@open-mercato/core 0.6.8-develop.6998.1.d2bc46c56c → 0.6.8-develop.7001.1.03608ab252

package/dist/modules/inbox_ops/api/extract/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../src/modules/inbox_ops/api/extract/route.ts"],
-  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { InboxEmail } from '../../data/entities'\nimport { emitInboxOpsEvent } from '../../events'\nimport { resolveRequestContext, handleRouteError } from '../routeHelpers'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('inbox_ops').child({ component: 'extract' })\n\nexport const metadata = {\n  POST: { requireAuth: true, requireFeatures: ['inbox_ops.proposals.manage'] },\n}\n\nconst extractRequestSchema = z.object({\n  text: z.string().min(1, 'Text is required').max(100_000, 'Text exceeds maximum length'),\n  title: z.string().max(500).optional(),\n  metadata: z.record(z.string(), z.unknown()).optional(),\n})\n\nexport async function POST(req: Request) {\n  try {\n    const ctx = await resolveRequestContext(req)\n\n    let body: unknown\n    try {\n      body = await req.json()\n    } catch {\n      return NextResponse.json({ error: 'Invalid JSON body' }, { status: 400 })\n    }\n\n    const parsed = extractRequestSchema.safeParse(body)\n    if (!parsed.success) {\n      const errors = parsed.error.issues.map((i) => `${i.path.join('.')}: ${i.message}`).join('; ')\n      return NextResponse.json({ error: errors }, { status: 400 })\n    }\n\n    const { text, title, metadata: inputMetadata } = parsed.data\n\n    const maxTextSize = parseInt(process.env.INBOX_OPS_MAX_TEXT_SIZE || '204800', 10)\n    const truncatedText = text.slice(0, maxTextSize)\n\n    const submitterEmail = ctx.auth?.email || ctx.userId\n    const email = ctx.em.create(InboxEmail, {\n      forwardedByAddress: submitterEmail,\n      forwardedByName: null,\n      toAddress: 'text-extract',\n      subject: title || 'Text extraction',\n      cleanedText: truncatedText,\n      rawText: truncatedText,\n      receivedAt: new Date(),\n      status: 'received' as const,\n      isActive: true,\n      organizationId: ctx.organizationId,\n      tenantId: ctx.tenantId,\n      metadata: {\n        ...inputMetadata,\n        source: 'text_extract',\n        submittedByUserId: ctx.userId,\n      },\n    })\n\n    ctx.em.persist(email)\n    await ctx.em.flush()\n\n    try {\n      await emitInboxOpsEvent('inbox_ops.email.received', {\n        emailId: email.id,\n        tenantId: ctx.tenantId,\n        organizationId: ctx.organizationId,\n        forwardedByAddress: submitterEmail,\n        subject: title || 'Text extraction',\n      })\n    } catch (eventError) {\n      logger.error('Failed to emit email.received event', { err: eventError })\n    }\n\n    return NextResponse.json({ ok: true, emailId: email.id })\n  } catch (err) {\n    return handleRouteError(err, 'extract text')\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'InboxOps',\n  summary: 'Extract actions from raw text',\n  methods: {\n    POST: {\n      summary: 'Submit raw text for LLM extraction',\n      description: 'Creates an InboxEmail record from raw text and triggers the extraction pipeline. The extraction runs asynchronously.',\n      responses: [\n        { status: 200, description: 'Extraction queued successfully' },\n        { status: 400, description: 'Invalid request body' },\n        { status: 401, description: 'Unauthorized' },\n      ],\n    },\n  },\n}\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAElB,SAAS,kBAAkB;AAC3B,SAAS,yBAAyB;AAClC,SAAS,uBAAuB,wBAAwB;AACxD,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,WAAW,EAAE,MAAM,EAAE,WAAW,UAAU,CAAC;AAEhE,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,4BAA4B,EAAE;AAC7E;AAEA,MAAM,uBAAuB,EAAE,OAAO;AAAA,EACpC,MAAM,EAAE,OAAO,EAAE,IAAI,GAAG,kBAAkB,EAAE,IAAI,KAAS,6BAA6B;AAAA,EACtF,OAAO,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EACpC,UAAU,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,EAAE,SAAS;AACvD,CAAC;AAED,eAAsB,KAAK,KAAc;AACvC,MAAI;AACF,UAAM,MAAM,MAAM,sBAAsB,GAAG;AAE3C,QAAI;AACJ,QAAI;AACF,aAAO,MAAM,IAAI,KAAK;AAAA,IACxB,QAAQ;AACN,aAAO,aAAa,KAAK,EAAE,OAAO,oBAAoB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC1E;AAEA,UAAM,SAAS,qBAAqB,UAAU,IAAI;AAClD,QAAI,CAAC,OAAO,SAAS;AACnB,YAAM,SAAS,OAAO,MAAM,OAAO,IAAI,CAAC,MAAM,GAAG,EAAE,KAAK,KAAK,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,KAAK,IAAI;AAC5F,aAAO,aAAa,KAAK,EAAE,OAAO,OAAO,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC7D;AAEA,UAAM,EAAE,MAAM,OAAO,UAAU,cAAc,IAAI,OAAO;AAExD,UAAM,cAAc,SAAS,QAAQ,IAAI,2BAA2B,UAAU,EAAE;AAChF,UAAM,gBAAgB,KAAK,MAAM,GAAG,WAAW;AAE/C,UAAM,iBAAiB,IAAI,MAAM,SAAS,IAAI;AAC9C,UAAM,QAAQ,IAAI,GAAG,OAAO,YAAY;AAAA,MACtC,oBAAoB;AAAA,MACpB,iBAAiB;AAAA,MACjB,WAAW;AAAA,MACX,SAAS,SAAS;AAAA,MAClB,aAAa;AAAA,MACb,SAAS;AAAA,MACT,YAAY,oBAAI,KAAK;AAAA,MACrB,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,gBAAgB,IAAI;AAAA,MACpB,UAAU,IAAI;AAAA,MACd,UAAU;AAAA,QACR,GAAG;AAAA,QACH,QAAQ;AAAA,QACR,mBAAmB,IAAI;AAAA,MACzB;AAAA,IACF,CAAC;AAED,QAAI,GAAG,QAAQ,KAAK;AACpB,UAAM,IAAI,GAAG,MAAM;AAEnB,QAAI;AACF,YAAM,kBAAkB,4BAA4B;AAAA,QAClD,SAAS,MAAM;AAAA,QACf,UAAU,IAAI;AAAA,QACd,gBAAgB,IAAI;AAAA,QACpB,oBAAoB;AAAA,QACpB,SAAS,SAAS;AAAA,MACpB,CAAC;AAAA,IACH,SAAS,YAAY;AACnB,aAAO,MAAM,uCAAuC,EAAE,KAAK,WAAW,CAAC;AAAA,IACzE;AAEA,WAAO,aAAa,KAAK,EAAE,IAAI,MAAM,SAAS,MAAM,GAAG,CAAC;AAAA,EAC1D,SAAS,KAAK;AACZ,WAAO,iBAAiB,KAAK,cAAc;AAAA,EAC7C;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aAAa;AAAA,MACb,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,iCAAiC;AAAA,QAC7D,EAAE,QAAQ,KAAK,aAAa,uBAAuB;AAAA,QACnD,EAAE,QAAQ,KAAK,aAAa,eAAe;AAAA,MAC7C;AAAA,IACF;AAAA,EACF;AACF;",
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { InboxEmail } from '../../data/entities'\nimport { emitInboxOpsEvent } from '../../events'\nimport { resolveRequestContext, handleRouteError } from '../routeHelpers'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('inbox_ops').child({ component: 'extract' })\n\nexport const metadata = {\n  POST: { requireAuth: true, requireFeatures: ['inbox_ops.proposals.manage'] },\n}\n\nconst extractRequestSchema = z.object({\n  text: z.string().min(1, 'Text is required').max(100_000, 'Text exceeds maximum length'),\n  title: z.string().max(500).optional(),\n  metadata: z.record(z.string(), z.unknown()).optional(),\n})\n\nexport async function POST(req: Request) {\n  try {\n    const ctx = await resolveRequestContext(req)\n\n    let body: unknown\n    try {\n      body = await req.json()\n    } catch {\n      return NextResponse.json({ error: 'Invalid JSON body' }, { status: 400 })\n    }\n\n    const parsed = extractRequestSchema.safeParse(body)\n    if (!parsed.success) {\n      const errors = parsed.error.issues.map((i) => `${i.path.join('.')}: ${i.message}`).join('; ')\n      return NextResponse.json({ error: errors }, { status: 400 })\n    }\n\n    const { text, title, metadata: inputMetadata } = parsed.data\n\n    const maxTextSize = parseInt(process.env.INBOX_OPS_MAX_TEXT_SIZE || '204800', 10)\n    const truncatedText = text.slice(0, maxTextSize)\n\n    const submitterEmail = ctx.auth?.email || ctx.userId\n    const email = ctx.em.create(InboxEmail, {\n      forwardedByAddress: submitterEmail,\n      forwardedByName: null,\n      toAddress: 'text-extract',\n      subject: title || 'Text extraction',\n      cleanedText: truncatedText,\n      rawText: truncatedText,\n      receivedAt: new Date(),\n      status: 'received' as const,\n      isActive: true,\n      organizationId: ctx.organizationId,\n      tenantId: ctx.tenantId,\n      metadata: {\n        ...inputMetadata,\n        source: 'text_extract',\n        submittedByUserId: ctx.userId,\n      },\n    })\n\n    ctx.em.persist(email)\n    await ctx.em.flush()\n\n    try {\n      await emitInboxOpsEvent('inbox_ops.email.received', {\n        emailId: email.id,\n        tenantId: ctx.tenantId,\n        organizationId: ctx.organizationId,\n        forwardedByAddress: submitterEmail,\n        subject: title || 'Text extraction',\n      }, {\n        persistent: true,\n        tenantId: ctx.tenantId,\n        organizationId: ctx.organizationId,\n      })\n    } catch (eventError) {\n      logger.error('Failed to emit email.received event', { err: eventError })\n    }\n\n    return NextResponse.json({ ok: true, emailId: email.id })\n  } catch (err) {\n    return handleRouteError(err, 'extract text')\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'InboxOps',\n  summary: 'Extract actions from raw text',\n  methods: {\n    POST: {\n      summary: 'Submit raw text for LLM extraction',\n      description: 'Creates an InboxEmail record from raw text and triggers the extraction pipeline. The extraction runs asynchronously.',\n      responses: [\n        { status: 200, description: 'Extraction queued successfully' },\n        { status: 400, description: 'Invalid request body' },\n        { status: 401, description: 'Unauthorized' },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAElB,SAAS,kBAAkB;AAC3B,SAAS,yBAAyB;AAClC,SAAS,uBAAuB,wBAAwB;AACxD,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,WAAW,EAAE,MAAM,EAAE,WAAW,UAAU,CAAC;AAEhE,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,4BAA4B,EAAE;AAC7E;AAEA,MAAM,uBAAuB,EAAE,OAAO;AAAA,EACpC,MAAM,EAAE,OAAO,EAAE,IAAI,GAAG,kBAAkB,EAAE,IAAI,KAAS,6BAA6B;AAAA,EACtF,OAAO,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EACpC,UAAU,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,EAAE,SAAS;AACvD,CAAC;AAED,eAAsB,KAAK,KAAc;AACvC,MAAI;AACF,UAAM,MAAM,MAAM,sBAAsB,GAAG;AAE3C,QAAI;AACJ,QAAI;AACF,aAAO,MAAM,IAAI,KAAK;AAAA,IACxB,QAAQ;AACN,aAAO,aAAa,KAAK,EAAE,OAAO,oBAAoB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC1E;AAEA,UAAM,SAAS,qBAAqB,UAAU,IAAI;AAClD,QAAI,CAAC,OAAO,SAAS;AACnB,YAAM,SAAS,OAAO,MAAM,OAAO,IAAI,CAAC,MAAM,GAAG,EAAE,KAAK,KAAK,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,KAAK,IAAI;AAC5F,aAAO,aAAa,KAAK,EAAE,OAAO,OAAO,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC7D;AAEA,UAAM,EAAE,MAAM,OAAO,UAAU,cAAc,IAAI,OAAO;AAExD,UAAM,cAAc,SAAS,QAAQ,IAAI,2BAA2B,UAAU,EAAE;AAChF,UAAM,gBAAgB,KAAK,MAAM,GAAG,WAAW;AAE/C,UAAM,iBAAiB,IAAI,MAAM,SAAS,IAAI;AAC9C,UAAM,QAAQ,IAAI,GAAG,OAAO,YAAY;AAAA,MACtC,oBAAoB;AAAA,MACpB,iBAAiB;AAAA,MACjB,WAAW;AAAA,MACX,SAAS,SAAS;AAAA,MAClB,aAAa;AAAA,MACb,SAAS;AAAA,MACT,YAAY,oBAAI,KAAK;AAAA,MACrB,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,gBAAgB,IAAI;AAAA,MACpB,UAAU,IAAI;AAAA,MACd,UAAU;AAAA,QACR,GAAG;AAAA,QACH,QAAQ;AAAA,QACR,mBAAmB,IAAI;AAAA,MACzB;AAAA,IACF,CAAC;AAED,QAAI,GAAG,QAAQ,KAAK;AACpB,UAAM,IAAI,GAAG,MAAM;AAEnB,QAAI;AACF,YAAM,kBAAkB,4BAA4B;AAAA,QAClD,SAAS,MAAM;AAAA,QACf,UAAU,IAAI;AAAA,QACd,gBAAgB,IAAI;AAAA,QACpB,oBAAoB;AAAA,QACpB,SAAS,SAAS;AAAA,MACpB,GAAG;AAAA,QACD,YAAY;AAAA,QACZ,UAAU,IAAI;AAAA,QACd,gBAAgB,IAAI;AAAA,MACtB,CAAC;AAAA,IACH,SAAS,YAAY;AACnB,aAAO,MAAM,uCAAuC,EAAE,KAAK,WAAW,CAAC;AAAA,IACzE;AAEA,WAAO,aAAa,KAAK,EAAE,IAAI,MAAM,SAAS,MAAM,GAAG,CAAC;AAAA,EAC1D,SAAS,KAAK;AACZ,WAAO,iBAAiB,KAAK,cAAc;AAAA,EAC7C;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aAAa;AAAA,MACb,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,iCAAiC;AAAA,QAC7D,EAAE,QAAQ,KAAK,aAAa,uBAAuB;AAAA,QACnD,EAAE,QAAQ,KAAK,aAAa,eAAe;AAAA,MAC7C;AAAA,IACF;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/modules/inbox_ops/api/webhook/inbound.js

@@ -287,6 +287,10 @@ async function POST(req) {
       organizationId: settings.organizationId,
       forwardedByAddress: parsed.from.email,
       subject: parsed.subject
+    }, {
+      persistent: true,
+      tenantId: settings.tenantId,
+      organizationId: settings.organizationId
     });
   } catch (eventError) {
     logger.error("Failed to emit email.received event", { err: eventError });

package/dist/modules/inbox_ops/api/webhook/inbound.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../src/modules/inbox_ops/api/webhook/inbound.ts"],
-  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { createHmac, timingSafeEqual } from 'node:crypto'\nimport { z } from 'zod'\nimport { Webhook } from 'svix'\nimport { Resend } from 'resend'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport type { CacheStrategy } from '@open-mercato/cache'\nimport { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { InboxSettings, InboxEmail } from '../../data/entities'\nimport { parseInboundEmail } from '../../lib/emailParser'\nimport { checkRateLimit } from '../../lib/rateLimiter'\nimport { emitInboxOpsEvent } from '../../events'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\nimport {\n  readBoundedRequestBody,\n  resolveWebhookBodyLimitBytes,\n  WebhookBodyTooLargeError,\n} from '@open-mercato/shared/lib/webhooks'\n\nconst logger = createLogger('inbox_ops').child({ component: 'webhook' })\n\nexport const metadata = {\n  POST: { requireAuth: false },\n}\n\nconst MAX_PAYLOAD_SIZE = resolveWebhookBodyLimitBytes(\n  process.env.INBOX_OPS_WEBHOOK_MAX_BODY_BYTES ?? process.env.OM_WEBHOOK_MAX_BODY_BYTES,\n  2 * 1024 * 1024,\n)\nconst REPLAY_WINDOW_MS = 5 * 60 * 1000 // 5 minutes\n\nfunction isTimestampFresh(timestamp: string): boolean {\n  if (!timestamp) return false\n  const timestampMs = parseInt(timestamp, 10) * 1000\n  if (isNaN(timestampMs)) return false\n  return Math.abs(Date.now() - timestampMs) <= REPLAY_WINDOW_MS\n}\n\nfunction verifyHmacSignature(\n  payload: string,\n  signature: string,\n  timestamp: string,\n  secret: string,\n): boolean {\n  if (!signature || !timestamp || !secret) return false\n\n  if (!isTimestampFresh(timestamp)) return false\n\n  const expected = createHmac('sha256', secret)\n    .update(`${timestamp}.${payload}`)\n    .digest('hex')\n  const received = signature.startsWith('sha256=')\n    ? signature.slice('sha256='.length)\n    : signature\n\n  try {\n    if (received.length !== expected.length) return false\n    return timingSafeEqual(\n      Buffer.from(received, 'hex'),\n      Buffer.from(expected, 'hex'),\n    )\n  } catch {\n    return false\n  }\n}\n\n// True when the signature verifies against ANY of the candidate secrets. Used\n// to bind the inbound signature to the resolved tenant: once the target inbox\n// declares its own per-tenant secret, the global INBOX_OPS_WEBHOOK_SECRET is no\n// longer accepted for that inbox, so a holder of the global key alone cannot\n// forge mail into a tenant that opted into a dedicated secret.\nfunction verifyHmacAgainstAny(\n  payload: string,\n  signature: string,\n  timestamp: string,\n  secrets: string[],\n): boolean {\n  for (const secret of secrets) {\n    if (secret && verifyHmacSignature(payload, signature, timestamp, secret)) return true\n  }\n  return false\n}\n\n// Stable, non-reversible identifier for the pre-DB global rate-limit bucket.\n// Keying on the configured signing secret (rather than the attacker-set `to` or\n// the per-request signature) means the bucket is request-invariant for a given\n// secret, so rotating recipients or mutating the body cannot dilute the limit.\nfunction secretFingerprint(secret: string): string {\n  return createHmac('sha256', 'inbox_ops:rate_limit:salt').update(secret).digest('hex').slice(0, 32)\n}\n\nfunction verifySvixSignature(\n  rawBody: string,\n  headers: Record<string, string>,\n  secret: string,\n): boolean {\n  try {\n    const wh = new Webhook(secret)\n    wh.verify(rawBody, {\n      'svix-id': headers['svix-id'],\n      'svix-timestamp': headers['svix-timestamp'],\n      'svix-signature': headers['svix-signature'],\n    })\n    return true\n  } catch {\n    return false\n  }\n}\n\nasync function fetchResendEmail(emailId: string): Promise<{\n  from?: string\n  to?: string[]\n  subject?: string\n  text?: string\n  html?: string\n  messageId?: string\n  replyTo?: string\n  inReplyTo?: string\n  references?: string[]\n}> {\n  const apiKey = process.env.RESEND_API_KEY\n  if (!apiKey) throw new Error('RESEND_API_KEY is required to fetch Resend inbound emails')\n\n  const resend = new Resend(apiKey)\n  const { data, error } = await resend.emails.receiving.get(emailId)\n  if (error || !data) {\n    throw new Error(`Failed to fetch Resend email ${emailId}: ${error?.message || 'unknown error'}`)\n  }\n\n  return {\n    from: data.from,\n    to: data.to,\n    subject: data.subject,\n    text: data.text ?? undefined,\n    html: data.html ?? undefined,\n    messageId: data.message_id,\n    replyTo: data.reply_to?.[0] ?? undefined,\n    inReplyTo: data.headers?.['in-reply-to'] ?? undefined,\n    references: data.headers?.['references']?.split(/\\s+/).filter(Boolean),\n  }\n}\n\ntype VerifiedPayload =\n  | { kind: 'custom'; payload: Record<string, unknown>; signature: string; timestamp: string }\n  | { kind: 'resend'; emailFields: Awaited<ReturnType<typeof fetchResendEmail>>; to: string[] }\n\nasync function verifyAndParse(req: Request, rawBody: string): Promise<\n  | { ok: true; data: VerifiedPayload }\n  | { ok: false; response: NextResponse }\n> {\n  const customSig = req.headers.get('x-webhook-signature')\n  const svixId = req.headers.get('svix-id')\n\n  if (customSig) {\n    const webhookSecret = process.env.INBOX_OPS_WEBHOOK_SECRET\n    if (!webhookSecret) {\n      logger.error('INBOX_OPS_WEBHOOK_SECRET not configured')\n      return { ok: false, response: NextResponse.json({ error: 'Service unavailable' }, { status: 503 }) }\n    }\n    const timestamp = req.headers.get('x-webhook-timestamp') || ''\n    // Cheap, secret-independent gate first: reject replayed/stale requests\n    // before parsing. The HMAC itself is verified later, against the secret\n    // bound to the resolved inbox (see the POST handler), so a holder of the\n    // global secret cannot inject into a tenant that owns its own secret.\n    if (!isTimestampFresh(timestamp)) {\n      return { ok: false, response: NextResponse.json({ error: 'Invalid signature' }, { status: 400 }) }\n    }\n    let payload: Record<string, unknown>\n    try {\n      payload = JSON.parse(rawBody)\n    } catch {\n      return { ok: false, response: NextResponse.json({ error: 'Invalid JSON' }, { status: 400 }) }\n    }\n    return { ok: true, data: { kind: 'custom', payload, signature: customSig, timestamp } }\n  }\n\n  if (svixId) {\n    const signingSecret = process.env.RESEND_WEBHOOK_SIGNING_SECRET\n    if (!signingSecret) {\n      logger.error('RESEND_WEBHOOK_SIGNING_SECRET not configured')\n      return { ok: false, response: NextResponse.json({ error: 'Service unavailable' }, { status: 503 }) }\n    }\n    const headers: Record<string, string> = {\n      'svix-id': svixId,\n      'svix-timestamp': req.headers.get('svix-timestamp') || '',\n      'svix-signature': req.headers.get('svix-signature') || '',\n    }\n    if (!verifySvixSignature(rawBody, headers, signingSecret)) {\n      return { ok: false, response: NextResponse.json({ error: 'Invalid signature' }, { status: 400 }) }\n    }\n    let envelope: { type?: string; data?: { email_id?: string; from?: string; to?: string[] } }\n    try {\n      envelope = JSON.parse(rawBody)\n    } catch {\n      return { ok: false, response: NextResponse.json({ error: 'Invalid JSON' }, { status: 400 }) }\n    }\n    if (envelope.type !== 'email.received') {\n      return { ok: false, response: NextResponse.json({ ok: true }) }\n    }\n    const emailId = envelope.data?.email_id\n    if (!emailId) {\n      return { ok: false, response: NextResponse.json({ error: 'Missing email_id in Resend payload' }, { status: 400 }) }\n    }\n    const emailFields = await fetchResendEmail(emailId)\n    const to = emailFields.to || envelope.data?.to || []\n    return { ok: true, data: { kind: 'resend', emailFields, to } }\n  }\n\n  return { ok: false, response: NextResponse.json({ error: 'Missing signature headers' }, { status: 400 }) }\n}\n\nexport async function POST(req: Request) {\n  const hasCustomSecret = Boolean(process.env.INBOX_OPS_WEBHOOK_SECRET)\n  const hasResendSecret = Boolean(process.env.RESEND_WEBHOOK_SIGNING_SECRET)\n  if (!hasCustomSecret && !hasResendSecret) {\n    logger.error('Neither INBOX_OPS_WEBHOOK_SECRET nor RESEND_WEBHOOK_SIGNING_SECRET is configured')\n    return NextResponse.json({ error: 'Service unavailable' }, { status: 503 })\n  }\n\n  let rawBody: string\n  try {\n    rawBody = await readBoundedRequestBody(req, { maxBytes: MAX_PAYLOAD_SIZE })\n  } catch (error) {\n    if (error instanceof WebhookBodyTooLargeError) {\n      return NextResponse.json({ error: 'Payload too large' }, { status: 413 })\n    }\n    return NextResponse.json({ error: 'Bad request' }, { status: 400 })\n  }\n\n  const verified = await verifyAndParse(req, rawBody)\n  if (!verified.ok) {\n    return verified.response\n  }\n\n  let toAddress: string | null\n  let emailInput: Parameters<typeof parseInboundEmail>[0]\n\n  if (verified.data.kind === 'custom') {\n    const payload = verified.data.payload\n    toAddress = extractToAddress(payload)\n    emailInput = {\n      from: payload.from as string | undefined,\n      to: payload.to as string | string[] | undefined,\n      subject: payload.subject as string | undefined,\n      text: payload.text as string | undefined,\n      html: payload.html as string | undefined,\n      messageId: payload.messageId as string | undefined,\n      replyTo: payload.replyTo as string | undefined,\n      inReplyTo: payload.inReplyTo as string | undefined,\n      references: payload.references as string | string[] | undefined,\n    }\n  } else {\n    const { emailFields, to } = verified.data\n    toAddress = to.length > 0 ? to[0].toLowerCase() : null\n    emailInput = {\n      from: emailFields.from,\n      to: emailFields.to,\n      subject: emailFields.subject,\n      text: emailFields.text,\n      html: emailFields.html,\n      messageId: emailFields.messageId,\n      replyTo: emailFields.replyTo,\n      inReplyTo: emailFields.inReplyTo,\n      references: emailFields.references,\n    }\n  }\n\n  if (!toAddress) {\n    return NextResponse.json({ error: 'Missing recipient address' }, { status: 400 })\n  }\n\n  const container = await createRequestContainer()\n\n  let cache: CacheStrategy | null = null\n  try {\n    cache = container.resolve('cache') as CacheStrategy\n  } catch {\n    // Cache not available \u2014 the limiter now fails closed with a process-local\n    // bucket instead of waving the request through.\n  }\n\n  // Pre-DB global bucket keyed on the configured signing secret (custom) or the\n  // static Resend path, NOT on the attacker-controllable `to` and NOT on the\n  // per-request signature (which mutates with timestamp/body, so it would mint a\n  // fresh bucket every request and never throttle). The per-tenant secret lives\n  // behind the encrypted-column lookup, so the only secret available here without\n  // a DB hit is the global one \u2014 keying on it caps total inbound volume for the\n  // custom path and runs BEFORE the lookup so a flood cannot amplify DB work.\n  const globalBucketKey = verified.data.kind === 'custom'\n    ? `webhook:secret:${secretFingerprint(process.env.INBOX_OPS_WEBHOOK_SECRET || '')}`\n    : 'webhook:resend'\n  const globalRateCheck = await checkRateLimit(cache, globalBucketKey)\n  if (!globalRateCheck.allowed) {\n    return rateLimitedResponse(globalRateCheck.retryAfterSeconds)\n  }\n\n  const em = (container.resolve('em') as EntityManager).fork()\n\n  // No explicit scope: decryptEntitiesWithFallbackScope reads tenant/org off the\n  // resolved row, which is exactly what binds webhook_secret to its own tenant.\n  const settings = await findOneWithDecryption(\n    em,\n    InboxSettings,\n    {\n      inboxAddress: toAddress.toLowerCase(),\n      isActive: true,\n      deletedAt: null,\n    },\n  )\n\n  // Final HMAC verification for the custom provider path: bind the signature to\n  // the resolved tenant. When the inbox declares its own secret, ONLY that\n  // secret is accepted; otherwise the global secret is accepted (back-compat).\n  // For an unknown `to` we still require the global secret so the endpoint never\n  // behaves as an unauthenticated probe oracle.\n  if (verified.data.kind === 'custom') {\n    const globalSecret = process.env.INBOX_OPS_WEBHOOK_SECRET || ''\n    const inboxSecret = settings?.webhookSecret || ''\n    const acceptableSecrets = inboxSecret ? [inboxSecret] : [globalSecret]\n    const signatureValid = verifyHmacAgainstAny(\n      rawBody,\n      verified.data.signature,\n      verified.data.timestamp,\n      acceptableSecrets,\n    )\n    if (!signatureValid) {\n      return NextResponse.json({ error: 'Invalid signature' }, { status: 400 })\n    }\n  }\n\n  if (!settings) {\n    return NextResponse.json({ ok: true })\n  }\n\n  // Per-tenant bucket keyed on the RESOLVED tenant (not the raw `to`), so it\n  // cannot be diluted by alias addresses that map to the same inbox.\n  const tenantRateCheck = await checkRateLimit(\n    cache,\n    `webhook:tenant:${settings.tenantId}`,\n    settings.tenantId,\n  )\n  if (!tenantRateCheck.allowed) {\n    return rateLimitedResponse(tenantRateCheck.retryAfterSeconds)\n  }\n\n  const parsed = parseInboundEmail(emailInput)\n\n  const isDuplicate = await checkDuplicate(em, settings, parsed.messageId, parsed.contentHash)\n  if (isDuplicate) {\n    try {\n      await emitInboxOpsEvent('inbox_ops.email.deduplicated', {\n        tenantId: settings.tenantId,\n        organizationId: settings.organizationId,\n        toAddress,\n      })\n    } catch (eventError) {\n      logger.error('Failed to emit deduplicated event', { err: eventError })\n    }\n    return NextResponse.json({ ok: true })\n  }\n\n  const maxTextSize = parseInt(process.env.INBOX_OPS_MAX_TEXT_SIZE || '204800', 10)\n  const cleanedText = parsed.cleanedText.slice(0, maxTextSize)\n\n  const email = em.create(InboxEmail, {\n    messageId: parsed.messageId,\n    contentHash: parsed.contentHash,\n    forwardedByAddress: parsed.from.email,\n    forwardedByName: parsed.from.name || null,\n    toAddress,\n    subject: parsed.subject,\n    replyTo: parsed.replyTo,\n    inReplyTo: parsed.inReplyTo,\n    emailReferences: parsed.references,\n    rawText: parsed.rawText,\n    rawHtml: parsed.rawHtml,\n    cleanedText,\n    threadMessages: parsed.threadMessages,\n    detectedLanguage: parsed.detectedLanguage,\n    receivedAt: new Date(),\n    status: 'received' as const,\n    isActive: true,\n    organizationId: settings.organizationId,\n    tenantId: settings.tenantId,\n  })\n\n  em.persist(email)\n  await em.flush()\n\n  try {\n    await emitInboxOpsEvent('inbox_ops.email.received', {\n      emailId: email.id,\n      tenantId: settings.tenantId,\n      organizationId: settings.organizationId,\n      forwardedByAddress: parsed.from.email,\n      subject: parsed.subject,\n    })\n  } catch (eventError) {\n    logger.error('Failed to emit email.received event', { err: eventError })\n  }\n\n  return NextResponse.json({ ok: true })\n}\n\nfunction rateLimitedResponse(retryAfterSeconds?: number): NextResponse {\n  return NextResponse.json(\n    { error: 'Rate limit exceeded' },\n    {\n      status: 429,\n      headers: retryAfterSeconds ? { 'Retry-After': String(retryAfterSeconds) } : undefined,\n    },\n  )\n}\n\nfunction extractToAddress(payload: Record<string, unknown>): string | null {\n  const to = payload.to\n  if (typeof to === 'string') {\n    const match = to.match(/<([^>]+)>/)\n    return match ? match[1].toLowerCase() : to.trim().toLowerCase()\n  }\n  if (Array.isArray(to) && to.length > 0) {\n    const first = to[0]\n    if (typeof first === 'string') {\n      const match = first.match(/<([^>]+)>/)\n      return match ? match[1].toLowerCase() : first.trim().toLowerCase()\n    }\n  }\n  return null\n}\n\nasync function checkDuplicate(\n  em: EntityManager,\n  settings: InboxSettings,\n  messageId: string | null | undefined,\n  contentHash: string | null | undefined,\n): Promise<boolean> {\n  const encScope = {\n    tenantId: settings.tenantId,\n    organizationId: settings.organizationId,\n  }\n  const whereBase = {\n    organizationId: settings.organizationId,\n    tenantId: settings.tenantId,\n    deletedAt: null,\n  }\n\n  if (messageId) {\n    const byMessageId = await findOneWithDecryption(em, InboxEmail, { ...whereBase, messageId }, undefined, encScope)\n    if (byMessageId) return true\n  }\n\n  if (contentHash) {\n    const byHash = await findOneWithDecryption(em, InboxEmail, { ...whereBase, contentHash }, undefined, encScope)\n    if (byHash) return true\n  }\n\n  return false\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'InboxOps',\n  summary: 'Inbound email webhook',\n  methods: {\n    POST: {\n      summary: 'Receive forwarded email from provider webhook',\n      description: 'Public endpoint \u2014 validated by provider HMAC signature or Resend/Svix signature. Rate limited per tenant.',\n      requestBody: {\n        contentType: 'application/json',\n        schema: z.object({\n          from: z.string().optional(),\n          to: z.union([z.string(), z.array(z.string())]).optional(),\n          subject: z.string().optional(),\n          text: z.string().optional(),\n          html: z.string().optional(),\n          messageId: z.string().optional(),\n          replyTo: z.string().optional(),\n          inReplyTo: z.string().optional(),\n          references: z.union([z.string(), z.array(z.string())]).optional(),\n        }),\n      },\n      responses: [\n        { status: 200, description: 'Email received and queued for processing' },\n        { status: 400, description: 'Invalid payload or signature' },\n        { status: 413, description: 'Payload too large' },\n        { status: 429, description: 'Rate limit exceeded' },\n        { status: 503, description: 'Webhook secret not configured' },\n      ],\n    },\n  },\n}\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,YAAY,uBAAuB;AAC5C,SAAS,SAAS;AAClB,SAAS,eAAe;AACxB,SAAS,cAAc;AACvB,SAAS,8BAA8B;AAIvC,SAAS,6BAA6B;AACtC,SAAS,eAAe,kBAAkB;AAC1C,SAAS,yBAAyB;AAClC,SAAS,sBAAsB;AAC/B,SAAS,yBAAyB;AAClC,SAAS,oBAAoB;AAC7B;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEP,MAAM,SAAS,aAAa,WAAW,EAAE,MAAM,EAAE,WAAW,UAAU,CAAC;AAEhE,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,MAAM;AAC7B;AAEA,MAAM,mBAAmB;AAAA,EACvB,QAAQ,IAAI,oCAAoC,QAAQ,IAAI;AAAA,EAC5D,IAAI,OAAO;AACb;AACA,MAAM,mBAAmB,IAAI,KAAK;AAElC,SAAS,iBAAiB,WAA4B;AACpD,MAAI,CAAC,UAAW,QAAO;AACvB,QAAM,cAAc,SAAS,WAAW,EAAE,IAAI;AAC9C,MAAI,MAAM,WAAW,EAAG,QAAO;AAC/B,SAAO,KAAK,IAAI,KAAK,IAAI,IAAI,WAAW,KAAK;AAC/C;AAEA,SAAS,oBACP,SACA,WACA,WACA,QACS;AACT,MAAI,CAAC,aAAa,CAAC,aAAa,CAAC,OAAQ,QAAO;AAEhD,MAAI,CAAC,iBAAiB,SAAS,EAAG,QAAO;AAEzC,QAAM,WAAW,WAAW,UAAU,MAAM,EACzC,OAAO,GAAG,SAAS,IAAI,OAAO,EAAE,EAChC,OAAO,KAAK;AACf,QAAM,WAAW,UAAU,WAAW,SAAS,IAC3C,UAAU,MAAM,UAAU,MAAM,IAChC;AAEJ,MAAI;AACF,QAAI,SAAS,WAAW,SAAS,OAAQ,QAAO;AAChD,WAAO;AAAA,MACL,OAAO,KAAK,UAAU,KAAK;AAAA,MAC3B,OAAO,KAAK,UAAU,KAAK;AAAA,IAC7B;AAAA,EACF,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAOA,SAAS,qBACP,SACA,WACA,WACA,SACS;AACT,aAAW,UAAU,SAAS;AAC5B,QAAI,UAAU,oBAAoB,SAAS,WAAW,WAAW,MAAM,EAAG,QAAO;AAAA,EACnF;AACA,SAAO;AACT;AAMA,SAAS,kBAAkB,QAAwB;AACjD,SAAO,WAAW,UAAU,2BAA2B,EAAE,OAAO,MAAM,EAAE,OAAO,KAAK,EAAE,MAAM,GAAG,EAAE;AACnG;AAEA,SAAS,oBACP,SACA,SACA,QACS;AACT,MAAI;AACF,UAAM,KAAK,IAAI,QAAQ,MAAM;AAC7B,OAAG,OAAO,SAAS;AAAA,MACjB,WAAW,QAAQ,SAAS;AAAA,MAC5B,kBAAkB,QAAQ,gBAAgB;AAAA,MAC1C,kBAAkB,QAAQ,gBAAgB;AAAA,IAC5C,CAAC;AACD,WAAO;AAAA,EACT,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,eAAe,iBAAiB,SAU7B;AACD,QAAM,SAAS,QAAQ,IAAI;AAC3B,MAAI,CAAC,OAAQ,OAAM,IAAI,MAAM,2DAA2D;AAExF,QAAM,SAAS,IAAI,OAAO,MAAM;AAChC,QAAM,EAAE,MAAM,MAAM,IAAI,MAAM,OAAO,OAAO,UAAU,IAAI,OAAO;AACjE,MAAI,SAAS,CAAC,MAAM;AAClB,UAAM,IAAI,MAAM,gCAAgC,OAAO,KAAK,OAAO,WAAW,eAAe,EAAE;AAAA,EACjG;AAEA,SAAO;AAAA,IACL,MAAM,KAAK;AAAA,IACX,IAAI,KAAK;AAAA,IACT,SAAS,KAAK;AAAA,IACd,MAAM,KAAK,QAAQ;AAAA,IACnB,MAAM,KAAK,QAAQ;AAAA,IACnB,WAAW,KAAK;AAAA,IAChB,SAAS,KAAK,WAAW,CAAC,KAAK;AAAA,IAC/B,WAAW,KAAK,UAAU,aAAa,KAAK;AAAA,IAC5C,YAAY,KAAK,UAAU,YAAY,GAAG,MAAM,KAAK,EAAE,OAAO,OAAO;AAAA,EACvE;AACF;AAMA,eAAe,eAAe,KAAc,SAG1C;AACA,QAAM,YAAY,IAAI,QAAQ,IAAI,qBAAqB;AACvD,QAAM,SAAS,IAAI,QAAQ,IAAI,SAAS;AAExC,MAAI,WAAW;AACb,UAAM,gBAAgB,QAAQ,IAAI;AAClC,QAAI,CAAC,eAAe;AAClB,aAAO,MAAM,yCAAyC;AACtD,aAAO,EAAE,IAAI,OAAO,UAAU,aAAa,KAAK,EAAE,OAAO,sBAAsB,GAAG,EAAE,QAAQ,IAAI,CAAC,EAAE;AAAA,IACrG;AACA,UAAM,YAAY,IAAI,QAAQ,IAAI,qBAAqB,KAAK;AAK5D,QAAI,CAAC,iBAAiB,SAAS,GAAG;AAChC,aAAO,EAAE,IAAI,OAAO,UAAU,aAAa,KAAK,EAAE,OAAO,oBAAoB,GAAG,EAAE,QAAQ,IAAI,CAAC,EAAE;AAAA,IACnG;AACA,QAAI;AACJ,QAAI;AACF,gBAAU,KAAK,MAAM,OAAO;AAAA,IAC9B,QAAQ;AACN,aAAO,EAAE,IAAI,OAAO,UAAU,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC,EAAE;AAAA,IAC9F;AACA,WAAO,EAAE,IAAI,MAAM,MAAM,EAAE,MAAM,UAAU,SAAS,WAAW,WAAW,UAAU,EAAE;AAAA,EACxF;AAEA,MAAI,QAAQ;AACV,UAAM,gBAAgB,QAAQ,IAAI;AAClC,QAAI,CAAC,eAAe;AAClB,aAAO,MAAM,8CAA8C;AAC3D,aAAO,EAAE,IAAI,OAAO,UAAU,aAAa,KAAK,EAAE,OAAO,sBAAsB,GAAG,EAAE,QAAQ,IAAI,CAAC,EAAE;AAAA,IACrG;AACA,UAAM,UAAkC;AAAA,MACtC,WAAW;AAAA,MACX,kBAAkB,IAAI,QAAQ,IAAI,gBAAgB,KAAK;AAAA,MACvD,kBAAkB,IAAI,QAAQ,IAAI,gBAAgB,KAAK;AAAA,IACzD;AACA,QAAI,CAAC,oBAAoB,SAAS,SAAS,aAAa,GAAG;AACzD,aAAO,EAAE,IAAI,OAAO,UAAU,aAAa,KAAK,EAAE,OAAO,oBAAoB,GAAG,EAAE,QAAQ,IAAI,CAAC,EAAE;AAAA,IACnG;AACA,QAAI;AACJ,QAAI;AACF,iBAAW,KAAK,MAAM,OAAO;AAAA,IAC/B,QAAQ;AACN,aAAO,EAAE,IAAI,OAAO,UAAU,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC,EAAE;AAAA,IAC9F;AACA,QAAI,SAAS,SAAS,kBAAkB;AACtC,aAAO,EAAE,IAAI,OAAO,UAAU,aAAa,KAAK,EAAE,IAAI,KAAK,CAAC,EAAE;AAAA,IAChE;AACA,UAAM,UAAU,SAAS,MAAM;AAC/B,QAAI,CAAC,SAAS;AACZ,aAAO,EAAE,IAAI,OAAO,UAAU,aAAa,KAAK,EAAE,OAAO,qCAAqC,GAAG,EAAE,QAAQ,IAAI,CAAC,EAAE;AAAA,IACpH;AACA,UAAM,cAAc,MAAM,iBAAiB,OAAO;AAClD,UAAM,KAAK,YAAY,MAAM,SAAS,MAAM,MAAM,CAAC;AACnD,WAAO,EAAE,IAAI,MAAM,MAAM,EAAE,MAAM,UAAU,aAAa,GAAG,EAAE;AAAA,EAC/D;AAEA,SAAO,EAAE,IAAI,OAAO,UAAU,aAAa,KAAK,EAAE,OAAO,4BAA4B,GAAG,EAAE,QAAQ,IAAI,CAAC,EAAE;AAC3G;AAEA,eAAsB,KAAK,KAAc;AACvC,QAAM,kBAAkB,QAAQ,QAAQ,IAAI,wBAAwB;AACpE,QAAM,kBAAkB,QAAQ,QAAQ,IAAI,6BAA6B;AACzE,MAAI,CAAC,mBAAmB,CAAC,iBAAiB;AACxC,WAAO,MAAM,kFAAkF;AAC/F,WAAO,aAAa,KAAK,EAAE,OAAO,sBAAsB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC5E;AAEA,MAAI;AACJ,MAAI;AACF,cAAU,MAAM,uBAAuB,KAAK,EAAE,UAAU,iBAAiB,CAAC;AAAA,EAC5E,SAAS,OAAO;AACd,QAAI,iBAAiB,0BAA0B;AAC7C,aAAO,aAAa,KAAK,EAAE,OAAO,oBAAoB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC1E;AACA,WAAO,aAAa,KAAK,EAAE,OAAO,cAAc,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACpE;AAEA,QAAM,WAAW,MAAM,eAAe,KAAK,OAAO;AAClD,MAAI,CAAC,SAAS,IAAI;AAChB,WAAO,SAAS;AAAA,EAClB;AAEA,MAAI;AACJ,MAAI;AAEJ,MAAI,SAAS,KAAK,SAAS,UAAU;AACnC,UAAM,UAAU,SAAS,KAAK;AAC9B,gBAAY,iBAAiB,OAAO;AACpC,iBAAa;AAAA,MACX,MAAM,QAAQ;AAAA,MACd,IAAI,QAAQ;AAAA,MACZ,SAAS,QAAQ;AAAA,MACjB,MAAM,QAAQ;AAAA,MACd,MAAM,QAAQ;AAAA,MACd,WAAW,QAAQ;AAAA,MACnB,SAAS,QAAQ;AAAA,MACjB,WAAW,QAAQ;AAAA,MACnB,YAAY,QAAQ;AAAA,IACtB;AAAA,EACF,OAAO;AACL,UAAM,EAAE,aAAa,GAAG,IAAI,SAAS;AACrC,gBAAY,GAAG,SAAS,IAAI,GAAG,CAAC,EAAE,YAAY,IAAI;AAClD,iBAAa;AAAA,MACX,MAAM,YAAY;AAAA,MAClB,IAAI,YAAY;AAAA,MAChB,SAAS,YAAY;AAAA,MACrB,MAAM,YAAY;AAAA,MAClB,MAAM,YAAY;AAAA,MAClB,WAAW,YAAY;AAAA,MACvB,SAAS,YAAY;AAAA,MACrB,WAAW,YAAY;AAAA,MACvB,YAAY,YAAY;AAAA,IAC1B;AAAA,EACF;AAEA,MAAI,CAAC,WAAW;AACd,WAAO,aAAa,KAAK,EAAE,OAAO,4BAA4B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAClF;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAE/C,MAAI,QAA8B;AAClC,MAAI;AACF,YAAQ,UAAU,QAAQ,OAAO;AAAA,EACnC,QAAQ;AAAA,EAGR;AASA,QAAM,kBAAkB,SAAS,KAAK,SAAS,WAC3C,kBAAkB,kBAAkB,QAAQ,IAAI,4BAA4B,EAAE,CAAC,KAC/E;AACJ,QAAM,kBAAkB,MAAM,eAAe,OAAO,eAAe;AACnE,MAAI,CAAC,gBAAgB,SAAS;AAC5B,WAAO,oBAAoB,gBAAgB,iBAAiB;AAAA,EAC9D;AAEA,QAAM,KAAM,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAI3D,QAAM,WAAW,MAAM;AAAA,IACrB;AAAA,IACA;AAAA,IACA;AAAA,MACE,cAAc,UAAU,YAAY;AAAA,MACpC,UAAU;AAAA,MACV,WAAW;AAAA,IACb;AAAA,EACF;AAOA,MAAI,SAAS,KAAK,SAAS,UAAU;AACnC,UAAM,eAAe,QAAQ,IAAI,4BAA4B;AAC7D,UAAM,cAAc,UAAU,iBAAiB;AAC/C,UAAM,oBAAoB,cAAc,CAAC,WAAW,IAAI,CAAC,YAAY;AACrE,UAAM,iBAAiB;AAAA,MACrB;AAAA,MACA,SAAS,KAAK;AAAA,MACd,SAAS,KAAK;AAAA,MACd;AAAA,IACF;AACA,QAAI,CAAC,gBAAgB;AACnB,aAAO,aAAa,KAAK,EAAE,OAAO,oBAAoB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC1E;AAAA,EACF;AAEA,MAAI,CAAC,UAAU;AACb,WAAO,aAAa,KAAK,EAAE,IAAI,KAAK,CAAC;AAAA,EACvC;AAIA,QAAM,kBAAkB,MAAM;AAAA,IAC5B;AAAA,IACA,kBAAkB,SAAS,QAAQ;AAAA,IACnC,SAAS;AAAA,EACX;AACA,MAAI,CAAC,gBAAgB,SAAS;AAC5B,WAAO,oBAAoB,gBAAgB,iBAAiB;AAAA,EAC9D;AAEA,QAAM,SAAS,kBAAkB,UAAU;AAE3C,QAAM,cAAc,MAAM,eAAe,IAAI,UAAU,OAAO,WAAW,OAAO,WAAW;AAC3F,MAAI,aAAa;AACf,QAAI;AACF,YAAM,kBAAkB,gCAAgC;AAAA,QACtD,UAAU,SAAS;AAAA,QACnB,gBAAgB,SAAS;AAAA,QACzB;AAAA,MACF,CAAC;AAAA,IACH,SAAS,YAAY;AACnB,aAAO,MAAM,qCAAqC,EAAE,KAAK,WAAW,CAAC;AAAA,IACvE;AACA,WAAO,aAAa,KAAK,EAAE,IAAI,KAAK,CAAC;AAAA,EACvC;AAEA,QAAM,cAAc,SAAS,QAAQ,IAAI,2BAA2B,UAAU,EAAE;AAChF,QAAM,cAAc,OAAO,YAAY,MAAM,GAAG,WAAW;AAE3D,QAAM,QAAQ,GAAG,OAAO,YAAY;AAAA,IAClC,WAAW,OAAO;AAAA,IAClB,aAAa,OAAO;AAAA,IACpB,oBAAoB,OAAO,KAAK;AAAA,IAChC,iBAAiB,OAAO,KAAK,QAAQ;AAAA,IACrC;AAAA,IACA,SAAS,OAAO;AAAA,IAChB,SAAS,OAAO;AAAA,IAChB,WAAW,OAAO;AAAA,IAClB,iBAAiB,OAAO;AAAA,IACxB,SAAS,OAAO;AAAA,IAChB,SAAS,OAAO;AAAA,IAChB;AAAA,IACA,gBAAgB,OAAO;AAAA,IACvB,kBAAkB,OAAO;AAAA,IACzB,YAAY,oBAAI,KAAK;AAAA,IACrB,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,gBAAgB,SAAS;AAAA,IACzB,UAAU,SAAS;AAAA,EACrB,CAAC;AAED,KAAG,QAAQ,KAAK;AAChB,QAAM,GAAG,MAAM;AAEf,MAAI;AACF,UAAM,kBAAkB,4BAA4B;AAAA,MAClD,SAAS,MAAM;AAAA,MACf,UAAU,SAAS;AAAA,MACnB,gBAAgB,SAAS;AAAA,MACzB,oBAAoB,OAAO,KAAK;AAAA,MAChC,SAAS,OAAO;AAAA,IAClB,CAAC;AAAA,EACH,SAAS,YAAY;AACnB,WAAO,MAAM,uCAAuC,EAAE,KAAK,WAAW,CAAC;AAAA,EACzE;AAEA,SAAO,aAAa,KAAK,EAAE,IAAI,KAAK,CAAC;AACvC;AAEA,SAAS,oBAAoB,mBAA0C;AACrE,SAAO,aAAa;AAAA,IAClB,EAAE,OAAO,sBAAsB;AAAA,IAC/B;AAAA,MACE,QAAQ;AAAA,MACR,SAAS,oBAAoB,EAAE,eAAe,OAAO,iBAAiB,EAAE,IAAI;AAAA,IAC9E;AAAA,EACF;AACF;AAEA,SAAS,iBAAiB,SAAiD;AACzE,QAAM,KAAK,QAAQ;AACnB,MAAI,OAAO,OAAO,UAAU;AAC1B,UAAM,QAAQ,GAAG,MAAM,WAAW;AAClC,WAAO,QAAQ,MAAM,CAAC,EAAE,YAAY,IAAI,GAAG,KAAK,EAAE,YAAY;AAAA,EAChE;AACA,MAAI,MAAM,QAAQ,EAAE,KAAK,GAAG,SAAS,GAAG;AACtC,UAAM,QAAQ,GAAG,CAAC;AAClB,QAAI,OAAO,UAAU,UAAU;AAC7B,YAAM,QAAQ,MAAM,MAAM,WAAW;AACrC,aAAO,QAAQ,MAAM,CAAC,EAAE,YAAY,IAAI,MAAM,KAAK,EAAE,YAAY;AAAA,IACnE;AAAA,EACF;AACA,SAAO;AACT;AAEA,eAAe,eACb,IACA,UACA,WACA,aACkB;AAClB,QAAM,WAAW;AAAA,IACf,UAAU,SAAS;AAAA,IACnB,gBAAgB,SAAS;AAAA,EAC3B;AACA,QAAM,YAAY;AAAA,IAChB,gBAAgB,SAAS;AAAA,IACzB,UAAU,SAAS;AAAA,IACnB,WAAW;AAAA,EACb;AAEA,MAAI,WAAW;AACb,UAAM,cAAc,MAAM,sBAAsB,IAAI,YAAY,EAAE,GAAG,WAAW,UAAU,GAAG,QAAW,QAAQ;AAChH,QAAI,YAAa,QAAO;AAAA,EAC1B;AAEA,MAAI,aAAa;AACf,UAAM,SAAS,MAAM,sBAAsB,IAAI,YAAY,EAAE,GAAG,WAAW,YAAY,GAAG,QAAW,QAAQ;AAC7G,QAAI,OAAQ,QAAO;AAAA,EACrB;AAEA,SAAO;AACT;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aAAa;AAAA,MACb,aAAa;AAAA,QACX,aAAa;AAAA,QACb,QAAQ,EAAE,OAAO;AAAA,UACf,MAAM,EAAE,OAAO,EAAE,SAAS;AAAA,UAC1B,IAAI,EAAE,MAAM,CAAC,EAAE,OAAO,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,SAAS;AAAA,UACxD,SAAS,EAAE,OAAO,EAAE,SAAS;AAAA,UAC7B,MAAM,EAAE,OAAO,EAAE,SAAS;AAAA,UAC1B,MAAM,EAAE,OAAO,EAAE,SAAS;AAAA,UAC1B,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,UAC/B,SAAS,EAAE,OAAO,EAAE,SAAS;AAAA,UAC7B,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,UAC/B,YAAY,EAAE,MAAM,CAAC,EAAE,OAAO,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,SAAS;AAAA,QAClE,CAAC;AAAA,MACH;AAAA,MACA,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,2CAA2C;AAAA,QACvE,EAAE,QAAQ,KAAK,aAAa,+BAA+B;AAAA,QAC3D,EAAE,QAAQ,KAAK,aAAa,oBAAoB;AAAA,QAChD,EAAE,QAAQ,KAAK,aAAa,sBAAsB;AAAA,QAClD,EAAE,QAAQ,KAAK,aAAa,gCAAgC;AAAA,MAC9D;AAAA,IACF;AAAA,EACF;AACF;",
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { createHmac, timingSafeEqual } from 'node:crypto'\nimport { z } from 'zod'\nimport { Webhook } from 'svix'\nimport { Resend } from 'resend'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport type { CacheStrategy } from '@open-mercato/cache'\nimport { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { InboxSettings, InboxEmail } from '../../data/entities'\nimport { parseInboundEmail } from '../../lib/emailParser'\nimport { checkRateLimit } from '../../lib/rateLimiter'\nimport { emitInboxOpsEvent } from '../../events'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\nimport {\n  readBoundedRequestBody,\n  resolveWebhookBodyLimitBytes,\n  WebhookBodyTooLargeError,\n} from '@open-mercato/shared/lib/webhooks'\n\nconst logger = createLogger('inbox_ops').child({ component: 'webhook' })\n\nexport const metadata = {\n  POST: { requireAuth: false },\n}\n\nconst MAX_PAYLOAD_SIZE = resolveWebhookBodyLimitBytes(\n  process.env.INBOX_OPS_WEBHOOK_MAX_BODY_BYTES ?? process.env.OM_WEBHOOK_MAX_BODY_BYTES,\n  2 * 1024 * 1024,\n)\nconst REPLAY_WINDOW_MS = 5 * 60 * 1000 // 5 minutes\n\nfunction isTimestampFresh(timestamp: string): boolean {\n  if (!timestamp) return false\n  const timestampMs = parseInt(timestamp, 10) * 1000\n  if (isNaN(timestampMs)) return false\n  return Math.abs(Date.now() - timestampMs) <= REPLAY_WINDOW_MS\n}\n\nfunction verifyHmacSignature(\n  payload: string,\n  signature: string,\n  timestamp: string,\n  secret: string,\n): boolean {\n  if (!signature || !timestamp || !secret) return false\n\n  if (!isTimestampFresh(timestamp)) return false\n\n  const expected = createHmac('sha256', secret)\n    .update(`${timestamp}.${payload}`)\n    .digest('hex')\n  const received = signature.startsWith('sha256=')\n    ? signature.slice('sha256='.length)\n    : signature\n\n  try {\n    if (received.length !== expected.length) return false\n    return timingSafeEqual(\n      Buffer.from(received, 'hex'),\n      Buffer.from(expected, 'hex'),\n    )\n  } catch {\n    return false\n  }\n}\n\n// True when the signature verifies against ANY of the candidate secrets. Used\n// to bind the inbound signature to the resolved tenant: once the target inbox\n// declares its own per-tenant secret, the global INBOX_OPS_WEBHOOK_SECRET is no\n// longer accepted for that inbox, so a holder of the global key alone cannot\n// forge mail into a tenant that opted into a dedicated secret.\nfunction verifyHmacAgainstAny(\n  payload: string,\n  signature: string,\n  timestamp: string,\n  secrets: string[],\n): boolean {\n  for (const secret of secrets) {\n    if (secret && verifyHmacSignature(payload, signature, timestamp, secret)) return true\n  }\n  return false\n}\n\n// Stable, non-reversible identifier for the pre-DB global rate-limit bucket.\n// Keying on the configured signing secret (rather than the attacker-set `to` or\n// the per-request signature) means the bucket is request-invariant for a given\n// secret, so rotating recipients or mutating the body cannot dilute the limit.\nfunction secretFingerprint(secret: string): string {\n  return createHmac('sha256', 'inbox_ops:rate_limit:salt').update(secret).digest('hex').slice(0, 32)\n}\n\nfunction verifySvixSignature(\n  rawBody: string,\n  headers: Record<string, string>,\n  secret: string,\n): boolean {\n  try {\n    const wh = new Webhook(secret)\n    wh.verify(rawBody, {\n      'svix-id': headers['svix-id'],\n      'svix-timestamp': headers['svix-timestamp'],\n      'svix-signature': headers['svix-signature'],\n    })\n    return true\n  } catch {\n    return false\n  }\n}\n\nasync function fetchResendEmail(emailId: string): Promise<{\n  from?: string\n  to?: string[]\n  subject?: string\n  text?: string\n  html?: string\n  messageId?: string\n  replyTo?: string\n  inReplyTo?: string\n  references?: string[]\n}> {\n  const apiKey = process.env.RESEND_API_KEY\n  if (!apiKey) throw new Error('RESEND_API_KEY is required to fetch Resend inbound emails')\n\n  const resend = new Resend(apiKey)\n  const { data, error } = await resend.emails.receiving.get(emailId)\n  if (error || !data) {\n    throw new Error(`Failed to fetch Resend email ${emailId}: ${error?.message || 'unknown error'}`)\n  }\n\n  return {\n    from: data.from,\n    to: data.to,\n    subject: data.subject,\n    text: data.text ?? undefined,\n    html: data.html ?? undefined,\n    messageId: data.message_id,\n    replyTo: data.reply_to?.[0] ?? undefined,\n    inReplyTo: data.headers?.['in-reply-to'] ?? undefined,\n    references: data.headers?.['references']?.split(/\\s+/).filter(Boolean),\n  }\n}\n\ntype VerifiedPayload =\n  | { kind: 'custom'; payload: Record<string, unknown>; signature: string; timestamp: string }\n  | { kind: 'resend'; emailFields: Awaited<ReturnType<typeof fetchResendEmail>>; to: string[] }\n\nasync function verifyAndParse(req: Request, rawBody: string): Promise<\n  | { ok: true; data: VerifiedPayload }\n  | { ok: false; response: NextResponse }\n> {\n  const customSig = req.headers.get('x-webhook-signature')\n  const svixId = req.headers.get('svix-id')\n\n  if (customSig) {\n    const webhookSecret = process.env.INBOX_OPS_WEBHOOK_SECRET\n    if (!webhookSecret) {\n      logger.error('INBOX_OPS_WEBHOOK_SECRET not configured')\n      return { ok: false, response: NextResponse.json({ error: 'Service unavailable' }, { status: 503 }) }\n    }\n    const timestamp = req.headers.get('x-webhook-timestamp') || ''\n    // Cheap, secret-independent gate first: reject replayed/stale requests\n    // before parsing. The HMAC itself is verified later, against the secret\n    // bound to the resolved inbox (see the POST handler), so a holder of the\n    // global secret cannot inject into a tenant that owns its own secret.\n    if (!isTimestampFresh(timestamp)) {\n      return { ok: false, response: NextResponse.json({ error: 'Invalid signature' }, { status: 400 }) }\n    }\n    let payload: Record<string, unknown>\n    try {\n      payload = JSON.parse(rawBody)\n    } catch {\n      return { ok: false, response: NextResponse.json({ error: 'Invalid JSON' }, { status: 400 }) }\n    }\n    return { ok: true, data: { kind: 'custom', payload, signature: customSig, timestamp } }\n  }\n\n  if (svixId) {\n    const signingSecret = process.env.RESEND_WEBHOOK_SIGNING_SECRET\n    if (!signingSecret) {\n      logger.error('RESEND_WEBHOOK_SIGNING_SECRET not configured')\n      return { ok: false, response: NextResponse.json({ error: 'Service unavailable' }, { status: 503 }) }\n    }\n    const headers: Record<string, string> = {\n      'svix-id': svixId,\n      'svix-timestamp': req.headers.get('svix-timestamp') || '',\n      'svix-signature': req.headers.get('svix-signature') || '',\n    }\n    if (!verifySvixSignature(rawBody, headers, signingSecret)) {\n      return { ok: false, response: NextResponse.json({ error: 'Invalid signature' }, { status: 400 }) }\n    }\n    let envelope: { type?: string; data?: { email_id?: string; from?: string; to?: string[] } }\n    try {\n      envelope = JSON.parse(rawBody)\n    } catch {\n      return { ok: false, response: NextResponse.json({ error: 'Invalid JSON' }, { status: 400 }) }\n    }\n    if (envelope.type !== 'email.received') {\n      return { ok: false, response: NextResponse.json({ ok: true }) }\n    }\n    const emailId = envelope.data?.email_id\n    if (!emailId) {\n      return { ok: false, response: NextResponse.json({ error: 'Missing email_id in Resend payload' }, { status: 400 }) }\n    }\n    const emailFields = await fetchResendEmail(emailId)\n    const to = emailFields.to || envelope.data?.to || []\n    return { ok: true, data: { kind: 'resend', emailFields, to } }\n  }\n\n  return { ok: false, response: NextResponse.json({ error: 'Missing signature headers' }, { status: 400 }) }\n}\n\nexport async function POST(req: Request) {\n  const hasCustomSecret = Boolean(process.env.INBOX_OPS_WEBHOOK_SECRET)\n  const hasResendSecret = Boolean(process.env.RESEND_WEBHOOK_SIGNING_SECRET)\n  if (!hasCustomSecret && !hasResendSecret) {\n    logger.error('Neither INBOX_OPS_WEBHOOK_SECRET nor RESEND_WEBHOOK_SIGNING_SECRET is configured')\n    return NextResponse.json({ error: 'Service unavailable' }, { status: 503 })\n  }\n\n  let rawBody: string\n  try {\n    rawBody = await readBoundedRequestBody(req, { maxBytes: MAX_PAYLOAD_SIZE })\n  } catch (error) {\n    if (error instanceof WebhookBodyTooLargeError) {\n      return NextResponse.json({ error: 'Payload too large' }, { status: 413 })\n    }\n    return NextResponse.json({ error: 'Bad request' }, { status: 400 })\n  }\n\n  const verified = await verifyAndParse(req, rawBody)\n  if (!verified.ok) {\n    return verified.response\n  }\n\n  let toAddress: string | null\n  let emailInput: Parameters<typeof parseInboundEmail>[0]\n\n  if (verified.data.kind === 'custom') {\n    const payload = verified.data.payload\n    toAddress = extractToAddress(payload)\n    emailInput = {\n      from: payload.from as string | undefined,\n      to: payload.to as string | string[] | undefined,\n      subject: payload.subject as string | undefined,\n      text: payload.text as string | undefined,\n      html: payload.html as string | undefined,\n      messageId: payload.messageId as string | undefined,\n      replyTo: payload.replyTo as string | undefined,\n      inReplyTo: payload.inReplyTo as string | undefined,\n      references: payload.references as string | string[] | undefined,\n    }\n  } else {\n    const { emailFields, to } = verified.data\n    toAddress = to.length > 0 ? to[0].toLowerCase() : null\n    emailInput = {\n      from: emailFields.from,\n      to: emailFields.to,\n      subject: emailFields.subject,\n      text: emailFields.text,\n      html: emailFields.html,\n      messageId: emailFields.messageId,\n      replyTo: emailFields.replyTo,\n      inReplyTo: emailFields.inReplyTo,\n      references: emailFields.references,\n    }\n  }\n\n  if (!toAddress) {\n    return NextResponse.json({ error: 'Missing recipient address' }, { status: 400 })\n  }\n\n  const container = await createRequestContainer()\n\n  let cache: CacheStrategy | null = null\n  try {\n    cache = container.resolve('cache') as CacheStrategy\n  } catch {\n    // Cache not available \u2014 the limiter now fails closed with a process-local\n    // bucket instead of waving the request through.\n  }\n\n  // Pre-DB global bucket keyed on the configured signing secret (custom) or the\n  // static Resend path, NOT on the attacker-controllable `to` and NOT on the\n  // per-request signature (which mutates with timestamp/body, so it would mint a\n  // fresh bucket every request and never throttle). The per-tenant secret lives\n  // behind the encrypted-column lookup, so the only secret available here without\n  // a DB hit is the global one \u2014 keying on it caps total inbound volume for the\n  // custom path and runs BEFORE the lookup so a flood cannot amplify DB work.\n  const globalBucketKey = verified.data.kind === 'custom'\n    ? `webhook:secret:${secretFingerprint(process.env.INBOX_OPS_WEBHOOK_SECRET || '')}`\n    : 'webhook:resend'\n  const globalRateCheck = await checkRateLimit(cache, globalBucketKey)\n  if (!globalRateCheck.allowed) {\n    return rateLimitedResponse(globalRateCheck.retryAfterSeconds)\n  }\n\n  const em = (container.resolve('em') as EntityManager).fork()\n\n  // No explicit scope: decryptEntitiesWithFallbackScope reads tenant/org off the\n  // resolved row, which is exactly what binds webhook_secret to its own tenant.\n  const settings = await findOneWithDecryption(\n    em,\n    InboxSettings,\n    {\n      inboxAddress: toAddress.toLowerCase(),\n      isActive: true,\n      deletedAt: null,\n    },\n  )\n\n  // Final HMAC verification for the custom provider path: bind the signature to\n  // the resolved tenant. When the inbox declares its own secret, ONLY that\n  // secret is accepted; otherwise the global secret is accepted (back-compat).\n  // For an unknown `to` we still require the global secret so the endpoint never\n  // behaves as an unauthenticated probe oracle.\n  if (verified.data.kind === 'custom') {\n    const globalSecret = process.env.INBOX_OPS_WEBHOOK_SECRET || ''\n    const inboxSecret = settings?.webhookSecret || ''\n    const acceptableSecrets = inboxSecret ? [inboxSecret] : [globalSecret]\n    const signatureValid = verifyHmacAgainstAny(\n      rawBody,\n      verified.data.signature,\n      verified.data.timestamp,\n      acceptableSecrets,\n    )\n    if (!signatureValid) {\n      return NextResponse.json({ error: 'Invalid signature' }, { status: 400 })\n    }\n  }\n\n  if (!settings) {\n    return NextResponse.json({ ok: true })\n  }\n\n  // Per-tenant bucket keyed on the RESOLVED tenant (not the raw `to`), so it\n  // cannot be diluted by alias addresses that map to the same inbox.\n  const tenantRateCheck = await checkRateLimit(\n    cache,\n    `webhook:tenant:${settings.tenantId}`,\n    settings.tenantId,\n  )\n  if (!tenantRateCheck.allowed) {\n    return rateLimitedResponse(tenantRateCheck.retryAfterSeconds)\n  }\n\n  const parsed = parseInboundEmail(emailInput)\n\n  const isDuplicate = await checkDuplicate(em, settings, parsed.messageId, parsed.contentHash)\n  if (isDuplicate) {\n    try {\n      await emitInboxOpsEvent('inbox_ops.email.deduplicated', {\n        tenantId: settings.tenantId,\n        organizationId: settings.organizationId,\n        toAddress,\n      })\n    } catch (eventError) {\n      logger.error('Failed to emit deduplicated event', { err: eventError })\n    }\n    return NextResponse.json({ ok: true })\n  }\n\n  const maxTextSize = parseInt(process.env.INBOX_OPS_MAX_TEXT_SIZE || '204800', 10)\n  const cleanedText = parsed.cleanedText.slice(0, maxTextSize)\n\n  const email = em.create(InboxEmail, {\n    messageId: parsed.messageId,\n    contentHash: parsed.contentHash,\n    forwardedByAddress: parsed.from.email,\n    forwardedByName: parsed.from.name || null,\n    toAddress,\n    subject: parsed.subject,\n    replyTo: parsed.replyTo,\n    inReplyTo: parsed.inReplyTo,\n    emailReferences: parsed.references,\n    rawText: parsed.rawText,\n    rawHtml: parsed.rawHtml,\n    cleanedText,\n    threadMessages: parsed.threadMessages,\n    detectedLanguage: parsed.detectedLanguage,\n    receivedAt: new Date(),\n    status: 'received' as const,\n    isActive: true,\n    organizationId: settings.organizationId,\n    tenantId: settings.tenantId,\n  })\n\n  em.persist(email)\n  await em.flush()\n\n  try {\n    await emitInboxOpsEvent('inbox_ops.email.received', {\n      emailId: email.id,\n      tenantId: settings.tenantId,\n      organizationId: settings.organizationId,\n      forwardedByAddress: parsed.from.email,\n      subject: parsed.subject,\n    }, {\n      persistent: true,\n      tenantId: settings.tenantId,\n      organizationId: settings.organizationId,\n    })\n  } catch (eventError) {\n    logger.error('Failed to emit email.received event', { err: eventError })\n  }\n\n  return NextResponse.json({ ok: true })\n}\n\nfunction rateLimitedResponse(retryAfterSeconds?: number): NextResponse {\n  return NextResponse.json(\n    { error: 'Rate limit exceeded' },\n    {\n      status: 429,\n      headers: retryAfterSeconds ? { 'Retry-After': String(retryAfterSeconds) } : undefined,\n    },\n  )\n}\n\nfunction extractToAddress(payload: Record<string, unknown>): string | null {\n  const to = payload.to\n  if (typeof to === 'string') {\n    const match = to.match(/<([^>]+)>/)\n    return match ? match[1].toLowerCase() : to.trim().toLowerCase()\n  }\n  if (Array.isArray(to) && to.length > 0) {\n    const first = to[0]\n    if (typeof first === 'string') {\n      const match = first.match(/<([^>]+)>/)\n      return match ? match[1].toLowerCase() : first.trim().toLowerCase()\n    }\n  }\n  return null\n}\n\nasync function checkDuplicate(\n  em: EntityManager,\n  settings: InboxSettings,\n  messageId: string | null | undefined,\n  contentHash: string | null | undefined,\n): Promise<boolean> {\n  const encScope = {\n    tenantId: settings.tenantId,\n    organizationId: settings.organizationId,\n  }\n  const whereBase = {\n    organizationId: settings.organizationId,\n    tenantId: settings.tenantId,\n    deletedAt: null,\n  }\n\n  if (messageId) {\n    const byMessageId = await findOneWithDecryption(em, InboxEmail, { ...whereBase, messageId }, undefined, encScope)\n    if (byMessageId) return true\n  }\n\n  if (contentHash) {\n    const byHash = await findOneWithDecryption(em, InboxEmail, { ...whereBase, contentHash }, undefined, encScope)\n    if (byHash) return true\n  }\n\n  return false\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'InboxOps',\n  summary: 'Inbound email webhook',\n  methods: {\n    POST: {\n      summary: 'Receive forwarded email from provider webhook',\n      description: 'Public endpoint \u2014 validated by provider HMAC signature or Resend/Svix signature. Rate limited per tenant.',\n      requestBody: {\n        contentType: 'application/json',\n        schema: z.object({\n          from: z.string().optional(),\n          to: z.union([z.string(), z.array(z.string())]).optional(),\n          subject: z.string().optional(),\n          text: z.string().optional(),\n          html: z.string().optional(),\n          messageId: z.string().optional(),\n          replyTo: z.string().optional(),\n          inReplyTo: z.string().optional(),\n          references: z.union([z.string(), z.array(z.string())]).optional(),\n        }),\n      },\n      responses: [\n        { status: 200, description: 'Email received and queued for processing' },\n        { status: 400, description: 'Invalid payload or signature' },\n        { status: 413, description: 'Payload too large' },\n        { status: 429, description: 'Rate limit exceeded' },\n        { status: 503, description: 'Webhook secret not configured' },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,YAAY,uBAAuB;AAC5C,SAAS,SAAS;AAClB,SAAS,eAAe;AACxB,SAAS,cAAc;AACvB,SAAS,8BAA8B;AAIvC,SAAS,6BAA6B;AACtC,SAAS,eAAe,kBAAkB;AAC1C,SAAS,yBAAyB;AAClC,SAAS,sBAAsB;AAC/B,SAAS,yBAAyB;AAClC,SAAS,oBAAoB;AAC7B;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEP,MAAM,SAAS,aAAa,WAAW,EAAE,MAAM,EAAE,WAAW,UAAU,CAAC;AAEhE,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,MAAM;AAC7B;AAEA,MAAM,mBAAmB;AAAA,EACvB,QAAQ,IAAI,oCAAoC,QAAQ,IAAI;AAAA,EAC5D,IAAI,OAAO;AACb;AACA,MAAM,mBAAmB,IAAI,KAAK;AAElC,SAAS,iBAAiB,WAA4B;AACpD,MAAI,CAAC,UAAW,QAAO;AACvB,QAAM,cAAc,SAAS,WAAW,EAAE,IAAI;AAC9C,MAAI,MAAM,WAAW,EAAG,QAAO;AAC/B,SAAO,KAAK,IAAI,KAAK,IAAI,IAAI,WAAW,KAAK;AAC/C;AAEA,SAAS,oBACP,SACA,WACA,WACA,QACS;AACT,MAAI,CAAC,aAAa,CAAC,aAAa,CAAC,OAAQ,QAAO;AAEhD,MAAI,CAAC,iBAAiB,SAAS,EAAG,QAAO;AAEzC,QAAM,WAAW,WAAW,UAAU,MAAM,EACzC,OAAO,GAAG,SAAS,IAAI,OAAO,EAAE,EAChC,OAAO,KAAK;AACf,QAAM,WAAW,UAAU,WAAW,SAAS,IAC3C,UAAU,MAAM,UAAU,MAAM,IAChC;AAEJ,MAAI;AACF,QAAI,SAAS,WAAW,SAAS,OAAQ,QAAO;AAChD,WAAO;AAAA,MACL,OAAO,KAAK,UAAU,KAAK;AAAA,MAC3B,OAAO,KAAK,UAAU,KAAK;AAAA,IAC7B;AAAA,EACF,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAOA,SAAS,qBACP,SACA,WACA,WACA,SACS;AACT,aAAW,UAAU,SAAS;AAC5B,QAAI,UAAU,oBAAoB,SAAS,WAAW,WAAW,MAAM,EAAG,QAAO;AAAA,EACnF;AACA,SAAO;AACT;AAMA,SAAS,kBAAkB,QAAwB;AACjD,SAAO,WAAW,UAAU,2BAA2B,EAAE,OAAO,MAAM,EAAE,OAAO,KAAK,EAAE,MAAM,GAAG,EAAE;AACnG;AAEA,SAAS,oBACP,SACA,SACA,QACS;AACT,MAAI;AACF,UAAM,KAAK,IAAI,QAAQ,MAAM;AAC7B,OAAG,OAAO,SAAS;AAAA,MACjB,WAAW,QAAQ,SAAS;AAAA,MAC5B,kBAAkB,QAAQ,gBAAgB;AAAA,MAC1C,kBAAkB,QAAQ,gBAAgB;AAAA,IAC5C,CAAC;AACD,WAAO;AAAA,EACT,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,eAAe,iBAAiB,SAU7B;AACD,QAAM,SAAS,QAAQ,IAAI;AAC3B,MAAI,CAAC,OAAQ,OAAM,IAAI,MAAM,2DAA2D;AAExF,QAAM,SAAS,IAAI,OAAO,MAAM;AAChC,QAAM,EAAE,MAAM,MAAM,IAAI,MAAM,OAAO,OAAO,UAAU,IAAI,OAAO;AACjE,MAAI,SAAS,CAAC,MAAM;AAClB,UAAM,IAAI,MAAM,gCAAgC,OAAO,KAAK,OAAO,WAAW,eAAe,EAAE;AAAA,EACjG;AAEA,SAAO;AAAA,IACL,MAAM,KAAK;AAAA,IACX,IAAI,KAAK;AAAA,IACT,SAAS,KAAK;AAAA,IACd,MAAM,KAAK,QAAQ;AAAA,IACnB,MAAM,KAAK,QAAQ;AAAA,IACnB,WAAW,KAAK;AAAA,IAChB,SAAS,KAAK,WAAW,CAAC,KAAK;AAAA,IAC/B,WAAW,KAAK,UAAU,aAAa,KAAK;AAAA,IAC5C,YAAY,KAAK,UAAU,YAAY,GAAG,MAAM,KAAK,EAAE,OAAO,OAAO;AAAA,EACvE;AACF;AAMA,eAAe,eAAe,KAAc,SAG1C;AACA,QAAM,YAAY,IAAI,QAAQ,IAAI,qBAAqB;AACvD,QAAM,SAAS,IAAI,QAAQ,IAAI,SAAS;AAExC,MAAI,WAAW;AACb,UAAM,gBAAgB,QAAQ,IAAI;AAClC,QAAI,CAAC,eAAe;AAClB,aAAO,MAAM,yCAAyC;AACtD,aAAO,EAAE,IAAI,OAAO,UAAU,aAAa,KAAK,EAAE,OAAO,sBAAsB,GAAG,EAAE,QAAQ,IAAI,CAAC,EAAE;AAAA,IACrG;AACA,UAAM,YAAY,IAAI,QAAQ,IAAI,qBAAqB,KAAK;AAK5D,QAAI,CAAC,iBAAiB,SAAS,GAAG;AAChC,aAAO,EAAE,IAAI,OAAO,UAAU,aAAa,KAAK,EAAE,OAAO,oBAAoB,GAAG,EAAE,QAAQ,IAAI,CAAC,EAAE;AAAA,IACnG;AACA,QAAI;AACJ,QAAI;AACF,gBAAU,KAAK,MAAM,OAAO;AAAA,IAC9B,QAAQ;AACN,aAAO,EAAE,IAAI,OAAO,UAAU,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC,EAAE;AAAA,IAC9F;AACA,WAAO,EAAE,IAAI,MAAM,MAAM,EAAE,MAAM,UAAU,SAAS,WAAW,WAAW,UAAU,EAAE;AAAA,EACxF;AAEA,MAAI,QAAQ;AACV,UAAM,gBAAgB,QAAQ,IAAI;AAClC,QAAI,CAAC,eAAe;AAClB,aAAO,MAAM,8CAA8C;AAC3D,aAAO,EAAE,IAAI,OAAO,UAAU,aAAa,KAAK,EAAE,OAAO,sBAAsB,GAAG,EAAE,QAAQ,IAAI,CAAC,EAAE;AAAA,IACrG;AACA,UAAM,UAAkC;AAAA,MACtC,WAAW;AAAA,MACX,kBAAkB,IAAI,QAAQ,IAAI,gBAAgB,KAAK;AAAA,MACvD,kBAAkB,IAAI,QAAQ,IAAI,gBAAgB,KAAK;AAAA,IACzD;AACA,QAAI,CAAC,oBAAoB,SAAS,SAAS,aAAa,GAAG;AACzD,aAAO,EAAE,IAAI,OAAO,UAAU,aAAa,KAAK,EAAE,OAAO,oBAAoB,GAAG,EAAE,QAAQ,IAAI,CAAC,EAAE;AAAA,IACnG;AACA,QAAI;AACJ,QAAI;AACF,iBAAW,KAAK,MAAM,OAAO;AAAA,IAC/B,QAAQ;AACN,aAAO,EAAE,IAAI,OAAO,UAAU,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC,EAAE;AAAA,IAC9F;AACA,QAAI,SAAS,SAAS,kBAAkB;AACtC,aAAO,EAAE,IAAI,OAAO,UAAU,aAAa,KAAK,EAAE,IAAI,KAAK,CAAC,EAAE;AAAA,IAChE;AACA,UAAM,UAAU,SAAS,MAAM;AAC/B,QAAI,CAAC,SAAS;AACZ,aAAO,EAAE,IAAI,OAAO,UAAU,aAAa,KAAK,EAAE,OAAO,qCAAqC,GAAG,EAAE,QAAQ,IAAI,CAAC,EAAE;AAAA,IACpH;AACA,UAAM,cAAc,MAAM,iBAAiB,OAAO;AAClD,UAAM,KAAK,YAAY,MAAM,SAAS,MAAM,MAAM,CAAC;AACnD,WAAO,EAAE,IAAI,MAAM,MAAM,EAAE,MAAM,UAAU,aAAa,GAAG,EAAE;AAAA,EAC/D;AAEA,SAAO,EAAE,IAAI,OAAO,UAAU,aAAa,KAAK,EAAE,OAAO,4BAA4B,GAAG,EAAE,QAAQ,IAAI,CAAC,EAAE;AAC3G;AAEA,eAAsB,KAAK,KAAc;AACvC,QAAM,kBAAkB,QAAQ,QAAQ,IAAI,wBAAwB;AACpE,QAAM,kBAAkB,QAAQ,QAAQ,IAAI,6BAA6B;AACzE,MAAI,CAAC,mBAAmB,CAAC,iBAAiB;AACxC,WAAO,MAAM,kFAAkF;AAC/F,WAAO,aAAa,KAAK,EAAE,OAAO,sBAAsB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC5E;AAEA,MAAI;AACJ,MAAI;AACF,cAAU,MAAM,uBAAuB,KAAK,EAAE,UAAU,iBAAiB,CAAC;AAAA,EAC5E,SAAS,OAAO;AACd,QAAI,iBAAiB,0BAA0B;AAC7C,aAAO,aAAa,KAAK,EAAE,OAAO,oBAAoB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC1E;AACA,WAAO,aAAa,KAAK,EAAE,OAAO,cAAc,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACpE;AAEA,QAAM,WAAW,MAAM,eAAe,KAAK,OAAO;AAClD,MAAI,CAAC,SAAS,IAAI;AAChB,WAAO,SAAS;AAAA,EAClB;AAEA,MAAI;AACJ,MAAI;AAEJ,MAAI,SAAS,KAAK,SAAS,UAAU;AACnC,UAAM,UAAU,SAAS,KAAK;AAC9B,gBAAY,iBAAiB,OAAO;AACpC,iBAAa;AAAA,MACX,MAAM,QAAQ;AAAA,MACd,IAAI,QAAQ;AAAA,MACZ,SAAS,QAAQ;AAAA,MACjB,MAAM,QAAQ;AAAA,MACd,MAAM,QAAQ;AAAA,MACd,WAAW,QAAQ;AAAA,MACnB,SAAS,QAAQ;AAAA,MACjB,WAAW,QAAQ;AAAA,MACnB,YAAY,QAAQ;AAAA,IACtB;AAAA,EACF,OAAO;AACL,UAAM,EAAE,aAAa,GAAG,IAAI,SAAS;AACrC,gBAAY,GAAG,SAAS,IAAI,GAAG,CAAC,EAAE,YAAY,IAAI;AAClD,iBAAa;AAAA,MACX,MAAM,YAAY;AAAA,MAClB,IAAI,YAAY;AAAA,MAChB,SAAS,YAAY;AAAA,MACrB,MAAM,YAAY;AAAA,MAClB,MAAM,YAAY;AAAA,MAClB,WAAW,YAAY;AAAA,MACvB,SAAS,YAAY;AAAA,MACrB,WAAW,YAAY;AAAA,MACvB,YAAY,YAAY;AAAA,IAC1B;AAAA,EACF;AAEA,MAAI,CAAC,WAAW;AACd,WAAO,aAAa,KAAK,EAAE,OAAO,4BAA4B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAClF;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAE/C,MAAI,QAA8B;AAClC,MAAI;AACF,YAAQ,UAAU,QAAQ,OAAO;AAAA,EACnC,QAAQ;AAAA,EAGR;AASA,QAAM,kBAAkB,SAAS,KAAK,SAAS,WAC3C,kBAAkB,kBAAkB,QAAQ,IAAI,4BAA4B,EAAE,CAAC,KAC/E;AACJ,QAAM,kBAAkB,MAAM,eAAe,OAAO,eAAe;AACnE,MAAI,CAAC,gBAAgB,SAAS;AAC5B,WAAO,oBAAoB,gBAAgB,iBAAiB;AAAA,EAC9D;AAEA,QAAM,KAAM,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAI3D,QAAM,WAAW,MAAM;AAAA,IACrB;AAAA,IACA;AAAA,IACA;AAAA,MACE,cAAc,UAAU,YAAY;AAAA,MACpC,UAAU;AAAA,MACV,WAAW;AAAA,IACb;AAAA,EACF;AAOA,MAAI,SAAS,KAAK,SAAS,UAAU;AACnC,UAAM,eAAe,QAAQ,IAAI,4BAA4B;AAC7D,UAAM,cAAc,UAAU,iBAAiB;AAC/C,UAAM,oBAAoB,cAAc,CAAC,WAAW,IAAI,CAAC,YAAY;AACrE,UAAM,iBAAiB;AAAA,MACrB;AAAA,MACA,SAAS,KAAK;AAAA,MACd,SAAS,KAAK;AAAA,MACd;AAAA,IACF;AACA,QAAI,CAAC,gBAAgB;AACnB,aAAO,aAAa,KAAK,EAAE,OAAO,oBAAoB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC1E;AAAA,EACF;AAEA,MAAI,CAAC,UAAU;AACb,WAAO,aAAa,KAAK,EAAE,IAAI,KAAK,CAAC;AAAA,EACvC;AAIA,QAAM,kBAAkB,MAAM;AAAA,IAC5B;AAAA,IACA,kBAAkB,SAAS,QAAQ;AAAA,IACnC,SAAS;AAAA,EACX;AACA,MAAI,CAAC,gBAAgB,SAAS;AAC5B,WAAO,oBAAoB,gBAAgB,iBAAiB;AAAA,EAC9D;AAEA,QAAM,SAAS,kBAAkB,UAAU;AAE3C,QAAM,cAAc,MAAM,eAAe,IAAI,UAAU,OAAO,WAAW,OAAO,WAAW;AAC3F,MAAI,aAAa;AACf,QAAI;AACF,YAAM,kBAAkB,gCAAgC;AAAA,QACtD,UAAU,SAAS;AAAA,QACnB,gBAAgB,SAAS;AAAA,QACzB;AAAA,MACF,CAAC;AAAA,IACH,SAAS,YAAY;AACnB,aAAO,MAAM,qCAAqC,EAAE,KAAK,WAAW,CAAC;AAAA,IACvE;AACA,WAAO,aAAa,KAAK,EAAE,IAAI,KAAK,CAAC;AAAA,EACvC;AAEA,QAAM,cAAc,SAAS,QAAQ,IAAI,2BAA2B,UAAU,EAAE;AAChF,QAAM,cAAc,OAAO,YAAY,MAAM,GAAG,WAAW;AAE3D,QAAM,QAAQ,GAAG,OAAO,YAAY;AAAA,IAClC,WAAW,OAAO;AAAA,IAClB,aAAa,OAAO;AAAA,IACpB,oBAAoB,OAAO,KAAK;AAAA,IAChC,iBAAiB,OAAO,KAAK,QAAQ;AAAA,IACrC;AAAA,IACA,SAAS,OAAO;AAAA,IAChB,SAAS,OAAO;AAAA,IAChB,WAAW,OAAO;AAAA,IAClB,iBAAiB,OAAO;AAAA,IACxB,SAAS,OAAO;AAAA,IAChB,SAAS,OAAO;AAAA,IAChB;AAAA,IACA,gBAAgB,OAAO;AAAA,IACvB,kBAAkB,OAAO;AAAA,IACzB,YAAY,oBAAI,KAAK;AAAA,IACrB,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,gBAAgB,SAAS;AAAA,IACzB,UAAU,SAAS;AAAA,EACrB,CAAC;AAED,KAAG,QAAQ,KAAK;AAChB,QAAM,GAAG,MAAM;AAEf,MAAI;AACF,UAAM,kBAAkB,4BAA4B;AAAA,MAClD,SAAS,MAAM;AAAA,MACf,UAAU,SAAS;AAAA,MACnB,gBAAgB,SAAS;AAAA,MACzB,oBAAoB,OAAO,KAAK;AAAA,MAChC,SAAS,OAAO;AAAA,IAClB,GAAG;AAAA,MACD,YAAY;AAAA,MACZ,UAAU,SAAS;AAAA,MACnB,gBAAgB,SAAS;AAAA,IAC3B,CAAC;AAAA,EACH,SAAS,YAAY;AACnB,WAAO,MAAM,uCAAuC,EAAE,KAAK,WAAW,CAAC;AAAA,EACzE;AAEA,SAAO,aAAa,KAAK,EAAE,IAAI,KAAK,CAAC;AACvC;AAEA,SAAS,oBAAoB,mBAA0C;AACrE,SAAO,aAAa;AAAA,IAClB,EAAE,OAAO,sBAAsB;AAAA,IAC/B;AAAA,MACE,QAAQ;AAAA,MACR,SAAS,oBAAoB,EAAE,eAAe,OAAO,iBAAiB,EAAE,IAAI;AAAA,IAC9E;AAAA,EACF;AACF;AAEA,SAAS,iBAAiB,SAAiD;AACzE,QAAM,KAAK,QAAQ;AACnB,MAAI,OAAO,OAAO,UAAU;AAC1B,UAAM,QAAQ,GAAG,MAAM,WAAW;AAClC,WAAO,QAAQ,MAAM,CAAC,EAAE,YAAY,IAAI,GAAG,KAAK,EAAE,YAAY;AAAA,EAChE;AACA,MAAI,MAAM,QAAQ,EAAE,KAAK,GAAG,SAAS,GAAG;AACtC,UAAM,QAAQ,GAAG,CAAC;AAClB,QAAI,OAAO,UAAU,UAAU;AAC7B,YAAM,QAAQ,MAAM,MAAM,WAAW;AACrC,aAAO,QAAQ,MAAM,CAAC,EAAE,YAAY,IAAI,MAAM,KAAK,EAAE,YAAY;AAAA,IACnE;AAAA,EACF;AACA,SAAO;AACT;AAEA,eAAe,eACb,IACA,UACA,WACA,aACkB;AAClB,QAAM,WAAW;AAAA,IACf,UAAU,SAAS;AAAA,IACnB,gBAAgB,SAAS;AAAA,EAC3B;AACA,QAAM,YAAY;AAAA,IAChB,gBAAgB,SAAS;AAAA,IACzB,UAAU,SAAS;AAAA,IACnB,WAAW;AAAA,EACb;AAEA,MAAI,WAAW;AACb,UAAM,cAAc,MAAM,sBAAsB,IAAI,YAAY,EAAE,GAAG,WAAW,UAAU,GAAG,QAAW,QAAQ;AAChH,QAAI,YAAa,QAAO;AAAA,EAC1B;AAEA,MAAI,aAAa;AACf,UAAM,SAAS,MAAM,sBAAsB,IAAI,YAAY,EAAE,GAAG,WAAW,YAAY,GAAG,QAAW,QAAQ;AAC7G,QAAI,OAAQ,QAAO;AAAA,EACrB;AAEA,SAAO;AACT;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aAAa;AAAA,MACb,aAAa;AAAA,QACX,aAAa;AAAA,QACb,QAAQ,EAAE,OAAO;AAAA,UACf,MAAM,EAAE,OAAO,EAAE,SAAS;AAAA,UAC1B,IAAI,EAAE,MAAM,CAAC,EAAE,OAAO,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,SAAS;AAAA,UACxD,SAAS,EAAE,OAAO,EAAE,SAAS;AAAA,UAC7B,MAAM,EAAE,OAAO,EAAE,SAAS;AAAA,UAC1B,MAAM,EAAE,OAAO,EAAE,SAAS;AAAA,UAC1B,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,UAC/B,SAAS,EAAE,OAAO,EAAE,SAAS;AAAA,UAC7B,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,UAC/B,YAAY,EAAE,MAAM,CAAC,EAAE,OAAO,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,SAAS;AAAA,QAClE,CAAC;AAAA,MACH;AAAA,MACA,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,2CAA2C;AAAA,QACvE,EAAE,QAAQ,KAAK,aAAa,+BAA+B;AAAA,QAC3D,EAAE,QAAQ,KAAK,aAAa,oBAAoB;AAAA,QAChD,EAAE,QAAQ,KAAK,aAAa,sBAAsB;AAAA,QAClD,EAAE,QAAQ,KAAK,aAAa,gCAAgC;AAAA,MAC9D;AAAA,IACF;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/modules/sales/commands/documents.js

@@ -1299,8 +1299,8 @@ async function loadCreditMemoSnapshot(em, id) {
       organizationId: creditMemo.organizationId,
       tenantId: creditMemo.tenantId,
       creditMemoNumber: creditMemo.creditMemoNumber,
-      orderId: creditMemo.orderId ?? null,
-      invoiceId: creditMemo.invoiceId ?? null,
+      orderId: creditMemo.order?.id ?? null,
+      invoiceId: creditMemo.invoice?.id ?? null,
       statusEntryId: creditMemo.statusEntryId ?? null,
       status: creditMemo.status ?? null,
       reason: creditMemo.reason ?? null,
@@ -7317,8 +7317,8 @@ const createCreditMemoCommand = {
       organizationId: parsed.organizationId,
       tenantId: parsed.tenantId,
       creditMemoNumber: ensuredCreditMemoNumber,
-      orderId: parsed.orderId ?? null,
-      invoiceId: parsed.invoiceId ?? null,
+      order: parsed.orderId ? em.getReference(SalesOrder, parsed.orderId) : null,
+      invoice: parsed.invoiceId ? em.getReference(SalesInvoice, parsed.invoiceId) : null,
       statusEntryId: parsed.statusEntryId ?? null,
       status,
       reason: parsed.reason ?? null,
@@ -7549,8 +7549,8 @@ const updateCreditMemoCommand = {
     ensureOrganizationScope(ctx, creditMemo.organizationId);
     ensureTenantScope(ctx, creditMemo.tenantId);
     creditMemo.creditMemoNumber = before.creditMemo.creditMemoNumber;
-    creditMemo.orderId = before.creditMemo.orderId;
-    creditMemo.invoiceId = before.creditMemo.invoiceId;
+    creditMemo.order = before.creditMemo.orderId ? em.getReference(SalesOrder, before.creditMemo.orderId) : null;
+    creditMemo.invoice = before.creditMemo.invoiceId ? em.getReference(SalesInvoice, before.creditMemo.invoiceId) : null;
     creditMemo.statusEntryId = before.creditMemo.statusEntryId;
     creditMemo.status = before.creditMemo.status;
     creditMemo.reason = before.creditMemo.reason;
@@ -7646,8 +7646,8 @@ const deleteCreditMemoCommand = {
       organizationId: before.creditMemo.organizationId,
       tenantId: before.creditMemo.tenantId,
       creditMemoNumber: before.creditMemo.creditMemoNumber,
-      orderId: before.creditMemo.orderId,
-      invoiceId: before.creditMemo.invoiceId,
+      order: before.creditMemo.orderId ? em.getReference(SalesOrder, before.creditMemo.orderId) : null,
+      invoice: before.creditMemo.invoiceId ? em.getReference(SalesInvoice, before.creditMemo.invoiceId) : null,
       statusEntryId: before.creditMemo.statusEntryId,
       status: before.creditMemo.status,
       reason: before.creditMemo.reason,