey,\n      }\n    } catch (sendErr) {\n      // (8) Failure path \u2014 classify, persist, emit, return.\n      const classification = classifyOutboundError(sendErr)\n      const requiresReauth = isReauthError(classification)\n      link.deliveryStatus = 'failed'\n      link.channelMetadata = {\n        ...((link.channelMetadata as Record<string, unknown> | undefined) ?? {}),\n        lastError: classification.message,\n        lastErrorAt: new Date().toISOString(),\n        transient: classification.transient,\n        requiresReauth,\n      }\n      // A 401 / invalid_grant means the stored credentials are dead and no\n      // retry will help \u2014 flip the channel to `requires_reauth` (mirrors the\n      // inbound poll path) so the operator gets a reconnect signal instead of\n      // silently-failing sends. A later successful send self-heals back to\n      // `connected` (see the success path above).\n      if (requiresReauth) {\n        channel.status = 'requires_reauth'\n      }\n      await em.flush()\n\n      try {\n        await integrationLog?.error?.({\n          integrationId: `channel_${channel.providerKey}`,\n          tenantId: input.scope.tenantId,\n          organizationId: input.scope.organizationId ?? null,\n          channelId: channel.id,\n          messageId: message.id,\n          status: classification.status ?? null,\n          transient: classification.transient,\n          message: classification.message,\n        })\n      } catch {\n        // best-effort logging\n      }\n\n      if (requiresReauth) {\n        await emitCommunicationChannelsEvent(\n          'communication_channels.channel.requires_reauth',\n          {\n            channelId: channel.id,\n            providerKey: channel.providerKey,\n            channelType: channel.channelType,\n            reason: classification.message,\n            tenantId: input.scope.tenantId,\n            organizationId: input.scope.organizationId ?? null,\n          },\n          { persistent: true },\n        )\n      }\n\n      await emitCommunicationChannelsEvent(\n        'communication_channels.message.delivery_failed',\n        {\n          messageId: message.id,\n          channelLinkId: link.id,\n          conversationId: mapping.externalConversationId,\n          channelId: channel.id,\n          providerKey: channel.providerKey,\n          channelType: channel.channelType,\n          transient: classification.transient,\n          error: classification.message,\n          status: classification.status ?? null,\n          tenantId: input.scope.tenantId,\n          organizationId: input.scope.organizationId ?? null,\n        },\n        { persistent: true },\n      )\n\n      return {\n        status: 'failed',\n        messageId: message.id,\n        channelLinkId: link.id,\n        providerKey: channel.providerKey,\n        error: classification.message,\n        transient: classification.transient,\n        requiresReauth,\n      }\n    }\n  },\n}\n\nregisterCommand(deliverOutboundMessageCommand)\n\nexport default deliverOutboundMessageCommand\n"],
+  "mappings": "AAAA,SAAS,kBAAkB;AAC3B,SAAS,SAAS;AAGlB,SAAS,uBAAuB;AAChC,SAAS,6BAA6B;AACtC,SAAS,sCAAsC;AAC/C,SAAS,kCAAkC;AAC3C,SAAS,uBAAuB,qBAAqB;AACrD;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,mBAAmB,qBAAqB;AAEjD,SAAS,yBAAyB;AAClC,SAAS,eAAe;AACxB;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,oBAAoB;AAE7B,MAAM,eAAe,aAAa,wBAAwB,EAAE,MAAM,EAAE,WAAW,2BAA2B,CAAC;AAM3G,MAAM,2BAA2B,EAAE,QAAQ,kBAA2B;AAEtE,MAAM,qBAAqB,EAAE,OAAO;AAAA,EAClC,WAAW,EAAE,OAAO,EAAE,KAAK;AAAA,EAC3B,OAAO,EAAE,OAAO;AAAA,IACd,UAAU,EAAE,OAAO,EAAE,KAAK;AAAA,IAC1B,gBAAgB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EAC7C,CAAC;AAAA;AAAA;AAAA;AAAA;AAAA,EAKD,wBAAwB,EAAE,QAAQ,EAAE,SAAS;AAC/C,CAAC;AA6BM,MAAM,qDACX;AAyCF,MAAM,gCAGF;AAAA,EACF,IAAI;AAAA,EACJ,MAAM,QAAQ,UAAU,KAAK;AAC3B,UAAM,QAAQ,mBAAmB,MAAM,QAAQ;AAC/C,UAAM,KAAM,IAAI,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC/D,UAAM,SAAS;AAAA,MACb,UAAU,MAAM,MAAM;AAAA,MACtB,gBAAgB,MAAM,MAAM,kBAAkB;AAAA,IAChD;AAGA,UAAM,UAAU,MAAM;AAAA,MACpB;AAAA,MACA;AAAA,MACA;AAAA,QACE,IAAI,MAAM;AAAA,QACV,UAAU,MAAM,MAAM;AAAA,QACtB,gBAAgB,MAAM,MAAM,kBAAkB;AAAA,QAC9C,WAAW;AAAA,MACb;AAAA,MACA;AAAA,MACA;AAAA,IACF;AACA,QAAI,CAAC,SAAS;AAEZ,aAAO;AAAA,IACT;AACA,QAAI,CAAC,QAAQ,UAAU;AAErB,aAAO;AAAA,IACT;AAGA,UAAM,UAAU,MAAM;AAAA,MACpB;AAAA,MACA;AAAA,MACA;AAAA,QACE,iBAAiB,QAAQ;AAAA,QACzB,UAAU,MAAM,MAAM;AAAA,QACtB,gBAAgB,MAAM,MAAM,kBAAkB;AAAA,MAChD;AAAA,MACA;AAAA,MACA;AAAA,IACF;AACA,QAAI,CAAC,SAAS;AAEZ,aAAO;AAAA,IACT;AAGA,UAAM,UAAU,MAAM;AAAA,MACpB;AAAA,MACA;AAAA,MACA;AAAA,QACE,IAAI,QAAQ;AAAA,QACZ,UAAU,MAAM,MAAM;AAAA,QACtB,gBAAgB,MAAM,MAAM,kBAAkB;AAAA,QAC9C,WAAW;AAAA,MACb;AAAA,MACA;AAAA,MACA;AAAA,IACF;AACA,QAAI,CAAC,SAAS;AACZ,YAAM,IAAI;AAAA,QACR,sBAAsB,QAAQ,SAAS,yBAAyB,MAAM,MAAM,QAAQ;AAAA,MACtF;AAAA,IACF;AACA,QAAI,CAAC,QAAQ,UAAU;AACrB,YAAM,IAAI,MAAM,sBAAsB,QAAQ,SAAS,4CAA4C;AAAA,IACrG;AAEA,UAAM,kBAAkB,IAAI,UAAU,QAAQ,wBAAwB;AACtE,UAAM,UAAU,gBAAgB,IAAI,QAAQ,WAAW;AACvD,QAAI,CAAC,SAAS;AACZ,YAAM,IAAI;AAAA,QACR,4DAA4D,QAAQ,WAAW;AAAA,MAEjF;AAAA,IACF;AAGA,QAAI,OAAO,MAAM;AAAA,MACf;AAAA,MACA;AAAA,MACA;AAAA,QACE,WAAW,QAAQ;AAAA,QACnB,UAAU,MAAM,MAAM;AAAA,QACtB,gBAAgB,MAAM,MAAM,kBAAkB;AAAA,MAChD;AAAA,MACA;AAAA,MACA;AAAA,IACF;AACA,QACE,SACC,KAAK,mBAAmB,YACvB,KAAK,mBAAmB,UACxB,KAAK,mBAAmB,eACxB,KAAK,mBAAmB,SAC1B;AAGA,aAAO;AAAA,QACL,QAAQ;AAAA,QACR,WAAW,QAAQ;AAAA,QACnB,eAAe,KAAK;AAAA,MACtB;AAAA,IACF;AACA,QAAI,CAAC,MAAM;AACT,aAAO,GAAG,OAAO,oBAAoB;AAAA,QACnC,WAAW,QAAQ;AAAA,QACnB,wBAAwB,QAAQ;AAAA,QAChC,aAAa,QAAQ;AAAA,QACrB,aAAa,QAAQ;AAAA,QACrB,WAAW;AAAA,QACX,gBAAgB;AAAA,QAChB,UAAU,MAAM,MAAM;AAAA,QACtB,gBAAgB,MAAM,MAAM,kBAAkB;AAAA,MAChD,CAAC;AACD,SAAG,QAAQ,IAAI;AACf,UAAI;AACF,cAAM,GAAG,MAAM;AAAA,MACjB,SAAS,UAAU;AAQjB,YAAI,kBAAkB,QAAQ,GAAG;AAC/B,gBAAM,SAAS,MAAM;AAAA,YACnB,GAAG,KAAK;AAAA,YACR;AAAA,YACA;AAAA,cACE,WAAW,QAAQ;AAAA,cACnB,UAAU,MAAM,MAAM;AAAA,cACtB,gBAAgB,MAAM,MAAM,kBAAkB;AAAA,YAChD;AAAA,YACA;AAAA,YACA;AAAA,UACF;AACA,cAAI,QAAQ;AACV,mBAAO;AAAA,cACL,QAAQ;AAAA,cACR,WAAW,QAAQ;AAAA,cACnB,eAAe,OAAO;AAAA,YACxB;AAAA,UACF;AAAA,QACF;AACA,cAAM;AAAA,MACR;AAAA,IACF;AAGA,QAAI,qBAAoD;AACxD,QAAI;AACF,2BAAqB,IAAI,UAAU;AAAA,QACjC;AAAA,MACF;AAAA,IACF,QAAQ;AACN,2BAAqB;AAAA,IACvB;AAYA,UAAM,mBAAmB;AAAA,MACvB,UAAU,MAAM,MAAM;AAAA,MACtB,gBAAgB,QAAQ,kBAAkB,MAAM,MAAM;AAAA,MACtD,QAAQ,QAAQ,UAAU;AAAA,IAC5B;AACA,QAAI,cAAuC,CAAC;AAC5C,QAAI,QAAQ,kBAAkB,oBAAoB;AAChD,UAAI;AACF,sBACG,MAAM,mBAAmB,QAAQ,WAAW,QAAQ,WAAW,IAAI,gBAAgB,KAAM,CAAC;AAAA,MAC/F,QAAQ;AACN,sBAAc,CAAC;AAAA,MACjB;AAAA,IACF;AAGA,QAAI,iBAA4C;AAChD,QAAI;AACF,uBAAiB,IAAI,UAAU,QAAQ,uBAAuB;AAAA,IAChE,QAAQ;AACN,uBAAiB;AAAA,IACnB;AACA,UAAM,gBAAgB,MAAM;AAAA,MAC1B;AAAA,QACE;AAAA,QACA,WAAW,QAAQ;AAAA,QACnB;AAAA,QACA,OAAO;AAAA,QACP,OAAO,QAAQ,MAAM,sBAAsB;AAAA,MAC7C;AAAA,MACA;AAAA,QACE;AAAA,QACA,QAAQ,IAAI,SAAS,aAAa,KAAK,iCAAiC,EAAE,SAAS,KAAK,CAAC;AAAA,MAC3F;AAAA,IACF;AACA,kBAAc,cAAc;AAQ5B,QAAI,cAA6B;AACjC,QAAI;AACF,YAAM,EAAE,MAAM,IAAI,MAAM,uBAAuB,IAAI;AAAA,QACjD,UAAU,MAAM,MAAM;AAAA,QACtB,gBAAgB,MAAM,MAAM,kBAAkB;AAAA,QAC9C,iBAAiB,QAAQ;AAAA,MAC3B,CAAC;AACD,oBAAc;AAAA,IAChB,SAAS,UAAU;AAIjB,mBAAa,KAAK,mDAAmD,EAAE,KAAK,SAAS,CAAC;AAAA,IACxF;AAGA,QAAI;AACF,YAAM,kBAAmB,KAAK,kBAAqD,CAAC;AACpF,YAAM,eAAe,OAAO,gBAAgB,SAAS,WAAW,gBAAgB,OAAO;AACvF,YAAM,eAAe,OAAO,gBAAgB,SAAS,WAAW,gBAAgB,OAAO;AACvF,UAAI,eAAe,gBAAgB,gBAAgB,QAAQ,QAAQ;AACnE,YAAM,qBAAqB,eACvB,SACE,QAAQ,cAA+C;AAK7D,YAAM,eAAgB,KAAK,mBAA2D,CAAC;AACvF,YAAM,eAAe,MAAM,QAAQ,aAAa,UAAU,IACrD,aAAa,WAAyB;AAAA,QACrC,CAAC,UAA2B,OAAO,UAAU;AAAA,MAC/C,IACA,CAAC;AACL,UAAI,mBAAmB;AACvB,UAAI,eAAe,CAAC,aAAa,SAAS,OAAO,WAAW,GAAG,GAAG;AAIhE,cAAM,SAAS,gBAAgB,WAAW;AAC1C,YAAI,uBAAuB,QAAQ;AACjC,gBAAM,cAAc,aAAa,YAAY,SAAS;AACtD,yBACE,eAAe,IACX,GAAG,aAAa,MAAM,GAAG,WAAW,CAAC,GAAG,OAAO,IAAI,GAAG,aAAa,MAAM,WAAW,CAAC,KACrF,GAAG,YAAY,GAAG,OAAO,IAAI;AAAA,QACrC,OAAO;AACL,yBAAe,GAAG,YAAY,GAAG,OAAO,KAAK;AAAA,QAC/C;AACA,cAAM,QAAQ,kBAAkB,WAAW;AAC3C,YAAI,CAAC,iBAAiB,SAAS,KAAK,GAAG;AACrC,6BAAmB,CAAC,GAAG,kBAAkB,KAAK;AAAA,QAChD;AAAA,MACF;AACA,YAAM,YAAY,MAAM,QAAQ,gBAAgB;AAAA,QAC9C,MAAM;AAAA,QACN,YAAY;AAAA,QACZ,iBAAiB;AAAA,UACf,WAAW,QAAQ;AAAA,UACnB,GAAG;AAAA,UACH,YAAY;AAAA,UACZ,GAAI,cAAc,EAAE,eAAe,YAAY,IAAI,CAAC;AAAA,QACtD;AAAA,MACF,CAAC;AAYD,YAAM,aAAa,MAAM,QAAQ,YAAY;AAAA,QAC3C,gBAAgB,QAAQ;AAAA,QACxB,SAAS,UAAU;AAAA,QACnB;AAAA,QACA,OAAO;AAAA,UACL,UAAU,MAAM,MAAM;AAAA,UACtB,gBAAgB,QAAQ,kBAAkB,MAAM,MAAM;AAAA,QACxD;AAAA,QACA,UAAU,UAAU;AAAA,MACtB,CAAC;AAED,UAAI,WAAW,WAAW,UAAU;AAClC,cAAM,IAAI,MAAM,WAAW,SAAS,YAAY,QAAQ,WAAW,yBAAyB;AAAA,MAC9F;AASA,YAAM,uBAAuB,WAAW;AACxC,YAAM,kBAAkB,GAAG,OAAO,iBAAiB;AAAA,QACjD,IAAI;AAAA,QACJ,WAAW,QAAQ;AAAA,QACnB,gBAAgB,QAAQ;AAAA,QACxB,mBAAmB,WAAW;AAAA,QAC9B,WAAW;AAAA,QACX,kBAAkB;AAAA,QAClB,mBAAmB;AAAA,QACnB,mBAAmB,oBAAI,KAAK;AAAA,QAC5B,UAAU,MAAM,MAAM;AAAA,QACtB,gBAAgB,MAAM,MAAM,kBAAkB;AAAA,MAChD,CAAC;AACD,SAAG,QAAQ,eAAe;AAK1B,UAAI,QAAQ,WAAW,qBAAqB,QAAQ,WAAW,SAAS;AACtE,gBAAQ,SAAS;AAAA,MACnB;AAEA,WAAK,iBAAiB,WAAW,WAAW,SAAS,SAAS;AAC9D,WAAK,oBAAoB;AACzB,WAAK,kBAAkB;AAAA,QACrB,GAAK,KAAK,mBAA2D,CAAC;AAAA,QACtE,GAAI,UAAU,YAAY,CAAC;AAAA,QAC3B,mBAAmB,WAAW;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,QAW9B,WAAW;AAAA,UACT,kBAAmB,UAAU,UAAkD,SAAS,KACtF,WAAW;AAAA,QACf;AAAA,MACF;AACA,YAAM,GAAG,MAAM;AAEf,YAAM;AAAA,QACJ;AAAA,QACA;AAAA,UACE,WAAW,QAAQ;AAAA,UACnB,mBAAmB,gBAAgB;AAAA,UACnC,eAAe,KAAK;AAAA,UACpB,gBAAgB,QAAQ;AAAA,UACxB,WAAW,QAAQ;AAAA,UACnB,aAAa,QAAQ;AAAA,UACrB,aAAa,QAAQ;AAAA,UACrB,WAAW;AAAA,UACX,UAAU,MAAM,MAAM;AAAA,UACtB,gBAAgB,MAAM,MAAM,kBAAkB;AAAA,QAChD;AAAA,QACA,EAAE,YAAY,KAAK;AAAA,MACrB;AAEA,aAAO;AAAA,QACL,QAAQ;AAAA,QACR,WAAW,QAAQ;AAAA,QACnB,eAAe,KAAK;AAAA,QACpB,mBAAmB,gBAAgB;AAAA,QACnC,aAAa,QAAQ;AAAA,MACvB;AAAA,IACF,SAAS,SAAS;AAEhB,YAAM,iBAAiB,sBAAsB,OAAO;AACpD,YAAM,iBAAiB,cAAc,cAAc;AACnD,WAAK,iBAAiB;AACtB,WAAK,kBAAkB;AAAA,QACrB,GAAK,KAAK,mBAA2D,CAAC;AAAA,QACtE,WAAW,eAAe;AAAA,QAC1B,cAAa,oBAAI,KAAK,GAAE,YAAY;AAAA,QACpC,WAAW,eAAe;AAAA,QAC1B;AAAA,MACF;AAMA,UAAI,gBAAgB;AAClB,gBAAQ,SAAS;AAAA,MACnB;AACA,YAAM,GAAG,MAAM;AAEf,UAAI;AACF,cAAM,gBAAgB,QAAQ;AAAA,UAC5B,eAAe,WAAW,QAAQ,WAAW;AAAA,UAC7C,UAAU,MAAM,MAAM;AAAA,UACtB,gBAAgB,MAAM,MAAM,kBAAkB;AAAA,UAC9C,WAAW,QAAQ;AAAA,UACnB,WAAW,QAAQ;AAAA,UACnB,QAAQ,eAAe,UAAU;AAAA,UACjC,WAAW,eAAe;AAAA,UAC1B,SAAS,eAAe;AAAA,QAC1B,CAAC;AAAA,MACH,QAAQ;AAAA,MAER;AAEA,UAAI,gBAAgB;AAClB,cAAM;AAAA,UACJ;AAAA,UACA;AAAA,YACE,WAAW,QAAQ;AAAA,YACnB,aAAa,QAAQ;AAAA,YACrB,aAAa,QAAQ;AAAA,YACrB,QAAQ,eAAe;AAAA,YACvB,UAAU,MAAM,MAAM;AAAA,YACtB,gBAAgB,MAAM,MAAM,kBAAkB;AAAA,UAChD;AAAA,UACA,EAAE,YAAY,KAAK;AAAA,QACrB;AAAA,MACF;AAEA,YAAM;AAAA,QACJ;AAAA,QACA;AAAA,UACE,WAAW,QAAQ;AAAA,UACnB,eAAe,KAAK;AAAA,UACpB,gBAAgB,QAAQ;AAAA,UACxB,WAAW,QAAQ;AAAA,UACnB,aAAa,QAAQ;AAAA,UACrB,aAAa,QAAQ;AAAA,UACrB,WAAW,eAAe;AAAA,UAC1B,OAAO,eAAe;AAAA,UACtB,QAAQ,eAAe,UAAU;AAAA,UACjC,UAAU,MAAM,MAAM;AAAA,UACtB,gBAAgB,MAAM,MAAM,kBAAkB;AAAA,QAChD;AAAA,QACA,EAAE,YAAY,KAAK;AAAA,MACrB;AAEA,aAAO;AAAA,QACL,QAAQ;AAAA,QACR,WAAW,QAAQ;AAAA,QACnB,eAAe,KAAK;AAAA,QACpB,aAAa,QAAQ;AAAA,QACrB,OAAO,eAAe;AAAA,QACtB,WAAW,eAAe;AAAA,QAC1B;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;AAEA,gBAAgB,6BAA6B;AAE7C,IAAO,mCAAQ;",
   "names": []
 }

package/dist/modules/communication_channels/commands/push-register.js

@@ -62,7 +62,7 @@ async function pushRegister(params) {
   }
   const credentialsScope = {
     tenantId: scope.tenantId,
-    organizationId: scope.organizationId,
+    organizationId: channel.organizationId ?? scope.tenantId,
     userId: channel.userId ?? null
   };
   let credentials = {};

package/dist/modules/communication_channels/commands/push-register.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/communication_channels/commands/push-register.ts"],
-  "sourcesContent": ["import { z } from 'zod'\nimport type { AwilixContainer } from 'awilix'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { createCrudFormError } from '@open-mercato/ui/backend/utils/serverErrors'\nimport { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { CommunicationChannel } from '../data/entities'\nimport { getChannelAdapterRegistry } from '../lib/adapter-registry-singleton'\nimport { refreshCredentialsIfNeeded } from '../lib/credential-refresh'\nimport { emitCommunicationChannelsEvent } from '../events'\nimport type { PushRegistration } from '../lib/adapter'\n\n/**\n * Spec C \u00A7 Phase C5 \u2014 Register provider push delivery for a channel.\n *\n * Resolves credentials + tenant OAuth client config, then calls\n * `adapter.registerPush(...)`. Applies the returned state patch to\n * `channel.channelState` and flips `pollIntervalSeconds` to the\n * adapter's recommendation (or leaves it as-is on failure so polling\n * fallback continues).\n *\n * Idempotent: calling on a channel that already has `pushStatus='active'`\n * is OK \u2014 the adapter re-issues the underlying registration and we update\n * the cursor / expiry to the new value.\n */\n\nexport const pushRegisterSchema = z.object({\n  channelId: z.string().uuid(),\n})\n\nexport interface PushRegisterScope {\n  tenantId: string\n  organizationId: string\n  userId?: string | null\n}\n\nexport interface PushRegisterResult {\n  channelId: string\n  pushStatus: 'active' | 'failed'\n  channelState: Record<string, unknown>\n  error?: { code: string; message: string }\n}\n\ntype CredentialsServiceLike = {\n  resolve: (\n    integrationId: string,\n    scope: { organizationId: string; tenantId: string; userId?: string | null },\n  ) => Promise<Record<string, unknown> | null>\n  save?: (\n    integrationId: string,\n    credentials: Record<string, unknown>,\n    scope: { organizationId: string; tenantId: string; userId?: string | null },\n  ) => Promise<void>\n}\n\nexport async function pushRegister(params: {\n  container: AwilixContainer\n  scope: PushRegisterScope\n  input: { channelId: string }\n}): Promise<PushRegisterResult> {\n  const input = pushRegisterSchema.parse(params.input)\n  const { container, scope } = params\n\n  const em = (container.resolve('em') as EntityManager).fork()\n  const dscope = { tenantId: scope.tenantId, organizationId: scope.organizationId }\n\n  const channel = await findOneWithDecryption(\n    em,\n    CommunicationChannel,\n    {\n      id: input.channelId,\n      tenantId: scope.tenantId,\n      organizationId: scope.organizationId,\n      deletedAt: null,\n    },\n    undefined,\n    dscope,\n  )\n  if (!channel) {\n    throw createCrudFormError(\n      'Channel not found',\n      { channelId: 'Channel not found' },\n      { status: 404 },\n    )\n  }\n  if (!channel.isActive || channel.status !== 'connected') {\n    throw createCrudFormError(\n      'Channel must be connected to register push',\n      { channelId: `Channel status is ${channel.status}` },\n      { status: 400 },\n    )\n  }\n\n  const adapter = getChannelAdapterRegistry().get(channel.providerKey)\n  if (!adapter) {\n    throw createCrudFormError(\n      'Channel provider is not available',\n      { channelId: `No adapter for provider \"${channel.providerKey}\"` },\n      { status: 400 },\n    )\n  }\n  if (typeof adapter.registerPush !== 'function') {\n    throw createCrudFormError(\n      'Push delivery is not supported on this provider',\n      { channelId: `Provider \"${channel.providerKey}\" does not implement registerPush` },\n      { status: 409 },\n    )\n  }\n\n  // Credentials.\n  let credentialsService: CredentialsServiceLike | null = null\n  try {\n    credentialsService = container.resolve('integrationCredentialsService') as CredentialsServiceLike\n  } catch {\n    credentialsService = null\n  }\n  const credentialsScope = {\n    tenantId: scope.tenantId,\n    organizationId: scope.organizationId,\n    userId: channel.userId ?? null,\n  }\n  let credentials: Record<string, unknown> = {}\n  if (channel.credentialsRef && credentialsService) {\n    try {\n      credentials =\n        (await credentialsService.resolve(`channel_${channel.providerKey}`, credentialsScope)) ?? {}\n    } catch {\n      credentials = {}\n    }\n  }\n  const refreshed = await refreshCredentialsIfNeeded(\n    { adapter, channelId: channel.id, credentials, scope: credentialsScope },\n    { credentialsService },\n  )\n  credentials = refreshed.credentials\n\n  // Per-provider provider config.\n  let providerConfig: Record<string, unknown> | undefined\n  let notificationUrl = ''\n\n  if (channel.providerKey === 'gmail') {\n    const topic = process.env.OM_GMAIL_PUBSUB_TOPIC\n    providerConfig = { pubsubTopic: topic ?? '' }\n    notificationUrl = '' // Gmail does not use a per-call URL; Pub/Sub subscription is preconfigured.\n  }\n\n  let registration: PushRegistration\n  try {\n    registration = await adapter.registerPush({\n      channelId: channel.id,\n      credentials,\n      scope: { tenantId: scope.tenantId, organizationId: scope.organizationId },\n      notificationUrl,\n      providerConfig,\n    })\n  } catch (err) {\n    const message = err instanceof Error ? err.message : 'registerPush threw'\n    throw createCrudFormError(\n      'Push registration failed',\n      { channelId: message.slice(0, 500) },\n      { status: 502 },\n    )\n  }\n\n  // Persist results.\n  const previousState = (channel.channelState as Record<string, unknown> | null) ?? {}\n  channel.channelState = { ...previousState, ...registration.channelStatePatch }\n  if (registration.status === 'active' && typeof registration.recommendedPollIntervalSeconds === 'number') {\n    channel.pollIntervalSeconds = registration.recommendedPollIntervalSeconds\n  }\n  await em.flush()\n\n  if (registration.status === 'active') {\n    await emitCommunicationChannelsEvent(\n      'communication_channels.push.registered',\n      {\n        channelId: channel.id,\n        providerKey: channel.providerKey,\n        tenantId: scope.tenantId,\n        organizationId: scope.organizationId,\n      },\n      { persistent: true },\n    )\n  } else {\n    await emitCommunicationChannelsEvent(\n      'communication_channels.push.failed',\n      {\n        channelId: channel.id,\n        providerKey: channel.providerKey,\n        tenantId: scope.tenantId,\n        organizationId: scope.organizationId,\n        error: registration.error ?? null,\n      },\n      { persistent: true },\n    )\n  }\n\n  return {\n    channelId: channel.id,\n    pushStatus: registration.status,\n    channelState: (channel.channelState as Record<string, unknown> | null) ?? {},\n    error: registration.error,\n  }\n}\n"],
-  "mappings": "AAAA,SAAS,SAAS;AAGlB,SAAS,2BAA2B;AACpC,SAAS,6BAA6B;AACtC,SAAS,4BAA4B;AACrC,SAAS,iCAAiC;AAC1C,SAAS,kCAAkC;AAC3C,SAAS,sCAAsC;AAiBxC,MAAM,qBAAqB,EAAE,OAAO;AAAA,EACzC,WAAW,EAAE,OAAO,EAAE,KAAK;AAC7B,CAAC;AA2BD,eAAsB,aAAa,QAIH;AAC9B,QAAM,QAAQ,mBAAmB,MAAM,OAAO,KAAK;AACnD,QAAM,EAAE,WAAW,MAAM,IAAI;AAE7B,QAAM,KAAM,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC3D,QAAM,SAAS,EAAE,UAAU,MAAM,UAAU,gBAAgB,MAAM,eAAe;AAEhF,QAAM,UAAU,MAAM;AAAA,IACpB;AAAA,IACA;AAAA,IACA;AAAA,MACE,IAAI,MAAM;AAAA,MACV,UAAU,MAAM;AAAA,MAChB,gBAAgB,MAAM;AAAA,MACtB,WAAW;AAAA,IACb;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACA,MAAI,CAAC,SAAS;AACZ,UAAM;AAAA,MACJ;AAAA,MACA,EAAE,WAAW,oBAAoB;AAAA,MACjC,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACA,MAAI,CAAC,QAAQ,YAAY,QAAQ,WAAW,aAAa;AACvD,UAAM;AAAA,MACJ;AAAA,MACA,EAAE,WAAW,qBAAqB,QAAQ,MAAM,GAAG;AAAA,MACnD,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AAEA,QAAM,UAAU,0BAA0B,EAAE,IAAI,QAAQ,WAAW;AACnE,MAAI,CAAC,SAAS;AACZ,UAAM;AAAA,MACJ;AAAA,MACA,EAAE,WAAW,4BAA4B,QAAQ,WAAW,IAAI;AAAA,MAChE,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACA,MAAI,OAAO,QAAQ,iBAAiB,YAAY;AAC9C,UAAM;AAAA,MACJ;AAAA,MACA,EAAE,WAAW,aAAa,QAAQ,WAAW,oCAAoC;AAAA,MACjF,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AAGA,MAAI,qBAAoD;AACxD,MAAI;AACF,yBAAqB,UAAU,QAAQ,+BAA+B;AAAA,EACxE,QAAQ;AACN,yBAAqB;AAAA,EACvB;AACA,QAAM,mBAAmB;AAAA,IACvB,UAAU,MAAM;AAAA,IAChB,gBAAgB,MAAM;AAAA,IACtB,QAAQ,QAAQ,UAAU;AAAA,EAC5B;AACA,MAAI,cAAuC,CAAC;AAC5C,MAAI,QAAQ,kBAAkB,oBAAoB;AAChD,QAAI;AACF,oBACG,MAAM,mBAAmB,QAAQ,WAAW,QAAQ,WAAW,IAAI,gBAAgB,KAAM,CAAC;AAAA,IAC/F,QAAQ;AACN,oBAAc,CAAC;AAAA,IACjB;AAAA,EACF;AACA,QAAM,YAAY,MAAM;AAAA,IACtB,EAAE,SAAS,WAAW,QAAQ,IAAI,aAAa,OAAO,iBAAiB;AAAA,IACvE,EAAE,mBAAmB;AAAA,EACvB;AACA,gBAAc,UAAU;AAGxB,MAAI;AACJ,MAAI,kBAAkB;AAEtB,MAAI,QAAQ,gBAAgB,SAAS;AACnC,UAAM,QAAQ,QAAQ,IAAI;AAC1B,qBAAiB,EAAE,aAAa,SAAS,GAAG;AAC5C,sBAAkB;AAAA,EACpB;AAEA,MAAI;AACJ,MAAI;AACF,mBAAe,MAAM,QAAQ,aAAa;AAAA,MACxC,WAAW,QAAQ;AAAA,MACnB;AAAA,MACA,OAAO,EAAE,UAAU,MAAM,UAAU,gBAAgB,MAAM,eAAe;AAAA,MACxE;AAAA,MACA;AAAA,IACF,CAAC;AAAA,EACH,SAAS,KAAK;AACZ,UAAM,UAAU,eAAe,QAAQ,IAAI,UAAU;AACrD,UAAM;AAAA,MACJ;AAAA,MACA,EAAE,WAAW,QAAQ,MAAM,GAAG,GAAG,EAAE;AAAA,MACnC,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AAGA,QAAM,gBAAiB,QAAQ,gBAAmD,CAAC;AACnF,UAAQ,eAAe,EAAE,GAAG,eAAe,GAAG,aAAa,kBAAkB;AAC7E,MAAI,aAAa,WAAW,YAAY,OAAO,aAAa,mCAAmC,UAAU;AACvG,YAAQ,sBAAsB,aAAa;AAAA,EAC7C;AACA,QAAM,GAAG,MAAM;AAEf,MAAI,aAAa,WAAW,UAAU;AACpC,UAAM;AAAA,MACJ;AAAA,MACA;AAAA,QACE,WAAW,QAAQ;AAAA,QACnB,aAAa,QAAQ;AAAA,QACrB,UAAU,MAAM;AAAA,QAChB,gBAAgB,MAAM;AAAA,MACxB;AAAA,MACA,EAAE,YAAY,KAAK;AAAA,IACrB;AAAA,EACF,OAAO;AACL,UAAM;AAAA,MACJ;AAAA,MACA;AAAA,QACE,WAAW,QAAQ;AAAA,QACnB,aAAa,QAAQ;AAAA,QACrB,UAAU,MAAM;AAAA,QAChB,gBAAgB,MAAM;AAAA,QACtB,OAAO,aAAa,SAAS;AAAA,MAC/B;AAAA,MACA,EAAE,YAAY,KAAK;AAAA,IACrB;AAAA,EACF;AAEA,SAAO;AAAA,IACL,WAAW,QAAQ;AAAA,IACnB,YAAY,aAAa;AAAA,IACzB,cAAe,QAAQ,gBAAmD,CAAC;AAAA,IAC3E,OAAO,aAAa;AAAA,EACtB;AACF;",
+  "sourcesContent": ["import { z } from 'zod'\nimport type { AwilixContainer } from 'awilix'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { createCrudFormError } from '@open-mercato/ui/backend/utils/serverErrors'\nimport { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { CommunicationChannel } from '../data/entities'\nimport { getChannelAdapterRegistry } from '../lib/adapter-registry-singleton'\nimport { refreshCredentialsIfNeeded } from '../lib/credential-refresh'\nimport { emitCommunicationChannelsEvent } from '../events'\nimport type { PushRegistration } from '../lib/adapter'\n\n/**\n * Spec C \u00A7 Phase C5 \u2014 Register provider push delivery for a channel.\n *\n * Resolves credentials + tenant OAuth client config, then calls\n * `adapter.registerPush(...)`. Applies the returned state patch to\n * `channel.channelState` and flips `pollIntervalSeconds` to the\n * adapter's recommendation (or leaves it as-is on failure so polling\n * fallback continues).\n *\n * Idempotent: calling on a channel that already has `pushStatus='active'`\n * is OK \u2014 the adapter re-issues the underlying registration and we update\n * the cursor / expiry to the new value.\n */\n\nexport const pushRegisterSchema = z.object({\n  channelId: z.string().uuid(),\n})\n\nexport interface PushRegisterScope {\n  tenantId: string\n  organizationId: string\n  userId?: string | null\n}\n\nexport interface PushRegisterResult {\n  channelId: string\n  pushStatus: 'active' | 'failed'\n  channelState: Record<string, unknown>\n  error?: { code: string; message: string }\n}\n\ntype CredentialsServiceLike = {\n  resolve: (\n    integrationId: string,\n    scope: { organizationId: string; tenantId: string; userId?: string | null },\n  ) => Promise<Record<string, unknown> | null>\n  save?: (\n    integrationId: string,\n    credentials: Record<string, unknown>,\n    scope: { organizationId: string; tenantId: string; userId?: string | null },\n  ) => Promise<void>\n}\n\nexport async function pushRegister(params: {\n  container: AwilixContainer\n  scope: PushRegisterScope\n  input: { channelId: string }\n}): Promise<PushRegisterResult> {\n  const input = pushRegisterSchema.parse(params.input)\n  const { container, scope } = params\n\n  const em = (container.resolve('em') as EntityManager).fork()\n  const dscope = { tenantId: scope.tenantId, organizationId: scope.organizationId }\n\n  const channel = await findOneWithDecryption(\n    em,\n    CommunicationChannel,\n    {\n      id: input.channelId,\n      tenantId: scope.tenantId,\n      organizationId: scope.organizationId,\n      deletedAt: null,\n    },\n    undefined,\n    dscope,\n  )\n  if (!channel) {\n    throw createCrudFormError(\n      'Channel not found',\n      { channelId: 'Channel not found' },\n      { status: 404 },\n    )\n  }\n  if (!channel.isActive || channel.status !== 'connected') {\n    throw createCrudFormError(\n      'Channel must be connected to register push',\n      { channelId: `Channel status is ${channel.status}` },\n      { status: 400 },\n    )\n  }\n\n  const adapter = getChannelAdapterRegistry().get(channel.providerKey)\n  if (!adapter) {\n    throw createCrudFormError(\n      'Channel provider is not available',\n      { channelId: `No adapter for provider \"${channel.providerKey}\"` },\n      { status: 400 },\n    )\n  }\n  if (typeof adapter.registerPush !== 'function') {\n    throw createCrudFormError(\n      'Push delivery is not supported on this provider',\n      { channelId: `Provider \"${channel.providerKey}\" does not implement registerPush` },\n      { status: 409 },\n    )\n  }\n\n  // Credentials.\n  let credentialsService: CredentialsServiceLike | null = null\n  try {\n    credentialsService = container.resolve('integrationCredentialsService') as CredentialsServiceLike\n  } catch {\n    credentialsService = null\n  }\n  // Resolve credentials at the channel's OWN org, not the caller's scope org.\n  // Tenant-wide channels store `organization_id = NULL` and their credentials\n  // live at `organization_id = tenantId` (see connect-credential-channel.ts).\n  // Keying on `channel.organizationId ?? tenantId` matches the write key for\n  // both org-scoped (per-user) and tenant-wide channels; keying on the caller's\n  // scope org would silently resolve `{}` for a tenant-wide channel.\n  const credentialsScope = {\n    tenantId: scope.tenantId,\n    organizationId: channel.organizationId ?? scope.tenantId,\n    userId: channel.userId ?? null,\n  }\n  let credentials: Record<string, unknown> = {}\n  if (channel.credentialsRef && credentialsService) {\n    try {\n      credentials =\n        (await credentialsService.resolve(`channel_${channel.providerKey}`, credentialsScope)) ?? {}\n    } catch {\n      credentials = {}\n    }\n  }\n  const refreshed = await refreshCredentialsIfNeeded(\n    { adapter, channelId: channel.id, credentials, scope: credentialsScope },\n    { credentialsService },\n  )\n  credentials = refreshed.credentials\n\n  // Per-provider provider config.\n  let providerConfig: Record<string, unknown> | undefined\n  let notificationUrl = ''\n\n  if (channel.providerKey === 'gmail') {\n    const topic = process.env.OM_GMAIL_PUBSUB_TOPIC\n    providerConfig = { pubsubTopic: topic ?? '' }\n    notificationUrl = '' // Gmail does not use a per-call URL; Pub/Sub subscription is preconfigured.\n  }\n\n  let registration: PushRegistration\n  try {\n    registration = await adapter.registerPush({\n      channelId: channel.id,\n      credentials,\n      scope: { tenantId: scope.tenantId, organizationId: scope.organizationId },\n      notificationUrl,\n      providerConfig,\n    })\n  } catch (err) {\n    const message = err instanceof Error ? err.message : 'registerPush threw'\n    throw createCrudFormError(\n      'Push registration failed',\n      { channelId: message.slice(0, 500) },\n      { status: 502 },\n    )\n  }\n\n  // Persist results.\n  const previousState = (channel.channelState as Record<string, unknown> | null) ?? {}\n  channel.channelState = { ...previousState, ...registration.channelStatePatch }\n  if (registration.status === 'active' && typeof registration.recommendedPollIntervalSeconds === 'number') {\n    channel.pollIntervalSeconds = registration.recommendedPollIntervalSeconds\n  }\n  await em.flush()\n\n  if (registration.status === 'active') {\n    await emitCommunicationChannelsEvent(\n      'communication_channels.push.registered',\n      {\n        channelId: channel.id,\n        providerKey: channel.providerKey,\n        tenantId: scope.tenantId,\n        organizationId: scope.organizationId,\n      },\n      { persistent: true },\n    )\n  } else {\n    await emitCommunicationChannelsEvent(\n      'communication_channels.push.failed',\n      {\n        channelId: channel.id,\n        providerKey: channel.providerKey,\n        tenantId: scope.tenantId,\n        organizationId: scope.organizationId,\n        error: registration.error ?? null,\n      },\n      { persistent: true },\n    )\n  }\n\n  return {\n    channelId: channel.id,\n    pushStatus: registration.status,\n    channelState: (channel.channelState as Record<string, unknown> | null) ?? {},\n    error: registration.error,\n  }\n}\n"],
+  "mappings": "AAAA,SAAS,SAAS;AAGlB,SAAS,2BAA2B;AACpC,SAAS,6BAA6B;AACtC,SAAS,4BAA4B;AACrC,SAAS,iCAAiC;AAC1C,SAAS,kCAAkC;AAC3C,SAAS,sCAAsC;AAiBxC,MAAM,qBAAqB,EAAE,OAAO;AAAA,EACzC,WAAW,EAAE,OAAO,EAAE,KAAK;AAC7B,CAAC;AA2BD,eAAsB,aAAa,QAIH;AAC9B,QAAM,QAAQ,mBAAmB,MAAM,OAAO,KAAK;AACnD,QAAM,EAAE,WAAW,MAAM,IAAI;AAE7B,QAAM,KAAM,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC3D,QAAM,SAAS,EAAE,UAAU,MAAM,UAAU,gBAAgB,MAAM,eAAe;AAEhF,QAAM,UAAU,MAAM;AAAA,IACpB;AAAA,IACA;AAAA,IACA;AAAA,MACE,IAAI,MAAM;AAAA,MACV,UAAU,MAAM;AAAA,MAChB,gBAAgB,MAAM;AAAA,MACtB,WAAW;AAAA,IACb;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACA,MAAI,CAAC,SAAS;AACZ,UAAM;AAAA,MACJ;AAAA,MACA,EAAE,WAAW,oBAAoB;AAAA,MACjC,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACA,MAAI,CAAC,QAAQ,YAAY,QAAQ,WAAW,aAAa;AACvD,UAAM;AAAA,MACJ;AAAA,MACA,EAAE,WAAW,qBAAqB,QAAQ,MAAM,GAAG;AAAA,MACnD,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AAEA,QAAM,UAAU,0BAA0B,EAAE,IAAI,QAAQ,WAAW;AACnE,MAAI,CAAC,SAAS;AACZ,UAAM;AAAA,MACJ;AAAA,MACA,EAAE,WAAW,4BAA4B,QAAQ,WAAW,IAAI;AAAA,MAChE,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACA,MAAI,OAAO,QAAQ,iBAAiB,YAAY;AAC9C,UAAM;AAAA,MACJ;AAAA,MACA,EAAE,WAAW,aAAa,QAAQ,WAAW,oCAAoC;AAAA,MACjF,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AAGA,MAAI,qBAAoD;AACxD,MAAI;AACF,yBAAqB,UAAU,QAAQ,+BAA+B;AAAA,EACxE,QAAQ;AACN,yBAAqB;AAAA,EACvB;AAOA,QAAM,mBAAmB;AAAA,IACvB,UAAU,MAAM;AAAA,IAChB,gBAAgB,QAAQ,kBAAkB,MAAM;AAAA,IAChD,QAAQ,QAAQ,UAAU;AAAA,EAC5B;AACA,MAAI,cAAuC,CAAC;AAC5C,MAAI,QAAQ,kBAAkB,oBAAoB;AAChD,QAAI;AACF,oBACG,MAAM,mBAAmB,QAAQ,WAAW,QAAQ,WAAW,IAAI,gBAAgB,KAAM,CAAC;AAAA,IAC/F,QAAQ;AACN,oBAAc,CAAC;AAAA,IACjB;AAAA,EACF;AACA,QAAM,YAAY,MAAM;AAAA,IACtB,EAAE,SAAS,WAAW,QAAQ,IAAI,aAAa,OAAO,iBAAiB;AAAA,IACvE,EAAE,mBAAmB;AAAA,EACvB;AACA,gBAAc,UAAU;AAGxB,MAAI;AACJ,MAAI,kBAAkB;AAEtB,MAAI,QAAQ,gBAAgB,SAAS;AACnC,UAAM,QAAQ,QAAQ,IAAI;AAC1B,qBAAiB,EAAE,aAAa,SAAS,GAAG;AAC5C,sBAAkB;AAAA,EACpB;AAEA,MAAI;AACJ,MAAI;AACF,mBAAe,MAAM,QAAQ,aAAa;AAAA,MACxC,WAAW,QAAQ;AAAA,MACnB;AAAA,MACA,OAAO,EAAE,UAAU,MAAM,UAAU,gBAAgB,MAAM,eAAe;AAAA,MACxE;AAAA,MACA;AAAA,IACF,CAAC;AAAA,EACH,SAAS,KAAK;AACZ,UAAM,UAAU,eAAe,QAAQ,IAAI,UAAU;AACrD,UAAM;AAAA,MACJ;AAAA,MACA,EAAE,WAAW,QAAQ,MAAM,GAAG,GAAG,EAAE;AAAA,MACnC,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AAGA,QAAM,gBAAiB,QAAQ,gBAAmD,CAAC;AACnF,UAAQ,eAAe,EAAE,GAAG,eAAe,GAAG,aAAa,kBAAkB;AAC7E,MAAI,aAAa,WAAW,YAAY,OAAO,aAAa,mCAAmC,UAAU;AACvG,YAAQ,sBAAsB,aAAa;AAAA,EAC7C;AACA,QAAM,GAAG,MAAM;AAEf,MAAI,aAAa,WAAW,UAAU;AACpC,UAAM;AAAA,MACJ;AAAA,MACA;AAAA,QACE,WAAW,QAAQ;AAAA,QACnB,aAAa,QAAQ;AAAA,QACrB,UAAU,MAAM;AAAA,QAChB,gBAAgB,MAAM;AAAA,MACxB;AAAA,MACA,EAAE,YAAY,KAAK;AAAA,IACrB;AAAA,EACF,OAAO;AACL,UAAM;AAAA,MACJ;AAAA,MACA;AAAA,QACE,WAAW,QAAQ;AAAA,QACnB,aAAa,QAAQ;AAAA,QACrB,UAAU,MAAM;AAAA,QAChB,gBAAgB,MAAM;AAAA,QACtB,OAAO,aAAa,SAAS;AAAA,MAC/B;AAAA,MACA,EAAE,YAAY,KAAK;AAAA,IACrB;AAAA,EACF;AAEA,SAAO;AAAA,IACL,WAAW,QAAQ;AAAA,IACnB,YAAY,aAAa;AAAA,IACzB,cAAe,QAAQ,gBAAmD,CAAC;AAAA,IAC3E,OAAO,aAAa;AAAA,EACtB;AACF;",
   "names": []
 }

package/dist/modules/communication_channels/commands/push-unregister.js

@@ -1,6 +1,7 @@
 import { z } from "zod";
 import { findOneWithDecryption } from "@open-mercato/shared/lib/encryption/find";
 import { CommunicationChannel } from "../data/entities.js";
+import { channelOrgScopeWhere } from "../lib/access-control.js";
 import { getChannelAdapterRegistry } from "../lib/adapter-registry-singleton.js";
 import { refreshCredentialsIfNeeded } from "../lib/credential-refresh.js";
 import { POLLING_ONLY_DEFAULT_INTERVAL_SECONDS } from "../lib/connect-channel.js";
@@ -14,14 +15,14 @@ async function pushUnregister(params) {
   const input = pushUnregisterSchema.parse(params.input);
   const { container, scope } = params;
   const em = container.resolve("em").fork();
-  const dscope = { tenantId: scope.tenantId, organizationId: scope.organizationId };
+  const dscope = { tenantId: scope.tenantId, organizationId: null };
   const channel = await findOneWithDecryption(
     em,
     CommunicationChannel,
     {
       id: input.channelId,
       tenantId: scope.tenantId,
-      organizationId: scope.organizationId
+      ...channelOrgScopeWhere(scope.organizationId)
     },
     void 0,
     dscope
@@ -46,7 +47,7 @@ async function pushUnregister(params) {
   }
   const credentialsScope = {
     tenantId: scope.tenantId,
-    organizationId: scope.organizationId,
+    organizationId: channel.organizationId ?? scope.tenantId,
     userId: channel.userId ?? null
   };
   let credentials = {};

package/dist/modules/communication_channels/commands/push-unregister.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/communication_channels/commands/push-unregister.ts"],
-  "sourcesContent": ["import { z } from 'zod'\nimport type { AwilixContainer } from 'awilix'\nimport { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { CommunicationChannel } from '../data/entities'\nimport { getChannelAdapterRegistry } from '../lib/adapter-registry-singleton'\nimport { refreshCredentialsIfNeeded } from '../lib/credential-refresh'\nimport { POLLING_ONLY_DEFAULT_INTERVAL_SECONDS } from '../lib/connect-channel'\nimport { emitCommunicationChannelsEvent } from '../events'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('communication_channels').child({ component: 'push-unregister' })\n\n/**\n * Spec C \u00A7 Phase C5 \u2014 Tear down a previously-registered push delivery.\n *\n * Called from `disconnect-channel.ts` (per-user disconnect path) so the\n * provider-side `users.watch` subscription doesn't keep firing\n * notifications at a webhook that no longer recognises the channel.\n *\n * Idempotent + best-effort: a missing registration, a 404 from the provider,\n * or any adapter error is logged but never raised. The caller still proceeds\n * with the disconnect (the channel row is cleared regardless of whether the\n * provider-side teardown succeeded).\n *\n * Companion to `commands/push-register.ts` \u2014 same lib-style helper shape,\n * not a `registerCommand`-style command (push lifecycle has no undo).\n */\n\nexport const pushUnregisterSchema = z.object({\n  channelId: z.string().uuid(),\n})\n\nexport interface PushUnregisterScope {\n  tenantId: string\n  organizationId: string\n  userId?: string | null\n}\n\nexport interface PushUnregisterResult {\n  channelId: string\n  status: 'unregistered' | 'noop' | 'failed'\n  error?: { code: string; message: string }\n}\n\ntype CredentialsServiceLike = {\n  resolve: (\n    integrationId: string,\n    scope: { organizationId: string; tenantId: string; userId?: string | null },\n  ) => Promise<Record<string, unknown> | null>\n  save?: (\n    integrationId: string,\n    credentials: Record<string, unknown>,\n    scope: { organizationId: string; tenantId: string; userId?: string | null },\n  ) => Promise<void>\n}\n\nexport async function pushUnregister(params: {\n  container: AwilixContainer\n  scope: PushUnregisterScope\n  input: { channelId: string }\n}): Promise<PushUnregisterResult> {\n  const input = pushUnregisterSchema.parse(params.input)\n  const { container, scope } = params\n\n  const em = (container.resolve('em') as EntityManager).fork()\n  const dscope = { tenantId: scope.tenantId, organizationId: scope.organizationId }\n\n  const channel = await findOneWithDecryption(\n    em,\n    CommunicationChannel,\n    {\n      id: input.channelId,\n      tenantId: scope.tenantId,\n      organizationId: scope.organizationId,\n    },\n    undefined,\n    dscope,\n  )\n  if (!channel) {\n    return { channelId: input.channelId, status: 'noop' }\n  }\n\n  const adapter = getChannelAdapterRegistry().get(channel.providerKey)\n  if (!adapter || typeof adapter.unregisterPush !== 'function') {\n    return { channelId: channel.id, status: 'noop' }\n  }\n\n  const channelState = (channel.channelState as Record<string, unknown> | null) ?? {}\n  const pushStatus = typeof channelState.pushStatus === 'string' ? channelState.pushStatus : null\n  if (!pushStatus || pushStatus === 'inactive') {\n    return { channelId: channel.id, status: 'noop' }\n  }\n\n  let credentialsService: CredentialsServiceLike | null = null\n  try {\n    credentialsService = container.resolve('integrationCredentialsService') as CredentialsServiceLike\n  } catch {\n    credentialsService = null\n  }\n  const credentialsScope = {\n    tenantId: scope.tenantId,\n    organizationId: scope.organizationId,\n    userId: channel.userId ?? null,\n  }\n  let credentials: Record<string, unknown> = {}\n  if (channel.credentialsRef && credentialsService) {\n    try {\n      credentials =\n        (await credentialsService.resolve(`channel_${channel.providerKey}`, credentialsScope)) ?? {}\n    } catch {\n      credentials = {}\n    }\n  }\n  try {\n    const refreshed = await refreshCredentialsIfNeeded(\n      { adapter, channelId: channel.id, credentials, scope: credentialsScope },\n      { credentialsService },\n    )\n    credentials = refreshed.credentials\n  } catch {\n    // Refresh failure is non-fatal \u2014 unregister tolerates expired tokens\n    // because the provider will simply return 401, which the adapter swallows\n    // or we ignore below.\n  }\n\n  try {\n    await adapter.unregisterPush({\n      channelId: channel.id,\n      credentials,\n      scope: { tenantId: scope.tenantId, organizationId: scope.organizationId },\n      channelState,\n    })\n  } catch (err) {\n    const message = err instanceof Error ? err.message : String(err)\n    logger.warn('adapter.unregisterPush failed for channel', { channelId: channel.id, reason: message })\n    return {\n      channelId: channel.id,\n      status: 'failed',\n      error: { code: 'adapter_unregister_failed', message: message.slice(0, 500) },\n    }\n  }\n\n  // Clear push markers from channel state so a subsequent reconnect starts\n  // fresh.\n  channel.channelState = {\n    ...channelState,\n    pushStatus: 'inactive',\n    watchExpirationMs: null,\n  }\n  // Restore the polling-only default cadence (matching connect) so the channel\n  // keeps working until disconnect itself flips `isActive: false`.\n  channel.pollIntervalSeconds = POLLING_ONLY_DEFAULT_INTERVAL_SECONDS\n  await em.flush()\n\n  await emitCommunicationChannelsEvent(\n    'communication_channels.push.deactivated',\n    {\n      channelId: channel.id,\n      providerKey: channel.providerKey,\n      tenantId: scope.tenantId,\n      organizationId: scope.organizationId,\n      reason: 'unregistered',\n    },\n    { persistent: true },\n  )\n\n  return { channelId: channel.id, status: 'unregistered' }\n}\n"],
-  "mappings": "AAAA,SAAS,SAAS;AAElB,SAAS,6BAA6B;AAEtC,SAAS,4BAA4B;AACrC,SAAS,iCAAiC;AAC1C,SAAS,kCAAkC;AAC3C,SAAS,6CAA6C;AACtD,SAAS,sCAAsC;AAC/C,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,wBAAwB,EAAE,MAAM,EAAE,WAAW,kBAAkB,CAAC;AAkBrF,MAAM,uBAAuB,EAAE,OAAO;AAAA,EAC3C,WAAW,EAAE,OAAO,EAAE,KAAK;AAC7B,CAAC;AA0BD,eAAsB,eAAe,QAIH;AAChC,QAAM,QAAQ,qBAAqB,MAAM,OAAO,KAAK;AACrD,QAAM,EAAE,WAAW,MAAM,IAAI;AAE7B,QAAM,KAAM,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC3D,QAAM,SAAS,EAAE,UAAU,MAAM,UAAU,gBAAgB,MAAM,eAAe;AAEhF,QAAM,UAAU,MAAM;AAAA,IACpB;AAAA,IACA;AAAA,IACA;AAAA,MACE,IAAI,MAAM;AAAA,MACV,UAAU,MAAM;AAAA,MAChB,gBAAgB,MAAM;AAAA,IACxB;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACA,MAAI,CAAC,SAAS;AACZ,WAAO,EAAE,WAAW,MAAM,WAAW,QAAQ,OAAO;AAAA,EACtD;AAEA,QAAM,UAAU,0BAA0B,EAAE,IAAI,QAAQ,WAAW;AACnE,MAAI,CAAC,WAAW,OAAO,QAAQ,mBAAmB,YAAY;AAC5D,WAAO,EAAE,WAAW,QAAQ,IAAI,QAAQ,OAAO;AAAA,EACjD;AAEA,QAAM,eAAgB,QAAQ,gBAAmD,CAAC;AAClF,QAAM,aAAa,OAAO,aAAa,eAAe,WAAW,aAAa,aAAa;AAC3F,MAAI,CAAC,cAAc,eAAe,YAAY;AAC5C,WAAO,EAAE,WAAW,QAAQ,IAAI,QAAQ,OAAO;AAAA,EACjD;AAEA,MAAI,qBAAoD;AACxD,MAAI;AACF,yBAAqB,UAAU,QAAQ,+BAA+B;AAAA,EACxE,QAAQ;AACN,yBAAqB;AAAA,EACvB;AACA,QAAM,mBAAmB;AAAA,IACvB,UAAU,MAAM;AAAA,IAChB,gBAAgB,MAAM;AAAA,IACtB,QAAQ,QAAQ,UAAU;AAAA,EAC5B;AACA,MAAI,cAAuC,CAAC;AAC5C,MAAI,QAAQ,kBAAkB,oBAAoB;AAChD,QAAI;AACF,oBACG,MAAM,mBAAmB,QAAQ,WAAW,QAAQ,WAAW,IAAI,gBAAgB,KAAM,CAAC;AAAA,IAC/F,QAAQ;AACN,oBAAc,CAAC;AAAA,IACjB;AAAA,EACF;AACA,MAAI;AACF,UAAM,YAAY,MAAM;AAAA,MACtB,EAAE,SAAS,WAAW,QAAQ,IAAI,aAAa,OAAO,iBAAiB;AAAA,MACvE,EAAE,mBAAmB;AAAA,IACvB;AACA,kBAAc,UAAU;AAAA,EAC1B,QAAQ;AAAA,EAIR;AAEA,MAAI;AACF,UAAM,QAAQ,eAAe;AAAA,MAC3B,WAAW,QAAQ;AAAA,MACnB;AAAA,MACA,OAAO,EAAE,UAAU,MAAM,UAAU,gBAAgB,MAAM,eAAe;AAAA,MACxE;AAAA,IACF,CAAC;AAAA,EACH,SAAS,KAAK;AACZ,UAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC/D,WAAO,KAAK,6CAA6C,EAAE,WAAW,QAAQ,IAAI,QAAQ,QAAQ,CAAC;AACnG,WAAO;AAAA,MACL,WAAW,QAAQ;AAAA,MACnB,QAAQ;AAAA,MACR,OAAO,EAAE,MAAM,6BAA6B,SAAS,QAAQ,MAAM,GAAG,GAAG,EAAE;AAAA,IAC7E;AAAA,EACF;AAIA,UAAQ,eAAe;AAAA,IACrB,GAAG;AAAA,IACH,YAAY;AAAA,IACZ,mBAAmB;AAAA,EACrB;AAGA,UAAQ,sBAAsB;AAC9B,QAAM,GAAG,MAAM;AAEf,QAAM;AAAA,IACJ;AAAA,IACA;AAAA,MACE,WAAW,QAAQ;AAAA,MACnB,aAAa,QAAQ;AAAA,MACrB,UAAU,MAAM;AAAA,MAChB,gBAAgB,MAAM;AAAA,MACtB,QAAQ;AAAA,IACV;AAAA,IACA,EAAE,YAAY,KAAK;AAAA,EACrB;AAEA,SAAO,EAAE,WAAW,QAAQ,IAAI,QAAQ,eAAe;AACzD;",
+  "sourcesContent": ["import { z } from 'zod'\nimport type { AwilixContainer } from 'awilix'\nimport { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { CommunicationChannel } from '../data/entities'\nimport { channelOrgScopeWhere } from '../lib/access-control'\nimport { getChannelAdapterRegistry } from '../lib/adapter-registry-singleton'\nimport { refreshCredentialsIfNeeded } from '../lib/credential-refresh'\nimport { POLLING_ONLY_DEFAULT_INTERVAL_SECONDS } from '../lib/connect-channel'\nimport { emitCommunicationChannelsEvent } from '../events'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('communication_channels').child({ component: 'push-unregister' })\n\n/**\n * Spec C \u00A7 Phase C5 \u2014 Tear down a previously-registered push delivery.\n *\n * Called from `disconnect-channel.ts` (per-user disconnect path) so the\n * provider-side `users.watch` subscription doesn't keep firing\n * notifications at a webhook that no longer recognises the channel.\n *\n * Idempotent + best-effort: a missing registration, a 404 from the provider,\n * or any adapter error is logged but never raised. The caller still proceeds\n * with the disconnect (the channel row is cleared regardless of whether the\n * provider-side teardown succeeded).\n *\n * Companion to `commands/push-register.ts` \u2014 same lib-style helper shape,\n * not a `registerCommand`-style command (push lifecycle has no undo).\n */\n\nexport const pushUnregisterSchema = z.object({\n  channelId: z.string().uuid(),\n})\n\nexport interface PushUnregisterScope {\n  tenantId: string\n  organizationId: string\n  userId?: string | null\n}\n\nexport interface PushUnregisterResult {\n  channelId: string\n  status: 'unregistered' | 'noop' | 'failed'\n  error?: { code: string; message: string }\n}\n\ntype CredentialsServiceLike = {\n  resolve: (\n    integrationId: string,\n    scope: { organizationId: string; tenantId: string; userId?: string | null },\n  ) => Promise<Record<string, unknown> | null>\n  save?: (\n    integrationId: string,\n    credentials: Record<string, unknown>,\n    scope: { organizationId: string; tenantId: string; userId?: string | null },\n  ) => Promise<void>\n}\n\nexport async function pushUnregister(params: {\n  container: AwilixContainer\n  scope: PushUnregisterScope\n  input: { channelId: string }\n}): Promise<PushUnregisterResult> {\n  const input = pushUnregisterSchema.parse(params.input)\n  const { container, scope } = params\n\n  const em = (container.resolve('em') as EntityManager).fork()\n  // The channel ROW and the credentials store use DIFFERENT orgs. A tenant-wide push channel is\n  // stored with `organization_id = NULL` (its encrypted columns are keyed at org=null) even though\n  // its credentials are pinned at `organization_id = tenantId`. `scope.organizationId` here is the\n  // credentials/delivery org (tenantId for tenant-wide) \u2014 so it must NOT be used as an exact row\n  // filter (it would never match a null-org row) nor as the row decryption org. Look the row up\n  // null-aware and decrypt at the row's own org (null column \u21D2 null fallback); credential resolution\n  // below keeps using the credentials org.\n  const dscope = { tenantId: scope.tenantId, organizationId: null }\n\n  const channel = await findOneWithDecryption(\n    em,\n    CommunicationChannel,\n    {\n      id: input.channelId,\n      tenantId: scope.tenantId,\n      ...channelOrgScopeWhere(scope.organizationId),\n    },\n    undefined,\n    dscope,\n  )\n  if (!channel) {\n    return { channelId: input.channelId, status: 'noop' }\n  }\n\n  const adapter = getChannelAdapterRegistry().get(channel.providerKey)\n  if (!adapter || typeof adapter.unregisterPush !== 'function') {\n    return { channelId: channel.id, status: 'noop' }\n  }\n\n  const channelState = (channel.channelState as Record<string, unknown> | null) ?? {}\n  const pushStatus = typeof channelState.pushStatus === 'string' ? channelState.pushStatus : null\n  if (!pushStatus || pushStatus === 'inactive') {\n    return { channelId: channel.id, status: 'noop' }\n  }\n\n  let credentialsService: CredentialsServiceLike | null = null\n  try {\n    credentialsService = container.resolve('integrationCredentialsService') as CredentialsServiceLike\n  } catch {\n    credentialsService = null\n  }\n  // Resolve credentials at the channel's OWN org (tenant-wide channels store\n  // their credentials at `organization_id = tenantId`; see push-register.ts /\n  // connect-credential-channel.ts), never the caller's scope org.\n  const credentialsScope = {\n    tenantId: scope.tenantId,\n    organizationId: channel.organizationId ?? scope.tenantId,\n    userId: channel.userId ?? null,\n  }\n  let credentials: Record<string, unknown> = {}\n  if (channel.credentialsRef && credentialsService) {\n    try {\n      credentials =\n        (await credentialsService.resolve(`channel_${channel.providerKey}`, credentialsScope)) ?? {}\n    } catch {\n      credentials = {}\n    }\n  }\n  try {\n    const refreshed = await refreshCredentialsIfNeeded(\n      { adapter, channelId: channel.id, credentials, scope: credentialsScope },\n      { credentialsService },\n    )\n    credentials = refreshed.credentials\n  } catch {\n    // Refresh failure is non-fatal \u2014 unregister tolerates expired tokens\n    // because the provider will simply return 401, which the adapter swallows\n    // or we ignore below.\n  }\n\n  try {\n    await adapter.unregisterPush({\n      channelId: channel.id,\n      credentials,\n      scope: { tenantId: scope.tenantId, organizationId: scope.organizationId },\n      channelState,\n    })\n  } catch (err) {\n    const message = err instanceof Error ? err.message : String(err)\n    logger.warn('adapter.unregisterPush failed for channel', { channelId: channel.id, reason: message })\n    return {\n      channelId: channel.id,\n      status: 'failed',\n      error: { code: 'adapter_unregister_failed', message: message.slice(0, 500) },\n    }\n  }\n\n  // Clear push markers from channel state so a subsequent reconnect starts\n  // fresh.\n  channel.channelState = {\n    ...channelState,\n    pushStatus: 'inactive',\n    watchExpirationMs: null,\n  }\n  // Restore the polling-only default cadence (matching connect) so the channel\n  // keeps working until disconnect itself flips `isActive: false`.\n  channel.pollIntervalSeconds = POLLING_ONLY_DEFAULT_INTERVAL_SECONDS\n  await em.flush()\n\n  await emitCommunicationChannelsEvent(\n    'communication_channels.push.deactivated',\n    {\n      channelId: channel.id,\n      providerKey: channel.providerKey,\n      tenantId: scope.tenantId,\n      organizationId: scope.organizationId,\n      reason: 'unregistered',\n    },\n    { persistent: true },\n  )\n\n  return { channelId: channel.id, status: 'unregistered' }\n}\n"],
+  "mappings": "AAAA,SAAS,SAAS;AAElB,SAAS,6BAA6B;AAEtC,SAAS,4BAA4B;AACrC,SAAS,4BAA4B;AACrC,SAAS,iCAAiC;AAC1C,SAAS,kCAAkC;AAC3C,SAAS,6CAA6C;AACtD,SAAS,sCAAsC;AAC/C,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,wBAAwB,EAAE,MAAM,EAAE,WAAW,kBAAkB,CAAC;AAkBrF,MAAM,uBAAuB,EAAE,OAAO;AAAA,EAC3C,WAAW,EAAE,OAAO,EAAE,KAAK;AAC7B,CAAC;AA0BD,eAAsB,eAAe,QAIH;AAChC,QAAM,QAAQ,qBAAqB,MAAM,OAAO,KAAK;AACrD,QAAM,EAAE,WAAW,MAAM,IAAI;AAE7B,QAAM,KAAM,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAQ3D,QAAM,SAAS,EAAE,UAAU,MAAM,UAAU,gBAAgB,KAAK;AAEhE,QAAM,UAAU,MAAM;AAAA,IACpB;AAAA,IACA;AAAA,IACA;AAAA,MACE,IAAI,MAAM;AAAA,MACV,UAAU,MAAM;AAAA,MAChB,GAAG,qBAAqB,MAAM,cAAc;AAAA,IAC9C;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACA,MAAI,CAAC,SAAS;AACZ,WAAO,EAAE,WAAW,MAAM,WAAW,QAAQ,OAAO;AAAA,EACtD;AAEA,QAAM,UAAU,0BAA0B,EAAE,IAAI,QAAQ,WAAW;AACnE,MAAI,CAAC,WAAW,OAAO,QAAQ,mBAAmB,YAAY;AAC5D,WAAO,EAAE,WAAW,QAAQ,IAAI,QAAQ,OAAO;AAAA,EACjD;AAEA,QAAM,eAAgB,QAAQ,gBAAmD,CAAC;AAClF,QAAM,aAAa,OAAO,aAAa,eAAe,WAAW,aAAa,aAAa;AAC3F,MAAI,CAAC,cAAc,eAAe,YAAY;AAC5C,WAAO,EAAE,WAAW,QAAQ,IAAI,QAAQ,OAAO;AAAA,EACjD;AAEA,MAAI,qBAAoD;AACxD,MAAI;AACF,yBAAqB,UAAU,QAAQ,+BAA+B;AAAA,EACxE,QAAQ;AACN,yBAAqB;AAAA,EACvB;AAIA,QAAM,mBAAmB;AAAA,IACvB,UAAU,MAAM;AAAA,IAChB,gBAAgB,QAAQ,kBAAkB,MAAM;AAAA,IAChD,QAAQ,QAAQ,UAAU;AAAA,EAC5B;AACA,MAAI,cAAuC,CAAC;AAC5C,MAAI,QAAQ,kBAAkB,oBAAoB;AAChD,QAAI;AACF,oBACG,MAAM,mBAAmB,QAAQ,WAAW,QAAQ,WAAW,IAAI,gBAAgB,KAAM,CAAC;AAAA,IAC/F,QAAQ;AACN,oBAAc,CAAC;AAAA,IACjB;AAAA,EACF;AACA,MAAI;AACF,UAAM,YAAY,MAAM;AAAA,MACtB,EAAE,SAAS,WAAW,QAAQ,IAAI,aAAa,OAAO,iBAAiB;AAAA,MACvE,EAAE,mBAAmB;AAAA,IACvB;AACA,kBAAc,UAAU;AAAA,EAC1B,QAAQ;AAAA,EAIR;AAEA,MAAI;AACF,UAAM,QAAQ,eAAe;AAAA,MAC3B,WAAW,QAAQ;AAAA,MACnB;AAAA,MACA,OAAO,EAAE,UAAU,MAAM,UAAU,gBAAgB,MAAM,eAAe;AAAA,MACxE;AAAA,IACF,CAAC;AAAA,EACH,SAAS,KAAK;AACZ,UAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC/D,WAAO,KAAK,6CAA6C,EAAE,WAAW,QAAQ,IAAI,QAAQ,QAAQ,CAAC;AACnG,WAAO;AAAA,MACL,WAAW,QAAQ;AAAA,MACnB,QAAQ;AAAA,MACR,OAAO,EAAE,MAAM,6BAA6B,SAAS,QAAQ,MAAM,GAAG,GAAG,EAAE;AAAA,IAC7E;AAAA,EACF;AAIA,UAAQ,eAAe;AAAA,IACrB,GAAG;AAAA,IACH,YAAY;AAAA,IACZ,mBAAmB;AAAA,EACrB;AAGA,UAAQ,sBAAsB;AAC9B,QAAM,GAAG,MAAM;AAEf,QAAM;AAAA,IACJ;AAAA,IACA;AAAA,MACE,WAAW,QAAQ;AAAA,MACnB,aAAa,QAAQ;AAAA,MACrB,UAAU,MAAM;AAAA,MAChB,gBAAgB,MAAM;AAAA,MACtB,QAAQ;AAAA,IACV;AAAA,IACA,EAAE,YAAY,KAAK;AAAA,EACrB;AAEA,SAAO,EAAE,WAAW,QAAQ,IAAI,QAAQ,eAAe;AACzD;",
   "names": []
 }

package/dist/modules/communication_channels/data/entities.js

@@ -103,6 +103,10 @@ CommunicationChannel = __decorateClass([
   Index({
     name: "communication_channels_user_provider_external_uq",
     expression: `create unique index "communication_channels_user_provider_external_uq" on "communication_channels" ("tenant_id", "user_id", "provider_key", "external_identifier") where "deleted_at" is null and "user_id" is not null and "external_identifier" is not null`
+  }),
+  Index({
+    name: "communication_channels_tenant_push_provider_uq",
+    expression: `create unique index "communication_channels_tenant_push_provider_uq" on "communication_channels" ("tenant_id", "provider_key") where "channel_type" = 'push' and "user_id" is null and "deleted_at" is null`
   })
 ], CommunicationChannel);
 OptionalProps;

package/dist/modules/communication_channels/data/entities.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/communication_channels/data/entities.ts"],
-  "sourcesContent": ["import { OptionalProps } from '@mikro-orm/core'\nimport { Check, Entity, Index, PrimaryKey, Property, Unique } from '@mikro-orm/decorators/legacy'\n\n/**\n * Hub entities for the Communication Channels module.\n *\n * Cross-module references (e.g. `MessageChannelLink.messageId \u2192 messages.message.id`)\n * use plain `uuid` columns, NOT MikroORM `@ManyToOne` decorators. Project rule:\n * \"No direct ORM relationships between modules \u2014 use foreign key IDs, fetch separately.\"\n * Cross-module links are declared in `data/extensions.ts` via `EntityExtension`.\n *\n * See SPEC-045d \u00A72.2.\n */\n\n// \u2500\u2500 CommunicationChannel \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\n/**\n * Per-channel lifecycle status. Set by the polling worker / outbound subscriber\n * + the `markChannelRequiresReauth` command. Existing `isActive` remains for the\n * coarse admin enable/disable toggle; `status` is the finer-grained operational\n * state used by per-user reconnect flows.\n *\n * Email integration spec \u00A7 Hub Deltas \u2192 Delta 2.\n */\nexport type CommunicationChannelStatus =\n  | 'connected'\n  | 'requires_reauth'\n  | 'error'\n  | 'disconnected'\n\n@Entity({ tableName: 'communication_channels' })\n@Index({ name: 'communication_channels_tenant_provider_idx', properties: ['tenantId', 'providerKey'] })\n// Provider-push webhooks (Gmail Pub/Sub) resolve channels by (provider_key,\n// external_identifier) WITHOUT a tenant_id \u2014 they only know the mailbox address.\n// Without this index that lookup is a full scan over every channel of the\n// provider, which a (signature-verified) push or replay repeats on every hit.\n@Index({\n  name: 'communication_channels_provider_external_idx',\n  expression:\n    `create index \"communication_channels_provider_external_idx\" on \"communication_channels\" (\"provider_key\", \"external_identifier\") where \"deleted_at\" is null`,\n})\n@Index({ name: 'communication_channels_tenant_type_active_idx', properties: ['tenantId', 'channelType', 'isActive'] })\n@Index({\n  name: 'communication_channels_user_lookup_idx',\n  properties: ['userId', 'channelType', 'deletedAt'],\n})\n@Index({\n  name: 'communication_channels_poll_due_idx',\n  expression:\n    `create index \"communication_channels_poll_due_idx\" on \"communication_channels\" (\"is_active\", \"last_polled_at\") where \"deleted_at\" is null`,\n})\n@Index({\n  name: 'communication_channels_one_primary_per_user_uq',\n  expression:\n    `create unique index \"communication_channels_one_primary_per_user_uq\" on \"communication_channels\" (\"user_id\") where \"is_primary\" and \"user_id\" is not null and \"deleted_at\" is null`,\n})\n// One channel per (tenant, user, provider, mailbox): a reconnect heals the\n// existing row in place (see `createConnectedChannelRow`) instead of inserting a\n// duplicate that would stay polled + keep its own push subscription. Partial so\n// tenant-wide channels (null user_id) and identifier-less rows are exempt.\n@Index({\n  name: 'communication_channels_user_provider_external_uq',\n  expression:\n    `create unique index \"communication_channels_user_provider_external_uq\" on \"communication_channels\" (\"tenant_id\", \"user_id\", \"provider_key\", \"external_identifier\") where \"deleted_at\" is null and \"user_id\" is not null and \"external_identifier\" is not null`,\n})\nexport class CommunicationChannel {\n  [OptionalProps]?:\n    | 'createdAt'\n    | 'updatedAt'\n    | 'isActive'\n    | 'capabilities'\n    | 'deletedAt'\n    | 'externalIdentifier'\n    | 'credentialsRef'\n    | 'organizationId'\n    | 'userId'\n    | 'isPrimary'\n    | 'pollIntervalSeconds'\n    | 'lastPolledAt'\n    | 'status'\n    | 'lastError'\n    | 'channelState'\n\n  @PrimaryKey({ type: 'uuid', defaultRaw: 'gen_random_uuid()' })\n  id!: string\n\n  @Property({ name: 'provider_key', type: 'text' })\n  providerKey!: string\n\n  @Property({ name: 'channel_type', type: 'text' })\n  channelType!: string\n\n  @Property({ name: 'display_name', type: 'text' })\n  displayName!: string\n\n  @Property({ name: 'external_identifier', type: 'text', nullable: true })\n  externalIdentifier?: string | null\n\n  @Property({ name: 'credentials_ref', type: 'uuid', nullable: true })\n  credentialsRef?: string | null\n\n  @Property({ name: 'capabilities', type: 'json', nullable: true })\n  capabilities?: Record<string, unknown> | null\n\n  @Property({ name: 'is_active', type: 'boolean', default: true })\n  isActive: boolean = true\n\n  /**\n   * Per-user channel owner. NULL = tenant-scoped (existing behaviour, e.g. WhatsApp Business).\n   * Set = user-scoped (e.g. Jane's personal Gmail). Visible only to the owning user\n   * and to admins with `communication_channels.admin`. Linked to `auth:user` via\n   * `EntityExtension` in `data/extensions.ts` \u2014 never a raw DB FK.\n   */\n  @Property({ name: 'user_id', type: 'uuid', nullable: true })\n  userId?: string | null\n\n  /**\n   * Per-user \"primary\" flag. Only meaningful when `userId IS NOT NULL`; ignored\n   * for tenant-scoped channels. Enforced as one-primary-per-user by the partial\n   * unique index `communication_channels_one_primary_per_user_uq`.\n   */\n  @Property({ name: 'is_primary', type: 'boolean', default: false })\n  isPrimary: boolean = false\n\n  /**\n   * Polling cadence in seconds. NULL means \"this channel does not poll\" \u2014 i.e. it\n   * is push-only (webhook) or its provider opted out via\n   * `ChannelCapabilities.realtimePush !== false`. Set means hub-managed polling\n   * at that interval via the `poll-tick` scheduler entry.\n   */\n  @Property({ name: 'poll_interval_seconds', type: 'int', nullable: true })\n  pollIntervalSeconds?: number | null\n\n  /** Last successful poll timestamp; the scheduler enumerates by this column. */\n  @Property({ name: 'last_polled_at', type: Date, nullable: true })\n  lastPolledAt?: Date | null\n\n  /**\n   * Per-channel lifecycle status. See {@link CommunicationChannelStatus}.\n   * Migration sets `status = 'connected'` for all existing active channels (default value).\n   */\n  @Property({ name: 'status', type: 'text', default: 'connected' })\n  status: CommunicationChannelStatus = 'connected'\n\n  /** Most recent classified error message for diagnostics. */\n  @Property({ name: 'last_error', type: 'text', nullable: true })\n  lastError?: string | null\n\n  /**\n   * Provider-specific resumption state, opaque to the hub. Polling adapters\n   * encode their incremental cursor here (Gmail historyId, IMAP\n   * UIDVALIDITY+UIDNEXT). The polling worker reads it before each\n   * `fetchHistory` call and writes the adapter's returned `nextCursor` back\n   * after a successful poll. Empty / NULL means \"bootstrap on next poll\".\n   */\n  @Property({ name: 'channel_state', type: 'json', nullable: true })\n  channelState?: Record<string, unknown> | null\n\n  @Property({ name: 'tenant_id', type: 'uuid' })\n  tenantId!: string\n\n  @Property({ name: 'organization_id', type: 'uuid', nullable: true })\n  organizationId?: string | null\n\n  @Property({ name: 'created_at', type: Date, onCreate: () => new Date() })\n  createdAt: Date = new Date()\n\n  @Property({ name: 'updated_at', type: Date, onUpdate: () => new Date() })\n  updatedAt: Date = new Date()\n\n  @Property({ name: 'deleted_at', type: Date, nullable: true })\n  deletedAt?: Date | null\n}\n\n// \u2500\u2500 ExternalConversation \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\n@Entity({ tableName: 'external_conversations' })\n@Index({ name: 'external_conversations_channel_idx', properties: ['channelId', 'externalConversationId'] })\n@Index({ name: 'external_conversations_contact_person_idx', properties: ['contactPersonId'] })\n@Index({ name: 'external_conversations_assigned_user_idx', properties: ['assignedUserId'] })\n@Unique({ name: 'external_conversations_channel_external_uq', properties: ['channelId', 'externalConversationId'] })\nexport class ExternalConversation {\n  [OptionalProps]?: 'createdAt' | 'updatedAt' | 'lastMessageAt' | 'subject' | 'contactPersonId' | 'assignedUserId' | 'organizationId'\n\n  @PrimaryKey({ type: 'uuid', defaultRaw: 'gen_random_uuid()' })\n  id!: string\n\n  @Property({ name: 'channel_id', type: 'uuid' })\n  channelId!: string\n\n  @Property({ name: 'external_conversation_id', type: 'text' })\n  externalConversationId!: string\n\n  @Property({ name: 'subject', type: 'text', nullable: true })\n  subject?: string | null\n\n  @Property({ name: 'contact_person_id', type: 'uuid', nullable: true })\n  contactPersonId?: string | null\n\n  @Property({ name: 'assigned_user_id', type: 'uuid', nullable: true })\n  assignedUserId?: string | null\n\n  @Property({ name: 'last_message_at', type: Date, nullable: true })\n  lastMessageAt?: Date | null\n\n  @Property({ name: 'tenant_id', type: 'uuid' })\n  tenantId!: string\n\n  @Property({ name: 'organization_id', type: 'uuid', nullable: true })\n  organizationId?: string | null\n\n  @Property({ name: 'created_at', type: Date, onCreate: () => new Date() })\n  createdAt: Date = new Date()\n\n  @Property({ name: 'updated_at', type: Date, onUpdate: () => new Date() })\n  updatedAt: Date = new Date()\n}\n\n// \u2500\u2500 ExternalMessage \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\n@Entity({ tableName: 'external_messages' })\n@Index({ name: 'external_messages_conversation_idx', properties: ['conversationId'] })\n@Index({ name: 'external_messages_channel_external_idx', properties: ['channelId', 'externalMessageId'] })\n@Unique({ name: 'external_messages_channel_external_uq', properties: ['channelId', 'externalMessageId'] })\nexport class ExternalMessage {\n  [OptionalProps]?: 'createdAt' | 'senderIdentifier' | 'senderDisplayName' | 'providerTimestamp' | 'organizationId'\n\n  @PrimaryKey({ type: 'uuid', defaultRaw: 'gen_random_uuid()' })\n  id!: string\n\n  @Property({ name: 'channel_id', type: 'uuid' })\n  channelId!: string\n\n  @Property({ name: 'conversation_id', type: 'uuid' })\n  conversationId!: string\n\n  @Property({ name: 'external_message_id', type: 'text' })\n  externalMessageId!: string\n\n  @Property({ name: 'direction', type: 'text' })\n  direction!: 'inbound' | 'outbound'\n\n  @Property({ name: 'sender_identifier', type: 'text', nullable: true })\n  senderIdentifier?: string | null\n\n  @Property({ name: 'sender_display_name', type: 'text', nullable: true })\n  senderDisplayName?: string | null\n\n  @Property({ name: 'provider_timestamp', type: Date, nullable: true })\n  providerTimestamp?: Date | null\n\n  @Property({ name: 'tenant_id', type: 'uuid' })\n  tenantId!: string\n\n  @Property({ name: 'organization_id', type: 'uuid', nullable: true })\n  organizationId?: string | null\n\n  @Property({ name: 'created_at', type: Date, onCreate: () => new Date() })\n  createdAt: Date = new Date()\n}\n\n// \u2500\u2500 MessageChannelLink \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\n@Entity({ tableName: 'message_channel_links' })\n@Index({ name: 'message_channel_links_message_idx', properties: ['messageId'] })\n@Index({ name: 'message_channel_links_ext_conv_idx', properties: ['externalConversationId'] })\n@Index({ name: 'message_channel_links_ext_msg_idx', properties: ['externalMessageId'] })\n@Unique({ name: 'message_channel_links_message_uq', properties: ['messageId'] })\nexport class MessageChannelLink {\n  [OptionalProps]?: 'createdAt' | 'deliveryStatus' | 'externalMessageId' | 'channelPayload' | 'channelContentType' | 'interactiveState' | 'channelMetadata' | 'organizationId'\n\n  @PrimaryKey({ type: 'uuid', defaultRaw: 'gen_random_uuid()' })\n  id!: string\n\n  /** Logical link to messages.message.id (no DB FK \u2014 cross-module via EntityExtension). */\n  @Property({ name: 'message_id', type: 'uuid' })\n  messageId!: string\n\n  /** FK to external_conversations.id (intra-module \u2014 DB FK acceptable but kept as plain uuid for symmetry). */\n  @Property({ name: 'external_conversation_id', type: 'uuid' })\n  externalConversationId!: string\n\n  @Property({ name: 'external_message_id', type: 'uuid', nullable: true })\n  externalMessageId?: string | null\n\n  @Property({ name: 'provider_key', type: 'text' })\n  providerKey!: string\n\n  @Property({ name: 'channel_type', type: 'text' })\n  channelType!: string\n\n  @Property({ name: 'direction', type: 'text' })\n  direction!: 'inbound' | 'outbound'\n\n  @Property({ name: 'delivery_status', type: 'text' })\n  deliveryStatus: string = 'pending'\n\n  @Property({ name: 'channel_payload', type: 'json', nullable: true })\n  channelPayload?: Record<string, unknown> | null\n\n  @Property({ name: 'channel_content_type', type: 'text', nullable: true })\n  channelContentType?: string | null\n\n  @Property({ name: 'interactive_state', type: 'json', nullable: true })\n  interactiveState?: Record<string, unknown> | null\n\n  @Property({ name: 'channel_metadata', type: 'json', nullable: true })\n  channelMetadata?: Record<string, unknown> | null\n\n  @Property({ name: 'tenant_id', type: 'uuid' })\n  tenantId!: string\n\n  @Property({ name: 'organization_id', type: 'uuid', nullable: true })\n  organizationId?: string | null\n\n  @Property({ name: 'created_at', type: Date, onCreate: () => new Date() })\n  createdAt: Date = new Date()\n}\n\n// \u2500\u2500 ChannelThreadMapping \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\n@Entity({ tableName: 'channel_thread_mappings' })\n@Index({ name: 'channel_thread_mappings_ext_conv_idx', properties: ['externalConversationId', 'tenantId'] })\n@Index({ name: 'channel_thread_mappings_thread_idx', properties: ['messageThreadId', 'tenantId'] })\n@Unique({ name: 'channel_thread_mappings_ext_conv_uq', properties: ['externalConversationId', 'tenantId'] })\nexport class ChannelThreadMapping {\n  [OptionalProps]?: 'createdAt' | 'updatedAt' | 'assignedUserId' | 'organizationId'\n\n  @PrimaryKey({ type: 'uuid', defaultRaw: 'gen_random_uuid()' })\n  id!: string\n\n  @Property({ name: 'external_conversation_id', type: 'uuid' })\n  externalConversationId!: string\n\n  /** Logical link to messages.message.thread_id (no DB FK \u2014 cross-module). */\n  @Property({ name: 'message_thread_id', type: 'uuid' })\n  messageThreadId!: string\n\n  @Property({ name: 'channel_id', type: 'uuid' })\n  channelId!: string\n\n  @Property({ name: 'provider_key', type: 'text' })\n  providerKey!: string\n\n  @Property({ name: 'external_thread_ref', type: 'text' })\n  externalThreadRef!: string\n\n  /** Logical link to auth.user.id (no DB FK \u2014 cross-module). */\n  @Property({ name: 'assigned_user_id', type: 'uuid', nullable: true })\n  assignedUserId?: string | null\n\n  @Property({ name: 'tenant_id', type: 'uuid' })\n  tenantId!: string\n\n  @Property({ name: 'organization_id', type: 'uuid', nullable: true })\n  organizationId?: string | null\n\n  @Property({ name: 'created_at', type: Date, onCreate: () => new Date() })\n  createdAt: Date = new Date()\n\n  @Property({ name: 'updated_at', type: Date, onUpdate: () => new Date() })\n  updatedAt: Date = new Date()\n}\n\n// \u2500\u2500 MessageReaction \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\n@Entity({ tableName: 'message_reactions' })\n@Index({ name: 'message_reactions_message_idx', properties: ['messageId'] })\n@Index({ name: 'message_reactions_message_emoji_idx', properties: ['messageId', 'emoji'] })\n@Index({\n  name: 'message_reactions_internal_actor_uq',\n  expression:\n    `create unique index \"message_reactions_internal_actor_uq\" on \"message_reactions\" (\"tenant_id\", \"message_id\", \"emoji\", \"reacted_by_user_id\") where \"reacted_by_user_id\" is not null`,\n})\n@Index({\n  name: 'message_reactions_external_actor_uq',\n  expression:\n    `create unique index \"message_reactions_external_actor_uq\" on \"message_reactions\" (\"tenant_id\", \"message_id\", \"emoji\", \"reacted_by_external_id\") where \"reacted_by_external_id\" is not null`,\n})\n@Check({\n  name: 'message_reactions_exactly_one_actor_chk',\n  expression: `(\"reacted_by_user_id\" is null) <> (\"reacted_by_external_id\" is null)`,\n})\nexport class MessageReaction {\n  [OptionalProps]?: 'createdAt' | 'reactedByUserId' | 'reactedByExternalId' | 'reactedByDisplayName' | 'providerKey' | 'externalReactionId' | 'organizationId'\n\n  @PrimaryKey({ type: 'uuid', defaultRaw: 'gen_random_uuid()' })\n  id!: string\n\n  /** Logical link to messages.message.id (no DB FK \u2014 cross-module). */\n  @Property({ name: 'message_id', type: 'uuid' })\n  messageId!: string\n\n  @Property({ name: 'emoji', type: 'text' })\n  emoji!: string\n\n  /** Logical link to auth.user.id (no DB FK \u2014 cross-module). NULL for external reactions. */\n  @Property({ name: 'reacted_by_user_id', type: 'uuid', nullable: true })\n  reactedByUserId?: string | null\n\n  @Property({ name: 'reacted_by_external_id', type: 'text', nullable: true })\n  reactedByExternalId?: string | null\n\n  @Property({ name: 'reacted_by_display_name', type: 'text', nullable: true })\n  reactedByDisplayName?: string | null\n\n  @Property({ name: 'provider_key', type: 'text', nullable: true })\n  providerKey?: string | null\n\n  @Property({ name: 'external_reaction_id', type: 'text', nullable: true })\n  externalReactionId?: string | null\n\n  @Property({ name: 'tenant_id', type: 'uuid' })\n  tenantId!: string\n\n  @Property({ name: 'organization_id', type: 'uuid', nullable: true })\n  organizationId?: string | null\n\n  @Property({ name: 'created_at', type: Date, onCreate: () => new Date() })\n  createdAt: Date = new Date()\n}\n\n// \u2500\u2500 ChannelThreadToken \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\n/**\n * Per-thread HMAC-signed opaque token used by the layered thread-matcher to\n * reliably attach inbound replies to the originating Open Mercato message\n * thread, even when the recipient's mail client strips RFC 5322 headers.\n *\n * Created lazily on the first outbound message in a thread by the\n * `outbound-bridge` subscriber. The token is injected into:\n *   1. The MIME `References:` header as `<om_TOKEN@open-mercato.invalid>` \u2014\n *      invisible to the recipient and survives most reply clients.\n *   2. A hidden HTML body span `<span style=\"display:none\">[OM:om_TOKEN]</span>` \u2014\n *      survives when References is stripped (e.g. some mobile clients).\n *   3. A plain-text trailer `[OM:om_TOKEN]` \u2014 survives plain-text-only replies.\n *\n * The unique constraint is `(tenantId, token)` \u2014 tenant isolation by\n * construction. HMAC verification (via `lib/thread-token.ts`) defends against\n * forged inbound messages: tokens that don't HMAC-verify never reach the DB\n * lookup.\n *\n * See `.ai/specs/implemented/2026-05-27-email-integration-inbound-reliability-and-threading.md`.\n */\n@Entity({ tableName: 'channel_thread_tokens' })\n// One token row per (tenant, thread): the matcher resolves every reply to the\n// same thread regardless of which outbound send minted the token. The unique\n// constraint also makes `getOrCreateThreadToken` race-safe (insert-on-conflict).\n@Unique({ name: 'channel_thread_tokens_thread_uq', properties: ['tenantId', 'messageThreadId'] })\n@Unique({ name: 'channel_thread_tokens_token_uq', properties: ['tenantId', 'token'] })\nexport class ChannelThreadToken {\n  [OptionalProps]?: 'createdAt' | 'lastSeenAt' | 'organizationId'\n\n  @PrimaryKey({ type: 'uuid', defaultRaw: 'gen_random_uuid()' })\n  id!: string\n\n  @Property({ name: 'tenant_id', type: 'uuid' })\n  tenantId!: string\n\n  @Property({ name: 'organization_id', type: 'uuid', nullable: true })\n  organizationId?: string | null\n\n  /** Logical link to messages.message.thread_id (no DB FK \u2014 cross-module). */\n  @Property({ name: 'message_thread_id', type: 'uuid' })\n  messageThreadId!: string\n\n  /**\n   * HMAC-signed opaque token, format: `om_<22b64url>_<11b64url>` (16 random\n   * bytes + 8 HMAC bytes, each base64url-encoded without padding), ~37 chars.\n   */\n  @Property({ name: 'token', type: 'text' })\n  token!: string\n\n  @Property({ name: 'created_at', type: Date, onCreate: () => new Date() })\n  createdAt: Date = new Date()\n\n  /**\n   * Updated whenever a thread-matcher token-based strategy resolves to this\n   * row. Used for future GC: tokens with `last_seen_at < now() - 90 days`\n   * are pruning candidates.\n   */\n  @Property({ name: 'last_seen_at', type: Date, nullable: true })\n  lastSeenAt?: Date | null\n}\n\n// \u2500\u2500 ChannelIngestDeadLetter \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\n/**\n * Inbound messages that fail permanently during ingest land here so an\n * operator can replay them after fixing parsers / schemas. Transient\n * failures (DB blip, network timeout) DO NOT write here \u2014 those abort the\n * poll loop without advancing the cursor so the message is re-fetched on\n * the next tick.\n *\n * `raw_body` is encrypted at rest via the module's `encryption.ts`\n * `defaultEncryptionMaps` entry (MIME bodies may contain PII).\n *\n * See `.ai/specs/implemented/2026-05-27-email-integration-inbound-reliability-and-threading.md`\n * (\u00A7 3 Data Model).\n */\n@Entity({ tableName: 'channel_ingest_dead_letters' })\n@Index({ name: 'channel_ingest_dead_letters_channel_idx', properties: ['channelId', 'tenantId'] })\n@Index({ name: 'channel_ingest_dead_letters_created_idx', properties: ['tenantId', 'createdAt'] })\nexport class ChannelIngestDeadLetter {\n  [OptionalProps]?:\n    | 'createdAt'\n    | 'organizationId'\n    | 'externalMessageId'\n    | 'externalUid'\n    | 'rawBody'\n\n  @PrimaryKey({ type: 'uuid', defaultRaw: 'gen_random_uuid()' })\n  id!: string\n\n  @Property({ name: 'tenant_id', type: 'uuid' })\n  tenantId!: string\n\n  @Property({ name: 'organization_id', type: 'uuid', nullable: true })\n  organizationId?: string | null\n\n  @Property({ name: 'channel_id', type: 'uuid' })\n  channelId!: string\n\n  @Property({ name: 'provider_key', type: 'text' })\n  providerKey!: string\n\n  /** External UID / sequence-number for the provider (e.g. IMAP UID, Gmail messageId). */\n  @Property({ name: 'external_uid', type: 'text', nullable: true })\n  externalUid?: string | null\n\n  @Property({ name: 'external_message_id', type: 'text', nullable: true })\n  externalMessageId?: string | null\n\n  @Property({ name: 'error_class', type: 'text' })\n  errorClass!: string\n\n  @Property({ name: 'error_message', type: 'text' })\n  errorMessage!: string\n\n  /** Truncated source \u2014 first N bytes of the raw MIME / payload (encrypted at rest). */\n  @Property({ name: 'raw_body', type: 'text', nullable: true })\n  rawBody?: string | null\n\n  @Property({ name: 'created_at', type: Date, onCreate: () => new Date() })\n  createdAt: Date = new Date()\n}\n"],
-  "mappings": ";;;;;;;;;;AAAA,SAAS,qBAAqB;AAC9B,SAAS,OAAO,QAAQ,OAAO,YAAY,UAAU,cAAc;AAiEhE;AADI,IAAM,uBAAN,MAA2B;AAAA,EAA3B;AAwCL,oBAAoB;AAiBpB,qBAAqB;AAoBrB,kBAAqC;AAuBrC,qBAAkB,oBAAI,KAAK;AAG3B,qBAAkB,oBAAI,KAAK;AAAA;AAI7B;AAxFE;AAAA,EADC,WAAW,EAAE,MAAM,QAAQ,YAAY,oBAAoB,CAAC;AAAA,GAlBlD,qBAmBX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,gBAAgB,MAAM,OAAO,CAAC;AAAA,GArBrC,qBAsBX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,gBAAgB,MAAM,OAAO,CAAC;AAAA,GAxBrC,qBAyBX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,gBAAgB,MAAM,OAAO,CAAC;AAAA,GA3BrC,qBA4BX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,uBAAuB,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GA9B5D,qBA+BX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,mBAAmB,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GAjCxD,qBAkCX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,gBAAgB,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GApCrD,qBAqCX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,aAAa,MAAM,WAAW,SAAS,KAAK,CAAC;AAAA,GAvCpD,qBAwCX;AASA;AAAA,EADC,SAAS,EAAE,MAAM,WAAW,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GAhDhD,qBAiDX;AAQA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,WAAW,SAAS,MAAM,CAAC;AAAA,GAxDtD,qBAyDX;AASA;AAAA,EADC,SAAS,EAAE,MAAM,yBAAyB,MAAM,OAAO,UAAU,KAAK,CAAC;AAAA,GAjE7D,qBAkEX;AAIA;AAAA,EADC,SAAS,EAAE,MAAM,kBAAkB,MAAM,MAAM,UAAU,KAAK,CAAC;AAAA,GArErD,qBAsEX;AAOA;AAAA,EADC,SAAS,EAAE,MAAM,UAAU,MAAM,QAAQ,SAAS,YAAY,CAAC;AAAA,GA5ErD,qBA6EX;AAIA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GAhFnD,qBAiFX;AAUA;AAAA,EADC,SAAS,EAAE,MAAM,iBAAiB,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GA1FtD,qBA2FX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,aAAa,MAAM,OAAO,CAAC;AAAA,GA7FlC,qBA8FX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,mBAAmB,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GAhGxD,qBAiGX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,MAAM,UAAU,MAAM,oBAAI,KAAK,EAAE,CAAC;AAAA,GAnG7D,qBAoGX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,MAAM,UAAU,MAAM,oBAAI,KAAK,EAAE,CAAC;AAAA,GAtG7D,qBAuGX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,MAAM,UAAU,KAAK,CAAC;AAAA,GAzGjD,qBA0GX;AA1GW,uBAAN;AAAA,EAnCN,OAAO,EAAE,WAAW,yBAAyB,CAAC;AAAA,EAC9C,MAAM,EAAE,MAAM,8CAA8C,YAAY,CAAC,YAAY,aAAa,EAAE,CAAC;AAAA,EAKrG,MAAM;AAAA,IACL,MAAM;AAAA,IACN,YACE;AAAA,EACJ,CAAC;AAAA,EACA,MAAM,EAAE,MAAM,iDAAiD,YAAY,CAAC,YAAY,eAAe,UAAU,EAAE,CAAC;AAAA,EACpH,MAAM;AAAA,IACL,MAAM;AAAA,IACN,YAAY,CAAC,UAAU,eAAe,WAAW;AAAA,EACnD,CAAC;AAAA,EACA,MAAM;AAAA,IACL,MAAM;AAAA,IACN,YACE;AAAA,EACJ,CAAC;AAAA,EACA,MAAM;AAAA,IACL,MAAM;AAAA,IACN,YACE;AAAA,EACJ,CAAC;AAAA,EAKA,MAAM;AAAA,IACL,MAAM;AAAA,IACN,YACE;AAAA,EACJ,CAAC;AAAA,GACY;AAqHV;AADI,IAAM,uBAAN,MAA2B;AAAA,EAA3B;AA+BL,qBAAkB,oBAAI,KAAK;AAG3B,qBAAkB,oBAAI,KAAK;AAAA;AAC7B;AA/BE;AAAA,EADC,WAAW,EAAE,MAAM,QAAQ,YAAY,oBAAoB,CAAC;AAAA,GAHlD,qBAIX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,OAAO,CAAC;AAAA,GANnC,qBAOX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,4BAA4B,MAAM,OAAO,CAAC;AAAA,GATjD,qBAUX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,WAAW,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GAZhD,qBAaX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,qBAAqB,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GAf1D,qBAgBX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,oBAAoB,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GAlBzD,qBAmBX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,mBAAmB,MAAM,MAAM,UAAU,KAAK,CAAC;AAAA,GArBtD,qBAsBX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,aAAa,MAAM,OAAO,CAAC;AAAA,GAxBlC,qBAyBX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,mBAAmB,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GA3BxD,qBA4BX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,MAAM,UAAU,MAAM,oBAAI,KAAK,EAAE,CAAC;AAAA,GA9B7D,qBA+BX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,MAAM,UAAU,MAAM,oBAAI,KAAK,EAAE,CAAC;AAAA,GAjC7D,qBAkCX;AAlCW,uBAAN;AAAA,EALN,OAAO,EAAE,WAAW,yBAAyB,CAAC;AAAA,EAC9C,MAAM,EAAE,MAAM,sCAAsC,YAAY,CAAC,aAAa,wBAAwB,EAAE,CAAC;AAAA,EACzG,MAAM,EAAE,MAAM,6CAA6C,YAAY,CAAC,iBAAiB,EAAE,CAAC;AAAA,EAC5F,MAAM,EAAE,MAAM,4CAA4C,YAAY,CAAC,gBAAgB,EAAE,CAAC;AAAA,EAC1F,OAAO,EAAE,MAAM,8CAA8C,YAAY,CAAC,aAAa,wBAAwB,EAAE,CAAC;AAAA,GACtG;AA4CV;AADI,IAAM,kBAAN,MAAsB;AAAA,EAAtB;AAkCL,qBAAkB,oBAAI,KAAK;AAAA;AAC7B;AA/BE;AAAA,EADC,WAAW,EAAE,MAAM,QAAQ,YAAY,oBAAoB,CAAC;AAAA,GAHlD,gBAIX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,OAAO,CAAC;AAAA,GANnC,gBAOX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,mBAAmB,MAAM,OAAO,CAAC;AAAA,GATxC,gBAUX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,uBAAuB,MAAM,OAAO,CAAC;AAAA,GAZ5C,gBAaX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,aAAa,MAAM,OAAO,CAAC;AAAA,GAflC,gBAgBX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,qBAAqB,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GAlB1D,gBAmBX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,uBAAuB,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GArB5D,gBAsBX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,sBAAsB,MAAM,MAAM,UAAU,KAAK,CAAC;AAAA,GAxBzD,gBAyBX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,aAAa,MAAM,OAAO,CAAC;AAAA,GA3BlC,gBA4BX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,mBAAmB,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GA9BxD,gBA+BX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,MAAM,UAAU,MAAM,oBAAI,KAAK,EAAE,CAAC;AAAA,GAjC7D,gBAkCX;AAlCW,kBAAN;AAAA,EAJN,OAAO,EAAE,WAAW,oBAAoB,CAAC;AAAA,EACzC,MAAM,EAAE,MAAM,sCAAsC,YAAY,CAAC,gBAAgB,EAAE,CAAC;AAAA,EACpF,MAAM,EAAE,MAAM,0CAA0C,YAAY,CAAC,aAAa,mBAAmB,EAAE,CAAC;AAAA,EACxG,OAAO,EAAE,MAAM,yCAAyC,YAAY,CAAC,aAAa,mBAAmB,EAAE,CAAC;AAAA,GAC5F;AA6CV;AADI,IAAM,qBAAN,MAAyB;AAAA,EAAzB;AA2BL,0BAAyB;AAqBzB,qBAAkB,oBAAI,KAAK;AAAA;AAC7B;AA7CE;AAAA,EADC,WAAW,EAAE,MAAM,QAAQ,YAAY,oBAAoB,CAAC;AAAA,GAHlD,mBAIX;AAIA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,OAAO,CAAC;AAAA,GAPnC,mBAQX;AAIA;AAAA,EADC,SAAS,EAAE,MAAM,4BAA4B,MAAM,OAAO,CAAC;AAAA,GAXjD,mBAYX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,uBAAuB,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GAd5D,mBAeX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,gBAAgB,MAAM,OAAO,CAAC;AAAA,GAjBrC,mBAkBX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,gBAAgB,MAAM,OAAO,CAAC;AAAA,GApBrC,mBAqBX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,aAAa,MAAM,OAAO,CAAC;AAAA,GAvBlC,mBAwBX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,mBAAmB,MAAM,OAAO,CAAC;AAAA,GA1BxC,mBA2BX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,mBAAmB,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GA7BxD,mBA8BX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,wBAAwB,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GAhC7D,mBAiCX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,qBAAqB,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GAnC1D,mBAoCX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,oBAAoB,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GAtCzD,mBAuCX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,aAAa,MAAM,OAAO,CAAC;AAAA,GAzClC,mBA0CX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,mBAAmB,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GA5CxD,mBA6CX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,MAAM,UAAU,MAAM,oBAAI,KAAK,EAAE,CAAC;AAAA,GA/C7D,mBAgDX;AAhDW,qBAAN;AAAA,EALN,OAAO,EAAE,WAAW,wBAAwB,CAAC;AAAA,EAC7C,MAAM,EAAE,MAAM,qCAAqC,YAAY,CAAC,WAAW,EAAE,CAAC;AAAA,EAC9E,MAAM,EAAE,MAAM,sCAAsC,YAAY,CAAC,wBAAwB,EAAE,CAAC;AAAA,EAC5F,MAAM,EAAE,MAAM,qCAAqC,YAAY,CAAC,mBAAmB,EAAE,CAAC;AAAA,EACtF,OAAO,EAAE,MAAM,oCAAoC,YAAY,CAAC,WAAW,EAAE,CAAC;AAAA,GAClE;AA0DV;AADI,IAAM,uBAAN,MAA2B;AAAA,EAA3B;AAiCL,qBAAkB,oBAAI,KAAK;AAG3B,qBAAkB,oBAAI,KAAK;AAAA;AAC7B;AAjCE;AAAA,EADC,WAAW,EAAE,MAAM,QAAQ,YAAY,oBAAoB,CAAC;AAAA,GAHlD,qBAIX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,4BAA4B,MAAM,OAAO,CAAC;AAAA,GANjD,qBAOX;AAIA;AAAA,EADC,SAAS,EAAE,MAAM,qBAAqB,MAAM,OAAO,CAAC;AAAA,GAV1C,qBAWX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,OAAO,CAAC;AAAA,GAbnC,qBAcX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,gBAAgB,MAAM,OAAO,CAAC;AAAA,GAhBrC,qBAiBX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,uBAAuB,MAAM,OAAO,CAAC;AAAA,GAnB5C,qBAoBX;AAIA;AAAA,EADC,SAAS,EAAE,MAAM,oBAAoB,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GAvBzD,qBAwBX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,aAAa,MAAM,OAAO,CAAC;AAAA,GA1BlC,qBA2BX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,mBAAmB,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GA7BxD,qBA8BX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,MAAM,UAAU,MAAM,oBAAI,KAAK,EAAE,CAAC;AAAA,GAhC7D,qBAiCX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,MAAM,UAAU,MAAM,oBAAI,KAAK,EAAE,CAAC;AAAA,GAnC7D,qBAoCX;AApCW,uBAAN;AAAA,EAJN,OAAO,EAAE,WAAW,0BAA0B,CAAC;AAAA,EAC/C,MAAM,EAAE,MAAM,wCAAwC,YAAY,CAAC,0BAA0B,UAAU,EAAE,CAAC;AAAA,EAC1G,MAAM,EAAE,MAAM,sCAAsC,YAAY,CAAC,mBAAmB,UAAU,EAAE,CAAC;AAAA,EACjG,OAAO,EAAE,MAAM,uCAAuC,YAAY,CAAC,0BAA0B,UAAU,EAAE,CAAC;AAAA,GAC9F;AA2DV;AADI,IAAM,kBAAN,MAAsB;AAAA,EAAtB;AAoCL,qBAAkB,oBAAI,KAAK;AAAA;AAC7B;AAjCE;AAAA,EADC,WAAW,EAAE,MAAM,QAAQ,YAAY,oBAAoB,CAAC;AAAA,GAHlD,gBAIX;AAIA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,OAAO,CAAC;AAAA,GAPnC,gBAQX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,SAAS,MAAM,OAAO,CAAC;AAAA,GAV9B,gBAWX;AAIA;AAAA,EADC,SAAS,EAAE,MAAM,sBAAsB,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GAd3D,gBAeX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,0BAA0B,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GAjB/D,gBAkBX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,2BAA2B,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GApBhE,gBAqBX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,gBAAgB,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GAvBrD,gBAwBX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,wBAAwB,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GA1B7D,gBA2BX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,aAAa,MAAM,OAAO,CAAC;AAAA,GA7BlC,gBA8BX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,mBAAmB,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GAhCxD,gBAiCX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,MAAM,UAAU,MAAM,oBAAI,KAAK,EAAE,CAAC;AAAA,GAnC7D,gBAoCX;AApCW,kBAAN;AAAA,EAjBN,OAAO,EAAE,WAAW,oBAAoB,CAAC;AAAA,EACzC,MAAM,EAAE,MAAM,iCAAiC,YAAY,CAAC,WAAW,EAAE,CAAC;AAAA,EAC1E,MAAM,EAAE,MAAM,uCAAuC,YAAY,CAAC,aAAa,OAAO,EAAE,CAAC;AAAA,EACzF,MAAM;AAAA,IACL,MAAM;AAAA,IACN,YACE;AAAA,EACJ,CAAC;AAAA,EACA,MAAM;AAAA,IACL,MAAM;AAAA,IACN,YACE;AAAA,EACJ,CAAC;AAAA,EACA,MAAM;AAAA,IACL,MAAM;AAAA,IACN,YAAY;AAAA,EACd,CAAC;AAAA,GACY;AAoEV;AADI,IAAM,qBAAN,MAAyB;AAAA,EAAzB;AAwBL,qBAAkB,oBAAI,KAAK;AAAA;AAS7B;AA7BE;AAAA,EADC,WAAW,EAAE,MAAM,QAAQ,YAAY,oBAAoB,CAAC;AAAA,GAHlD,mBAIX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,aAAa,MAAM,OAAO,CAAC;AAAA,GANlC,mBAOX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,mBAAmB,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GATxD,mBAUX;AAIA;AAAA,EADC,SAAS,EAAE,MAAM,qBAAqB,MAAM,OAAO,CAAC;AAAA,GAb1C,mBAcX;AAOA;AAAA,EADC,SAAS,EAAE,MAAM,SAAS,MAAM,OAAO,CAAC;AAAA,GApB9B,mBAqBX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,MAAM,UAAU,MAAM,oBAAI,KAAK,EAAE,CAAC;AAAA,GAvB7D,mBAwBX;AAQA;AAAA,EADC,SAAS,EAAE,MAAM,gBAAgB,MAAM,MAAM,UAAU,KAAK,CAAC;AAAA,GA/BnD,mBAgCX;AAhCW,qBAAN;AAAA,EANN,OAAO,EAAE,WAAW,wBAAwB,CAAC;AAAA,EAI7C,OAAO,EAAE,MAAM,mCAAmC,YAAY,CAAC,YAAY,iBAAiB,EAAE,CAAC;AAAA,EAC/F,OAAO,EAAE,MAAM,kCAAkC,YAAY,CAAC,YAAY,OAAO,EAAE,CAAC;AAAA,GACxE;AAsDV;AADI,IAAM,0BAAN,MAA8B;AAAA,EAA9B;AAyCL,qBAAkB,oBAAI,KAAK;AAAA;AAC7B;AAjCE;AAAA,EADC,WAAW,EAAE,MAAM,QAAQ,YAAY,oBAAoB,CAAC;AAAA,GARlD,wBASX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,aAAa,MAAM,OAAO,CAAC;AAAA,GAXlC,wBAYX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,mBAAmB,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GAdxD,wBAeX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,OAAO,CAAC;AAAA,GAjBnC,wBAkBX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,gBAAgB,MAAM,OAAO,CAAC;AAAA,GApBrC,wBAqBX;AAIA;AAAA,EADC,SAAS,EAAE,MAAM,gBAAgB,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GAxBrD,wBAyBX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,uBAAuB,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GA3B5D,wBA4BX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,eAAe,MAAM,OAAO,CAAC;AAAA,GA9BpC,wBA+BX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,iBAAiB,MAAM,OAAO,CAAC;AAAA,GAjCtC,wBAkCX;AAIA;AAAA,EADC,SAAS,EAAE,MAAM,YAAY,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GArCjD,wBAsCX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,MAAM,UAAU,MAAM,oBAAI,KAAK,EAAE,CAAC;AAAA,GAxC7D,wBAyCX;AAzCW,0BAAN;AAAA,EAHN,OAAO,EAAE,WAAW,8BAA8B,CAAC;AAAA,EACnD,MAAM,EAAE,MAAM,2CAA2C,YAAY,CAAC,aAAa,UAAU,EAAE,CAAC;AAAA,EAChG,MAAM,EAAE,MAAM,2CAA2C,YAAY,CAAC,YAAY,WAAW,EAAE,CAAC;AAAA,GACpF;",
+  "sourcesContent": ["import { OptionalProps } from '@mikro-orm/core'\nimport { Check, Entity, Index, PrimaryKey, Property, Unique } from '@mikro-orm/decorators/legacy'\n\n/**\n * Hub entities for the Communication Channels module.\n *\n * Cross-module references (e.g. `MessageChannelLink.messageId \u2192 messages.message.id`)\n * use plain `uuid` columns, NOT MikroORM `@ManyToOne` decorators. Project rule:\n * \"No direct ORM relationships between modules \u2014 use foreign key IDs, fetch separately.\"\n * Cross-module links are declared in `data/extensions.ts` via `EntityExtension`.\n *\n * See SPEC-045d \u00A72.2.\n */\n\n// \u2500\u2500 CommunicationChannel \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\n/**\n * Per-channel lifecycle status. Set by the polling worker / outbound subscriber\n * + the `markChannelRequiresReauth` command. Existing `isActive` remains for the\n * coarse admin enable/disable toggle; `status` is the finer-grained operational\n * state used by per-user reconnect flows.\n *\n * Email integration spec \u00A7 Hub Deltas \u2192 Delta 2.\n */\nexport type CommunicationChannelStatus =\n  | 'connected'\n  | 'requires_reauth'\n  | 'error'\n  | 'disconnected'\n\n@Entity({ tableName: 'communication_channels' })\n@Index({ name: 'communication_channels_tenant_provider_idx', properties: ['tenantId', 'providerKey'] })\n// Provider-push webhooks (Gmail Pub/Sub) resolve channels by (provider_key,\n// external_identifier) WITHOUT a tenant_id \u2014 they only know the mailbox address.\n// Without this index that lookup is a full scan over every channel of the\n// provider, which a (signature-verified) push or replay repeats on every hit.\n@Index({\n  name: 'communication_channels_provider_external_idx',\n  expression:\n    `create index \"communication_channels_provider_external_idx\" on \"communication_channels\" (\"provider_key\", \"external_identifier\") where \"deleted_at\" is null`,\n})\n@Index({ name: 'communication_channels_tenant_type_active_idx', properties: ['tenantId', 'channelType', 'isActive'] })\n@Index({\n  name: 'communication_channels_user_lookup_idx',\n  properties: ['userId', 'channelType', 'deletedAt'],\n})\n@Index({\n  name: 'communication_channels_poll_due_idx',\n  expression:\n    `create index \"communication_channels_poll_due_idx\" on \"communication_channels\" (\"is_active\", \"last_polled_at\") where \"deleted_at\" is null`,\n})\n@Index({\n  name: 'communication_channels_one_primary_per_user_uq',\n  expression:\n    `create unique index \"communication_channels_one_primary_per_user_uq\" on \"communication_channels\" (\"user_id\") where \"is_primary\" and \"user_id\" is not null and \"deleted_at\" is null`,\n})\n// One channel per (tenant, user, provider, mailbox): a reconnect heals the\n// existing row in place (see `createConnectedChannelRow`) instead of inserting a\n// duplicate that would stay polled + keep its own push subscription. Partial so\n// tenant-wide channels (null user_id) and identifier-less rows are exempt.\n@Index({\n  name: 'communication_channels_user_provider_external_uq',\n  expression:\n    `create unique index \"communication_channels_user_provider_external_uq\" on \"communication_channels\" (\"tenant_id\", \"user_id\", \"provider_key\", \"external_identifier\") where \"deleted_at\" is null and \"user_id\" is not null and \"external_identifier\" is not null`,\n})\n// One tenant-wide push channel per (tenant, provider): push providers (FCM/APNs/\n// Expo) have no `external_identifier` and `user_id IS NULL`, so the mailbox\n// unique index above does not cover them. This keeps an admin reconnect healing\n// the single shared row (see `createConnectedChannelRow`) instead of inserting\n// duplicates the fan-out would silently ignore.\n@Index({\n  name: 'communication_channels_tenant_push_provider_uq',\n  expression:\n    `create unique index \"communication_channels_tenant_push_provider_uq\" on \"communication_channels\" (\"tenant_id\", \"provider_key\") where \"channel_type\" = 'push' and \"user_id\" is null and \"deleted_at\" is null`,\n})\nexport class CommunicationChannel {\n  [OptionalProps]?:\n    | 'createdAt'\n    | 'updatedAt'\n    | 'isActive'\n    | 'capabilities'\n    | 'deletedAt'\n    | 'externalIdentifier'\n    | 'credentialsRef'\n    | 'organizationId'\n    | 'userId'\n    | 'isPrimary'\n    | 'pollIntervalSeconds'\n    | 'lastPolledAt'\n    | 'status'\n    | 'lastError'\n    | 'channelState'\n\n  @PrimaryKey({ type: 'uuid', defaultRaw: 'gen_random_uuid()' })\n  id!: string\n\n  @Property({ name: 'provider_key', type: 'text' })\n  providerKey!: string\n\n  @Property({ name: 'channel_type', type: 'text' })\n  channelType!: string\n\n  @Property({ name: 'display_name', type: 'text' })\n  displayName!: string\n\n  @Property({ name: 'external_identifier', type: 'text', nullable: true })\n  externalIdentifier?: string | null\n\n  @Property({ name: 'credentials_ref', type: 'uuid', nullable: true })\n  credentialsRef?: string | null\n\n  @Property({ name: 'capabilities', type: 'json', nullable: true })\n  capabilities?: Record<string, unknown> | null\n\n  @Property({ name: 'is_active', type: 'boolean', default: true })\n  isActive: boolean = true\n\n  /**\n   * Per-user channel owner. NULL = tenant-scoped (existing behaviour, e.g. WhatsApp Business).\n   * Set = user-scoped (e.g. Jane's personal Gmail). Visible only to the owning user\n   * and to admins with `communication_channels.admin`. Linked to `auth:user` via\n   * `EntityExtension` in `data/extensions.ts` \u2014 never a raw DB FK.\n   */\n  @Property({ name: 'user_id', type: 'uuid', nullable: true })\n  userId?: string | null\n\n  /**\n   * Per-user \"primary\" flag. Only meaningful when `userId IS NOT NULL`; ignored\n   * for tenant-scoped channels. Enforced as one-primary-per-user by the partial\n   * unique index `communication_channels_one_primary_per_user_uq`.\n   */\n  @Property({ name: 'is_primary', type: 'boolean', default: false })\n  isPrimary: boolean = false\n\n  /**\n   * Polling cadence in seconds. NULL means \"this channel does not poll\" \u2014 i.e. it\n   * is push-only (webhook) or its provider opted out via\n   * `ChannelCapabilities.realtimePush !== false`. Set means hub-managed polling\n   * at that interval via the `poll-tick` scheduler entry.\n   */\n  @Property({ name: 'poll_interval_seconds', type: 'int', nullable: true })\n  pollIntervalSeconds?: number | null\n\n  /** Last successful poll timestamp; the scheduler enumerates by this column. */\n  @Property({ name: 'last_polled_at', type: Date, nullable: true })\n  lastPolledAt?: Date | null\n\n  /**\n   * Per-channel lifecycle status. See {@link CommunicationChannelStatus}.\n   * Migration sets `status = 'connected'` for all existing active channels (default value).\n   */\n  @Property({ name: 'status', type: 'text', default: 'connected' })\n  status: CommunicationChannelStatus = 'connected'\n\n  /** Most recent classified error message for diagnostics. */\n  @Property({ name: 'last_error', type: 'text', nullable: true })\n  lastError?: string | null\n\n  /**\n   * Provider-specific resumption state, opaque to the hub. Polling adapters\n   * encode their incremental cursor here (Gmail historyId, IMAP\n   * UIDVALIDITY+UIDNEXT). The polling worker reads it before each\n   * `fetchHistory` call and writes the adapter's returned `nextCursor` back\n   * after a successful poll. Empty / NULL means \"bootstrap on next poll\".\n   */\n  @Property({ name: 'channel_state', type: 'json', nullable: true })\n  channelState?: Record<string, unknown> | null\n\n  @Property({ name: 'tenant_id', type: 'uuid' })\n  tenantId!: string\n\n  @Property({ name: 'organization_id', type: 'uuid', nullable: true })\n  organizationId?: string | null\n\n  @Property({ name: 'created_at', type: Date, onCreate: () => new Date() })\n  createdAt: Date = new Date()\n\n  @Property({ name: 'updated_at', type: Date, onUpdate: () => new Date() })\n  updatedAt: Date = new Date()\n\n  @Property({ name: 'deleted_at', type: Date, nullable: true })\n  deletedAt?: Date | null\n}\n\n// \u2500\u2500 ExternalConversation \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\n@Entity({ tableName: 'external_conversations' })\n@Index({ name: 'external_conversations_channel_idx', properties: ['channelId', 'externalConversationId'] })\n@Index({ name: 'external_conversations_contact_person_idx', properties: ['contactPersonId'] })\n@Index({ name: 'external_conversations_assigned_user_idx', properties: ['assignedUserId'] })\n@Unique({ name: 'external_conversations_channel_external_uq', properties: ['channelId', 'externalConversationId'] })\nexport class ExternalConversation {\n  [OptionalProps]?: 'createdAt' | 'updatedAt' | 'lastMessageAt' | 'subject' | 'contactPersonId' | 'assignedUserId' | 'organizationId'\n\n  @PrimaryKey({ type: 'uuid', defaultRaw: 'gen_random_uuid()' })\n  id!: string\n\n  @Property({ name: 'channel_id', type: 'uuid' })\n  channelId!: string\n\n  @Property({ name: 'external_conversation_id', type: 'text' })\n  externalConversationId!: string\n\n  @Property({ name: 'subject', type: 'text', nullable: true })\n  subject?: string | null\n\n  @Property({ name: 'contact_person_id', type: 'uuid', nullable: true })\n  contactPersonId?: string | null\n\n  @Property({ name: 'assigned_user_id', type: 'uuid', nullable: true })\n  assignedUserId?: string | null\n\n  @Property({ name: 'last_message_at', type: Date, nullable: true })\n  lastMessageAt?: Date | null\n\n  @Property({ name: 'tenant_id', type: 'uuid' })\n  tenantId!: string\n\n  @Property({ name: 'organization_id', type: 'uuid', nullable: true })\n  organizationId?: string | null\n\n  @Property({ name: 'created_at', type: Date, onCreate: () => new Date() })\n  createdAt: Date = new Date()\n\n  @Property({ name: 'updated_at', type: Date, onUpdate: () => new Date() })\n  updatedAt: Date = new Date()\n}\n\n// \u2500\u2500 ExternalMessage \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\n@Entity({ tableName: 'external_messages' })\n@Index({ name: 'external_messages_conversation_idx', properties: ['conversationId'] })\n@Index({ name: 'external_messages_channel_external_idx', properties: ['channelId', 'externalMessageId'] })\n@Unique({ name: 'external_messages_channel_external_uq', properties: ['channelId', 'externalMessageId'] })\nexport class ExternalMessage {\n  [OptionalProps]?: 'createdAt' | 'senderIdentifier' | 'senderDisplayName' | 'providerTimestamp' | 'organizationId'\n\n  @PrimaryKey({ type: 'uuid', defaultRaw: 'gen_random_uuid()' })\n  id!: string\n\n  @Property({ name: 'channel_id', type: 'uuid' })\n  channelId!: string\n\n  @Property({ name: 'conversation_id', type: 'uuid' })\n  conversationId!: string\n\n  @Property({ name: 'external_message_id', type: 'text' })\n  externalMessageId!: string\n\n  @Property({ name: 'direction', type: 'text' })\n  direction!: 'inbound' | 'outbound'\n\n  @Property({ name: 'sender_identifier', type: 'text', nullable: true })\n  senderIdentifier?: string | null\n\n  @Property({ name: 'sender_display_name', type: 'text', nullable: true })\n  senderDisplayName?: string | null\n\n  @Property({ name: 'provider_timestamp', type: Date, nullable: true })\n  providerTimestamp?: Date | null\n\n  @Property({ name: 'tenant_id', type: 'uuid' })\n  tenantId!: string\n\n  @Property({ name: 'organization_id', type: 'uuid', nullable: true })\n  organizationId?: string | null\n\n  @Property({ name: 'created_at', type: Date, onCreate: () => new Date() })\n  createdAt: Date = new Date()\n}\n\n// \u2500\u2500 MessageChannelLink \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\n@Entity({ tableName: 'message_channel_links' })\n@Index({ name: 'message_channel_links_message_idx', properties: ['messageId'] })\n@Index({ name: 'message_channel_links_ext_conv_idx', properties: ['externalConversationId'] })\n@Index({ name: 'message_channel_links_ext_msg_idx', properties: ['externalMessageId'] })\n@Unique({ name: 'message_channel_links_message_uq', properties: ['messageId'] })\nexport class MessageChannelLink {\n  [OptionalProps]?: 'createdAt' | 'deliveryStatus' | 'externalMessageId' | 'channelPayload' | 'channelContentType' | 'interactiveState' | 'channelMetadata' | 'organizationId'\n\n  @PrimaryKey({ type: 'uuid', defaultRaw: 'gen_random_uuid()' })\n  id!: string\n\n  /** Logical link to messages.message.id (no DB FK \u2014 cross-module via EntityExtension). */\n  @Property({ name: 'message_id', type: 'uuid' })\n  messageId!: string\n\n  /** FK to external_conversations.id (intra-module \u2014 DB FK acceptable but kept as plain uuid for symmetry). */\n  @Property({ name: 'external_conversation_id', type: 'uuid' })\n  externalConversationId!: string\n\n  @Property({ name: 'external_message_id', type: 'uuid', nullable: true })\n  externalMessageId?: string | null\n\n  @Property({ name: 'provider_key', type: 'text' })\n  providerKey!: string\n\n  @Property({ name: 'channel_type', type: 'text' })\n  channelType!: string\n\n  @Property({ name: 'direction', type: 'text' })\n  direction!: 'inbound' | 'outbound'\n\n  @Property({ name: 'delivery_status', type: 'text' })\n  deliveryStatus: string = 'pending'\n\n  @Property({ name: 'channel_payload', type: 'json', nullable: true })\n  channelPayload?: Record<string, unknown> | null\n\n  @Property({ name: 'channel_content_type', type: 'text', nullable: true })\n  channelContentType?: string | null\n\n  @Property({ name: 'interactive_state', type: 'json', nullable: true })\n  interactiveState?: Record<string, unknown> | null\n\n  @Property({ name: 'channel_metadata', type: 'json', nullable: true })\n  channelMetadata?: Record<string, unknown> | null\n\n  @Property({ name: 'tenant_id', type: 'uuid' })\n  tenantId!: string\n\n  @Property({ name: 'organization_id', type: 'uuid', nullable: true })\n  organizationId?: string | null\n\n  @Property({ name: 'created_at', type: Date, onCreate: () => new Date() })\n  createdAt: Date = new Date()\n}\n\n// \u2500\u2500 ChannelThreadMapping \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\n@Entity({ tableName: 'channel_thread_mappings' })\n@Index({ name: 'channel_thread_mappings_ext_conv_idx', properties: ['externalConversationId', 'tenantId'] })\n@Index({ name: 'channel_thread_mappings_thread_idx', properties: ['messageThreadId', 'tenantId'] })\n@Unique({ name: 'channel_thread_mappings_ext_conv_uq', properties: ['externalConversationId', 'tenantId'] })\nexport class ChannelThreadMapping {\n  [OptionalProps]?: 'createdAt' | 'updatedAt' | 'assignedUserId' | 'organizationId'\n\n  @PrimaryKey({ type: 'uuid', defaultRaw: 'gen_random_uuid()' })\n  id!: string\n\n  @Property({ name: 'external_conversation_id', type: 'uuid' })\n  externalConversationId!: string\n\n  /** Logical link to messages.message.thread_id (no DB FK \u2014 cross-module). */\n  @Property({ name: 'message_thread_id', type: 'uuid' })\n  messageThreadId!: string\n\n  @Property({ name: 'channel_id', type: 'uuid' })\n  channelId!: string\n\n  @Property({ name: 'provider_key', type: 'text' })\n  providerKey!: string\n\n  @Property({ name: 'external_thread_ref', type: 'text' })\n  externalThreadRef!: string\n\n  /** Logical link to auth.user.id (no DB FK \u2014 cross-module). */\n  @Property({ name: 'assigned_user_id', type: 'uuid', nullable: true })\n  assignedUserId?: string | null\n\n  @Property({ name: 'tenant_id', type: 'uuid' })\n  tenantId!: string\n\n  @Property({ name: 'organization_id', type: 'uuid', nullable: true })\n  organizationId?: string | null\n\n  @Property({ name: 'created_at', type: Date, onCreate: () => new Date() })\n  createdAt: Date = new Date()\n\n  @Property({ name: 'updated_at', type: Date, onUpdate: () => new Date() })\n  updatedAt: Date = new Date()\n}\n\n// \u2500\u2500 MessageReaction \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\n@Entity({ tableName: 'message_reactions' })\n@Index({ name: 'message_reactions_message_idx', properties: ['messageId'] })\n@Index({ name: 'message_reactions_message_emoji_idx', properties: ['messageId', 'emoji'] })\n@Index({\n  name: 'message_reactions_internal_actor_uq',\n  expression:\n    `create unique index \"message_reactions_internal_actor_uq\" on \"message_reactions\" (\"tenant_id\", \"message_id\", \"emoji\", \"reacted_by_user_id\") where \"reacted_by_user_id\" is not null`,\n})\n@Index({\n  name: 'message_reactions_external_actor_uq',\n  expression:\n    `create unique index \"message_reactions_external_actor_uq\" on \"message_reactions\" (\"tenant_id\", \"message_id\", \"emoji\", \"reacted_by_external_id\") where \"reacted_by_external_id\" is not null`,\n})\n@Check({\n  name: 'message_reactions_exactly_one_actor_chk',\n  expression: `(\"reacted_by_user_id\" is null) <> (\"reacted_by_external_id\" is null)`,\n})\nexport class MessageReaction {\n  [OptionalProps]?: 'createdAt' | 'reactedByUserId' | 'reactedByExternalId' | 'reactedByDisplayName' | 'providerKey' | 'externalReactionId' | 'organizationId'\n\n  @PrimaryKey({ type: 'uuid', defaultRaw: 'gen_random_uuid()' })\n  id!: string\n\n  /** Logical link to messages.message.id (no DB FK \u2014 cross-module). */\n  @Property({ name: 'message_id', type: 'uuid' })\n  messageId!: string\n\n  @Property({ name: 'emoji', type: 'text' })\n  emoji!: string\n\n  /** Logical link to auth.user.id (no DB FK \u2014 cross-module). NULL for external reactions. */\n  @Property({ name: 'reacted_by_user_id', type: 'uuid', nullable: true })\n  reactedByUserId?: string | null\n\n  @Property({ name: 'reacted_by_external_id', type: 'text', nullable: true })\n  reactedByExternalId?: string | null\n\n  @Property({ name: 'reacted_by_display_name', type: 'text', nullable: true })\n  reactedByDisplayName?: string | null\n\n  @Property({ name: 'provider_key', type: 'text', nullable: true })\n  providerKey?: string | null\n\n  @Property({ name: 'external_reaction_id', type: 'text', nullable: true })\n  externalReactionId?: string | null\n\n  @Property({ name: 'tenant_id', type: 'uuid' })\n  tenantId!: string\n\n  @Property({ name: 'organization_id', type: 'uuid', nullable: true })\n  organizationId?: string | null\n\n  @Property({ name: 'created_at', type: Date, onCreate: () => new Date() })\n  createdAt: Date = new Date()\n}\n\n// \u2500\u2500 ChannelThreadToken \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\n/**\n * Per-thread HMAC-signed opaque token used by the layered thread-matcher to\n * reliably attach inbound replies to the originating Open Mercato message\n * thread, even when the recipient's mail client strips RFC 5322 headers.\n *\n * Created lazily on the first outbound message in a thread by the\n * `outbound-bridge` subscriber. The token is injected into:\n *   1. The MIME `References:` header as `<om_TOKEN@open-mercato.invalid>` \u2014\n *      invisible to the recipient and survives most reply clients.\n *   2. A hidden HTML body span `<span style=\"display:none\">[OM:om_TOKEN]</span>` \u2014\n *      survives when References is stripped (e.g. some mobile clients).\n *   3. A plain-text trailer `[OM:om_TOKEN]` \u2014 survives plain-text-only replies.\n *\n * The unique constraint is `(tenantId, token)` \u2014 tenant isolation by\n * construction. HMAC verification (via `lib/thread-token.ts`) defends against\n * forged inbound messages: tokens that don't HMAC-verify never reach the DB\n * lookup.\n *\n * See `.ai/specs/implemented/2026-05-27-email-integration-inbound-reliability-and-threading.md`.\n */\n@Entity({ tableName: 'channel_thread_tokens' })\n// One token row per (tenant, thread): the matcher resolves every reply to the\n// same thread regardless of which outbound send minted the token. The unique\n// constraint also makes `getOrCreateThreadToken` race-safe (insert-on-conflict).\n@Unique({ name: 'channel_thread_tokens_thread_uq', properties: ['tenantId', 'messageThreadId'] })\n@Unique({ name: 'channel_thread_tokens_token_uq', properties: ['tenantId', 'token'] })\nexport class ChannelThreadToken {\n  [OptionalProps]?: 'createdAt' | 'lastSeenAt' | 'organizationId'\n\n  @PrimaryKey({ type: 'uuid', defaultRaw: 'gen_random_uuid()' })\n  id!: string\n\n  @Property({ name: 'tenant_id', type: 'uuid' })\n  tenantId!: string\n\n  @Property({ name: 'organization_id', type: 'uuid', nullable: true })\n  organizationId?: string | null\n\n  /** Logical link to messages.message.thread_id (no DB FK \u2014 cross-module). */\n  @Property({ name: 'message_thread_id', type: 'uuid' })\n  messageThreadId!: string\n\n  /**\n   * HMAC-signed opaque token, format: `om_<22b64url>_<11b64url>` (16 random\n   * bytes + 8 HMAC bytes, each base64url-encoded without padding), ~37 chars.\n   */\n  @Property({ name: 'token', type: 'text' })\n  token!: string\n\n  @Property({ name: 'created_at', type: Date, onCreate: () => new Date() })\n  createdAt: Date = new Date()\n\n  /**\n   * Updated whenever a thread-matcher token-based strategy resolves to this\n   * row. Used for future GC: tokens with `last_seen_at < now() - 90 days`\n   * are pruning candidates.\n   */\n  @Property({ name: 'last_seen_at', type: Date, nullable: true })\n  lastSeenAt?: Date | null\n}\n\n// \u2500\u2500 ChannelIngestDeadLetter \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\n/**\n * Inbound messages that fail permanently during ingest land here so an\n * operator can replay them after fixing parsers / schemas. Transient\n * failures (DB blip, network timeout) DO NOT write here \u2014 those abort the\n * poll loop without advancing the cursor so the message is re-fetched on\n * the next tick.\n *\n * `raw_body` is encrypted at rest via the module's `encryption.ts`\n * `defaultEncryptionMaps` entry (MIME bodies may contain PII).\n *\n * See `.ai/specs/implemented/2026-05-27-email-integration-inbound-reliability-and-threading.md`\n * (\u00A7 3 Data Model).\n */\n@Entity({ tableName: 'channel_ingest_dead_letters' })\n@Index({ name: 'channel_ingest_dead_letters_channel_idx', properties: ['channelId', 'tenantId'] })\n@Index({ name: 'channel_ingest_dead_letters_created_idx', properties: ['tenantId', 'createdAt'] })\nexport class ChannelIngestDeadLetter {\n  [OptionalProps]?:\n    | 'createdAt'\n    | 'organizationId'\n    | 'externalMessageId'\n    | 'externalUid'\n    | 'rawBody'\n\n  @PrimaryKey({ type: 'uuid', defaultRaw: 'gen_random_uuid()' })\n  id!: string\n\n  @Property({ name: 'tenant_id', type: 'uuid' })\n  tenantId!: string\n\n  @Property({ name: 'organization_id', type: 'uuid', nullable: true })\n  organizationId?: string | null\n\n  @Property({ name: 'channel_id', type: 'uuid' })\n  channelId!: string\n\n  @Property({ name: 'provider_key', type: 'text' })\n  providerKey!: string\n\n  /** External UID / sequence-number for the provider (e.g. IMAP UID, Gmail messageId). */\n  @Property({ name: 'external_uid', type: 'text', nullable: true })\n  externalUid?: string | null\n\n  @Property({ name: 'external_message_id', type: 'text', nullable: true })\n  externalMessageId?: string | null\n\n  @Property({ name: 'error_class', type: 'text' })\n  errorClass!: string\n\n  @Property({ name: 'error_message', type: 'text' })\n  errorMessage!: string\n\n  /** Truncated source \u2014 first N bytes of the raw MIME / payload (encrypted at rest). */\n  @Property({ name: 'raw_body', type: 'text', nullable: true })\n  rawBody?: string | null\n\n  @Property({ name: 'created_at', type: Date, onCreate: () => new Date() })\n  createdAt: Date = new Date()\n}\n"],
+  "mappings": ";;;;;;;;;;AAAA,SAAS,qBAAqB;AAC9B,SAAS,OAAO,QAAQ,OAAO,YAAY,UAAU,cAAc;AA2EhE;AADI,IAAM,uBAAN,MAA2B;AAAA,EAA3B;AAwCL,oBAAoB;AAiBpB,qBAAqB;AAoBrB,kBAAqC;AAuBrC,qBAAkB,oBAAI,KAAK;AAG3B,qBAAkB,oBAAI,KAAK;AAAA;AAI7B;AAxFE;AAAA,EADC,WAAW,EAAE,MAAM,QAAQ,YAAY,oBAAoB,CAAC;AAAA,GAlBlD,qBAmBX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,gBAAgB,MAAM,OAAO,CAAC;AAAA,GArBrC,qBAsBX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,gBAAgB,MAAM,OAAO,CAAC;AAAA,GAxBrC,qBAyBX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,gBAAgB,MAAM,OAAO,CAAC;AAAA,GA3BrC,qBA4BX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,uBAAuB,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GA9B5D,qBA+BX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,mBAAmB,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GAjCxD,qBAkCX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,gBAAgB,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GApCrD,qBAqCX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,aAAa,MAAM,WAAW,SAAS,KAAK,CAAC;AAAA,GAvCpD,qBAwCX;AASA;AAAA,EADC,SAAS,EAAE,MAAM,WAAW,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GAhDhD,qBAiDX;AAQA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,WAAW,SAAS,MAAM,CAAC;AAAA,GAxDtD,qBAyDX;AASA;AAAA,EADC,SAAS,EAAE,MAAM,yBAAyB,MAAM,OAAO,UAAU,KAAK,CAAC;AAAA,GAjE7D,qBAkEX;AAIA;AAAA,EADC,SAAS,EAAE,MAAM,kBAAkB,MAAM,MAAM,UAAU,KAAK,CAAC;AAAA,GArErD,qBAsEX;AAOA;AAAA,EADC,SAAS,EAAE,MAAM,UAAU,MAAM,QAAQ,SAAS,YAAY,CAAC;AAAA,GA5ErD,qBA6EX;AAIA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GAhFnD,qBAiFX;AAUA;AAAA,EADC,SAAS,EAAE,MAAM,iBAAiB,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GA1FtD,qBA2FX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,aAAa,MAAM,OAAO,CAAC;AAAA,GA7FlC,qBA8FX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,mBAAmB,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GAhGxD,qBAiGX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,MAAM,UAAU,MAAM,oBAAI,KAAK,EAAE,CAAC;AAAA,GAnG7D,qBAoGX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,MAAM,UAAU,MAAM,oBAAI,KAAK,EAAE,CAAC;AAAA,GAtG7D,qBAuGX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,MAAM,UAAU,KAAK,CAAC;AAAA,GAzGjD,qBA0GX;AA1GW,uBAAN;AAAA,EA7CN,OAAO,EAAE,WAAW,yBAAyB,CAAC;AAAA,EAC9C,MAAM,EAAE,MAAM,8CAA8C,YAAY,CAAC,YAAY,aAAa,EAAE,CAAC;AAAA,EAKrG,MAAM;AAAA,IACL,MAAM;AAAA,IACN,YACE;AAAA,EACJ,CAAC;AAAA,EACA,MAAM,EAAE,MAAM,iDAAiD,YAAY,CAAC,YAAY,eAAe,UAAU,EAAE,CAAC;AAAA,EACpH,MAAM;AAAA,IACL,MAAM;AAAA,IACN,YAAY,CAAC,UAAU,eAAe,WAAW;AAAA,EACnD,CAAC;AAAA,EACA,MAAM;AAAA,IACL,MAAM;AAAA,IACN,YACE;AAAA,EACJ,CAAC;AAAA,EACA,MAAM;AAAA,IACL,MAAM;AAAA,IACN,YACE;AAAA,EACJ,CAAC;AAAA,EAKA,MAAM;AAAA,IACL,MAAM;AAAA,IACN,YACE;AAAA,EACJ,CAAC;AAAA,EAMA,MAAM;AAAA,IACL,MAAM;AAAA,IACN,YACE;AAAA,EACJ,CAAC;AAAA,GACY;AAqHV;AADI,IAAM,uBAAN,MAA2B;AAAA,EAA3B;AA+BL,qBAAkB,oBAAI,KAAK;AAG3B,qBAAkB,oBAAI,KAAK;AAAA;AAC7B;AA/BE;AAAA,EADC,WAAW,EAAE,MAAM,QAAQ,YAAY,oBAAoB,CAAC;AAAA,GAHlD,qBAIX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,OAAO,CAAC;AAAA,GANnC,qBAOX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,4BAA4B,MAAM,OAAO,CAAC;AAAA,GATjD,qBAUX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,WAAW,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GAZhD,qBAaX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,qBAAqB,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GAf1D,qBAgBX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,oBAAoB,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GAlBzD,qBAmBX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,mBAAmB,MAAM,MAAM,UAAU,KAAK,CAAC;AAAA,GArBtD,qBAsBX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,aAAa,MAAM,OAAO,CAAC;AAAA,GAxBlC,qBAyBX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,mBAAmB,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GA3BxD,qBA4BX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,MAAM,UAAU,MAAM,oBAAI,KAAK,EAAE,CAAC;AAAA,GA9B7D,qBA+BX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,MAAM,UAAU,MAAM,oBAAI,KAAK,EAAE,CAAC;AAAA,GAjC7D,qBAkCX;AAlCW,uBAAN;AAAA,EALN,OAAO,EAAE,WAAW,yBAAyB,CAAC;AAAA,EAC9C,MAAM,EAAE,MAAM,sCAAsC,YAAY,CAAC,aAAa,wBAAwB,EAAE,CAAC;AAAA,EACzG,MAAM,EAAE,MAAM,6CAA6C,YAAY,CAAC,iBAAiB,EAAE,CAAC;AAAA,EAC5F,MAAM,EAAE,MAAM,4CAA4C,YAAY,CAAC,gBAAgB,EAAE,CAAC;AAAA,EAC1F,OAAO,EAAE,MAAM,8CAA8C,YAAY,CAAC,aAAa,wBAAwB,EAAE,CAAC;AAAA,GACtG;AA4CV;AADI,IAAM,kBAAN,MAAsB;AAAA,EAAtB;AAkCL,qBAAkB,oBAAI,KAAK;AAAA;AAC7B;AA/BE;AAAA,EADC,WAAW,EAAE,MAAM,QAAQ,YAAY,oBAAoB,CAAC;AAAA,GAHlD,gBAIX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,OAAO,CAAC;AAAA,GANnC,gBAOX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,mBAAmB,MAAM,OAAO,CAAC;AAAA,GATxC,gBAUX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,uBAAuB,MAAM,OAAO,CAAC;AAAA,GAZ5C,gBAaX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,aAAa,MAAM,OAAO,CAAC;AAAA,GAflC,gBAgBX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,qBAAqB,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GAlB1D,gBAmBX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,uBAAuB,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GArB5D,gBAsBX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,sBAAsB,MAAM,MAAM,UAAU,KAAK,CAAC;AAAA,GAxBzD,gBAyBX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,aAAa,MAAM,OAAO,CAAC;AAAA,GA3BlC,gBA4BX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,mBAAmB,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GA9BxD,gBA+BX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,MAAM,UAAU,MAAM,oBAAI,KAAK,EAAE,CAAC;AAAA,GAjC7D,gBAkCX;AAlCW,kBAAN;AAAA,EAJN,OAAO,EAAE,WAAW,oBAAoB,CAAC;AAAA,EACzC,MAAM,EAAE,MAAM,sCAAsC,YAAY,CAAC,gBAAgB,EAAE,CAAC;AAAA,EACpF,MAAM,EAAE,MAAM,0CAA0C,YAAY,CAAC,aAAa,mBAAmB,EAAE,CAAC;AAAA,EACxG,OAAO,EAAE,MAAM,yCAAyC,YAAY,CAAC,aAAa,mBAAmB,EAAE,CAAC;AAAA,GAC5F;AA6CV;AADI,IAAM,qBAAN,MAAyB;AAAA,EAAzB;AA2BL,0BAAyB;AAqBzB,qBAAkB,oBAAI,KAAK;AAAA;AAC7B;AA7CE;AAAA,EADC,WAAW,EAAE,MAAM,QAAQ,YAAY,oBAAoB,CAAC;AAAA,GAHlD,mBAIX;AAIA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,OAAO,CAAC;AAAA,GAPnC,mBAQX;AAIA;AAAA,EADC,SAAS,EAAE,MAAM,4BAA4B,MAAM,OAAO,CAAC;AAAA,GAXjD,mBAYX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,uBAAuB,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GAd5D,mBAeX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,gBAAgB,MAAM,OAAO,CAAC;AAAA,GAjBrC,mBAkBX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,gBAAgB,MAAM,OAAO,CAAC;AAAA,GApBrC,mBAqBX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,aAAa,MAAM,OAAO,CAAC;AAAA,GAvBlC,mBAwBX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,mBAAmB,MAAM,OAAO,CAAC;AAAA,GA1BxC,mBA2BX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,mBAAmB,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GA7BxD,mBA8BX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,wBAAwB,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GAhC7D,mBAiCX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,qBAAqB,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GAnC1D,mBAoCX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,oBAAoB,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GAtCzD,mBAuCX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,aAAa,MAAM,OAAO,CAAC;AAAA,GAzClC,mBA0CX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,mBAAmB,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GA5CxD,mBA6CX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,MAAM,UAAU,MAAM,oBAAI,KAAK,EAAE,CAAC;AAAA,GA/C7D,mBAgDX;AAhDW,qBAAN;AAAA,EALN,OAAO,EAAE,WAAW,wBAAwB,CAAC;AAAA,EAC7C,MAAM,EAAE,MAAM,qCAAqC,YAAY,CAAC,WAAW,EAAE,CAAC;AAAA,EAC9E,MAAM,EAAE,MAAM,sCAAsC,YAAY,CAAC,wBAAwB,EAAE,CAAC;AAAA,EAC5F,MAAM,EAAE,MAAM,qCAAqC,YAAY,CAAC,mBAAmB,EAAE,CAAC;AAAA,EACtF,OAAO,EAAE,MAAM,oCAAoC,YAAY,CAAC,WAAW,EAAE,CAAC;AAAA,GAClE;AA0DV;AADI,IAAM,uBAAN,MAA2B;AAAA,EAA3B;AAiCL,qBAAkB,oBAAI,KAAK;AAG3B,qBAAkB,oBAAI,KAAK;AAAA;AAC7B;AAjCE;AAAA,EADC,WAAW,EAAE,MAAM,QAAQ,YAAY,oBAAoB,CAAC;AAAA,GAHlD,qBAIX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,4BAA4B,MAAM,OAAO,CAAC;AAAA,GANjD,qBAOX;AAIA;AAAA,EADC,SAAS,EAAE,MAAM,qBAAqB,MAAM,OAAO,CAAC;AAAA,GAV1C,qBAWX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,OAAO,CAAC;AAAA,GAbnC,qBAcX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,gBAAgB,MAAM,OAAO,CAAC;AAAA,GAhBrC,qBAiBX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,uBAAuB,MAAM,OAAO,CAAC;AAAA,GAnB5C,qBAoBX;AAIA;AAAA,EADC,SAAS,EAAE,MAAM,oBAAoB,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GAvBzD,qBAwBX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,aAAa,MAAM,OAAO,CAAC;AAAA,GA1BlC,qBA2BX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,mBAAmB,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GA7BxD,qBA8BX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,MAAM,UAAU,MAAM,oBAAI,KAAK,EAAE,CAAC;AAAA,GAhC7D,qBAiCX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,MAAM,UAAU,MAAM,oBAAI,KAAK,EAAE,CAAC;AAAA,GAnC7D,qBAoCX;AApCW,uBAAN;AAAA,EAJN,OAAO,EAAE,WAAW,0BAA0B,CAAC;AAAA,EAC/C,MAAM,EAAE,MAAM,wCAAwC,YAAY,CAAC,0BAA0B,UAAU,EAAE,CAAC;AAAA,EAC1G,MAAM,EAAE,MAAM,sCAAsC,YAAY,CAAC,mBAAmB,UAAU,EAAE,CAAC;AAAA,EACjG,OAAO,EAAE,MAAM,uCAAuC,YAAY,CAAC,0BAA0B,UAAU,EAAE,CAAC;AAAA,GAC9F;AA2DV;AADI,IAAM,kBAAN,MAAsB;AAAA,EAAtB;AAoCL,qBAAkB,oBAAI,KAAK;AAAA;AAC7B;AAjCE;AAAA,EADC,WAAW,EAAE,MAAM,QAAQ,YAAY,oBAAoB,CAAC;AAAA,GAHlD,gBAIX;AAIA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,OAAO,CAAC;AAAA,GAPnC,gBAQX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,SAAS,MAAM,OAAO,CAAC;AAAA,GAV9B,gBAWX;AAIA;AAAA,EADC,SAAS,EAAE,MAAM,sBAAsB,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GAd3D,gBAeX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,0BAA0B,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GAjB/D,gBAkBX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,2BAA2B,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GApBhE,gBAqBX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,gBAAgB,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GAvBrD,gBAwBX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,wBAAwB,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GA1B7D,gBA2BX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,aAAa,MAAM,OAAO,CAAC;AAAA,GA7BlC,gBA8BX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,mBAAmB,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GAhCxD,gBAiCX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,MAAM,UAAU,MAAM,oBAAI,KAAK,EAAE,CAAC;AAAA,GAnC7D,gBAoCX;AApCW,kBAAN;AAAA,EAjBN,OAAO,EAAE,WAAW,oBAAoB,CAAC;AAAA,EACzC,MAAM,EAAE,MAAM,iCAAiC,YAAY,CAAC,WAAW,EAAE,CAAC;AAAA,EAC1E,MAAM,EAAE,MAAM,uCAAuC,YAAY,CAAC,aAAa,OAAO,EAAE,CAAC;AAAA,EACzF,MAAM;AAAA,IACL,MAAM;AAAA,IACN,YACE;AAAA,EACJ,CAAC;AAAA,EACA,MAAM;AAAA,IACL,MAAM;AAAA,IACN,YACE;AAAA,EACJ,CAAC;AAAA,EACA,MAAM;AAAA,IACL,MAAM;AAAA,IACN,YAAY;AAAA,EACd,CAAC;AAAA,GACY;AAoEV;AADI,IAAM,qBAAN,MAAyB;AAAA,EAAzB;AAwBL,qBAAkB,oBAAI,KAAK;AAAA;AAS7B;AA7BE;AAAA,EADC,WAAW,EAAE,MAAM,QAAQ,YAAY,oBAAoB,CAAC;AAAA,GAHlD,mBAIX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,aAAa,MAAM,OAAO,CAAC;AAAA,GANlC,mBAOX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,mBAAmB,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GATxD,mBAUX;AAIA;AAAA,EADC,SAAS,EAAE,MAAM,qBAAqB,MAAM,OAAO,CAAC;AAAA,GAb1C,mBAcX;AAOA;AAAA,EADC,SAAS,EAAE,MAAM,SAAS,MAAM,OAAO,CAAC;AAAA,GApB9B,mBAqBX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,MAAM,UAAU,MAAM,oBAAI,KAAK,EAAE,CAAC;AAAA,GAvB7D,mBAwBX;AAQA;AAAA,EADC,SAAS,EAAE,MAAM,gBAAgB,MAAM,MAAM,UAAU,KAAK,CAAC;AAAA,GA/BnD,mBAgCX;AAhCW,qBAAN;AAAA,EANN,OAAO,EAAE,WAAW,wBAAwB,CAAC;AAAA,EAI7C,OAAO,EAAE,MAAM,mCAAmC,YAAY,CAAC,YAAY,iBAAiB,EAAE,CAAC;AAAA,EAC/F,OAAO,EAAE,MAAM,kCAAkC,YAAY,CAAC,YAAY,OAAO,EAAE,CAAC;AAAA,GACxE;AAsDV;AADI,IAAM,0BAAN,MAA8B;AAAA,EAA9B;AAyCL,qBAAkB,oBAAI,KAAK;AAAA;AAC7B;AAjCE;AAAA,EADC,WAAW,EAAE,MAAM,QAAQ,YAAY,oBAAoB,CAAC;AAAA,GARlD,wBASX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,aAAa,MAAM,OAAO,CAAC;AAAA,GAXlC,wBAYX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,mBAAmB,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GAdxD,wBAeX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,OAAO,CAAC;AAAA,GAjBnC,wBAkBX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,gBAAgB,MAAM,OAAO,CAAC;AAAA,GApBrC,wBAqBX;AAIA;AAAA,EADC,SAAS,EAAE,MAAM,gBAAgB,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GAxBrD,wBAyBX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,uBAAuB,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GA3B5D,wBA4BX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,eAAe,MAAM,OAAO,CAAC;AAAA,GA9BpC,wBA+BX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,iBAAiB,MAAM,OAAO,CAAC;AAAA,GAjCtC,wBAkCX;AAIA;AAAA,EADC,SAAS,EAAE,MAAM,YAAY,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GArCjD,wBAsCX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,MAAM,UAAU,MAAM,oBAAI,KAAK,EAAE,CAAC;AAAA,GAxC7D,wBAyCX;AAzCW,0BAAN;AAAA,EAHN,OAAO,EAAE,WAAW,8BAA8B,CAAC;AAAA,EACnD,MAAM,EAAE,MAAM,2CAA2C,YAAY,CAAC,aAAa,UAAU,EAAE,CAAC;AAAA,EAChG,MAAM,EAAE,MAAM,2CAA2C,YAAY,CAAC,YAAY,WAAW,EAAE,CAAC;AAAA,GACpF;",
   "names": []
 }

package/dist/modules/communication_channels/data/validators.js

@@ -57,7 +57,8 @@ const validateCredentialsInputSchema = z.object({
 });
 const validateCredentialsResultSchema = z.object({
   ok: z.boolean(),
-  errors: z.record(z.string(), z.string()).optional()
+  errors: z.record(z.string(), z.string()).optional(),
+  errorCodes: z.record(z.string(), z.string()).optional()
 });
 const refreshCredentialsInputSchema = z.object({
   channelId: z.string().uuid(),

package/dist/modules/communication_channels/data/validators.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/communication_channels/data/validators.ts"],
-  "sourcesContent": ["import { z } from 'zod'\n\n/**\n * Zod schemas for adapter inputs and API request/response bodies.\n *\n * These mirror the TypeScript interfaces in `lib/adapter.ts`. They are used by:\n *   - API route handlers to validate incoming requests\n *   - Adapter implementations that prefer runtime validation over TypeScript-only types\n *   - `validateCredentials?(...)` flow on credential-based providers\n */\n\nexport const tenantScopeSchema = z.object({\n  organizationId: z.string().uuid().nullable().optional(),\n  tenantId: z.string().uuid(),\n})\n\nexport const channelCapabilitiesSchema = z.object({\n  threading: z.boolean(),\n  richText: z.boolean(),\n  fileSharing: z.boolean(),\n  maxFileSize: z.number().int().nonnegative().optional(),\n  supportedMimeTypes: z.array(z.string()).optional(),\n  readReceipts: z.boolean(),\n  deliveryReceipts: z.boolean(),\n  typingIndicators: z.boolean(),\n  reactions: z.boolean(),\n  multiReactionPerUser: z.boolean(),\n  editMessage: z.boolean(),\n  deleteMessage: z.boolean(),\n  presence: z.boolean(),\n  richBlocks: z.boolean(),\n  interactiveComponents: z.boolean(),\n  inlineImages: z.boolean(),\n  conversationHistory: z.boolean(),\n  contactCards: z.boolean(),\n  locationSharing: z.boolean(),\n  voiceNotes: z.boolean(),\n  stickers: z.boolean(),\n  supportedBodyFormats: z.array(z.enum(['text', 'markdown', 'html'])),\n  maxBodyLength: z.number().int().positive().optional(),\n  realtimePush: z.boolean().optional(),\n})\n\nexport const normalizedAttachmentSchema = z.object({\n  url: z.string().url(),\n  mimeType: z.string().min(1),\n  fileName: z.string().min(1),\n  fileSize: z.number().int().nonnegative().optional(),\n  inline: z.boolean().optional(),\n})\n\nexport const messageContentSchema = z.object({\n  text: z.string().optional(),\n  html: z.string().optional(),\n  bodyFormat: z.enum(['text', 'markdown', 'html']).optional(),\n  attachments: z.array(normalizedAttachmentSchema).optional(),\n  raw: z.record(z.string(), z.unknown()).optional(),\n})\n\nexport const sendMessageInputSchema = z.object({\n  conversationId: z.string().optional(),\n  content: messageContentSchema,\n  credentials: z.record(z.string(), z.unknown()),\n  scope: tenantScopeSchema,\n  metadata: z.record(z.string(), z.unknown()).optional(),\n})\n\nexport const validateCredentialsInputSchema = z.object({\n  providerKey: z.string().min(1),\n  credentials: z.record(z.string(), z.unknown()),\n  scope: tenantScopeSchema,\n})\n\nexport const validateCredentialsResultSchema = z.object({\n  ok: z.boolean(),\n  errors: z.record(z.string(), z.string()).optional(),\n})\n\nexport const refreshCredentialsInputSchema = z.object({\n  channelId: z.string().uuid(),\n  credentials: z.record(z.string(), z.unknown()),\n  scope: tenantScopeSchema,\n})\n\nexport const refreshedCredentialsSchema = z.object({\n  credentials: z.record(z.string(), z.unknown()),\n  expiresAt: z.date().optional(),\n})\n\nexport const inboundReactionSchema = z.object({\n  emoji: z.string().min(1),\n  userIdentifier: z.string().min(1),\n  userDisplayName: z.string().optional(),\n  timestamp: z.date().optional(),\n})\n\n/**\n * Canonical normalized inbound reaction event \u2014 matches `InboundReactionEvent`\n * in `lib/adapter.ts`. Used by the reactions queue for type-safe payloads.\n */\nexport const inboundReactionEventSchema = z.object({\n  externalMessageId: z.string().min(1),\n  externalConversationId: z.string().min(1).optional(),\n  externalReactionId: z.string().min(1).optional(),\n  emoji: z.string().min(1).max(64),\n  userIdentifier: z.string().min(1),\n  userDisplayName: z.string().optional(),\n  action: z.enum(['added', 'removed']),\n  timestamp: z.date().optional(),\n  raw: z.record(z.string(), z.unknown()).optional(),\n})\n\nexport const normalizedInboundMessageSchema = z.object({\n  externalMessageId: z.string().min(1),\n  externalConversationId: z.string().min(1),\n  senderIdentifier: z.string().min(1),\n  senderDisplayName: z.string().optional(),\n  senderAvatarUrl: z.string().url().optional(),\n  subject: z.string().optional(),\n  body: z.string(),\n  bodyFormat: z.enum(['text', 'markdown', 'html']),\n  attachments: z.array(normalizedAttachmentSchema).optional(),\n  timestamp: z.date(),\n  replyToExternalId: z.string().optional(),\n  channelPayload: z.record(z.string(), z.unknown()),\n  channelContentType: z.string().min(1),\n  channelMetadata: z.record(z.string(), z.unknown()),\n  reactions: z.array(inboundReactionSchema).optional(),\n})\n\nexport const reactionApiBodySchema = z.object({\n  emoji: z.string().min(1).max(64),\n})\n\nexport type SendMessageInputDto = z.infer<typeof sendMessageInputSchema>\nexport type NormalizedInboundMessageDto = z.infer<typeof normalizedInboundMessageSchema>\nexport type ChannelCapabilitiesDto = z.infer<typeof channelCapabilitiesSchema>\nexport type ReactionApiBodyDto = z.infer<typeof reactionApiBodySchema>\n"],
-  "mappings": "AAAA,SAAS,SAAS;AAWX,MAAM,oBAAoB,EAAE,OAAO;AAAA,EACxC,gBAAgB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS;AAAA,EACtD,UAAU,EAAE,OAAO,EAAE,KAAK;AAC5B,CAAC;AAEM,MAAM,4BAA4B,EAAE,OAAO;AAAA,EAChD,WAAW,EAAE,QAAQ;AAAA,EACrB,UAAU,EAAE,QAAQ;AAAA,EACpB,aAAa,EAAE,QAAQ;AAAA,EACvB,aAAa,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,SAAS;AAAA,EACrD,oBAAoB,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,SAAS;AAAA,EACjD,cAAc,EAAE,QAAQ;AAAA,EACxB,kBAAkB,EAAE,QAAQ;AAAA,EAC5B,kBAAkB,EAAE,QAAQ;AAAA,EAC5B,WAAW,EAAE,QAAQ;AAAA,EACrB,sBAAsB,EAAE,QAAQ;AAAA,EAChC,aAAa,EAAE,QAAQ;AAAA,EACvB,eAAe,EAAE,QAAQ;AAAA,EACzB,UAAU,EAAE,QAAQ;AAAA,EACpB,YAAY,EAAE,QAAQ;AAAA,EACtB,uBAAuB,EAAE,QAAQ;AAAA,EACjC,cAAc,EAAE,QAAQ;AAAA,EACxB,qBAAqB,EAAE,QAAQ;AAAA,EAC/B,cAAc,EAAE,QAAQ;AAAA,EACxB,iBAAiB,EAAE,QAAQ;AAAA,EAC3B,YAAY,EAAE,QAAQ;AAAA,EACtB,UAAU,EAAE,QAAQ;AAAA,EACpB,sBAAsB,EAAE,MAAM,EAAE,KAAK,CAAC,QAAQ,YAAY,MAAM,CAAC,CAAC;AAAA,EAClE,eAAe,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS;AAAA,EACpD,cAAc,EAAE,QAAQ,EAAE,SAAS;AACrC,CAAC;AAEM,MAAM,6BAA6B,EAAE,OAAO;AAAA,EACjD,KAAK,EAAE,OAAO,EAAE,IAAI;AAAA,EACpB,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EAC1B,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EAC1B,UAAU,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,SAAS;AAAA,EAClD,QAAQ,EAAE,QAAQ,EAAE,SAAS;AAC/B,CAAC;AAEM,MAAM,uBAAuB,EAAE,OAAO;AAAA,EAC3C,MAAM,EAAE,OAAO,EAAE,SAAS;AAAA,EAC1B,MAAM,EAAE,OAAO,EAAE,SAAS;AAAA,EAC1B,YAAY,EAAE,KAAK,CAAC,QAAQ,YAAY,MAAM,CAAC,EAAE,SAAS;AAAA,EAC1D,aAAa,EAAE,MAAM,0BAA0B,EAAE,SAAS;AAAA,EAC1D,KAAK,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,EAAE,SAAS;AAClD,CAAC;AAEM,MAAM,yBAAyB,EAAE,OAAO;AAAA,EAC7C,gBAAgB,EAAE,OAAO,EAAE,SAAS;AAAA,EACpC,SAAS;AAAA,EACT,aAAa,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC;AAAA,EAC7C,OAAO;AAAA,EACP,UAAU,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,EAAE,SAAS;AACvD,CAAC;AAEM,MAAM,iCAAiC,EAAE,OAAO;AAAA,EACrD,aAAa,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EAC7B,aAAa,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC;AAAA,EAC7C,OAAO;AACT,CAAC;AAEM,MAAM,kCAAkC,EAAE,OAAO;AAAA,EACtD,IAAI,EAAE,QAAQ;AAAA,EACd,QAAQ,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,OAAO,CAAC,EAAE,SAAS;AACpD,CAAC;AAEM,MAAM,gCAAgC,EAAE,OAAO;AAAA,EACpD,WAAW,EAAE,OAAO,EAAE,KAAK;AAAA,EAC3B,aAAa,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC;AAAA,EAC7C,OAAO;AACT,CAAC;AAEM,MAAM,6BAA6B,EAAE,OAAO;AAAA,EACjD,aAAa,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC;AAAA,EAC7C,WAAW,EAAE,KAAK,EAAE,SAAS;AAC/B,CAAC;AAEM,MAAM,wBAAwB,EAAE,OAAO;AAAA,EAC5C,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EACvB,gBAAgB,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EAChC,iBAAiB,EAAE,OAAO,EAAE,SAAS;AAAA,EACrC,WAAW,EAAE,KAAK,EAAE,SAAS;AAC/B,CAAC;AAMM,MAAM,6BAA6B,EAAE,OAAO;AAAA,EACjD,mBAAmB,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EACnC,wBAAwB,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA,EACnD,oBAAoB,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA,EAC/C,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE;AAAA,EAC/B,gBAAgB,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EAChC,iBAAiB,EAAE,OAAO,EAAE,SAAS;AAAA,EACrC,QAAQ,EAAE,KAAK,CAAC,SAAS,SAAS,CAAC;AAAA,EACnC,WAAW,EAAE,KAAK,EAAE,SAAS;AAAA,EAC7B,KAAK,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,EAAE,SAAS;AAClD,CAAC;AAEM,MAAM,iCAAiC,EAAE,OAAO;AAAA,EACrD,mBAAmB,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EACnC,wBAAwB,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EACxC,kBAAkB,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EAClC,mBAAmB,EAAE,OAAO,EAAE,SAAS;AAAA,EACvC,iBAAiB,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS;AAAA,EAC3C,SAAS,EAAE,OAAO,EAAE,SAAS;AAAA,EAC7B,MAAM,EAAE,OAAO;AAAA,EACf,YAAY,EAAE,KAAK,CAAC,QAAQ,YAAY,MAAM,CAAC;AAAA,EAC/C,aAAa,EAAE,MAAM,0BAA0B,EAAE,SAAS;AAAA,EAC1D,WAAW,EAAE,KAAK;AAAA,EAClB,mBAAmB,EAAE,OAAO,EAAE,SAAS;AAAA,EACvC,gBAAgB,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC;AAAA,EAChD,oBAAoB,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EACpC,iBAAiB,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC;AAAA,EACjD,WAAW,EAAE,MAAM,qBAAqB,EAAE,SAAS;AACrD,CAAC;AAEM,MAAM,wBAAwB,EAAE,OAAO;AAAA,EAC5C,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE;AACjC,CAAC;",
+  "sourcesContent": ["import { z } from 'zod'\n\n/**\n * Zod schemas for adapter inputs and API request/response bodies.\n *\n * These mirror the TypeScript interfaces in `lib/adapter.ts`. They are used by:\n *   - API route handlers to validate incoming requests\n *   - Adapter implementations that prefer runtime validation over TypeScript-only types\n *   - `validateCredentials?(...)` flow on credential-based providers\n */\n\nexport const tenantScopeSchema = z.object({\n  organizationId: z.string().uuid().nullable().optional(),\n  tenantId: z.string().uuid(),\n})\n\nexport const channelCapabilitiesSchema = z.object({\n  threading: z.boolean(),\n  richText: z.boolean(),\n  fileSharing: z.boolean(),\n  maxFileSize: z.number().int().nonnegative().optional(),\n  supportedMimeTypes: z.array(z.string()).optional(),\n  readReceipts: z.boolean(),\n  deliveryReceipts: z.boolean(),\n  typingIndicators: z.boolean(),\n  reactions: z.boolean(),\n  multiReactionPerUser: z.boolean(),\n  editMessage: z.boolean(),\n  deleteMessage: z.boolean(),\n  presence: z.boolean(),\n  richBlocks: z.boolean(),\n  interactiveComponents: z.boolean(),\n  inlineImages: z.boolean(),\n  conversationHistory: z.boolean(),\n  contactCards: z.boolean(),\n  locationSharing: z.boolean(),\n  voiceNotes: z.boolean(),\n  stickers: z.boolean(),\n  supportedBodyFormats: z.array(z.enum(['text', 'markdown', 'html'])),\n  maxBodyLength: z.number().int().positive().optional(),\n  realtimePush: z.boolean().optional(),\n})\n\nexport const normalizedAttachmentSchema = z.object({\n  url: z.string().url(),\n  mimeType: z.string().min(1),\n  fileName: z.string().min(1),\n  fileSize: z.number().int().nonnegative().optional(),\n  inline: z.boolean().optional(),\n})\n\nexport const messageContentSchema = z.object({\n  text: z.string().optional(),\n  html: z.string().optional(),\n  bodyFormat: z.enum(['text', 'markdown', 'html']).optional(),\n  attachments: z.array(normalizedAttachmentSchema).optional(),\n  raw: z.record(z.string(), z.unknown()).optional(),\n})\n\nexport const sendMessageInputSchema = z.object({\n  conversationId: z.string().optional(),\n  content: messageContentSchema,\n  credentials: z.record(z.string(), z.unknown()),\n  scope: tenantScopeSchema,\n  metadata: z.record(z.string(), z.unknown()).optional(),\n})\n\nexport const validateCredentialsInputSchema = z.object({\n  providerKey: z.string().min(1),\n  credentials: z.record(z.string(), z.unknown()),\n  scope: tenantScopeSchema,\n})\n\nexport const validateCredentialsResultSchema = z.object({\n  ok: z.boolean(),\n  errors: z.record(z.string(), z.string()).optional(),\n  errorCodes: z.record(z.string(), z.string()).optional(),\n})\n\nexport const refreshCredentialsInputSchema = z.object({\n  channelId: z.string().uuid(),\n  credentials: z.record(z.string(), z.unknown()),\n  scope: tenantScopeSchema,\n})\n\nexport const refreshedCredentialsSchema = z.object({\n  credentials: z.record(z.string(), z.unknown()),\n  expiresAt: z.date().optional(),\n})\n\nexport const inboundReactionSchema = z.object({\n  emoji: z.string().min(1),\n  userIdentifier: z.string().min(1),\n  userDisplayName: z.string().optional(),\n  timestamp: z.date().optional(),\n})\n\n/**\n * Canonical normalized inbound reaction event \u2014 matches `InboundReactionEvent`\n * in `lib/adapter.ts`. Used by the reactions queue for type-safe payloads.\n */\nexport const inboundReactionEventSchema = z.object({\n  externalMessageId: z.string().min(1),\n  externalConversationId: z.string().min(1).optional(),\n  externalReactionId: z.string().min(1).optional(),\n  emoji: z.string().min(1).max(64),\n  userIdentifier: z.string().min(1),\n  userDisplayName: z.string().optional(),\n  action: z.enum(['added', 'removed']),\n  timestamp: z.date().optional(),\n  raw: z.record(z.string(), z.unknown()).optional(),\n})\n\nexport const normalizedInboundMessageSchema = z.object({\n  externalMessageId: z.string().min(1),\n  externalConversationId: z.string().min(1),\n  senderIdentifier: z.string().min(1),\n  senderDisplayName: z.string().optional(),\n  senderAvatarUrl: z.string().url().optional(),\n  subject: z.string().optional(),\n  body: z.string(),\n  bodyFormat: z.enum(['text', 'markdown', 'html']),\n  attachments: z.array(normalizedAttachmentSchema).optional(),\n  timestamp: z.date(),\n  replyToExternalId: z.string().optional(),\n  channelPayload: z.record(z.string(), z.unknown()),\n  channelContentType: z.string().min(1),\n  channelMetadata: z.record(z.string(), z.unknown()),\n  reactions: z.array(inboundReactionSchema).optional(),\n})\n\nexport const reactionApiBodySchema = z.object({\n  emoji: z.string().min(1).max(64),\n})\n\nexport type SendMessageInputDto = z.infer<typeof sendMessageInputSchema>\nexport type NormalizedInboundMessageDto = z.infer<typeof normalizedInboundMessageSchema>\nexport type ChannelCapabilitiesDto = z.infer<typeof channelCapabilitiesSchema>\nexport type ReactionApiBodyDto = z.infer<typeof reactionApiBodySchema>\n"],
+  "mappings": "AAAA,SAAS,SAAS;AAWX,MAAM,oBAAoB,EAAE,OAAO;AAAA,EACxC,gBAAgB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS;AAAA,EACtD,UAAU,EAAE,OAAO,EAAE,KAAK;AAC5B,CAAC;AAEM,MAAM,4BAA4B,EAAE,OAAO;AAAA,EAChD,WAAW,EAAE,QAAQ;AAAA,EACrB,UAAU,EAAE,QAAQ;AAAA,EACpB,aAAa,EAAE,QAAQ;AAAA,EACvB,aAAa,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,SAAS;AAAA,EACrD,oBAAoB,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,SAAS;AAAA,EACjD,cAAc,EAAE,QAAQ;AAAA,EACxB,kBAAkB,EAAE,QAAQ;AAAA,EAC5B,kBAAkB,EAAE,QAAQ;AAAA,EAC5B,WAAW,EAAE,QAAQ;AAAA,EACrB,sBAAsB,EAAE,QAAQ;AAAA,EAChC,aAAa,EAAE,QAAQ;AAAA,EACvB,eAAe,EAAE,QAAQ;AAAA,EACzB,UAAU,EAAE,QAAQ;AAAA,EACpB,YAAY,EAAE,QAAQ;AAAA,EACtB,uBAAuB,EAAE,QAAQ;AAAA,EACjC,cAAc,EAAE,QAAQ;AAAA,EACxB,qBAAqB,EAAE,QAAQ;AAAA,EAC/B,cAAc,EAAE,QAAQ;AAAA,EACxB,iBAAiB,EAAE,QAAQ;AAAA,EAC3B,YAAY,EAAE,QAAQ;AAAA,EACtB,UAAU,EAAE,QAAQ;AAAA,EACpB,sBAAsB,EAAE,MAAM,EAAE,KAAK,CAAC,QAAQ,YAAY,MAAM,CAAC,CAAC;AAAA,EAClE,eAAe,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS;AAAA,EACpD,cAAc,EAAE,QAAQ,EAAE,SAAS;AACrC,CAAC;AAEM,MAAM,6BAA6B,EAAE,OAAO;AAAA,EACjD,KAAK,EAAE,OAAO,EAAE,IAAI;AAAA,EACpB,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EAC1B,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EAC1B,UAAU,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,SAAS;AAAA,EAClD,QAAQ,EAAE,QAAQ,EAAE,SAAS;AAC/B,CAAC;AAEM,MAAM,uBAAuB,EAAE,OAAO;AAAA,EAC3C,MAAM,EAAE,OAAO,EAAE,SAAS;AAAA,EAC1B,MAAM,EAAE,OAAO,EAAE,SAAS;AAAA,EAC1B,YAAY,EAAE,KAAK,CAAC,QAAQ,YAAY,MAAM,CAAC,EAAE,SAAS;AAAA,EAC1D,aAAa,EAAE,MAAM,0BAA0B,EAAE,SAAS;AAAA,EAC1D,KAAK,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,EAAE,SAAS;AAClD,CAAC;AAEM,MAAM,yBAAyB,EAAE,OAAO;AAAA,EAC7C,gBAAgB,EAAE,OAAO,EAAE,SAAS;AAAA,EACpC,SAAS;AAAA,EACT,aAAa,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC;AAAA,EAC7C,OAAO;AAAA,EACP,UAAU,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,EAAE,SAAS;AACvD,CAAC;AAEM,MAAM,iCAAiC,EAAE,OAAO;AAAA,EACrD,aAAa,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EAC7B,aAAa,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC;AAAA,EAC7C,OAAO;AACT,CAAC;AAEM,MAAM,kCAAkC,EAAE,OAAO;AAAA,EACtD,IAAI,EAAE,QAAQ;AAAA,EACd,QAAQ,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,OAAO,CAAC,EAAE,SAAS;AAAA,EAClD,YAAY,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,OAAO,CAAC,EAAE,SAAS;AACxD,CAAC;AAEM,MAAM,gCAAgC,EAAE,OAAO;AAAA,EACpD,WAAW,EAAE,OAAO,EAAE,KAAK;AAAA,EAC3B,aAAa,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC;AAAA,EAC7C,OAAO;AACT,CAAC;AAEM,MAAM,6BAA6B,EAAE,OAAO;AAAA,EACjD,aAAa,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC;AAAA,EAC7C,WAAW,EAAE,KAAK,EAAE,SAAS;AAC/B,CAAC;AAEM,MAAM,wBAAwB,EAAE,OAAO;AAAA,EAC5C,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EACvB,gBAAgB,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EAChC,iBAAiB,EAAE,OAAO,EAAE,SAAS;AAAA,EACrC,WAAW,EAAE,KAAK,EAAE,SAAS;AAC/B,CAAC;AAMM,MAAM,6BAA6B,EAAE,OAAO;AAAA,EACjD,mBAAmB,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EACnC,wBAAwB,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA,EACnD,oBAAoB,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA,EAC/C,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE;AAAA,EAC/B,gBAAgB,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EAChC,iBAAiB,EAAE,OAAO,EAAE,SAAS;AAAA,EACrC,QAAQ,EAAE,KAAK,CAAC,SAAS,SAAS,CAAC;AAAA,EACnC,WAAW,EAAE,KAAK,EAAE,SAAS;AAAA,EAC7B,KAAK,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,EAAE,SAAS;AAClD,CAAC;AAEM,MAAM,iCAAiC,EAAE,OAAO;AAAA,EACrD,mBAAmB,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EACnC,wBAAwB,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EACxC,kBAAkB,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EAClC,mBAAmB,EAAE,OAAO,EAAE,SAAS;AAAA,EACvC,iBAAiB,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS;AAAA,EAC3C,SAAS,EAAE,OAAO,EAAE,SAAS;AAAA,EAC7B,MAAM,EAAE,OAAO;AAAA,EACf,YAAY,EAAE,KAAK,CAAC,QAAQ,YAAY,MAAM,CAAC;AAAA,EAC/C,aAAa,EAAE,MAAM,0BAA0B,EAAE,SAAS;AAAA,EAC1D,WAAW,EAAE,KAAK;AAAA,EAClB,mBAAmB,EAAE,OAAO,EAAE,SAAS;AAAA,EACvC,gBAAgB,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC;AAAA,EAChD,oBAAoB,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EACpC,iBAAiB,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC;AAAA,EACjD,WAAW,EAAE,MAAM,qBAAqB,EAAE,SAAS;AACrD,CAAC;AAEM,MAAM,wBAAwB,EAAE,OAAO;AAAA,EAC5C,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE;AACjC,CAAC;",
   "names": []
 }