@open-mercato/core 0.8.1-develop.7296.1.2111d779db → 0.8.1-develop.7441.1.b42958b98c

package/dist/modules/messages/lib/channelThreadAccess.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/messages/lib/channelThreadAccess.ts"],
+  "sourcesContent": ["import { EXTERNAL_CONVERSATION_SOURCE_ENTITY_TYPE } from './composeSourceChannelType'\n\n/**\n * The subset of a resolved channel thread this module consumes. Structurally\n * mirrors `communication_channels`' `ChannelThreadAccess` without importing it \u2014\n * the hub is an optional module and `messages` must not depend on its entities.\n */\nexport type ChannelThreadAccessInfo = {\n  messageThreadId: string\n  externalConversationId: string\n  channelId: string\n  channelType: string\n  canAccess: boolean\n}\n\nexport type ChannelThreadScope = {\n  tenantId: string\n  organizationId: string | null\n}\n\nexport type ChannelThreadReference = {\n  messageThreadId?: string | null\n  externalConversationId?: string | null\n}\n\n/**\n * Feature a caller must hold before the channel-thread fallback may widen a\n * route's participant test.\n *\n * The fallback delegates to `assertCanAccessChannel`, which grants every shared\n * channel unconditionally and documents its precondition as \"a caller the route\n * already feature-gated\". Routes that are `requireAuth`-only must therefore\n * apply this gate themselves before consulting the facade.\n */\nexport const CHANNEL_THREAD_FALLBACK_FEATURE = 'messages.view'\n\ntype ContainerLike = { resolve: <T = unknown>(name: string) => T }\n\ntype ResolveChannelThreadAccessService = (\n  container: ContainerLike,\n  scope: ChannelThreadScope,\n  reference: ChannelThreadReference,\n  actor: { userId: string | null; features: string[] },\n) => Promise<ChannelThreadAccessInfo | null>\n\nfunction tryResolveChannelThreadAccessService(\n  container: ContainerLike,\n): ResolveChannelThreadAccessService | undefined {\n  try {\n    const service = container.resolve<ResolveChannelThreadAccessService>(\n      'communicationChannelsResolveChannelThreadAccess',\n    )\n    return typeof service === 'function' ? service : undefined\n  } catch {\n    // `communication_channels` is optional: without it no thread can be\n    // channel-linked, so \"internal thread\" is both correct and fail-closed.\n    // A container that answers with a non-callable instead of throwing reads\n    // the same way.\n    return undefined\n  }\n}\n\n/**\n * Granted features of the acting user, read defensively off the command context.\n *\n * These are **passed through** to `assertCanAccessChannel`, which currently\n * discards them (`void userFeatures`) and keeps them on its signature only for\n * the v2 admin-oversight rule. Nothing here authorizes anything: a route or\n * command that needs a feature gate before widening its own participant test\n * MUST apply {@link CHANNEL_THREAD_FALLBACK_FEATURE} itself.\n */\nexport function resolveActorFeatures(auth: unknown): string[] {\n  const features = (auth as { features?: unknown } | null | undefined)?.features\n  if (!Array.isArray(features)) return []\n  return features.filter((value): value is string => typeof value === 'string')\n}\n\n/**\n * Resolve the channel thread a message belongs to, together with whether the\n * acting user may act on it (#5535).\n *\n * Returns `null` for an internal thread, for a thread outside the caller's\n * tenant/organization scope, and when the hub module is not installed \u2014 every\n * caller treats `null` as \"the pre-existing rule applies\".\n *\n * `actor.features` is a pass-through to the hub's own access rule, not an\n * authorization input \u2014 see {@link resolveActorFeatures}.\n */\nexport async function resolveMessageChannelThreadAccess(\n  container: ContainerLike,\n  scope: ChannelThreadScope,\n  reference: ChannelThreadReference,\n  actor: { userId: string | null; features: string[] },\n): Promise<ChannelThreadAccessInfo | null> {\n  if (!reference.messageThreadId && !reference.externalConversationId) return null\n  const resolveChannelThreadAccess = tryResolveChannelThreadAccessService(container)\n  if (!resolveChannelThreadAccess) return null\n  return resolveChannelThreadAccess(container, scope, reference, actor)\n}\n\nexport { EXTERNAL_CONVERSATION_SOURCE_ENTITY_TYPE }\n"],
+  "mappings": "AAAA,SAAS,gDAAgD;AAkClD,MAAM,kCAAkC;AAW/C,SAAS,qCACP,WAC+C;AAC/C,MAAI;AACF,UAAM,UAAU,UAAU;AAAA,MACxB;AAAA,IACF;AACA,WAAO,OAAO,YAAY,aAAa,UAAU;AAAA,EACnD,QAAQ;AAKN,WAAO;AAAA,EACT;AACF;AAWO,SAAS,qBAAqB,MAAyB;AAC5D,QAAM,WAAY,MAAoD;AACtE,MAAI,CAAC,MAAM,QAAQ,QAAQ,EAAG,QAAO,CAAC;AACtC,SAAO,SAAS,OAAO,CAAC,UAA2B,OAAO,UAAU,QAAQ;AAC9E;AAaA,eAAsB,kCACpB,WACA,OACA,WACA,OACyC;AACzC,MAAI,CAAC,UAAU,mBAAmB,CAAC,UAAU,uBAAwB,QAAO;AAC5E,QAAM,6BAA6B,qCAAqC,SAAS;AACjF,MAAI,CAAC,2BAA4B,QAAO;AACxC,SAAO,2BAA2B,WAAW,OAAO,WAAW,KAAK;AACtE;",
+  "names": []
+}

package/dist/modules/messages/lib/composeSenderDelegation.js

@@ -0,0 +1,87 @@
+import { resolveTranslations } from "@open-mercato/shared/lib/i18n/server";
+import { renderMarkdownEmailBody } from "./markdownEmailBody.js";
+const COMPOSE_SENDER_FIELD = "senderChannelId";
+function tryResolveSendAsUserService(container) {
+  try {
+    return container.resolve("communicationChannelsSendAsUser");
+  } catch {
+    return void 0;
+  }
+}
+function requiresSenderDelegation(input) {
+  return Boolean(input.senderChannelId) && input.isDraft !== true;
+}
+async function buildSenderBody(body, bodyFormat) {
+  const format = bodyFormat === "markdown" ? "markdown" : "text";
+  if (format !== "markdown" || !body.trim()) return { plain: body, bodyFormat: format };
+  return { plain: body, html: await renderMarkdownEmailBody(body), bodyFormat: format };
+}
+async function delegateComposeToSender(container, actor, input) {
+  const senderChannelId = input.senderChannelId;
+  const { t } = await resolveTranslations();
+  const fail = (status, error) => ({
+    ok: false,
+    status,
+    error,
+    fieldErrors: { [COMPOSE_SENDER_FIELD]: error }
+  });
+  if (input.visibility !== "public" || !input.externalEmail) {
+    return fail(
+      422,
+      t(
+        "messages.errors.senderRequiresExternalRecipient",
+        "A sender mailbox can only be used for a message addressed to an external recipient."
+      )
+    );
+  }
+  if ((input.attachmentIds?.length ?? 0) > 0 || (input.objects?.length ?? 0) > 0 || input.attachmentRecordId) {
+    return fail(
+      422,
+      t(
+        "messages.errors.senderPayloadUnsupported",
+        "Sending from your own mailbox does not support attachments or linked records yet."
+      )
+    );
+  }
+  const sendAsUser = tryResolveSendAsUserService(container);
+  if (!sendAsUser) {
+    return fail(
+      422,
+      t("messages.errors.senderUnavailable", "Sending from your own mailbox is not available.")
+    );
+  }
+  const result = await sendAsUser(
+    container,
+    {
+      userId: actor.userId,
+      tenantId: actor.tenantId,
+      organizationId: actor.organizationId,
+      auth: actor.auth
+    },
+    {
+      userChannelId: senderChannelId,
+      to: [input.externalEmail],
+      subject: input.subject ?? "",
+      body: await buildSenderBody(input.body ?? "", input.bodyFormat),
+      parentMessageId: input.parentMessageId
+    }
+  );
+  if (result.ok) {
+    return { ok: true, messageId: result.messageId, threadId: result.threadId };
+  }
+  const fieldMessage = Object.values(result.fieldErrors ?? {})[0] ?? result.error;
+  return {
+    ok: false,
+    status: result.status,
+    error: result.error,
+    fieldErrors: { [COMPOSE_SENDER_FIELD]: fieldMessage }
+  };
+}
+export {
+  COMPOSE_SENDER_FIELD,
+  buildSenderBody,
+  delegateComposeToSender,
+  requiresSenderDelegation,
+  tryResolveSendAsUserService
+};
+//# sourceMappingURL=composeSenderDelegation.js.map

package/dist/modules/messages/lib/composeSenderDelegation.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/messages/lib/composeSenderDelegation.ts"],
+  "sourcesContent": ["import { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { renderMarkdownEmailBody } from './markdownEmailBody'\n\n/**\n * Routing a compose through an employee's own connected mailbox (#6258).\n *\n * `communication_channels` owns every row inbound threading matches on\n * (`ExternalConversation`, `ChannelThreadMapping`, the outbound\n * `MessageChannelLink`), and its `sendAsUser` facade writes all of them around\n * the same `messages.messages.compose` command this route would call directly.\n * So the mailbox path delegates rather than reproducing those writes.\n *\n * The dependency is soft in the sanctioned direction: `messages` is the optional\n * consumer and owns the glue, `communication_channels` knows nothing about the\n * composer.\n */\n\ntype ContainerLike = { resolve: <T = unknown>(name: string) => T }\n\nexport type ComposeSenderActor = {\n  userId: string\n  tenantId: string\n  organizationId: string | null\n  auth?: unknown\n}\n\nexport type ComposeSenderResult =\n  | { ok: true; messageId: string; threadId: string }\n  | { ok: false; status: number; error: string; fieldErrors: Record<string, string> }\n\ntype SendAsUserResult =\n  | { ok: true; messageId: string; threadId: string; channelId: string; providerKey: string }\n  | { ok: false; status: number; error: string; fieldErrors?: Record<string, string> }\n\ntype SendAsUserService = (\n  container: ContainerLike,\n  actor: { userId: string; tenantId: string; organizationId: string | null; auth?: unknown },\n  input: {\n    userChannelId: string\n    to: string[]\n    subject: string\n    body: { plain?: string; html?: string; bodyFormat?: 'text' | 'markdown' }\n    parentMessageId?: string\n    channelMetadata?: Record<string, unknown>\n  },\n) => Promise<SendAsUserResult>\n\n/** The composer field the selector renders, so a failure lands on that control. */\nexport const COMPOSE_SENDER_FIELD = 'senderChannelId'\n\nexport function tryResolveSendAsUserService(\n  container: ContainerLike,\n): SendAsUserService | undefined {\n  try {\n    return container.resolve<SendAsUserService>('communicationChannelsSendAsUser')\n  } catch {\n    return undefined\n  }\n}\n\nexport type ComposeSenderRequest = {\n  senderChannelId?: string\n  visibility?: string | null\n  externalEmail?: string\n  subject?: string\n  body?: string\n  bodyFormat?: string\n  isDraft?: boolean\n  parentMessageId?: string\n  attachmentIds?: string[]\n  attachmentRecordId?: string\n  objects?: unknown[]\n}\n\n/** Whether this compose asked to be routed through one of the caller's mailboxes. */\nexport function requiresSenderDelegation(input: ComposeSenderRequest): boolean {\n  return Boolean(input.senderChannelId) && input.isDraft !== true\n}\n\n/**\n * Compose the hub payload's body.\n *\n * A markdown compose is rendered to HTML with the same renderer the platform\n * email path uses, and the markdown source rides along as the plain-text\n * alternative. Passing markdown through as `plain` alone would deliver the raw\n * markup \u2014 asterisks and pipes \u2014 to the client. `bodyFormat` rides along\n * unchanged so the hub persists the in-app copy with the same format the\n * platform path would have used, instead of always storing it as `'text'`\n * (which would render the raw markdown source in the sender's own Sent view).\n */\nexport async function buildSenderBody(\n  body: string,\n  bodyFormat: string | undefined,\n): Promise<{ plain?: string; html?: string; bodyFormat?: 'text' | 'markdown' }> {\n  const format = bodyFormat === 'markdown' ? 'markdown' as const : 'text' as const\n  if (format !== 'markdown' || !body.trim()) return { plain: body, bodyFormat: format }\n  return { plain: body, html: await renderMarkdownEmailBody(body), bodyFormat: format }\n}\n\n/**\n * Send through the caller's mailbox, or explain why it cannot be done.\n *\n * Every failure carries a field error on the selector rather than a bare\n * message, so the composer renders it next to the control the user chose.\n */\nexport async function delegateComposeToSender(\n  container: ContainerLike,\n  actor: ComposeSenderActor,\n  input: ComposeSenderRequest,\n): Promise<ComposeSenderResult> {\n  const senderChannelId = input.senderChannelId as string\n  const { t } = await resolveTranslations()\n  const fail = (status: number, error: string): ComposeSenderResult => ({\n    ok: false,\n    status,\n    error,\n    fieldErrors: { [COMPOSE_SENDER_FIELD]: error },\n  })\n\n  if (input.visibility !== 'public' || !input.externalEmail) {\n    return fail(\n      422,\n      t(\n        'messages.errors.senderRequiresExternalRecipient',\n        'A sender mailbox can only be used for a message addressed to an external recipient.',\n      ),\n    )\n  }\n  // `SendAsUserInput` carries recipients, subject, body and threading headers\n  // and nothing else. Refusing is the only honest answer while that is true \u2014\n  // accepting would drop the payload after the message had already been sent.\n  if (\n    (input.attachmentIds?.length ?? 0) > 0 ||\n    (input.objects?.length ?? 0) > 0 ||\n    input.attachmentRecordId\n  ) {\n    return fail(\n      422,\n      t(\n        'messages.errors.senderPayloadUnsupported',\n        'Sending from your own mailbox does not support attachments or linked records yet.',\n      ),\n    )\n  }\n\n  const sendAsUser = tryResolveSendAsUserService(container)\n  if (!sendAsUser) {\n    return fail(\n      422,\n      t('messages.errors.senderUnavailable', 'Sending from your own mailbox is not available.'),\n    )\n  }\n\n  const result = await sendAsUser(\n    container,\n    {\n      userId: actor.userId,\n      tenantId: actor.tenantId,\n      organizationId: actor.organizationId,\n      auth: actor.auth,\n    },\n    {\n      userChannelId: senderChannelId,\n      to: [input.externalEmail],\n      subject: input.subject ?? '',\n      body: await buildSenderBody(input.body ?? '', input.bodyFormat),\n      parentMessageId: input.parentMessageId,\n    },\n  )\n\n  if (result.ok) {\n    return { ok: true, messageId: result.messageId, threadId: result.threadId }\n  }\n\n  const fieldMessage = Object.values(result.fieldErrors ?? {})[0] ?? result.error\n  return {\n    ok: false,\n    status: result.status,\n    error: result.error,\n    fieldErrors: { [COMPOSE_SENDER_FIELD]: fieldMessage },\n  }\n}\n"],
+  "mappings": "AAAA,SAAS,2BAA2B;AACpC,SAAS,+BAA+B;AA+CjC,MAAM,uBAAuB;AAE7B,SAAS,4BACd,WAC+B;AAC/B,MAAI;AACF,WAAO,UAAU,QAA2B,iCAAiC;AAAA,EAC/E,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAiBO,SAAS,yBAAyB,OAAsC;AAC7E,SAAO,QAAQ,MAAM,eAAe,KAAK,MAAM,YAAY;AAC7D;AAaA,eAAsB,gBACpB,MACA,YAC8E;AAC9E,QAAM,SAAS,eAAe,aAAa,aAAsB;AACjE,MAAI,WAAW,cAAc,CAAC,KAAK,KAAK,EAAG,QAAO,EAAE,OAAO,MAAM,YAAY,OAAO;AACpF,SAAO,EAAE,OAAO,MAAM,MAAM,MAAM,wBAAwB,IAAI,GAAG,YAAY,OAAO;AACtF;AAQA,eAAsB,wBACpB,WACA,OACA,OAC8B;AAC9B,QAAM,kBAAkB,MAAM;AAC9B,QAAM,EAAE,EAAE,IAAI,MAAM,oBAAoB;AACxC,QAAM,OAAO,CAAC,QAAgB,WAAwC;AAAA,IACpE,IAAI;AAAA,IACJ;AAAA,IACA;AAAA,IACA,aAAa,EAAE,CAAC,oBAAoB,GAAG,MAAM;AAAA,EAC/C;AAEA,MAAI,MAAM,eAAe,YAAY,CAAC,MAAM,eAAe;AACzD,WAAO;AAAA,MACL;AAAA,MACA;AAAA,QACE;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAIA,OACG,MAAM,eAAe,UAAU,KAAK,MACpC,MAAM,SAAS,UAAU,KAAK,KAC/B,MAAM,oBACN;AACA,WAAO;AAAA,MACL;AAAA,MACA;AAAA,QACE;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA,QAAM,aAAa,4BAA4B,SAAS;AACxD,MAAI,CAAC,YAAY;AACf,WAAO;AAAA,MACL;AAAA,MACA,EAAE,qCAAqC,iDAAiD;AAAA,IAC1F;AAAA,EACF;AAEA,QAAM,SAAS,MAAM;AAAA,IACnB;AAAA,IACA;AAAA,MACE,QAAQ,MAAM;AAAA,MACd,UAAU,MAAM;AAAA,MAChB,gBAAgB,MAAM;AAAA,MACtB,MAAM,MAAM;AAAA,IACd;AAAA,IACA;AAAA,MACE,eAAe;AAAA,MACf,IAAI,CAAC,MAAM,aAAa;AAAA,MACxB,SAAS,MAAM,WAAW;AAAA,MAC1B,MAAM,MAAM,gBAAgB,MAAM,QAAQ,IAAI,MAAM,UAAU;AAAA,MAC9D,iBAAiB,MAAM;AAAA,IACzB;AAAA,EACF;AAEA,MAAI,OAAO,IAAI;AACb,WAAO,EAAE,IAAI,MAAM,WAAW,OAAO,WAAW,UAAU,OAAO,SAAS;AAAA,EAC5E;AAEA,QAAM,eAAe,OAAO,OAAO,OAAO,eAAe,CAAC,CAAC,EAAE,CAAC,KAAK,OAAO;AAC1E,SAAO;AAAA,IACL,IAAI;AAAA,IACJ,QAAQ,OAAO;AAAA,IACf,OAAO,OAAO;AAAA,IACd,aAAa,EAAE,CAAC,oBAAoB,GAAG,aAAa;AAAA,EACtD;AACF;",
+  "names": []
+}

package/dist/modules/messages/lib/composeSenderOptions.js

@@ -0,0 +1,24 @@
+function toComposeSenderOptions(items) {
+  if (!Array.isArray(items)) return [];
+  const options = [];
+  for (const item of items) {
+    if (!item || typeof item !== "object") continue;
+    const channel = item;
+    if (typeof channel.id !== "string" || !channel.id) continue;
+    if (channel.channelType !== "email") continue;
+    if (channel.status !== "connected") continue;
+    const externalIdentifier = typeof channel.externalIdentifier === "string" && channel.externalIdentifier.trim().length ? channel.externalIdentifier.trim() : null;
+    const displayName = typeof channel.displayName === "string" && channel.displayName.trim().length ? channel.displayName.trim() : externalIdentifier ?? channel.id;
+    options.push({
+      id: channel.id,
+      label: displayName,
+      description: externalIdentifier,
+      isDefault: channel.isPrimary === true
+    });
+  }
+  return options.sort((left, right) => Number(right.isDefault) - Number(left.isDefault));
+}
+export {
+  toComposeSenderOptions
+};
+//# sourceMappingURL=composeSenderOptions.js.map

package/dist/modules/messages/lib/composeSenderOptions.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/messages/lib/composeSenderOptions.ts"],
+  "sourcesContent": ["import type { MessageSenderOption } from '@open-mercato/ui/backend/messages'\n\n/**\n * Raw shape of `GET /api/communication_channels/me/channels` items, narrowed to\n * the fields the composer's sender list reads. Declared here rather than\n * imported so the messages module keeps no compile-time dependency on the\n * optional `communication_channels` module.\n */\nexport type ComposeSenderChannel = {\n  id?: unknown\n  channelType?: unknown\n  status?: unknown\n  displayName?: unknown\n  externalIdentifier?: unknown\n  isPrimary?: unknown\n}\n\n/**\n * Map the caller's owned channels onto composer sender options.\n *\n * The endpoint filters server-side on tenant/organization/user only, so both\n * filters belong here: a non-email channel cannot carry an email thread, and a\n * channel that is not `connected` cannot deliver. The user's primary mailbox is\n * flagged and sorted first so it is the one-click choice \u2014 flagging it does not\n * preselect it, because the platform sender stays the composer's default.\n */\nexport function toComposeSenderOptions(items: unknown): MessageSenderOption[] {\n  if (!Array.isArray(items)) return []\n\n  const options: Array<MessageSenderOption & { isDefault: boolean }> = []\n  for (const item of items) {\n    if (!item || typeof item !== 'object') continue\n    const channel = item as ComposeSenderChannel\n    if (typeof channel.id !== 'string' || !channel.id) continue\n    if (channel.channelType !== 'email') continue\n    if (channel.status !== 'connected') continue\n\n    const externalIdentifier =\n      typeof channel.externalIdentifier === 'string' && channel.externalIdentifier.trim().length\n        ? channel.externalIdentifier.trim()\n        : null\n    const displayName =\n      typeof channel.displayName === 'string' && channel.displayName.trim().length\n        ? channel.displayName.trim()\n        : externalIdentifier ?? channel.id\n\n    options.push({\n      id: channel.id,\n      label: displayName,\n      description: externalIdentifier,\n      isDefault: channel.isPrimary === true,\n    })\n  }\n\n  return options.sort((left, right) => Number(right.isDefault) - Number(left.isDefault))\n}\n"],
+  "mappings": "AA0BO,SAAS,uBAAuB,OAAuC;AAC5E,MAAI,CAAC,MAAM,QAAQ,KAAK,EAAG,QAAO,CAAC;AAEnC,QAAM,UAA+D,CAAC;AACtE,aAAW,QAAQ,OAAO;AACxB,QAAI,CAAC,QAAQ,OAAO,SAAS,SAAU;AACvC,UAAM,UAAU;AAChB,QAAI,OAAO,QAAQ,OAAO,YAAY,CAAC,QAAQ,GAAI;AACnD,QAAI,QAAQ,gBAAgB,QAAS;AACrC,QAAI,QAAQ,WAAW,YAAa;AAEpC,UAAM,qBACJ,OAAO,QAAQ,uBAAuB,YAAY,QAAQ,mBAAmB,KAAK,EAAE,SAChF,QAAQ,mBAAmB,KAAK,IAChC;AACN,UAAM,cACJ,OAAO,QAAQ,gBAAgB,YAAY,QAAQ,YAAY,KAAK,EAAE,SAClE,QAAQ,YAAY,KAAK,IACzB,sBAAsB,QAAQ;AAEpC,YAAQ,KAAK;AAAA,MACX,IAAI,QAAQ;AAAA,MACZ,OAAO;AAAA,MACP,aAAa;AAAA,MACb,WAAW,QAAQ,cAAc;AAAA,IACnC,CAAC;AAAA,EACH;AAEA,SAAO,QAAQ,KAAK,CAAC,MAAM,UAAU,OAAO,MAAM,SAAS,IAAI,OAAO,KAAK,SAAS,CAAC;AACvF;",
+  "names": []
+}

package/dist/modules/messages/lib/email-sender.js

@@ -1,4 +1,3 @@
-import * as React from "react";
 import { promises as fs } from "fs";
 import { sendEmail } from "@open-mercato/shared/lib/email/send";
 import { resolveDefaultEmailFromAddress } from "@open-mercato/shared/lib/email/config";
@@ -9,6 +8,7 @@ import { MessageAccessToken } from "../data/entities.js";
 import MessageEmail from "../emails/MessageEmail.js";
 import { resolveAttachmentAbsolutePath } from "../../attachments/lib/storage.js";
 import { generateAuthToken, hashAuthToken } from "../../auth/lib/tokenHash.js";
+import { renderMarkdownEmailBody } from "./markdownEmailBody.js";
 import { createLogger } from "@open-mercato/shared/lib/logger";
 const logger = createLogger("messages").child({ component: "email-sender" });
 const ACCESS_TOKEN_EXPIRY_HOURS = 24 * 7;
@@ -69,16 +69,6 @@ async function mapAttachmentsForEmail(messageId, attachments) {
   }
   return emailAttachments;
 }
-async function renderMarkdownEmailBody(body) {
-  const ReactMarkdownModule = await import("react-markdown");
-  const remarkGfmModule = await import("remark-gfm");
-  const ReactMarkdown = ReactMarkdownModule.default ?? ReactMarkdownModule;
-  const remarkGfmPlugin = remarkGfmModule.default ?? remarkGfmModule;
-  const { renderToStaticMarkup } = await import("react-dom/server");
-  return renderToStaticMarkup(
-    React.createElement(ReactMarkdown, { remarkPlugins: [remarkGfmPlugin] }, body)
-  );
-}
 async function buildEmailBodyHtml(message) {
   if (message.bodyFormat !== "markdown") return void 0;
   if (!message.body) return void 0;

package/dist/modules/messages/lib/email-sender.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/messages/lib/email-sender.ts"],
-  "sourcesContent": ["import * as React from 'react'\nimport { promises as fs } from 'fs'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { sendEmail } from '@open-mercato/shared/lib/email/send'\nimport { resolveDefaultEmailFromAddress } from '@open-mercato/shared/lib/email/config'\nimport { loadDictionary } from '@open-mercato/shared/lib/i18n/server'\nimport { defaultLocale } from '@open-mercato/shared/lib/i18n/config'\nimport { createFallbackTranslator } from '@open-mercato/shared/lib/i18n/translate'\nimport type { Message, MessageObject } from '../data/entities'\nimport { MessageAccessToken } from '../data/entities'\nimport MessageEmail from '../emails/MessageEmail'\nimport { resolveAttachmentAbsolutePath } from '../../attachments/lib/storage'\nimport { generateAuthToken, hashAuthToken } from '../../auth/lib/tokenHash'\nimport type { MessageEmailAttachment } from './attachments'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('messages').child({ component: 'email-sender' })\n\nconst ACCESS_TOKEN_EXPIRY_HOURS = 24 * 7\nconst MAX_EMAIL_ATTACHMENTS = 10\nconst MAX_TOTAL_ATTACHMENT_BYTES = 20 * 1024 * 1024\n\nexport type SenderIdentity = {\n  name: string | null\n  email: string | null\n}\n\nfunction logDebug(message: string, details?: Record<string, unknown>) {\n  logger.debug(message, details)\n}\n\nfunction resolveAppUrl(): string | null {\n  const raw = process.env.APP_URL?.trim()\n  if (!raw) return null\n  return raw.replace(/\\/$/, '')\n}\n\nfunction buildSenderLabel(sender: SenderIdentity): string {\n  const name = sender.name?.trim()\n  if (name) return name\n  const email = sender.email?.trim()\n  if (email) return email\n  return 'System'\n}\n\nfunction resolveObjectLabels(objects: MessageObject[]): string[] {\n  return objects.map((item) => `${item.entityModule}.${item.entityType} (${item.entityId})`)\n}\n\ntype EmailAttachment = {\n  filename: string\n  content: string\n  contentType?: string\n}\n\nasync function mapAttachmentsForEmail(\n  messageId: string,\n  attachments: MessageEmailAttachment[],\n): Promise<EmailAttachment[]> {\n  const emailAttachments: EmailAttachment[] = []\n  let totalBytes = 0\n\n  for (const attachment of attachments.slice(0, MAX_EMAIL_ATTACHMENTS)) {\n    const absolutePath = resolveAttachmentAbsolutePath(\n      attachment.partitionCode,\n      attachment.storagePath,\n      attachment.storageDriver,\n    )\n\n    let buffer: Buffer\n    try {\n      buffer = await fs.readFile(absolutePath)\n    } catch (error) {\n      logDebug('Attachment skipped: file read failed', {\n        messageId,\n        fileName: attachment.fileName,\n        error: error instanceof Error ? error.message : String(error),\n      })\n      continue\n    }\n\n    if ((totalBytes + buffer.length) > MAX_TOTAL_ATTACHMENT_BYTES) {\n      logDebug('Attachment skipped: total size limit exceeded', {\n        messageId,\n        fileName: attachment.fileName,\n        nextTotalBytes: totalBytes + buffer.length,\n      })\n      continue\n    }\n\n    totalBytes += buffer.length\n    emailAttachments.push({\n      filename: attachment.fileName,\n      content: buffer.toString('base64'),\n      contentType: attachment.mimeType || undefined,\n    })\n  }\n\n  return emailAttachments\n}\n\nasync function renderMarkdownEmailBody(body: string) {\n  const ReactMarkdownModule = await import('react-markdown')\n  const remarkGfmModule = await import('remark-gfm')\n  const ReactMarkdown =\n    (ReactMarkdownModule.default ?? ReactMarkdownModule) as React.ComponentType<{\n      remarkPlugins?: unknown\n      children?: React.ReactNode\n    }>\n  const remarkGfmPlugin = remarkGfmModule.default ?? remarkGfmModule\n  const { renderToStaticMarkup } = await import('react-dom/server')\n\n  return renderToStaticMarkup(\n    React.createElement(ReactMarkdown, { remarkPlugins: [remarkGfmPlugin] }, body),\n  )\n}\n\nasync function buildEmailBodyHtml(message: Message): Promise<string | undefined> {\n  if (message.bodyFormat !== 'markdown') return undefined\n  if (!message.body) return undefined\n  return renderMarkdownEmailBody(message.body)\n}\n\nasync function buildEmailCopy(sentAt: Date) {\n  const dict = await loadDictionary(defaultLocale)\n  const t = createFallbackTranslator(dict)\n  return {\n    preview: t('messages.email.preview', 'You received a message in Open Mercato'),\n    heading: t('messages.email.heading', 'New message'),\n    from: t('messages.email.from', 'From'),\n    sentAt: t('messages.email.sentAt', 'Sent'),\n    sentAtLabel: sentAt.toISOString(),\n    viewCta: t('messages.email.viewCta', 'View message'),\n    attachmentsLabel: t('messages.email.attachments', 'Attachments'),\n    objectsLabel: t('messages.email.objects', 'Related records'),\n    footer: t('messages.email.footer', 'Open Mercato messages'),\n  }\n}\n\nexport async function createMessageAccessToken(\n  em: EntityManager,\n  messageId: string,\n  recipientUserId: string,\n): Promise<string> {\n  const rawToken = generateAuthToken()\n  const expiresAt = new Date(Date.now() + ACCESS_TOKEN_EXPIRY_HOURS * 60 * 60 * 1000)\n  const record = em.create(MessageAccessToken, {\n    messageId,\n    recipientUserId,\n    token: hashAuthToken(rawToken),\n    expiresAt,\n    useCount: 0,\n  })\n  await em.persist(record).flush()\n  logDebug('Created access token', {\n    messageId,\n    recipientUserId,\n    expiresAt: expiresAt.toISOString(),\n  })\n  return rawToken\n}\n\nexport async function sendMessageEmailToRecipient(params: {\n  em: EntityManager\n  message: Message\n  recipientUserId: string\n  recipientEmail: string\n  sender: SenderIdentity\n  objects: MessageObject[]\n  attachments: MessageEmailAttachment[]\n}): Promise<void> {\n  const { em, message, recipientUserId, recipientEmail, sender, objects, attachments } = params\n  const token = await createMessageAccessToken(em, message.id, recipientUserId)\n  const appUrl = resolveAppUrl()\n  const viewUrl = appUrl ? `${appUrl}/messages/view/${token}` : null\n  if (!appUrl) {\n    logDebug('APP_URL missing - email link omitted', { messageId: message.id })\n  }\n  const copy = await buildEmailCopy(message.sentAt ?? new Date())\n  const bodyHtml = await buildEmailBodyHtml(message)\n  const emailAttachments = await mapAttachmentsForEmail(message.id, attachments)\n  logDebug('Sending recipient email', {\n    messageId: message.id,\n    recipientUserId,\n    recipientEmail,\n    hasViewUrl: Boolean(viewUrl),\n    attachmentsCount: emailAttachments.length,\n    from: resolveDefaultEmailFromAddress() ?? null,\n  })\n\n  await sendEmail({\n    to: recipientEmail,\n    subject: message.subject,\n    react: MessageEmail({\n      subject: message.subject,\n      body: message.body,\n      bodyHtml,\n      senderName: buildSenderLabel(sender),\n      sentAtLabel: copy.sentAtLabel,\n      viewUrl,\n      copy,\n      attachmentNames: attachments.map((item) => item.fileName),\n      objectLabels: resolveObjectLabels(objects),\n    }),\n    attachments: emailAttachments,\n    tenantId: message.tenantId,\n    organizationId: message.organizationId ?? null,\n  })\n}\n\nexport async function sendMessageEmailToExternal(params: {\n  message: Message\n  email: string\n  sender: SenderIdentity\n  objects: MessageObject[]\n  attachments: MessageEmailAttachment[]\n}): Promise<void> {\n  const { message, email, sender, objects, attachments } = params\n  const copy = await buildEmailCopy(message.sentAt ?? new Date())\n  const bodyHtml = await buildEmailBodyHtml(message)\n  const emailAttachments = await mapAttachmentsForEmail(message.id, attachments)\n  logDebug('Sending external email', {\n    messageId: message.id,\n    email,\n    attachmentsCount: emailAttachments.length,\n    from: resolveDefaultEmailFromAddress() ?? null,\n  })\n\n  await sendEmail({\n    to: email,\n    subject: message.subject,\n    react: MessageEmail({\n      subject: message.subject,\n      body: message.body,\n      bodyHtml,\n      senderName: buildSenderLabel(sender),\n      sentAtLabel: copy.sentAtLabel,\n      viewUrl: null,\n      copy,\n      attachmentNames: attachments.map((item) => item.fileName),\n      objectLabels: resolveObjectLabels(objects),\n    }),\n    attachments: emailAttachments,\n    tenantId: message.tenantId,\n    organizationId: message.organizationId ?? null,\n  })\n  logDebug('External email sent', {\n    messageId: message.id,\n    email,\n  })\n}\n"],
-  "mappings": "AAAA,YAAY,WAAW;AACvB,SAAS,YAAY,UAAU;AAE/B,SAAS,iBAAiB;AAC1B,SAAS,sCAAsC;AAC/C,SAAS,sBAAsB;AAC/B,SAAS,qBAAqB;AAC9B,SAAS,gCAAgC;AAEzC,SAAS,0BAA0B;AACnC,OAAO,kBAAkB;AACzB,SAAS,qCAAqC;AAC9C,SAAS,mBAAmB,qBAAqB;AAEjD,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,UAAU,EAAE,MAAM,EAAE,WAAW,eAAe,CAAC;AAE3E,MAAM,4BAA4B,KAAK;AACvC,MAAM,wBAAwB;AAC9B,MAAM,6BAA6B,KAAK,OAAO;AAO/C,SAAS,SAAS,SAAiB,SAAmC;AACpE,SAAO,MAAM,SAAS,OAAO;AAC/B;AAEA,SAAS,gBAA+B;AACtC,QAAM,MAAM,QAAQ,IAAI,SAAS,KAAK;AACtC,MAAI,CAAC,IAAK,QAAO;AACjB,SAAO,IAAI,QAAQ,OAAO,EAAE;AAC9B;AAEA,SAAS,iBAAiB,QAAgC;AACxD,QAAM,OAAO,OAAO,MAAM,KAAK;AAC/B,MAAI,KAAM,QAAO;AACjB,QAAM,QAAQ,OAAO,OAAO,KAAK;AACjC,MAAI,MAAO,QAAO;AAClB,SAAO;AACT;AAEA,SAAS,oBAAoB,SAAoC;AAC/D,SAAO,QAAQ,IAAI,CAAC,SAAS,GAAG,KAAK,YAAY,IAAI,KAAK,UAAU,KAAK,KAAK,QAAQ,GAAG;AAC3F;AAQA,eAAe,uBACb,WACA,aAC4B;AAC5B,QAAM,mBAAsC,CAAC;AAC7C,MAAI,aAAa;AAEjB,aAAW,cAAc,YAAY,MAAM,GAAG,qBAAqB,GAAG;AACpE,UAAM,eAAe;AAAA,MACnB,WAAW;AAAA,MACX,WAAW;AAAA,MACX,WAAW;AAAA,IACb;AAEA,QAAI;AACJ,QAAI;AACF,eAAS,MAAM,GAAG,SAAS,YAAY;AAAA,IACzC,SAAS,OAAO;AACd,eAAS,wCAAwC;AAAA,QAC/C;AAAA,QACA,UAAU,WAAW;AAAA,QACrB,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AAAA,MAC9D,CAAC;AACD;AAAA,IACF;AAEA,QAAK,aAAa,OAAO,SAAU,4BAA4B;AAC7D,eAAS,iDAAiD;AAAA,QACxD;AAAA,QACA,UAAU,WAAW;AAAA,QACrB,gBAAgB,aAAa,OAAO;AAAA,MACtC,CAAC;AACD;AAAA,IACF;AAEA,kBAAc,OAAO;AACrB,qBAAiB,KAAK;AAAA,MACpB,UAAU,WAAW;AAAA,MACrB,SAAS,OAAO,SAAS,QAAQ;AAAA,MACjC,aAAa,WAAW,YAAY;AAAA,IACtC,CAAC;AAAA,EACH;AAEA,SAAO;AACT;AAEA,eAAe,wBAAwB,MAAc;AACnD,QAAM,sBAAsB,MAAM,OAAO,gBAAgB;AACzD,QAAM,kBAAkB,MAAM,OAAO,YAAY;AACjD,QAAM,gBACH,oBAAoB,WAAW;AAIlC,QAAM,kBAAkB,gBAAgB,WAAW;AACnD,QAAM,EAAE,qBAAqB,IAAI,MAAM,OAAO,kBAAkB;AAEhE,SAAO;AAAA,IACL,MAAM,cAAc,eAAe,EAAE,eAAe,CAAC,eAAe,EAAE,GAAG,IAAI;AAAA,EAC/E;AACF;AAEA,eAAe,mBAAmB,SAA+C;AAC/E,MAAI,QAAQ,eAAe,WAAY,QAAO;AAC9C,MAAI,CAAC,QAAQ,KAAM,QAAO;AAC1B,SAAO,wBAAwB,QAAQ,IAAI;AAC7C;AAEA,eAAe,eAAe,QAAc;AAC1C,QAAM,OAAO,MAAM,eAAe,aAAa;AAC/C,QAAM,IAAI,yBAAyB,IAAI;AACvC,SAAO;AAAA,IACL,SAAS,EAAE,0BAA0B,wCAAwC;AAAA,IAC7E,SAAS,EAAE,0BAA0B,aAAa;AAAA,IAClD,MAAM,EAAE,uBAAuB,MAAM;AAAA,IACrC,QAAQ,EAAE,yBAAyB,MAAM;AAAA,IACzC,aAAa,OAAO,YAAY;AAAA,IAChC,SAAS,EAAE,0BAA0B,cAAc;AAAA,IACnD,kBAAkB,EAAE,8BAA8B,aAAa;AAAA,IAC/D,cAAc,EAAE,0BAA0B,iBAAiB;AAAA,IAC3D,QAAQ,EAAE,yBAAyB,uBAAuB;AAAA,EAC5D;AACF;AAEA,eAAsB,yBACpB,IACA,WACA,iBACiB;AACjB,QAAM,WAAW,kBAAkB;AACnC,QAAM,YAAY,IAAI,KAAK,KAAK,IAAI,IAAI,4BAA4B,KAAK,KAAK,GAAI;AAClF,QAAM,SAAS,GAAG,OAAO,oBAAoB;AAAA,IAC3C;AAAA,IACA;AAAA,IACA,OAAO,cAAc,QAAQ;AAAA,IAC7B;AAAA,IACA,UAAU;AAAA,EACZ,CAAC;AACD,QAAM,GAAG,QAAQ,MAAM,EAAE,MAAM;AAC/B,WAAS,wBAAwB;AAAA,IAC/B;AAAA,IACA;AAAA,IACA,WAAW,UAAU,YAAY;AAAA,EACnC,CAAC;AACD,SAAO;AACT;AAEA,eAAsB,4BAA4B,QAQhC;AAChB,QAAM,EAAE,IAAI,SAAS,iBAAiB,gBAAgB,QAAQ,SAAS,YAAY,IAAI;AACvF,QAAM,QAAQ,MAAM,yBAAyB,IAAI,QAAQ,IAAI,eAAe;AAC5E,QAAM,SAAS,cAAc;AAC7B,QAAM,UAAU,SAAS,GAAG,MAAM,kBAAkB,KAAK,KAAK;AAC9D,MAAI,CAAC,QAAQ;AACX,aAAS,wCAAwC,EAAE,WAAW,QAAQ,GAAG,CAAC;AAAA,EAC5E;AACA,QAAM,OAAO,MAAM,eAAe,QAAQ,UAAU,oBAAI,KAAK,CAAC;AAC9D,QAAM,WAAW,MAAM,mBAAmB,OAAO;AACjD,QAAM,mBAAmB,MAAM,uBAAuB,QAAQ,IAAI,WAAW;AAC7E,WAAS,2BAA2B;AAAA,IAClC,WAAW,QAAQ;AAAA,IACnB;AAAA,IACA;AAAA,IACA,YAAY,QAAQ,OAAO;AAAA,IAC3B,kBAAkB,iBAAiB;AAAA,IACnC,MAAM,+BAA+B,KAAK;AAAA,EAC5C,CAAC;AAED,QAAM,UAAU;AAAA,IACd,IAAI;AAAA,IACJ,SAAS,QAAQ;AAAA,IACjB,OAAO,aAAa;AAAA,MAClB,SAAS,QAAQ;AAAA,MACjB,MAAM,QAAQ;AAAA,MACd;AAAA,MACA,YAAY,iBAAiB,MAAM;AAAA,MACnC,aAAa,KAAK;AAAA,MAClB;AAAA,MACA;AAAA,MACA,iBAAiB,YAAY,IAAI,CAAC,SAAS,KAAK,QAAQ;AAAA,MACxD,cAAc,oBAAoB,OAAO;AAAA,IAC3C,CAAC;AAAA,IACD,aAAa;AAAA,IACb,UAAU,QAAQ;AAAA,IAClB,gBAAgB,QAAQ,kBAAkB;AAAA,EAC5C,CAAC;AACH;AAEA,eAAsB,2BAA2B,QAM/B;AAChB,QAAM,EAAE,SAAS,OAAO,QAAQ,SAAS,YAAY,IAAI;AACzD,QAAM,OAAO,MAAM,eAAe,QAAQ,UAAU,oBAAI,KAAK,CAAC;AAC9D,QAAM,WAAW,MAAM,mBAAmB,OAAO;AACjD,QAAM,mBAAmB,MAAM,uBAAuB,QAAQ,IAAI,WAAW;AAC7E,WAAS,0BAA0B;AAAA,IACjC,WAAW,QAAQ;AAAA,IACnB;AAAA,IACA,kBAAkB,iBAAiB;AAAA,IACnC,MAAM,+BAA+B,KAAK;AAAA,EAC5C,CAAC;AAED,QAAM,UAAU;AAAA,IACd,IAAI;AAAA,IACJ,SAAS,QAAQ;AAAA,IACjB,OAAO,aAAa;AAAA,MAClB,SAAS,QAAQ;AAAA,MACjB,MAAM,QAAQ;AAAA,MACd;AAAA,MACA,YAAY,iBAAiB,MAAM;AAAA,MACnC,aAAa,KAAK;AAAA,MAClB,SAAS;AAAA,MACT;AAAA,MACA,iBAAiB,YAAY,IAAI,CAAC,SAAS,KAAK,QAAQ;AAAA,MACxD,cAAc,oBAAoB,OAAO;AAAA,IAC3C,CAAC;AAAA,IACD,aAAa;AAAA,IACb,UAAU,QAAQ;AAAA,IAClB,gBAAgB,QAAQ,kBAAkB;AAAA,EAC5C,CAAC;AACD,WAAS,uBAAuB;AAAA,IAC9B,WAAW,QAAQ;AAAA,IACnB;AAAA,EACF,CAAC;AACH;",
+  "sourcesContent": ["import { promises as fs } from 'fs'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { sendEmail } from '@open-mercato/shared/lib/email/send'\nimport { resolveDefaultEmailFromAddress } from '@open-mercato/shared/lib/email/config'\nimport { loadDictionary } from '@open-mercato/shared/lib/i18n/server'\nimport { defaultLocale } from '@open-mercato/shared/lib/i18n/config'\nimport { createFallbackTranslator } from '@open-mercato/shared/lib/i18n/translate'\nimport type { Message, MessageObject } from '../data/entities'\nimport { MessageAccessToken } from '../data/entities'\nimport MessageEmail from '../emails/MessageEmail'\nimport { resolveAttachmentAbsolutePath } from '../../attachments/lib/storage'\nimport { generateAuthToken, hashAuthToken } from '../../auth/lib/tokenHash'\nimport type { MessageEmailAttachment } from './attachments'\nimport { renderMarkdownEmailBody } from './markdownEmailBody'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('messages').child({ component: 'email-sender' })\n\nconst ACCESS_TOKEN_EXPIRY_HOURS = 24 * 7\nconst MAX_EMAIL_ATTACHMENTS = 10\nconst MAX_TOTAL_ATTACHMENT_BYTES = 20 * 1024 * 1024\n\nexport type SenderIdentity = {\n  name: string | null\n  email: string | null\n}\n\nfunction logDebug(message: string, details?: Record<string, unknown>) {\n  logger.debug(message, details)\n}\n\nfunction resolveAppUrl(): string | null {\n  const raw = process.env.APP_URL?.trim()\n  if (!raw) return null\n  return raw.replace(/\\/$/, '')\n}\n\nfunction buildSenderLabel(sender: SenderIdentity): string {\n  const name = sender.name?.trim()\n  if (name) return name\n  const email = sender.email?.trim()\n  if (email) return email\n  return 'System'\n}\n\nfunction resolveObjectLabels(objects: MessageObject[]): string[] {\n  return objects.map((item) => `${item.entityModule}.${item.entityType} (${item.entityId})`)\n}\n\ntype EmailAttachment = {\n  filename: string\n  content: string\n  contentType?: string\n}\n\nasync function mapAttachmentsForEmail(\n  messageId: string,\n  attachments: MessageEmailAttachment[],\n): Promise<EmailAttachment[]> {\n  const emailAttachments: EmailAttachment[] = []\n  let totalBytes = 0\n\n  for (const attachment of attachments.slice(0, MAX_EMAIL_ATTACHMENTS)) {\n    const absolutePath = resolveAttachmentAbsolutePath(\n      attachment.partitionCode,\n      attachment.storagePath,\n      attachment.storageDriver,\n    )\n\n    let buffer: Buffer\n    try {\n      buffer = await fs.readFile(absolutePath)\n    } catch (error) {\n      logDebug('Attachment skipped: file read failed', {\n        messageId,\n        fileName: attachment.fileName,\n        error: error instanceof Error ? error.message : String(error),\n      })\n      continue\n    }\n\n    if ((totalBytes + buffer.length) > MAX_TOTAL_ATTACHMENT_BYTES) {\n      logDebug('Attachment skipped: total size limit exceeded', {\n        messageId,\n        fileName: attachment.fileName,\n        nextTotalBytes: totalBytes + buffer.length,\n      })\n      continue\n    }\n\n    totalBytes += buffer.length\n    emailAttachments.push({\n      filename: attachment.fileName,\n      content: buffer.toString('base64'),\n      contentType: attachment.mimeType || undefined,\n    })\n  }\n\n  return emailAttachments\n}\n\nasync function buildEmailBodyHtml(message: Message): Promise<string | undefined> {\n  if (message.bodyFormat !== 'markdown') return undefined\n  if (!message.body) return undefined\n  return renderMarkdownEmailBody(message.body)\n}\n\nasync function buildEmailCopy(sentAt: Date) {\n  const dict = await loadDictionary(defaultLocale)\n  const t = createFallbackTranslator(dict)\n  return {\n    preview: t('messages.email.preview', 'You received a message in Open Mercato'),\n    heading: t('messages.email.heading', 'New message'),\n    from: t('messages.email.from', 'From'),\n    sentAt: t('messages.email.sentAt', 'Sent'),\n    sentAtLabel: sentAt.toISOString(),\n    viewCta: t('messages.email.viewCta', 'View message'),\n    attachmentsLabel: t('messages.email.attachments', 'Attachments'),\n    objectsLabel: t('messages.email.objects', 'Related records'),\n    footer: t('messages.email.footer', 'Open Mercato messages'),\n  }\n}\n\nexport async function createMessageAccessToken(\n  em: EntityManager,\n  messageId: string,\n  recipientUserId: string,\n): Promise<string> {\n  const rawToken = generateAuthToken()\n  const expiresAt = new Date(Date.now() + ACCESS_TOKEN_EXPIRY_HOURS * 60 * 60 * 1000)\n  const record = em.create(MessageAccessToken, {\n    messageId,\n    recipientUserId,\n    token: hashAuthToken(rawToken),\n    expiresAt,\n    useCount: 0,\n  })\n  await em.persist(record).flush()\n  logDebug('Created access token', {\n    messageId,\n    recipientUserId,\n    expiresAt: expiresAt.toISOString(),\n  })\n  return rawToken\n}\n\nexport async function sendMessageEmailToRecipient(params: {\n  em: EntityManager\n  message: Message\n  recipientUserId: string\n  recipientEmail: string\n  sender: SenderIdentity\n  objects: MessageObject[]\n  attachments: MessageEmailAttachment[]\n}): Promise<void> {\n  const { em, message, recipientUserId, recipientEmail, sender, objects, attachments } = params\n  const token = await createMessageAccessToken(em, message.id, recipientUserId)\n  const appUrl = resolveAppUrl()\n  const viewUrl = appUrl ? `${appUrl}/messages/view/${token}` : null\n  if (!appUrl) {\n    logDebug('APP_URL missing - email link omitted', { messageId: message.id })\n  }\n  const copy = await buildEmailCopy(message.sentAt ?? new Date())\n  const bodyHtml = await buildEmailBodyHtml(message)\n  const emailAttachments = await mapAttachmentsForEmail(message.id, attachments)\n  logDebug('Sending recipient email', {\n    messageId: message.id,\n    recipientUserId,\n    recipientEmail,\n    hasViewUrl: Boolean(viewUrl),\n    attachmentsCount: emailAttachments.length,\n    from: resolveDefaultEmailFromAddress() ?? null,\n  })\n\n  await sendEmail({\n    to: recipientEmail,\n    subject: message.subject,\n    react: MessageEmail({\n      subject: message.subject,\n      body: message.body,\n      bodyHtml,\n      senderName: buildSenderLabel(sender),\n      sentAtLabel: copy.sentAtLabel,\n      viewUrl,\n      copy,\n      attachmentNames: attachments.map((item) => item.fileName),\n      objectLabels: resolveObjectLabels(objects),\n    }),\n    attachments: emailAttachments,\n    tenantId: message.tenantId,\n    organizationId: message.organizationId ?? null,\n  })\n}\n\nexport async function sendMessageEmailToExternal(params: {\n  message: Message\n  email: string\n  sender: SenderIdentity\n  objects: MessageObject[]\n  attachments: MessageEmailAttachment[]\n}): Promise<void> {\n  const { message, email, sender, objects, attachments } = params\n  const copy = await buildEmailCopy(message.sentAt ?? new Date())\n  const bodyHtml = await buildEmailBodyHtml(message)\n  const emailAttachments = await mapAttachmentsForEmail(message.id, attachments)\n  logDebug('Sending external email', {\n    messageId: message.id,\n    email,\n    attachmentsCount: emailAttachments.length,\n    from: resolveDefaultEmailFromAddress() ?? null,\n  })\n\n  await sendEmail({\n    to: email,\n    subject: message.subject,\n    react: MessageEmail({\n      subject: message.subject,\n      body: message.body,\n      bodyHtml,\n      senderName: buildSenderLabel(sender),\n      sentAtLabel: copy.sentAtLabel,\n      viewUrl: null,\n      copy,\n      attachmentNames: attachments.map((item) => item.fileName),\n      objectLabels: resolveObjectLabels(objects),\n    }),\n    attachments: emailAttachments,\n    tenantId: message.tenantId,\n    organizationId: message.organizationId ?? null,\n  })\n  logDebug('External email sent', {\n    messageId: message.id,\n    email,\n  })\n}\n"],
+  "mappings": "AAAA,SAAS,YAAY,UAAU;AAE/B,SAAS,iBAAiB;AAC1B,SAAS,sCAAsC;AAC/C,SAAS,sBAAsB;AAC/B,SAAS,qBAAqB;AAC9B,SAAS,gCAAgC;AAEzC,SAAS,0BAA0B;AACnC,OAAO,kBAAkB;AACzB,SAAS,qCAAqC;AAC9C,SAAS,mBAAmB,qBAAqB;AAEjD,SAAS,+BAA+B;AACxC,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,UAAU,EAAE,MAAM,EAAE,WAAW,eAAe,CAAC;AAE3E,MAAM,4BAA4B,KAAK;AACvC,MAAM,wBAAwB;AAC9B,MAAM,6BAA6B,KAAK,OAAO;AAO/C,SAAS,SAAS,SAAiB,SAAmC;AACpE,SAAO,MAAM,SAAS,OAAO;AAC/B;AAEA,SAAS,gBAA+B;AACtC,QAAM,MAAM,QAAQ,IAAI,SAAS,KAAK;AACtC,MAAI,CAAC,IAAK,QAAO;AACjB,SAAO,IAAI,QAAQ,OAAO,EAAE;AAC9B;AAEA,SAAS,iBAAiB,QAAgC;AACxD,QAAM,OAAO,OAAO,MAAM,KAAK;AAC/B,MAAI,KAAM,QAAO;AACjB,QAAM,QAAQ,OAAO,OAAO,KAAK;AACjC,MAAI,MAAO,QAAO;AAClB,SAAO;AACT;AAEA,SAAS,oBAAoB,SAAoC;AAC/D,SAAO,QAAQ,IAAI,CAAC,SAAS,GAAG,KAAK,YAAY,IAAI,KAAK,UAAU,KAAK,KAAK,QAAQ,GAAG;AAC3F;AAQA,eAAe,uBACb,WACA,aAC4B;AAC5B,QAAM,mBAAsC,CAAC;AAC7C,MAAI,aAAa;AAEjB,aAAW,cAAc,YAAY,MAAM,GAAG,qBAAqB,GAAG;AACpE,UAAM,eAAe;AAAA,MACnB,WAAW;AAAA,MACX,WAAW;AAAA,MACX,WAAW;AAAA,IACb;AAEA,QAAI;AACJ,QAAI;AACF,eAAS,MAAM,GAAG,SAAS,YAAY;AAAA,IACzC,SAAS,OAAO;AACd,eAAS,wCAAwC;AAAA,QAC/C;AAAA,QACA,UAAU,WAAW;AAAA,QACrB,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AAAA,MAC9D,CAAC;AACD;AAAA,IACF;AAEA,QAAK,aAAa,OAAO,SAAU,4BAA4B;AAC7D,eAAS,iDAAiD;AAAA,QACxD;AAAA,QACA,UAAU,WAAW;AAAA,QACrB,gBAAgB,aAAa,OAAO;AAAA,MACtC,CAAC;AACD;AAAA,IACF;AAEA,kBAAc,OAAO;AACrB,qBAAiB,KAAK;AAAA,MACpB,UAAU,WAAW;AAAA,MACrB,SAAS,OAAO,SAAS,QAAQ;AAAA,MACjC,aAAa,WAAW,YAAY;AAAA,IACtC,CAAC;AAAA,EACH;AAEA,SAAO;AACT;AAEA,eAAe,mBAAmB,SAA+C;AAC/E,MAAI,QAAQ,eAAe,WAAY,QAAO;AAC9C,MAAI,CAAC,QAAQ,KAAM,QAAO;AAC1B,SAAO,wBAAwB,QAAQ,IAAI;AAC7C;AAEA,eAAe,eAAe,QAAc;AAC1C,QAAM,OAAO,MAAM,eAAe,aAAa;AAC/C,QAAM,IAAI,yBAAyB,IAAI;AACvC,SAAO;AAAA,IACL,SAAS,EAAE,0BAA0B,wCAAwC;AAAA,IAC7E,SAAS,EAAE,0BAA0B,aAAa;AAAA,IAClD,MAAM,EAAE,uBAAuB,MAAM;AAAA,IACrC,QAAQ,EAAE,yBAAyB,MAAM;AAAA,IACzC,aAAa,OAAO,YAAY;AAAA,IAChC,SAAS,EAAE,0BAA0B,cAAc;AAAA,IACnD,kBAAkB,EAAE,8BAA8B,aAAa;AAAA,IAC/D,cAAc,EAAE,0BAA0B,iBAAiB;AAAA,IAC3D,QAAQ,EAAE,yBAAyB,uBAAuB;AAAA,EAC5D;AACF;AAEA,eAAsB,yBACpB,IACA,WACA,iBACiB;AACjB,QAAM,WAAW,kBAAkB;AACnC,QAAM,YAAY,IAAI,KAAK,KAAK,IAAI,IAAI,4BAA4B,KAAK,KAAK,GAAI;AAClF,QAAM,SAAS,GAAG,OAAO,oBAAoB;AAAA,IAC3C;AAAA,IACA;AAAA,IACA,OAAO,cAAc,QAAQ;AAAA,IAC7B;AAAA,IACA,UAAU;AAAA,EACZ,CAAC;AACD,QAAM,GAAG,QAAQ,MAAM,EAAE,MAAM;AAC/B,WAAS,wBAAwB;AAAA,IAC/B;AAAA,IACA;AAAA,IACA,WAAW,UAAU,YAAY;AAAA,EACnC,CAAC;AACD,SAAO;AACT;AAEA,eAAsB,4BAA4B,QAQhC;AAChB,QAAM,EAAE,IAAI,SAAS,iBAAiB,gBAAgB,QAAQ,SAAS,YAAY,IAAI;AACvF,QAAM,QAAQ,MAAM,yBAAyB,IAAI,QAAQ,IAAI,eAAe;AAC5E,QAAM,SAAS,cAAc;AAC7B,QAAM,UAAU,SAAS,GAAG,MAAM,kBAAkB,KAAK,KAAK;AAC9D,MAAI,CAAC,QAAQ;AACX,aAAS,wCAAwC,EAAE,WAAW,QAAQ,GAAG,CAAC;AAAA,EAC5E;AACA,QAAM,OAAO,MAAM,eAAe,QAAQ,UAAU,oBAAI,KAAK,CAAC;AAC9D,QAAM,WAAW,MAAM,mBAAmB,OAAO;AACjD,QAAM,mBAAmB,MAAM,uBAAuB,QAAQ,IAAI,WAAW;AAC7E,WAAS,2BAA2B;AAAA,IAClC,WAAW,QAAQ;AAAA,IACnB;AAAA,IACA;AAAA,IACA,YAAY,QAAQ,OAAO;AAAA,IAC3B,kBAAkB,iBAAiB;AAAA,IACnC,MAAM,+BAA+B,KAAK;AAAA,EAC5C,CAAC;AAED,QAAM,UAAU;AAAA,IACd,IAAI;AAAA,IACJ,SAAS,QAAQ;AAAA,IACjB,OAAO,aAAa;AAAA,MAClB,SAAS,QAAQ;AAAA,MACjB,MAAM,QAAQ;AAAA,MACd;AAAA,MACA,YAAY,iBAAiB,MAAM;AAAA,MACnC,aAAa,KAAK;AAAA,MAClB;AAAA,MACA;AAAA,MACA,iBAAiB,YAAY,IAAI,CAAC,SAAS,KAAK,QAAQ;AAAA,MACxD,cAAc,oBAAoB,OAAO;AAAA,IAC3C,CAAC;AAAA,IACD,aAAa;AAAA,IACb,UAAU,QAAQ;AAAA,IAClB,gBAAgB,QAAQ,kBAAkB;AAAA,EAC5C,CAAC;AACH;AAEA,eAAsB,2BAA2B,QAM/B;AAChB,QAAM,EAAE,SAAS,OAAO,QAAQ,SAAS,YAAY,IAAI;AACzD,QAAM,OAAO,MAAM,eAAe,QAAQ,UAAU,oBAAI,KAAK,CAAC;AAC9D,QAAM,WAAW,MAAM,mBAAmB,OAAO;AACjD,QAAM,mBAAmB,MAAM,uBAAuB,QAAQ,IAAI,WAAW;AAC7E,WAAS,0BAA0B;AAAA,IACjC,WAAW,QAAQ;AAAA,IACnB;AAAA,IACA,kBAAkB,iBAAiB;AAAA,IACnC,MAAM,+BAA+B,KAAK;AAAA,EAC5C,CAAC;AAED,QAAM,UAAU;AAAA,IACd,IAAI;AAAA,IACJ,SAAS,QAAQ;AAAA,IACjB,OAAO,aAAa;AAAA,MAClB,SAAS,QAAQ;AAAA,MACjB,MAAM,QAAQ;AAAA,MACd;AAAA,MACA,YAAY,iBAAiB,MAAM;AAAA,MACnC,aAAa,KAAK;AAAA,MAClB,SAAS;AAAA,MACT;AAAA,MACA,iBAAiB,YAAY,IAAI,CAAC,SAAS,KAAK,QAAQ;AAAA,MACxD,cAAc,oBAAoB,OAAO;AAAA,IAC3C,CAAC;AAAA,IACD,aAAa;AAAA,IACb,UAAU,QAAQ;AAAA,IAClB,gBAAgB,QAAQ,kBAAkB;AAAA,EAC5C,CAAC;AACD,WAAS,uBAAuB;AAAA,IAC9B,WAAW,QAAQ;AAAA,IACnB;AAAA,EACF,CAAC;AACH;",
   "names": []
 }

package/dist/modules/messages/lib/forwarding.js

@@ -29,7 +29,7 @@ function ensureMaxForwardBodyLength(body) {
     throw new Error("Forward body exceeds maximum length");
   }
 }
-async function buildForwardThreadSlice(em, scope, selectedMessage) {
+async function buildForwardThreadSlice(em, scope, selectedMessage, options = {}) {
   const decryptedThreadMessages = await findWithDecryption(
     em,
     Message,
@@ -109,7 +109,7 @@ async function buildForwardThreadSlice(em, scope, selectedMessage) {
     }) : [];
     const recipientMessageIds = new Set(recipientRows.map((row) => row.messageId));
     const visibleSlice = threadSlice.filter(
-      (item) => item.senderUserId === scope.userId || recipientMessageIds.has(item.id)
+      (item) => item.senderUserId === scope.userId || recipientMessageIds.has(item.id) || options.includePublicThreadMessages === true && item.visibility === "public"
     );
     return visibleSlice.map((item) => ({
       id: item.id,
@@ -172,8 +172,8 @@ async function buildForwardPreviewFromThreadSlice(em, scope, selectedMessage, th
     body
   };
 }
-async function buildForwardPreview(em, scope, selectedMessage) {
-  const threadSlice = await buildForwardThreadSlice(em, scope, selectedMessage);
+async function buildForwardPreview(em, scope, selectedMessage, options = {}) {
+  const threadSlice = await buildForwardThreadSlice(em, scope, selectedMessage, options);
   return buildForwardPreviewFromThreadSlice(em, scope, selectedMessage, threadSlice);
 }
 function buildForwardBodyFromLegacyInput(generatedBody, additionalBody) {

package/dist/modules/messages/lib/forwarding.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/messages/lib/forwarding.ts"],
-  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport { findOneWithDecryption, findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { User } from '../../auth/data/entities'\nimport { Message, MessageRecipient } from '../data/entities'\n\nconst FORWARD_MARKER = '---------- Forwarded message ----------'\nconst MAX_FORWARD_BODY_LENGTH = 50_000\n\ntype MessageScope = {\n  tenantId: string\n  organizationId: string | null\n  userId?: string | null\n}\n\ntype ForwardMessageBlock = {\n  id: string\n  senderUserId: string\n  subject: string\n  body: string\n  sentAt: Date | null | undefined\n  createdAt: Date\n}\n\nfunction formatForwardSubject(subject: string): string {\n  if (/^fwd:\\s*/i.test(subject)) return subject\n  return `Fwd: ${subject}`\n}\n\nfunction formatDateLabel(date: Date | null | undefined): string {\n  if (!date) return '-'\n  return date.toISOString()\n}\n\nfunction normalizeSubject(subject: string | null | undefined): string {\n  if (typeof subject !== 'string') return '(no subject)'\n  const trimmed = subject.trim()\n  return trimmed.length > 0 ? trimmed : '(no subject)'\n}\n\nfunction formatUserLabel(user: { name?: string | null; email?: string | null } | undefined, fallbackUserId: string): string {\n  const name = user?.name?.trim()\n  const email = user?.email?.trim()\n  if (name && email) return `${name} <${email}>`\n  if (name) return name\n  if (email) return email\n  return fallbackUserId\n}\n\nfunction ensureMaxForwardBodyLength(body: string): void {\n  if (body.length > MAX_FORWARD_BODY_LENGTH) {\n    throw new Error('Forward body exceeds maximum length')\n  }\n}\n\nexport async function buildForwardThreadSlice(\n  em: EntityManager,\n  scope: MessageScope,\n  selectedMessage: Message,\n): Promise<ForwardMessageBlock[]> {\n  const decryptedThreadMessages = await findWithDecryption(\n    em,\n    Message,\n    {\n      threadId: selectedMessage.threadId ?? selectedMessage.id,\n      tenantId: scope.tenantId,\n      organizationId: scope.organizationId,\n      deletedAt: null,\n      isDraft: false,\n    },\n    {\n      orderBy: {\n        sentAt: 'ASC',\n        createdAt: 'ASC',\n        id: 'ASC',\n      },\n    },\n    { tenantId: scope.tenantId, organizationId: scope.organizationId },\n  )\n\n  const messagesById = new Map(decryptedThreadMessages.map((item) => [item.id, item]))\n  messagesById.set(selectedMessage.id, selectedMessage)\n\n  const threadRootId = selectedMessage.threadId ?? null\n  if (threadRootId && !messagesById.has(threadRootId)) {\n    const threadRoot = await findOneWithDecryption(\n      em,\n      Message,\n      {\n        id: threadRootId,\n        tenantId: scope.tenantId,\n        organizationId: scope.organizationId,\n        deletedAt: null,\n        isDraft: false,\n      },\n      undefined,\n      { tenantId: scope.tenantId, organizationId: scope.organizationId },\n    )\n    if (threadRoot) {\n      messagesById.set(threadRoot.id, threadRoot)\n    }\n  }\n\n  let parentMessageId = selectedMessage.parentMessageId ?? null\n  while (parentMessageId) {\n    const parentMessage = await findOneWithDecryption(\n      em,\n      Message,\n      {\n        id: parentMessageId,\n        tenantId: scope.tenantId,\n        organizationId: scope.organizationId,\n        deletedAt: null,\n        isDraft: false,\n      },\n      undefined,\n      { tenantId: scope.tenantId, organizationId: scope.organizationId },\n    )\n    if (!parentMessage) break\n    messagesById.set(parentMessage.id, parentMessage)\n    parentMessageId = parentMessage.parentMessageId ?? null\n  }\n\n  const orderedThreadMessages = Array.from(messagesById.values()).sort((a, b) => {\n    const aTime = a.sentAt?.getTime() ?? 0\n    const bTime = b.sentAt?.getTime() ?? 0\n    if (aTime !== bTime) return aTime - bTime\n\n    const aCreatedAt = a.createdAt.getTime()\n    const bCreatedAt = b.createdAt.getTime()\n    if (aCreatedAt !== bCreatedAt) return aCreatedAt - bCreatedAt\n\n    return a.id.localeCompare(b.id)\n  })\n\n  const selectedIndex = orderedThreadMessages.findIndex((item) => item.id === selectedMessage.id)\n  const threadSlice = selectedIndex >= 0 ? orderedThreadMessages.slice(0, selectedIndex + 1) : [selectedMessage]\n\n  if (scope.userId) {\n    const sliceIds = threadSlice.map((item) => item.id)\n    const recipientRows = sliceIds.length > 0\n      ? await em.find(MessageRecipient, {\n        messageId: { $in: sliceIds },\n        recipientUserId: scope.userId,\n        deletedAt: null,\n      })\n      : []\n    const recipientMessageIds = new Set(recipientRows.map((row) => row.messageId))\n    const visibleSlice = threadSlice.filter(\n      (item) => item.senderUserId === scope.userId || recipientMessageIds.has(item.id),\n    )\n    return visibleSlice.map((item) => ({\n      id: item.id,\n      senderUserId: item.senderUserId,\n      subject: item.subject,\n      body: item.body,\n      sentAt: item.sentAt,\n      createdAt: item.createdAt,\n    }))\n  }\n\n  return threadSlice.map((item) => ({\n    id: item.id,\n    senderUserId: item.senderUserId,\n    subject: item.subject,\n    body: item.body,\n    sentAt: item.sentAt,\n    createdAt: item.createdAt,\n  }))\n}\n\nexport async function buildForwardPreviewFromThreadSlice(\n  em: EntityManager,\n  scope: MessageScope,\n  selectedMessage: Message,\n  threadSlice: ForwardMessageBlock[],\n): Promise<{ subject: string; body: string }> {\n  const allMessageIds = threadSlice.map((item) => item.id)\n  const allSenderIds = Array.from(new Set(threadSlice.map((item) => item.senderUserId)))\n\n  const recipients = allMessageIds.length > 0\n    ? await em.find(MessageRecipient, {\n      messageId: { $in: allMessageIds },\n      deletedAt: null,\n    })\n    : []\n\n  const allRecipientUserIds = Array.from(new Set(recipients.map((item) => item.recipientUserId)))\n  const allUserIds = Array.from(new Set([...allSenderIds, ...allRecipientUserIds]))\n  const users = allUserIds.length > 0\n    ? await findWithDecryption(\n      em,\n      User,\n      { id: { $in: allUserIds } },\n      undefined,\n      { tenantId: scope.tenantId, organizationId: scope.organizationId },\n    )\n    : []\n\n  const userById = new Map(users.map((user) => [user.id, user]))\n  const recipientsByMessageId = new Map<string, MessageRecipient[]>()\n  for (const recipient of recipients) {\n    const currentRecipients = recipientsByMessageId.get(recipient.messageId) ?? []\n    currentRecipients.push(recipient)\n    recipientsByMessageId.set(recipient.messageId, currentRecipients)\n  }\n\n  const body = threadSlice.map((item) => {\n    const sender = userById.get(item.senderUserId)\n    const toRecipients = recipientsByMessageId.get(item.id) ?? []\n    const toLabel = toRecipients.length > 0\n      ? toRecipients\n        .map((recipient) => formatUserLabel(userById.get(recipient.recipientUserId), recipient.recipientUserId))\n        .join(', ')\n      : '-'\n\n    return [\n      FORWARD_MARKER,\n      `From: ${formatUserLabel(sender, item.senderUserId)}`,\n      `Date: ${formatDateLabel(item.sentAt ?? item.createdAt)}`,\n      `Subject: ${normalizeSubject(item.subject)}`,\n      `To: ${toLabel}`,\n      '',\n      item.body ?? '',\n    ].join('\\n')\n  }).join('\\n\\n')\n\n  ensureMaxForwardBodyLength(body)\n\n  return {\n    subject: formatForwardSubject(selectedMessage.subject),\n    body,\n  }\n}\n\nexport async function buildForwardPreview(\n  em: EntityManager,\n  scope: MessageScope,\n  selectedMessage: Message,\n): Promise<{ subject: string; body: string }> {\n  const threadSlice = await buildForwardThreadSlice(em, scope, selectedMessage)\n  return buildForwardPreviewFromThreadSlice(em, scope, selectedMessage, threadSlice)\n}\n\nexport function buildForwardBodyFromLegacyInput(\n  generatedBody: string,\n  additionalBody?: string,\n): string {\n  const legacyPrefix = additionalBody?.trim()\n  const finalBody = legacyPrefix\n    ? `${legacyPrefix}\\n\\n${generatedBody}`\n    : generatedBody\n  ensureMaxForwardBodyLength(finalBody)\n  return finalBody\n}\n"],
-  "mappings": "AACA,SAAS,uBAAuB,0BAA0B;AAC1D,SAAS,YAAY;AACrB,SAAS,SAAS,wBAAwB;AAE1C,MAAM,iBAAiB;AACvB,MAAM,0BAA0B;AAiBhC,SAAS,qBAAqB,SAAyB;AACrD,MAAI,YAAY,KAAK,OAAO,EAAG,QAAO;AACtC,SAAO,QAAQ,OAAO;AACxB;AAEA,SAAS,gBAAgB,MAAuC;AAC9D,MAAI,CAAC,KAAM,QAAO;AAClB,SAAO,KAAK,YAAY;AAC1B;AAEA,SAAS,iBAAiB,SAA4C;AACpE,MAAI,OAAO,YAAY,SAAU,QAAO;AACxC,QAAM,UAAU,QAAQ,KAAK;AAC7B,SAAO,QAAQ,SAAS,IAAI,UAAU;AACxC;AAEA,SAAS,gBAAgB,MAAmE,gBAAgC;AAC1H,QAAM,OAAO,MAAM,MAAM,KAAK;AAC9B,QAAM,QAAQ,MAAM,OAAO,KAAK;AAChC,MAAI,QAAQ,MAAO,QAAO,GAAG,IAAI,KAAK,KAAK;AAC3C,MAAI,KAAM,QAAO;AACjB,MAAI,MAAO,QAAO;AAClB,SAAO;AACT;AAEA,SAAS,2BAA2B,MAAoB;AACtD,MAAI,KAAK,SAAS,yBAAyB;AACzC,UAAM,IAAI,MAAM,qCAAqC;AAAA,EACvD;AACF;AAEA,eAAsB,wBACpB,IACA,OACA,iBACgC;AAChC,QAAM,0BAA0B,MAAM;AAAA,IACpC;AAAA,IACA;AAAA,IACA;AAAA,MACE,UAAU,gBAAgB,YAAY,gBAAgB;AAAA,MACtD,UAAU,MAAM;AAAA,MAChB,gBAAgB,MAAM;AAAA,MACtB,WAAW;AAAA,MACX,SAAS;AAAA,IACX;AAAA,IACA;AAAA,MACE,SAAS;AAAA,QACP,QAAQ;AAAA,QACR,WAAW;AAAA,QACX,IAAI;AAAA,MACN;AAAA,IACF;AAAA,IACA,EAAE,UAAU,MAAM,UAAU,gBAAgB,MAAM,eAAe;AAAA,EACnE;AAEA,QAAM,eAAe,IAAI,IAAI,wBAAwB,IAAI,CAAC,SAAS,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC;AACnF,eAAa,IAAI,gBAAgB,IAAI,eAAe;AAEpD,QAAM,eAAe,gBAAgB,YAAY;AACjD,MAAI,gBAAgB,CAAC,aAAa,IAAI,YAAY,GAAG;AACnD,UAAM,aAAa,MAAM;AAAA,MACvB;AAAA,MACA;AAAA,MACA;AAAA,QACE,IAAI;AAAA,QACJ,UAAU,MAAM;AAAA,QAChB,gBAAgB,MAAM;AAAA,QACtB,WAAW;AAAA,QACX,SAAS;AAAA,MACX;AAAA,MACA;AAAA,MACA,EAAE,UAAU,MAAM,UAAU,gBAAgB,MAAM,eAAe;AAAA,IACnE;AACA,QAAI,YAAY;AACd,mBAAa,IAAI,WAAW,IAAI,UAAU;AAAA,IAC5C;AAAA,EACF;AAEA,MAAI,kBAAkB,gBAAgB,mBAAmB;AACzD,SAAO,iBAAiB;AACtB,UAAM,gBAAgB,MAAM;AAAA,MAC1B;AAAA,MACA;AAAA,MACA;AAAA,QACE,IAAI;AAAA,QACJ,UAAU,MAAM;AAAA,QAChB,gBAAgB,MAAM;AAAA,QACtB,WAAW;AAAA,QACX,SAAS;AAAA,MACX;AAAA,MACA;AAAA,MACA,EAAE,UAAU,MAAM,UAAU,gBAAgB,MAAM,eAAe;AAAA,IACnE;AACA,QAAI,CAAC,cAAe;AACpB,iBAAa,IAAI,cAAc,IAAI,aAAa;AAChD,sBAAkB,cAAc,mBAAmB;AAAA,EACrD;AAEA,QAAM,wBAAwB,MAAM,KAAK,aAAa,OAAO,CAAC,EAAE,KAAK,CAAC,GAAG,MAAM;AAC7E,UAAM,QAAQ,EAAE,QAAQ,QAAQ,KAAK;AACrC,UAAM,QAAQ,EAAE,QAAQ,QAAQ,KAAK;AACrC,QAAI,UAAU,MAAO,QAAO,QAAQ;AAEpC,UAAM,aAAa,EAAE,UAAU,QAAQ;AACvC,UAAM,aAAa,EAAE,UAAU,QAAQ;AACvC,QAAI,eAAe,WAAY,QAAO,aAAa;AAEnD,WAAO,EAAE,GAAG,cAAc,EAAE,EAAE;AAAA,EAChC,CAAC;AAED,QAAM,gBAAgB,sBAAsB,UAAU,CAAC,SAAS,KAAK,OAAO,gBAAgB,EAAE;AAC9F,QAAM,cAAc,iBAAiB,IAAI,sBAAsB,MAAM,GAAG,gBAAgB,CAAC,IAAI,CAAC,eAAe;AAE7G,MAAI,MAAM,QAAQ;AAChB,UAAM,WAAW,YAAY,IAAI,CAAC,SAAS,KAAK,EAAE;AAClD,UAAM,gBAAgB,SAAS,SAAS,IACpC,MAAM,GAAG,KAAK,kBAAkB;AAAA,MAChC,WAAW,EAAE,KAAK,SAAS;AAAA,MAC3B,iBAAiB,MAAM;AAAA,MACvB,WAAW;AAAA,IACb,CAAC,IACC,CAAC;AACL,UAAM,sBAAsB,IAAI,IAAI,cAAc,IAAI,CAAC,QAAQ,IAAI,SAAS,CAAC;AAC7E,UAAM,eAAe,YAAY;AAAA,MAC/B,CAAC,SAAS,KAAK,iBAAiB,MAAM,UAAU,oBAAoB,IAAI,KAAK,EAAE;AAAA,IACjF;AACA,WAAO,aAAa,IAAI,CAAC,UAAU;AAAA,MACjC,IAAI,KAAK;AAAA,MACT,cAAc,KAAK;AAAA,MACnB,SAAS,KAAK;AAAA,MACd,MAAM,KAAK;AAAA,MACX,QAAQ,KAAK;AAAA,MACb,WAAW,KAAK;AAAA,IAClB,EAAE;AAAA,EACJ;AAEA,SAAO,YAAY,IAAI,CAAC,UAAU;AAAA,IAChC,IAAI,KAAK;AAAA,IACT,cAAc,KAAK;AAAA,IACnB,SAAS,KAAK;AAAA,IACd,MAAM,KAAK;AAAA,IACX,QAAQ,KAAK;AAAA,IACb,WAAW,KAAK;AAAA,EAClB,EAAE;AACJ;AAEA,eAAsB,mCACpB,IACA,OACA,iBACA,aAC4C;AAC5C,QAAM,gBAAgB,YAAY,IAAI,CAAC,SAAS,KAAK,EAAE;AACvD,QAAM,eAAe,MAAM,KAAK,IAAI,IAAI,YAAY,IAAI,CAAC,SAAS,KAAK,YAAY,CAAC,CAAC;AAErF,QAAM,aAAa,cAAc,SAAS,IACtC,MAAM,GAAG,KAAK,kBAAkB;AAAA,IAChC,WAAW,EAAE,KAAK,cAAc;AAAA,IAChC,WAAW;AAAA,EACb,CAAC,IACC,CAAC;AAEL,QAAM,sBAAsB,MAAM,KAAK,IAAI,IAAI,WAAW,IAAI,CAAC,SAAS,KAAK,eAAe,CAAC,CAAC;AAC9F,QAAM,aAAa,MAAM,KAAK,oBAAI,IAAI,CAAC,GAAG,cAAc,GAAG,mBAAmB,CAAC,CAAC;AAChF,QAAM,QAAQ,WAAW,SAAS,IAC9B,MAAM;AAAA,IACN;AAAA,IACA;AAAA,IACA,EAAE,IAAI,EAAE,KAAK,WAAW,EAAE;AAAA,IAC1B;AAAA,IACA,EAAE,UAAU,MAAM,UAAU,gBAAgB,MAAM,eAAe;AAAA,EACnE,IACE,CAAC;AAEL,QAAM,WAAW,IAAI,IAAI,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC;AAC7D,QAAM,wBAAwB,oBAAI,IAAgC;AAClE,aAAW,aAAa,YAAY;AAClC,UAAM,oBAAoB,sBAAsB,IAAI,UAAU,SAAS,KAAK,CAAC;AAC7E,sBAAkB,KAAK,SAAS;AAChC,0BAAsB,IAAI,UAAU,WAAW,iBAAiB;AAAA,EAClE;AAEA,QAAM,OAAO,YAAY,IAAI,CAAC,SAAS;AACrC,UAAM,SAAS,SAAS,IAAI,KAAK,YAAY;AAC7C,UAAM,eAAe,sBAAsB,IAAI,KAAK,EAAE,KAAK,CAAC;AAC5D,UAAM,UAAU,aAAa,SAAS,IAClC,aACC,IAAI,CAAC,cAAc,gBAAgB,SAAS,IAAI,UAAU,eAAe,GAAG,UAAU,eAAe,CAAC,EACtG,KAAK,IAAI,IACV;AAEJ,WAAO;AAAA,MACL;AAAA,MACA,SAAS,gBAAgB,QAAQ,KAAK,YAAY,CAAC;AAAA,MACnD,SAAS,gBAAgB,KAAK,UAAU,KAAK,SAAS,CAAC;AAAA,MACvD,YAAY,iBAAiB,KAAK,OAAO,CAAC;AAAA,MAC1C,OAAO,OAAO;AAAA,MACd;AAAA,MACA,KAAK,QAAQ;AAAA,IACf,EAAE,KAAK,IAAI;AAAA,EACb,CAAC,EAAE,KAAK,MAAM;AAEd,6BAA2B,IAAI;AAE/B,SAAO;AAAA,IACL,SAAS,qBAAqB,gBAAgB,OAAO;AAAA,IACrD;AAAA,EACF;AACF;AAEA,eAAsB,oBACpB,IACA,OACA,iBAC4C;AAC5C,QAAM,cAAc,MAAM,wBAAwB,IAAI,OAAO,eAAe;AAC5E,SAAO,mCAAmC,IAAI,OAAO,iBAAiB,WAAW;AACnF;AAEO,SAAS,gCACd,eACA,gBACQ;AACR,QAAM,eAAe,gBAAgB,KAAK;AAC1C,QAAM,YAAY,eACd,GAAG,YAAY;AAAA;AAAA,EAAO,aAAa,KACnC;AACJ,6BAA2B,SAAS;AACpC,SAAO;AACT;",
+  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport { findOneWithDecryption, findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { User } from '../../auth/data/entities'\nimport { Message, MessageRecipient } from '../data/entities'\n\nconst FORWARD_MARKER = '---------- Forwarded message ----------'\nconst MAX_FORWARD_BODY_LENGTH = 50_000\n\ntype MessageScope = {\n  tenantId: string\n  organizationId: string | null\n  userId?: string | null\n}\n\n/**\n * `includePublicThreadMessages` widens the participant filter to every\n * explicitly public message in the slice. Set it only for a caller who reached\n * the thread through channel-thread access (#6355): on a channel conversation\n * the inbound messages have no platform participant, so the participant filter\n * alone would forward an empty body.\n */\ntype ForwardThreadSliceOptions = {\n  includePublicThreadMessages?: boolean\n}\n\ntype ForwardMessageBlock = {\n  id: string\n  senderUserId: string\n  subject: string\n  body: string\n  sentAt: Date | null | undefined\n  createdAt: Date\n}\n\nfunction formatForwardSubject(subject: string): string {\n  if (/^fwd:\\s*/i.test(subject)) return subject\n  return `Fwd: ${subject}`\n}\n\nfunction formatDateLabel(date: Date | null | undefined): string {\n  if (!date) return '-'\n  return date.toISOString()\n}\n\nfunction normalizeSubject(subject: string | null | undefined): string {\n  if (typeof subject !== 'string') return '(no subject)'\n  const trimmed = subject.trim()\n  return trimmed.length > 0 ? trimmed : '(no subject)'\n}\n\nfunction formatUserLabel(user: { name?: string | null; email?: string | null } | undefined, fallbackUserId: string): string {\n  const name = user?.name?.trim()\n  const email = user?.email?.trim()\n  if (name && email) return `${name} <${email}>`\n  if (name) return name\n  if (email) return email\n  return fallbackUserId\n}\n\nfunction ensureMaxForwardBodyLength(body: string): void {\n  if (body.length > MAX_FORWARD_BODY_LENGTH) {\n    throw new Error('Forward body exceeds maximum length')\n  }\n}\n\nexport async function buildForwardThreadSlice(\n  em: EntityManager,\n  scope: MessageScope,\n  selectedMessage: Message,\n  options: ForwardThreadSliceOptions = {},\n): Promise<ForwardMessageBlock[]> {\n  const decryptedThreadMessages = await findWithDecryption(\n    em,\n    Message,\n    {\n      threadId: selectedMessage.threadId ?? selectedMessage.id,\n      tenantId: scope.tenantId,\n      organizationId: scope.organizationId,\n      deletedAt: null,\n      isDraft: false,\n    },\n    {\n      orderBy: {\n        sentAt: 'ASC',\n        createdAt: 'ASC',\n        id: 'ASC',\n      },\n    },\n    { tenantId: scope.tenantId, organizationId: scope.organizationId },\n  )\n\n  const messagesById = new Map(decryptedThreadMessages.map((item) => [item.id, item]))\n  messagesById.set(selectedMessage.id, selectedMessage)\n\n  const threadRootId = selectedMessage.threadId ?? null\n  if (threadRootId && !messagesById.has(threadRootId)) {\n    const threadRoot = await findOneWithDecryption(\n      em,\n      Message,\n      {\n        id: threadRootId,\n        tenantId: scope.tenantId,\n        organizationId: scope.organizationId,\n        deletedAt: null,\n        isDraft: false,\n      },\n      undefined,\n      { tenantId: scope.tenantId, organizationId: scope.organizationId },\n    )\n    if (threadRoot) {\n      messagesById.set(threadRoot.id, threadRoot)\n    }\n  }\n\n  let parentMessageId = selectedMessage.parentMessageId ?? null\n  while (parentMessageId) {\n    const parentMessage = await findOneWithDecryption(\n      em,\n      Message,\n      {\n        id: parentMessageId,\n        tenantId: scope.tenantId,\n        organizationId: scope.organizationId,\n        deletedAt: null,\n        isDraft: false,\n      },\n      undefined,\n      { tenantId: scope.tenantId, organizationId: scope.organizationId },\n    )\n    if (!parentMessage) break\n    messagesById.set(parentMessage.id, parentMessage)\n    parentMessageId = parentMessage.parentMessageId ?? null\n  }\n\n  const orderedThreadMessages = Array.from(messagesById.values()).sort((a, b) => {\n    const aTime = a.sentAt?.getTime() ?? 0\n    const bTime = b.sentAt?.getTime() ?? 0\n    if (aTime !== bTime) return aTime - bTime\n\n    const aCreatedAt = a.createdAt.getTime()\n    const bCreatedAt = b.createdAt.getTime()\n    if (aCreatedAt !== bCreatedAt) return aCreatedAt - bCreatedAt\n\n    return a.id.localeCompare(b.id)\n  })\n\n  const selectedIndex = orderedThreadMessages.findIndex((item) => item.id === selectedMessage.id)\n  const threadSlice = selectedIndex >= 0 ? orderedThreadMessages.slice(0, selectedIndex + 1) : [selectedMessage]\n\n  if (scope.userId) {\n    const sliceIds = threadSlice.map((item) => item.id)\n    const recipientRows = sliceIds.length > 0\n      ? await em.find(MessageRecipient, {\n        messageId: { $in: sliceIds },\n        recipientUserId: scope.userId,\n        deletedAt: null,\n      })\n      : []\n    const recipientMessageIds = new Set(recipientRows.map((row) => row.messageId))\n    const visibleSlice = threadSlice.filter(\n      (item) => item.senderUserId === scope.userId\n        || recipientMessageIds.has(item.id)\n        || (options.includePublicThreadMessages === true && item.visibility === 'public'),\n    )\n    return visibleSlice.map((item) => ({\n      id: item.id,\n      senderUserId: item.senderUserId,\n      subject: item.subject,\n      body: item.body,\n      sentAt: item.sentAt,\n      createdAt: item.createdAt,\n    }))\n  }\n\n  return threadSlice.map((item) => ({\n    id: item.id,\n    senderUserId: item.senderUserId,\n    subject: item.subject,\n    body: item.body,\n    sentAt: item.sentAt,\n    createdAt: item.createdAt,\n  }))\n}\n\nexport async function buildForwardPreviewFromThreadSlice(\n  em: EntityManager,\n  scope: MessageScope,\n  selectedMessage: Message,\n  threadSlice: ForwardMessageBlock[],\n): Promise<{ subject: string; body: string }> {\n  const allMessageIds = threadSlice.map((item) => item.id)\n  const allSenderIds = Array.from(new Set(threadSlice.map((item) => item.senderUserId)))\n\n  const recipients = allMessageIds.length > 0\n    ? await em.find(MessageRecipient, {\n      messageId: { $in: allMessageIds },\n      deletedAt: null,\n    })\n    : []\n\n  const allRecipientUserIds = Array.from(new Set(recipients.map((item) => item.recipientUserId)))\n  const allUserIds = Array.from(new Set([...allSenderIds, ...allRecipientUserIds]))\n  const users = allUserIds.length > 0\n    ? await findWithDecryption(\n      em,\n      User,\n      { id: { $in: allUserIds } },\n      undefined,\n      { tenantId: scope.tenantId, organizationId: scope.organizationId },\n    )\n    : []\n\n  const userById = new Map(users.map((user) => [user.id, user]))\n  const recipientsByMessageId = new Map<string, MessageRecipient[]>()\n  for (const recipient of recipients) {\n    const currentRecipients = recipientsByMessageId.get(recipient.messageId) ?? []\n    currentRecipients.push(recipient)\n    recipientsByMessageId.set(recipient.messageId, currentRecipients)\n  }\n\n  const body = threadSlice.map((item) => {\n    const sender = userById.get(item.senderUserId)\n    const toRecipients = recipientsByMessageId.get(item.id) ?? []\n    const toLabel = toRecipients.length > 0\n      ? toRecipients\n        .map((recipient) => formatUserLabel(userById.get(recipient.recipientUserId), recipient.recipientUserId))\n        .join(', ')\n      : '-'\n\n    return [\n      FORWARD_MARKER,\n      `From: ${formatUserLabel(sender, item.senderUserId)}`,\n      `Date: ${formatDateLabel(item.sentAt ?? item.createdAt)}`,\n      `Subject: ${normalizeSubject(item.subject)}`,\n      `To: ${toLabel}`,\n      '',\n      item.body ?? '',\n    ].join('\\n')\n  }).join('\\n\\n')\n\n  ensureMaxForwardBodyLength(body)\n\n  return {\n    subject: formatForwardSubject(selectedMessage.subject),\n    body,\n  }\n}\n\nexport async function buildForwardPreview(\n  em: EntityManager,\n  scope: MessageScope,\n  selectedMessage: Message,\n  options: ForwardThreadSliceOptions = {},\n): Promise<{ subject: string; body: string }> {\n  const threadSlice = await buildForwardThreadSlice(em, scope, selectedMessage, options)\n  return buildForwardPreviewFromThreadSlice(em, scope, selectedMessage, threadSlice)\n}\n\nexport function buildForwardBodyFromLegacyInput(\n  generatedBody: string,\n  additionalBody?: string,\n): string {\n  const legacyPrefix = additionalBody?.trim()\n  const finalBody = legacyPrefix\n    ? `${legacyPrefix}\\n\\n${generatedBody}`\n    : generatedBody\n  ensureMaxForwardBodyLength(finalBody)\n  return finalBody\n}\n"],
+  "mappings": "AACA,SAAS,uBAAuB,0BAA0B;AAC1D,SAAS,YAAY;AACrB,SAAS,SAAS,wBAAwB;AAE1C,MAAM,iBAAiB;AACvB,MAAM,0BAA0B;AA4BhC,SAAS,qBAAqB,SAAyB;AACrD,MAAI,YAAY,KAAK,OAAO,EAAG,QAAO;AACtC,SAAO,QAAQ,OAAO;AACxB;AAEA,SAAS,gBAAgB,MAAuC;AAC9D,MAAI,CAAC,KAAM,QAAO;AAClB,SAAO,KAAK,YAAY;AAC1B;AAEA,SAAS,iBAAiB,SAA4C;AACpE,MAAI,OAAO,YAAY,SAAU,QAAO;AACxC,QAAM,UAAU,QAAQ,KAAK;AAC7B,SAAO,QAAQ,SAAS,IAAI,UAAU;AACxC;AAEA,SAAS,gBAAgB,MAAmE,gBAAgC;AAC1H,QAAM,OAAO,MAAM,MAAM,KAAK;AAC9B,QAAM,QAAQ,MAAM,OAAO,KAAK;AAChC,MAAI,QAAQ,MAAO,QAAO,GAAG,IAAI,KAAK,KAAK;AAC3C,MAAI,KAAM,QAAO;AACjB,MAAI,MAAO,QAAO;AAClB,SAAO;AACT;AAEA,SAAS,2BAA2B,MAAoB;AACtD,MAAI,KAAK,SAAS,yBAAyB;AACzC,UAAM,IAAI,MAAM,qCAAqC;AAAA,EACvD;AACF;AAEA,eAAsB,wBACpB,IACA,OACA,iBACA,UAAqC,CAAC,GACN;AAChC,QAAM,0BAA0B,MAAM;AAAA,IACpC;AAAA,IACA;AAAA,IACA;AAAA,MACE,UAAU,gBAAgB,YAAY,gBAAgB;AAAA,MACtD,UAAU,MAAM;AAAA,MAChB,gBAAgB,MAAM;AAAA,MACtB,WAAW;AAAA,MACX,SAAS;AAAA,IACX;AAAA,IACA;AAAA,MACE,SAAS;AAAA,QACP,QAAQ;AAAA,QACR,WAAW;AAAA,QACX,IAAI;AAAA,MACN;AAAA,IACF;AAAA,IACA,EAAE,UAAU,MAAM,UAAU,gBAAgB,MAAM,eAAe;AAAA,EACnE;AAEA,QAAM,eAAe,IAAI,IAAI,wBAAwB,IAAI,CAAC,SAAS,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC;AACnF,eAAa,IAAI,gBAAgB,IAAI,eAAe;AAEpD,QAAM,eAAe,gBAAgB,YAAY;AACjD,MAAI,gBAAgB,CAAC,aAAa,IAAI,YAAY,GAAG;AACnD,UAAM,aAAa,MAAM;AAAA,MACvB;AAAA,MACA;AAAA,MACA;AAAA,QACE,IAAI;AAAA,QACJ,UAAU,MAAM;AAAA,QAChB,gBAAgB,MAAM;AAAA,QACtB,WAAW;AAAA,QACX,SAAS;AAAA,MACX;AAAA,MACA;AAAA,MACA,EAAE,UAAU,MAAM,UAAU,gBAAgB,MAAM,eAAe;AAAA,IACnE;AACA,QAAI,YAAY;AACd,mBAAa,IAAI,WAAW,IAAI,UAAU;AAAA,IAC5C;AAAA,EACF;AAEA,MAAI,kBAAkB,gBAAgB,mBAAmB;AACzD,SAAO,iBAAiB;AACtB,UAAM,gBAAgB,MAAM;AAAA,MAC1B;AAAA,MACA;AAAA,MACA;AAAA,QACE,IAAI;AAAA,QACJ,UAAU,MAAM;AAAA,QAChB,gBAAgB,MAAM;AAAA,QACtB,WAAW;AAAA,QACX,SAAS;AAAA,MACX;AAAA,MACA;AAAA,MACA,EAAE,UAAU,MAAM,UAAU,gBAAgB,MAAM,eAAe;AAAA,IACnE;AACA,QAAI,CAAC,cAAe;AACpB,iBAAa,IAAI,cAAc,IAAI,aAAa;AAChD,sBAAkB,cAAc,mBAAmB;AAAA,EACrD;AAEA,QAAM,wBAAwB,MAAM,KAAK,aAAa,OAAO,CAAC,EAAE,KAAK,CAAC,GAAG,MAAM;AAC7E,UAAM,QAAQ,EAAE,QAAQ,QAAQ,KAAK;AACrC,UAAM,QAAQ,EAAE,QAAQ,QAAQ,KAAK;AACrC,QAAI,UAAU,MAAO,QAAO,QAAQ;AAEpC,UAAM,aAAa,EAAE,UAAU,QAAQ;AACvC,UAAM,aAAa,EAAE,UAAU,QAAQ;AACvC,QAAI,eAAe,WAAY,QAAO,aAAa;AAEnD,WAAO,EAAE,GAAG,cAAc,EAAE,EAAE;AAAA,EAChC,CAAC;AAED,QAAM,gBAAgB,sBAAsB,UAAU,CAAC,SAAS,KAAK,OAAO,gBAAgB,EAAE;AAC9F,QAAM,cAAc,iBAAiB,IAAI,sBAAsB,MAAM,GAAG,gBAAgB,CAAC,IAAI,CAAC,eAAe;AAE7G,MAAI,MAAM,QAAQ;AAChB,UAAM,WAAW,YAAY,IAAI,CAAC,SAAS,KAAK,EAAE;AAClD,UAAM,gBAAgB,SAAS,SAAS,IACpC,MAAM,GAAG,KAAK,kBAAkB;AAAA,MAChC,WAAW,EAAE,KAAK,SAAS;AAAA,MAC3B,iBAAiB,MAAM;AAAA,MACvB,WAAW;AAAA,IACb,CAAC,IACC,CAAC;AACL,UAAM,sBAAsB,IAAI,IAAI,cAAc,IAAI,CAAC,QAAQ,IAAI,SAAS,CAAC;AAC7E,UAAM,eAAe,YAAY;AAAA,MAC/B,CAAC,SAAS,KAAK,iBAAiB,MAAM,UACjC,oBAAoB,IAAI,KAAK,EAAE,KAC9B,QAAQ,gCAAgC,QAAQ,KAAK,eAAe;AAAA,IAC5E;AACA,WAAO,aAAa,IAAI,CAAC,UAAU;AAAA,MACjC,IAAI,KAAK;AAAA,MACT,cAAc,KAAK;AAAA,MACnB,SAAS,KAAK;AAAA,MACd,MAAM,KAAK;AAAA,MACX,QAAQ,KAAK;AAAA,MACb,WAAW,KAAK;AAAA,IAClB,EAAE;AAAA,EACJ;AAEA,SAAO,YAAY,IAAI,CAAC,UAAU;AAAA,IAChC,IAAI,KAAK;AAAA,IACT,cAAc,KAAK;AAAA,IACnB,SAAS,KAAK;AAAA,IACd,MAAM,KAAK;AAAA,IACX,QAAQ,KAAK;AAAA,IACb,WAAW,KAAK;AAAA,EAClB,EAAE;AACJ;AAEA,eAAsB,mCACpB,IACA,OACA,iBACA,aAC4C;AAC5C,QAAM,gBAAgB,YAAY,IAAI,CAAC,SAAS,KAAK,EAAE;AACvD,QAAM,eAAe,MAAM,KAAK,IAAI,IAAI,YAAY,IAAI,CAAC,SAAS,KAAK,YAAY,CAAC,CAAC;AAErF,QAAM,aAAa,cAAc,SAAS,IACtC,MAAM,GAAG,KAAK,kBAAkB;AAAA,IAChC,WAAW,EAAE,KAAK,cAAc;AAAA,IAChC,WAAW;AAAA,EACb,CAAC,IACC,CAAC;AAEL,QAAM,sBAAsB,MAAM,KAAK,IAAI,IAAI,WAAW,IAAI,CAAC,SAAS,KAAK,eAAe,CAAC,CAAC;AAC9F,QAAM,aAAa,MAAM,KAAK,oBAAI,IAAI,CAAC,GAAG,cAAc,GAAG,mBAAmB,CAAC,CAAC;AAChF,QAAM,QAAQ,WAAW,SAAS,IAC9B,MAAM;AAAA,IACN;AAAA,IACA;AAAA,IACA,EAAE,IAAI,EAAE,KAAK,WAAW,EAAE;AAAA,IAC1B;AAAA,IACA,EAAE,UAAU,MAAM,UAAU,gBAAgB,MAAM,eAAe;AAAA,EACnE,IACE,CAAC;AAEL,QAAM,WAAW,IAAI,IAAI,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC;AAC7D,QAAM,wBAAwB,oBAAI,IAAgC;AAClE,aAAW,aAAa,YAAY;AAClC,UAAM,oBAAoB,sBAAsB,IAAI,UAAU,SAAS,KAAK,CAAC;AAC7E,sBAAkB,KAAK,SAAS;AAChC,0BAAsB,IAAI,UAAU,WAAW,iBAAiB;AAAA,EAClE;AAEA,QAAM,OAAO,YAAY,IAAI,CAAC,SAAS;AACrC,UAAM,SAAS,SAAS,IAAI,KAAK,YAAY;AAC7C,UAAM,eAAe,sBAAsB,IAAI,KAAK,EAAE,KAAK,CAAC;AAC5D,UAAM,UAAU,aAAa,SAAS,IAClC,aACC,IAAI,CAAC,cAAc,gBAAgB,SAAS,IAAI,UAAU,eAAe,GAAG,UAAU,eAAe,CAAC,EACtG,KAAK,IAAI,IACV;AAEJ,WAAO;AAAA,MACL;AAAA,MACA,SAAS,gBAAgB,QAAQ,KAAK,YAAY,CAAC;AAAA,MACnD,SAAS,gBAAgB,KAAK,UAAU,KAAK,SAAS,CAAC;AAAA,MACvD,YAAY,iBAAiB,KAAK,OAAO,CAAC;AAAA,MAC1C,OAAO,OAAO;AAAA,MACd;AAAA,MACA,KAAK,QAAQ;AAAA,IACf,EAAE,KAAK,IAAI;AAAA,EACb,CAAC,EAAE,KAAK,MAAM;AAEd,6BAA2B,IAAI;AAE/B,SAAO;AAAA,IACL,SAAS,qBAAqB,gBAAgB,OAAO;AAAA,IACrD;AAAA,EACF;AACF;AAEA,eAAsB,oBACpB,IACA,OACA,iBACA,UAAqC,CAAC,GACM;AAC5C,QAAM,cAAc,MAAM,wBAAwB,IAAI,OAAO,iBAAiB,OAAO;AACrF,SAAO,mCAAmC,IAAI,OAAO,iBAAiB,WAAW;AACnF;AAEO,SAAS,gCACd,eACA,gBACQ;AACR,QAAM,eAAe,gBAAgB,KAAK;AAC1C,QAAM,YAAY,eACd,GAAG,YAAY;AAAA;AAAA,EAAO,aAAa,KACnC;AACJ,6BAA2B,SAAS;AACpC,SAAO;AACT;",
   "names": []
 }

package/dist/modules/messages/lib/markdownEmailBody.js

@@ -0,0 +1,15 @@
+import * as React from "react";
+async function renderMarkdownEmailBody(body) {
+  const ReactMarkdownModule = await import("react-markdown");
+  const remarkGfmModule = await import("remark-gfm");
+  const ReactMarkdown = ReactMarkdownModule.default ?? ReactMarkdownModule;
+  const remarkGfmPlugin = remarkGfmModule.default ?? remarkGfmModule;
+  const { renderToStaticMarkup } = await import("react-dom/server");
+  return renderToStaticMarkup(
+    React.createElement(ReactMarkdown, { remarkPlugins: [remarkGfmPlugin] }, body)
+  );
+}
+export {
+  renderMarkdownEmailBody
+};
+//# sourceMappingURL=markdownEmailBody.js.map

package/dist/modules/messages/lib/markdownEmailBody.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/messages/lib/markdownEmailBody.ts"],
+  "sourcesContent": ["import * as React from 'react'\n\n/**\n * Render a markdown message body to the HTML an email carries.\n *\n * Shared by every path that delivers a composed message off-platform, so a\n * markdown compose reads the same whether it leaves through the platform sender\n * or through an employee's own mailbox. The renderer dependencies are imported\n * lazily because they are only needed for markdown bodies.\n */\nexport async function renderMarkdownEmailBody(body: string): Promise<string> {\n  const ReactMarkdownModule = await import('react-markdown')\n  const remarkGfmModule = await import('remark-gfm')\n  const ReactMarkdown =\n    (ReactMarkdownModule.default ?? ReactMarkdownModule) as React.ComponentType<{\n      remarkPlugins?: unknown\n      children?: React.ReactNode\n    }>\n  const remarkGfmPlugin = remarkGfmModule.default ?? remarkGfmModule\n  const { renderToStaticMarkup } = await import('react-dom/server')\n\n  return renderToStaticMarkup(\n    React.createElement(ReactMarkdown, { remarkPlugins: [remarkGfmPlugin] }, body),\n  )\n}\n"],
+  "mappings": "AAAA,YAAY,WAAW;AAUvB,eAAsB,wBAAwB,MAA+B;AAC3E,QAAM,sBAAsB,MAAM,OAAO,gBAAgB;AACzD,QAAM,kBAAkB,MAAM,OAAO,YAAY;AACjD,QAAM,gBACH,oBAAoB,WAAW;AAIlC,QAAM,kBAAkB,gBAAgB,WAAW;AACnD,QAAM,EAAE,qBAAqB,IAAI,MAAM,OAAO,kBAAkB;AAEhE,SAAO;AAAA,IACL,MAAM,cAAc,eAAe,EAAE,eAAe,CAAC,eAAe,EAAE,GAAG,IAAI;AAAA,EAC/E;AACF;",
+  "names": []
+}

package/dist/modules/messages/lib/messageSourceEntityTypes.js

@@ -0,0 +1,7 @@
+const SEND_AS_USER_SOURCE_ENTITY_TYPE = "communication_channels.send_as_user";
+import { EXTERNAL_CONVERSATION_SOURCE_ENTITY_TYPE } from "./composeSourceChannelType.js";
+export {
+  EXTERNAL_CONVERSATION_SOURCE_ENTITY_TYPE,
+  SEND_AS_USER_SOURCE_ENTITY_TYPE
+};
+//# sourceMappingURL=messageSourceEntityTypes.js.map

package/dist/modules/messages/lib/messageSourceEntityTypes.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/messages/lib/messageSourceEntityTypes.ts"],
+  "sourcesContent": ["/**\n * `Message.sourceEntityType` sentinels written by `communication_channels` for\n * messages it composes on the platform's behalf. Owned here (not in\n * `communication_channels`) because `messages` is a hard dependency of\n * `communication_channels` (it imports the `Message` entity directly), while\n * `communication_channels` is an optional dependency of `messages` \u2014 see\n * `resolveComposeSourceChannelType`'s `tryResolveChannelTypeService`. A\n * constant defined here can be imported by `communication_channels` without\n * creating the reverse, forbidden coupling.\n */\nexport const SEND_AS_USER_SOURCE_ENTITY_TYPE = 'communication_channels.send_as_user'\nexport { EXTERNAL_CONVERSATION_SOURCE_ENTITY_TYPE } from './composeSourceChannelType'\n"],
+  "mappings": "AAUO,MAAM,kCAAkC;AAC/C,SAAS,gDAAgD;",
+  "names": []
+}

package/dist/modules/messages/lib/routeHelpers.js

@@ -1,4 +1,10 @@
 import { resolveRequestContext } from "@open-mercato/shared/lib/api/context";
+import {
+  CHANNEL_THREAD_FALLBACK_FEATURE,
+  EXTERNAL_CONVERSATION_SOURCE_ENTITY_TYPE,
+  resolveActorFeatures,
+  resolveMessageChannelThreadAccess
+} from "./channelThreadAccess.js";
 function hasOrganizationAccess(scopeOrganizationId, messageOrganizationId) {
   if (scopeOrganizationId) {
     return messageOrganizationId === scopeOrganizationId;
@@ -25,6 +31,40 @@ async function parseRequestBodySafe(req) {
     return {};
   }
 }
+async function canUseChannelThreadFallback(ctx, scope) {
+  if (!scope.userId || !scope.tenantId) return false;
+  try {
+    const rbac = ctx.container.resolve("rbacService");
+    if (typeof rbac?.userHasAllFeatures !== "function") return false;
+    return await rbac.userHasAllFeatures(scope.userId, [CHANNEL_THREAD_FALLBACK_FEATURE], {
+      tenantId: scope.tenantId,
+      organizationId: scope.organizationId
+    });
+  } catch {
+    return false;
+  }
+}
+async function hasChannelThreadReadAccess(ctx, scope, message) {
+  if (message.sourceEntityType !== EXTERNAL_CONVERSATION_SOURCE_ENTITY_TYPE) return false;
+  if (!await canUseChannelThreadFallback(ctx, scope)) return false;
+  const channelThread = await resolveMessageChannelThreadAccess(
+    ctx.container,
+    { tenantId: scope.tenantId, organizationId: scope.organizationId ?? null },
+    { messageThreadId: message.threadId ?? message.id },
+    { userId: scope.userId, features: resolveActorFeatures(ctx.auth) }
+  );
+  return channelThread?.canAccess === true;
+}
+async function canPostToChannelThread(ctx, scope, messageThreadId) {
+  const channelThread = await resolveMessageChannelThreadAccess(
+    ctx.container,
+    { tenantId: scope.tenantId, organizationId: scope.organizationId ?? null },
+    { messageThreadId },
+    { userId: scope.userId, features: resolveActorFeatures(ctx.auth) }
+  );
+  if (!channelThread) return true;
+  return channelThread.canAccess && await canUseChannelThreadFallback(ctx, scope);
+}
 async function canUseMessageEmailFeature(ctx, scope) {
   if (!scope.userId || !scope.tenantId) return false;
   const rbac = ctx.container.resolve("rbacService");
@@ -34,7 +74,10 @@ async function canUseMessageEmailFeature(ctx, scope) {
   });
 }
 export {
+  canPostToChannelThread,
+  canUseChannelThreadFallback,
   canUseMessageEmailFeature,
+  hasChannelThreadReadAccess,
   hasOrganizationAccess,
   parseRequestBodySafe,
   resolveMessageContext

package/dist/modules/messages/lib/routeHelpers.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/messages/lib/routeHelpers.ts"],
-  "sourcesContent": ["import { resolveRequestContext } from '@open-mercato/shared/lib/api/context'\n\nexport function hasOrganizationAccess(\n  scopeOrganizationId: string | null,\n  messageOrganizationId: string | null | undefined,\n): boolean {\n  if (scopeOrganizationId) {\n    return messageOrganizationId === scopeOrganizationId\n  }\n  return messageOrganizationId == null\n}\n\nexport type MessageScope = {\n  tenantId: string\n  organizationId: string | null\n  userId: string\n}\n\nexport async function resolveMessageContext(req: Request): Promise<{\n  ctx: Awaited<ReturnType<typeof resolveRequestContext>>['ctx']\n  scope: MessageScope\n}> {\n  const { ctx } = await resolveRequestContext(req)\n  return {\n    ctx,\n    scope: {\n      tenantId: ctx.auth?.tenantId ?? '',\n      organizationId: ctx.auth?.orgId ?? null,\n      userId: ctx.auth?.sub ?? '',\n    },\n  }\n}\n\ntype RbacService = {\n  userHasAllFeatures: (\n    userId: string,\n    required: string[],\n    scope: { tenantId: string | null; organizationId: string | null }\n  ) => Promise<boolean>\n}\n\nexport async function parseRequestBodySafe(req: Request): Promise<unknown> {\n  try {\n    const text = await req.text()\n    if (!text) return {}\n    return JSON.parse(text)\n  } catch {\n    return {}\n  }\n}\n\nexport async function canUseMessageEmailFeature(\n  ctx: Awaited<ReturnType<typeof resolveRequestContext>>['ctx'],\n  scope: MessageScope,\n): Promise<boolean> {\n  if (!scope.userId || !scope.tenantId) return false\n\n  const rbac = ctx.container.resolve('rbacService') as RbacService\n  return rbac.userHasAllFeatures(scope.userId, ['messages.email'], {\n    tenantId: scope.tenantId,\n    organizationId: scope.organizationId,\n  })\n}\n"],
-  "mappings": "AAAA,SAAS,6BAA6B;AAE/B,SAAS,sBACd,qBACA,uBACS;AACT,MAAI,qBAAqB;AACvB,WAAO,0BAA0B;AAAA,EACnC;AACA,SAAO,yBAAyB;AAClC;AAQA,eAAsB,sBAAsB,KAGzC;AACD,QAAM,EAAE,IAAI,IAAI,MAAM,sBAAsB,GAAG;AAC/C,SAAO;AAAA,IACL;AAAA,IACA,OAAO;AAAA,MACL,UAAU,IAAI,MAAM,YAAY;AAAA,MAChC,gBAAgB,IAAI,MAAM,SAAS;AAAA,MACnC,QAAQ,IAAI,MAAM,OAAO;AAAA,IAC3B;AAAA,EACF;AACF;AAUA,eAAsB,qBAAqB,KAAgC;AACzE,MAAI;AACF,UAAM,OAAO,MAAM,IAAI,KAAK;AAC5B,QAAI,CAAC,KAAM,QAAO,CAAC;AACnB,WAAO,KAAK,MAAM,IAAI;AAAA,EACxB,QAAQ;AACN,WAAO,CAAC;AAAA,EACV;AACF;AAEA,eAAsB,0BACpB,KACA,OACkB;AAClB,MAAI,CAAC,MAAM,UAAU,CAAC,MAAM,SAAU,QAAO;AAE7C,QAAM,OAAO,IAAI,UAAU,QAAQ,aAAa;AAChD,SAAO,KAAK,mBAAmB,MAAM,QAAQ,CAAC,gBAAgB,GAAG;AAAA,IAC/D,UAAU,MAAM;AAAA,IAChB,gBAAgB,MAAM;AAAA,EACxB,CAAC;AACH;",
+  "sourcesContent": ["import { resolveRequestContext } from '@open-mercato/shared/lib/api/context'\nimport {\n  CHANNEL_THREAD_FALLBACK_FEATURE,\n  EXTERNAL_CONVERSATION_SOURCE_ENTITY_TYPE,\n  resolveActorFeatures,\n  resolveMessageChannelThreadAccess,\n} from './channelThreadAccess'\n\nexport function hasOrganizationAccess(\n  scopeOrganizationId: string | null,\n  messageOrganizationId: string | null | undefined,\n): boolean {\n  if (scopeOrganizationId) {\n    return messageOrganizationId === scopeOrganizationId\n  }\n  return messageOrganizationId == null\n}\n\nexport type MessageScope = {\n  tenantId: string\n  organizationId: string | null\n  userId: string\n}\n\nexport async function resolveMessageContext(req: Request): Promise<{\n  ctx: Awaited<ReturnType<typeof resolveRequestContext>>['ctx']\n  scope: MessageScope\n}> {\n  const { ctx } = await resolveRequestContext(req)\n  return {\n    ctx,\n    scope: {\n      tenantId: ctx.auth?.tenantId ?? '',\n      organizationId: ctx.auth?.orgId ?? null,\n      userId: ctx.auth?.sub ?? '',\n    },\n  }\n}\n\ntype RbacService = {\n  userHasAllFeatures: (\n    userId: string,\n    required: string[],\n    scope: { tenantId: string | null; organizationId: string | null }\n  ) => Promise<boolean>\n}\n\nexport async function parseRequestBodySafe(req: Request): Promise<unknown> {\n  try {\n    const text = await req.text()\n    if (!text) return {}\n    return JSON.parse(text)\n  } catch {\n    return {}\n  }\n}\n\n/**\n * Whether the caller may fall back to the channels hub's access rule on a\n * channel-linked thread (#5535).\n *\n * Resolved through RBAC, never through `ctx.auth.features`: the session JWT\n * carries no `features` claim, so reading it here would deny every caller \u2014\n * a tenant admin included \u2014 and re-close the very journey #5535 opened. RBAC is\n * also what makes the check wildcard-aware. Fails closed, like the sibling\n * feature checks in this file.\n *\n * Takes only the container, so the reply and forward commands apply the same\n * gate as the read routes (#6355).\n */\nexport async function canUseChannelThreadFallback(\n  ctx: { container: { resolve: (name: string) => unknown } },\n  scope: MessageScope,\n): Promise<boolean> {\n  if (!scope.userId || !scope.tenantId) return false\n  try {\n    const rbac = ctx.container.resolve('rbacService') as RbacService | undefined\n    if (typeof rbac?.userHasAllFeatures !== 'function') return false\n    return await rbac.userHasAllFeatures(scope.userId, [CHANNEL_THREAD_FALLBACK_FEATURE], {\n      tenantId: scope.tenantId,\n      organizationId: scope.organizationId,\n    })\n  } catch {\n    return false\n  }\n}\n\n/**\n * Whether the caller may work the channel-linked thread `message` belongs to\n * through the channels hub's access rule, rather than as a participant (#5535).\n *\n * Shared by every read route that widens its participant test for channel\n * threads \u2014 the detail read, the attachments list and the forward preview \u2014 so\n * the three cannot drift apart (#6354). Only channel-sourced messages pay the\n * lookup; the fallback is feature-gated through {@link canUseChannelThreadFallback}\n * because the hub's rule grants every shared channel unconditionally. An\n * internal thread, a missing hub or a denied gate all read `false`, leaving the\n * participant rule in force.\n *\n * Callers still decide what the widening covers: channel access never opens a\n * message that is not explicitly public.\n */\nexport async function hasChannelThreadReadAccess(\n  ctx: Awaited<ReturnType<typeof resolveRequestContext>>['ctx'],\n  scope: MessageScope,\n  message: { id: string; threadId?: string | null; sourceEntityType?: string | null },\n): Promise<boolean> {\n  if (message.sourceEntityType !== EXTERNAL_CONVERSATION_SOURCE_ENTITY_TYPE) return false\n  if (!(await canUseChannelThreadFallback(ctx, scope))) return false\n  const channelThread = await resolveMessageChannelThreadAccess(\n    ctx.container,\n    { tenantId: scope.tenantId, organizationId: scope.organizationId ?? null },\n    { messageThreadId: message.threadId ?? message.id },\n    { userId: scope.userId, features: resolveActorFeatures(ctx.auth) },\n  )\n  return channelThread?.canAccess === true\n}\n\n/**\n * Whether the caller may post a message meant to leave the platform onto\n * `messageThreadId` (#5645 review, #6432).\n *\n * An internal thread, a thread outside the caller's scope and an absent hub all\n * resolve to `null` and allow, keeping the pre-existing rule. A channel thread\n * needs both the hub's access rule and `messages.view`, because the hub grants\n * every shared channel regardless of features. Shared by the compose route and\n * the draft send transition so a draft cannot be used to skip the gate.\n */\nexport async function canPostToChannelThread(\n  ctx: Awaited<ReturnType<typeof resolveRequestContext>>['ctx'],\n  scope: MessageScope,\n  messageThreadId: string,\n): Promise<boolean> {\n  const channelThread = await resolveMessageChannelThreadAccess(\n    ctx.container,\n    { tenantId: scope.tenantId, organizationId: scope.organizationId ?? null },\n    { messageThreadId },\n    { userId: scope.userId, features: resolveActorFeatures(ctx.auth) },\n  )\n  if (!channelThread) return true\n  return channelThread.canAccess && (await canUseChannelThreadFallback(ctx, scope))\n}\n\nexport async function canUseMessageEmailFeature(\n  ctx: Awaited<ReturnType<typeof resolveRequestContext>>['ctx'],\n  scope: MessageScope,\n): Promise<boolean> {\n  if (!scope.userId || !scope.tenantId) return false\n\n  const rbac = ctx.container.resolve('rbacService') as RbacService\n  return rbac.userHasAllFeatures(scope.userId, ['messages.email'], {\n    tenantId: scope.tenantId,\n    organizationId: scope.organizationId,\n  })\n}\n"],
+  "mappings": "AAAA,SAAS,6BAA6B;AACtC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEA,SAAS,sBACd,qBACA,uBACS;AACT,MAAI,qBAAqB;AACvB,WAAO,0BAA0B;AAAA,EACnC;AACA,SAAO,yBAAyB;AAClC;AAQA,eAAsB,sBAAsB,KAGzC;AACD,QAAM,EAAE,IAAI,IAAI,MAAM,sBAAsB,GAAG;AAC/C,SAAO;AAAA,IACL;AAAA,IACA,OAAO;AAAA,MACL,UAAU,IAAI,MAAM,YAAY;AAAA,MAChC,gBAAgB,IAAI,MAAM,SAAS;AAAA,MACnC,QAAQ,IAAI,MAAM,OAAO;AAAA,IAC3B;AAAA,EACF;AACF;AAUA,eAAsB,qBAAqB,KAAgC;AACzE,MAAI;AACF,UAAM,OAAO,MAAM,IAAI,KAAK;AAC5B,QAAI,CAAC,KAAM,QAAO,CAAC;AACnB,WAAO,KAAK,MAAM,IAAI;AAAA,EACxB,QAAQ;AACN,WAAO,CAAC;AAAA,EACV;AACF;AAeA,eAAsB,4BACpB,KACA,OACkB;AAClB,MAAI,CAAC,MAAM,UAAU,CAAC,MAAM,SAAU,QAAO;AAC7C,MAAI;AACF,UAAM,OAAO,IAAI,UAAU,QAAQ,aAAa;AAChD,QAAI,OAAO,MAAM,uBAAuB,WAAY,QAAO;AAC3D,WAAO,MAAM,KAAK,mBAAmB,MAAM,QAAQ,CAAC,+BAA+B,GAAG;AAAA,MACpF,UAAU,MAAM;AAAA,MAChB,gBAAgB,MAAM;AAAA,IACxB,CAAC;AAAA,EACH,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAiBA,eAAsB,2BACpB,KACA,OACA,SACkB;AAClB,MAAI,QAAQ,qBAAqB,yCAA0C,QAAO;AAClF,MAAI,CAAE,MAAM,4BAA4B,KAAK,KAAK,EAAI,QAAO;AAC7D,QAAM,gBAAgB,MAAM;AAAA,IAC1B,IAAI;AAAA,IACJ,EAAE,UAAU,MAAM,UAAU,gBAAgB,MAAM,kBAAkB,KAAK;AAAA,IACzE,EAAE,iBAAiB,QAAQ,YAAY,QAAQ,GAAG;AAAA,IAClD,EAAE,QAAQ,MAAM,QAAQ,UAAU,qBAAqB,IAAI,IAAI,EAAE;AAAA,EACnE;AACA,SAAO,eAAe,cAAc;AACtC;AAYA,eAAsB,uBACpB,KACA,OACA,iBACkB;AAClB,QAAM,gBAAgB,MAAM;AAAA,IAC1B,IAAI;AAAA,IACJ,EAAE,UAAU,MAAM,UAAU,gBAAgB,MAAM,kBAAkB,KAAK;AAAA,IACzE,EAAE,gBAAgB;AAAA,IAClB,EAAE,QAAQ,MAAM,QAAQ,UAAU,qBAAqB,IAAI,IAAI,EAAE;AAAA,EACnE;AACA,MAAI,CAAC,cAAe,QAAO;AAC3B,SAAO,cAAc,aAAc,MAAM,4BAA4B,KAAK,KAAK;AACjF;AAEA,eAAsB,0BACpB,KACA,OACkB;AAClB,MAAI,CAAC,MAAM,UAAU,CAAC,MAAM,SAAU,QAAO;AAE7C,QAAM,OAAO,IAAI,UAAU,QAAQ,aAAa;AAChD,SAAO,KAAK,mBAAmB,MAAM,QAAQ,CAAC,gBAAgB,GAAG;AAAA,IAC/D,UAAU,MAAM;AAAA,IAChB,gBAAgB,MAAM;AAAA,EACxB,CAAC;AACH;",
   "names": []
 }

package/dist/modules/messages/subscribers/message-notification.js

@@ -8,6 +8,10 @@ import {
 import { User } from "../../auth/data/entities.js";
 import { Message } from "../data/entities.js";
 import { notificationTypes } from "../notifications.js";
+import {
+  EXTERNAL_CONVERSATION_SOURCE_ENTITY_TYPE,
+  SEND_AS_USER_SOURCE_ENTITY_TYPE
+} from "../lib/messageSourceEntityTypes.js";
 const metadata = {
   event: "messages.message.sent",
   persistent: true,
@@ -60,6 +64,31 @@ async function resolveNotificationVariables(payload, ctx) {
     return { title: "", from: "" };
   }
 }
+async function isChannelRoutedMessage(payload, ctx) {
+  try {
+    const em = ctx.resolve("em")?.fork();
+    if (!em) return false;
+    const message = await findOneWithDecryption(
+      em,
+      Message,
+      {
+        id: payload.messageId,
+        tenantId: payload.tenantId,
+        organizationId: payload.organizationId ?? null,
+        deletedAt: null
+      },
+      void 0,
+      {
+        tenantId: payload.tenantId,
+        organizationId: payload.organizationId ?? null
+      }
+    );
+    if (!message) return false;
+    return message.sourceEntityType === SEND_AS_USER_SOURCE_ENTITY_TYPE || message.sourceEntityType === EXTERNAL_CONVERSATION_SOURCE_ENTITY_TYPE;
+  } catch {
+    return false;
+  }
+}
 async function handle(payload, ctx) {
   const uniqueRecipientUserIds = Array.from(new Set(payload.recipientUserIds));
   const typeDef = notificationTypes.find((type) => type.type === "messages.new");
@@ -94,7 +123,7 @@ async function handle(payload, ctx) {
     });
   }
   const externalEmail = payload.externalEmail?.trim();
-  if (externalEmail) {
+  if (externalEmail && !await isChannelRoutedMessage(payload, ctx)) {
     await emailQueue.enqueue({
       type: "external",
       messageId: payload.messageId,

package/dist/modules/messages/subscribers/message-notification.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/messages/subscribers/message-notification.ts"],
-  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { createQueue } from '@open-mercato/queue'\nimport { buildBatchNotificationFromType } from '../../notifications/lib/notificationBuilder'\nimport { resolveNotificationService } from '../../notifications/lib/notificationService'\nimport {\n  MESSAGES_EMAIL_QUEUE_NAME,\n  type SendMessageEmailJob,\n} from '../workers/send-email.worker'\nimport { User } from '../../auth/data/entities'\nimport { Message } from '../data/entities'\nimport { notificationTypes } from '../notifications'\n\nexport const metadata = {\n  event: 'messages.message.sent',\n  persistent: true,\n  id: 'messages:queue-email-delivery',\n}\n\ntype MessageSentPayload = {\n  messageId: string\n  senderUserId: string\n  recipientUserIds: string[]\n  sendViaEmail: boolean\n  /** Set by compose for channel-ingested messages (#6093); see `resolveNotificationVariables`. */\n  inboundFromChannel?: boolean\n  externalEmail?: string | null\n  forwardedFrom?: string\n  replyTo?: string\n  tenantId: string\n  organizationId?: string | null\n}\n\ntype ResolverContext = {\n  resolve: <T = unknown>(name: string) => T\n}\n\nasync function resolveNotificationVariables(payload: MessageSentPayload, ctx: ResolverContext): Promise<{ title: string; from: string }> {\n  try {\n    const em = ctx.resolve<EntityManager>('em')?.fork()\n    if (!em) return { title: '', from: '' }\n\n    const scope = {\n      tenantId: payload.tenantId,\n      organizationId: payload.organizationId ?? null,\n    }\n    const whereUser: { id: string; tenantId: string; deletedAt: null; organizationId?: string | null } = {\n      id: payload.senderUserId,\n      tenantId: payload.tenantId,\n      deletedAt: null,\n    }\n    if (payload.organizationId !== undefined) {\n      whereUser.organizationId = payload.organizationId\n    }\n\n    const [message, sender] = await Promise.all([\n      findOneWithDecryption(\n        em,\n        Message,\n        {\n          id: payload.messageId,\n          tenantId: payload.tenantId,\n          deletedAt: null,\n        },\n        undefined,\n        scope,\n      ),\n      findOneWithDecryption(\n        em,\n        User,\n        whereUser,\n        undefined,\n        scope,\n      ),\n    ])\n\n    // #6093: a channel-ingested message is composed on behalf of the channel's\n    // system user (or, without one, the assignee), so `senderUserId` is not who\n    // wrote it. The correspondent is on the message itself.\n    const externalFrom = payload.inboundFromChannel\n      ? [message?.externalName, message?.externalEmail].find(\n          (value): value is string => typeof value === 'string' && value.trim().length > 0,\n        )\n      : undefined\n\n    return {\n      title: typeof message?.subject === 'string' ? message.subject : '',\n      from: externalFrom\n        ?? (typeof sender?.name === 'string' && sender.name.trim().length > 0\n          ? sender.name\n          : typeof sender?.email === 'string'\n            ? sender.email\n            : ''),\n    }\n  } catch {\n    return { title: '', from: '' }\n  }\n}\n\n\nexport default async function handle(payload: MessageSentPayload, ctx: ResolverContext): Promise<void> {\n  const uniqueRecipientUserIds = Array.from(new Set(payload.recipientUserIds))\n\n  const typeDef = notificationTypes.find((type) => type.type === 'messages.new')\n  if (typeDef && uniqueRecipientUserIds.length > 0) {\n    const variables = await resolveNotificationVariables(payload, ctx)\n    const notificationService = resolveNotificationService(ctx)\n    const notificationInput = buildBatchNotificationFromType(typeDef, {\n      recipientUserIds: uniqueRecipientUserIds,\n      titleVariables: variables,\n      bodyVariables: variables,\n      sourceEntityType: 'message',\n      sourceEntityId: payload.messageId,\n      linkHref: `/backend/messages/${payload.messageId}`,\n    })\n    await notificationService.createBatch(notificationInput, {\n      tenantId: payload.tenantId,\n      organizationId: payload.organizationId ?? null,\n    })\n  }\n\n  if (!payload.sendViaEmail) {\n    return\n  }\n\n  const strategy = process.env.QUEUE_STRATEGY === 'async' ? 'async' : 'local'\n\n  const emailQueue = createQueue<SendMessageEmailJob>(MESSAGES_EMAIL_QUEUE_NAME, strategy)\n\n  for (const recipientUserId of uniqueRecipientUserIds) {\n    await emailQueue.enqueue({\n      type: 'recipient',\n      messageId: payload.messageId,\n      recipientUserId,\n      tenantId: payload.tenantId,\n      organizationId: payload.organizationId ?? null,\n    })\n  }\n\n  const externalEmail = payload.externalEmail?.trim()\n  if (externalEmail) {\n    await emailQueue.enqueue({\n      type: 'external',\n      messageId: payload.messageId,\n      email: externalEmail,\n      tenantId: payload.tenantId,\n      organizationId: payload.organizationId ?? null,\n    })\n  }\n}\n"],
-  "mappings": "AACA,SAAS,6BAA6B;AACtC,SAAS,mBAAmB;AAC5B,SAAS,sCAAsC;AAC/C,SAAS,kCAAkC;AAC3C;AAAA,EACE;AAAA,OAEK;AACP,SAAS,YAAY;AACrB,SAAS,eAAe;AACxB,SAAS,yBAAyB;AAE3B,MAAM,WAAW;AAAA,EACtB,OAAO;AAAA,EACP,YAAY;AAAA,EACZ,IAAI;AACN;AAoBA,eAAe,6BAA6B,SAA6B,KAAgE;AACvI,MAAI;AACF,UAAM,KAAK,IAAI,QAAuB,IAAI,GAAG,KAAK;AAClD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,IAAI,MAAM,GAAG;AAEtC,UAAM,QAAQ;AAAA,MACZ,UAAU,QAAQ;AAAA,MAClB,gBAAgB,QAAQ,kBAAkB;AAAA,IAC5C;AACA,UAAM,YAA+F;AAAA,MACnG,IAAI,QAAQ;AAAA,MACZ,UAAU,QAAQ;AAAA,MAClB,WAAW;AAAA,IACb;AACA,QAAI,QAAQ,mBAAmB,QAAW;AACxC,gBAAU,iBAAiB,QAAQ;AAAA,IACrC;AAEA,UAAM,CAAC,SAAS,MAAM,IAAI,MAAM,QAAQ,IAAI;AAAA,MAC1C;AAAA,QACE;AAAA,QACA;AAAA,QACA;AAAA,UACE,IAAI,QAAQ;AAAA,UACZ,UAAU,QAAQ;AAAA,UAClB,WAAW;AAAA,QACb;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,MACA;AAAA,QACE;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF,CAAC;AAKD,UAAM,eAAe,QAAQ,qBACzB,CAAC,SAAS,cAAc,SAAS,aAAa,EAAE;AAAA,MAC9C,CAAC,UAA2B,OAAO,UAAU,YAAY,MAAM,KAAK,EAAE,SAAS;AAAA,IACjF,IACA;AAEJ,WAAO;AAAA,MACL,OAAO,OAAO,SAAS,YAAY,WAAW,QAAQ,UAAU;AAAA,MAChE,MAAM,iBACA,OAAO,QAAQ,SAAS,YAAY,OAAO,KAAK,KAAK,EAAE,SAAS,IAChE,OAAO,OACP,OAAO,QAAQ,UAAU,WACvB,OAAO,QACP;AAAA,IACV;AAAA,EACF,QAAQ;AACN,WAAO,EAAE,OAAO,IAAI,MAAM,GAAG;AAAA,EAC/B;AACF;AAGA,eAAO,OAA8B,SAA6B,KAAqC;AACrG,QAAM,yBAAyB,MAAM,KAAK,IAAI,IAAI,QAAQ,gBAAgB,CAAC;AAE3E,QAAM,UAAU,kBAAkB,KAAK,CAAC,SAAS,KAAK,SAAS,cAAc;AAC7E,MAAI,WAAW,uBAAuB,SAAS,GAAG;AAChD,UAAM,YAAY,MAAM,6BAA6B,SAAS,GAAG;AACjE,UAAM,sBAAsB,2BAA2B,GAAG;AAC1D,UAAM,oBAAoB,+BAA+B,SAAS;AAAA,MAChE,kBAAkB;AAAA,MAClB,gBAAgB;AAAA,MAChB,eAAe;AAAA,MACf,kBAAkB;AAAA,MAClB,gBAAgB,QAAQ;AAAA,MACxB,UAAU,qBAAqB,QAAQ,SAAS;AAAA,IAClD,CAAC;AACD,UAAM,oBAAoB,YAAY,mBAAmB;AAAA,MACvD,UAAU,QAAQ;AAAA,MAClB,gBAAgB,QAAQ,kBAAkB;AAAA,IAC5C,CAAC;AAAA,EACH;AAEA,MAAI,CAAC,QAAQ,cAAc;AACzB;AAAA,EACF;AAEA,QAAM,WAAW,QAAQ,IAAI,mBAAmB,UAAU,UAAU;AAEpE,QAAM,aAAa,YAAiC,2BAA2B,QAAQ;AAEvF,aAAW,mBAAmB,wBAAwB;AACpD,UAAM,WAAW,QAAQ;AAAA,MACvB,MAAM;AAAA,MACN,WAAW,QAAQ;AAAA,MACnB;AAAA,MACA,UAAU,QAAQ;AAAA,MAClB,gBAAgB,QAAQ,kBAAkB;AAAA,IAC5C,CAAC;AAAA,EACH;AAEA,QAAM,gBAAgB,QAAQ,eAAe,KAAK;AAClD,MAAI,eAAe;AACjB,UAAM,WAAW,QAAQ;AAAA,MACvB,MAAM;AAAA,MACN,WAAW,QAAQ;AAAA,MACnB,OAAO;AAAA,MACP,UAAU,QAAQ;AAAA,MAClB,gBAAgB,QAAQ,kBAAkB;AAAA,IAC5C,CAAC;AAAA,EACH;AACF;",
+  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { createQueue } from '@open-mercato/queue'\nimport { buildBatchNotificationFromType } from '../../notifications/lib/notificationBuilder'\nimport { resolveNotificationService } from '../../notifications/lib/notificationService'\nimport {\n  MESSAGES_EMAIL_QUEUE_NAME,\n  type SendMessageEmailJob,\n} from '../workers/send-email.worker'\nimport { User } from '../../auth/data/entities'\nimport { Message } from '../data/entities'\nimport { notificationTypes } from '../notifications'\nimport {\n  EXTERNAL_CONVERSATION_SOURCE_ENTITY_TYPE,\n  SEND_AS_USER_SOURCE_ENTITY_TYPE,\n} from '../lib/messageSourceEntityTypes'\n\nexport const metadata = {\n  event: 'messages.message.sent',\n  persistent: true,\n  id: 'messages:queue-email-delivery',\n}\n\ntype MessageSentPayload = {\n  messageId: string\n  senderUserId: string\n  recipientUserIds: string[]\n  sendViaEmail: boolean\n  /** Set by compose for channel-ingested messages (#6093); see `resolveNotificationVariables`. */\n  inboundFromChannel?: boolean\n  externalEmail?: string | null\n  forwardedFrom?: string\n  replyTo?: string\n  tenantId: string\n  organizationId?: string | null\n}\n\ntype ResolverContext = {\n  resolve: <T = unknown>(name: string) => T\n}\n\nasync function resolveNotificationVariables(payload: MessageSentPayload, ctx: ResolverContext): Promise<{ title: string; from: string }> {\n  try {\n    const em = ctx.resolve<EntityManager>('em')?.fork()\n    if (!em) return { title: '', from: '' }\n\n    const scope = {\n      tenantId: payload.tenantId,\n      organizationId: payload.organizationId ?? null,\n    }\n    const whereUser: { id: string; tenantId: string; deletedAt: null; organizationId?: string | null } = {\n      id: payload.senderUserId,\n      tenantId: payload.tenantId,\n      deletedAt: null,\n    }\n    if (payload.organizationId !== undefined) {\n      whereUser.organizationId = payload.organizationId\n    }\n\n    const [message, sender] = await Promise.all([\n      findOneWithDecryption(\n        em,\n        Message,\n        {\n          id: payload.messageId,\n          tenantId: payload.tenantId,\n          deletedAt: null,\n        },\n        undefined,\n        scope,\n      ),\n      findOneWithDecryption(\n        em,\n        User,\n        whereUser,\n        undefined,\n        scope,\n      ),\n    ])\n\n    // #6093: a channel-ingested message is composed on behalf of the channel's\n    // system user (or, without one, the assignee), so `senderUserId` is not who\n    // wrote it. The correspondent is on the message itself.\n    const externalFrom = payload.inboundFromChannel\n      ? [message?.externalName, message?.externalEmail].find(\n          (value): value is string => typeof value === 'string' && value.trim().length > 0,\n        )\n      : undefined\n\n    return {\n      title: typeof message?.subject === 'string' ? message.subject : '',\n      from: externalFrom\n        ?? (typeof sender?.name === 'string' && sender.name.trim().length > 0\n          ? sender.name\n          : typeof sender?.email === 'string'\n            ? sender.email\n            : ''),\n    }\n  } catch {\n    return { title: '', from: '' }\n  }\n}\n\n\n/**\n * Whether this Message is already being delivered through a connected\n * channel (`sendAsUser`, or the platform copy of an inbound channel message),\n * so the external-email job below would duplicate \u2014 or, for the inbound\n * case, misdirect \u2014 the send. Mirrors `outbound-bridge.ts`'s re-fetch: the\n * `messages.message.sent` payload doesn't carry `sourceEntityType` and never\n * should, to keep this subscriber decoupled from `communication_channels`.\n *\n * Fails open (`false`, i.e. today's behavior) when the Message can't be\n * found \u2014 we can only skip the external send when we can affirmatively show\n * it is channel-routed.\n */\nasync function isChannelRoutedMessage(payload: MessageSentPayload, ctx: ResolverContext): Promise<boolean> {\n  try {\n    const em = ctx.resolve<EntityManager>('em')?.fork()\n    if (!em) return false\n\n    const message = await findOneWithDecryption(\n      em,\n      Message,\n      {\n        id: payload.messageId,\n        tenantId: payload.tenantId,\n        organizationId: payload.organizationId ?? null,\n        deletedAt: null,\n      },\n      undefined,\n      {\n        tenantId: payload.tenantId,\n        organizationId: payload.organizationId ?? null,\n      },\n    )\n    if (!message) return false\n    return (\n      message.sourceEntityType === SEND_AS_USER_SOURCE_ENTITY_TYPE ||\n      message.sourceEntityType === EXTERNAL_CONVERSATION_SOURCE_ENTITY_TYPE\n    )\n  } catch {\n    return false\n  }\n}\n\nexport default async function handle(payload: MessageSentPayload, ctx: ResolverContext): Promise<void> {\n  const uniqueRecipientUserIds = Array.from(new Set(payload.recipientUserIds))\n\n  const typeDef = notificationTypes.find((type) => type.type === 'messages.new')\n  if (typeDef && uniqueRecipientUserIds.length > 0) {\n    const variables = await resolveNotificationVariables(payload, ctx)\n    const notificationService = resolveNotificationService(ctx)\n    const notificationInput = buildBatchNotificationFromType(typeDef, {\n      recipientUserIds: uniqueRecipientUserIds,\n      titleVariables: variables,\n      bodyVariables: variables,\n      sourceEntityType: 'message',\n      sourceEntityId: payload.messageId,\n      linkHref: `/backend/messages/${payload.messageId}`,\n    })\n    await notificationService.createBatch(notificationInput, {\n      tenantId: payload.tenantId,\n      organizationId: payload.organizationId ?? null,\n    })\n  }\n\n  if (!payload.sendViaEmail) {\n    return\n  }\n\n  const strategy = process.env.QUEUE_STRATEGY === 'async' ? 'async' : 'local'\n\n  const emailQueue = createQueue<SendMessageEmailJob>(MESSAGES_EMAIL_QUEUE_NAME, strategy)\n\n  for (const recipientUserId of uniqueRecipientUserIds) {\n    await emailQueue.enqueue({\n      type: 'recipient',\n      messageId: payload.messageId,\n      recipientUserId,\n      tenantId: payload.tenantId,\n      organizationId: payload.organizationId ?? null,\n    })\n  }\n\n  const externalEmail = payload.externalEmail?.trim()\n  if (externalEmail && !(await isChannelRoutedMessage(payload, ctx))) {\n    await emailQueue.enqueue({\n      type: 'external',\n      messageId: payload.messageId,\n      email: externalEmail,\n      tenantId: payload.tenantId,\n      organizationId: payload.organizationId ?? null,\n    })\n  }\n}\n"],
+  "mappings": "AACA,SAAS,6BAA6B;AACtC,SAAS,mBAAmB;AAC5B,SAAS,sCAAsC;AAC/C,SAAS,kCAAkC;AAC3C;AAAA,EACE;AAAA,OAEK;AACP,SAAS,YAAY;AACrB,SAAS,eAAe;AACxB,SAAS,yBAAyB;AAClC;AAAA,EACE;AAAA,EACA;AAAA,OACK;AAEA,MAAM,WAAW;AAAA,EACtB,OAAO;AAAA,EACP,YAAY;AAAA,EACZ,IAAI;AACN;AAoBA,eAAe,6BAA6B,SAA6B,KAAgE;AACvI,MAAI;AACF,UAAM,KAAK,IAAI,QAAuB,IAAI,GAAG,KAAK;AAClD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,IAAI,MAAM,GAAG;AAEtC,UAAM,QAAQ;AAAA,MACZ,UAAU,QAAQ;AAAA,MAClB,gBAAgB,QAAQ,kBAAkB;AAAA,IAC5C;AACA,UAAM,YAA+F;AAAA,MACnG,IAAI,QAAQ;AAAA,MACZ,UAAU,QAAQ;AAAA,MAClB,WAAW;AAAA,IACb;AACA,QAAI,QAAQ,mBAAmB,QAAW;AACxC,gBAAU,iBAAiB,QAAQ;AAAA,IACrC;AAEA,UAAM,CAAC,SAAS,MAAM,IAAI,MAAM,QAAQ,IAAI;AAAA,MAC1C;AAAA,QACE;AAAA,QACA;AAAA,QACA;AAAA,UACE,IAAI,QAAQ;AAAA,UACZ,UAAU,QAAQ;AAAA,UAClB,WAAW;AAAA,QACb;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,MACA;AAAA,QACE;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF,CAAC;AAKD,UAAM,eAAe,QAAQ,qBACzB,CAAC,SAAS,cAAc,SAAS,aAAa,EAAE;AAAA,MAC9C,CAAC,UAA2B,OAAO,UAAU,YAAY,MAAM,KAAK,EAAE,SAAS;AAAA,IACjF,IACA;AAEJ,WAAO;AAAA,MACL,OAAO,OAAO,SAAS,YAAY,WAAW,QAAQ,UAAU;AAAA,MAChE,MAAM,iBACA,OAAO,QAAQ,SAAS,YAAY,OAAO,KAAK,KAAK,EAAE,SAAS,IAChE,OAAO,OACP,OAAO,QAAQ,UAAU,WACvB,OAAO,QACP;AAAA,IACV;AAAA,EACF,QAAQ;AACN,WAAO,EAAE,OAAO,IAAI,MAAM,GAAG;AAAA,EAC/B;AACF;AAeA,eAAe,uBAAuB,SAA6B,KAAwC;AACzG,MAAI;AACF,UAAM,KAAK,IAAI,QAAuB,IAAI,GAAG,KAAK;AAClD,QAAI,CAAC,GAAI,QAAO;AAEhB,UAAM,UAAU,MAAM;AAAA,MACpB;AAAA,MACA;AAAA,MACA;AAAA,QACE,IAAI,QAAQ;AAAA,QACZ,UAAU,QAAQ;AAAA,QAClB,gBAAgB,QAAQ,kBAAkB;AAAA,QAC1C,WAAW;AAAA,MACb;AAAA,MACA;AAAA,MACA;AAAA,QACE,UAAU,QAAQ;AAAA,QAClB,gBAAgB,QAAQ,kBAAkB;AAAA,MAC5C;AAAA,IACF;AACA,QAAI,CAAC,QAAS,QAAO;AACrB,WACE,QAAQ,qBAAqB,mCAC7B,QAAQ,qBAAqB;AAAA,EAEjC,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,eAAO,OAA8B,SAA6B,KAAqC;AACrG,QAAM,yBAAyB,MAAM,KAAK,IAAI,IAAI,QAAQ,gBAAgB,CAAC;AAE3E,QAAM,UAAU,kBAAkB,KAAK,CAAC,SAAS,KAAK,SAAS,cAAc;AAC7E,MAAI,WAAW,uBAAuB,SAAS,GAAG;AAChD,UAAM,YAAY,MAAM,6BAA6B,SAAS,GAAG;AACjE,UAAM,sBAAsB,2BAA2B,GAAG;AAC1D,UAAM,oBAAoB,+BAA+B,SAAS;AAAA,MAChE,kBAAkB;AAAA,MAClB,gBAAgB;AAAA,MAChB,eAAe;AAAA,MACf,kBAAkB;AAAA,MAClB,gBAAgB,QAAQ;AAAA,MACxB,UAAU,qBAAqB,QAAQ,SAAS;AAAA,IAClD,CAAC;AACD,UAAM,oBAAoB,YAAY,mBAAmB;AAAA,MACvD,UAAU,QAAQ;AAAA,MAClB,gBAAgB,QAAQ,kBAAkB;AAAA,IAC5C,CAAC;AAAA,EACH;AAEA,MAAI,CAAC,QAAQ,cAAc;AACzB;AAAA,EACF;AAEA,QAAM,WAAW,QAAQ,IAAI,mBAAmB,UAAU,UAAU;AAEpE,QAAM,aAAa,YAAiC,2BAA2B,QAAQ;AAEvF,aAAW,mBAAmB,wBAAwB;AACpD,UAAM,WAAW,QAAQ;AAAA,MACvB,MAAM;AAAA,MACN,WAAW,QAAQ;AAAA,MACnB;AAAA,MACA,UAAU,QAAQ;AAAA,MAClB,gBAAgB,QAAQ,kBAAkB;AAAA,IAC5C,CAAC;AAAA,EACH;AAEA,QAAM,gBAAgB,QAAQ,eAAe,KAAK;AAClD,MAAI,iBAAiB,CAAE,MAAM,uBAAuB,SAAS,GAAG,GAAI;AAClE,UAAM,WAAW,QAAQ;AAAA,MACvB,MAAM;AAAA,MACN,WAAW,QAAQ;AAAA,MACnB,OAAO;AAAA,MACP,UAAU,QAAQ;AAAA,MAClB,gBAAgB,QAAQ,kBAAkB;AAAA,IAC5C,CAAC;AAAA,EACH;AACF;",
   "names": []
 }