@open-mercato/core 0.8.1-develop.7296.1.2111d779db → 0.9.0

package/dist/modules/communication_channels/commands/set-channel-visibility.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/communication_channels/commands/set-channel-visibility.ts"],
+  "sourcesContent": ["import { z } from 'zod'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport type { CommandHandler } from '@open-mercato/shared/lib/commands'\nimport { registerCommand } from '@open-mercato/shared/lib/commands'\nimport { withAtomicFlush } from '@open-mercato/shared/lib/commands/flush'\nimport { assertOptimisticLock } from '@open-mercato/shared/lib/crud/optimistic-lock-command'\nimport { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { CommunicationChannel } from '../data/entities'\nimport { emitCommunicationChannelsEvent } from '../events'\n\nexport const CHANNEL_VISIBILITY_VALUES = ['private', 'shared'] as const\nexport type ChannelVisibility = (typeof CHANNEL_VISIBILITY_VALUES)[number]\n\nconst setChannelVisibilitySchema = z.object({\n  channelId: z.string().uuid(),\n  userId: z.string().uuid(),\n  visibility: z.enum(CHANNEL_VISIBILITY_VALUES),\n  expectedUpdatedAt: z.string().min(1).nullable().optional(),\n  scope: z.object({\n    tenantId: z.string().uuid(),\n    organizationId: z.string().uuid().nullable(),\n  }),\n})\n\nexport type SetChannelVisibilityInput = z.infer<typeof setChannelVisibilitySchema>\n\nexport type SetChannelVisibilityResult =\n  | { status: 'set'; channelId: string; previousVisibility: ChannelVisibility }\n  | { status: 'noop'; reason: string }\n  | { status: 'not_owner'; reason: string }\n\nexport const COMMUNICATION_CHANNELS_SET_VISIBILITY_COMMAND_ID =\n  'communication_channels.channel.set_visibility'\n\nconst RESOURCE_KIND = 'communication_channels.channel'\n\n/**\n * Flip a PERSONAL channel between `private` and `shared` \u2014 the \"this is a team\n * mailbox\" toggle.\n *\n * Owner-only by construction: the command refuses any channel whose `userId` is\n * not the caller, so holding `communication_channels.share_own_channel` grants no\n * access to another user's mailbox and the inert\n * `communication_channels.admin` feature stays inert.\n *\n * Tenant-scoped channels (`userId IS NULL`) are rejected rather than flipped:\n * they are shared by definition, they are push infrastructure, and they have no\n * owner who could consent to the change.\n *\n * Read-time only: this writes `communication_channels.visibility` and nothing\n * else. `customer_interactions.visibility` is never rewritten, so flipping back\n * to private re-hides everything instantly and losslessly, and the query index\n * cannot drift.\n */\nconst setChannelVisibilityCommand: CommandHandler<\n  SetChannelVisibilityInput,\n  SetChannelVisibilityResult\n> = {\n  id: COMMUNICATION_CHANNELS_SET_VISIBILITY_COMMAND_ID,\n\n  async execute(rawInput, ctx) {\n    const input = setChannelVisibilitySchema.parse(rawInput) as SetChannelVisibilityInput\n    const em = (ctx.container.resolve('em') as EntityManager).fork()\n    const dscope = {\n      tenantId: input.scope.tenantId,\n      organizationId: input.scope.organizationId ?? null,\n    }\n\n    const channel = await findOneWithDecryption(\n      em,\n      CommunicationChannel,\n      {\n        id: input.channelId,\n        tenantId: input.scope.tenantId,\n        organizationId: input.scope.organizationId ?? null,\n        deletedAt: null,\n      },\n      undefined,\n      dscope,\n    )\n    if (!channel) {\n      // Existence masking: a missing channel and someone else's channel both\n      // surface as 404 at the route, matching every sibling channel route.\n      return { status: 'not_owner', reason: 'channel not found' }\n    }\n    if (channel.userId !== input.userId) {\n      return { status: 'not_owner', reason: 'channel not owned by caller' }\n    }\n\n    const previousVisibility: ChannelVisibility =\n      channel.visibility === 'shared' ? 'shared' : 'private'\n    if (previousVisibility === input.visibility) {\n      return { status: 'noop', reason: 'visibility already at requested value' }\n    }\n\n    // Optimistic locking (default ON per root AGENTS.md). An absent expectation\n    // is strictly additive \u2014 the shared helper skips the assertion rather than\n    // blocking clients that do not send the header.\n    assertOptimisticLock({\n      resourceKind: RESOURCE_KIND,\n      resourceId: channel.id,\n      expected: input.expectedUpdatedAt ?? null,\n      current: channel.updatedAt ?? null,\n    })\n\n    await withAtomicFlush(\n      em,\n      [\n        () => {\n          channel.visibility = input.visibility\n        },\n      ],\n      { transaction: true, label: COMMUNICATION_CHANNELS_SET_VISIBILITY_COMMAND_ID },\n    )\n\n    // Audit trail, best-effort: the flip is committed, so a failed emission must\n    // not surface as a failed request.\n    try {\n      await emitCommunicationChannelsEvent('communication_channels.channel.visibility_changed', {\n        channelId: channel.id,\n        userId: input.userId,\n        actorUserId: input.userId,\n        previousVisibility,\n        nextVisibility: input.visibility,\n        tenantId: input.scope.tenantId,\n        organizationId: input.scope.organizationId ?? null,\n      })\n    } catch {\n      /* swallow \u2014 audit emission must not block a committed write */\n    }\n\n    return { status: 'set', channelId: channel.id, previousVisibility }\n  },\n}\n\nregisterCommand(setChannelVisibilityCommand)\n\nexport { setChannelVisibilityCommand }\n"],
+  "mappings": "AAAA,SAAS,SAAS;AAGlB,SAAS,uBAAuB;AAChC,SAAS,uBAAuB;AAChC,SAAS,4BAA4B;AACrC,SAAS,6BAA6B;AACtC,SAAS,4BAA4B;AACrC,SAAS,sCAAsC;AAExC,MAAM,4BAA4B,CAAC,WAAW,QAAQ;AAG7D,MAAM,6BAA6B,EAAE,OAAO;AAAA,EAC1C,WAAW,EAAE,OAAO,EAAE,KAAK;AAAA,EAC3B,QAAQ,EAAE,OAAO,EAAE,KAAK;AAAA,EACxB,YAAY,EAAE,KAAK,yBAAyB;AAAA,EAC5C,mBAAmB,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS,EAAE,SAAS;AAAA,EACzD,OAAO,EAAE,OAAO;AAAA,IACd,UAAU,EAAE,OAAO,EAAE,KAAK;AAAA,IAC1B,gBAAgB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EAC7C,CAAC;AACH,CAAC;AASM,MAAM,mDACX;AAEF,MAAM,gBAAgB;AAoBtB,MAAM,8BAGF;AAAA,EACF,IAAI;AAAA,EAEJ,MAAM,QAAQ,UAAU,KAAK;AAC3B,UAAM,QAAQ,2BAA2B,MAAM,QAAQ;AACvD,UAAM,KAAM,IAAI,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC/D,UAAM,SAAS;AAAA,MACb,UAAU,MAAM,MAAM;AAAA,MACtB,gBAAgB,MAAM,MAAM,kBAAkB;AAAA,IAChD;AAEA,UAAM,UAAU,MAAM;AAAA,MACpB;AAAA,MACA;AAAA,MACA;AAAA,QACE,IAAI,MAAM;AAAA,QACV,UAAU,MAAM,MAAM;AAAA,QACtB,gBAAgB,MAAM,MAAM,kBAAkB;AAAA,QAC9C,WAAW;AAAA,MACb;AAAA,MACA;AAAA,MACA;AAAA,IACF;AACA,QAAI,CAAC,SAAS;AAGZ,aAAO,EAAE,QAAQ,aAAa,QAAQ,oBAAoB;AAAA,IAC5D;AACA,QAAI,QAAQ,WAAW,MAAM,QAAQ;AACnC,aAAO,EAAE,QAAQ,aAAa,QAAQ,8BAA8B;AAAA,IACtE;AAEA,UAAM,qBACJ,QAAQ,eAAe,WAAW,WAAW;AAC/C,QAAI,uBAAuB,MAAM,YAAY;AAC3C,aAAO,EAAE,QAAQ,QAAQ,QAAQ,wCAAwC;AAAA,IAC3E;AAKA,yBAAqB;AAAA,MACnB,cAAc;AAAA,MACd,YAAY,QAAQ;AAAA,MACpB,UAAU,MAAM,qBAAqB;AAAA,MACrC,SAAS,QAAQ,aAAa;AAAA,IAChC,CAAC;AAED,UAAM;AAAA,MACJ;AAAA,MACA;AAAA,QACE,MAAM;AACJ,kBAAQ,aAAa,MAAM;AAAA,QAC7B;AAAA,MACF;AAAA,MACA,EAAE,aAAa,MAAM,OAAO,iDAAiD;AAAA,IAC/E;AAIA,QAAI;AACF,YAAM,+BAA+B,qDAAqD;AAAA,QACxF,WAAW,QAAQ;AAAA,QACnB,QAAQ,MAAM;AAAA,QACd,aAAa,MAAM;AAAA,QACnB;AAAA,QACA,gBAAgB,MAAM;AAAA,QACtB,UAAU,MAAM,MAAM;AAAA,QACtB,gBAAgB,MAAM,MAAM,kBAAkB;AAAA,MAChD,CAAC;AAAA,IACH,QAAQ;AAAA,IAER;AAEA,WAAO,EAAE,QAAQ,OAAO,WAAW,QAAQ,IAAI,mBAAmB;AAAA,EACpE;AACF;AAEA,gBAAgB,2BAA2B;",
+  "names": []
+}

package/dist/modules/communication_channels/data/enrichers.js

@@ -18,6 +18,16 @@ function sanitizeEmailPayloadHtml(contentType, payload) {
   if (typeof html !== "string" || html.length === 0) return null;
   return sanitizeChannelHtml(html);
 }
+async function loadParticipantMessageIds(em, messageIds, ctx) {
+  const userId = typeof ctx.userId === "string" && ctx.userId.length > 0 ? ctx.userId : null;
+  if (!userId || messageIds.length === 0) return /* @__PURE__ */ new Set();
+  const organizationId = ctx.organizationId ?? null;
+  const db = em.getKysely();
+  let participantQuery = applyMessageParticipantScope(db.selectFrom("messages as m"), userId).select("m.id").distinct().where("m.id", "in", messageIds).where("m.tenant_id", "=", ctx.tenantId).where("m.deleted_at", "is", null);
+  participantQuery = organizationId !== null ? participantQuery.where("m.organization_id", "=", organizationId) : participantQuery.where("m.organization_id", "is", null);
+  const participantRows = await participantQuery.execute();
+  return new Set(participantRows.map((row) => row.id));
+}
 const messageChannelEnricher = {
   id: "communication_channels.message-channel",
   targetEntity: "messages.message",
@@ -37,8 +47,8 @@ const messageChannelEnricher = {
     const tenantId = ctx.tenantId;
     const organizationId = ctx.organizationId ?? null;
     const dscope = { tenantId, organizationId };
-    const userId = typeof ctx.userId === "string" ? ctx.userId : null;
-    if (!userId) {
+    const participantMessageIdSet = await loadParticipantMessageIds(em, messageIds, ctx);
+    if (participantMessageIdSet.size === 0) {
       return records.map((record) => ({
         ...record,
         _channel: null,
@@ -46,12 +56,7 @@ const messageChannelEnricher = {
         _channelContact: null
       }));
     }
-    const db = em.getKysely();
-    let participantQuery = applyMessageParticipantScope(db.selectFrom("messages as m"), userId).select("m.id").distinct().where("m.id", "in", messageIds).where("m.tenant_id", "=", tenantId).where("m.deleted_at", "is", null);
-    participantQuery = organizationId !== null ? participantQuery.where("m.organization_id", "=", organizationId) : participantQuery.where("m.organization_id", "is", null);
-    const participantRows = await participantQuery.execute();
-    const participantMessageIds = participantRows.map((row) => row.id);
-    const participantMessageIdSet = new Set(participantMessageIds);
+    const participantMessageIds = Array.from(participantMessageIdSet);
     const links = await findWithDecryption(
       em,
       MessageChannelLink,
@@ -161,12 +166,16 @@ const messageReactionsEnricher = {
     if (records.length === 0) return records;
     const messageIds = records.map((r) => r.id);
     const em = ctxEm(ctx);
+    const participantMessageIdSet = await loadParticipantMessageIds(em, messageIds, ctx);
+    if (participantMessageIdSet.size === 0) {
+      return records.map((r) => ({ ...r, _reactions: [] }));
+    }
     const dscope = { tenantId: ctx.tenantId, organizationId: ctx.organizationId ?? null };
     const reactions = await findWithDecryption(
       em,
       MessageReaction,
       {
-        messageId: { $in: messageIds },
+        messageId: { $in: Array.from(participantMessageIdSet) },
         tenantId: ctx.tenantId,
         organizationId: ctx.organizationId ?? null
       },

package/dist/modules/communication_channels/data/enrichers.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/communication_channels/data/enrichers.ts"],
-  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport type { EnricherContext, ResponseEnricher } from '@open-mercato/shared/lib/crud/response-enricher'\nimport { findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport {\n  applyMessageParticipantScope,\n  type MessagesParticipantScopeDatabase,\n} from '../../messages/lib/participantScope'\nimport { sanitizeChannelHtml } from '../lib/sanitize-channel-html'\nimport {\n  CommunicationChannel,\n  ExternalConversation,\n  MessageChannelLink,\n  MessageReaction,\n} from './entities'\n\n/**\n * Response enrichers for the messages.message entity.\n *\n * The hub declares 2 enrichers; downstream hosts (Messages module's `/api/messages`\n * CRUD route + future provider routes) opt in via `makeCrudRoute({ enrichers: { entityId: 'messages.message' } })`.\n *\n *   - `messageChannelEnricher` \u2192 `_channel`, `_channelPayload`, `_channelContact`\n *   - `messageReactionsEnricher` \u2192 `_reactions`\n *\n * The channel/payload/contact enrichments were three separate enrichers, each\n * independently issuing its own `MessageChannelLink` `$in` query (and two of them\n * an `ExternalConversation` query) for the same message page. Because the shared\n * enricher runner executes active enrichers sequentially with no per-pass shared\n * context, those lookups were repeated for every page (#3183). They are merged\n * into one batched enricher so the link batch (and the conversation batch) is\n * loaded once per pass, while preserving the public enriched field names:\n *\n *   - `_channel`           \u2192 channel metadata + capabilities snapshot\n *   - `_channelPayload`    \u2192 channel-native payload (Block Kit / interactive / email MIME / \u2026)\n *   - `_channelContact`    \u2192 CRM person preview (email + display name)\n *   - `_reactions`         \u2192 grouped emoji counts + users + reactedByMe\n *\n * Per `packages/shared/lib/crud/response-enricher` rules:\n *   - `enrichMany` is implemented for every enricher (N+1 prevention).\n *   - Enriched fields are namespaced with `_channel*` / `_reactions` prefixes.\n *   - Enrichers are read-only; no writes via the EntityManager.\n *   - Each enricher is feature-gated by `communication_channels.view`.\n */\n\ntype MessageRecord = Record<string, unknown> & {\n  id: string\n  threadId?: string | null\n}\n\ntype ResolvedCtx = EnricherContext & {\n  em: EntityManager\n}\n\nfunction ctxEm(ctx: EnricherContext): EntityManager {\n  return ctx.em as EntityManager\n}\n\nexport type ChannelEnrichment = {\n  providerKey: string\n  channelType: string\n  direction: 'inbound' | 'outbound' | string\n  deliveryStatus: string | null\n  capabilities: Record<string, unknown> | null\n}\n\nexport type ChannelPayloadEnrichment = {\n  channelContentType: string | null\n  channelPayload: Record<string, unknown> | null\n  interactiveState: Record<string, unknown> | null\n  channelMetadata: Record<string, unknown> | null\n  /**\n   * Server-sanitized email HTML, safe for `dangerouslySetInnerHTML`. Populated\n   * for `email/*` payloads that carry an html body, `null` otherwise. Sanitizing\n   * here keeps `sanitize-html` off the client render path.\n   */\n  sanitizedHtml: string | null\n}\n\nexport type ChannelContactEnrichment = {\n  contactPersonId: string | null\n  assignedUserId: string | null\n  subject: string | null\n}\n\n/**\n * Sanitize channel-supplied email HTML on the server so the client widget never\n * has to pull `sanitize-html` into the browser bundle or run sanitization on the\n * render path. Returns the sanitized HTML for `email/*` payloads that carry an\n * html body, and `null` otherwise. The raw `channelPayload` is left untouched so\n * provider-package widget overrides keep their existing data contract.\n */\nfunction sanitizeEmailPayloadHtml(\n  contentType: string | null | undefined,\n  payload: Record<string, unknown> | null | undefined,\n): string | null {\n  if (!contentType || !contentType.startsWith('email/')) return null\n  const html = payload?.html\n  if (typeof html !== 'string' || html.length === 0) return null\n  return sanitizeChannelHtml(html)\n}\n\n// \u2500\u2500 _channel + _channelPayload + _channelContact \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\nconst messageChannelEnricher: ResponseEnricher<\n  MessageRecord,\n  {\n    _channel?: ChannelEnrichment | null\n    _channelPayload?: ChannelPayloadEnrichment | null\n    _channelContact?: ChannelContactEnrichment | null\n  }\n> = {\n  id: 'communication_channels.message-channel',\n  targetEntity: 'messages.message',\n  features: ['communication_channels.view'],\n  priority: 30,\n  timeout: 2000,\n  fallback: { _channel: null, _channelPayload: null, _channelContact: null },\n  critical: false,\n\n  async enrichOne(record, ctx) {\n    const [out] = await this.enrichMany!([record], ctx)\n    return out\n  },\n\n  async enrichMany(records, ctx) {\n    if (records.length === 0) return records\n    const messageIds = records.map((r) => r.id)\n    const em = ctxEm(ctx)\n    const tenantId = ctx.tenantId as string\n    const organizationId = ctx.organizationId ?? null\n    const dscope = { tenantId, organizationId }\n\n    const userId = typeof ctx.userId === 'string' ? ctx.userId : null\n    if (!userId) {\n      return records.map((record) => ({\n        ...record,\n        _channel: null,\n        _channelPayload: null,\n        _channelContact: null,\n      }))\n    }\n\n    const db = em.getKysely<MessagesParticipantScopeDatabase>()\n    let participantQuery = applyMessageParticipantScope(db.selectFrom('messages as m'), userId)\n      .select('m.id')\n      .distinct()\n      .where('m.id', 'in', messageIds)\n      .where('m.tenant_id', '=', tenantId)\n      .where('m.deleted_at', 'is', null)\n\n    participantQuery = organizationId !== null\n      ? participantQuery.where('m.organization_id', '=', organizationId)\n      : participantQuery.where('m.organization_id', 'is', null)\n\n    const participantRows = await participantQuery.execute()\n    const participantMessageIds = participantRows.map((row) => row.id)\n    const participantMessageIdSet = new Set(participantMessageIds)\n\n    // 1) MessageChannelLink \u2014 one bounded `$in` query for the whole page, shared by\n    // all three enrichments (channel metadata, channel payload, conversation\n    // contact). The result set is already bounded by the `messageId $in messageIds`\n    // filter (the host list endpoint caps the page at 100), so no separate row\n    // limit is needed.\n    const links = await findWithDecryption(\n      em,\n      MessageChannelLink,\n      {\n        messageId: { $in: participantMessageIds },\n        tenantId,\n        organizationId,\n      },\n      undefined,\n      dscope,\n    )\n    const linksByMessage = new Map<string, MessageChannelLink>()\n    for (const link of links) linksByMessage.set(link.messageId, link)\n\n    // 2) ExternalConversation \u2014 one query, shared by the channel-capabilities hop and\n    // the conversation-contact enrichment.\n    const conversationIds = Array.from(\n      new Set(\n        links\n          .map((l) => l.externalConversationId)\n          .filter((id): id is string => typeof id === 'string' && id.length > 0),\n      ),\n    )\n    const conversationsById = new Map<string, ExternalConversation>()\n    if (conversationIds.length > 0) {\n      const conversations = await findWithDecryption(\n        em,\n        ExternalConversation,\n        { id: { $in: conversationIds }, tenantId, organizationId },\n        undefined,\n        dscope,\n      )\n      for (const conversation of conversations) {\n        conversationsById.set(conversation.id, conversation)\n      }\n    }\n\n    // 3) CommunicationChannel \u2014 capabilities snapshot. Resolve by `id` (not\n    // `providerKey`): multi-user channels share the same `providerKey` (e.g. two\n    // users with Gmail), so a providerKey-keyed map collapses them and returns the\n    // wrong owner's capabilities. The hop is `link \u2192 ExternalConversation \u2192 CommunicationChannel`.\n    const channelIds = Array.from(\n      new Set(\n        Array.from(conversationsById.values())\n          .map((conversation) => conversation.channelId)\n          .filter((id): id is string => typeof id === 'string' && id.length > 0),\n      ),\n    )\n    const channelsById = new Map<string, CommunicationChannel>()\n    if (channelIds.length > 0) {\n      const channels = await findWithDecryption(\n        em,\n        CommunicationChannel,\n        { id: { $in: channelIds }, tenantId, organizationId, deletedAt: null },\n        undefined,\n        dscope,\n      )\n      for (const channel of channels) channelsById.set(channel.id, channel)\n    }\n\n    const channelByMessageId = new Map<string, CommunicationChannel>()\n    for (const link of links) {\n      if (!link.externalConversationId) continue\n      const conversation = conversationsById.get(link.externalConversationId)\n      if (!conversation) continue\n      const channel = conversation.channelId ? channelsById.get(conversation.channelId) : undefined\n      if (channel) channelByMessageId.set(link.messageId, channel)\n    }\n\n    return records.map((r) => {\n      if (!participantMessageIdSet.has(r.id)) {\n        return { ...r, _channel: null, _channelPayload: null, _channelContact: null }\n      }\n\n      const link = linksByMessage.get(r.id)\n      if (!link) {\n        return { ...r, _channel: null, _channelPayload: null, _channelContact: null }\n      }\n\n      const channel = channelByMessageId.get(r.id)\n      const channelEnrichment: ChannelEnrichment = {\n        providerKey: link.providerKey,\n        channelType: link.channelType,\n        direction: link.direction,\n        deliveryStatus: link.deliveryStatus ?? null,\n        capabilities: (channel?.capabilities as Record<string, unknown> | null) ?? null,\n      }\n\n      const payloadEnrichment: ChannelPayloadEnrichment = {\n        channelContentType: link.channelContentType ?? null,\n        channelPayload: link.channelPayload ?? null,\n        interactiveState: link.interactiveState ?? null,\n        channelMetadata: link.channelMetadata ?? null,\n        sanitizedHtml: sanitizeEmailPayloadHtml(link.channelContentType, link.channelPayload),\n      }\n\n      const conversation = link.externalConversationId\n        ? conversationsById.get(link.externalConversationId)\n        : undefined\n      const contactEnrichment: ChannelContactEnrichment | null = conversation\n        ? {\n            contactPersonId: conversation.contactPersonId ?? null,\n            assignedUserId: conversation.assignedUserId ?? null,\n            subject: conversation.subject ?? null,\n          }\n        : null\n\n      return {\n        ...r,\n        _channel: channelEnrichment,\n        _channelPayload: payloadEnrichment,\n        _channelContact: contactEnrichment,\n      }\n    })\n  },\n}\n\n// \u2500\u2500 _reactions \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\nconst messageReactionsEnricher: ResponseEnricher<\n  MessageRecord,\n  { _reactions?: ReactionGroup[] }\n> = {\n  id: 'communication_channels.message-reactions',\n  targetEntity: 'messages.message',\n  features: ['communication_channels.view'],\n  priority: 25,\n  timeout: 1500,\n  fallback: { _reactions: [] },\n  critical: false,\n\n  async enrichOne(record, ctx) {\n    const [out] = await this.enrichMany!([record], ctx)\n    return out\n  },\n\n  async enrichMany(records, ctx) {\n    if (records.length === 0) return records\n    const messageIds = records.map((r) => r.id)\n    const em = ctxEm(ctx)\n    const dscope = { tenantId: ctx.tenantId, organizationId: ctx.organizationId ?? null }\n    const reactions = await findWithDecryption(\n      em,\n      MessageReaction,\n      {\n        messageId: { $in: messageIds },\n        tenantId: ctx.tenantId,\n        organizationId: ctx.organizationId ?? null,\n      },\n      undefined,\n      dscope,\n    )\n\n    const byMessage = new Map<string, MessageReaction[]>()\n    for (const reaction of reactions) {\n      const existing = byMessage.get(reaction.messageId) ?? []\n      existing.push(reaction)\n      byMessage.set(reaction.messageId, existing)\n    }\n\n    return records.map((r) => {\n      const rows = byMessage.get(r.id) ?? []\n      const grouped = groupReactions(rows, ctx.userId)\n      return { ...r, _reactions: grouped }\n    })\n  },\n}\n\nexport type ReactionGroup = {\n  emoji: string\n  count: number\n  users: Array<{\n    userId?: string | null\n    externalId?: string | null\n    displayName?: string | null\n    providerKey?: string | null\n  }>\n  reactedByMe: boolean\n  /**\n   * MessageReaction.id of the current user's reaction row, if any. Exposed so\n   * the reaction-bar UI can issue\n   *   `DELETE /api/communication_channels/messages/{messageId}/reactions/{myReactionId}`\n   * when the user toggles their own reaction off. Null when `reactedByMe` is\n   * false or the row was added by an external participant (provider-side).\n   */\n  myReactionId: string | null\n}\n\nfunction groupReactions(rows: MessageReaction[], currentUserId: string): ReactionGroup[] {\n  const map = new Map<string, ReactionGroup>()\n  for (const row of rows) {\n    const key = row.emoji\n    if (!map.has(key)) {\n      map.set(key, { emoji: key, count: 0, users: [], reactedByMe: false, myReactionId: null })\n    }\n    const group = map.get(key)!\n    group.count += 1\n    group.users.push({\n      userId: row.reactedByUserId ?? null,\n      externalId: row.reactedByExternalId ?? null,\n      displayName: row.reactedByDisplayName ?? null,\n      providerKey: row.providerKey ?? null,\n    })\n    if (row.reactedByUserId && row.reactedByUserId === currentUserId) {\n      group.reactedByMe = true\n      if (!group.myReactionId) group.myReactionId = row.id ?? null\n    }\n  }\n  return Array.from(map.values()).sort((a, b) => b.count - a.count)\n}\n\n// \u2500\u2500 Export \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\nexport const enrichers: ResponseEnricher[] = [\n  messageChannelEnricher as unknown as ResponseEnricher,\n  messageReactionsEnricher as unknown as ResponseEnricher,\n]\n\nexport default enrichers\n"],
-  "mappings": "AAEA,SAAS,0BAA0B;AACnC;AAAA,EACE;AAAA,OAEK;AACP,SAAS,2BAA2B;AACpC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAwCP,SAAS,MAAM,KAAqC;AAClD,SAAO,IAAI;AACb;AAoCA,SAAS,yBACP,aACA,SACe;AACf,MAAI,CAAC,eAAe,CAAC,YAAY,WAAW,QAAQ,EAAG,QAAO;AAC9D,QAAM,OAAO,SAAS;AACtB,MAAI,OAAO,SAAS,YAAY,KAAK,WAAW,EAAG,QAAO;AAC1D,SAAO,oBAAoB,IAAI;AACjC;AAIA,MAAM,yBAOF;AAAA,EACF,IAAI;AAAA,EACJ,cAAc;AAAA,EACd,UAAU,CAAC,6BAA6B;AAAA,EACxC,UAAU;AAAA,EACV,SAAS;AAAA,EACT,UAAU,EAAE,UAAU,MAAM,iBAAiB,MAAM,iBAAiB,KAAK;AAAA,EACzE,UAAU;AAAA,EAEV,MAAM,UAAU,QAAQ,KAAK;AAC3B,UAAM,CAAC,GAAG,IAAI,MAAM,KAAK,WAAY,CAAC,MAAM,GAAG,GAAG;AAClD,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,WAAW,SAAS,KAAK;AAC7B,QAAI,QAAQ,WAAW,EAAG,QAAO;AACjC,UAAM,aAAa,QAAQ,IAAI,CAAC,MAAM,EAAE,EAAE;AAC1C,UAAM,KAAK,MAAM,GAAG;AACpB,UAAM,WAAW,IAAI;AACrB,UAAM,iBAAiB,IAAI,kBAAkB;AAC7C,UAAM,SAAS,EAAE,UAAU,eAAe;AAE1C,UAAM,SAAS,OAAO,IAAI,WAAW,WAAW,IAAI,SAAS;AAC7D,QAAI,CAAC,QAAQ;AACX,aAAO,QAAQ,IAAI,CAAC,YAAY;AAAA,QAC9B,GAAG;AAAA,QACH,UAAU;AAAA,QACV,iBAAiB;AAAA,QACjB,iBAAiB;AAAA,MACnB,EAAE;AAAA,IACJ;AAEA,UAAM,KAAK,GAAG,UAA4C;AAC1D,QAAI,mBAAmB,6BAA6B,GAAG,WAAW,eAAe,GAAG,MAAM,EACvF,OAAO,MAAM,EACb,SAAS,EACT,MAAM,QAAQ,MAAM,UAAU,EAC9B,MAAM,eAAe,KAAK,QAAQ,EAClC,MAAM,gBAAgB,MAAM,IAAI;AAEnC,uBAAmB,mBAAmB,OAClC,iBAAiB,MAAM,qBAAqB,KAAK,cAAc,IAC/D,iBAAiB,MAAM,qBAAqB,MAAM,IAAI;AAE1D,UAAM,kBAAkB,MAAM,iBAAiB,QAAQ;AACvD,UAAM,wBAAwB,gBAAgB,IAAI,CAAC,QAAQ,IAAI,EAAE;AACjE,UAAM,0BAA0B,IAAI,IAAI,qBAAqB;AAO7D,UAAM,QAAQ,MAAM;AAAA,MAClB;AAAA,MACA;AAAA,MACA;AAAA,QACE,WAAW,EAAE,KAAK,sBAAsB;AAAA,QACxC;AAAA,QACA;AAAA,MACF;AAAA,MACA;AAAA,MACA;AAAA,IACF;AACA,UAAM,iBAAiB,oBAAI,IAAgC;AAC3D,eAAW,QAAQ,MAAO,gBAAe,IAAI,KAAK,WAAW,IAAI;AAIjE,UAAM,kBAAkB,MAAM;AAAA,MAC5B,IAAI;AAAA,QACF,MACG,IAAI,CAAC,MAAM,EAAE,sBAAsB,EACnC,OAAO,CAAC,OAAqB,OAAO,OAAO,YAAY,GAAG,SAAS,CAAC;AAAA,MACzE;AAAA,IACF;AACA,UAAM,oBAAoB,oBAAI,IAAkC;AAChE,QAAI,gBAAgB,SAAS,GAAG;AAC9B,YAAM,gBAAgB,MAAM;AAAA,QAC1B;AAAA,QACA;AAAA,QACA,EAAE,IAAI,EAAE,KAAK,gBAAgB,GAAG,UAAU,eAAe;AAAA,QACzD;AAAA,QACA;AAAA,MACF;AACA,iBAAW,gBAAgB,eAAe;AACxC,0BAAkB,IAAI,aAAa,IAAI,YAAY;AAAA,MACrD;AAAA,IACF;AAMA,UAAM,aAAa,MAAM;AAAA,MACvB,IAAI;AAAA,QACF,MAAM,KAAK,kBAAkB,OAAO,CAAC,EAClC,IAAI,CAAC,iBAAiB,aAAa,SAAS,EAC5C,OAAO,CAAC,OAAqB,OAAO,OAAO,YAAY,GAAG,SAAS,CAAC;AAAA,MACzE;AAAA,IACF;AACA,UAAM,eAAe,oBAAI,IAAkC;AAC3D,QAAI,WAAW,SAAS,GAAG;AACzB,YAAM,WAAW,MAAM;AAAA,QACrB;AAAA,QACA;AAAA,QACA,EAAE,IAAI,EAAE,KAAK,WAAW,GAAG,UAAU,gBAAgB,WAAW,KAAK;AAAA,QACrE;AAAA,QACA;AAAA,MACF;AACA,iBAAW,WAAW,SAAU,cAAa,IAAI,QAAQ,IAAI,OAAO;AAAA,IACtE;AAEA,UAAM,qBAAqB,oBAAI,IAAkC;AACjE,eAAW,QAAQ,OAAO;AACxB,UAAI,CAAC,KAAK,uBAAwB;AAClC,YAAM,eAAe,kBAAkB,IAAI,KAAK,sBAAsB;AACtE,UAAI,CAAC,aAAc;AACnB,YAAM,UAAU,aAAa,YAAY,aAAa,IAAI,aAAa,SAAS,IAAI;AACpF,UAAI,QAAS,oBAAmB,IAAI,KAAK,WAAW,OAAO;AAAA,IAC7D;AAEA,WAAO,QAAQ,IAAI,CAAC,MAAM;AACxB,UAAI,CAAC,wBAAwB,IAAI,EAAE,EAAE,GAAG;AACtC,eAAO,EAAE,GAAG,GAAG,UAAU,MAAM,iBAAiB,MAAM,iBAAiB,KAAK;AAAA,MAC9E;AAEA,YAAM,OAAO,eAAe,IAAI,EAAE,EAAE;AACpC,UAAI,CAAC,MAAM;AACT,eAAO,EAAE,GAAG,GAAG,UAAU,MAAM,iBAAiB,MAAM,iBAAiB,KAAK;AAAA,MAC9E;AAEA,YAAM,UAAU,mBAAmB,IAAI,EAAE,EAAE;AAC3C,YAAM,oBAAuC;AAAA,QAC3C,aAAa,KAAK;AAAA,QAClB,aAAa,KAAK;AAAA,QAClB,WAAW,KAAK;AAAA,QAChB,gBAAgB,KAAK,kBAAkB;AAAA,QACvC,cAAe,SAAS,gBAAmD;AAAA,MAC7E;AAEA,YAAM,oBAA8C;AAAA,QAClD,oBAAoB,KAAK,sBAAsB;AAAA,QAC/C,gBAAgB,KAAK,kBAAkB;AAAA,QACvC,kBAAkB,KAAK,oBAAoB;AAAA,QAC3C,iBAAiB,KAAK,mBAAmB;AAAA,QACzC,eAAe,yBAAyB,KAAK,oBAAoB,KAAK,cAAc;AAAA,MACtF;AAEA,YAAM,eAAe,KAAK,yBACtB,kBAAkB,IAAI,KAAK,sBAAsB,IACjD;AACJ,YAAM,oBAAqD,eACvD;AAAA,QACE,iBAAiB,aAAa,mBAAmB;AAAA,QACjD,gBAAgB,aAAa,kBAAkB;AAAA,QAC/C,SAAS,aAAa,WAAW;AAAA,MACnC,IACA;AAEJ,aAAO;AAAA,QACL,GAAG;AAAA,QACH,UAAU;AAAA,QACV,iBAAiB;AAAA,QACjB,iBAAiB;AAAA,MACnB;AAAA,IACF,CAAC;AAAA,EACH;AACF;AAIA,MAAM,2BAGF;AAAA,EACF,IAAI;AAAA,EACJ,cAAc;AAAA,EACd,UAAU,CAAC,6BAA6B;AAAA,EACxC,UAAU;AAAA,EACV,SAAS;AAAA,EACT,UAAU,EAAE,YAAY,CAAC,EAAE;AAAA,EAC3B,UAAU;AAAA,EAEV,MAAM,UAAU,QAAQ,KAAK;AAC3B,UAAM,CAAC,GAAG,IAAI,MAAM,KAAK,WAAY,CAAC,MAAM,GAAG,GAAG;AAClD,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,WAAW,SAAS,KAAK;AAC7B,QAAI,QAAQ,WAAW,EAAG,QAAO;AACjC,UAAM,aAAa,QAAQ,IAAI,CAAC,MAAM,EAAE,EAAE;AAC1C,UAAM,KAAK,MAAM,GAAG;AACpB,UAAM,SAAS,EAAE,UAAU,IAAI,UAAU,gBAAgB,IAAI,kBAAkB,KAAK;AACpF,UAAM,YAAY,MAAM;AAAA,MACtB;AAAA,MACA;AAAA,MACA;AAAA,QACE,WAAW,EAAE,KAAK,WAAW;AAAA,QAC7B,UAAU,IAAI;AAAA,QACd,gBAAgB,IAAI,kBAAkB;AAAA,MACxC;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAEA,UAAM,YAAY,oBAAI,IAA+B;AACrD,eAAW,YAAY,WAAW;AAChC,YAAM,WAAW,UAAU,IAAI,SAAS,SAAS,KAAK,CAAC;AACvD,eAAS,KAAK,QAAQ;AACtB,gBAAU,IAAI,SAAS,WAAW,QAAQ;AAAA,IAC5C;AAEA,WAAO,QAAQ,IAAI,CAAC,MAAM;AACxB,YAAM,OAAO,UAAU,IAAI,EAAE,EAAE,KAAK,CAAC;AACrC,YAAM,UAAU,eAAe,MAAM,IAAI,MAAM;AAC/C,aAAO,EAAE,GAAG,GAAG,YAAY,QAAQ;AAAA,IACrC,CAAC;AAAA,EACH;AACF;AAsBA,SAAS,eAAe,MAAyB,eAAwC;AACvF,QAAM,MAAM,oBAAI,IAA2B;AAC3C,aAAW,OAAO,MAAM;AACtB,UAAM,MAAM,IAAI;AAChB,QAAI,CAAC,IAAI,IAAI,GAAG,GAAG;AACjB,UAAI,IAAI,KAAK,EAAE,OAAO,KAAK,OAAO,GAAG,OAAO,CAAC,GAAG,aAAa,OAAO,cAAc,KAAK,CAAC;AAAA,IAC1F;AACA,UAAM,QAAQ,IAAI,IAAI,GAAG;AACzB,UAAM,SAAS;AACf,UAAM,MAAM,KAAK;AAAA,MACf,QAAQ,IAAI,mBAAmB;AAAA,MAC/B,YAAY,IAAI,uBAAuB;AAAA,MACvC,aAAa,IAAI,wBAAwB;AAAA,MACzC,aAAa,IAAI,eAAe;AAAA,IAClC,CAAC;AACD,QAAI,IAAI,mBAAmB,IAAI,oBAAoB,eAAe;AAChE,YAAM,cAAc;AACpB,UAAI,CAAC,MAAM,aAAc,OAAM,eAAe,IAAI,MAAM;AAAA,IAC1D;AAAA,EACF;AACA,SAAO,MAAM,KAAK,IAAI,OAAO,CAAC,EAAE,KAAK,CAAC,GAAG,MAAM,EAAE,QAAQ,EAAE,KAAK;AAClE;AAIO,MAAM,YAAgC;AAAA,EAC3C;AAAA,EACA;AACF;AAEA,IAAO,oBAAQ;",
+  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport type { EnricherContext, ResponseEnricher } from '@open-mercato/shared/lib/crud/response-enricher'\nimport { findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport {\n  applyMessageParticipantScope,\n  type MessagesParticipantScopeDatabase,\n} from '../../messages/lib/participantScope'\nimport { sanitizeChannelHtml } from '../lib/sanitize-channel-html'\nimport {\n  CommunicationChannel,\n  ExternalConversation,\n  MessageChannelLink,\n  MessageReaction,\n} from './entities'\n\n/**\n * Response enrichers for the messages.message entity.\n *\n * The hub declares 2 enrichers; downstream hosts (Messages module's `/api/messages`\n * CRUD route + future provider routes) opt in via `makeCrudRoute({ enrichers: { entityId: 'messages.message' } })`.\n *\n *   - `messageChannelEnricher` \u2192 `_channel`, `_channelPayload`, `_channelContact`\n *   - `messageReactionsEnricher` \u2192 `_reactions`\n *\n * The channel/payload/contact enrichments were three separate enrichers, each\n * independently issuing its own `MessageChannelLink` `$in` query (and two of them\n * an `ExternalConversation` query) for the same message page. Because the shared\n * enricher runner executes active enrichers sequentially with no per-pass shared\n * context, those lookups were repeated for every page (#3183). They are merged\n * into one batched enricher so the link batch (and the conversation batch) is\n * loaded once per pass, while preserving the public enriched field names:\n *\n *   - `_channel`           \u2192 channel metadata + capabilities snapshot\n *   - `_channelPayload`    \u2192 channel-native payload (Block Kit / interactive / email MIME / \u2026)\n *   - `_channelContact`    \u2192 CRM person preview (email + display name)\n *   - `_reactions`         \u2192 grouped emoji counts + users + reactedByMe\n *\n * Per `packages/shared/lib/crud/response-enricher` rules:\n *   - `enrichMany` is implemented for every enricher (N+1 prevention).\n *   - Enriched fields are namespaced with `_channel*` / `_reactions` prefixes.\n *   - Enrichers are read-only; no writes via the EntityManager.\n *   - Each enricher is feature-gated by `communication_channels.view`.\n *   - Each enricher only enriches messages the caller sent or receives\n *     (`loadParticipantMessageIds`); every other record gets the fallback shape.\n */\n\ntype MessageRecord = Record<string, unknown> & {\n  id: string\n  threadId?: string | null\n}\n\ntype ResolvedCtx = EnricherContext & {\n  em: EntityManager\n}\n\nfunction ctxEm(ctx: EnricherContext): EntityManager {\n  return ctx.em as EntityManager\n}\n\nexport type ChannelEnrichment = {\n  providerKey: string\n  channelType: string\n  direction: 'inbound' | 'outbound' | string\n  deliveryStatus: string | null\n  capabilities: Record<string, unknown> | null\n}\n\nexport type ChannelPayloadEnrichment = {\n  channelContentType: string | null\n  channelPayload: Record<string, unknown> | null\n  interactiveState: Record<string, unknown> | null\n  channelMetadata: Record<string, unknown> | null\n  /**\n   * Server-sanitized email HTML, safe for `dangerouslySetInnerHTML`. Populated\n   * for `email/*` payloads that carry an html body, `null` otherwise. Sanitizing\n   * here keeps `sanitize-html` off the client render path.\n   */\n  sanitizedHtml: string | null\n}\n\nexport type ChannelContactEnrichment = {\n  contactPersonId: string | null\n  assignedUserId: string | null\n  subject: string | null\n}\n\n/**\n * Sanitize channel-supplied email HTML on the server so the client widget never\n * has to pull `sanitize-html` into the browser bundle or run sanitization on the\n * render path. Returns the sanitized HTML for `email/*` payloads that carry an\n * html body, and `null` otherwise. The raw `channelPayload` is left untouched so\n * provider-package widget overrides keep their existing data contract.\n */\nfunction sanitizeEmailPayloadHtml(\n  contentType: string | null | undefined,\n  payload: Record<string, unknown> | null | undefined,\n): string | null {\n  if (!contentType || !contentType.startsWith('email/')) return null\n  const html = payload?.html\n  if (typeof html !== 'string' || html.length === 0) return null\n  return sanitizeChannelHtml(html)\n}\n\n/**\n * Return the subset of `messageIds` the authenticated user may see channel data\n * for: messages they sent or are a non-deleted recipient of, scoped to the\n * caller's tenant/organization. Every enricher on `messages.message` gates its\n * output on this set so privacy does not depend on how the host route scopes its\n * rows (#3872, #3834). Fails closed (empty set) without an authenticated user.\n */\nasync function loadParticipantMessageIds(\n  em: EntityManager,\n  messageIds: string[],\n  ctx: EnricherContext,\n): Promise<Set<string>> {\n  const userId = typeof ctx.userId === 'string' && ctx.userId.length > 0 ? ctx.userId : null\n  if (!userId || messageIds.length === 0) return new Set()\n  const organizationId = ctx.organizationId ?? null\n\n  const db = em.getKysely<MessagesParticipantScopeDatabase>()\n  let participantQuery = applyMessageParticipantScope(db.selectFrom('messages as m'), userId)\n    .select('m.id')\n    .distinct()\n    .where('m.id', 'in', messageIds)\n    .where('m.tenant_id', '=', ctx.tenantId as string)\n    .where('m.deleted_at', 'is', null)\n\n  participantQuery = organizationId !== null\n    ? participantQuery.where('m.organization_id', '=', organizationId)\n    : participantQuery.where('m.organization_id', 'is', null)\n\n  const participantRows = await participantQuery.execute()\n  return new Set(participantRows.map((row) => row.id))\n}\n\n// \u2500\u2500 _channel + _channelPayload + _channelContact \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\nconst messageChannelEnricher: ResponseEnricher<\n  MessageRecord,\n  {\n    _channel?: ChannelEnrichment | null\n    _channelPayload?: ChannelPayloadEnrichment | null\n    _channelContact?: ChannelContactEnrichment | null\n  }\n> = {\n  id: 'communication_channels.message-channel',\n  targetEntity: 'messages.message',\n  features: ['communication_channels.view'],\n  priority: 30,\n  timeout: 2000,\n  fallback: { _channel: null, _channelPayload: null, _channelContact: null },\n  critical: false,\n\n  async enrichOne(record, ctx) {\n    const [out] = await this.enrichMany!([record], ctx)\n    return out\n  },\n\n  async enrichMany(records, ctx) {\n    if (records.length === 0) return records\n    const messageIds = records.map((r) => r.id)\n    const em = ctxEm(ctx)\n    const tenantId = ctx.tenantId as string\n    const organizationId = ctx.organizationId ?? null\n    const dscope = { tenantId, organizationId }\n\n    const participantMessageIdSet = await loadParticipantMessageIds(em, messageIds, ctx)\n    if (participantMessageIdSet.size === 0) {\n      return records.map((record) => ({\n        ...record,\n        _channel: null,\n        _channelPayload: null,\n        _channelContact: null,\n      }))\n    }\n    const participantMessageIds = Array.from(participantMessageIdSet)\n\n    // 1) MessageChannelLink \u2014 one bounded `$in` query for the whole page, shared by\n    // all three enrichments (channel metadata, channel payload, conversation\n    // contact). The result set is already bounded by the `messageId $in messageIds`\n    // filter (the host list endpoint caps the page at 100), so no separate row\n    // limit is needed.\n    const links = await findWithDecryption(\n      em,\n      MessageChannelLink,\n      {\n        messageId: { $in: participantMessageIds },\n        tenantId,\n        organizationId,\n      },\n      undefined,\n      dscope,\n    )\n    const linksByMessage = new Map<string, MessageChannelLink>()\n    for (const link of links) linksByMessage.set(link.messageId, link)\n\n    // 2) ExternalConversation \u2014 one query, shared by the channel-capabilities hop and\n    // the conversation-contact enrichment.\n    const conversationIds = Array.from(\n      new Set(\n        links\n          .map((l) => l.externalConversationId)\n          .filter((id): id is string => typeof id === 'string' && id.length > 0),\n      ),\n    )\n    const conversationsById = new Map<string, ExternalConversation>()\n    if (conversationIds.length > 0) {\n      const conversations = await findWithDecryption(\n        em,\n        ExternalConversation,\n        { id: { $in: conversationIds }, tenantId, organizationId },\n        undefined,\n        dscope,\n      )\n      for (const conversation of conversations) {\n        conversationsById.set(conversation.id, conversation)\n      }\n    }\n\n    // 3) CommunicationChannel \u2014 capabilities snapshot. Resolve by `id` (not\n    // `providerKey`): multi-user channels share the same `providerKey` (e.g. two\n    // users with Gmail), so a providerKey-keyed map collapses them and returns the\n    // wrong owner's capabilities. The hop is `link \u2192 ExternalConversation \u2192 CommunicationChannel`.\n    const channelIds = Array.from(\n      new Set(\n        Array.from(conversationsById.values())\n          .map((conversation) => conversation.channelId)\n          .filter((id): id is string => typeof id === 'string' && id.length > 0),\n      ),\n    )\n    const channelsById = new Map<string, CommunicationChannel>()\n    if (channelIds.length > 0) {\n      const channels = await findWithDecryption(\n        em,\n        CommunicationChannel,\n        { id: { $in: channelIds }, tenantId, organizationId, deletedAt: null },\n        undefined,\n        dscope,\n      )\n      for (const channel of channels) channelsById.set(channel.id, channel)\n    }\n\n    const channelByMessageId = new Map<string, CommunicationChannel>()\n    for (const link of links) {\n      if (!link.externalConversationId) continue\n      const conversation = conversationsById.get(link.externalConversationId)\n      if (!conversation) continue\n      const channel = conversation.channelId ? channelsById.get(conversation.channelId) : undefined\n      if (channel) channelByMessageId.set(link.messageId, channel)\n    }\n\n    return records.map((r) => {\n      if (!participantMessageIdSet.has(r.id)) {\n        return { ...r, _channel: null, _channelPayload: null, _channelContact: null }\n      }\n\n      const link = linksByMessage.get(r.id)\n      if (!link) {\n        return { ...r, _channel: null, _channelPayload: null, _channelContact: null }\n      }\n\n      const channel = channelByMessageId.get(r.id)\n      const channelEnrichment: ChannelEnrichment = {\n        providerKey: link.providerKey,\n        channelType: link.channelType,\n        direction: link.direction,\n        deliveryStatus: link.deliveryStatus ?? null,\n        capabilities: (channel?.capabilities as Record<string, unknown> | null) ?? null,\n      }\n\n      const payloadEnrichment: ChannelPayloadEnrichment = {\n        channelContentType: link.channelContentType ?? null,\n        channelPayload: link.channelPayload ?? null,\n        interactiveState: link.interactiveState ?? null,\n        channelMetadata: link.channelMetadata ?? null,\n        sanitizedHtml: sanitizeEmailPayloadHtml(link.channelContentType, link.channelPayload),\n      }\n\n      const conversation = link.externalConversationId\n        ? conversationsById.get(link.externalConversationId)\n        : undefined\n      const contactEnrichment: ChannelContactEnrichment | null = conversation\n        ? {\n            contactPersonId: conversation.contactPersonId ?? null,\n            assignedUserId: conversation.assignedUserId ?? null,\n            subject: conversation.subject ?? null,\n          }\n        : null\n\n      return {\n        ...r,\n        _channel: channelEnrichment,\n        _channelPayload: payloadEnrichment,\n        _channelContact: contactEnrichment,\n      }\n    })\n  },\n}\n\n// \u2500\u2500 _reactions \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\nconst messageReactionsEnricher: ResponseEnricher<\n  MessageRecord,\n  { _reactions?: ReactionGroup[] }\n> = {\n  id: 'communication_channels.message-reactions',\n  targetEntity: 'messages.message',\n  features: ['communication_channels.view'],\n  priority: 25,\n  timeout: 1500,\n  fallback: { _reactions: [] },\n  critical: false,\n\n  async enrichOne(record, ctx) {\n    const [out] = await this.enrichMany!([record], ctx)\n    return out\n  },\n\n  async enrichMany(records, ctx) {\n    if (records.length === 0) return records\n    const messageIds = records.map((r) => r.id)\n    const em = ctxEm(ctx)\n    const participantMessageIdSet = await loadParticipantMessageIds(em, messageIds, ctx)\n    if (participantMessageIdSet.size === 0) {\n      return records.map((r) => ({ ...r, _reactions: [] }))\n    }\n    const dscope = { tenantId: ctx.tenantId, organizationId: ctx.organizationId ?? null }\n    const reactions = await findWithDecryption(\n      em,\n      MessageReaction,\n      {\n        messageId: { $in: Array.from(participantMessageIdSet) },\n        tenantId: ctx.tenantId,\n        organizationId: ctx.organizationId ?? null,\n      },\n      undefined,\n      dscope,\n    )\n\n    const byMessage = new Map<string, MessageReaction[]>()\n    for (const reaction of reactions) {\n      const existing = byMessage.get(reaction.messageId) ?? []\n      existing.push(reaction)\n      byMessage.set(reaction.messageId, existing)\n    }\n\n    return records.map((r) => {\n      const rows = byMessage.get(r.id) ?? []\n      const grouped = groupReactions(rows, ctx.userId)\n      return { ...r, _reactions: grouped }\n    })\n  },\n}\n\nexport type ReactionGroup = {\n  emoji: string\n  count: number\n  users: Array<{\n    userId?: string | null\n    externalId?: string | null\n    displayName?: string | null\n    providerKey?: string | null\n  }>\n  reactedByMe: boolean\n  /**\n   * MessageReaction.id of the current user's reaction row, if any. Exposed so\n   * the reaction-bar UI can issue\n   *   `DELETE /api/communication_channels/messages/{messageId}/reactions/{myReactionId}`\n   * when the user toggles their own reaction off. Null when `reactedByMe` is\n   * false or the row was added by an external participant (provider-side).\n   */\n  myReactionId: string | null\n}\n\nfunction groupReactions(rows: MessageReaction[], currentUserId: string): ReactionGroup[] {\n  const map = new Map<string, ReactionGroup>()\n  for (const row of rows) {\n    const key = row.emoji\n    if (!map.has(key)) {\n      map.set(key, { emoji: key, count: 0, users: [], reactedByMe: false, myReactionId: null })\n    }\n    const group = map.get(key)!\n    group.count += 1\n    group.users.push({\n      userId: row.reactedByUserId ?? null,\n      externalId: row.reactedByExternalId ?? null,\n      displayName: row.reactedByDisplayName ?? null,\n      providerKey: row.providerKey ?? null,\n    })\n    if (row.reactedByUserId && row.reactedByUserId === currentUserId) {\n      group.reactedByMe = true\n      if (!group.myReactionId) group.myReactionId = row.id ?? null\n    }\n  }\n  return Array.from(map.values()).sort((a, b) => b.count - a.count)\n}\n\n// \u2500\u2500 Export \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\nexport const enrichers: ResponseEnricher[] = [\n  messageChannelEnricher as unknown as ResponseEnricher,\n  messageReactionsEnricher as unknown as ResponseEnricher,\n]\n\nexport default enrichers\n"],
+  "mappings": "AAEA,SAAS,0BAA0B;AACnC;AAAA,EACE;AAAA,OAEK;AACP,SAAS,2BAA2B;AACpC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AA0CP,SAAS,MAAM,KAAqC;AAClD,SAAO,IAAI;AACb;AAoCA,SAAS,yBACP,aACA,SACe;AACf,MAAI,CAAC,eAAe,CAAC,YAAY,WAAW,QAAQ,EAAG,QAAO;AAC9D,QAAM,OAAO,SAAS;AACtB,MAAI,OAAO,SAAS,YAAY,KAAK,WAAW,EAAG,QAAO;AAC1D,SAAO,oBAAoB,IAAI;AACjC;AASA,eAAe,0BACb,IACA,YACA,KACsB;AACtB,QAAM,SAAS,OAAO,IAAI,WAAW,YAAY,IAAI,OAAO,SAAS,IAAI,IAAI,SAAS;AACtF,MAAI,CAAC,UAAU,WAAW,WAAW,EAAG,QAAO,oBAAI,IAAI;AACvD,QAAM,iBAAiB,IAAI,kBAAkB;AAE7C,QAAM,KAAK,GAAG,UAA4C;AAC1D,MAAI,mBAAmB,6BAA6B,GAAG,WAAW,eAAe,GAAG,MAAM,EACvF,OAAO,MAAM,EACb,SAAS,EACT,MAAM,QAAQ,MAAM,UAAU,EAC9B,MAAM,eAAe,KAAK,IAAI,QAAkB,EAChD,MAAM,gBAAgB,MAAM,IAAI;AAEnC,qBAAmB,mBAAmB,OAClC,iBAAiB,MAAM,qBAAqB,KAAK,cAAc,IAC/D,iBAAiB,MAAM,qBAAqB,MAAM,IAAI;AAE1D,QAAM,kBAAkB,MAAM,iBAAiB,QAAQ;AACvD,SAAO,IAAI,IAAI,gBAAgB,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC;AACrD;AAIA,MAAM,yBAOF;AAAA,EACF,IAAI;AAAA,EACJ,cAAc;AAAA,EACd,UAAU,CAAC,6BAA6B;AAAA,EACxC,UAAU;AAAA,EACV,SAAS;AAAA,EACT,UAAU,EAAE,UAAU,MAAM,iBAAiB,MAAM,iBAAiB,KAAK;AAAA,EACzE,UAAU;AAAA,EAEV,MAAM,UAAU,QAAQ,KAAK;AAC3B,UAAM,CAAC,GAAG,IAAI,MAAM,KAAK,WAAY,CAAC,MAAM,GAAG,GAAG;AAClD,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,WAAW,SAAS,KAAK;AAC7B,QAAI,QAAQ,WAAW,EAAG,QAAO;AACjC,UAAM,aAAa,QAAQ,IAAI,CAAC,MAAM,EAAE,EAAE;AAC1C,UAAM,KAAK,MAAM,GAAG;AACpB,UAAM,WAAW,IAAI;AACrB,UAAM,iBAAiB,IAAI,kBAAkB;AAC7C,UAAM,SAAS,EAAE,UAAU,eAAe;AAE1C,UAAM,0BAA0B,MAAM,0BAA0B,IAAI,YAAY,GAAG;AACnF,QAAI,wBAAwB,SAAS,GAAG;AACtC,aAAO,QAAQ,IAAI,CAAC,YAAY;AAAA,QAC9B,GAAG;AAAA,QACH,UAAU;AAAA,QACV,iBAAiB;AAAA,QACjB,iBAAiB;AAAA,MACnB,EAAE;AAAA,IACJ;AACA,UAAM,wBAAwB,MAAM,KAAK,uBAAuB;AAOhE,UAAM,QAAQ,MAAM;AAAA,MAClB;AAAA,MACA;AAAA,MACA;AAAA,QACE,WAAW,EAAE,KAAK,sBAAsB;AAAA,QACxC;AAAA,QACA;AAAA,MACF;AAAA,MACA;AAAA,MACA;AAAA,IACF;AACA,UAAM,iBAAiB,oBAAI,IAAgC;AAC3D,eAAW,QAAQ,MAAO,gBAAe,IAAI,KAAK,WAAW,IAAI;AAIjE,UAAM,kBAAkB,MAAM;AAAA,MAC5B,IAAI;AAAA,QACF,MACG,IAAI,CAAC,MAAM,EAAE,sBAAsB,EACnC,OAAO,CAAC,OAAqB,OAAO,OAAO,YAAY,GAAG,SAAS,CAAC;AAAA,MACzE;AAAA,IACF;AACA,UAAM,oBAAoB,oBAAI,IAAkC;AAChE,QAAI,gBAAgB,SAAS,GAAG;AAC9B,YAAM,gBAAgB,MAAM;AAAA,QAC1B;AAAA,QACA;AAAA,QACA,EAAE,IAAI,EAAE,KAAK,gBAAgB,GAAG,UAAU,eAAe;AAAA,QACzD;AAAA,QACA;AAAA,MACF;AACA,iBAAW,gBAAgB,eAAe;AACxC,0BAAkB,IAAI,aAAa,IAAI,YAAY;AAAA,MACrD;AAAA,IACF;AAMA,UAAM,aAAa,MAAM;AAAA,MACvB,IAAI;AAAA,QACF,MAAM,KAAK,kBAAkB,OAAO,CAAC,EAClC,IAAI,CAAC,iBAAiB,aAAa,SAAS,EAC5C,OAAO,CAAC,OAAqB,OAAO,OAAO,YAAY,GAAG,SAAS,CAAC;AAAA,MACzE;AAAA,IACF;AACA,UAAM,eAAe,oBAAI,IAAkC;AAC3D,QAAI,WAAW,SAAS,GAAG;AACzB,YAAM,WAAW,MAAM;AAAA,QACrB;AAAA,QACA;AAAA,QACA,EAAE,IAAI,EAAE,KAAK,WAAW,GAAG,UAAU,gBAAgB,WAAW,KAAK;AAAA,QACrE;AAAA,QACA;AAAA,MACF;AACA,iBAAW,WAAW,SAAU,cAAa,IAAI,QAAQ,IAAI,OAAO;AAAA,IACtE;AAEA,UAAM,qBAAqB,oBAAI,IAAkC;AACjE,eAAW,QAAQ,OAAO;AACxB,UAAI,CAAC,KAAK,uBAAwB;AAClC,YAAM,eAAe,kBAAkB,IAAI,KAAK,sBAAsB;AACtE,UAAI,CAAC,aAAc;AACnB,YAAM,UAAU,aAAa,YAAY,aAAa,IAAI,aAAa,SAAS,IAAI;AACpF,UAAI,QAAS,oBAAmB,IAAI,KAAK,WAAW,OAAO;AAAA,IAC7D;AAEA,WAAO,QAAQ,IAAI,CAAC,MAAM;AACxB,UAAI,CAAC,wBAAwB,IAAI,EAAE,EAAE,GAAG;AACtC,eAAO,EAAE,GAAG,GAAG,UAAU,MAAM,iBAAiB,MAAM,iBAAiB,KAAK;AAAA,MAC9E;AAEA,YAAM,OAAO,eAAe,IAAI,EAAE,EAAE;AACpC,UAAI,CAAC,MAAM;AACT,eAAO,EAAE,GAAG,GAAG,UAAU,MAAM,iBAAiB,MAAM,iBAAiB,KAAK;AAAA,MAC9E;AAEA,YAAM,UAAU,mBAAmB,IAAI,EAAE,EAAE;AAC3C,YAAM,oBAAuC;AAAA,QAC3C,aAAa,KAAK;AAAA,QAClB,aAAa,KAAK;AAAA,QAClB,WAAW,KAAK;AAAA,QAChB,gBAAgB,KAAK,kBAAkB;AAAA,QACvC,cAAe,SAAS,gBAAmD;AAAA,MAC7E;AAEA,YAAM,oBAA8C;AAAA,QAClD,oBAAoB,KAAK,sBAAsB;AAAA,QAC/C,gBAAgB,KAAK,kBAAkB;AAAA,QACvC,kBAAkB,KAAK,oBAAoB;AAAA,QAC3C,iBAAiB,KAAK,mBAAmB;AAAA,QACzC,eAAe,yBAAyB,KAAK,oBAAoB,KAAK,cAAc;AAAA,MACtF;AAEA,YAAM,eAAe,KAAK,yBACtB,kBAAkB,IAAI,KAAK,sBAAsB,IACjD;AACJ,YAAM,oBAAqD,eACvD;AAAA,QACE,iBAAiB,aAAa,mBAAmB;AAAA,QACjD,gBAAgB,aAAa,kBAAkB;AAAA,QAC/C,SAAS,aAAa,WAAW;AAAA,MACnC,IACA;AAEJ,aAAO;AAAA,QACL,GAAG;AAAA,QACH,UAAU;AAAA,QACV,iBAAiB;AAAA,QACjB,iBAAiB;AAAA,MACnB;AAAA,IACF,CAAC;AAAA,EACH;AACF;AAIA,MAAM,2BAGF;AAAA,EACF,IAAI;AAAA,EACJ,cAAc;AAAA,EACd,UAAU,CAAC,6BAA6B;AAAA,EACxC,UAAU;AAAA,EACV,SAAS;AAAA,EACT,UAAU,EAAE,YAAY,CAAC,EAAE;AAAA,EAC3B,UAAU;AAAA,EAEV,MAAM,UAAU,QAAQ,KAAK;AAC3B,UAAM,CAAC,GAAG,IAAI,MAAM,KAAK,WAAY,CAAC,MAAM,GAAG,GAAG;AAClD,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,WAAW,SAAS,KAAK;AAC7B,QAAI,QAAQ,WAAW,EAAG,QAAO;AACjC,UAAM,aAAa,QAAQ,IAAI,CAAC,MAAM,EAAE,EAAE;AAC1C,UAAM,KAAK,MAAM,GAAG;AACpB,UAAM,0BAA0B,MAAM,0BAA0B,IAAI,YAAY,GAAG;AACnF,QAAI,wBAAwB,SAAS,GAAG;AACtC,aAAO,QAAQ,IAAI,CAAC,OAAO,EAAE,GAAG,GAAG,YAAY,CAAC,EAAE,EAAE;AAAA,IACtD;AACA,UAAM,SAAS,EAAE,UAAU,IAAI,UAAU,gBAAgB,IAAI,kBAAkB,KAAK;AACpF,UAAM,YAAY,MAAM;AAAA,MACtB;AAAA,MACA;AAAA,MACA;AAAA,QACE,WAAW,EAAE,KAAK,MAAM,KAAK,uBAAuB,EAAE;AAAA,QACtD,UAAU,IAAI;AAAA,QACd,gBAAgB,IAAI,kBAAkB;AAAA,MACxC;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAEA,UAAM,YAAY,oBAAI,IAA+B;AACrD,eAAW,YAAY,WAAW;AAChC,YAAM,WAAW,UAAU,IAAI,SAAS,SAAS,KAAK,CAAC;AACvD,eAAS,KAAK,QAAQ;AACtB,gBAAU,IAAI,SAAS,WAAW,QAAQ;AAAA,IAC5C;AAEA,WAAO,QAAQ,IAAI,CAAC,MAAM;AACxB,YAAM,OAAO,UAAU,IAAI,EAAE,EAAE,KAAK,CAAC;AACrC,YAAM,UAAU,eAAe,MAAM,IAAI,MAAM;AAC/C,aAAO,EAAE,GAAG,GAAG,YAAY,QAAQ;AAAA,IACrC,CAAC;AAAA,EACH;AACF;AAsBA,SAAS,eAAe,MAAyB,eAAwC;AACvF,QAAM,MAAM,oBAAI,IAA2B;AAC3C,aAAW,OAAO,MAAM;AACtB,UAAM,MAAM,IAAI;AAChB,QAAI,CAAC,IAAI,IAAI,GAAG,GAAG;AACjB,UAAI,IAAI,KAAK,EAAE,OAAO,KAAK,OAAO,GAAG,OAAO,CAAC,GAAG,aAAa,OAAO,cAAc,KAAK,CAAC;AAAA,IAC1F;AACA,UAAM,QAAQ,IAAI,IAAI,GAAG;AACzB,UAAM,SAAS;AACf,UAAM,MAAM,KAAK;AAAA,MACf,QAAQ,IAAI,mBAAmB;AAAA,MAC/B,YAAY,IAAI,uBAAuB;AAAA,MACvC,aAAa,IAAI,wBAAwB;AAAA,MACzC,aAAa,IAAI,eAAe;AAAA,IAClC,CAAC;AACD,QAAI,IAAI,mBAAmB,IAAI,oBAAoB,eAAe;AAChE,YAAM,cAAc;AACpB,UAAI,CAAC,MAAM,aAAc,OAAM,eAAe,IAAI,MAAM;AAAA,IAC1D;AAAA,EACF;AACA,SAAO,MAAM,KAAK,IAAI,OAAO,CAAC,EAAE,KAAK,CAAC,GAAG,MAAM,EAAE,QAAQ,EAAE,KAAK;AAClE;AAIO,MAAM,YAAgC;AAAA,EAC3C;AAAA,EACA;AACF;AAEA,IAAO,oBAAQ;",
   "names": []
 }

package/dist/modules/communication_channels/data/entities.js

@@ -15,6 +15,7 @@ let CommunicationChannel = class {
   constructor() {
     this.isActive = true;
     this.isPrimary = false;
+    this.visibility = "private";
     this.status = "connected";
     this.createdAt = /* @__PURE__ */ new Date();
     this.updatedAt = /* @__PURE__ */ new Date();
@@ -50,6 +51,9 @@ __decorateClass([
 __decorateClass([
   Property({ name: "is_primary", type: "boolean", default: false })
 ], CommunicationChannel.prototype, "isPrimary", 2);
+__decorateClass([
+  Property({ name: "visibility", type: "text", default: "private" })
+], CommunicationChannel.prototype, "visibility", 2);
 __decorateClass([
   Property({ name: "poll_interval_seconds", type: "int", nullable: true })
 ], CommunicationChannel.prototype, "pollIntervalSeconds", 2);

package/dist/modules/communication_channels/data/entities.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/communication_channels/data/entities.ts"],
-  "sourcesContent": ["import { OptionalProps } from '@mikro-orm/core'\nimport { Check, Entity, Index, PrimaryKey, Property, Unique } from '@mikro-orm/decorators/legacy'\n\n/**\n * Hub entities for the Communication Channels module.\n *\n * Cross-module references (e.g. `MessageChannelLink.messageId \u2192 messages.message.id`)\n * use plain `uuid` columns, NOT MikroORM `@ManyToOne` decorators. Project rule:\n * \"No direct ORM relationships between modules \u2014 use foreign key IDs, fetch separately.\"\n * Cross-module links are declared in `data/extensions.ts` via `EntityExtension`.\n *\n * See SPEC-045d \u00A72.2.\n */\n\n// \u2500\u2500 CommunicationChannel \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\n/**\n * Per-channel lifecycle status. Set by the polling worker / outbound subscriber\n * + the `markChannelRequiresReauth` command. Existing `isActive` remains for the\n * coarse admin enable/disable toggle; `status` is the finer-grained operational\n * state used by per-user reconnect flows.\n *\n * Email integration spec \u00A7 Hub Deltas \u2192 Delta 2.\n */\nexport type CommunicationChannelStatus =\n  | 'connected'\n  | 'requires_reauth'\n  | 'error'\n  | 'disconnected'\n\n@Entity({ tableName: 'communication_channels' })\n@Index({ name: 'communication_channels_tenant_provider_idx', properties: ['tenantId', 'providerKey'] })\n// Provider-push webhooks (Gmail Pub/Sub) resolve channels by (provider_key,\n// external_identifier) WITHOUT a tenant_id \u2014 they only know the mailbox address.\n// Without this index that lookup is a full scan over every channel of the\n// provider, which a (signature-verified) push or replay repeats on every hit.\n@Index({\n  name: 'communication_channels_provider_external_idx',\n  expression:\n    `create index \"communication_channels_provider_external_idx\" on \"communication_channels\" (\"provider_key\", \"external_identifier\") where \"deleted_at\" is null`,\n})\n@Index({ name: 'communication_channels_tenant_type_active_idx', properties: ['tenantId', 'channelType', 'isActive'] })\n@Index({\n  name: 'communication_channels_user_lookup_idx',\n  properties: ['userId', 'channelType', 'deletedAt'],\n})\n@Index({\n  name: 'communication_channels_poll_due_idx',\n  expression:\n    `create index \"communication_channels_poll_due_idx\" on \"communication_channels\" (\"is_active\", \"last_polled_at\") where \"deleted_at\" is null`,\n})\n@Index({\n  name: 'communication_channels_one_primary_per_user_uq',\n  expression:\n    `create unique index \"communication_channels_one_primary_per_user_uq\" on \"communication_channels\" (\"user_id\") where \"is_primary\" and \"user_id\" is not null and \"deleted_at\" is null`,\n})\n// One channel per (tenant, user, provider, mailbox): a reconnect heals the\n// existing row in place (see `createConnectedChannelRow`) instead of inserting a\n// duplicate that would stay polled + keep its own push subscription. Partial so\n// tenant-wide channels (null user_id) and identifier-less rows are exempt.\n@Index({\n  name: 'communication_channels_user_provider_external_uq',\n  expression:\n    `create unique index \"communication_channels_user_provider_external_uq\" on \"communication_channels\" (\"tenant_id\", \"user_id\", \"provider_key\", \"external_identifier\") where \"deleted_at\" is null and \"user_id\" is not null and \"external_identifier\" is not null`,\n})\n// One tenant-wide push channel per (tenant, provider): push providers (FCM/APNs/\n// Expo) have no `external_identifier` and `user_id IS NULL`, so the mailbox\n// unique index above does not cover them. This keeps an admin reconnect healing\n// the single shared row (see `createConnectedChannelRow`) instead of inserting\n// duplicates the fan-out would silently ignore.\n@Index({\n  name: 'communication_channels_tenant_push_provider_uq',\n  expression:\n    `create unique index \"communication_channels_tenant_push_provider_uq\" on \"communication_channels\" (\"tenant_id\", \"provider_key\") where \"channel_type\" = 'push' and \"user_id\" is null and \"deleted_at\" is null`,\n})\nexport class CommunicationChannel {\n  [OptionalProps]?:\n    | 'createdAt'\n    | 'updatedAt'\n    | 'isActive'\n    | 'capabilities'\n    | 'deletedAt'\n    | 'externalIdentifier'\n    | 'credentialsRef'\n    | 'organizationId'\n    | 'userId'\n    | 'isPrimary'\n    | 'pollIntervalSeconds'\n    | 'lastPolledAt'\n    | 'status'\n    | 'lastError'\n    | 'channelState'\n\n  @PrimaryKey({ type: 'uuid', defaultRaw: 'gen_random_uuid()' })\n  id!: string\n\n  @Property({ name: 'provider_key', type: 'text' })\n  providerKey!: string\n\n  @Property({ name: 'channel_type', type: 'text' })\n  channelType!: string\n\n  @Property({ name: 'display_name', type: 'text' })\n  displayName!: string\n\n  @Property({ name: 'external_identifier', type: 'text', nullable: true })\n  externalIdentifier?: string | null\n\n  @Property({ name: 'credentials_ref', type: 'uuid', nullable: true })\n  credentialsRef?: string | null\n\n  @Property({ name: 'capabilities', type: 'json', nullable: true })\n  capabilities?: Record<string, unknown> | null\n\n  @Property({ name: 'is_active', type: 'boolean', default: true })\n  isActive: boolean = true\n\n  /**\n   * Per-user channel owner. NULL = tenant-scoped (existing behaviour, e.g. WhatsApp Business).\n   * Set = user-scoped (e.g. Jane's personal Gmail). Visible only to the owning user\n   * and to admins with `communication_channels.admin`. Linked to `auth:user` via\n   * `EntityExtension` in `data/extensions.ts` \u2014 never a raw DB FK.\n   */\n  @Property({ name: 'user_id', type: 'uuid', nullable: true })\n  userId?: string | null\n\n  /**\n   * Per-user \"primary\" flag. Only meaningful when `userId IS NOT NULL`; ignored\n   * for tenant-scoped channels. Enforced as one-primary-per-user by the partial\n   * unique index `communication_channels_one_primary_per_user_uq`.\n   */\n  @Property({ name: 'is_primary', type: 'boolean', default: false })\n  isPrimary: boolean = false\n\n  /**\n   * Polling cadence in seconds. NULL means \"this channel does not poll\" \u2014 i.e. it\n   * is push-only (webhook) or its provider opted out via\n   * `ChannelCapabilities.realtimePush !== false`. Set means hub-managed polling\n   * at that interval via the `poll-tick` scheduler entry.\n   */\n  @Property({ name: 'poll_interval_seconds', type: 'int', nullable: true })\n  pollIntervalSeconds?: number | null\n\n  /** Last successful poll timestamp; the scheduler enumerates by this column. */\n  @Property({ name: 'last_polled_at', type: Date, nullable: true })\n  lastPolledAt?: Date | null\n\n  /**\n   * Per-channel lifecycle status. See {@link CommunicationChannelStatus}.\n   * Migration sets `status = 'connected'` for all existing active channels (default value).\n   */\n  @Property({ name: 'status', type: 'text', default: 'connected' })\n  status: CommunicationChannelStatus = 'connected'\n\n  /** Most recent classified error message for diagnostics. */\n  @Property({ name: 'last_error', type: 'text', nullable: true })\n  lastError?: string | null\n\n  /**\n   * Provider-specific resumption state, opaque to the hub. Polling adapters\n   * encode their incremental cursor here (Gmail historyId, IMAP\n   * UIDVALIDITY+UIDNEXT). The polling worker reads it before each\n   * `fetchHistory` call and writes the adapter's returned `nextCursor` back\n   * after a successful poll. Empty / NULL means \"bootstrap on next poll\".\n   */\n  @Property({ name: 'channel_state', type: 'json', nullable: true })\n  channelState?: Record<string, unknown> | null\n\n  @Property({ name: 'tenant_id', type: 'uuid' })\n  tenantId!: string\n\n  @Property({ name: 'organization_id', type: 'uuid', nullable: true })\n  organizationId?: string | null\n\n  @Property({ name: 'created_at', type: Date, onCreate: () => new Date() })\n  createdAt: Date = new Date()\n\n  @Property({ name: 'updated_at', type: Date, onUpdate: () => new Date() })\n  updatedAt: Date = new Date()\n\n  @Property({ name: 'deleted_at', type: Date, nullable: true })\n  deletedAt?: Date | null\n}\n\n// \u2500\u2500 ExternalConversation \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\n@Entity({ tableName: 'external_conversations' })\n@Index({ name: 'external_conversations_channel_idx', properties: ['channelId', 'externalConversationId'] })\n@Index({ name: 'external_conversations_contact_person_idx', properties: ['contactPersonId'] })\n@Index({ name: 'external_conversations_assigned_user_idx', properties: ['assignedUserId'] })\n@Unique({ name: 'external_conversations_channel_external_uq', properties: ['channelId', 'externalConversationId'] })\nexport class ExternalConversation {\n  [OptionalProps]?: 'createdAt' | 'updatedAt' | 'lastMessageAt' | 'subject' | 'contactPersonId' | 'assignedUserId' | 'organizationId'\n\n  @PrimaryKey({ type: 'uuid', defaultRaw: 'gen_random_uuid()' })\n  id!: string\n\n  @Property({ name: 'channel_id', type: 'uuid' })\n  channelId!: string\n\n  @Property({ name: 'external_conversation_id', type: 'text' })\n  externalConversationId!: string\n\n  @Property({ name: 'subject', type: 'text', nullable: true })\n  subject?: string | null\n\n  @Property({ name: 'contact_person_id', type: 'uuid', nullable: true })\n  contactPersonId?: string | null\n\n  @Property({ name: 'assigned_user_id', type: 'uuid', nullable: true })\n  assignedUserId?: string | null\n\n  @Property({ name: 'last_message_at', type: Date, nullable: true })\n  lastMessageAt?: Date | null\n\n  @Property({ name: 'tenant_id', type: 'uuid' })\n  tenantId!: string\n\n  @Property({ name: 'organization_id', type: 'uuid', nullable: true })\n  organizationId?: string | null\n\n  @Property({ name: 'created_at', type: Date, onCreate: () => new Date() })\n  createdAt: Date = new Date()\n\n  @Property({ name: 'updated_at', type: Date, onUpdate: () => new Date() })\n  updatedAt: Date = new Date()\n}\n\n// \u2500\u2500 ExternalMessage \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\n@Entity({ tableName: 'external_messages' })\n@Index({ name: 'external_messages_conversation_idx', properties: ['conversationId'] })\n@Index({ name: 'external_messages_channel_external_idx', properties: ['channelId', 'externalMessageId'] })\n@Unique({ name: 'external_messages_channel_external_uq', properties: ['channelId', 'externalMessageId'] })\nexport class ExternalMessage {\n  [OptionalProps]?: 'createdAt' | 'senderIdentifier' | 'senderDisplayName' | 'providerTimestamp' | 'organizationId'\n\n  @PrimaryKey({ type: 'uuid', defaultRaw: 'gen_random_uuid()' })\n  id!: string\n\n  @Property({ name: 'channel_id', type: 'uuid' })\n  channelId!: string\n\n  @Property({ name: 'conversation_id', type: 'uuid' })\n  conversationId!: string\n\n  @Property({ name: 'external_message_id', type: 'text' })\n  externalMessageId!: string\n\n  @Property({ name: 'direction', type: 'text' })\n  direction!: 'inbound' | 'outbound'\n\n  @Property({ name: 'sender_identifier', type: 'text', nullable: true })\n  senderIdentifier?: string | null\n\n  @Property({ name: 'sender_display_name', type: 'text', nullable: true })\n  senderDisplayName?: string | null\n\n  @Property({ name: 'provider_timestamp', type: Date, nullable: true })\n  providerTimestamp?: Date | null\n\n  @Property({ name: 'tenant_id', type: 'uuid' })\n  tenantId!: string\n\n  @Property({ name: 'organization_id', type: 'uuid', nullable: true })\n  organizationId?: string | null\n\n  @Property({ name: 'created_at', type: Date, onCreate: () => new Date() })\n  createdAt: Date = new Date()\n}\n\n// \u2500\u2500 MessageChannelLink \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\n@Entity({ tableName: 'message_channel_links' })\n@Index({ name: 'message_channel_links_message_idx', properties: ['messageId'] })\n@Index({ name: 'message_channel_links_ext_conv_idx', properties: ['externalConversationId'] })\n@Index({ name: 'message_channel_links_ext_msg_idx', properties: ['externalMessageId'] })\n@Unique({ name: 'message_channel_links_message_uq', properties: ['messageId'] })\nexport class MessageChannelLink {\n  [OptionalProps]?: 'createdAt' | 'deliveryStatus' | 'externalMessageId' | 'channelPayload' | 'channelContentType' | 'interactiveState' | 'channelMetadata' | 'organizationId'\n\n  @PrimaryKey({ type: 'uuid', defaultRaw: 'gen_random_uuid()' })\n  id!: string\n\n  /** Logical link to messages.message.id (no DB FK \u2014 cross-module via EntityExtension). */\n  @Property({ name: 'message_id', type: 'uuid' })\n  messageId!: string\n\n  /** FK to external_conversations.id (intra-module \u2014 DB FK acceptable but kept as plain uuid for symmetry). */\n  @Property({ name: 'external_conversation_id', type: 'uuid' })\n  externalConversationId!: string\n\n  @Property({ name: 'external_message_id', type: 'uuid', nullable: true })\n  externalMessageId?: string | null\n\n  @Property({ name: 'provider_key', type: 'text' })\n  providerKey!: string\n\n  @Property({ name: 'channel_type', type: 'text' })\n  channelType!: string\n\n  @Property({ name: 'direction', type: 'text' })\n  direction!: 'inbound' | 'outbound'\n\n  @Property({ name: 'delivery_status', type: 'text' })\n  deliveryStatus: string = 'pending'\n\n  @Property({ name: 'channel_payload', type: 'json', nullable: true })\n  channelPayload?: Record<string, unknown> | null\n\n  @Property({ name: 'channel_content_type', type: 'text', nullable: true })\n  channelContentType?: string | null\n\n  @Property({ name: 'interactive_state', type: 'json', nullable: true })\n  interactiveState?: Record<string, unknown> | null\n\n  @Property({ name: 'channel_metadata', type: 'json', nullable: true })\n  channelMetadata?: Record<string, unknown> | null\n\n  @Property({ name: 'tenant_id', type: 'uuid' })\n  tenantId!: string\n\n  @Property({ name: 'organization_id', type: 'uuid', nullable: true })\n  organizationId?: string | null\n\n  @Property({ name: 'created_at', type: Date, onCreate: () => new Date() })\n  createdAt: Date = new Date()\n}\n\n// \u2500\u2500 ChannelThreadMapping \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\n@Entity({ tableName: 'channel_thread_mappings' })\n@Index({ name: 'channel_thread_mappings_ext_conv_idx', properties: ['externalConversationId', 'tenantId'] })\n@Index({ name: 'channel_thread_mappings_thread_idx', properties: ['messageThreadId', 'tenantId'] })\n@Unique({ name: 'channel_thread_mappings_ext_conv_uq', properties: ['externalConversationId', 'tenantId'] })\nexport class ChannelThreadMapping {\n  [OptionalProps]?: 'createdAt' | 'updatedAt' | 'assignedUserId' | 'organizationId'\n\n  @PrimaryKey({ type: 'uuid', defaultRaw: 'gen_random_uuid()' })\n  id!: string\n\n  @Property({ name: 'external_conversation_id', type: 'uuid' })\n  externalConversationId!: string\n\n  /** Logical link to messages.message.thread_id (no DB FK \u2014 cross-module). */\n  @Property({ name: 'message_thread_id', type: 'uuid' })\n  messageThreadId!: string\n\n  @Property({ name: 'channel_id', type: 'uuid' })\n  channelId!: string\n\n  @Property({ name: 'provider_key', type: 'text' })\n  providerKey!: string\n\n  @Property({ name: 'external_thread_ref', type: 'text' })\n  externalThreadRef!: string\n\n  /** Logical link to auth.user.id (no DB FK \u2014 cross-module). */\n  @Property({ name: 'assigned_user_id', type: 'uuid', nullable: true })\n  assignedUserId?: string | null\n\n  @Property({ name: 'tenant_id', type: 'uuid' })\n  tenantId!: string\n\n  @Property({ name: 'organization_id', type: 'uuid', nullable: true })\n  organizationId?: string | null\n\n  @Property({ name: 'created_at', type: Date, onCreate: () => new Date() })\n  createdAt: Date = new Date()\n\n  @Property({ name: 'updated_at', type: Date, onUpdate: () => new Date() })\n  updatedAt: Date = new Date()\n}\n\n// \u2500\u2500 MessageReaction \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\n@Entity({ tableName: 'message_reactions' })\n@Index({ name: 'message_reactions_message_idx', properties: ['messageId'] })\n@Index({ name: 'message_reactions_message_emoji_idx', properties: ['messageId', 'emoji'] })\n@Index({\n  name: 'message_reactions_internal_actor_uq',\n  expression:\n    `create unique index \"message_reactions_internal_actor_uq\" on \"message_reactions\" (\"tenant_id\", \"message_id\", \"emoji\", \"reacted_by_user_id\") where \"reacted_by_user_id\" is not null`,\n})\n@Index({\n  name: 'message_reactions_external_actor_uq',\n  expression:\n    `create unique index \"message_reactions_external_actor_uq\" on \"message_reactions\" (\"tenant_id\", \"message_id\", \"emoji\", \"reacted_by_external_id\") where \"reacted_by_external_id\" is not null`,\n})\n@Check({\n  name: 'message_reactions_exactly_one_actor_chk',\n  expression: `(\"reacted_by_user_id\" is null) <> (\"reacted_by_external_id\" is null)`,\n})\nexport class MessageReaction {\n  [OptionalProps]?: 'createdAt' | 'reactedByUserId' | 'reactedByExternalId' | 'reactedByDisplayName' | 'providerKey' | 'externalReactionId' | 'organizationId'\n\n  @PrimaryKey({ type: 'uuid', defaultRaw: 'gen_random_uuid()' })\n  id!: string\n\n  /** Logical link to messages.message.id (no DB FK \u2014 cross-module). */\n  @Property({ name: 'message_id', type: 'uuid' })\n  messageId!: string\n\n  @Property({ name: 'emoji', type: 'text' })\n  emoji!: string\n\n  /** Logical link to auth.user.id (no DB FK \u2014 cross-module). NULL for external reactions. */\n  @Property({ name: 'reacted_by_user_id', type: 'uuid', nullable: true })\n  reactedByUserId?: string | null\n\n  @Property({ name: 'reacted_by_external_id', type: 'text', nullable: true })\n  reactedByExternalId?: string | null\n\n  @Property({ name: 'reacted_by_display_name', type: 'text', nullable: true })\n  reactedByDisplayName?: string | null\n\n  @Property({ name: 'provider_key', type: 'text', nullable: true })\n  providerKey?: string | null\n\n  @Property({ name: 'external_reaction_id', type: 'text', nullable: true })\n  externalReactionId?: string | null\n\n  @Property({ name: 'tenant_id', type: 'uuid' })\n  tenantId!: string\n\n  @Property({ name: 'organization_id', type: 'uuid', nullable: true })\n  organizationId?: string | null\n\n  @Property({ name: 'created_at', type: Date, onCreate: () => new Date() })\n  createdAt: Date = new Date()\n}\n\n// \u2500\u2500 ChannelThreadToken \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\n/**\n * Per-thread HMAC-signed opaque token used by the layered thread-matcher to\n * reliably attach inbound replies to the originating Open Mercato message\n * thread, even when the recipient's mail client strips RFC 5322 headers.\n *\n * Created lazily on the first outbound message in a thread by the\n * `outbound-bridge` subscriber. The token is injected into:\n *   1. The MIME `References:` header as `<om_TOKEN@open-mercato.invalid>` \u2014\n *      invisible to the recipient and survives most reply clients.\n *   2. A hidden HTML body span `<span style=\"display:none\">[OM:om_TOKEN]</span>` \u2014\n *      survives when References is stripped (e.g. some mobile clients).\n *   3. A plain-text trailer `[OM:om_TOKEN]` \u2014 survives plain-text-only replies.\n *\n * The unique constraint is `(tenantId, token)` \u2014 tenant isolation by\n * construction. HMAC verification (via `lib/thread-token.ts`) defends against\n * forged inbound messages: tokens that don't HMAC-verify never reach the DB\n * lookup.\n *\n * See `.ai/specs/implemented/2026-05-27-email-integration-inbound-reliability-and-threading.md`.\n */\n@Entity({ tableName: 'channel_thread_tokens' })\n// One token row per (tenant, thread): the matcher resolves every reply to the\n// same thread regardless of which outbound send minted the token. The unique\n// constraint also makes `getOrCreateThreadToken` race-safe (insert-on-conflict).\n@Unique({ name: 'channel_thread_tokens_thread_uq', properties: ['tenantId', 'messageThreadId'] })\n@Unique({ name: 'channel_thread_tokens_token_uq', properties: ['tenantId', 'token'] })\nexport class ChannelThreadToken {\n  [OptionalProps]?: 'createdAt' | 'lastSeenAt' | 'organizationId'\n\n  @PrimaryKey({ type: 'uuid', defaultRaw: 'gen_random_uuid()' })\n  id!: string\n\n  @Property({ name: 'tenant_id', type: 'uuid' })\n  tenantId!: string\n\n  @Property({ name: 'organization_id', type: 'uuid', nullable: true })\n  organizationId?: string | null\n\n  /** Logical link to messages.message.thread_id (no DB FK \u2014 cross-module). */\n  @Property({ name: 'message_thread_id', type: 'uuid' })\n  messageThreadId!: string\n\n  /**\n   * HMAC-signed opaque token, format: `om_<22b64url>_<11b64url>` (16 random\n   * bytes + 8 HMAC bytes, each base64url-encoded without padding), ~37 chars.\n   */\n  @Property({ name: 'token', type: 'text' })\n  token!: string\n\n  @Property({ name: 'created_at', type: Date, onCreate: () => new Date() })\n  createdAt: Date = new Date()\n\n  /**\n   * Updated whenever a thread-matcher token-based strategy resolves to this\n   * row. Used for future GC: tokens with `last_seen_at < now() - 90 days`\n   * are pruning candidates.\n   */\n  @Property({ name: 'last_seen_at', type: Date, nullable: true })\n  lastSeenAt?: Date | null\n}\n\n// \u2500\u2500 ChannelIngestDeadLetter \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\n/**\n * Inbound messages that fail permanently during ingest land here so an\n * operator can replay them after fixing parsers / schemas. Transient\n * failures (DB blip, network timeout) DO NOT write here \u2014 those abort the\n * poll loop without advancing the cursor so the message is re-fetched on\n * the next tick.\n *\n * `raw_body` is encrypted at rest via the module's `encryption.ts`\n * `defaultEncryptionMaps` entry (MIME bodies may contain PII).\n *\n * See `.ai/specs/implemented/2026-05-27-email-integration-inbound-reliability-and-threading.md`\n * (\u00A7 3 Data Model).\n */\n@Entity({ tableName: 'channel_ingest_dead_letters' })\n@Index({ name: 'channel_ingest_dead_letters_channel_idx', properties: ['channelId', 'tenantId'] })\n@Index({ name: 'channel_ingest_dead_letters_created_idx', properties: ['tenantId', 'createdAt'] })\nexport class ChannelIngestDeadLetter {\n  [OptionalProps]?:\n    | 'createdAt'\n    | 'organizationId'\n    | 'externalMessageId'\n    | 'externalUid'\n    | 'rawBody'\n\n  @PrimaryKey({ type: 'uuid', defaultRaw: 'gen_random_uuid()' })\n  id!: string\n\n  @Property({ name: 'tenant_id', type: 'uuid' })\n  tenantId!: string\n\n  @Property({ name: 'organization_id', type: 'uuid', nullable: true })\n  organizationId?: string | null\n\n  @Property({ name: 'channel_id', type: 'uuid' })\n  channelId!: string\n\n  @Property({ name: 'provider_key', type: 'text' })\n  providerKey!: string\n\n  /** External UID / sequence-number for the provider (e.g. IMAP UID, Gmail messageId). */\n  @Property({ name: 'external_uid', type: 'text', nullable: true })\n  externalUid?: string | null\n\n  @Property({ name: 'external_message_id', type: 'text', nullable: true })\n  externalMessageId?: string | null\n\n  @Property({ name: 'error_class', type: 'text' })\n  errorClass!: string\n\n  @Property({ name: 'error_message', type: 'text' })\n  errorMessage!: string\n\n  /** Truncated source \u2014 first N bytes of the raw MIME / payload (encrypted at rest). */\n  @Property({ name: 'raw_body', type: 'text', nullable: true })\n  rawBody?: string | null\n\n  @Property({ name: 'created_at', type: Date, onCreate: () => new Date() })\n  createdAt: Date = new Date()\n}\n"],
-  "mappings": ";;;;;;;;;;AAAA,SAAS,qBAAqB;AAC9B,SAAS,OAAO,QAAQ,OAAO,YAAY,UAAU,cAAc;AA2EhE;AADI,IAAM,uBAAN,MAA2B;AAAA,EAA3B;AAwCL,oBAAoB;AAiBpB,qBAAqB;AAoBrB,kBAAqC;AAuBrC,qBAAkB,oBAAI,KAAK;AAG3B,qBAAkB,oBAAI,KAAK;AAAA;AAI7B;AAxFE;AAAA,EADC,WAAW,EAAE,MAAM,QAAQ,YAAY,oBAAoB,CAAC;AAAA,GAlBlD,qBAmBX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,gBAAgB,MAAM,OAAO,CAAC;AAAA,GArBrC,qBAsBX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,gBAAgB,MAAM,OAAO,CAAC;AAAA,GAxBrC,qBAyBX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,gBAAgB,MAAM,OAAO,CAAC;AAAA,GA3BrC,qBA4BX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,uBAAuB,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GA9B5D,qBA+BX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,mBAAmB,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GAjCxD,qBAkCX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,gBAAgB,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GApCrD,qBAqCX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,aAAa,MAAM,WAAW,SAAS,KAAK,CAAC;AAAA,GAvCpD,qBAwCX;AASA;AAAA,EADC,SAAS,EAAE,MAAM,WAAW,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GAhDhD,qBAiDX;AAQA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,WAAW,SAAS,MAAM,CAAC;AAAA,GAxDtD,qBAyDX;AASA;AAAA,EADC,SAAS,EAAE,MAAM,yBAAyB,MAAM,OAAO,UAAU,KAAK,CAAC;AAAA,GAjE7D,qBAkEX;AAIA;AAAA,EADC,SAAS,EAAE,MAAM,kBAAkB,MAAM,MAAM,UAAU,KAAK,CAAC;AAAA,GArErD,qBAsEX;AAOA;AAAA,EADC,SAAS,EAAE,MAAM,UAAU,MAAM,QAAQ,SAAS,YAAY,CAAC;AAAA,GA5ErD,qBA6EX;AAIA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GAhFnD,qBAiFX;AAUA;AAAA,EADC,SAAS,EAAE,MAAM,iBAAiB,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GA1FtD,qBA2FX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,aAAa,MAAM,OAAO,CAAC;AAAA,GA7FlC,qBA8FX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,mBAAmB,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GAhGxD,qBAiGX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,MAAM,UAAU,MAAM,oBAAI,KAAK,EAAE,CAAC;AAAA,GAnG7D,qBAoGX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,MAAM,UAAU,MAAM,oBAAI,KAAK,EAAE,CAAC;AAAA,GAtG7D,qBAuGX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,MAAM,UAAU,KAAK,CAAC;AAAA,GAzGjD,qBA0GX;AA1GW,uBAAN;AAAA,EA7CN,OAAO,EAAE,WAAW,yBAAyB,CAAC;AAAA,EAC9C,MAAM,EAAE,MAAM,8CAA8C,YAAY,CAAC,YAAY,aAAa,EAAE,CAAC;AAAA,EAKrG,MAAM;AAAA,IACL,MAAM;AAAA,IACN,YACE;AAAA,EACJ,CAAC;AAAA,EACA,MAAM,EAAE,MAAM,iDAAiD,YAAY,CAAC,YAAY,eAAe,UAAU,EAAE,CAAC;AAAA,EACpH,MAAM;AAAA,IACL,MAAM;AAAA,IACN,YAAY,CAAC,UAAU,eAAe,WAAW;AAAA,EACnD,CAAC;AAAA,EACA,MAAM;AAAA,IACL,MAAM;AAAA,IACN,YACE;AAAA,EACJ,CAAC;AAAA,EACA,MAAM;AAAA,IACL,MAAM;AAAA,IACN,YACE;AAAA,EACJ,CAAC;AAAA,EAKA,MAAM;AAAA,IACL,MAAM;AAAA,IACN,YACE;AAAA,EACJ,CAAC;AAAA,EAMA,MAAM;AAAA,IACL,MAAM;AAAA,IACN,YACE;AAAA,EACJ,CAAC;AAAA,GACY;AAqHV;AADI,IAAM,uBAAN,MAA2B;AAAA,EAA3B;AA+BL,qBAAkB,oBAAI,KAAK;AAG3B,qBAAkB,oBAAI,KAAK;AAAA;AAC7B;AA/BE;AAAA,EADC,WAAW,EAAE,MAAM,QAAQ,YAAY,oBAAoB,CAAC;AAAA,GAHlD,qBAIX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,OAAO,CAAC;AAAA,GANnC,qBAOX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,4BAA4B,MAAM,OAAO,CAAC;AAAA,GATjD,qBAUX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,WAAW,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GAZhD,qBAaX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,qBAAqB,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GAf1D,qBAgBX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,oBAAoB,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GAlBzD,qBAmBX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,mBAAmB,MAAM,MAAM,UAAU,KAAK,CAAC;AAAA,GArBtD,qBAsBX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,aAAa,MAAM,OAAO,CAAC;AAAA,GAxBlC,qBAyBX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,mBAAmB,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GA3BxD,qBA4BX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,MAAM,UAAU,MAAM,oBAAI,KAAK,EAAE,CAAC;AAAA,GA9B7D,qBA+BX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,MAAM,UAAU,MAAM,oBAAI,KAAK,EAAE,CAAC;AAAA,GAjC7D,qBAkCX;AAlCW,uBAAN;AAAA,EALN,OAAO,EAAE,WAAW,yBAAyB,CAAC;AAAA,EAC9C,MAAM,EAAE,MAAM,sCAAsC,YAAY,CAAC,aAAa,wBAAwB,EAAE,CAAC;AAAA,EACzG,MAAM,EAAE,MAAM,6CAA6C,YAAY,CAAC,iBAAiB,EAAE,CAAC;AAAA,EAC5F,MAAM,EAAE,MAAM,4CAA4C,YAAY,CAAC,gBAAgB,EAAE,CAAC;AAAA,EAC1F,OAAO,EAAE,MAAM,8CAA8C,YAAY,CAAC,aAAa,wBAAwB,EAAE,CAAC;AAAA,GACtG;AA4CV;AADI,IAAM,kBAAN,MAAsB;AAAA,EAAtB;AAkCL,qBAAkB,oBAAI,KAAK;AAAA;AAC7B;AA/BE;AAAA,EADC,WAAW,EAAE,MAAM,QAAQ,YAAY,oBAAoB,CAAC;AAAA,GAHlD,gBAIX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,OAAO,CAAC;AAAA,GANnC,gBAOX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,mBAAmB,MAAM,OAAO,CAAC;AAAA,GATxC,gBAUX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,uBAAuB,MAAM,OAAO,CAAC;AAAA,GAZ5C,gBAaX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,aAAa,MAAM,OAAO,CAAC;AAAA,GAflC,gBAgBX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,qBAAqB,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GAlB1D,gBAmBX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,uBAAuB,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GArB5D,gBAsBX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,sBAAsB,MAAM,MAAM,UAAU,KAAK,CAAC;AAAA,GAxBzD,gBAyBX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,aAAa,MAAM,OAAO,CAAC;AAAA,GA3BlC,gBA4BX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,mBAAmB,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GA9BxD,gBA+BX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,MAAM,UAAU,MAAM,oBAAI,KAAK,EAAE,CAAC;AAAA,GAjC7D,gBAkCX;AAlCW,kBAAN;AAAA,EAJN,OAAO,EAAE,WAAW,oBAAoB,CAAC;AAAA,EACzC,MAAM,EAAE,MAAM,sCAAsC,YAAY,CAAC,gBAAgB,EAAE,CAAC;AAAA,EACpF,MAAM,EAAE,MAAM,0CAA0C,YAAY,CAAC,aAAa,mBAAmB,EAAE,CAAC;AAAA,EACxG,OAAO,EAAE,MAAM,yCAAyC,YAAY,CAAC,aAAa,mBAAmB,EAAE,CAAC;AAAA,GAC5F;AA6CV;AADI,IAAM,qBAAN,MAAyB;AAAA,EAAzB;AA2BL,0BAAyB;AAqBzB,qBAAkB,oBAAI,KAAK;AAAA;AAC7B;AA7CE;AAAA,EADC,WAAW,EAAE,MAAM,QAAQ,YAAY,oBAAoB,CAAC;AAAA,GAHlD,mBAIX;AAIA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,OAAO,CAAC;AAAA,GAPnC,mBAQX;AAIA;AAAA,EADC,SAAS,EAAE,MAAM,4BAA4B,MAAM,OAAO,CAAC;AAAA,GAXjD,mBAYX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,uBAAuB,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GAd5D,mBAeX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,gBAAgB,MAAM,OAAO,CAAC;AAAA,GAjBrC,mBAkBX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,gBAAgB,MAAM,OAAO,CAAC;AAAA,GApBrC,mBAqBX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,aAAa,MAAM,OAAO,CAAC;AAAA,GAvBlC,mBAwBX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,mBAAmB,MAAM,OAAO,CAAC;AAAA,GA1BxC,mBA2BX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,mBAAmB,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GA7BxD,mBA8BX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,wBAAwB,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GAhC7D,mBAiCX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,qBAAqB,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GAnC1D,mBAoCX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,oBAAoB,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GAtCzD,mBAuCX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,aAAa,MAAM,OAAO,CAAC;AAAA,GAzClC,mBA0CX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,mBAAmB,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GA5CxD,mBA6CX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,MAAM,UAAU,MAAM,oBAAI,KAAK,EAAE,CAAC;AAAA,GA/C7D,mBAgDX;AAhDW,qBAAN;AAAA,EALN,OAAO,EAAE,WAAW,wBAAwB,CAAC;AAAA,EAC7C,MAAM,EAAE,MAAM,qCAAqC,YAAY,CAAC,WAAW,EAAE,CAAC;AAAA,EAC9E,MAAM,EAAE,MAAM,sCAAsC,YAAY,CAAC,wBAAwB,EAAE,CAAC;AAAA,EAC5F,MAAM,EAAE,MAAM,qCAAqC,YAAY,CAAC,mBAAmB,EAAE,CAAC;AAAA,EACtF,OAAO,EAAE,MAAM,oCAAoC,YAAY,CAAC,WAAW,EAAE,CAAC;AAAA,GAClE;AA0DV;AADI,IAAM,uBAAN,MAA2B;AAAA,EAA3B;AAiCL,qBAAkB,oBAAI,KAAK;AAG3B,qBAAkB,oBAAI,KAAK;AAAA;AAC7B;AAjCE;AAAA,EADC,WAAW,EAAE,MAAM,QAAQ,YAAY,oBAAoB,CAAC;AAAA,GAHlD,qBAIX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,4BAA4B,MAAM,OAAO,CAAC;AAAA,GANjD,qBAOX;AAIA;AAAA,EADC,SAAS,EAAE,MAAM,qBAAqB,MAAM,OAAO,CAAC;AAAA,GAV1C,qBAWX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,OAAO,CAAC;AAAA,GAbnC,qBAcX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,gBAAgB,MAAM,OAAO,CAAC;AAAA,GAhBrC,qBAiBX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,uBAAuB,MAAM,OAAO,CAAC;AAAA,GAnB5C,qBAoBX;AAIA;AAAA,EADC,SAAS,EAAE,MAAM,oBAAoB,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GAvBzD,qBAwBX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,aAAa,MAAM,OAAO,CAAC;AAAA,GA1BlC,qBA2BX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,mBAAmB,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GA7BxD,qBA8BX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,MAAM,UAAU,MAAM,oBAAI,KAAK,EAAE,CAAC;AAAA,GAhC7D,qBAiCX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,MAAM,UAAU,MAAM,oBAAI,KAAK,EAAE,CAAC;AAAA,GAnC7D,qBAoCX;AApCW,uBAAN;AAAA,EAJN,OAAO,EAAE,WAAW,0BAA0B,CAAC;AAAA,EAC/C,MAAM,EAAE,MAAM,wCAAwC,YAAY,CAAC,0BAA0B,UAAU,EAAE,CAAC;AAAA,EAC1G,MAAM,EAAE,MAAM,sCAAsC,YAAY,CAAC,mBAAmB,UAAU,EAAE,CAAC;AAAA,EACjG,OAAO,EAAE,MAAM,uCAAuC,YAAY,CAAC,0BAA0B,UAAU,EAAE,CAAC;AAAA,GAC9F;AA2DV;AADI,IAAM,kBAAN,MAAsB;AAAA,EAAtB;AAoCL,qBAAkB,oBAAI,KAAK;AAAA;AAC7B;AAjCE;AAAA,EADC,WAAW,EAAE,MAAM,QAAQ,YAAY,oBAAoB,CAAC;AAAA,GAHlD,gBAIX;AAIA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,OAAO,CAAC;AAAA,GAPnC,gBAQX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,SAAS,MAAM,OAAO,CAAC;AAAA,GAV9B,gBAWX;AAIA;AAAA,EADC,SAAS,EAAE,MAAM,sBAAsB,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GAd3D,gBAeX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,0BAA0B,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GAjB/D,gBAkBX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,2BAA2B,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GApBhE,gBAqBX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,gBAAgB,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GAvBrD,gBAwBX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,wBAAwB,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GA1B7D,gBA2BX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,aAAa,MAAM,OAAO,CAAC;AAAA,GA7BlC,gBA8BX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,mBAAmB,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GAhCxD,gBAiCX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,MAAM,UAAU,MAAM,oBAAI,KAAK,EAAE,CAAC;AAAA,GAnC7D,gBAoCX;AApCW,kBAAN;AAAA,EAjBN,OAAO,EAAE,WAAW,oBAAoB,CAAC;AAAA,EACzC,MAAM,EAAE,MAAM,iCAAiC,YAAY,CAAC,WAAW,EAAE,CAAC;AAAA,EAC1E,MAAM,EAAE,MAAM,uCAAuC,YAAY,CAAC,aAAa,OAAO,EAAE,CAAC;AAAA,EACzF,MAAM;AAAA,IACL,MAAM;AAAA,IACN,YACE;AAAA,EACJ,CAAC;AAAA,EACA,MAAM;AAAA,IACL,MAAM;AAAA,IACN,YACE;AAAA,EACJ,CAAC;AAAA,EACA,MAAM;AAAA,IACL,MAAM;AAAA,IACN,YAAY;AAAA,EACd,CAAC;AAAA,GACY;AAoEV;AADI,IAAM,qBAAN,MAAyB;AAAA,EAAzB;AAwBL,qBAAkB,oBAAI,KAAK;AAAA;AAS7B;AA7BE;AAAA,EADC,WAAW,EAAE,MAAM,QAAQ,YAAY,oBAAoB,CAAC;AAAA,GAHlD,mBAIX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,aAAa,MAAM,OAAO,CAAC;AAAA,GANlC,mBAOX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,mBAAmB,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GATxD,mBAUX;AAIA;AAAA,EADC,SAAS,EAAE,MAAM,qBAAqB,MAAM,OAAO,CAAC;AAAA,GAb1C,mBAcX;AAOA;AAAA,EADC,SAAS,EAAE,MAAM,SAAS,MAAM,OAAO,CAAC;AAAA,GApB9B,mBAqBX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,MAAM,UAAU,MAAM,oBAAI,KAAK,EAAE,CAAC;AAAA,GAvB7D,mBAwBX;AAQA;AAAA,EADC,SAAS,EAAE,MAAM,gBAAgB,MAAM,MAAM,UAAU,KAAK,CAAC;AAAA,GA/BnD,mBAgCX;AAhCW,qBAAN;AAAA,EANN,OAAO,EAAE,WAAW,wBAAwB,CAAC;AAAA,EAI7C,OAAO,EAAE,MAAM,mCAAmC,YAAY,CAAC,YAAY,iBAAiB,EAAE,CAAC;AAAA,EAC/F,OAAO,EAAE,MAAM,kCAAkC,YAAY,CAAC,YAAY,OAAO,EAAE,CAAC;AAAA,GACxE;AAsDV;AADI,IAAM,0BAAN,MAA8B;AAAA,EAA9B;AAyCL,qBAAkB,oBAAI,KAAK;AAAA;AAC7B;AAjCE;AAAA,EADC,WAAW,EAAE,MAAM,QAAQ,YAAY,oBAAoB,CAAC;AAAA,GARlD,wBASX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,aAAa,MAAM,OAAO,CAAC;AAAA,GAXlC,wBAYX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,mBAAmB,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GAdxD,wBAeX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,OAAO,CAAC;AAAA,GAjBnC,wBAkBX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,gBAAgB,MAAM,OAAO,CAAC;AAAA,GApBrC,wBAqBX;AAIA;AAAA,EADC,SAAS,EAAE,MAAM,gBAAgB,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GAxBrD,wBAyBX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,uBAAuB,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GA3B5D,wBA4BX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,eAAe,MAAM,OAAO,CAAC;AAAA,GA9BpC,wBA+BX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,iBAAiB,MAAM,OAAO,CAAC;AAAA,GAjCtC,wBAkCX;AAIA;AAAA,EADC,SAAS,EAAE,MAAM,YAAY,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GArCjD,wBAsCX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,MAAM,UAAU,MAAM,oBAAI,KAAK,EAAE,CAAC;AAAA,GAxC7D,wBAyCX;AAzCW,0BAAN;AAAA,EAHN,OAAO,EAAE,WAAW,8BAA8B,CAAC;AAAA,EACnD,MAAM,EAAE,MAAM,2CAA2C,YAAY,CAAC,aAAa,UAAU,EAAE,CAAC;AAAA,EAChG,MAAM,EAAE,MAAM,2CAA2C,YAAY,CAAC,YAAY,WAAW,EAAE,CAAC;AAAA,GACpF;",
+  "sourcesContent": ["import { OptionalProps } from '@mikro-orm/core'\nimport { Check, Entity, Index, PrimaryKey, Property, Unique } from '@mikro-orm/decorators/legacy'\n\n/**\n * Hub entities for the Communication Channels module.\n *\n * Cross-module references (e.g. `MessageChannelLink.messageId \u2192 messages.message.id`)\n * use plain `uuid` columns, NOT MikroORM `@ManyToOne` decorators. Project rule:\n * \"No direct ORM relationships between modules \u2014 use foreign key IDs, fetch separately.\"\n * Cross-module links are declared in `data/extensions.ts` via `EntityExtension`.\n *\n * See SPEC-045d \u00A72.2.\n */\n\n// \u2500\u2500 CommunicationChannel \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\n/**\n * Per-channel lifecycle status. Set by the polling worker / outbound subscriber\n * + the `markChannelRequiresReauth` command. Existing `isActive` remains for the\n * coarse admin enable/disable toggle; `status` is the finer-grained operational\n * state used by per-user reconnect flows.\n *\n * Email integration spec \u00A7 Hub Deltas \u2192 Delta 2.\n */\nexport type CommunicationChannelStatus =\n  | 'connected'\n  | 'requires_reauth'\n  | 'error'\n  | 'disconnected'\n\n@Entity({ tableName: 'communication_channels' })\n@Index({ name: 'communication_channels_tenant_provider_idx', properties: ['tenantId', 'providerKey'] })\n// Provider-push webhooks (Gmail Pub/Sub) resolve channels by (provider_key,\n// external_identifier) WITHOUT a tenant_id \u2014 they only know the mailbox address.\n// Without this index that lookup is a full scan over every channel of the\n// provider, which a (signature-verified) push or replay repeats on every hit.\n@Index({\n  name: 'communication_channels_provider_external_idx',\n  expression:\n    `create index \"communication_channels_provider_external_idx\" on \"communication_channels\" (\"provider_key\", \"external_identifier\") where \"deleted_at\" is null`,\n})\n@Index({ name: 'communication_channels_tenant_type_active_idx', properties: ['tenantId', 'channelType', 'isActive'] })\n@Index({\n  name: 'communication_channels_user_lookup_idx',\n  properties: ['userId', 'channelType', 'deletedAt'],\n})\n@Index({\n  name: 'communication_channels_poll_due_idx',\n  expression:\n    `create index \"communication_channels_poll_due_idx\" on \"communication_channels\" (\"is_active\", \"last_polled_at\") where \"deleted_at\" is null`,\n})\n@Index({\n  name: 'communication_channels_one_primary_per_user_uq',\n  expression:\n    `create unique index \"communication_channels_one_primary_per_user_uq\" on \"communication_channels\" (\"user_id\") where \"is_primary\" and \"user_id\" is not null and \"deleted_at\" is null`,\n})\n// One channel per (tenant, user, provider, mailbox): a reconnect heals the\n// existing row in place (see `createConnectedChannelRow`) instead of inserting a\n// duplicate that would stay polled + keep its own push subscription. Partial so\n// tenant-wide channels (null user_id) and identifier-less rows are exempt.\n@Index({\n  name: 'communication_channels_user_provider_external_uq',\n  expression:\n    `create unique index \"communication_channels_user_provider_external_uq\" on \"communication_channels\" (\"tenant_id\", \"user_id\", \"provider_key\", \"external_identifier\") where \"deleted_at\" is null and \"user_id\" is not null and \"external_identifier\" is not null`,\n})\n// One tenant-wide push channel per (tenant, provider): push providers (FCM/APNs/\n// Expo) have no `external_identifier` and `user_id IS NULL`, so the mailbox\n// unique index above does not cover them. This keeps an admin reconnect healing\n// the single shared row (see `createConnectedChannelRow`) instead of inserting\n// duplicates the fan-out would silently ignore.\n@Index({\n  name: 'communication_channels_tenant_push_provider_uq',\n  expression:\n    `create unique index \"communication_channels_tenant_push_provider_uq\" on \"communication_channels\" (\"tenant_id\", \"provider_key\") where \"channel_type\" = 'push' and \"user_id\" is null and \"deleted_at\" is null`,\n})\nexport class CommunicationChannel {\n  [OptionalProps]?:\n    | 'createdAt'\n    | 'updatedAt'\n    | 'isActive'\n    | 'capabilities'\n    | 'deletedAt'\n    | 'externalIdentifier'\n    | 'credentialsRef'\n    | 'organizationId'\n    | 'userId'\n    | 'isPrimary'\n    | 'visibility'\n    | 'pollIntervalSeconds'\n    | 'lastPolledAt'\n    | 'status'\n    | 'lastError'\n    | 'channelState'\n\n  @PrimaryKey({ type: 'uuid', defaultRaw: 'gen_random_uuid()' })\n  id!: string\n\n  @Property({ name: 'provider_key', type: 'text' })\n  providerKey!: string\n\n  @Property({ name: 'channel_type', type: 'text' })\n  channelType!: string\n\n  @Property({ name: 'display_name', type: 'text' })\n  displayName!: string\n\n  @Property({ name: 'external_identifier', type: 'text', nullable: true })\n  externalIdentifier?: string | null\n\n  @Property({ name: 'credentials_ref', type: 'uuid', nullable: true })\n  credentialsRef?: string | null\n\n  @Property({ name: 'capabilities', type: 'json', nullable: true })\n  capabilities?: Record<string, unknown> | null\n\n  @Property({ name: 'is_active', type: 'boolean', default: true })\n  isActive: boolean = true\n\n  /**\n   * Per-user channel owner. NULL = tenant-scoped (existing behaviour, e.g. WhatsApp Business).\n   * Set = user-scoped (e.g. Jane's personal Gmail). Visible only to the owning user\n   * and to admins with `communication_channels.admin`. Linked to `auth:user` via\n   * `EntityExtension` in `data/extensions.ts` \u2014 never a raw DB FK.\n   */\n  @Property({ name: 'user_id', type: 'uuid', nullable: true })\n  userId?: string | null\n\n  /**\n   * Per-user \"primary\" flag. Only meaningful when `userId IS NOT NULL`; ignored\n   * for tenant-scoped channels. Enforced as one-primary-per-user by the partial\n   * unique index `communication_channels_one_primary_per_user_uq`.\n   */\n  @Property({ name: 'is_primary', type: 'boolean', default: false })\n  isPrimary: boolean = false\n\n  /**\n   * Who may read the CRM email this channel ingests.\n   *\n   *   `private` \u2014 only the owner (`userId`). The default, and the only state a\n   *               personal mailbox has ever had.\n   *   `shared`  \u2014 every user with CRM access to the linked record: a team mailbox.\n   *\n   * Made explicit rather than inferred from `userId` so a PERSONAL mailbox can be\n   * team-visible without surrendering owner-only management. Tenant-scoped rows\n   * (`userId IS NULL`) are `shared` \u2014 the migration sets that in the same\n   * statement as the column addition, otherwise every existing FCM/APNs/Expo push\n   * channel would be silently un-shared on deploy.\n   *\n   * Enforcement is READ-TIME: flipping this never rewrites\n   * `customer_interactions.visibility`, so flipping back is instant and lossless.\n   * Stored as open text to match the sibling per-email `visibility` column.\n   */\n  @Property({ name: 'visibility', type: 'text', default: 'private' })\n  visibility: string = 'private'\n\n  /**\n   * Polling cadence in seconds. NULL means \"this channel does not poll\" \u2014 i.e. it\n   * is push-only (webhook) or its provider opted out via\n   * `ChannelCapabilities.realtimePush !== false`. Set means hub-managed polling\n   * at that interval via the `poll-tick` scheduler entry.\n   */\n  @Property({ name: 'poll_interval_seconds', type: 'int', nullable: true })\n  pollIntervalSeconds?: number | null\n\n  /** Last successful poll timestamp; the scheduler enumerates by this column. */\n  @Property({ name: 'last_polled_at', type: Date, nullable: true })\n  lastPolledAt?: Date | null\n\n  /**\n   * Per-channel lifecycle status. See {@link CommunicationChannelStatus}.\n   * Migration sets `status = 'connected'` for all existing active channels (default value).\n   */\n  @Property({ name: 'status', type: 'text', default: 'connected' })\n  status: CommunicationChannelStatus = 'connected'\n\n  /** Most recent classified error message for diagnostics. */\n  @Property({ name: 'last_error', type: 'text', nullable: true })\n  lastError?: string | null\n\n  /**\n   * Provider-specific resumption state, opaque to the hub. Polling adapters\n   * encode their incremental cursor here (Gmail historyId, IMAP\n   * UIDVALIDITY+UIDNEXT). The polling worker reads it before each\n   * `fetchHistory` call and writes the adapter's returned `nextCursor` back\n   * after a successful poll. Empty / NULL means \"bootstrap on next poll\".\n   */\n  @Property({ name: 'channel_state', type: 'json', nullable: true })\n  channelState?: Record<string, unknown> | null\n\n  @Property({ name: 'tenant_id', type: 'uuid' })\n  tenantId!: string\n\n  @Property({ name: 'organization_id', type: 'uuid', nullable: true })\n  organizationId?: string | null\n\n  @Property({ name: 'created_at', type: Date, onCreate: () => new Date() })\n  createdAt: Date = new Date()\n\n  @Property({ name: 'updated_at', type: Date, onUpdate: () => new Date() })\n  updatedAt: Date = new Date()\n\n  @Property({ name: 'deleted_at', type: Date, nullable: true })\n  deletedAt?: Date | null\n}\n\n// \u2500\u2500 ExternalConversation \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\n@Entity({ tableName: 'external_conversations' })\n@Index({ name: 'external_conversations_channel_idx', properties: ['channelId', 'externalConversationId'] })\n@Index({ name: 'external_conversations_contact_person_idx', properties: ['contactPersonId'] })\n@Index({ name: 'external_conversations_assigned_user_idx', properties: ['assignedUserId'] })\n@Unique({ name: 'external_conversations_channel_external_uq', properties: ['channelId', 'externalConversationId'] })\nexport class ExternalConversation {\n  [OptionalProps]?: 'createdAt' | 'updatedAt' | 'lastMessageAt' | 'subject' | 'contactPersonId' | 'assignedUserId' | 'organizationId'\n\n  @PrimaryKey({ type: 'uuid', defaultRaw: 'gen_random_uuid()' })\n  id!: string\n\n  @Property({ name: 'channel_id', type: 'uuid' })\n  channelId!: string\n\n  @Property({ name: 'external_conversation_id', type: 'text' })\n  externalConversationId!: string\n\n  @Property({ name: 'subject', type: 'text', nullable: true })\n  subject?: string | null\n\n  @Property({ name: 'contact_person_id', type: 'uuid', nullable: true })\n  contactPersonId?: string | null\n\n  @Property({ name: 'assigned_user_id', type: 'uuid', nullable: true })\n  assignedUserId?: string | null\n\n  @Property({ name: 'last_message_at', type: Date, nullable: true })\n  lastMessageAt?: Date | null\n\n  @Property({ name: 'tenant_id', type: 'uuid' })\n  tenantId!: string\n\n  @Property({ name: 'organization_id', type: 'uuid', nullable: true })\n  organizationId?: string | null\n\n  @Property({ name: 'created_at', type: Date, onCreate: () => new Date() })\n  createdAt: Date = new Date()\n\n  @Property({ name: 'updated_at', type: Date, onUpdate: () => new Date() })\n  updatedAt: Date = new Date()\n}\n\n// \u2500\u2500 ExternalMessage \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\n@Entity({ tableName: 'external_messages' })\n@Index({ name: 'external_messages_conversation_idx', properties: ['conversationId'] })\n@Index({ name: 'external_messages_channel_external_idx', properties: ['channelId', 'externalMessageId'] })\n@Unique({ name: 'external_messages_channel_external_uq', properties: ['channelId', 'externalMessageId'] })\nexport class ExternalMessage {\n  [OptionalProps]?: 'createdAt' | 'senderIdentifier' | 'senderDisplayName' | 'providerTimestamp' | 'organizationId'\n\n  @PrimaryKey({ type: 'uuid', defaultRaw: 'gen_random_uuid()' })\n  id!: string\n\n  @Property({ name: 'channel_id', type: 'uuid' })\n  channelId!: string\n\n  @Property({ name: 'conversation_id', type: 'uuid' })\n  conversationId!: string\n\n  @Property({ name: 'external_message_id', type: 'text' })\n  externalMessageId!: string\n\n  @Property({ name: 'direction', type: 'text' })\n  direction!: 'inbound' | 'outbound'\n\n  @Property({ name: 'sender_identifier', type: 'text', nullable: true })\n  senderIdentifier?: string | null\n\n  @Property({ name: 'sender_display_name', type: 'text', nullable: true })\n  senderDisplayName?: string | null\n\n  @Property({ name: 'provider_timestamp', type: Date, nullable: true })\n  providerTimestamp?: Date | null\n\n  @Property({ name: 'tenant_id', type: 'uuid' })\n  tenantId!: string\n\n  @Property({ name: 'organization_id', type: 'uuid', nullable: true })\n  organizationId?: string | null\n\n  @Property({ name: 'created_at', type: Date, onCreate: () => new Date() })\n  createdAt: Date = new Date()\n}\n\n// \u2500\u2500 MessageChannelLink \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\n@Entity({ tableName: 'message_channel_links' })\n@Index({ name: 'message_channel_links_message_idx', properties: ['messageId'] })\n@Index({ name: 'message_channel_links_ext_conv_idx', properties: ['externalConversationId'] })\n@Index({ name: 'message_channel_links_ext_msg_idx', properties: ['externalMessageId'] })\n@Unique({ name: 'message_channel_links_message_uq', properties: ['messageId'] })\nexport class MessageChannelLink {\n  [OptionalProps]?: 'createdAt' | 'deliveryStatus' | 'externalMessageId' | 'channelPayload' | 'channelContentType' | 'interactiveState' | 'channelMetadata' | 'organizationId'\n\n  @PrimaryKey({ type: 'uuid', defaultRaw: 'gen_random_uuid()' })\n  id!: string\n\n  /** Logical link to messages.message.id (no DB FK \u2014 cross-module via EntityExtension). */\n  @Property({ name: 'message_id', type: 'uuid' })\n  messageId!: string\n\n  /** FK to external_conversations.id (intra-module \u2014 DB FK acceptable but kept as plain uuid for symmetry). */\n  @Property({ name: 'external_conversation_id', type: 'uuid' })\n  externalConversationId!: string\n\n  @Property({ name: 'external_message_id', type: 'uuid', nullable: true })\n  externalMessageId?: string | null\n\n  @Property({ name: 'provider_key', type: 'text' })\n  providerKey!: string\n\n  @Property({ name: 'channel_type', type: 'text' })\n  channelType!: string\n\n  @Property({ name: 'direction', type: 'text' })\n  direction!: 'inbound' | 'outbound'\n\n  @Property({ name: 'delivery_status', type: 'text' })\n  deliveryStatus: string = 'pending'\n\n  @Property({ name: 'channel_payload', type: 'json', nullable: true })\n  channelPayload?: Record<string, unknown> | null\n\n  @Property({ name: 'channel_content_type', type: 'text', nullable: true })\n  channelContentType?: string | null\n\n  @Property({ name: 'interactive_state', type: 'json', nullable: true })\n  interactiveState?: Record<string, unknown> | null\n\n  @Property({ name: 'channel_metadata', type: 'json', nullable: true })\n  channelMetadata?: Record<string, unknown> | null\n\n  @Property({ name: 'tenant_id', type: 'uuid' })\n  tenantId!: string\n\n  @Property({ name: 'organization_id', type: 'uuid', nullable: true })\n  organizationId?: string | null\n\n  @Property({ name: 'created_at', type: Date, onCreate: () => new Date() })\n  createdAt: Date = new Date()\n}\n\n// \u2500\u2500 ChannelThreadMapping \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\n@Entity({ tableName: 'channel_thread_mappings' })\n@Index({ name: 'channel_thread_mappings_ext_conv_idx', properties: ['externalConversationId', 'tenantId'] })\n@Index({ name: 'channel_thread_mappings_thread_idx', properties: ['messageThreadId', 'tenantId'] })\n@Unique({ name: 'channel_thread_mappings_ext_conv_uq', properties: ['externalConversationId', 'tenantId'] })\nexport class ChannelThreadMapping {\n  [OptionalProps]?: 'createdAt' | 'updatedAt' | 'assignedUserId' | 'organizationId'\n\n  @PrimaryKey({ type: 'uuid', defaultRaw: 'gen_random_uuid()' })\n  id!: string\n\n  @Property({ name: 'external_conversation_id', type: 'uuid' })\n  externalConversationId!: string\n\n  /** Logical link to messages.message.thread_id (no DB FK \u2014 cross-module). */\n  @Property({ name: 'message_thread_id', type: 'uuid' })\n  messageThreadId!: string\n\n  @Property({ name: 'channel_id', type: 'uuid' })\n  channelId!: string\n\n  @Property({ name: 'provider_key', type: 'text' })\n  providerKey!: string\n\n  @Property({ name: 'external_thread_ref', type: 'text' })\n  externalThreadRef!: string\n\n  /** Logical link to auth.user.id (no DB FK \u2014 cross-module). */\n  @Property({ name: 'assigned_user_id', type: 'uuid', nullable: true })\n  assignedUserId?: string | null\n\n  @Property({ name: 'tenant_id', type: 'uuid' })\n  tenantId!: string\n\n  @Property({ name: 'organization_id', type: 'uuid', nullable: true })\n  organizationId?: string | null\n\n  @Property({ name: 'created_at', type: Date, onCreate: () => new Date() })\n  createdAt: Date = new Date()\n\n  @Property({ name: 'updated_at', type: Date, onUpdate: () => new Date() })\n  updatedAt: Date = new Date()\n}\n\n// \u2500\u2500 MessageReaction \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\n@Entity({ tableName: 'message_reactions' })\n@Index({ name: 'message_reactions_message_idx', properties: ['messageId'] })\n@Index({ name: 'message_reactions_message_emoji_idx', properties: ['messageId', 'emoji'] })\n@Index({\n  name: 'message_reactions_internal_actor_uq',\n  expression:\n    `create unique index \"message_reactions_internal_actor_uq\" on \"message_reactions\" (\"tenant_id\", \"message_id\", \"emoji\", \"reacted_by_user_id\") where \"reacted_by_user_id\" is not null`,\n})\n@Index({\n  name: 'message_reactions_external_actor_uq',\n  expression:\n    `create unique index \"message_reactions_external_actor_uq\" on \"message_reactions\" (\"tenant_id\", \"message_id\", \"emoji\", \"reacted_by_external_id\") where \"reacted_by_external_id\" is not null`,\n})\n@Check({\n  name: 'message_reactions_exactly_one_actor_chk',\n  expression: `(\"reacted_by_user_id\" is null) <> (\"reacted_by_external_id\" is null)`,\n})\nexport class MessageReaction {\n  [OptionalProps]?: 'createdAt' | 'reactedByUserId' | 'reactedByExternalId' | 'reactedByDisplayName' | 'providerKey' | 'externalReactionId' | 'organizationId'\n\n  @PrimaryKey({ type: 'uuid', defaultRaw: 'gen_random_uuid()' })\n  id!: string\n\n  /** Logical link to messages.message.id (no DB FK \u2014 cross-module). */\n  @Property({ name: 'message_id', type: 'uuid' })\n  messageId!: string\n\n  @Property({ name: 'emoji', type: 'text' })\n  emoji!: string\n\n  /** Logical link to auth.user.id (no DB FK \u2014 cross-module). NULL for external reactions. */\n  @Property({ name: 'reacted_by_user_id', type: 'uuid', nullable: true })\n  reactedByUserId?: string | null\n\n  @Property({ name: 'reacted_by_external_id', type: 'text', nullable: true })\n  reactedByExternalId?: string | null\n\n  @Property({ name: 'reacted_by_display_name', type: 'text', nullable: true })\n  reactedByDisplayName?: string | null\n\n  @Property({ name: 'provider_key', type: 'text', nullable: true })\n  providerKey?: string | null\n\n  @Property({ name: 'external_reaction_id', type: 'text', nullable: true })\n  externalReactionId?: string | null\n\n  @Property({ name: 'tenant_id', type: 'uuid' })\n  tenantId!: string\n\n  @Property({ name: 'organization_id', type: 'uuid', nullable: true })\n  organizationId?: string | null\n\n  @Property({ name: 'created_at', type: Date, onCreate: () => new Date() })\n  createdAt: Date = new Date()\n}\n\n// \u2500\u2500 ChannelThreadToken \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\n/**\n * Per-thread HMAC-signed opaque token used by the layered thread-matcher to\n * reliably attach inbound replies to the originating Open Mercato message\n * thread, even when the recipient's mail client strips RFC 5322 headers.\n *\n * Created lazily on the first outbound message in a thread by the\n * `outbound-bridge` subscriber. The token is injected into:\n *   1. The MIME `References:` header as `<om_TOKEN@open-mercato.invalid>` \u2014\n *      invisible to the recipient and survives most reply clients.\n *   2. A hidden HTML body span `<span style=\"display:none\">[OM:om_TOKEN]</span>` \u2014\n *      survives when References is stripped (e.g. some mobile clients).\n *   3. A plain-text trailer `[OM:om_TOKEN]` \u2014 survives plain-text-only replies.\n *\n * The unique constraint is `(tenantId, token)` \u2014 tenant isolation by\n * construction. HMAC verification (via `lib/thread-token.ts`) defends against\n * forged inbound messages: tokens that don't HMAC-verify never reach the DB\n * lookup.\n *\n * See `.ai/specs/implemented/2026-05-27-email-integration-inbound-reliability-and-threading.md`.\n */\n@Entity({ tableName: 'channel_thread_tokens' })\n// One token row per (tenant, thread): the matcher resolves every reply to the\n// same thread regardless of which outbound send minted the token. The unique\n// constraint also makes `getOrCreateThreadToken` race-safe (insert-on-conflict).\n@Unique({ name: 'channel_thread_tokens_thread_uq', properties: ['tenantId', 'messageThreadId'] })\n@Unique({ name: 'channel_thread_tokens_token_uq', properties: ['tenantId', 'token'] })\nexport class ChannelThreadToken {\n  [OptionalProps]?: 'createdAt' | 'lastSeenAt' | 'organizationId'\n\n  @PrimaryKey({ type: 'uuid', defaultRaw: 'gen_random_uuid()' })\n  id!: string\n\n  @Property({ name: 'tenant_id', type: 'uuid' })\n  tenantId!: string\n\n  @Property({ name: 'organization_id', type: 'uuid', nullable: true })\n  organizationId?: string | null\n\n  /** Logical link to messages.message.thread_id (no DB FK \u2014 cross-module). */\n  @Property({ name: 'message_thread_id', type: 'uuid' })\n  messageThreadId!: string\n\n  /**\n   * HMAC-signed opaque token, format: `om_<22b64url>_<11b64url>` (16 random\n   * bytes + 8 HMAC bytes, each base64url-encoded without padding), ~37 chars.\n   */\n  @Property({ name: 'token', type: 'text' })\n  token!: string\n\n  @Property({ name: 'created_at', type: Date, onCreate: () => new Date() })\n  createdAt: Date = new Date()\n\n  /**\n   * Updated whenever a thread-matcher token-based strategy resolves to this\n   * row. Used for future GC: tokens with `last_seen_at < now() - 90 days`\n   * are pruning candidates.\n   */\n  @Property({ name: 'last_seen_at', type: Date, nullable: true })\n  lastSeenAt?: Date | null\n}\n\n// \u2500\u2500 ChannelIngestDeadLetter \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\n/**\n * Inbound messages that fail permanently during ingest land here so an\n * operator can replay them after fixing parsers / schemas. Transient\n * failures (DB blip, network timeout) DO NOT write here \u2014 those abort the\n * poll loop without advancing the cursor so the message is re-fetched on\n * the next tick.\n *\n * `raw_body` is encrypted at rest via the module's `encryption.ts`\n * `defaultEncryptionMaps` entry (MIME bodies may contain PII).\n *\n * See `.ai/specs/implemented/2026-05-27-email-integration-inbound-reliability-and-threading.md`\n * (\u00A7 3 Data Model).\n */\n@Entity({ tableName: 'channel_ingest_dead_letters' })\n@Index({ name: 'channel_ingest_dead_letters_channel_idx', properties: ['channelId', 'tenantId'] })\n@Index({ name: 'channel_ingest_dead_letters_created_idx', properties: ['tenantId', 'createdAt'] })\nexport class ChannelIngestDeadLetter {\n  [OptionalProps]?:\n    | 'createdAt'\n    | 'organizationId'\n    | 'externalMessageId'\n    | 'externalUid'\n    | 'rawBody'\n\n  @PrimaryKey({ type: 'uuid', defaultRaw: 'gen_random_uuid()' })\n  id!: string\n\n  @Property({ name: 'tenant_id', type: 'uuid' })\n  tenantId!: string\n\n  @Property({ name: 'organization_id', type: 'uuid', nullable: true })\n  organizationId?: string | null\n\n  @Property({ name: 'channel_id', type: 'uuid' })\n  channelId!: string\n\n  @Property({ name: 'provider_key', type: 'text' })\n  providerKey!: string\n\n  /** External UID / sequence-number for the provider (e.g. IMAP UID, Gmail messageId). */\n  @Property({ name: 'external_uid', type: 'text', nullable: true })\n  externalUid?: string | null\n\n  @Property({ name: 'external_message_id', type: 'text', nullable: true })\n  externalMessageId?: string | null\n\n  @Property({ name: 'error_class', type: 'text' })\n  errorClass!: string\n\n  @Property({ name: 'error_message', type: 'text' })\n  errorMessage!: string\n\n  /** Truncated source \u2014 first N bytes of the raw MIME / payload (encrypted at rest). */\n  @Property({ name: 'raw_body', type: 'text', nullable: true })\n  rawBody?: string | null\n\n  @Property({ name: 'created_at', type: Date, onCreate: () => new Date() })\n  createdAt: Date = new Date()\n}\n"],
+  "mappings": ";;;;;;;;;;AAAA,SAAS,qBAAqB;AAC9B,SAAS,OAAO,QAAQ,OAAO,YAAY,UAAU,cAAc;AA2EhE;AADI,IAAM,uBAAN,MAA2B;AAAA,EAA3B;AAyCL,oBAAoB;AAiBpB,qBAAqB;AAoBrB,sBAAqB;AAoBrB,kBAAqC;AAuBrC,qBAAkB,oBAAI,KAAK;AAG3B,qBAAkB,oBAAI,KAAK;AAAA;AAI7B;AA5GE;AAAA,EADC,WAAW,EAAE,MAAM,QAAQ,YAAY,oBAAoB,CAAC;AAAA,GAnBlD,qBAoBX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,gBAAgB,MAAM,OAAO,CAAC;AAAA,GAtBrC,qBAuBX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,gBAAgB,MAAM,OAAO,CAAC;AAAA,GAzBrC,qBA0BX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,gBAAgB,MAAM,OAAO,CAAC;AAAA,GA5BrC,qBA6BX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,uBAAuB,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GA/B5D,qBAgCX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,mBAAmB,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GAlCxD,qBAmCX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,gBAAgB,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GArCrD,qBAsCX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,aAAa,MAAM,WAAW,SAAS,KAAK,CAAC;AAAA,GAxCpD,qBAyCX;AASA;AAAA,EADC,SAAS,EAAE,MAAM,WAAW,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GAjDhD,qBAkDX;AAQA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,WAAW,SAAS,MAAM,CAAC;AAAA,GAzDtD,qBA0DX;AAoBA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,QAAQ,SAAS,UAAU,CAAC;AAAA,GA7EvD,qBA8EX;AASA;AAAA,EADC,SAAS,EAAE,MAAM,yBAAyB,MAAM,OAAO,UAAU,KAAK,CAAC;AAAA,GAtF7D,qBAuFX;AAIA;AAAA,EADC,SAAS,EAAE,MAAM,kBAAkB,MAAM,MAAM,UAAU,KAAK,CAAC;AAAA,GA1FrD,qBA2FX;AAOA;AAAA,EADC,SAAS,EAAE,MAAM,UAAU,MAAM,QAAQ,SAAS,YAAY,CAAC;AAAA,GAjGrD,qBAkGX;AAIA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GArGnD,qBAsGX;AAUA;AAAA,EADC,SAAS,EAAE,MAAM,iBAAiB,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GA/GtD,qBAgHX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,aAAa,MAAM,OAAO,CAAC;AAAA,GAlHlC,qBAmHX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,mBAAmB,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GArHxD,qBAsHX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,MAAM,UAAU,MAAM,oBAAI,KAAK,EAAE,CAAC;AAAA,GAxH7D,qBAyHX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,MAAM,UAAU,MAAM,oBAAI,KAAK,EAAE,CAAC;AAAA,GA3H7D,qBA4HX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,MAAM,UAAU,KAAK,CAAC;AAAA,GA9HjD,qBA+HX;AA/HW,uBAAN;AAAA,EA7CN,OAAO,EAAE,WAAW,yBAAyB,CAAC;AAAA,EAC9C,MAAM,EAAE,MAAM,8CAA8C,YAAY,CAAC,YAAY,aAAa,EAAE,CAAC;AAAA,EAKrG,MAAM;AAAA,IACL,MAAM;AAAA,IACN,YACE;AAAA,EACJ,CAAC;AAAA,EACA,MAAM,EAAE,MAAM,iDAAiD,YAAY,CAAC,YAAY,eAAe,UAAU,EAAE,CAAC;AAAA,EACpH,MAAM;AAAA,IACL,MAAM;AAAA,IACN,YAAY,CAAC,UAAU,eAAe,WAAW;AAAA,EACnD,CAAC;AAAA,EACA,MAAM;AAAA,IACL,MAAM;AAAA,IACN,YACE;AAAA,EACJ,CAAC;AAAA,EACA,MAAM;AAAA,IACL,MAAM;AAAA,IACN,YACE;AAAA,EACJ,CAAC;AAAA,EAKA,MAAM;AAAA,IACL,MAAM;AAAA,IACN,YACE;AAAA,EACJ,CAAC;AAAA,EAMA,MAAM;AAAA,IACL,MAAM;AAAA,IACN,YACE;AAAA,EACJ,CAAC;AAAA,GACY;AA0IV;AADI,IAAM,uBAAN,MAA2B;AAAA,EAA3B;AA+BL,qBAAkB,oBAAI,KAAK;AAG3B,qBAAkB,oBAAI,KAAK;AAAA;AAC7B;AA/BE;AAAA,EADC,WAAW,EAAE,MAAM,QAAQ,YAAY,oBAAoB,CAAC;AAAA,GAHlD,qBAIX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,OAAO,CAAC;AAAA,GANnC,qBAOX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,4BAA4B,MAAM,OAAO,CAAC;AAAA,GATjD,qBAUX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,WAAW,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GAZhD,qBAaX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,qBAAqB,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GAf1D,qBAgBX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,oBAAoB,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GAlBzD,qBAmBX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,mBAAmB,MAAM,MAAM,UAAU,KAAK,CAAC;AAAA,GArBtD,qBAsBX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,aAAa,MAAM,OAAO,CAAC;AAAA,GAxBlC,qBAyBX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,mBAAmB,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GA3BxD,qBA4BX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,MAAM,UAAU,MAAM,oBAAI,KAAK,EAAE,CAAC;AAAA,GA9B7D,qBA+BX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,MAAM,UAAU,MAAM,oBAAI,KAAK,EAAE,CAAC;AAAA,GAjC7D,qBAkCX;AAlCW,uBAAN;AAAA,EALN,OAAO,EAAE,WAAW,yBAAyB,CAAC;AAAA,EAC9C,MAAM,EAAE,MAAM,sCAAsC,YAAY,CAAC,aAAa,wBAAwB,EAAE,CAAC;AAAA,EACzG,MAAM,EAAE,MAAM,6CAA6C,YAAY,CAAC,iBAAiB,EAAE,CAAC;AAAA,EAC5F,MAAM,EAAE,MAAM,4CAA4C,YAAY,CAAC,gBAAgB,EAAE,CAAC;AAAA,EAC1F,OAAO,EAAE,MAAM,8CAA8C,YAAY,CAAC,aAAa,wBAAwB,EAAE,CAAC;AAAA,GACtG;AA4CV;AADI,IAAM,kBAAN,MAAsB;AAAA,EAAtB;AAkCL,qBAAkB,oBAAI,KAAK;AAAA;AAC7B;AA/BE;AAAA,EADC,WAAW,EAAE,MAAM,QAAQ,YAAY,oBAAoB,CAAC;AAAA,GAHlD,gBAIX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,OAAO,CAAC;AAAA,GANnC,gBAOX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,mBAAmB,MAAM,OAAO,CAAC;AAAA,GATxC,gBAUX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,uBAAuB,MAAM,OAAO,CAAC;AAAA,GAZ5C,gBAaX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,aAAa,MAAM,OAAO,CAAC;AAAA,GAflC,gBAgBX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,qBAAqB,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GAlB1D,gBAmBX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,uBAAuB,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GArB5D,gBAsBX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,sBAAsB,MAAM,MAAM,UAAU,KAAK,CAAC;AAAA,GAxBzD,gBAyBX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,aAAa,MAAM,OAAO,CAAC;AAAA,GA3BlC,gBA4BX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,mBAAmB,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GA9BxD,gBA+BX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,MAAM,UAAU,MAAM,oBAAI,KAAK,EAAE,CAAC;AAAA,GAjC7D,gBAkCX;AAlCW,kBAAN;AAAA,EAJN,OAAO,EAAE,WAAW,oBAAoB,CAAC;AAAA,EACzC,MAAM,EAAE,MAAM,sCAAsC,YAAY,CAAC,gBAAgB,EAAE,CAAC;AAAA,EACpF,MAAM,EAAE,MAAM,0CAA0C,YAAY,CAAC,aAAa,mBAAmB,EAAE,CAAC;AAAA,EACxG,OAAO,EAAE,MAAM,yCAAyC,YAAY,CAAC,aAAa,mBAAmB,EAAE,CAAC;AAAA,GAC5F;AA6CV;AADI,IAAM,qBAAN,MAAyB;AAAA,EAAzB;AA2BL,0BAAyB;AAqBzB,qBAAkB,oBAAI,KAAK;AAAA;AAC7B;AA7CE;AAAA,EADC,WAAW,EAAE,MAAM,QAAQ,YAAY,oBAAoB,CAAC;AAAA,GAHlD,mBAIX;AAIA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,OAAO,CAAC;AAAA,GAPnC,mBAQX;AAIA;AAAA,EADC,SAAS,EAAE,MAAM,4BAA4B,MAAM,OAAO,CAAC;AAAA,GAXjD,mBAYX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,uBAAuB,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GAd5D,mBAeX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,gBAAgB,MAAM,OAAO,CAAC;AAAA,GAjBrC,mBAkBX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,gBAAgB,MAAM,OAAO,CAAC;AAAA,GApBrC,mBAqBX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,aAAa,MAAM,OAAO,CAAC;AAAA,GAvBlC,mBAwBX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,mBAAmB,MAAM,OAAO,CAAC;AAAA,GA1BxC,mBA2BX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,mBAAmB,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GA7BxD,mBA8BX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,wBAAwB,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GAhC7D,mBAiCX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,qBAAqB,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GAnC1D,mBAoCX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,oBAAoB,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GAtCzD,mBAuCX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,aAAa,MAAM,OAAO,CAAC;AAAA,GAzClC,mBA0CX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,mBAAmB,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GA5CxD,mBA6CX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,MAAM,UAAU,MAAM,oBAAI,KAAK,EAAE,CAAC;AAAA,GA/C7D,mBAgDX;AAhDW,qBAAN;AAAA,EALN,OAAO,EAAE,WAAW,wBAAwB,CAAC;AAAA,EAC7C,MAAM,EAAE,MAAM,qCAAqC,YAAY,CAAC,WAAW,EAAE,CAAC;AAAA,EAC9E,MAAM,EAAE,MAAM,sCAAsC,YAAY,CAAC,wBAAwB,EAAE,CAAC;AAAA,EAC5F,MAAM,EAAE,MAAM,qCAAqC,YAAY,CAAC,mBAAmB,EAAE,CAAC;AAAA,EACtF,OAAO,EAAE,MAAM,oCAAoC,YAAY,CAAC,WAAW,EAAE,CAAC;AAAA,GAClE;AA0DV;AADI,IAAM,uBAAN,MAA2B;AAAA,EAA3B;AAiCL,qBAAkB,oBAAI,KAAK;AAG3B,qBAAkB,oBAAI,KAAK;AAAA;AAC7B;AAjCE;AAAA,EADC,WAAW,EAAE,MAAM,QAAQ,YAAY,oBAAoB,CAAC;AAAA,GAHlD,qBAIX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,4BAA4B,MAAM,OAAO,CAAC;AAAA,GANjD,qBAOX;AAIA;AAAA,EADC,SAAS,EAAE,MAAM,qBAAqB,MAAM,OAAO,CAAC;AAAA,GAV1C,qBAWX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,OAAO,CAAC;AAAA,GAbnC,qBAcX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,gBAAgB,MAAM,OAAO,CAAC;AAAA,GAhBrC,qBAiBX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,uBAAuB,MAAM,OAAO,CAAC;AAAA,GAnB5C,qBAoBX;AAIA;AAAA,EADC,SAAS,EAAE,MAAM,oBAAoB,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GAvBzD,qBAwBX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,aAAa,MAAM,OAAO,CAAC;AAAA,GA1BlC,qBA2BX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,mBAAmB,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GA7BxD,qBA8BX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,MAAM,UAAU,MAAM,oBAAI,KAAK,EAAE,CAAC;AAAA,GAhC7D,qBAiCX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,MAAM,UAAU,MAAM,oBAAI,KAAK,EAAE,CAAC;AAAA,GAnC7D,qBAoCX;AApCW,uBAAN;AAAA,EAJN,OAAO,EAAE,WAAW,0BAA0B,CAAC;AAAA,EAC/C,MAAM,EAAE,MAAM,wCAAwC,YAAY,CAAC,0BAA0B,UAAU,EAAE,CAAC;AAAA,EAC1G,MAAM,EAAE,MAAM,sCAAsC,YAAY,CAAC,mBAAmB,UAAU,EAAE,CAAC;AAAA,EACjG,OAAO,EAAE,MAAM,uCAAuC,YAAY,CAAC,0BAA0B,UAAU,EAAE,CAAC;AAAA,GAC9F;AA2DV;AADI,IAAM,kBAAN,MAAsB;AAAA,EAAtB;AAoCL,qBAAkB,oBAAI,KAAK;AAAA;AAC7B;AAjCE;AAAA,EADC,WAAW,EAAE,MAAM,QAAQ,YAAY,oBAAoB,CAAC;AAAA,GAHlD,gBAIX;AAIA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,OAAO,CAAC;AAAA,GAPnC,gBAQX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,SAAS,MAAM,OAAO,CAAC;AAAA,GAV9B,gBAWX;AAIA;AAAA,EADC,SAAS,EAAE,MAAM,sBAAsB,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GAd3D,gBAeX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,0BAA0B,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GAjB/D,gBAkBX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,2BAA2B,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GApBhE,gBAqBX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,gBAAgB,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GAvBrD,gBAwBX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,wBAAwB,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GA1B7D,gBA2BX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,aAAa,MAAM,OAAO,CAAC;AAAA,GA7BlC,gBA8BX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,mBAAmB,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GAhCxD,gBAiCX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,MAAM,UAAU,MAAM,oBAAI,KAAK,EAAE,CAAC;AAAA,GAnC7D,gBAoCX;AApCW,kBAAN;AAAA,EAjBN,OAAO,EAAE,WAAW,oBAAoB,CAAC;AAAA,EACzC,MAAM,EAAE,MAAM,iCAAiC,YAAY,CAAC,WAAW,EAAE,CAAC;AAAA,EAC1E,MAAM,EAAE,MAAM,uCAAuC,YAAY,CAAC,aAAa,OAAO,EAAE,CAAC;AAAA,EACzF,MAAM;AAAA,IACL,MAAM;AAAA,IACN,YACE;AAAA,EACJ,CAAC;AAAA,EACA,MAAM;AAAA,IACL,MAAM;AAAA,IACN,YACE;AAAA,EACJ,CAAC;AAAA,EACA,MAAM;AAAA,IACL,MAAM;AAAA,IACN,YAAY;AAAA,EACd,CAAC;AAAA,GACY;AAoEV;AADI,IAAM,qBAAN,MAAyB;AAAA,EAAzB;AAwBL,qBAAkB,oBAAI,KAAK;AAAA;AAS7B;AA7BE;AAAA,EADC,WAAW,EAAE,MAAM,QAAQ,YAAY,oBAAoB,CAAC;AAAA,GAHlD,mBAIX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,aAAa,MAAM,OAAO,CAAC;AAAA,GANlC,mBAOX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,mBAAmB,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GATxD,mBAUX;AAIA;AAAA,EADC,SAAS,EAAE,MAAM,qBAAqB,MAAM,OAAO,CAAC;AAAA,GAb1C,mBAcX;AAOA;AAAA,EADC,SAAS,EAAE,MAAM,SAAS,MAAM,OAAO,CAAC;AAAA,GApB9B,mBAqBX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,MAAM,UAAU,MAAM,oBAAI,KAAK,EAAE,CAAC;AAAA,GAvB7D,mBAwBX;AAQA;AAAA,EADC,SAAS,EAAE,MAAM,gBAAgB,MAAM,MAAM,UAAU,KAAK,CAAC;AAAA,GA/BnD,mBAgCX;AAhCW,qBAAN;AAAA,EANN,OAAO,EAAE,WAAW,wBAAwB,CAAC;AAAA,EAI7C,OAAO,EAAE,MAAM,mCAAmC,YAAY,CAAC,YAAY,iBAAiB,EAAE,CAAC;AAAA,EAC/F,OAAO,EAAE,MAAM,kCAAkC,YAAY,CAAC,YAAY,OAAO,EAAE,CAAC;AAAA,GACxE;AAsDV;AADI,IAAM,0BAAN,MAA8B;AAAA,EAA9B;AAyCL,qBAAkB,oBAAI,KAAK;AAAA;AAC7B;AAjCE;AAAA,EADC,WAAW,EAAE,MAAM,QAAQ,YAAY,oBAAoB,CAAC;AAAA,GARlD,wBASX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,aAAa,MAAM,OAAO,CAAC;AAAA,GAXlC,wBAYX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,mBAAmB,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GAdxD,wBAeX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,OAAO,CAAC;AAAA,GAjBnC,wBAkBX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,gBAAgB,MAAM,OAAO,CAAC;AAAA,GApBrC,wBAqBX;AAIA;AAAA,EADC,SAAS,EAAE,MAAM,gBAAgB,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GAxBrD,wBAyBX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,uBAAuB,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GA3B5D,wBA4BX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,eAAe,MAAM,OAAO,CAAC;AAAA,GA9BpC,wBA+BX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,iBAAiB,MAAM,OAAO,CAAC;AAAA,GAjCtC,wBAkCX;AAIA;AAAA,EADC,SAAS,EAAE,MAAM,YAAY,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GArCjD,wBAsCX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,MAAM,UAAU,MAAM,oBAAI,KAAK,EAAE,CAAC;AAAA,GAxC7D,wBAyCX;AAzCW,0BAAN;AAAA,EAHN,OAAO,EAAE,WAAW,8BAA8B,CAAC;AAAA,EACnD,MAAM,EAAE,MAAM,2CAA2C,YAAY,CAAC,aAAa,UAAU,EAAE,CAAC;AAAA,EAChG,MAAM,EAAE,MAAM,2CAA2C,YAAY,CAAC,YAAY,WAAW,EAAE,CAAC;AAAA,GACpF;",
   "names": []
 }

package/dist/modules/communication_channels/di.js

@@ -13,6 +13,7 @@ import { ensureTestSeedAdapterRegistered } from "./lib/test-seed.js";
 import { sendAsUser } from "./lib/send-as-user.js";
 import { isSystemEmailTransportConfigured, sendSystemEmail } from "./lib/system-email.js";
 import { resolveChannelTypeSafely } from "./lib/resolve-channel-type.js";
+import { resolveChannelThreadAccessSafely } from "./lib/channel-thread-access.js";
 function register(container) {
   ensureTestSeedAdapterRegistered();
   registerEmailTransport({
@@ -40,7 +41,14 @@ function register(container) {
     // to decide whether an external correspondent must carry an email address
     // (#4975); absent module or failed lookup reads as "unknown", which the
     // messages validator handles fail-closed.
-    communicationChannelsResolveChannelType: asValue(resolveChannelTypeSafely)
+    communicationChannelsResolveChannelType: asValue(resolveChannelTypeSafely),
+    // Cross-module channel-thread authorization. An inbound channel message has
+    // no platform sender and no recipients, so the messages module's
+    // sender-or-recipient reply guard denies every operator (#5535); it resolves
+    // this facade to fall back on the channel's own access rule for threads this
+    // module owns. Absent module or failed lookup reads as "internal thread",
+    // which leaves the participant rule in force.
+    communicationChannelsResolveChannelThreadAccess: asValue(resolveChannelThreadAccessSafely)
   });
 }
 export {

package/dist/modules/communication_channels/di.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../src/modules/communication_channels/di.ts"],
-  "sourcesContent": ["import { asValue } from 'awilix'\nimport type { AppContainer } from '@open-mercato/shared/lib/di/container'\nimport { registerEmailTransport } from '@open-mercato/shared/lib/email/transport'\nimport {\n  CommunicationChannel,\n  ExternalConversation,\n  ExternalMessage,\n  MessageChannelLink,\n  ChannelThreadMapping,\n  MessageReaction,\n} from './data/entities'\nimport { getChannelAdapterRegistry } from './lib/adapter-registry-singleton'\nimport { ensureTestSeedAdapterRegistered } from './lib/test-seed'\nimport { sendAsUser } from './lib/send-as-user'\nimport { isSystemEmailTransportConfigured, sendSystemEmail } from './lib/system-email'\nimport { resolveChannelTypeSafely } from './lib/resolve-channel-type'\n\nexport function register(container: AppContainer) {\n  // Test-only: register the network-free stub channel adapter when\n  // `OM_ENABLE_TEST_CHANNEL_SEEDING` is set (no-op in production). Lets the\n  // integration harness connect a channel + complete the outbound send chain.\n  // See lib/test-seed.ts.\n  ensureTestSeedAdapterRegistered()\n  registerEmailTransport({\n    id: 'communication_channels',\n    send: (payload) => sendSystemEmail(container, payload),\n    isConfigured: isSystemEmailTransportConfigured,\n  })\n\n  container.register({\n    // Entity class registrations (for EntityManager lookups by string)\n    CommunicationChannel: asValue(CommunicationChannel),\n    ExternalConversation: asValue(ExternalConversation),\n    ExternalMessage: asValue(ExternalMessage),\n    MessageChannelLink: asValue(MessageChannelLink),\n    ChannelThreadMapping: asValue(ChannelThreadMapping),\n    MessageReaction: asValue(MessageReaction),\n\n    // Channel adapter registry \u2014 process-wide singleton backed by globalThis so\n    // the auth-less webhook route resolves the same registry as DI consumers.\n    // See lib/adapter-registry-singleton.ts.\n    channelAdapterRegistry: asValue(getChannelAdapterRegistry()),\n\n    // In-process send-as-user facade. Cross-module callers (e.g. the customers\n    // compose route) resolve this instead of making an HTTP self-call.\n    communicationChannelsSendAsUser: asValue(sendAsUser),\n    communicationChannelsSendSystemEmail: asValue(sendSystemEmail),\n\n    // Cross-module channel-type lookup. The messages compose route resolves this\n    // to decide whether an external correspondent must carry an email address\n    // (#4975); absent module or failed lookup reads as \"unknown\", which the\n    // messages validator handles fail-closed.\n    communicationChannelsResolveChannelType: asValue(resolveChannelTypeSafely),\n  })\n}\n"],
-  "mappings": "AAAA,SAAS,eAAe;AAExB,SAAS,8BAA8B;AACvC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,iCAAiC;AAC1C,SAAS,uCAAuC;AAChD,SAAS,kBAAkB;AAC3B,SAAS,kCAAkC,uBAAuB;AAClE,SAAS,gCAAgC;AAElC,SAAS,SAAS,WAAyB;AAKhD,kCAAgC;AAChC,yBAAuB;AAAA,IACrB,IAAI;AAAA,IACJ,MAAM,CAAC,YAAY,gBAAgB,WAAW,OAAO;AAAA,IACrD,cAAc;AAAA,EAChB,CAAC;AAED,YAAU,SAAS;AAAA;AAAA,IAEjB,sBAAsB,QAAQ,oBAAoB;AAAA,IAClD,sBAAsB,QAAQ,oBAAoB;AAAA,IAClD,iBAAiB,QAAQ,eAAe;AAAA,IACxC,oBAAoB,QAAQ,kBAAkB;AAAA,IAC9C,sBAAsB,QAAQ,oBAAoB;AAAA,IAClD,iBAAiB,QAAQ,eAAe;AAAA;AAAA;AAAA;AAAA,IAKxC,wBAAwB,QAAQ,0BAA0B,CAAC;AAAA;AAAA;AAAA,IAI3D,iCAAiC,QAAQ,UAAU;AAAA,IACnD,sCAAsC,QAAQ,eAAe;AAAA;AAAA;AAAA;AAAA;AAAA,IAM7D,yCAAyC,QAAQ,wBAAwB;AAAA,EAC3E,CAAC;AACH;",
+  "sourcesContent": ["import { asValue } from 'awilix'\nimport type { AppContainer } from '@open-mercato/shared/lib/di/container'\nimport { registerEmailTransport } from '@open-mercato/shared/lib/email/transport'\nimport {\n  CommunicationChannel,\n  ExternalConversation,\n  ExternalMessage,\n  MessageChannelLink,\n  ChannelThreadMapping,\n  MessageReaction,\n} from './data/entities'\nimport { getChannelAdapterRegistry } from './lib/adapter-registry-singleton'\nimport { ensureTestSeedAdapterRegistered } from './lib/test-seed'\nimport { sendAsUser } from './lib/send-as-user'\nimport { isSystemEmailTransportConfigured, sendSystemEmail } from './lib/system-email'\nimport { resolveChannelTypeSafely } from './lib/resolve-channel-type'\nimport { resolveChannelThreadAccessSafely } from './lib/channel-thread-access'\n\nexport function register(container: AppContainer) {\n  // Test-only: register the network-free stub channel adapter when\n  // `OM_ENABLE_TEST_CHANNEL_SEEDING` is set (no-op in production). Lets the\n  // integration harness connect a channel + complete the outbound send chain.\n  // See lib/test-seed.ts.\n  ensureTestSeedAdapterRegistered()\n  registerEmailTransport({\n    id: 'communication_channels',\n    send: (payload) => sendSystemEmail(container, payload),\n    isConfigured: isSystemEmailTransportConfigured,\n  })\n\n  container.register({\n    // Entity class registrations (for EntityManager lookups by string)\n    CommunicationChannel: asValue(CommunicationChannel),\n    ExternalConversation: asValue(ExternalConversation),\n    ExternalMessage: asValue(ExternalMessage),\n    MessageChannelLink: asValue(MessageChannelLink),\n    ChannelThreadMapping: asValue(ChannelThreadMapping),\n    MessageReaction: asValue(MessageReaction),\n\n    // Channel adapter registry \u2014 process-wide singleton backed by globalThis so\n    // the auth-less webhook route resolves the same registry as DI consumers.\n    // See lib/adapter-registry-singleton.ts.\n    channelAdapterRegistry: asValue(getChannelAdapterRegistry()),\n\n    // In-process send-as-user facade. Cross-module callers (e.g. the customers\n    // compose route) resolve this instead of making an HTTP self-call.\n    communicationChannelsSendAsUser: asValue(sendAsUser),\n    communicationChannelsSendSystemEmail: asValue(sendSystemEmail),\n\n    // Cross-module channel-type lookup. The messages compose route resolves this\n    // to decide whether an external correspondent must carry an email address\n    // (#4975); absent module or failed lookup reads as \"unknown\", which the\n    // messages validator handles fail-closed.\n    communicationChannelsResolveChannelType: asValue(resolveChannelTypeSafely),\n\n    // Cross-module channel-thread authorization. An inbound channel message has\n    // no platform sender and no recipients, so the messages module's\n    // sender-or-recipient reply guard denies every operator (#5535); it resolves\n    // this facade to fall back on the channel's own access rule for threads this\n    // module owns. Absent module or failed lookup reads as \"internal thread\",\n    // which leaves the participant rule in force.\n    communicationChannelsResolveChannelThreadAccess: asValue(resolveChannelThreadAccessSafely),\n  })\n}\n"],
+  "mappings": "AAAA,SAAS,eAAe;AAExB,SAAS,8BAA8B;AACvC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,iCAAiC;AAC1C,SAAS,uCAAuC;AAChD,SAAS,kBAAkB;AAC3B,SAAS,kCAAkC,uBAAuB;AAClE,SAAS,gCAAgC;AACzC,SAAS,wCAAwC;AAE1C,SAAS,SAAS,WAAyB;AAKhD,kCAAgC;AAChC,yBAAuB;AAAA,IACrB,IAAI;AAAA,IACJ,MAAM,CAAC,YAAY,gBAAgB,WAAW,OAAO;AAAA,IACrD,cAAc;AAAA,EAChB,CAAC;AAED,YAAU,SAAS;AAAA;AAAA,IAEjB,sBAAsB,QAAQ,oBAAoB;AAAA,IAClD,sBAAsB,QAAQ,oBAAoB;AAAA,IAClD,iBAAiB,QAAQ,eAAe;AAAA,IACxC,oBAAoB,QAAQ,kBAAkB;AAAA,IAC9C,sBAAsB,QAAQ,oBAAoB;AAAA,IAClD,iBAAiB,QAAQ,eAAe;AAAA;AAAA;AAAA;AAAA,IAKxC,wBAAwB,QAAQ,0BAA0B,CAAC;AAAA;AAAA;AAAA,IAI3D,iCAAiC,QAAQ,UAAU;AAAA,IACnD,sCAAsC,QAAQ,eAAe;AAAA;AAAA;AAAA;AAAA;AAAA,IAM7D,yCAAyC,QAAQ,wBAAwB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAQzE,iDAAiD,QAAQ,gCAAgC;AAAA,EAC3F,CAAC;AACH;",
   "names": []
 }

package/dist/modules/communication_channels/events.js

@@ -69,6 +69,13 @@ const events = [
     category: "lifecycle",
     clientBroadcast: true
   },
+  {
+    id: "communication_channels.channel.visibility_changed",
+    label: "Channel Visibility Changed",
+    entity: "communication_channel",
+    category: "lifecycle",
+    clientBroadcast: true
+  },
   // ── Reaction events ──────────────────────────────────────
   {
     id: "communication_channels.reaction.added",

package/dist/modules/communication_channels/events.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../src/modules/communication_channels/events.ts"],
-  "sourcesContent": ["import { createModuleEvents } from '@open-mercato/shared/modules/events'\n\nconst events = [\n  // \u2500\u2500 Bridge events \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n  {\n    id: 'communication_channels.message.received',\n    label: 'External Message Received',\n    entity: 'external_message',\n    category: 'custom',\n    clientBroadcast: true,\n  },\n  {\n    id: 'communication_channels.message.sent',\n    label: 'External Message Sent (Outbound)',\n    entity: 'external_message',\n    category: 'custom',\n    clientBroadcast: true,\n  },\n  {\n    id: 'communication_channels.message.delivery_failed',\n    label: 'External Message Delivery Failed',\n    entity: 'external_message',\n    category: 'custom',\n    clientBroadcast: true,\n  },\n  {\n    id: 'communication_channels.conversation.created',\n    label: 'External Conversation Created',\n    entity: 'external_conversation',\n    category: 'custom',\n  },\n  {\n    id: 'communication_channels.conversation.reassigned',\n    label: 'External Conversation Reassigned',\n    entity: 'external_conversation',\n    category: 'custom',\n  },\n  {\n    id: 'communication_channels.contact.resolved',\n    label: 'External Contact Resolved to CRM Person',\n    entity: 'external_conversation',\n    category: 'custom',\n  },\n  // \u2500\u2500 Channel lifecycle events \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n  {\n    id: 'communication_channels.channel.requires_reauth',\n    label: 'Channel Requires Re-authentication',\n    entity: 'communication_channel',\n    category: 'lifecycle',\n    clientBroadcast: true,\n  },\n  {\n    id: 'communication_channels.channel.disconnected',\n    label: 'Channel Disconnected',\n    entity: 'communication_channel',\n    category: 'lifecycle',\n    clientBroadcast: true,\n  },\n  {\n    id: 'communication_channels.channel.deleted',\n    label: 'Channel Deleted',\n    entity: 'communication_channel',\n    category: 'lifecycle',\n    clientBroadcast: true,\n  },\n  {\n    id: 'communication_channels.channel.primary_changed',\n    label: 'Primary Channel Changed',\n    entity: 'communication_channel',\n    category: 'lifecycle',\n    clientBroadcast: true,\n  },\n  // \u2500\u2500 Reaction events \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n  {\n    id: 'communication_channels.reaction.added',\n    label: 'Reaction Added',\n    entity: 'message_reaction',\n    category: 'custom',\n    clientBroadcast: true,\n  },\n  {\n    id: 'communication_channels.reaction.removed',\n    label: 'Reaction Removed',\n    entity: 'message_reaction',\n    category: 'custom',\n    clientBroadcast: true,\n  },\n  // \u2500\u2500 Push delivery lifecycle (Spec C) \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n  {\n    id: 'communication_channels.push.registered',\n    label: 'Push Delivery Registered',\n    entity: 'communication_channel',\n    category: 'lifecycle',\n    clientBroadcast: true,\n  },\n  {\n    id: 'communication_channels.push.failed',\n    label: 'Push Delivery Failed (Falling Back to Polling)',\n    entity: 'communication_channel',\n    category: 'lifecycle',\n    clientBroadcast: true,\n  },\n  {\n    id: 'communication_channels.push.renewed',\n    label: 'Push Delivery Renewed',\n    entity: 'communication_channel',\n    category: 'lifecycle',\n  },\n  {\n    id: 'communication_channels.push.deactivated',\n    label: 'Push Delivery Deactivated',\n    entity: 'communication_channel',\n    category: 'lifecycle',\n    clientBroadcast: true,\n  },\n] as const\n\nexport const eventsConfig = createModuleEvents({ moduleId: 'communication_channels', events })\nexport const emitCommunicationChannelsEvent = eventsConfig.emit\nexport type CommunicationChannelsEventId = (typeof events)[number]['id']\n\nexport default eventsConfig\n"],
-  "mappings": "AAAA,SAAS,0BAA0B;AAEnC,MAAM,SAAS;AAAA;AAAA,EAEb;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,iBAAiB;AAAA,EACnB;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,iBAAiB;AAAA,EACnB;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,iBAAiB;AAAA,EACnB;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,QAAQ;AAAA,IACR,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,QAAQ;AAAA,IACR,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,QAAQ;AAAA,IACR,UAAU;AAAA,EACZ;AAAA;AAAA,EAEA;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,iBAAiB;AAAA,EACnB;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,iBAAiB;AAAA,EACnB;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,iBAAiB;AAAA,EACnB;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,iBAAiB;AAAA,EACnB;AAAA;AAAA,EAEA;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,iBAAiB;AAAA,EACnB;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,iBAAiB;AAAA,EACnB;AAAA;AAAA,EAEA;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,iBAAiB;AAAA,EACnB;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,iBAAiB;AAAA,EACnB;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,QAAQ;AAAA,IACR,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,iBAAiB;AAAA,EACnB;AACF;AAEO,MAAM,eAAe,mBAAmB,EAAE,UAAU,0BAA0B,OAAO,CAAC;AACtF,MAAM,iCAAiC,aAAa;AAG3D,IAAO,iBAAQ;",
+  "sourcesContent": ["import { createModuleEvents } from '@open-mercato/shared/modules/events'\n\nconst events = [\n  // \u2500\u2500 Bridge events \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n  {\n    id: 'communication_channels.message.received',\n    label: 'External Message Received',\n    entity: 'external_message',\n    category: 'custom',\n    clientBroadcast: true,\n  },\n  {\n    id: 'communication_channels.message.sent',\n    label: 'External Message Sent (Outbound)',\n    entity: 'external_message',\n    category: 'custom',\n    clientBroadcast: true,\n  },\n  {\n    id: 'communication_channels.message.delivery_failed',\n    label: 'External Message Delivery Failed',\n    entity: 'external_message',\n    category: 'custom',\n    clientBroadcast: true,\n  },\n  {\n    id: 'communication_channels.conversation.created',\n    label: 'External Conversation Created',\n    entity: 'external_conversation',\n    category: 'custom',\n  },\n  {\n    id: 'communication_channels.conversation.reassigned',\n    label: 'External Conversation Reassigned',\n    entity: 'external_conversation',\n    category: 'custom',\n  },\n  {\n    id: 'communication_channels.contact.resolved',\n    label: 'External Contact Resolved to CRM Person',\n    entity: 'external_conversation',\n    category: 'custom',\n  },\n  // \u2500\u2500 Channel lifecycle events \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n  {\n    id: 'communication_channels.channel.requires_reauth',\n    label: 'Channel Requires Re-authentication',\n    entity: 'communication_channel',\n    category: 'lifecycle',\n    clientBroadcast: true,\n  },\n  {\n    id: 'communication_channels.channel.disconnected',\n    label: 'Channel Disconnected',\n    entity: 'communication_channel',\n    category: 'lifecycle',\n    clientBroadcast: true,\n  },\n  {\n    id: 'communication_channels.channel.deleted',\n    label: 'Channel Deleted',\n    entity: 'communication_channel',\n    category: 'lifecycle',\n    clientBroadcast: true,\n  },\n  {\n    id: 'communication_channels.channel.primary_changed',\n    label: 'Primary Channel Changed',\n    entity: 'communication_channel',\n    category: 'lifecycle',\n    clientBroadcast: true,\n  },\n  {\n    id: 'communication_channels.channel.visibility_changed',\n    label: 'Channel Visibility Changed',\n    entity: 'communication_channel',\n    category: 'lifecycle',\n    clientBroadcast: true,\n  },\n  // \u2500\u2500 Reaction events \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n  {\n    id: 'communication_channels.reaction.added',\n    label: 'Reaction Added',\n    entity: 'message_reaction',\n    category: 'custom',\n    clientBroadcast: true,\n  },\n  {\n    id: 'communication_channels.reaction.removed',\n    label: 'Reaction Removed',\n    entity: 'message_reaction',\n    category: 'custom',\n    clientBroadcast: true,\n  },\n  // \u2500\u2500 Push delivery lifecycle (Spec C) \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n  {\n    id: 'communication_channels.push.registered',\n    label: 'Push Delivery Registered',\n    entity: 'communication_channel',\n    category: 'lifecycle',\n    clientBroadcast: true,\n  },\n  {\n    id: 'communication_channels.push.failed',\n    label: 'Push Delivery Failed (Falling Back to Polling)',\n    entity: 'communication_channel',\n    category: 'lifecycle',\n    clientBroadcast: true,\n  },\n  {\n    id: 'communication_channels.push.renewed',\n    label: 'Push Delivery Renewed',\n    entity: 'communication_channel',\n    category: 'lifecycle',\n  },\n  {\n    id: 'communication_channels.push.deactivated',\n    label: 'Push Delivery Deactivated',\n    entity: 'communication_channel',\n    category: 'lifecycle',\n    clientBroadcast: true,\n  },\n] as const\n\nexport const eventsConfig = createModuleEvents({ moduleId: 'communication_channels', events })\nexport const emitCommunicationChannelsEvent = eventsConfig.emit\nexport type CommunicationChannelsEventId = (typeof events)[number]['id']\n\nexport default eventsConfig\n"],
+  "mappings": "AAAA,SAAS,0BAA0B;AAEnC,MAAM,SAAS;AAAA;AAAA,EAEb;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,iBAAiB;AAAA,EACnB;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,iBAAiB;AAAA,EACnB;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,iBAAiB;AAAA,EACnB;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,QAAQ;AAAA,IACR,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,QAAQ;AAAA,IACR,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,QAAQ;AAAA,IACR,UAAU;AAAA,EACZ;AAAA;AAAA,EAEA;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,iBAAiB;AAAA,EACnB;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,iBAAiB;AAAA,EACnB;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,iBAAiB;AAAA,EACnB;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,iBAAiB;AAAA,EACnB;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,iBAAiB;AAAA,EACnB;AAAA;AAAA,EAEA;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,iBAAiB;AAAA,EACnB;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,iBAAiB;AAAA,EACnB;AAAA;AAAA,EAEA;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,iBAAiB;AAAA,EACnB;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,iBAAiB;AAAA,EACnB;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,QAAQ;AAAA,IACR,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,iBAAiB;AAAA,EACnB;AACF;AAEO,MAAM,eAAe,mBAAmB,EAAE,UAAU,0BAA0B,OAAO,CAAC;AACtF,MAAM,iCAAiC,aAAa;AAG3D,IAAO,iBAAQ;",
   "names": []
 }

package/dist/modules/communication_channels/index.js

@@ -1,7 +1,7 @@
 const metadata = {
   id: "communication_channels",
   title: "Communication Channels",
-  description: "Unified hub bridging external chat/email channels (Slack, WhatsApp, Email) to the Messages module. Adapter contract, channel-native payload storage, reactions, and per-channel threading.",
+  description: "Unified hub bridging external chat/email channels (Slack, WhatsApp, Email) to the Messages module. Adapter contract, channel-native payload storage, reactions, and per-channel threading. OAuth state cookies are single-use via short-TTL cache markers (see lib/oauth-state.ts); multi-replica deployments MUST set CACHE_STRATEGY=redis so replay protection is shared across replicas.",
   requires: ["progress"]
 };
 var communication_channels_default = metadata;

package/dist/modules/communication_channels/index.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../src/modules/communication_channels/index.ts"],
-  "sourcesContent": ["export const metadata = {\n  id: 'communication_channels',\n  title: 'Communication Channels',\n  description:\n    'Unified hub bridging external chat/email channels (Slack, WhatsApp, Email) to the Messages module. Adapter contract, channel-native payload storage, reactions, and per-channel threading.',\n  requires: ['progress'],\n}\n\nexport default metadata\n"],
+  "sourcesContent": ["export const metadata = {\n  id: 'communication_channels',\n  title: 'Communication Channels',\n  description:\n    'Unified hub bridging external chat/email channels (Slack, WhatsApp, Email) to the Messages module. Adapter contract, channel-native payload storage, reactions, and per-channel threading. OAuth state cookies are single-use via short-TTL cache markers (see lib/oauth-state.ts); multi-replica deployments MUST set CACHE_STRATEGY=redis so replay protection is shared across replicas.',\n  requires: ['progress'],\n}\n\nexport default metadata\n"],
   "mappings": "AAAO,MAAM,WAAW;AAAA,EACtB,IAAI;AAAA,EACJ,OAAO;AAAA,EACP,aACE;AAAA,EACF,UAAU,CAAC,UAAU;AACvB;AAEA,IAAO,iCAAQ;",
   "names": []
 }

package/dist/modules/communication_channels/lib/access-control.js

@@ -5,7 +5,8 @@ function channelOrgScopeWhere(orgId) {
 }
 function channelOrgScopeWhereFromFilter(filter) {
   const organizationIds = filter?.organizationIds;
-  if (!organizationIds || organizationIds.length === 0) return {};
+  if (organizationIds === void 0) return {};
+  if (organizationIds.length === 0) return { organizationId: { $in: [] } };
   return { $or: [{ organizationId: { $in: organizationIds } }, { organizationId: null }] };
 }
 function channelOwnerScopeWhere(currentUserId) {