@things-factory/ai-assistant 10.1.47 → 10.1.52

package/dist-server/service/chat-session-participant/invite-notification.js

@@ -12,18 +12,33 @@ exports.buildInviteNotification = buildInviteNotification;
  * 초대된 사용자들에게 보낼 협업 초대 알림 payload 를 만든다.
  * 받는 사람이 없으면 null (= 보낼 것 없음).
  */
-function buildInviteNotification(userIds, boardId, inviter) {
+function buildInviteNotification(userIds, boardId, inviter, sessionName) {
     if (!Array.isArray(userIds) || userIds.length === 0)
         return null;
     const who = inviter?.name || inviter?.email || 'someone';
+    /* A board conversation keeps its board wording and the link to the modeller. */
+    if (boardId) {
+        return {
+            receivers: userIds,
+            type: 'board-collab-invite',
+            subject: 'info',
+            title: 'Board collaboration invite',
+            body: `${who} invited you to collaborate on a board.`,
+            url: `board-modeller/${boardId}`,
+            mode: 'background'
+        };
+    }
+    /*
+     * Every other conversation is not about a board. Both chat doors called this without one and every
+     * invite read "Board collaboration invite" - in operato-ecs, in plant, anywhere (2026-09-24).
+     */
+    const name = sessionName?.trim();
     return {
         receivers: userIds,
-        type: 'board-collab-invite',
+        type: 'chat-invite',
         subject: 'info',
-        title: 'Board collaboration invite',
-        body: `${who} invited you to collaborate on a board.`,
-        // board 가 연결돼 있으면 모델러로 바로 가는 링크. 없으면 링크 생략.
-        url: boardId ? `board-modeller/${boardId}` : undefined,
+        title: 'Conversation invite',
+        body: name ? `${who} brought you into the conversation "${name}".` : `${who} brought you into a conversation.`,
         mode: 'background'
     };
 }

package/dist-server/service/chat-session-participant/invite-notification.js.map

@@ -1 +1 @@
-{"version":3,"file":"invite-notification.js","sourceRoot":"","sources":["../../../server/service/chat-session-participant/invite-notification.ts"],"names":[],"mappings":";AAAA;;;;;;GAMG;;AAuBH,0DAkBC;AAtBD;;;GAGG;AACH,SAAgB,uBAAuB,CACrC,OAAiB,EACjB,OAA2B,EAC3B,OAAmC;IAEnC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAA;IAEhE,MAAM,GAAG,GAAG,OAAO,EAAE,IAAI,IAAI,OAAO,EAAE,KAAK,IAAI,SAAS,CAAA;IACxD,OAAO;QACL,SAAS,EAAE,OAAO;QAClB,IAAI,EAAE,qBAAqB;QAC3B,OAAO,EAAE,MAAM;QACf,KAAK,EAAE,4BAA4B;QACnC,IAAI,EAAE,GAAG,GAAG,yCAAyC;QACrD,4CAA4C;QAC5C,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC,kBAAkB,OAAO,EAAE,CAAC,CAAC,CAAC,SAAS;QACtD,IAAI,EAAE,YAAY;KACnB,CAAA;AACH,CAAC","sourcesContent":["/**\n * 협업 초대 알림 — 순수 payload 빌더.\n *\n * 부수효과(실제 발송)는 resolver 의 thin caller 가 `context.state.notify` 로 수행.\n * 여기엔 \"무엇을 보낼지\"(payload) 결정 로직만 둔다 — DB·pubsub·notify 의존 없이 테스트 가능.\n * (patch spine 의 board-patch-broadcast.ts 와 동일한 순수/부수효과 분리 컨벤션.)\n */\n\n/** notification-middleware 의 notifier 가 받는 인자 형태 (필요한 키만). */\nexport interface InviteNotification {\n  receivers: string[]\n  type: string\n  subject: string\n  title: string\n  body: string\n  url?: string\n  mode: 'background' | 'foreground'\n}\n\n/** 초대자 식별용 — User 엔티티에서 쓰는 필드만 (duck-typed). */\nexport interface Inviter {\n  name?: string | null\n  email?: string | null\n}\n\n/**\n * 초대된 사용자들에게 보낼 협업 초대 알림 payload 를 만든다.\n * 받는 사람이 없으면 null (= 보낼 것 없음).\n */\nexport function buildInviteNotification(\n  userIds: string[],\n  boardId: string | undefined,\n  inviter: Inviter | undefined | null\n): InviteNotification | null {\n  if (!Array.isArray(userIds) || userIds.length === 0) return null\n\n  const who = inviter?.name || inviter?.email || 'someone'\n  return {\n    receivers: userIds,\n    type: 'board-collab-invite',\n    subject: 'info',\n    title: 'Board collaboration invite',\n    body: `${who} invited you to collaborate on a board.`,\n    // board 가 연결돼 있으면 모델러로 바로 가는 링크. 없으면 링크 생략.\n    url: boardId ? `board-modeller/${boardId}` : undefined,\n    mode: 'background'\n  }\n}\n"]}
+{"version":3,"file":"invite-notification.js","sourceRoot":"","sources":["../../../server/service/chat-session-participant/invite-notification.ts"],"names":[],"mappings":";AAAA;;;;;;GAMG;;AAuBH,0DAoCC;AAxCD;;;GAGG;AACH,SAAgB,uBAAuB,CACrC,OAAiB,EACjB,OAA2B,EAC3B,OAAmC,EACnC,WAA2B;IAE3B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAA;IAEhE,MAAM,GAAG,GAAG,OAAO,EAAE,IAAI,IAAI,OAAO,EAAE,KAAK,IAAI,SAAS,CAAA;IAExD,gFAAgF;IAChF,IAAI,OAAO,EAAE,CAAC;QACZ,OAAO;YACL,SAAS,EAAE,OAAO;YAClB,IAAI,EAAE,qBAAqB;YAC3B,OAAO,EAAE,MAAM;YACf,KAAK,EAAE,4BAA4B;YACnC,IAAI,EAAE,GAAG,GAAG,yCAAyC;YACrD,GAAG,EAAE,kBAAkB,OAAO,EAAE;YAChC,IAAI,EAAE,YAAY;SACnB,CAAA;IACH,CAAC;IAED;;;OAGG;IACH,MAAM,IAAI,GAAG,WAAW,EAAE,IAAI,EAAE,CAAA;IAChC,OAAO;QACL,SAAS,EAAE,OAAO;QAClB,IAAI,EAAE,aAAa;QACnB,OAAO,EAAE,MAAM;QACf,KAAK,EAAE,qBAAqB;QAC5B,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,GAAG,uCAAuC,IAAI,IAAI,CAAC,CAAC,CAAC,GAAG,GAAG,mCAAmC;QAC9G,IAAI,EAAE,YAAY;KACnB,CAAA;AACH,CAAC","sourcesContent":["/**\n * 협업 초대 알림 — 순수 payload 빌더.\n *\n * 부수효과(실제 발송)는 resolver 의 thin caller 가 `context.state.notify` 로 수행.\n * 여기엔 \"무엇을 보낼지\"(payload) 결정 로직만 둔다 — DB·pubsub·notify 의존 없이 테스트 가능.\n * (patch spine 의 board-patch-broadcast.ts 와 동일한 순수/부수효과 분리 컨벤션.)\n */\n\n/** notification-middleware 의 notifier 가 받는 인자 형태 (필요한 키만). */\nexport interface InviteNotification {\n  receivers: string[]\n  type: string\n  subject: string\n  title: string\n  body: string\n  url?: string\n  mode: 'background' | 'foreground'\n}\n\n/** 초대자 식별용 — User 엔티티에서 쓰는 필드만 (duck-typed). */\nexport interface Inviter {\n  name?: string | null\n  email?: string | null\n}\n\n/**\n * 초대된 사용자들에게 보낼 협업 초대 알림 payload 를 만든다.\n * 받는 사람이 없으면 null (= 보낼 것 없음).\n */\nexport function buildInviteNotification(\n  userIds: string[],\n  boardId: string | undefined,\n  inviter: Inviter | undefined | null,\n  sessionName?: string | null\n): InviteNotification | null {\n  if (!Array.isArray(userIds) || userIds.length === 0) return null\n\n  const who = inviter?.name || inviter?.email || 'someone'\n\n  /* A board conversation keeps its board wording and the link to the modeller. */\n  if (boardId) {\n    return {\n      receivers: userIds,\n      type: 'board-collab-invite',\n      subject: 'info',\n      title: 'Board collaboration invite',\n      body: `${who} invited you to collaborate on a board.`,\n      url: `board-modeller/${boardId}`,\n      mode: 'background'\n    }\n  }\n\n  /*\n   * Every other conversation is not about a board. Both chat doors called this without one and every\n   * invite read \"Board collaboration invite\" - in operato-ecs, in plant, anywhere (2026-09-24).\n   */\n  const name = sessionName?.trim()\n  return {\n    receivers: userIds,\n    type: 'chat-invite',\n    subject: 'info',\n    title: 'Conversation invite',\n    body: name ? `${who} brought you into the conversation \"${name}\".` : `${who} brought you into a conversation.`,\n    mode: 'background'\n  }\n}\n"]}

package/dist-server/service/chat-session-participant/participant-lookup-roles.d.ts

@@ -0,0 +1,3 @@
+/** Being in the room - owner or member. A `viewer` row only remembers a hide. Pure, so it is tested alone. */
+export declare const ROOM_ROLES: readonly ["owner", "member"];
+export declare function isRoomRole(role: string | null | undefined): boolean;

package/dist-server/service/chat-session-participant/participant-lookup-roles.js

@@ -0,0 +1,10 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ROOM_ROLES = void 0;
+exports.isRoomRole = isRoomRole;
+/** Being in the room - owner or member. A `viewer` row only remembers a hide. Pure, so it is tested alone. */
+exports.ROOM_ROLES = ['owner', 'member'];
+function isRoomRole(role) {
+    return exports.ROOM_ROLES.includes(role ?? '');
+}
+//# sourceMappingURL=participant-lookup-roles.js.map

package/dist-server/service/chat-session-participant/participant-lookup-roles.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"participant-lookup-roles.js","sourceRoot":"","sources":["../../../server/service/chat-session-participant/participant-lookup-roles.ts"],"names":[],"mappings":";;;AAGA,gCAEC;AALD,8GAA8G;AACjG,QAAA,UAAU,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAU,CAAA;AAEtD,SAAgB,UAAU,CAAC,IAA+B;IACxD,OAAQ,kBAAgC,CAAC,QAAQ,CAAC,IAAI,IAAI,EAAE,CAAC,CAAA;AAC/D,CAAC","sourcesContent":["/** Being in the room - owner or member. A `viewer` row only remembers a hide. Pure, so it is tested alone. */\nexport const ROOM_ROLES = ['owner', 'member'] as const\n\nexport function isRoomRole(role: string | null | undefined): boolean {\n  return (ROOM_ROLES as readonly string[]).includes(role ?? '')\n}\n"]}

package/dist-server/service/chat-session-participant/participant-lookup.d.ts

@@ -0,0 +1,2 @@
+export { ROOM_ROLES, isRoomRole } from './participant-lookup-roles.js';
+export declare function isSessionParticipant(domainId: string, sessionId: string, userId: string | undefined, tx?: any): Promise<boolean>;

package/dist-server/service/chat-session-participant/participant-lookup.js

@@ -0,0 +1,26 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.isRoomRole = exports.ROOM_ROLES = void 0;
+exports.isSessionParticipant = isSessionParticipant;
+/*
+ * Is this user in the room - owner or member?
+ *
+ * A `viewer` row is not being in the room: `hideAISession` writes one to remember a hide for someone who
+ * never took part. Counting it let a person who hid a private conversation by its id read it afterwards -
+ * the hide became the key. Every gate that asks "is this a participant" asks here.
+ */
+const shell_1 = require("@things-factory/shell");
+const chat_session_participant_js_1 = require("./chat-session-participant.js");
+const participant_lookup_roles_js_1 = require("./participant-lookup-roles.js");
+var participant_lookup_roles_js_2 = require("./participant-lookup-roles.js");
+Object.defineProperty(exports, "ROOM_ROLES", { enumerable: true, get: function () { return participant_lookup_roles_js_2.ROOM_ROLES; } });
+Object.defineProperty(exports, "isRoomRole", { enumerable: true, get: function () { return participant_lookup_roles_js_2.isRoomRole; } });
+async function isSessionParticipant(domainId, sessionId, userId, tx) {
+    if (!userId)
+        return false;
+    const row = await (0, shell_1.getRepository)(chat_session_participant_js_1.ChatSessionParticipant, tx).findOne({
+        where: { domain: { id: domainId }, session: { id: sessionId }, user: { id: userId } }
+    });
+    return (0, participant_lookup_roles_js_1.isRoomRole)(row?.role);
+}
+//# sourceMappingURL=participant-lookup.js.map

package/dist-server/service/chat-session-participant/participant-lookup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"participant-lookup.js","sourceRoot":"","sources":["../../../server/service/chat-session-participant/participant-lookup.ts"],"names":[],"mappings":";;;AAeA,oDAMC;AArBD;;;;;;GAMG;AACH,iDAAqD;AAErD,+EAAsE;AAEtE,+EAA0D;AAE1D,6EAAsE;AAA7D,yHAAA,UAAU,OAAA;AAAE,yHAAA,UAAU,OAAA;AAExB,KAAK,UAAU,oBAAoB,CAAC,QAAgB,EAAE,SAAiB,EAAE,MAA0B,EAAE,EAAQ;IAClH,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAA;IACzB,MAAM,GAAG,GAAG,MAAM,IAAA,qBAAa,EAAC,oDAAsB,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC;QAClE,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAS,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,SAAS,EAAS,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,MAAM,EAAS,EAAE;KAC3G,CAAC,CAAA;IACF,OAAO,IAAA,wCAAU,EAAC,GAAG,EAAE,IAAI,CAAC,CAAA;AAC9B,CAAC","sourcesContent":["/*\n * Is this user in the room - owner or member?\n *\n * A `viewer` row is not being in the room: `hideAISession` writes one to remember a hide for someone who\n * never took part. Counting it let a person who hid a private conversation by its id read it afterwards -\n * the hide became the key. Every gate that asks \"is this a participant\" asks here.\n */\nimport { getRepository } from '@things-factory/shell'\n\nimport { ChatSessionParticipant } from './chat-session-participant.js'\n\nimport { isRoomRole } from './participant-lookup-roles.js'\n\nexport { ROOM_ROLES, isRoomRole } from './participant-lookup-roles.js'\n\nexport async function isSessionParticipant(domainId: string, sessionId: string, userId: string | undefined, tx?: any): Promise<boolean> {\n  if (!userId) return false\n  const row = await getRepository(ChatSessionParticipant, tx).findOne({\n    where: { domain: { id: domainId } as any, session: { id: sessionId } as any, user: { id: userId } as any }\n  })\n  return isRoomRole(row?.role)\n}\n"]}

package/dist-server/service/chat-session-resolver.d.ts

@@ -3,6 +3,7 @@ import { ChatSession } from './chat-session/chat-session.js';
 import { type ProposalOutcome } from './chat-message/proposal-outcome.js';
 import { ChatMessage } from './chat-message/chat-message.js';
 import { ChatSessionParticipant } from './chat-session-participant/chat-session-participant.js';
+import type { FileUpload } from 'graphql-upload/GraphQLUpload.js';
 declare class ChatSessionInboxEntry {
     id?: string;
     name?: string;
@@ -20,6 +21,14 @@ declare class ChatSessionInboxEntry {
     participant: boolean;
     mine: boolean;
     hidden?: boolean;
+    visibility: string;
+    owner: boolean;
+}
+export declare class ChatAttachmentInfo {
+    id: string;
+    name: string;
+    mimetype: string;
+    size: number;
 }
 export declare class ChatSessionResolver {
     chatSession(id: string, context: ResolverContext): Promise<ChatSession | null>;
@@ -29,14 +38,14 @@ export declare class ChatSessionResolver {
      * 집계 쿼리를 쓰지 않는다: 세션의 비정규화된 lastMessageAt 과 내 참여자 lastReadAt 을 **값 비교**한다
      * (5개 DB 드라이버 지원 때문에 group by/MAX 를 목록 경로에 두지 않는다).
      */
-    chatSessionInbox(anchorType: string, anchorId: string, context: ResolverContext, showHidden?: boolean, search?: string, mineOnly?: boolean, limit?: number, offset?: number): Promise<ChatSessionInboxEntry[]>;
+    chatSessionInbox(anchorType: string, anchorId: string, context: ResolverContext, showHidden?: boolean, search?: string, mineOnly?: boolean, limit?: number, offset?: number, kind?: string, participantOnly?: boolean, visibility?: string, unreadOnly?: boolean): Promise<ChatSessionInboxEntry[]>;
     /**
      * 필터를 통과한 **전체 개수** — "더 보기" 가 남았는지, 검색 결과가 몇 건인지.
      *
      * 목록과 같은 요청에 담아 가져가므로 왕복은 늘지 않는다. 개수를 모르면 사용자는 목록의 끝이
      * 페이지의 끝인지 자료의 끝인지 구별할 수 없다.
      */
-    chatSessionInboxTotal(anchorType: string, anchorId: string, context: ResolverContext, showHidden?: boolean, search?: string, mineOnly?: boolean): Promise<number>;
+    chatSessionInboxTotal(anchorType: string, anchorId: string, context: ResolverContext, showHidden?: boolean, search?: string, mineOnly?: boolean, kind?: string, participantOnly?: boolean, visibility?: string, unreadOnly?: boolean): Promise<number>;
     /** 필터 적용(페이지 전) — 목록·개수가 **같은 규칙**을 쓰도록 한 곳에 둔다(어긋나면 "더 보기" 가 거짓말이 된다). */
     private _inboxFiltered;
     /**
@@ -100,6 +109,12 @@ export declare class ChatSessionResolver {
     createAISession(anchorType: string, anchorId: string, name: string | undefined, context: ResolverContext): Promise<ChatSession>;
     renameChatSession(sessionId: string, name: string, context: ResolverContext): Promise<boolean>;
     reportProposalOutcome(sessionId: string, proposalKey: string, outcome: ProposalOutcome, context: ResolverContext): Promise<boolean>;
+    /**
+     * Stores files with a conversation before the turn that carries them (design/ai/shared-dock.md §9).
+     * Passes the write gate - a private conversation takes files from its people only - and the mode's
+     * attachment policy. The size is known only once stored, so a file over the limit is removed and refused.
+     */
+    attachToConversation(sessionId: string, files: FileUpload[], context: ResolverContext, kind?: string): Promise<ChatAttachmentInfo[]>;
     sayToRoom(sessionId: string, content: string, context: ResolverContext): Promise<string | null>;
     appendSessionNote(sessionId: string, content: string, context: ResolverContext): Promise<boolean>;
     appendSessionTurns(sessionId: string, turns: {

package/dist-server/service/chat-session-resolver.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.ChatSessionResolver = void 0;
+exports.ChatSessionResolver = exports.ChatAttachmentInfo = void 0;
 const tslib_1 = require("tslib");
 /**
  * ChatSession lifecycle resolver — start/get/recordDirectPatch/revertPatch + 메시지·패치 페이징 query.
@@ -23,16 +23,18 @@ const reader_gate_js_1 = require("./chat-message/reader-gate.js");
 const session_visibility_js_1 = require("./chat-session/session-visibility.js");
 const mention_invite_js_1 = require("./chat-session-participant/mention-invite.js");
 const invite_notification_js_1 = require("./chat-session-participant/invite-notification.js");
+const participant_lookup_js_1 = require("./chat-session-participant/participant-lookup.js");
+const session_write_gate_js_1 = require("./chat-session/session-write-gate.js");
 /**
  * 초대 알림 — 발송은 호스트의 기전을 그대로 쓴다(중복 구현 금지).
  *
  * 알림이 안 가도 초대 자체는 이미 일어났다. 그래서 실패를 삼키되, 초대를 되돌리지는 않는다 —
  * 참여자 목록이 정본이고 알림은 그것을 알리는 편지다.
  */
-async function notifyInvited(context, invited, inviter) {
+async function notifyInvited(context, invited, inviter, sessionName) {
     if (invited.length === 0)
         return;
-    const payload = (0, invite_notification_js_1.buildInviteNotification)(invited, undefined, inviter);
+    const payload = (0, invite_notification_js_1.buildInviteNotification)(invited, undefined, inviter, sessionName);
     if (!payload)
         return;
     try {
@@ -42,11 +44,25 @@ async function notifyInvited(context, invited, inviter) {
         /* 편지가 못 갔다고 방에 들어온 사실이 취소되지는 않는다. */
     }
 }
+/** Every door that writes into a conversation passes this first (`session-write-gate.ts`). */
+async function writeGate(session, context, tx) {
+    const { domain, user } = context.state;
+    await (0, session_write_gate_js_1.assertMayWriteSession)({
+        session,
+        userId: user?.id,
+        isParticipant: () => (0, participant_lookup_js_1.isSessionParticipant)(domain.id, session.id, user?.id, tx),
+        t: (key, options) => (context.t ? context.t(key, options) : String(options?.defaultValue ?? key))
+    });
+}
 const proposal_outcome_js_1 = require("./chat-message/proposal-outcome.js");
 const session_activity_publish_js_1 = require("./chat-session/session-activity-publish.js");
 const chat_message_js_1 = require("./chat-message/chat-message.js");
 const chat_session_participant_js_1 = require("./chat-session-participant/chat-session-participant.js");
 const chat_message_publish_js_1 = require("./chat-message/chat-message-publish.js");
+const GraphQLUpload_js_1 = tslib_1.__importDefault(require("graphql-upload/GraphQLUpload.js"));
+const registry_js_1 = require("./assistant-mode/registry.js");
+const attachment_policy_js_1 = require("./chat-session/attachment-policy.js");
+const session_attachments_js_1 = require("./chat-session/session-attachments.js");
 let ChatSessionInboxEntry = class ChatSessionInboxEntry {
 };
 tslib_1.__decorate([
@@ -105,11 +121,63 @@ tslib_1.__decorate([
     (0, type_graphql_1.Field)({ nullable: true, description: 'Whether this viewer hid the session from their own list (only returned when showHidden is on).' }),
     tslib_1.__metadata("design:type", Boolean)
 ], ChatSessionInboxEntry.prototype, "hidden", void 0);
+tslib_1.__decorate([
+    (0, type_graphql_1.Field)({ description: "Who may read the session: 'open' (everyone in the domain) or 'private' (participants only)." }),
+    tslib_1.__metadata("design:type", String)
+], ChatSessionInboxEntry.prototype, "visibility", void 0);
+tslib_1.__decorate([
+    (0, type_graphql_1.Field)({ description: 'Whether this viewer is the owner of the session - only the owner may change its visibility.' }),
+    tslib_1.__metadata("design:type", Boolean)
+], ChatSessionInboxEntry.prototype, "owner", void 0);
 ChatSessionInboxEntry = tslib_1.__decorate([
     (0, type_graphql_1.ObjectType)({
         description: 'Session list entry for the inbox — a session plus this viewer\'s unread state. Ordered by recent activity so a user can find where to go back to.'
     })
 ], ChatSessionInboxEntry);
+let ChatAttachmentInfo = class ChatAttachmentInfo {
+};
+exports.ChatAttachmentInfo = ChatAttachmentInfo;
+tslib_1.__decorate([
+    (0, type_graphql_1.Field)(type => type_graphql_1.ID, { description: 'Attachment id.' }),
+    tslib_1.__metadata("design:type", String)
+], ChatAttachmentInfo.prototype, "id", void 0);
+tslib_1.__decorate([
+    (0, type_graphql_1.Field)({ description: 'File name.' }),
+    tslib_1.__metadata("design:type", String)
+], ChatAttachmentInfo.prototype, "name", void 0);
+tslib_1.__decorate([
+    (0, type_graphql_1.Field)({ description: 'MIME type.' }),
+    tslib_1.__metadata("design:type", String)
+], ChatAttachmentInfo.prototype, "mimetype", void 0);
+tslib_1.__decorate([
+    (0, type_graphql_1.Field)(type => type_graphql_1.Int, { description: 'Size in bytes.' }),
+    tslib_1.__metadata("design:type", Number)
+], ChatAttachmentInfo.prototype, "size", void 0);
+exports.ChatAttachmentInfo = ChatAttachmentInfo = tslib_1.__decorate([
+    (0, type_graphql_1.ObjectType)({ description: 'A file stored with a conversation - opened only through the conversation.' })
+], ChatAttachmentInfo);
+/** A refusal said in the reader's words - code first, the sentence from it (ADR-0054). */
+function attachmentRefusalMessage(refusal, context) {
+    const t = (key, options) => (context.t ? context.t(key, options) : String(options?.defaultValue ?? key));
+    switch (refusal.code) {
+        case 'attachments-not-accepted':
+            return t('ai-assistant.text.attachments-not-accepted', { defaultValue: 'this conversation does not take attachments.' });
+        case 'attachment-kind-not-accepted':
+            return t('ai-assistant.text.attachment-kind-not-accepted', {
+                name: refusal.name,
+                kinds: refusal.kinds.join(', '),
+                defaultValue: '{name} cannot be attached here - this conversation takes {kinds}.'
+            });
+        case 'attachment-too-large':
+            return t('ai-assistant.text.attachment-too-large', {
+                name: refusal.name,
+                max: Math.round(refusal.maxBytes / 1024 / 1024),
+                defaultValue: '{name} is larger than {max} MB.'
+            });
+        case 'too-many-attachments':
+            return t('ai-assistant.text.too-many-attachments', { max: refusal.maxFiles, defaultValue: 'at most {max} files can be sent at once.' });
+    }
+}
 let ChatSessionResolver = class ChatSessionResolver {
     async chatSession(id, context) {
         const { domain } = context.state;
@@ -127,8 +195,10 @@ let ChatSessionResolver = class ChatSessionResolver {
      * 집계 쿼리를 쓰지 않는다: 세션의 비정규화된 lastMessageAt 과 내 참여자 lastReadAt 을 **값 비교**한다
      * (5개 DB 드라이버 지원 때문에 group by/MAX 를 목록 경로에 두지 않는다).
      */
-    async chatSessionInbox(anchorType, anchorId, context, showHidden, search, mineOnly, limit, offset) {
-        const filtered = await this._inboxFiltered(anchorType, anchorId, context, { showHidden, search, mineOnly });
+    async chatSessionInbox(anchorType, anchorId, context, showHidden, search, mineOnly, limit, offset, kind, participantOnly, visibility, unreadOnly) {
+        const filtered = await this._inboxFiltered(anchorType, anchorId, context, {
+            showHidden, search, mineOnly, kind, participantOnly, visibility, unreadOnly
+        });
         const from = Math.max(0, offset ?? 0);
         const size = Math.min(Math.max(1, limit ?? 50), 200);
         return filtered.slice(from, from + size);
@@ -139,15 +209,14 @@ let ChatSessionResolver = class ChatSessionResolver {
      * 목록과 같은 요청에 담아 가져가므로 왕복은 늘지 않는다. 개수를 모르면 사용자는 목록의 끝이
      * 페이지의 끝인지 자료의 끝인지 구별할 수 없다.
      */
-    async chatSessionInboxTotal(anchorType, anchorId, context, showHidden, search, mineOnly) {
-        return (await this._inboxFiltered(anchorType, anchorId, context, { showHidden, search, mineOnly })).length;
+    async chatSessionInboxTotal(anchorType, anchorId, context, showHidden, search, mineOnly, kind, participantOnly, visibility, unreadOnly) {
+        return (await this._inboxFiltered(anchorType, anchorId, context, { showHidden, search, mineOnly, kind, participantOnly, visibility, unreadOnly })).length;
     }
     /** 필터 적용(페이지 전) — 목록·개수가 **같은 규칙**을 쓰도록 한 곳에 둔다(어긋나면 "더 보기" 가 거짓말이 된다). */
     async _inboxFiltered(anchorType, anchorId, context, opts) {
         const all = await this._inboxEntries(anchorType, anchorId, context);
         let entries = opts.showHidden ? all : all.filter(e => !e.hidden);
-        if (opts.mineOnly)
-            entries = entries.filter(e => e.mine);
+        entries = (0, session_inbox_js_1.filterInbox)(entries, opts);
         return (0, session_inbox_js_1.searchInbox)(entries, opts.search);
     }
     /**
@@ -399,10 +468,9 @@ let ChatSessionResolver = class ChatSessionResolver {
          * 참여자만. 여기서 막히는 것은 **방**이고, 방에 들어온 뒤 값을 읽는 일은 아래 문 판정이 따로 본다.
          */
         if (session.visibility === 'private') {
-            const part = await (0, shell_1.getRepository)(chat_session_participant_js_1.ChatSessionParticipant).findOne({
-                where: { session: { id: sessionId }, user: { id: user.id }, domain: { id: domain.id } }
-            });
-            if (!(0, session_visibility_js_1.mayReadSession)(session.visibility, !!part))
+            /* A hide-only `viewer` row is not being in the room - it must not open a private conversation. */
+            const part = await (0, participant_lookup_js_1.isSessionParticipant)(domain.id, sessionId, user?.id);
+            if (!(0, session_visibility_js_1.mayReadSession)(session.visibility, part))
                 return [];
         }
         const rows = await (0, shell_1.getRepository)(chat_message_js_1.ChatMessage).find({
@@ -479,6 +547,8 @@ let ChatSessionResolver = class ChatSessionResolver {
         const session = await repo.findOneBy({ id: sessionId, domain: { id: domain.id } });
         if (!session)
             throw new Error(`ChatSession ${sessionId} not found`);
+        /* The board-era rename door had no gate at all - a private conversation's name was anyone's to change. */
+        await writeGate(session, context, tx);
         await repo.update(sessionId, { name: name.trim() || null, updater: user });
         return true;
     }
@@ -487,6 +557,7 @@ let ChatSessionResolver = class ChatSessionResolver {
         const session = await (0, shell_1.getRepository)(chat_session_js_1.ChatSession, tx).findOneBy({ id: sessionId, domain: { id: domain.id } });
         if (!session)
             throw new Error(`ChatSession ${sessionId} not found`);
+        await writeGate(session, context, tx);
         const key = (proposalKey ?? '').trim();
         if (!key)
             return false;
@@ -514,11 +585,36 @@ let ChatSessionResolver = class ChatSessionResolver {
         (0, chat_message_publish_js_1.publishChatMessage)({ domainId: domain.id, sessionId: session.id, message: sysMsg });
         return true;
     }
+    /**
+     * Stores files with a conversation before the turn that carries them (design/ai/shared-dock.md §9).
+     * Passes the write gate - a private conversation takes files from its people only - and the mode's
+     * attachment policy. The size is known only once stored, so a file over the limit is removed and refused.
+     */
+    async attachToConversation(sessionId, files, context, kind) {
+        const { domain, tx } = context.state;
+        const session = await (0, shell_1.getRepository)(chat_session_js_1.ChatSession, tx).findOneBy({ id: sessionId, domain: { id: domain.id } });
+        if (!session)
+            throw new Error(`ChatSession ${sessionId} not found`);
+        await writeGate(session, context, tx);
+        const policy = (0, registry_js_1.getAssistantMode)(session.kind || kind || '')?.attachments;
+        const uploads = await Promise.all(files);
+        const before = (0, attachment_policy_js_1.refuseAttachments)(policy, uploads.map(upload => ({ name: upload.filename, type: upload.mimetype })));
+        if (before)
+            throw new Error(attachmentRefusalMessage(before, context));
+        const saved = await (0, session_attachments_js_1.saveChatAttachments)(session.id, uploads, context);
+        const after = (0, attachment_policy_js_1.refuseAttachments)(policy, saved.map(file => ({ name: file.name, type: file.mimetype, size: file.size })));
+        if (after) {
+            await (0, session_attachments_js_1.removeAttachmentRows)(saved.map(file => file.id));
+            throw new Error(attachmentRefusalMessage(after, context));
+        }
+        return saved;
+    }
     async sayToRoom(sessionId, content, context) {
         const { domain, user, tx } = context.state;
         const session = await (0, shell_1.getRepository)(chat_session_js_1.ChatSession, tx).findOneBy({ id: sessionId, domain: { id: domain.id } });
         if (!session)
             throw new Error(`ChatSession ${sessionId} not found`);
+        await writeGate(session, context, tx);
         const body = (0, room_message_js_1.roomMessageBody)(content);
         if (!body)
             return null;
@@ -574,6 +670,7 @@ let ChatSessionResolver = class ChatSessionResolver {
         const session = await (0, shell_1.getRepository)(chat_session_js_1.ChatSession, tx).findOneBy({ id: sessionId, domain: { id: domain.id } });
         if (!session)
             throw new Error(`ChatSession ${sessionId} not found`);
+        await writeGate(session, context, tx);
         /* 프롬프트가 한 기록으로 폭증하지 않도록 자른다 — 맥락 전달이 목적이고 전문 보존이 아니다. */
         const body = (content ?? '').trim().slice(0, 4000);
         if (!body)
@@ -614,6 +711,7 @@ let ChatSessionResolver = class ChatSessionResolver {
         const session = await (0, shell_1.getRepository)(chat_session_js_1.ChatSession, tx).findOneBy({ id: sessionId, domain: { id: domain.id } });
         if (!session)
             throw new Error(`ChatSession ${sessionId} not found`);
+        await writeGate(session, context, tx);
         /* 옮겨온 대화는 **그 대화의 발언 그대로** 들어간다 — 한 덩어리 기록으로 뭉치면 사람이 읽을 수 없고
          * (화면 하나를 잡아먹는 이탤릭 덩어리), 마크다운도 죽는다. 대신 개수·길이는 제한한다: 맥락 전달이
          * 목적이고 전문 보존이 아니다. */
@@ -728,8 +826,12 @@ tslib_1.__decorate([
     tslib_1.__param(5, (0, type_graphql_1.Arg)('mineOnly', { nullable: true })),
     tslib_1.__param(6, (0, type_graphql_1.Arg)('limit', () => type_graphql_1.Int, { nullable: true })),
     tslib_1.__param(7, (0, type_graphql_1.Arg)('offset', () => type_graphql_1.Int, { nullable: true })),
+    tslib_1.__param(8, (0, type_graphql_1.Arg)('kind', { nullable: true, description: 'Only this conversation kind (mode).' })),
+    tslib_1.__param(9, (0, type_graphql_1.Arg)('participantOnly', { nullable: true, description: 'Only conversations the caller is in.' })),
+    tslib_1.__param(10, (0, type_graphql_1.Arg)('visibility', { nullable: true, description: "Only 'open' or only 'private'." })),
+    tslib_1.__param(11, (0, type_graphql_1.Arg)('unreadOnly', { nullable: true, description: 'Only conversations with unread activity.' })),
     tslib_1.__metadata("design:type", Function),
-    tslib_1.__metadata("design:paramtypes", [String, String, Object, Boolean, String, Boolean, Number, Number]),
+    tslib_1.__metadata("design:paramtypes", [String, String, Object, Boolean, String, Boolean, Number, Number, String, Boolean, String, Boolean]),
     tslib_1.__metadata("design:returntype", Promise)
 ], ChatSessionResolver.prototype, "chatSessionInbox", null);
 tslib_1.__decorate([
@@ -743,8 +845,12 @@ tslib_1.__decorate([
     tslib_1.__param(3, (0, type_graphql_1.Arg)('showHidden', { nullable: true })),
     tslib_1.__param(4, (0, type_graphql_1.Arg)('search', { nullable: true })),
     tslib_1.__param(5, (0, type_graphql_1.Arg)('mineOnly', { nullable: true })),
+    tslib_1.__param(6, (0, type_graphql_1.Arg)('kind', { nullable: true, description: 'Only this conversation kind (mode).' })),
+    tslib_1.__param(7, (0, type_graphql_1.Arg)('participantOnly', { nullable: true, description: 'Only conversations the caller is in.' })),
+    tslib_1.__param(8, (0, type_graphql_1.Arg)('visibility', { nullable: true, description: "Only 'open' or only 'private'." })),
+    tslib_1.__param(9, (0, type_graphql_1.Arg)('unreadOnly', { nullable: true, description: 'Only conversations with unread activity.' })),
     tslib_1.__metadata("design:type", Function),
-    tslib_1.__metadata("design:paramtypes", [String, String, Object, Boolean, String, Boolean]),
+    tslib_1.__metadata("design:paramtypes", [String, String, Object, Boolean, String, Boolean, String, Boolean, String, Boolean]),
     tslib_1.__metadata("design:returntype", Promise)
 ], ChatSessionResolver.prototype, "chatSessionInboxTotal", null);
 tslib_1.__decorate([
@@ -916,6 +1022,20 @@ tslib_1.__decorate([
     tslib_1.__metadata("design:paramtypes", [String, String, Object, Object]),
     tslib_1.__metadata("design:returntype", Promise)
 ], ChatSessionResolver.prototype, "reportProposalOutcome", null);
+tslib_1.__decorate([
+    (0, type_graphql_1.Directive)('@transaction'),
+    (0, type_graphql_1.Mutation)(() => [ChatAttachmentInfo], {
+        description: "Store files with a conversation, to be sent with the next turn (assistantChat attachmentIds). Private conversations take files from their participants only; what is accepted is the conversation mode's attachment policy."
+    }),
+    (0, type_graphql_1.Directive)('@privilege(category: "ai-assistant", privilege: "mutation", domainOwnerGranted: true)'),
+    tslib_1.__param(0, (0, type_graphql_1.Arg)('sessionId')),
+    tslib_1.__param(1, (0, type_graphql_1.Arg)('files', () => [GraphQLUpload_js_1.default])),
+    tslib_1.__param(2, (0, type_graphql_1.Ctx)()),
+    tslib_1.__param(3, (0, type_graphql_1.Arg)('kind', { nullable: true, description: 'The conversation kind, for a session not stamped with one yet.' })),
+    tslib_1.__metadata("design:type", Function),
+    tslib_1.__metadata("design:paramtypes", [String, Array, Object, String]),
+    tslib_1.__metadata("design:returntype", Promise)
+], ChatSessionResolver.prototype, "attachToConversation", null);
 tslib_1.__decorate([
     (0, type_graphql_1.Directive)('@transaction'),
     (0, type_graphql_1.Mutation)(() => String, {