@open-mercato/core 0.6.8-develop.7099.1.7ba2771d06 → 0.7.0

package/dist/modules/communication_channels/lib/outbound-recipient.js.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../../../../src/modules/communication_channels/lib/outbound-recipient.ts"],
-  "sourcesContent": ["import { z } from 'zod'\nimport type { ChannelCapabilities } from './adapter'\n\n/**\n * Upper bound shared by both recipient shapes. 320 is the RFC 5321 maximum for\n * an email address (64 local + `@` + 255 domain); provider-native identifiers\n * are far shorter, so one ceiling covers both.\n */\nexport const MAX_OUTBOUND_RECIPIENT_LENGTH = 320\n\nconst emailRecipientSchema = z.string().email()\n\n/**\n * Characters a provider-native recipient may contain. This is an allowlist, not a\n * denylist, because the recipient reaches adapters that interpolate it into a REST\n * path (Discord posts to `/channels/{recipient}/messages`), and a denylist fails\n * open on every character nobody thought of \u2014 percent-encoded separators\n * (`%2F`, `%2e%2e%2f`) and control bytes (NUL, DEL) all walked through the\n * previous `[\\r\\n\\s/\\\\?#]` class. An allowlist fails closed instead: the worst\n * case is a provider whose identifier alphabet needs widening, which is a\n * reviewable one-line change rather than a silent path-steering primitive.\n *\n * The set covers every provider-native identifier shape the hub has to carry\n * today \u2014 Discord snowflakes (digits), Slack-style ids (alphanumerics), and email\n * addresses, since `'provider-native'` must never narrow what `'email'` accepts.\n */\nconst PROVIDER_NATIVE_ALLOWED = /^[A-Za-z0-9._:@+-]+$/\n\nexport type OutboundRecipientCheck = { ok: true } | { ok: false; error: string }\n\n/**\n * Validate an outbound recipient against the provider's declared recipient\n * shape.\n *\n * The hub used to hard-wire `z.string().email()` on every outbound endpoint,\n * which left providers whose recipients are not email addresses with no product\n * path to send at all (#4976). Validation now follows the adapter's\n * `capabilities.recipientFormat`, defaulting to `'email'` so every existing\n * provider keeps byte-identical behavior.\n */\nexport function validateOutboundRecipient(\n  recipient: unknown,\n  capabilities: Pick<ChannelCapabilities, 'recipientFormat'> | null | undefined,\n): OutboundRecipientCheck {\n  if (typeof recipient !== 'string' || recipient.length === 0) {\n    return { ok: false, error: 'Recipient is required' }\n  }\n  if (recipient.length > MAX_OUTBOUND_RECIPIENT_LENGTH) {\n    return {\n      ok: false,\n      error: `Recipient must be at most ${MAX_OUTBOUND_RECIPIENT_LENGTH} characters`,\n    }\n  }\n  if (capabilities?.recipientFormat !== 'provider-native') {\n    return emailRecipientSchema.safeParse(recipient).success\n      ? { ok: true }\n      : { ok: false, error: 'Recipient must be a valid email address' }\n  }\n  if (!PROVIDER_NATIVE_ALLOWED.test(recipient)) {\n    return {\n      ok: false,\n      error: 'Recipient may only contain letters, digits, and the characters . _ : @ + -',\n    }\n  }\n  // `.` is allowed (email addresses need it), so traversal still has to be\n  // rejected explicitly even though the separators it would need are not.\n  if (recipient.includes('..')) {\n    return { ok: false, error: 'Recipient must not contain \"..\"' }\n  }\n  return { ok: true }\n}\n"],
-  "mappings": "AAAA,SAAS,SAAS;AAQX,MAAM,gCAAgC;AAE7C,MAAM,uBAAuB,EAAE,OAAO,EAAE,MAAM;AAgB9C,MAAM,0BAA0B;AAczB,SAAS,0BACd,WACA,cACwB;AACxB,MAAI,OAAO,cAAc,YAAY,UAAU,WAAW,GAAG;AAC3D,WAAO,EAAE,IAAI,OAAO,OAAO,wBAAwB;AAAA,EACrD;AACA,MAAI,UAAU,SAAS,+BAA+B;AACpD,WAAO;AAAA,MACL,IAAI;AAAA,MACJ,OAAO,6BAA6B,6BAA6B;AAAA,IACnE;AAAA,EACF;AACA,MAAI,cAAc,oBAAoB,mBAAmB;AACvD,WAAO,qBAAqB,UAAU,SAAS,EAAE,UAC7C,EAAE,IAAI,KAAK,IACX,EAAE,IAAI,OAAO,OAAO,0CAA0C;AAAA,EACpE;AACA,MAAI,CAAC,wBAAwB,KAAK,SAAS,GAAG;AAC5C,WAAO;AAAA,MACL,IAAI;AAAA,MACJ,OAAO;AAAA,IACT;AAAA,EACF;AAGA,MAAI,UAAU,SAAS,IAAI,GAAG;AAC5B,WAAO,EAAE,IAAI,OAAO,OAAO,kCAAkC;AAAA,EAC/D;AACA,SAAO,EAAE,IAAI,KAAK;AACpB;",
-  "names": []
-}

package/dist/modules/communication_channels/lib/resolve-channel-type.js

@@ -1,51 +0,0 @@
-import { findOneWithDecryption } from "@open-mercato/shared/lib/encryption/find";
-import { createLogger } from "@open-mercato/shared/lib/logger";
-import { CommunicationChannel, ExternalConversation, MessageChannelLink } from "../data/entities.js";
-const logger = createLogger("communication_channels").child({ component: "resolve-channel-type" });
-async function resolveChannelType(container, scope, reference) {
-  const em = container.resolve("em").fork();
-  const dscope = { tenantId: scope.tenantId, organizationId: scope.organizationId ?? null };
-  const baseFilter = { tenantId: scope.tenantId, organizationId: scope.organizationId ?? null };
-  let externalConversationId = reference.externalConversationId ?? null;
-  if (!externalConversationId && reference.messageId) {
-    const link = await findOneWithDecryption(
-      em,
-      MessageChannelLink,
-      { messageId: reference.messageId, ...baseFilter },
-      void 0,
-      dscope
-    );
-    if (link?.channelType) return link.channelType;
-    externalConversationId = link?.externalConversationId ?? null;
-  }
-  if (!externalConversationId) return null;
-  const conversation = await findOneWithDecryption(
-    em,
-    ExternalConversation,
-    { id: externalConversationId, ...baseFilter },
-    void 0,
-    dscope
-  );
-  if (!conversation?.channelId) return null;
-  const channel = await findOneWithDecryption(
-    em,
-    CommunicationChannel,
-    { id: conversation.channelId, ...baseFilter, deletedAt: null },
-    void 0,
-    dscope
-  );
-  return channel?.channelType ?? null;
-}
-async function resolveChannelTypeSafely(container, scope, reference) {
-  try {
-    return await resolveChannelType(container, scope, reference);
-  } catch (err) {
-    logger.warn("channel type resolution failed, treating the channel as unknown", { err });
-    return null;
-  }
-}
-export {
-  resolveChannelType,
-  resolveChannelTypeSafely
-};
-//# sourceMappingURL=resolve-channel-type.js.map

package/dist/modules/communication_channels/lib/resolve-channel-type.js.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../../../../src/modules/communication_channels/lib/resolve-channel-type.ts"],
-  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport type { AppContainer } from '@open-mercato/shared/lib/di/container'\nimport { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\nimport { CommunicationChannel, ExternalConversation, MessageChannelLink } from '../data/entities'\n\nconst logger = createLogger('communication_channels').child({ component: 'resolve-channel-type' })\n\nexport type ChannelTypeScope = {\n  tenantId: string\n  organizationId: string | null\n}\n\nexport type ChannelTypeReference = {\n  /** `ExternalConversation.id`, as carried by a message's `sourceEntityId`. */\n  externalConversationId?: string | null\n  /** A platform `messages.message` id that may be linked to a channel. */\n  messageId?: string | null\n}\n\n/**\n * Resolve the channel type behind a platform message or conversation (#4975).\n *\n * Cross-module callers (the `messages` compose route) need to know whether an\n * external correspondent is reachable by email before validating a compose\n * payload, but `messages` may not reach into this module's entities. They\n * resolve this facade from DI instead \u2014 mirroring `communicationChannelsSendAsUser`\n * \u2014 and treat a `null` result as \"unknown\", which the messages validator\n * handles fail-closed.\n *\n * Always tenant/organization scoped: a reference that does not resolve inside\n * the caller's scope is reported as unknown rather than looked up globally.\n */\nexport async function resolveChannelType(\n  container: AppContainer,\n  scope: ChannelTypeScope,\n  reference: ChannelTypeReference,\n): Promise<string | null> {\n  const em = (container.resolve('em') as EntityManager).fork()\n  const dscope = { tenantId: scope.tenantId, organizationId: scope.organizationId ?? null }\n  const baseFilter = { tenantId: scope.tenantId, organizationId: scope.organizationId ?? null }\n\n  let externalConversationId = reference.externalConversationId ?? null\n\n  if (!externalConversationId && reference.messageId) {\n    // The message is linked to a channel directly \u2014 `MessageChannelLink` carries\n    // a denormalized channel type, so this is the cheapest hop when it exists.\n    const link = await findOneWithDecryption(\n      em,\n      MessageChannelLink,\n      { messageId: reference.messageId, ...baseFilter },\n      undefined,\n      dscope,\n    )\n    if (link?.channelType) return link.channelType\n    externalConversationId = link?.externalConversationId ?? null\n  }\n\n  if (!externalConversationId) return null\n\n  const conversation = await findOneWithDecryption(\n    em,\n    ExternalConversation,\n    { id: externalConversationId, ...baseFilter },\n    undefined,\n    dscope,\n  )\n  if (!conversation?.channelId) return null\n\n  const channel = await findOneWithDecryption(\n    em,\n    CommunicationChannel,\n    { id: conversation.channelId, ...baseFilter, deletedAt: null },\n    undefined,\n    dscope,\n  )\n  return channel?.channelType ?? null\n}\n\n/**\n * Same contract, but never throws: a lookup failure degrades to \"unknown\" so a\n * transient database error cannot turn into a 500 on an otherwise valid compose.\n * Unknown is the safe answer \u2014 the messages validator fails closed on it.\n */\nexport async function resolveChannelTypeSafely(\n  container: AppContainer,\n  scope: ChannelTypeScope,\n  reference: ChannelTypeReference,\n): Promise<string | null> {\n  try {\n    return await resolveChannelType(container, scope, reference)\n  } catch (err) {\n    logger.warn('channel type resolution failed, treating the channel as unknown', { err })\n    return null\n  }\n}\n\n/** DI service type for cross-module callers (resolve `communicationChannelsResolveChannelType`). */\nexport type ResolveChannelTypeService = typeof resolveChannelTypeSafely\n"],
-  "mappings": "AAEA,SAAS,6BAA6B;AACtC,SAAS,oBAAoB;AAC7B,SAAS,sBAAsB,sBAAsB,0BAA0B;AAE/E,MAAM,SAAS,aAAa,wBAAwB,EAAE,MAAM,EAAE,WAAW,uBAAuB,CAAC;AA2BjG,eAAsB,mBACpB,WACA,OACA,WACwB;AACxB,QAAM,KAAM,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC3D,QAAM,SAAS,EAAE,UAAU,MAAM,UAAU,gBAAgB,MAAM,kBAAkB,KAAK;AACxF,QAAM,aAAa,EAAE,UAAU,MAAM,UAAU,gBAAgB,MAAM,kBAAkB,KAAK;AAE5F,MAAI,yBAAyB,UAAU,0BAA0B;AAEjE,MAAI,CAAC,0BAA0B,UAAU,WAAW;AAGlD,UAAM,OAAO,MAAM;AAAA,MACjB;AAAA,MACA;AAAA,MACA,EAAE,WAAW,UAAU,WAAW,GAAG,WAAW;AAAA,MAChD;AAAA,MACA;AAAA,IACF;AACA,QAAI,MAAM,YAAa,QAAO,KAAK;AACnC,6BAAyB,MAAM,0BAA0B;AAAA,EAC3D;AAEA,MAAI,CAAC,uBAAwB,QAAO;AAEpC,QAAM,eAAe,MAAM;AAAA,IACzB;AAAA,IACA;AAAA,IACA,EAAE,IAAI,wBAAwB,GAAG,WAAW;AAAA,IAC5C;AAAA,IACA;AAAA,EACF;AACA,MAAI,CAAC,cAAc,UAAW,QAAO;AAErC,QAAM,UAAU,MAAM;AAAA,IACpB;AAAA,IACA;AAAA,IACA,EAAE,IAAI,aAAa,WAAW,GAAG,YAAY,WAAW,KAAK;AAAA,IAC7D;AAAA,IACA;AAAA,EACF;AACA,SAAO,SAAS,eAAe;AACjC;AAOA,eAAsB,yBACpB,WACA,OACA,WACwB;AACxB,MAAI;AACF,WAAO,MAAM,mBAAmB,WAAW,OAAO,SAAS;AAAA,EAC7D,SAAS,KAAK;AACZ,WAAO,KAAK,mEAAmE,EAAE,IAAI,CAAC;AACtF,WAAO;AAAA,EACT;AACF;",
-  "names": []
-}

package/dist/modules/customers/backend/customers/deals/pipeline/components/toneClasses.js

@@ -1,18 +0,0 @@
-const TONE_DOT_CLASS = {
-  success: "bg-status-success-icon",
-  error: "bg-status-error-icon",
-  warning: "bg-status-warning-icon",
-  info: "bg-status-info-icon",
-  neutral: "bg-status-neutral-icon",
-  brand: "bg-brand-violet",
-  pink: "bg-status-pink-icon"
-};
-function toneToDotClass(tone, fallback = "bg-status-neutral-icon") {
-  if (tone && tone in TONE_DOT_CLASS) return TONE_DOT_CLASS[tone];
-  return fallback;
-}
-export {
-  TONE_DOT_CLASS,
-  toneToDotClass
-};
-//# sourceMappingURL=toneClasses.js.map

package/dist/modules/customers/backend/customers/deals/pipeline/components/toneClasses.js.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../../../../../../../../src/modules/customers/backend/customers/deals/pipeline/components/toneClasses.ts"],
-  "sourcesContent": ["import type { FilterOptionTone } from '@open-mercato/shared/lib/query/advanced-filter'\n\n// Saturated icon tokens shared by the kanban lane accent bar and the status filter\n// pills, so both surfaces render the same tone identically (#5107 review).\nexport const TONE_DOT_CLASS: Record<FilterOptionTone, string> = {\n  success: 'bg-status-success-icon',\n  error: 'bg-status-error-icon',\n  warning: 'bg-status-warning-icon',\n  info: 'bg-status-info-icon',\n  neutral: 'bg-status-neutral-icon',\n  brand: 'bg-brand-violet',\n  pink: 'bg-status-pink-icon',\n}\n\nexport function toneToDotClass(\n  tone: FilterOptionTone | null | undefined,\n  fallback = 'bg-status-neutral-icon',\n): string {\n  if (tone && tone in TONE_DOT_CLASS) return TONE_DOT_CLASS[tone]\n  return fallback\n}\n"],
-  "mappings": "AAIO,MAAM,iBAAmD;AAAA,EAC9D,SAAS;AAAA,EACT,OAAO;AAAA,EACP,SAAS;AAAA,EACT,MAAM;AAAA,EACN,SAAS;AAAA,EACT,OAAO;AAAA,EACP,MAAM;AACR;AAEO,SAAS,eACd,MACA,WAAW,0BACH;AACR,MAAI,QAAQ,QAAQ,eAAgB,QAAO,eAAe,IAAI;AAC9D,SAAO;AACT;",
-  "names": []
-}

package/dist/modules/customers/lib/calendar/participantIdentity.js

@@ -1,9 +0,0 @@
-function participantActorKey(participant) {
-  if (participant.userId) return `user:${participant.userId}`;
-  const email = participant.email?.trim().toLowerCase();
-  return email ? `email:${email}` : null;
-}
-export {
-  participantActorKey
-};
-//# sourceMappingURL=participantIdentity.js.map

package/dist/modules/customers/lib/calendar/participantIdentity.js.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../../../../../src/modules/customers/lib/calendar/participantIdentity.ts"],
-  "sourcesContent": ["/**\n * The one canonical actor key for a calendar participant.\n *\n * A staff/customer attendee is identified by `userId`. An external guest has no\n * record in the system, so the normalized email is the only stable identity it\n * carries. Mapping, dedupe, conflict detection and the editor's conflict-probe\n * dependency key all derive their key from here, so a guest is treated as the\n * same actor across events instead of dropping out of actor comparisons.\n *\n * Returns `null` for a participant with neither \u2014 such a participant cannot be\n * compared to any other and must never collide with one that can.\n */\nexport function participantActorKey(participant: { userId?: string; email?: string }): string | null {\n  if (participant.userId) return `user:${participant.userId}`\n  const email = participant.email?.trim().toLowerCase()\n  return email ? `email:${email}` : null\n}\n"],
-  "mappings": "AAYO,SAAS,oBAAoB,aAAiE;AACnG,MAAI,YAAY,OAAQ,QAAO,QAAQ,YAAY,MAAM;AACzD,QAAM,QAAQ,YAAY,OAAO,KAAK,EAAE,YAAY;AACpD,SAAO,QAAQ,SAAS,KAAK,KAAK;AACpC;",
-  "names": []
-}

package/dist/modules/customers/lib/closureStage.js

@@ -1,45 +0,0 @@
-import { findWithDecryption } from "@open-mercato/shared/lib/encryption/find";
-import { CustomerPipelineStage } from "../data/entities.js";
-const TERMINAL_PIPELINE_STAGE_LABELS = {
-  won: /* @__PURE__ */ new Set(["won", "win", "closed won", "closed win"]),
-  lost: /* @__PURE__ */ new Set(["lost", "loose", "closed lost", "closed loose"])
-};
-function dealClosureOutcomeFromStatus(status) {
-  const normalized = typeof status === "string" ? status.trim().toLowerCase() : status;
-  if (normalized === "win" || normalized === "won") return "won";
-  if (normalized === "loose" || normalized === "lost") return "lost";
-  return null;
-}
-function normalizePipelineStageLabel(value) {
-  return value.trim().toLowerCase().replace(/[^a-z0-9]+/g, " ").trim();
-}
-async function loadClosurePipelineStageSnapshot(em, input) {
-  if (!input.pipelineId) return null;
-  const stages = await findWithDecryption(
-    em,
-    CustomerPipelineStage,
-    {
-      pipelineId: input.pipelineId,
-      tenantId: input.tenantId,
-      organizationId: input.organizationId
-    },
-    { orderBy: { order: "ASC" } },
-    { tenantId: input.tenantId, organizationId: input.organizationId }
-  );
-  const aliases = TERMINAL_PIPELINE_STAGE_LABELS[input.closureOutcome];
-  const stage = stages.find((candidate) => aliases.has(normalizePipelineStageLabel(candidate.label)));
-  if (!stage) return null;
-  return {
-    id: stage.id,
-    pipelineId: stage.pipelineId,
-    label: stage.label,
-    order: stage.order
-  };
-}
-export {
-  TERMINAL_PIPELINE_STAGE_LABELS,
-  dealClosureOutcomeFromStatus,
-  loadClosurePipelineStageSnapshot,
-  normalizePipelineStageLabel
-};
-//# sourceMappingURL=closureStage.js.map

package/dist/modules/customers/lib/closureStage.js.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../../../../src/modules/customers/lib/closureStage.ts"],
-  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport { findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { CustomerPipelineStage } from '../data/entities'\n\nexport type DealClosureOutcome = 'won' | 'lost'\n\nexport type PipelineStageSnapshot = {\n  id: string\n  pipelineId: string\n  label: string\n  order: number\n}\n\n// Stage labels that mark a pipeline as terminal for a given closure outcome. Matching is\n// label-based because stages are tenant-configurable rows; see #5107.\nexport const TERMINAL_PIPELINE_STAGE_LABELS: Record<DealClosureOutcome, ReadonlySet<string>> = {\n  won: new Set(['won', 'win', 'closed won', 'closed win']),\n  lost: new Set(['lost', 'loose', 'closed lost', 'closed loose']),\n}\n\n/**\n * Map a deal status spelling (UI `win`/`loose` or AI `won`/`lost`) to its closure\n * outcome. Case-insensitive because callers such as the AI tool pass free-form model\n * text through, while every persisted status is lower-case.\n */\nexport function dealClosureOutcomeFromStatus(status: string | null | undefined): DealClosureOutcome | null {\n  const normalized = typeof status === 'string' ? status.trim().toLowerCase() : status\n  if (normalized === 'win' || normalized === 'won') return 'won'\n  if (normalized === 'loose' || normalized === 'lost') return 'lost'\n  return null\n}\n\nexport function normalizePipelineStageLabel(value: string): string {\n  return value\n    .trim()\n    .toLowerCase()\n    .replace(/[^a-z0-9]+/g, ' ')\n    .trim()\n}\n\n/**\n * Resolve the terminal stage of the deal's pipeline for a closure outcome, so every\n * writer (command, AI tool preview) agrees on where a closed deal lands (#5107).\n */\nexport async function loadClosurePipelineStageSnapshot(\n  em: EntityManager,\n  input: {\n    pipelineId: string | null\n    closureOutcome: DealClosureOutcome\n    tenantId: string\n    organizationId: string\n  },\n): Promise<PipelineStageSnapshot | null> {\n  if (!input.pipelineId) return null\n\n  const stages = await findWithDecryption(\n    em,\n    CustomerPipelineStage,\n    {\n      pipelineId: input.pipelineId,\n      tenantId: input.tenantId,\n      organizationId: input.organizationId,\n    },\n    { orderBy: { order: 'ASC' } },\n    { tenantId: input.tenantId, organizationId: input.organizationId },\n  )\n  const aliases = TERMINAL_PIPELINE_STAGE_LABELS[input.closureOutcome]\n  const stage = stages.find((candidate) => aliases.has(normalizePipelineStageLabel(candidate.label)))\n  if (!stage) return null\n  return {\n    id: stage.id,\n    pipelineId: stage.pipelineId,\n    label: stage.label,\n    order: stage.order,\n  }\n}\n"],
-  "mappings": "AACA,SAAS,0BAA0B;AACnC,SAAS,6BAA6B;AAa/B,MAAM,iCAAkF;AAAA,EAC7F,KAAK,oBAAI,IAAI,CAAC,OAAO,OAAO,cAAc,YAAY,CAAC;AAAA,EACvD,MAAM,oBAAI,IAAI,CAAC,QAAQ,SAAS,eAAe,cAAc,CAAC;AAChE;AAOO,SAAS,6BAA6B,QAA8D;AACzG,QAAM,aAAa,OAAO,WAAW,WAAW,OAAO,KAAK,EAAE,YAAY,IAAI;AAC9E,MAAI,eAAe,SAAS,eAAe,MAAO,QAAO;AACzD,MAAI,eAAe,WAAW,eAAe,OAAQ,QAAO;AAC5D,SAAO;AACT;AAEO,SAAS,4BAA4B,OAAuB;AACjE,SAAO,MACJ,KAAK,EACL,YAAY,EACZ,QAAQ,eAAe,GAAG,EAC1B,KAAK;AACV;AAMA,eAAsB,iCACpB,IACA,OAMuC;AACvC,MAAI,CAAC,MAAM,WAAY,QAAO;AAE9B,QAAM,SAAS,MAAM;AAAA,IACnB;AAAA,IACA;AAAA,IACA;AAAA,MACE,YAAY,MAAM;AAAA,MAClB,UAAU,MAAM;AAAA,MAChB,gBAAgB,MAAM;AAAA,IACxB;AAAA,IACA,EAAE,SAAS,EAAE,OAAO,MAAM,EAAE;AAAA,IAC5B,EAAE,UAAU,MAAM,UAAU,gBAAgB,MAAM,eAAe;AAAA,EACnE;AACA,QAAM,UAAU,+BAA+B,MAAM,cAAc;AACnE,QAAM,QAAQ,OAAO,KAAK,CAAC,cAAc,QAAQ,IAAI,4BAA4B,UAAU,KAAK,CAAC,CAAC;AAClG,MAAI,CAAC,MAAO,QAAO;AACnB,SAAO;AAAA,IACL,IAAI,MAAM;AAAA,IACV,YAAY,MAAM;AAAA,IAClB,OAAO,MAAM;AAAA,IACb,OAAO,MAAM;AAAA,EACf;AACF;",
-  "names": []
-}

package/dist/modules/customers/lib/detailReadAccess.js

@@ -1,12 +0,0 @@
-import { NextResponse } from "next/server";
-import {
-  isOrganizationReadAccessAllowed
-} from "@open-mercato/core/modules/directory/utils/organizationScopeGuard";
-function denyCustomerDetailReadAsNotFound(input, notFoundMessage) {
-  if (isOrganizationReadAccessAllowed(input)) return null;
-  return NextResponse.json({ error: notFoundMessage }, { status: 404 });
-}
-export {
-  denyCustomerDetailReadAsNotFound
-};
-//# sourceMappingURL=detailReadAccess.js.map

package/dist/modules/customers/lib/detailReadAccess.js.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../../../../src/modules/customers/lib/detailReadAccess.ts"],
-  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport {\n  isOrganizationReadAccessAllowed,\n  type OrganizationReadAccessInput,\n} from '@open-mercato/core/modules/directory/utils/organizationScopeGuard'\n\n/**\n * Single-record customers detail routes (person / company / deal) must not leak\n * whether a record exists through the organization-scope check.\n *\n * The API dispatcher already enforces each route's `metadata.requireFeatures`\n * before the handler runs, returning a uniform `403` for callers who lack the\n * grant \u2014 so that path never distinguishes an existing id from a missing one.\n * The only remaining existence signal is the *post-load* organization guard: a\n * caller who holds the feature but whose scope excludes the record's\n * organization previously received `403` (record exists in another org) while a\n * non-existent id received `404`. That 403-vs-404 split is an existence oracle\n * (issue #5504).\n *\n * Collapse the organization-scope denial into the route's own not-found\n * response so an out-of-scope caller cannot tell \"exists in an organization you\n * cannot see\" from \"does not exist\" \u2014 the shape the api_keys hardening\n * (#4033 / PR-4051) established. Sharing this decision keeps the three customers\n * detail routes from drifting apart again.\n *\n * @returns the `404` response to return when read access is denied, or `null`\n * when the caller may read the record.\n */\nexport function denyCustomerDetailReadAsNotFound(\n  input: OrganizationReadAccessInput,\n  notFoundMessage: string,\n): NextResponse | null {\n  if (isOrganizationReadAccessAllowed(input)) return null\n  return NextResponse.json({ error: notFoundMessage }, { status: 404 })\n}\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAC7B;AAAA,EACE;AAAA,OAEK;AAwBA,SAAS,iCACd,OACA,iBACqB;AACrB,MAAI,gCAAgC,KAAK,EAAG,QAAO;AACnD,SAAO,aAAa,KAAK,EAAE,OAAO,gBAAgB,GAAG,EAAE,QAAQ,IAAI,CAAC;AACtE;",
-  "names": []
-}

package/dist/modules/data_sync/lib/abandoned-run.js

@@ -1,19 +0,0 @@
-async function failAbandonedRun(payload, info) {
-  const data = payload;
-  const runId = data?.payload?.runId;
-  const scope = data?.payload?.scope;
-  if (typeof runId !== "string" || typeof scope?.organizationId !== "string" || typeof scope?.tenantId !== "string") return;
-  const runScope = { organizationId: scope.organizationId, tenantId: scope.tenantId };
-  const errorMessage = `the queue abandoned this run's job without running it: ${info.reason}`;
-  const { createRequestContainer } = await import("@open-mercato/shared/lib/di/container");
-  const container = await createRequestContainer();
-  const runService = container.resolve("dataSyncRunService");
-  const run = await runService.markStatus(runId, "failed", runScope, errorMessage);
-  if (!run?.progressJobId) return;
-  const progressService = container.resolve("progressService");
-  await progressService.failJob(run.progressJobId, { errorMessage }, runScope);
-}
-export {
-  failAbandonedRun
-};
-//# sourceMappingURL=abandoned-run.js.map

package/dist/modules/data_sync/lib/abandoned-run.js.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../../../../src/modules/data_sync/lib/abandoned-run.ts"],
-  "sourcesContent": ["import type { AbandonedJobInfo } from '@open-mercato/queue'\n\n/**\n * Fail the run behind a job the queue gave up on.\n *\n * A resumable data_sync job is ONE long-lived job for a whole run \u2014 `runImport` is entered once and\n * stays there for the duration, which for a full backfill is days. Every worker death (a deploy, an\n * OOM) therefore stalls that job, and BullMQ's stalled counter is cumulative for the job's life:\n * past `DATA_SYNC_MAX_STALLED_COUNT` it writes a deferred failure and the next worker fails the job\n * BEFORE calling the processor.\n *\n * So `runImport` never runs, never throws, and never finalizes \u2014 and `sync_runs` is left saying\n * `running` for a run nothing is running, forever. That is the residual state `queue-policy.ts`\n * describes as what remains after a job exhausts its stall budget; this repairs it.\n *\n * It only ever moves a non-terminal run: `markStatus` refuses to overwrite `completed` / `failed` /\n * `cancelled`, so a job abandoned after its run has ended is a no-op. `onJobAbandoned` may deliver\n * the same job more than once, which for the same reason is also a no-op.\n *\n * The run's progress job is failed alongside it, the way the worker's own catch path does in\n * `workers/sync-import.ts`. Without that the two halves disagree \u2014 the run reads `failed` while the\n * operation still shows as in flight in the top bar \u2014 until the progress staleness sweep eventually\n * fails it with a generic no-heartbeat message instead of the reason the queue recorded.\n */\nexport async function failAbandonedRun(payload: unknown, info: AbandonedJobInfo): Promise<void> {\n  const data = payload as { payload?: { runId?: unknown; scope?: { organizationId?: unknown; tenantId?: unknown } } } | undefined\n  const runId = data?.payload?.runId\n  const scope = data?.payload?.scope\n  // Nothing to repair without both: the run row is keyed by id AND tenant scope.\n  if (typeof runId !== 'string' || typeof scope?.organizationId !== 'string' || typeof scope?.tenantId !== 'string') return\n\n  const runScope = { organizationId: scope.organizationId, tenantId: scope.tenantId }\n  const errorMessage = `the queue abandoned this run's job without running it: ${info.reason}`\n\n  const { createRequestContainer } = await import('@open-mercato/shared/lib/di/container')\n  const container = await createRequestContainer()\n  const runService = container.resolve('dataSyncRunService') as {\n    markStatus(\n      runId: string,\n      status: string,\n      scope: { organizationId: string; tenantId: string },\n      error?: string,\n    ): Promise<{ progressJobId?: string | null } | null>\n  }\n  const run = await runService.markStatus(runId, 'failed', runScope, errorMessage)\n  if (!run?.progressJobId) return\n\n  const progressService = container.resolve('progressService') as {\n    failJob(\n      jobId: string,\n      input: { errorMessage: string },\n      ctx: { organizationId: string; tenantId: string },\n    ): Promise<unknown>\n  }\n  await progressService.failJob(run.progressJobId, { errorMessage }, runScope)\n}\n"],
-  "mappings": "AAwBA,eAAsB,iBAAiB,SAAkB,MAAuC;AAC9F,QAAM,OAAO;AACb,QAAM,QAAQ,MAAM,SAAS;AAC7B,QAAM,QAAQ,MAAM,SAAS;AAE7B,MAAI,OAAO,UAAU,YAAY,OAAO,OAAO,mBAAmB,YAAY,OAAO,OAAO,aAAa,SAAU;AAEnH,QAAM,WAAW,EAAE,gBAAgB,MAAM,gBAAgB,UAAU,MAAM,SAAS;AAClF,QAAM,eAAe,0DAA0D,KAAK,MAAM;AAE1F,QAAM,EAAE,uBAAuB,IAAI,MAAM,OAAO,uCAAuC;AACvF,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,aAAa,UAAU,QAAQ,oBAAoB;AAQzD,QAAM,MAAM,MAAM,WAAW,WAAW,OAAO,UAAU,UAAU,YAAY;AAC/E,MAAI,CAAC,KAAK,cAAe;AAEzB,QAAM,kBAAkB,UAAU,QAAQ,iBAAiB;AAO3D,QAAM,gBAAgB,QAAQ,IAAI,eAAe,EAAE,aAAa,GAAG,QAAQ;AAC7E;",
-  "names": []
-}

package/dist/modules/devices/api/deviceSerialization.js

@@ -1,46 +0,0 @@
-import { z } from "zod";
-import { toDeprecatedSnakeCaseAliases, toIso } from "./deviceList.js";
-function serializeDeviceDetail(device) {
-  const camel = {
-    id: device.id,
-    userId: device.userId,
-    deviceId: device.deviceId,
-    platform: device.platform,
-    clientAppVersion: device.clientAppVersion ?? null,
-    osVersion: device.osVersion ?? null,
-    pushProvider: device.pushProvider ?? null,
-    pushTokenUpdatedAt: toIso(device.pushTokenUpdatedAt),
-    lastSeenAt: toIso(device.lastSeenAt),
-    createdAt: toIso(device.createdAt),
-    updatedAt: toIso(device.updatedAt)
-  };
-  return { ...camel, ...toDeprecatedSnakeCaseAliases(camel) };
-}
-const deprecatedAlias = (of) => `Deprecated alias for \`${of}\`; removed in the next minor release.`;
-const deviceDetailItemSchema = z.object({
-  id: z.string().uuid(),
-  userId: z.string().uuid(),
-  deviceId: z.string(),
-  platform: z.enum(["ios", "android", "web"]),
-  clientAppVersion: z.string().nullable(),
-  osVersion: z.string().nullable(),
-  pushProvider: z.string().nullable(),
-  pushTokenUpdatedAt: z.string().nullable(),
-  lastSeenAt: z.string().nullable(),
-  createdAt: z.string().nullable(),
-  updatedAt: z.string().nullable(),
-  user_id: z.string().uuid().describe(deprecatedAlias("userId")),
-  device_id: z.string().describe(deprecatedAlias("deviceId")),
-  client_app_version: z.string().nullable().describe(deprecatedAlias("clientAppVersion")),
-  os_version: z.string().nullable().describe(deprecatedAlias("osVersion")),
-  push_provider: z.string().nullable().describe(deprecatedAlias("pushProvider")),
-  push_token_updated_at: z.string().nullable().describe(deprecatedAlias("pushTokenUpdatedAt")),
-  last_seen_at: z.string().nullable().describe(deprecatedAlias("lastSeenAt")),
-  created_at: z.string().nullable().describe(deprecatedAlias("createdAt")),
-  updated_at: z.string().nullable().describe(deprecatedAlias("updatedAt"))
-});
-export {
-  deviceDetailItemSchema,
-  serializeDeviceDetail
-};
-//# sourceMappingURL=deviceSerialization.js.map

package/dist/modules/devices/api/deviceSerialization.js.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../../../../src/modules/devices/api/deviceSerialization.ts"],
-  "sourcesContent": ["import { z } from 'zod'\nimport type { UserDevice } from '../data/entities'\nimport { toDeprecatedSnakeCaseAliases, toIso } from './deviceList'\n\n// Detail contract for `GET /api/devices/admin/devices/:id`. Keys are camelCase like every other\n// module's responses (#5513); the snake_case keys stay alongside as deprecated aliases for one minor\n// version, per the deprecation protocol in BACKWARD_COMPATIBILITY.md \u00A7 7.\n// push_token is a secret and is never returned.\nexport function serializeDeviceDetail(device: UserDevice): Record<string, unknown> {\n  const camel = {\n    id: device.id,\n    userId: device.userId,\n    deviceId: device.deviceId,\n    platform: device.platform,\n    clientAppVersion: device.clientAppVersion ?? null,\n    osVersion: device.osVersion ?? null,\n    pushProvider: device.pushProvider ?? null,\n    pushTokenUpdatedAt: toIso(device.pushTokenUpdatedAt),\n    lastSeenAt: toIso(device.lastSeenAt),\n    createdAt: toIso(device.createdAt),\n    updatedAt: toIso(device.updatedAt),\n  }\n  return { ...camel, ...toDeprecatedSnakeCaseAliases(camel) }\n}\n\n// See the note in ./deviceList \u2014 the rendered deprecation notice lives on the endpoint description.\nconst deprecatedAlias = (of: string) => `Deprecated alias for \\`${of}\\`; removed in the next minor release.`\n\nexport const deviceDetailItemSchema = z.object({\n  id: z.string().uuid(),\n  userId: z.string().uuid(),\n  deviceId: z.string(),\n  platform: z.enum(['ios', 'android', 'web']),\n  clientAppVersion: z.string().nullable(),\n  osVersion: z.string().nullable(),\n  pushProvider: z.string().nullable(),\n  pushTokenUpdatedAt: z.string().nullable(),\n  lastSeenAt: z.string().nullable(),\n  createdAt: z.string().nullable(),\n  updatedAt: z.string().nullable(),\n  user_id: z.string().uuid().describe(deprecatedAlias('userId')),\n  device_id: z.string().describe(deprecatedAlias('deviceId')),\n  client_app_version: z.string().nullable().describe(deprecatedAlias('clientAppVersion')),\n  os_version: z.string().nullable().describe(deprecatedAlias('osVersion')),\n  push_provider: z.string().nullable().describe(deprecatedAlias('pushProvider')),\n  push_token_updated_at: z.string().nullable().describe(deprecatedAlias('pushTokenUpdatedAt')),\n  last_seen_at: z.string().nullable().describe(deprecatedAlias('lastSeenAt')),\n  created_at: z.string().nullable().describe(deprecatedAlias('createdAt')),\n  updated_at: z.string().nullable().describe(deprecatedAlias('updatedAt')),\n})\n"],
-  "mappings": "AAAA,SAAS,SAAS;AAElB,SAAS,8BAA8B,aAAa;AAM7C,SAAS,sBAAsB,QAA6C;AACjF,QAAM,QAAQ;AAAA,IACZ,IAAI,OAAO;AAAA,IACX,QAAQ,OAAO;AAAA,IACf,UAAU,OAAO;AAAA,IACjB,UAAU,OAAO;AAAA,IACjB,kBAAkB,OAAO,oBAAoB;AAAA,IAC7C,WAAW,OAAO,aAAa;AAAA,IAC/B,cAAc,OAAO,gBAAgB;AAAA,IACrC,oBAAoB,MAAM,OAAO,kBAAkB;AAAA,IACnD,YAAY,MAAM,OAAO,UAAU;AAAA,IACnC,WAAW,MAAM,OAAO,SAAS;AAAA,IACjC,WAAW,MAAM,OAAO,SAAS;AAAA,EACnC;AACA,SAAO,EAAE,GAAG,OAAO,GAAG,6BAA6B,KAAK,EAAE;AAC5D;AAGA,MAAM,kBAAkB,CAAC,OAAe,0BAA0B,EAAE;AAE7D,MAAM,yBAAyB,EAAE,OAAO;AAAA,EAC7C,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,EACpB,QAAQ,EAAE,OAAO,EAAE,KAAK;AAAA,EACxB,UAAU,EAAE,OAAO;AAAA,EACnB,UAAU,EAAE,KAAK,CAAC,OAAO,WAAW,KAAK,CAAC;AAAA,EAC1C,kBAAkB,EAAE,OAAO,EAAE,SAAS;AAAA,EACtC,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,EAC/B,cAAc,EAAE,OAAO,EAAE,SAAS;AAAA,EAClC,oBAAoB,EAAE,OAAO,EAAE,SAAS;AAAA,EACxC,YAAY,EAAE,OAAO,EAAE,SAAS;AAAA,EAChC,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,EAC/B,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,EAC/B,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,gBAAgB,QAAQ,CAAC;AAAA,EAC7D,WAAW,EAAE,OAAO,EAAE,SAAS,gBAAgB,UAAU,CAAC;AAAA,EAC1D,oBAAoB,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,gBAAgB,kBAAkB,CAAC;AAAA,EACtF,YAAY,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,gBAAgB,WAAW,CAAC;AAAA,EACvE,eAAe,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,gBAAgB,cAAc,CAAC;AAAA,EAC7E,uBAAuB,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,gBAAgB,oBAAoB,CAAC;AAAA,EAC3F,cAAc,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,gBAAgB,YAAY,CAAC;AAAA,EAC1E,YAAY,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,gBAAgB,WAAW,CAAC;AAAA,EACvE,YAAY,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,gBAAgB,WAAW,CAAC;AACzE,CAAC;",
-  "names": []
-}

package/dist/modules/directory/services/organizationHierarchyService.js

@@ -1,29 +0,0 @@
-import { findOneWithDecryption } from "@open-mercato/shared/lib/encryption/find";
-import { Organization } from "../data/entities.js";
-function normalizeIds(values) {
-  if (!Array.isArray(values)) return [];
-  return Array.from(new Set(values.map((value) => typeof value === "string" ? value.trim() : "").filter(Boolean)));
-}
-class DefaultOrganizationHierarchyService {
-  constructor(em) {
-    this.em = em;
-  }
-  async resolveAncestorIds(input) {
-    const organization = await findOneWithDecryption(
-      this.em,
-      Organization,
-      {
-        id: input.organizationId,
-        tenant: input.tenantId,
-        deletedAt: null
-      },
-      { fields: ["id", "ancestorIds"] },
-      { tenantId: input.tenantId, organizationId: input.organizationId }
-    );
-    return organization ? normalizeIds(organization.ancestorIds) : null;
-  }
-}
-export {
-  DefaultOrganizationHierarchyService
-};
-//# sourceMappingURL=organizationHierarchyService.js.map

package/dist/modules/directory/services/organizationHierarchyService.js.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../../../../src/modules/directory/services/organizationHierarchyService.ts"],
-  "sourcesContent": ["import type { FilterQuery } from '@mikro-orm/core'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport type { OrganizationHierarchyService } from '@open-mercato/shared/lib/auth/principal-service'\nimport { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { Organization } from '../data/entities'\n\nfunction normalizeIds(values: unknown): string[] {\n  if (!Array.isArray(values)) return []\n  return Array.from(new Set(values\n    .map((value) => typeof value === 'string' ? value.trim() : '')\n    .filter(Boolean)))\n}\n\nexport class DefaultOrganizationHierarchyService implements OrganizationHierarchyService {\n  constructor(private readonly em: EntityManager) {}\n\n  async resolveAncestorIds(input: {\n    tenantId: string\n    organizationId: string\n  }): Promise<string[] | null> {\n    const organization = await findOneWithDecryption(\n      this.em,\n      Organization,\n      {\n        id: input.organizationId,\n        tenant: input.tenantId,\n        deletedAt: null,\n      } as FilterQuery<Organization>,\n      { fields: ['id', 'ancestorIds'] },\n      { tenantId: input.tenantId, organizationId: input.organizationId },\n    )\n    return organization ? normalizeIds(organization.ancestorIds) : null\n  }\n}\n"],
-  "mappings": "AAGA,SAAS,6BAA6B;AACtC,SAAS,oBAAoB;AAE7B,SAAS,aAAa,QAA2B;AAC/C,MAAI,CAAC,MAAM,QAAQ,MAAM,EAAG,QAAO,CAAC;AACpC,SAAO,MAAM,KAAK,IAAI,IAAI,OACvB,IAAI,CAAC,UAAU,OAAO,UAAU,WAAW,MAAM,KAAK,IAAI,EAAE,EAC5D,OAAO,OAAO,CAAC,CAAC;AACrB;AAEO,MAAM,oCAA4E;AAAA,EACvF,YAA6B,IAAmB;AAAnB;AAAA,EAAoB;AAAA,EAEjD,MAAM,mBAAmB,OAGI;AAC3B,UAAM,eAAe,MAAM;AAAA,MACzB,KAAK;AAAA,MACL;AAAA,MACA;AAAA,QACE,IAAI,MAAM;AAAA,QACV,QAAQ,MAAM;AAAA,QACd,WAAW;AAAA,MACb;AAAA,MACA,EAAE,QAAQ,CAAC,MAAM,aAAa,EAAE;AAAA,MAChC,EAAE,UAAU,MAAM,UAAU,gBAAgB,MAAM,eAAe;AAAA,IACnE;AACA,WAAO,eAAe,aAAa,aAAa,WAAW,IAAI;AAAA,EACjE;AACF;",
-  "names": []
-}

package/dist/modules/directory/services/organizationScopeService.js

@@ -1,56 +0,0 @@
-import { resolveOrganizationScope, resolveOrganizationScopeForRequest } from "../utils/organizationScope.js";
-class DefaultOrganizationScopeService {
-  constructor(em, rbac, container) {
-    this.em = em;
-    this.rbac = rbac;
-    this.container = container;
-  }
-  resolve(input) {
-    const auth = input.auth;
-    if (input.freshAcl && auth?.sub) {
-      return this.resolveFresh({
-        auth,
-        selectedId: input.selectedId,
-        tenantId: input.tenantId
-      }).then((result) => result.scope);
-    }
-    return resolveOrganizationScope({
-      em: this.em,
-      rbac: this.rbac,
-      auth: input.auth,
-      selectedId: input.selectedId,
-      tenantId: input.tenantId
-    });
-  }
-  async resolveFresh(input) {
-    await this.rbac.invalidateUserCache(input.auth.sub);
-    const acl = await this.rbac.loadAcl(input.auth.sub, {
-      tenantId: input.tenantId ?? input.auth.tenantId ?? null,
-      organizationId: input.selectedId ?? input.auth.orgId ?? null
-    });
-    const freshRbac = {
-      loadAcl: async () => acl
-    };
-    const scope = await resolveOrganizationScope({
-      em: this.em,
-      rbac: freshRbac,
-      auth: input.auth,
-      selectedId: input.selectedId,
-      tenantId: input.tenantId
-    });
-    return { scope, acl };
-  }
-  resolveForRequest(input) {
-    return resolveOrganizationScopeForRequest({
-      container: this.container,
-      auth: input.auth,
-      request: input.request,
-      selectedId: input.selectedId,
-      tenantId: input.tenantId
-    });
-  }
-}
-export {
-  DefaultOrganizationScopeService
-};
-//# sourceMappingURL=organizationScopeService.js.map

package/dist/modules/directory/services/organizationScopeService.js.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../../../../src/modules/directory/services/organizationScopeService.ts"],
-  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport type { AwilixContainer } from 'awilix'\nimport type {\n  OrganizationScopeService,\n  OrganizationScopeRequest,\n} from '@open-mercato/shared/lib/auth/principal-service'\nimport type { AuthContext } from '@open-mercato/shared/lib/auth/server'\nimport { resolveOrganizationScope, resolveOrganizationScopeForRequest } from '../utils/organizationScope'\n\ntype OrganizationScopeRbac = {\n  invalidateUserCache(userId: string): Promise<void>\n  loadAcl(\n    userId: string,\n    scope: { tenantId: string | null; organizationId: string | null },\n  ): Promise<{ isSuperAdmin: boolean; features: string[]; organizations: string[] | null }>\n}\n\nexport class DefaultOrganizationScopeService implements OrganizationScopeService {\n  constructor(\n    private readonly em: EntityManager,\n    private readonly rbac: OrganizationScopeRbac,\n    private readonly container: AwilixContainer,\n  ) {}\n\n  resolve(input: {\n    auth: AuthContext | null | undefined\n    selectedId?: string | null\n    tenantId?: string | null\n    freshAcl?: boolean\n  }) {\n    const auth = input.auth\n    if (input.freshAcl && auth?.sub) {\n      return this.resolveFresh({\n        auth,\n        selectedId: input.selectedId,\n        tenantId: input.tenantId,\n      }).then((result) => result.scope)\n    }\n    return resolveOrganizationScope({\n      em: this.em,\n      rbac: this.rbac as Parameters<typeof resolveOrganizationScope>[0]['rbac'],\n      auth: input.auth,\n      selectedId: input.selectedId,\n      tenantId: input.tenantId,\n    })\n  }\n\n  async resolveFresh(input: {\n    auth: NonNullable<AuthContext>\n    selectedId?: string | null\n    tenantId?: string | null\n  }) {\n    await this.rbac.invalidateUserCache(input.auth.sub)\n    const acl = await this.rbac.loadAcl(input.auth.sub, {\n      tenantId: input.tenantId ?? input.auth.tenantId ?? null,\n      organizationId: input.selectedId ?? input.auth.orgId ?? null,\n    })\n    const freshRbac: Parameters<typeof resolveOrganizationScope>[0]['rbac'] = {\n      loadAcl: async () => acl,\n    }\n    const scope = await resolveOrganizationScope({\n      em: this.em,\n      rbac: freshRbac,\n      auth: input.auth,\n      selectedId: input.selectedId,\n      tenantId: input.tenantId,\n    })\n    return { scope, acl }\n  }\n\n  resolveForRequest(input: {\n    auth: AuthContext | null | undefined\n    request?: OrganizationScopeRequest\n    selectedId?: string | null\n    tenantId?: string | null\n  }) {\n    return resolveOrganizationScopeForRequest({\n      container: this.container,\n      auth: input.auth,\n      request: input.request,\n      selectedId: input.selectedId,\n      tenantId: input.tenantId,\n    })\n  }\n}\n"],
-  "mappings": "AAOA,SAAS,0BAA0B,0CAA0C;AAUtE,MAAM,gCAAoE;AAAA,EAC/E,YACmB,IACA,MACA,WACjB;AAHiB;AACA;AACA;AAAA,EAChB;AAAA,EAEH,QAAQ,OAKL;AACD,UAAM,OAAO,MAAM;AACnB,QAAI,MAAM,YAAY,MAAM,KAAK;AAC/B,aAAO,KAAK,aAAa;AAAA,QACvB;AAAA,QACA,YAAY,MAAM;AAAA,QAClB,UAAU,MAAM;AAAA,MAClB,CAAC,EAAE,KAAK,CAAC,WAAW,OAAO,KAAK;AAAA,IAClC;AACA,WAAO,yBAAyB;AAAA,MAC9B,IAAI,KAAK;AAAA,MACT,MAAM,KAAK;AAAA,MACX,MAAM,MAAM;AAAA,MACZ,YAAY,MAAM;AAAA,MAClB,UAAU,MAAM;AAAA,IAClB,CAAC;AAAA,EACH;AAAA,EAEA,MAAM,aAAa,OAIhB;AACD,UAAM,KAAK,KAAK,oBAAoB,MAAM,KAAK,GAAG;AAClD,UAAM,MAAM,MAAM,KAAK,KAAK,QAAQ,MAAM,KAAK,KAAK;AAAA,MAClD,UAAU,MAAM,YAAY,MAAM,KAAK,YAAY;AAAA,MACnD,gBAAgB,MAAM,cAAc,MAAM,KAAK,SAAS;AAAA,IAC1D,CAAC;AACD,UAAM,YAAoE;AAAA,MACxE,SAAS,YAAY;AAAA,IACvB;AACA,UAAM,QAAQ,MAAM,yBAAyB;AAAA,MAC3C,IAAI,KAAK;AAAA,MACT,MAAM;AAAA,MACN,MAAM,MAAM;AAAA,MACZ,YAAY,MAAM;AAAA,MAClB,UAAU,MAAM;AAAA,IAClB,CAAC;AACD,WAAO,EAAE,OAAO,IAAI;AAAA,EACtB;AAAA,EAEA,kBAAkB,OAKf;AACD,WAAO,mCAAmC;AAAA,MACxC,WAAW,KAAK;AAAA,MAChB,MAAM,MAAM;AAAA,MACZ,SAAS,MAAM;AAAA,MACf,YAAY,MAAM;AAAA,MAClB,UAAU,MAAM;AAAA,IAClB,CAAC;AAAA,EACH;AACF;",
-  "names": []
-}

package/dist/modules/integrations/backend/integrations/credential-secret-fields.js

@@ -1,55 +0,0 @@
-import { SECRET_CREDENTIAL_FIELD_TYPES } from "../../lib/credentials-masking.js";
-function buildCredentialEditValues(credentials, secretFieldsConfigured) {
-  const editValues = { ...credentials };
-  for (const [fieldKey, configured] of Object.entries(secretFieldsConfigured)) {
-    if (configured) delete editValues[fieldKey];
-  }
-  return editValues;
-}
-function buildCredentialSavePayload(values, fields, secretFieldsConfigured, deliberatelyClearedSecretFields = /* @__PURE__ */ new Set()) {
-  const credentials = { ...values };
-  const unchangedSecretFields = /* @__PURE__ */ new Set();
-  for (const field of fields) {
-    if (!SECRET_CREDENTIAL_FIELD_TYPES.has(field.type)) continue;
-    if (deliberatelyClearedSecretFields.has(field.key)) {
-      delete credentials[field.key];
-      continue;
-    }
-    if (!secretFieldsConfigured[field.key]) continue;
-    const value = credentials[field.key];
-    if (value !== void 0 && value !== "") continue;
-    delete credentials[field.key];
-    unchangedSecretFields.add(field.key);
-  }
-  return unchangedSecretFields.size > 0 ? { credentials, unchangedSecretFields: [...unchangedSecretFields] } : { credentials };
-}
-function buildIntegrationCredentialSavePayload(integrationId, values, fields, secretFieldsConfigured) {
-  const normalizedValues = { ...values };
-  const deliberatelyClearedSecretFields = /* @__PURE__ */ new Set();
-  if (integrationId === "storage_s3") {
-    const authMode = normalizedValues.authMode;
-    if (authMode !== "access_keys" && authMode !== "ambient") {
-      const hasKeys = Boolean(normalizedValues.accessKeyId || normalizedValues.secretAccessKey);
-      normalizedValues.authMode = hasKeys ? "access_keys" : "ambient";
-    }
-    if (normalizedValues.authMode === "ambient") {
-      delete normalizedValues.accessKeyId;
-      delete normalizedValues.secretAccessKey;
-      delete normalizedValues.sessionToken;
-      deliberatelyClearedSecretFields.add("secretAccessKey");
-      deliberatelyClearedSecretFields.add("sessionToken");
-    }
-  }
-  return buildCredentialSavePayload(
-    normalizedValues,
-    fields,
-    secretFieldsConfigured,
-    deliberatelyClearedSecretFields
-  );
-}
-export {
-  buildCredentialEditValues,
-  buildCredentialSavePayload,
-  buildIntegrationCredentialSavePayload
-};
-//# sourceMappingURL=credential-secret-fields.js.map

package/dist/modules/integrations/backend/integrations/credential-secret-fields.js.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../../../../../src/modules/integrations/backend/integrations/credential-secret-fields.ts"],
-  "sourcesContent": ["import type { IntegrationCredentialField } from '@open-mercato/shared/modules/integrations/types'\nimport { SECRET_CREDENTIAL_FIELD_TYPES } from '../../lib/credentials-masking'\n\nexport type SecretFieldsConfigured = Record<string, boolean>\n\nexport type CredentialSavePayload = {\n  credentials: Record<string, unknown>\n  unchangedSecretFields?: string[]\n}\n\nexport function buildCredentialEditValues(\n  credentials: Record<string, unknown>,\n  secretFieldsConfigured: SecretFieldsConfigured,\n): Record<string, unknown> {\n  const editValues = { ...credentials }\n\n  for (const [fieldKey, configured] of Object.entries(secretFieldsConfigured)) {\n    if (configured) delete editValues[fieldKey]\n  }\n\n  return editValues\n}\n\nexport function buildCredentialSavePayload(\n  values: Record<string, unknown>,\n  fields: readonly IntegrationCredentialField[],\n  secretFieldsConfigured: SecretFieldsConfigured,\n  deliberatelyClearedSecretFields: ReadonlySet<string> = new Set(),\n): CredentialSavePayload {\n  const credentials = { ...values }\n  const unchangedSecretFields = new Set<string>()\n\n  for (const field of fields) {\n    if (!SECRET_CREDENTIAL_FIELD_TYPES.has(field.type)) continue\n\n    if (deliberatelyClearedSecretFields.has(field.key)) {\n      delete credentials[field.key]\n      continue\n    }\n\n    if (!secretFieldsConfigured[field.key]) continue\n    const value = credentials[field.key]\n    if (value !== undefined && value !== '') continue\n\n    delete credentials[field.key]\n    unchangedSecretFields.add(field.key)\n  }\n\n  return unchangedSecretFields.size > 0\n    ? { credentials, unchangedSecretFields: [...unchangedSecretFields] }\n    : { credentials }\n}\n\nexport function buildIntegrationCredentialSavePayload(\n  integrationId: string,\n  values: Record<string, unknown>,\n  fields: readonly IntegrationCredentialField[],\n  secretFieldsConfigured: SecretFieldsConfigured,\n): CredentialSavePayload {\n  const normalizedValues = { ...values }\n  const deliberatelyClearedSecretFields = new Set<string>()\n\n  if (integrationId === 'storage_s3') {\n    const authMode = normalizedValues.authMode\n    if (authMode !== 'access_keys' && authMode !== 'ambient') {\n      const hasKeys = Boolean(normalizedValues.accessKeyId || normalizedValues.secretAccessKey)\n      normalizedValues.authMode = hasKeys ? 'access_keys' : 'ambient'\n    }\n    if (normalizedValues.authMode === 'ambient') {\n      delete normalizedValues.accessKeyId\n      delete normalizedValues.secretAccessKey\n      delete normalizedValues.sessionToken\n      deliberatelyClearedSecretFields.add('secretAccessKey')\n      deliberatelyClearedSecretFields.add('sessionToken')\n    }\n  }\n\n  return buildCredentialSavePayload(\n    normalizedValues,\n    fields,\n    secretFieldsConfigured,\n    deliberatelyClearedSecretFields,\n  )\n}\n"],
-  "mappings": "AACA,SAAS,qCAAqC;AASvC,SAAS,0BACd,aACA,wBACyB;AACzB,QAAM,aAAa,EAAE,GAAG,YAAY;AAEpC,aAAW,CAAC,UAAU,UAAU,KAAK,OAAO,QAAQ,sBAAsB,GAAG;AAC3E,QAAI,WAAY,QAAO,WAAW,QAAQ;AAAA,EAC5C;AAEA,SAAO;AACT;AAEO,SAAS,2BACd,QACA,QACA,wBACA,kCAAuD,oBAAI,IAAI,GACxC;AACvB,QAAM,cAAc,EAAE,GAAG,OAAO;AAChC,QAAM,wBAAwB,oBAAI,IAAY;AAE9C,aAAW,SAAS,QAAQ;AAC1B,QAAI,CAAC,8BAA8B,IAAI,MAAM,IAAI,EAAG;AAEpD,QAAI,gCAAgC,IAAI,MAAM,GAAG,GAAG;AAClD,aAAO,YAAY,MAAM,GAAG;AAC5B;AAAA,IACF;AAEA,QAAI,CAAC,uBAAuB,MAAM,GAAG,EAAG;AACxC,UAAM,QAAQ,YAAY,MAAM,GAAG;AACnC,QAAI,UAAU,UAAa,UAAU,GAAI;AAEzC,WAAO,YAAY,MAAM,GAAG;AAC5B,0BAAsB,IAAI,MAAM,GAAG;AAAA,EACrC;AAEA,SAAO,sBAAsB,OAAO,IAChC,EAAE,aAAa,uBAAuB,CAAC,GAAG,qBAAqB,EAAE,IACjE,EAAE,YAAY;AACpB;AAEO,SAAS,sCACd,eACA,QACA,QACA,wBACuB;AACvB,QAAM,mBAAmB,EAAE,GAAG,OAAO;AACrC,QAAM,kCAAkC,oBAAI,IAAY;AAExD,MAAI,kBAAkB,cAAc;AAClC,UAAM,WAAW,iBAAiB;AAClC,QAAI,aAAa,iBAAiB,aAAa,WAAW;AACxD,YAAM,UAAU,QAAQ,iBAAiB,eAAe,iBAAiB,eAAe;AACxF,uBAAiB,WAAW,UAAU,gBAAgB;AAAA,IACxD;AACA,QAAI,iBAAiB,aAAa,WAAW;AAC3C,aAAO,iBAAiB;AACxB,aAAO,iBAAiB;AACxB,aAAO,iBAAiB;AACxB,sCAAgC,IAAI,iBAAiB;AACrD,sCAAgC,IAAI,cAAc;AAAA,IACpD;AAAA,EACF;AAEA,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;",
-  "names": []
-}

package/dist/modules/messages/lib/channel-sender-identity.js

@@ -1,26 +0,0 @@
-const NON_EMAIL_SENDER_CHANNEL_TYPES = /* @__PURE__ */ new Set([
-  "discord",
-  "slack",
-  "teams",
-  "telegram",
-  "signal",
-  "whatsapp",
-  "messenger",
-  "instagram",
-  "sms",
-  "push"
-]);
-function channelTypeRequiresExternalEmail(channelType) {
-  if (typeof channelType !== "string") return true;
-  const normalized = channelType.trim().toLowerCase();
-  if (!normalized) return true;
-  return !NON_EMAIL_SENDER_CHANNEL_TYPES.has(normalized);
-}
-function listNonEmailSenderChannelTypes() {
-  return Array.from(NON_EMAIL_SENDER_CHANNEL_TYPES).sort((left, right) => left.localeCompare(right));
-}
-export {
-  channelTypeRequiresExternalEmail,
-  listNonEmailSenderChannelTypes
-};
-//# sourceMappingURL=channel-sender-identity.js.map

package/dist/modules/messages/lib/channel-sender-identity.js.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../../../../src/modules/messages/lib/channel-sender-identity.ts"],
-  "sourcesContent": ["/**\n * How the hub decides whether an external correspondent must be identified by an\n * email address.\n *\n * Background (#4975): `composeMessageSchema` used to require `externalEmail` for\n * every non-draft message with `visibility: 'public'` \u2014 which is every message\n * from an external sender. That assumption holds only for email-typed channels.\n * A Discord sender is a snowflake and has no address at all, so inbound Discord\n * failed validation deterministically and the ingest job died in the queue while\n * the channel still reported `Connected`.\n *\n * Variant A of the spec's \u00A7 Open decision \u2014 hub sender-identity contract makes\n * the requirement conditional on the originating channel type, and **fails\n * closed**: only a channel type this list positively recognizes as non-email\n * waives the requirement. An unrecognized, empty or absent channel type keeps\n * the pre-existing behaviour, so no current caller changes and a typo'd or\n * caller-asserted type cannot quietly switch a validation rule off.\n *\n * For these channels the sender identity is not lost \u2014 it is carried by\n * `ExternalMessage.sender_identifier` and joined 1:1 to the platform message\n * through `MessageChannelLink`.\n *\n * Adding a channel type here is additive and non-breaking: it only widens the\n * set of inputs the hub accepts.\n */\nconst NON_EMAIL_SENDER_CHANNEL_TYPES = new Set([\n  'discord',\n  'slack',\n  'teams',\n  'telegram',\n  'signal',\n  'whatsapp',\n  'messenger',\n  'instagram',\n  'sms',\n  'push',\n])\n\n/**\n * True when a message originating from `channelType` must carry an\n * `externalEmail` to be composed with `visibility: 'public'`.\n *\n * Fail-closed by design \u2014 see the note above.\n */\nexport function channelTypeRequiresExternalEmail(channelType?: string | null): boolean {\n  if (typeof channelType !== 'string') return true\n  const normalized = channelType.trim().toLowerCase()\n  if (!normalized) return true\n  return !NON_EMAIL_SENDER_CHANNEL_TYPES.has(normalized)\n}\n\n/** The recognized non-email channel types, for tests and diagnostics. */\nexport function listNonEmailSenderChannelTypes(): string[] {\n  return Array.from(NON_EMAIL_SENDER_CHANNEL_TYPES).sort((left, right) => left.localeCompare(right))\n}\n"],
-  "mappings": "AAyBA,MAAM,iCAAiC,oBAAI,IAAI;AAAA,EAC7C;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAQM,SAAS,iCAAiC,aAAsC;AACrF,MAAI,OAAO,gBAAgB,SAAU,QAAO;AAC5C,QAAM,aAAa,YAAY,KAAK,EAAE,YAAY;AAClD,MAAI,CAAC,WAAY,QAAO;AACxB,SAAO,CAAC,+BAA+B,IAAI,UAAU;AACvD;AAGO,SAAS,iCAA2C;AACzD,SAAO,MAAM,KAAK,8BAA8B,EAAE,KAAK,CAAC,MAAM,UAAU,KAAK,cAAc,KAAK,CAAC;AACnG;",
-  "names": []
-}

package/dist/modules/messages/lib/composeSourceChannelType.js

@@ -1,41 +0,0 @@
-import { z } from "zod";
-const EXTERNAL_CONVERSATION_SOURCE_ENTITY_TYPE = "communication_channels.external_conversation";
-const composeSourceHintSchema = z.object({
-  sourceEntityType: z.string().optional(),
-  sourceEntityId: z.string().uuid().optional(),
-  parentMessageId: z.string().uuid().optional()
-});
-function composeRequiresChannelTypeResolution(body) {
-  if (!body || typeof body !== "object") return false;
-  const raw = body;
-  if (raw.visibility !== "public") return false;
-  if (raw.isDraft === true) return false;
-  const externalEmail = raw.externalEmail;
-  return !(typeof externalEmail === "string" && externalEmail.trim().length > 0);
-}
-function tryResolveChannelTypeService(container) {
-  try {
-    return container.resolve("communicationChannelsResolveChannelType");
-  } catch {
-    return void 0;
-  }
-}
-async function resolveComposeSourceChannelType(container, scope, hint) {
-  const externalConversationId = hint.sourceEntityType === EXTERNAL_CONVERSATION_SOURCE_ENTITY_TYPE ? hint.sourceEntityId ?? null : null;
-  const messageId = hint.parentMessageId ?? null;
-  if (!externalConversationId && !messageId) return void 0;
-  const resolveChannelType = tryResolveChannelTypeService(container);
-  if (!resolveChannelType) return void 0;
-  const channelType = await resolveChannelType(container, scope, {
-    externalConversationId,
-    messageId
-  });
-  return channelType ?? void 0;
-}
-export {
-  EXTERNAL_CONVERSATION_SOURCE_ENTITY_TYPE,
-  composeRequiresChannelTypeResolution,
-  composeSourceHintSchema,
-  resolveComposeSourceChannelType
-};
-//# sourceMappingURL=composeSourceChannelType.js.map

package/dist/modules/messages/lib/composeSourceChannelType.js.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../../../../src/modules/messages/lib/composeSourceChannelType.ts"],
-  "sourcesContent": ["import { z } from 'zod'\n\n/**\n * Entity type a channel-backed conversation is exposed under on a message's\n * `sourceEntityType`. Written by `communication_channels`' inbound ingest.\n */\nconst EXTERNAL_CONVERSATION_SOURCE_ENTITY_TYPE = 'communication_channels.external_conversation'\n\n/**\n * The only parts of a compose body this resolution needs. Read defensively from\n * the raw request body, before the body is validated, because the validation\n * outcome itself depends on the answer (#4975).\n */\nexport const composeSourceHintSchema = z.object({\n  sourceEntityType: z.string().optional(),\n  sourceEntityId: z.string().uuid().optional(),\n  parentMessageId: z.string().uuid().optional(),\n})\n\nexport type ComposeSourceHint = z.infer<typeof composeSourceHintSchema>\n\n/**\n * Whether the compose validator can consult a resolved channel type at all.\n *\n * `sourceChannelType` is read in exactly one branch \u2014 a non-draft, public\n * message that carries no address. Every internal reply, every draft and every\n * public message that already supplies an address ignores it, so resolving it\n * for them is a DI resolve plus a database round-trip whose answer is\n * discarded. Mirrors `refineComposeMessage` and reads the raw body defensively,\n * because this runs before validation. Skipping resolution yields `undefined`,\n * which is already the fail-closed value.\n */\nexport function composeRequiresChannelTypeResolution(body: unknown): boolean {\n  if (!body || typeof body !== 'object') return false\n  const raw = body as Record<string, unknown>\n  if (raw.visibility !== 'public') return false\n  if (raw.isDraft === true) return false\n  const externalEmail = raw.externalEmail\n  return !(typeof externalEmail === 'string' && externalEmail.trim().length > 0)\n}\n\ntype ResolveChannelTypeService = (\n  container: ContainerLike,\n  scope: { tenantId: string; organizationId: string | null },\n  reference: { externalConversationId?: string | null; messageId?: string | null },\n) => Promise<string | null>\n\ntype ContainerLike = { resolve: <T = unknown>(name: string) => T }\n\nfunction tryResolveChannelTypeService(\n  container: ContainerLike,\n): ResolveChannelTypeService | undefined {\n  try {\n    return container.resolve<ResolveChannelTypeService>('communicationChannelsResolveChannelType')\n  } catch {\n    // `communication_channels` is optional: without it no message can originate\n    // from a channel, so \"unknown\" is both correct and fail-closed.\n    return undefined\n  }\n}\n\n/**\n * Resolve the channel type a compose request originates from, server-side.\n *\n * Never derived from the request body's own `sourceChannelType` \u2014 that would let\n * any caller waive the `externalEmail` requirement by asserting a channel type.\n * It is looked up from the conversation the message is being composed on, or\n * from the parent message it replies to.\n *\n * Returns `undefined` when nothing can be established, which the compose\n * validator treats as \"unknown\" and therefore keeps the pre-#4975 rule.\n */\nexport async function resolveComposeSourceChannelType(\n  container: ContainerLike,\n  scope: { tenantId: string; organizationId: string | null },\n  hint: ComposeSourceHint,\n): Promise<string | undefined> {\n  const externalConversationId =\n    hint.sourceEntityType === EXTERNAL_CONVERSATION_SOURCE_ENTITY_TYPE\n      ? hint.sourceEntityId ?? null\n      : null\n  const messageId = hint.parentMessageId ?? null\n  if (!externalConversationId && !messageId) return undefined\n\n  const resolveChannelType = tryResolveChannelTypeService(container)\n  if (!resolveChannelType) return undefined\n\n  const channelType = await resolveChannelType(container, scope, {\n    externalConversationId,\n    messageId,\n  })\n  return channelType ?? undefined\n}\n\nexport { EXTERNAL_CONVERSATION_SOURCE_ENTITY_TYPE }\n"],
-  "mappings": "AAAA,SAAS,SAAS;AAMlB,MAAM,2CAA2C;AAO1C,MAAM,0BAA0B,EAAE,OAAO;AAAA,EAC9C,kBAAkB,EAAE,OAAO,EAAE,SAAS;AAAA,EACtC,gBAAgB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EAC3C,iBAAiB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAC9C,CAAC;AAeM,SAAS,qCAAqC,MAAwB;AAC3E,MAAI,CAAC,QAAQ,OAAO,SAAS,SAAU,QAAO;AAC9C,QAAM,MAAM;AACZ,MAAI,IAAI,eAAe,SAAU,QAAO;AACxC,MAAI,IAAI,YAAY,KAAM,QAAO;AACjC,QAAM,gBAAgB,IAAI;AAC1B,SAAO,EAAE,OAAO,kBAAkB,YAAY,cAAc,KAAK,EAAE,SAAS;AAC9E;AAUA,SAAS,6BACP,WACuC;AACvC,MAAI;AACF,WAAO,UAAU,QAAmC,yCAAyC;AAAA,EAC/F,QAAQ;AAGN,WAAO;AAAA,EACT;AACF;AAaA,eAAsB,gCACpB,WACA,OACA,MAC6B;AAC7B,QAAM,yBACJ,KAAK,qBAAqB,2CACtB,KAAK,kBAAkB,OACvB;AACN,QAAM,YAAY,KAAK,mBAAmB;AAC1C,MAAI,CAAC,0BAA0B,CAAC,UAAW,QAAO;AAElD,QAAM,qBAAqB,6BAA6B,SAAS;AACjE,MAAI,CAAC,mBAAoB,QAAO;AAEhC,QAAM,cAAc,MAAM,mBAAmB,WAAW,OAAO;AAAA,IAC7D;AAAA,IACA;AAAA,EACF,CAAC;AACD,SAAO,eAAe;AACxB;",
-  "names": []
-}

package/dist/modules/query_index/lib/search-entity-policy.js

@@ -1,14 +0,0 @@
-import { parseBooleanWithDefault } from "@open-mercato/shared/lib/boolean";
-const CUSTOMERS_BASE_ENTITY_TYPE = "customers:customer_entity";
-function indexesCustomerBaseEntity() {
-  return parseBooleanWithDefault(process.env.OM_SEARCH_CUSTOMERS_INDEX_BASE_ENTITY, false);
-}
-function listSearchTokenExcludedEntityTypes() {
-  return indexesCustomerBaseEntity() ? [] : [CUSTOMERS_BASE_ENTITY_TYPE];
-}
-export {
-  CUSTOMERS_BASE_ENTITY_TYPE,
-  indexesCustomerBaseEntity,
-  listSearchTokenExcludedEntityTypes
-};
-//# sourceMappingURL=search-entity-policy.js.map