@wildo-ai/saas-models 1.1.4 → 1.1.6

package/dist/esm/inbound/conversation-threads.shared.resources-config.schemas.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"conversation-threads.shared.resources-config.schemas.js","sourceRoot":"","sources":["../../../../src/inbound/conversation-threads.shared.resources-config.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,kCAAkC,EAAE,MAAM,gDAAgD,CAAC;AAC7I,OAAO,EAAE,0BAA0B,EAAE,4BAA4B,EAA6B,MAAM,uCAAuC,CAAC;AAC5I,OAAO,EAAE,0CAA0C,EAAE,MAAM,8CAA8C,CAAC;AAC1G,OAAO,EAAE,wBAAwB,EAAE,MAAM,8CAA8C,CAAC;AACxF,OAAO,EAAE,iBAAiB,EAAE,MAAM,uCAAuC,CAAC;AAC1E,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,iDAAiD,CAAC;AACjG,OAAO,EAAE,oBAAoB,EAAE,uBAAuB,EAAE,wBAAwB,EAAE,MAAM,wDAAwD,CAAC;AACjJ,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,yDAAyD,CAAC;AAClH,OAAO,EACL,4BAA4B,EAC5B,yBAAyB,EACzB,4BAA4B,EAC5B,wBAAwB,EACxB,wBAAwB,EACxB,8BAA8B,GAC/B,MAAM,uCAAuC,CAAC;AAE/C;;;;GAIG;AACH,MAAM,CAAC,MAAM,0CAA0C,GAAG;IACxD,aAAa,EAAE,6BAA6B;IAC5C,WAAW,EAAE,2BAA2B;CAChC,CAAC;AAWX,MAAM,eAAe,GAAiC;IACpD,qBAAqB,CAAC,IAAI;IAC1B,qBAAqB,CAAC,IAAI;IAC1B,qBAAqB,CAAC,MAAM;IAC5B,qBAAqB,CAAC,MAAM;IAC5B,qBAAqB,CAAC,WAAW;IACjC,qBAAqB,CAAC,MAAM;IAC5B,qBAAqB,CAAC,WAAW;CAClC,CAAC;AAEF;;;GAGG;AACH,MAAM,WAAW,GAAG;IAClB,IAAI,EAAE,wBAAwB,CAAC,OAAO;IACtC,IAAI,EAAE,wBAAwB,CAAC,OAAO;IACtC,MAAM,EAAE,wBAAwB,CAAC,OAAO;IACxC,MAAM,EAAE,wBAAwB,CAAC,OAAO;IACxC,UAAU,EAAE,wBAAwB,CAAC,OAAO;CAC7C,CAAC;AAEF,yGAAyG;AACzG,MAAM,MAAM,GAAG,EAAE,IAAI,EAAE,oBAAoB,CAAC,wBAAwB,EAAE,CAAC;AAEvE,8GAA8G;AAC9G,MAAM,YAAY,GAAG,EAAE,IAAI,EAAE,uBAAuB,CAAC,YAAY,EAAE,CAAC;AAEpE;;;;GAIG;AAEH,MAAM,CAAC,MAAM,8DAA8D,GAAG,CAAC,sBAA8C,EAAE,EAAE,CAC/H,0CAA0C,CAAqG;IAC7I,UAAU,EAAE,wBAAwB;IACpC,kBAAkB,EAAE,gBAAgB,CAAC,oBAAoB;IACzD,uBAAuB,EAAE,kCAAkC,CAAC,gBAAgB,CAAC,oBAAoB,CAAC;IAClG,qBAAqB,EAAE,sBAAsB;IAC7C,gBAAgB,EAAE,IAAI;IACtB,kBAAkB,EAAE,WAAW;IAC/B,eAAe,EAAE,MAAM;IACvB;;;;;;OAMG;IACH,gBAAgB,EAAE;QAChB,cAAc,EAAE,kBAAkB,CAAC,aAAa;QAChD,UAAU,EAAE,mBAAmB,CAAC,aAAa;QAC7C,gBAAgB,EAAE,UAAU;KAC7B;IACD,iBAAiB,EAAE,YAAY;IAC/B,cAAc,EAAE,eAAe;IAC/B,uBAAuB,EAAE;QACvB,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,WAAW,EAAE,4BAA4B,CAAC,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,cAAc,CAAC,UAAU,CAAC,EAAE,SAAS,EAAE,0BAA0B,CAAC,GAAG,EAAE,CAAC,EAAE;QACpM;;;;WAIG;QACH,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE;YAC5B,QAAQ,EAAE,CAAC;oBACT,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,UAAU,CAAC;oBAClC,SAAS,EAAE,0BAA0B,CAAC,GAAG;oBACzC,YAAY,EAAE;wBACZ,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,wBAAwB,CAAC;wBACxC,uGAAuG;wBACvG,mGAAmG;wBACnG,CAAC,0CAA0C,CAAC,aAAa,CAAC,EAAE,iBAAiB,CAAC,KAAK,CAAC,YAAY;wBAChG,CAAC,0CAA0C,CAAC,WAAW,CAAC,EAAE,iBAAiB,CAAC,KAAK,CAAC,UAAU;qBAC7F;oBACD,UAAU,EAAE,CAAC,eAAe,EAAE,WAAW,CAAC;iBAC3C,CAAC;SACH;QACD,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,WAAW,EAAE,4BAA4B,CAAC,eAAe,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC,EAAE,SAAS,EAAE,0BAA0B,CAAC,GAAG,EAAE,CAAC,EAAE;QACxN,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,WAAW,EAAE,4BAA4B,CAAC,eAAe,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC,EAAE,SAAS,EAAE,0BAA0B,CAAC,GAAG,EAAE,CAAC,EAAE;QACxN,CAAC,qBAAqB,CAAC,WAAW,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,WAAW,EAAE,4BAA4B,CAAC,aAAa,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC,EAAE,SAAS,EAAE,0BAA0B,CAAC,QAAQ,EAAE,CAAC,EAAE;QAChO,mGAAmG;QACnG,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,WAAW,EAAE,4BAA4B,CAAC,aAAa,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,SAAS,EAAE,0BAA0B,CAAC,IAAI,EAAE,CAAC,EAAE;QACnL,CAAC,qBAAqB,CAAC,WAAW,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,WAAW,EAAE,4BAA4B,CAAC,aAAa,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,SAAS,EAAE,0BAA0B,CAAC,IAAI,EAAE,CAAC,EAAE;QACxL;;;WAGG;QACH,CAAC,8BAA8B,CAAC,KAAK,CAAC,EAAE;YACtC,QAAQ,EAAE,CAAC;oBACT,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC;oBACjC,SAAS,EAAE,0BAA0B,CAAC,MAAM;oBAC5C,qBAAqB,EAAE,qBAAqB,CAAC,MAAM;oBACnD,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;oBACxB,gBAAgB,EAAE,CAAC,EAAE,aAAa,EAAE,EAAE,EAAE,CAAC,aAAa,CAAC,MAAM,KAAK,wBAAwB,CAAC,IAAI;iBAChG,CAAC;SACH;KACF;CACF,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,+DAA+D,GAAG,CAAC,sBAA8C,EAAE,EAAE,CAChI,0CAA0C,CAAsF;IAC9H,UAAU,EAAE,yBAAyB;IACrC,kBAAkB,EAAE,gBAAgB,CAAC,qBAAqB;IAC1D,uBAAuB,EAAE,kCAAkC,CAAC,gBAAgB,CAAC,qBAAqB,CAAC;IACnG,qBAAqB,EAAE,sBAAsB;IAC7C,gBAAgB,EAAE,IAAI;IACtB,kBAAkB,EAAE,WAAW;IAC/B;;;;;;;;;OASG;IACH,eAAe,EAAE;QACf,IAAI,EAAE,oBAAoB,CAAC,wBAAwB;QACnD,kBAAkB,EAAE;YAClB,MAAM,EAAE,wBAAwB,CAAC,gBAAgB;YACjD,SAAS,EAAE,4NAA4N;SACxO;KACF;IACD,gBAAgB,EAAE;QAChB,cAAc,EAAE,kBAAkB,CAAC,gBAAgB;QACnD,UAAU,EAAE,mBAAmB,CAAC,oBAAoB;KACrD;IACD,iBAAiB,EAAE,YAAY;IAC/B,cAAc,EAAE,eAAe;IAC/B,uBAAuB,EAAE;QACvB,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,WAAW,EAAE,4BAA4B,CAAC,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,cAAc,CAAC,UAAU,CAAC,EAAE,SAAS,EAAE,0BAA0B,CAAC,GAAG,EAAE,CAAC,EAAE;QACpM,sIAAsI;QACtI,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE;YAC5B,QAAQ,EAAE,CAAC;oBACT,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,UAAU,CAAC;oBAClC,SAAS,EAAE,0BAA0B,CAAC,GAAG;oBACzC,YAAY,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,4BAA4B,CAAC,EAAE;oBACvF,UAAU,EAAE,CAAC,YAAY,CAAC;iBAC3B,CAAC;SACH;QACD,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,WAAW,EAAE,4BAA4B,CAAC,eAAe,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC,EAAE,SAAS,EAAE,0BAA0B,CAAC,GAAG,EAAE,CAAC,EAAE;QACxN,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,WAAW,EAAE,4BAA4B,CAAC,eAAe,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC,EAAE,SAAS,EAAE,0BAA0B,CAAC,GAAG,EAAE,CAAC,EAAE;QACxN,CAAC,qBAAqB,CAAC,WAAW,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,WAAW,EAAE,4BAA4B,CAAC,aAAa,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC,EAAE,SAAS,EAAE,0BAA0B,CAAC,QAAQ,EAAE,CAAC,EAAE;QAChO,mGAAmG;QACnG,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,WAAW,EAAE,4BAA4B,CAAC,aAAa,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,SAAS,EAAE,0BAA0B,CAAC,IAAI,EAAE,CAAC,EAAE;QACnL,CAAC,qBAAqB,CAAC,WAAW,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,WAAW,EAAE,4BAA4B,CAAC,aAAa,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,SAAS,EAAE,0BAA0B,CAAC,IAAI,EAAE,CAAC,EAAE;KACzL;CACF,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,kEAAkE,GAAG,CAAC,sBAA8C,EAAE,EAAE,CACnI,0CAA0C,CAAyF;IACjI,UAAU,EAAE,4BAA4B;IACxC,kBAAkB,EAAE,gBAAgB,CAAC,yBAAyB;IAC9D,uBAAuB,EAAE,kCAAkC,CAAC,gBAAgB,CAAC,yBAAyB,CAAC;IACvG,qBAAqB,EAAE,sBAAsB;IAC7C,gBAAgB,EAAE,IAAI;IACtB,kBAAkB,EAAE,WAAW;IAC/B,eAAe,EAAE,MAAM;IACvB,iBAAiB,EAAE,YAAY;IAC/B,cAAc,EAAE,eAAe;IAC/B,uBAAuB,EAAE;QACvB,kGAAkG;QAClG,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,WAAW,EAAE,4BAA4B,CAAC,aAAa,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC,EAAE,SAAS,EAAE,0BAA0B,CAAC,GAAG,EAAE,CAAC,EAAE;QACpN,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,WAAW,EAAE,4BAA4B,CAAC,aAAa,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC,EAAE,SAAS,EAAE,0BAA0B,CAAC,GAAG,EAAE,CAAC,EAAE;QACpN,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,WAAW,EAAE,4BAA4B,CAAC,eAAe,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC,EAAE,SAAS,EAAE,0BAA0B,CAAC,GAAG,EAAE,CAAC,EAAE;QACxN,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,WAAW,EAAE,4BAA4B,CAAC,eAAe,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC,EAAE,SAAS,EAAE,0BAA0B,CAAC,GAAG,EAAE,CAAC,EAAE;QACxN,CAAC,qBAAqB,CAAC,WAAW,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,WAAW,EAAE,4BAA4B,CAAC,aAAa,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC,EAAE,SAAS,EAAE,0BAA0B,CAAC,QAAQ,EAAE,CAAC,EAAE;QAChO,0FAA0F;QAC1F,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,WAAW,EAAE,4BAA4B,CAAC,aAAa,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,SAAS,EAAE,0BAA0B,CAAC,IAAI,EAAE,CAAC,EAAE;QACnL,CAAC,qBAAqB,CAAC,WAAW,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,WAAW,EAAE,4BAA4B,CAAC,aAAa,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,SAAS,EAAE,0BAA0B,CAAC,IAAI,EAAE,CAAC,EAAE;KACzL;CACF,CAAC,CAAC","sourcesContent":["/**\n * Conversation threads, messages and reply tokens — resource configurations (#1630).\n *\n * The engine writes all three: the channel intake opens threads and records received messages,\n * `ctx.reply` records replies, the reply worker settles them, and the token service issues and revokes\n * tokens. None of those writes is an HTTP surface (CREATE / UPDATE are REPOSITORY_ONLY), so no caller can\n * backdate a closure or invent a message.\n *\n * What a person may do: members of the organization READ its threads and messages (the correspondence of\n * the organization's own cases), and an organization administrator CLOSES a thread. Tokens have no API at\n * all — a reply address is a bearer secret, and the list of them is nobody's business but the engine's.\n *\n * DELETE / DELETE_MANY / UPDATE_MANY are INTERNAL_CALL: the retention sweep deletes expired rows through the\n * service layer (a closed thread's tokens go with it), and the erasure writer scrubs through UPDATE_MANY.\n * Route-less, so reachable by no request.\n */\nimport { z } from 'zod';\n\nimport { CoreResourceOperation, CoreResourceType, coreResourceShared_FieldIdentifier } from '../resources/resources.shared.core.definitions';\nimport { ResourceOperationRiskLevel, ResourceOperationVariantType, type ResourceRelationship } from '../resources/resources.shared.schemas';\nimport { createResourceConfiguration_Initialization } from '../resources/resources-config.shared.factory';\nimport { ResourceSystemAccessMode } from '../resources/resources-config.shared.schemas';\nimport { WorkUnitRefSchema } from '../resources/work-unit.shared.schemas';\nimport { CORE_APP_ROLES, CORE_ORG_ROLES } from '../security/authorizations/roles.shared.schemas';\nimport { ErasureRetentionMode, ResourceDataSubjectKind, StatutoryRetentionGround } from '../compliance/privacy/impersonalization.shared.schemas';\nimport { DataRetentionClass, RetentionStartPoint } from '../compliance/privacy/retention-schedule.shared.schemas';\nimport {\n  ConversationMessageDirection,\n  ConversationMessageSchema,\n  ConversationReplyTokenSchema,\n  ConversationThreadSchema,\n  ConversationThreadStatus,\n  ConversationThreads_Operations,\n} from './conversation-threads.shared.schemas';\n\n/**\n * The two `conversationThreads` LIST filter keys that find the conversations linked to one record (#1630): dotted\n * paths into `linkedResource`. One source for the backend's `filterFields` and for the frontend embed that pins them\n * (`EmbedLinkedConversations`), so the two cannot disagree on a spelling.\n */\nexport const CONVERSATION_THREAD_LINKED_RESOURCE_FILTER = {\n  RESOURCE_TYPE: 'linkedResource.resourceType',\n  RESOURCE_ID: 'linkedResource.resourceId',\n} as const;\n\ntype ConversationCoreOperations =\n  | CoreResourceOperation.READ\n  | CoreResourceOperation.LIST\n  | CoreResourceOperation.CREATE\n  | CoreResourceOperation.UPDATE\n  | CoreResourceOperation.UPDATE_MANY\n  | CoreResourceOperation.DELETE\n  | CoreResourceOperation.DELETE_MANY;\n\nconst CORE_OPERATIONS: ConversationCoreOperations[] = [\n  CoreResourceOperation.READ,\n  CoreResourceOperation.LIST,\n  CoreResourceOperation.CREATE,\n  CoreResourceOperation.UPDATE,\n  CoreResourceOperation.UPDATE_MANY,\n  CoreResourceOperation.DELETE,\n  CoreResourceOperation.DELETE_MANY,\n];\n\n/**\n * The engine reads threads and tokens on a system context to correlate a message BEFORE any handler\n * authority exists, and the intake, reply worker and token service write them as the engine.\n */\nconst engineOwned = {\n  read: ResourceSystemAccessMode.ALLOWED,\n  list: ResourceSystemAccessMode.ALLOWED,\n  create: ResourceSystemAccessMode.ALLOWED,\n  update: ResourceSystemAccessMode.ALLOWED,\n  updateMany: ResourceSystemAccessMode.ALLOWED,\n};\n\n/** Retained on erasure, scrubbed of the addresses and the text; the thread's structure is the record. */\nconst RETAIN = { mode: ErasureRetentionMode.RETAIN_AND_IMPERSONALIZE };\n\n/** The counterpart is a person with no account, or another organization: no login is reachable from a row. */\nconst NO_PRINCIPAL = { kind: ResourceDataSubjectKind.NO_PRINCIPAL };\n\n/*\n * The operation configurations below are written out per resource rather than shared through a helper:\n * contextual typing needs each variant literal in place, and a shared constant widens `variantType` to the\n * whole enum, which the builder refuses.\n */\n\nexport const conversationThreadsResourceConfiguration_InitializationFactory = (resourcesRelationships: ResourceRelationship[]) =>\n  createResourceConfiguration_Initialization<typeof ConversationThreads_Operations, ConversationCoreOperations, typeof ConversationThreadSchema>({\n    mainSchema: ConversationThreadSchema,\n    resourceIdentifier: CoreResourceType.CONVERSATION_THREADS,\n    resourceFieldIdentifier: coreResourceShared_FieldIdentifier[CoreResourceType.CONVERSATION_THREADS],\n    resourceRelationships: resourcesRelationships,\n    isSystemResource: true,\n    systemAccessPolicy: engineOwned,\n    retentionPolicy: RETAIN,\n    /*\n     * A thread is CORRELATION, not the record (#1613, #1635): its messages are the business letters a\n     * statute keeps, and each carries its own statutory clock. So a thread is kept while the exchange may\n     * continue and for the application's `RESOURCE_DATA` period after it CLOSES — an open thread never\n     * expires — and deleting it takes its reply tokens but never its messages (the edge to them is a\n     * REFERENCE), which stand on their own until their statutory period ends.\n     */\n    retentionBinding: {\n      retentionClass: DataRetentionClass.RESOURCE_DATA,\n      startPoint: RetentionStartPoint.CLOSURE_EVENT,\n      closureFieldName: 'closedAt',\n    },\n    dataSubjectPolicy: NO_PRINCIPAL,\n    coreOperations: CORE_OPERATIONS,\n    operationsConfiguration: {\n      [CoreResourceOperation.READ]: { variants: [{ variantType: ResourceOperationVariantType.API_CALL, isDefault: true, roles: [CORE_ORG_ROLES.ORG_MEMBER], riskLevel: ResourceOperationRiskLevel.LOW }] },\n      /*\n       * `linkedResource.*` lets a record's page find the conversations linked to it. Dotted keys into the stored\n       * object rather than a copy of the link in two top-level columns: one source for the link, and both\n       * adapters filter on a path (MongoDB natively, PostgreSQL through the jsonb root the object is stored in).\n       */\n      [CoreResourceOperation.LIST]: {\n        variants: [{\n          variantType: ResourceOperationVariantType.API_CALL,\n          isDefault: true,\n          roles: [CORE_ORG_ROLES.ORG_MEMBER],\n          riskLevel: ResourceOperationRiskLevel.LOW,\n          filterFields: {\n            status: z.enum(ConversationThreadStatus),\n            // The link's own field schemas, not bare strings: a filter on a field is that field, so it carries the\n            // field's limits and its description into every LIST variant's published query parameters (#1625).\n            [CONVERSATION_THREAD_LINKED_RESOURCE_FILTER.RESOURCE_TYPE]: WorkUnitRefSchema.shape.resourceType,\n            [CONVERSATION_THREAD_LINKED_RESOURCE_FILTER.RESOURCE_ID]: WorkUnitRefSchema.shape.resourceId,\n          },\n          sortFields: ['lastMessageAt', 'createdAt'],\n        }],\n      },\n      [CoreResourceOperation.CREATE]: { variants: [{ variantType: ResourceOperationVariantType.REPOSITORY_ONLY, isDefault: true, roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN], riskLevel: ResourceOperationRiskLevel.LOW }] },\n      [CoreResourceOperation.UPDATE]: { variants: [{ variantType: ResourceOperationVariantType.REPOSITORY_ONLY, isDefault: true, roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN], riskLevel: ResourceOperationRiskLevel.LOW }] },\n      [CoreResourceOperation.UPDATE_MANY]: { variants: [{ variantType: ResourceOperationVariantType.INTERNAL_CALL, isDefault: true, roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN], riskLevel: ResourceOperationRiskLevel.CRITICAL }] },\n      // HIGH: deleting correspondence removes evidence of what a client sent and what the firm answered.\n      [CoreResourceOperation.DELETE]: { variants: [{ variantType: ResourceOperationVariantType.INTERNAL_CALL, isDefault: true, roles: [], riskLevel: ResourceOperationRiskLevel.HIGH }] },\n      [CoreResourceOperation.DELETE_MANY]: { variants: [{ variantType: ResourceOperationVariantType.INTERNAL_CALL, isDefault: true, roles: [], riskLevel: ResourceOperationRiskLevel.HIGH }] },\n      /**\n       * Close the exchange. Revokes every live reply token of the thread (a reply to it no longer binds),\n       * and starts the retention clock. Empty request: the implementation owns the transition.\n       */\n      [ConversationThreads_Operations.CLOSE]: {\n        variants: [{\n          variantType: ResourceOperationVariantType.API_CALL,\n          isDefault: true,\n          roles: [CORE_ORG_ROLES.ORG_ADMIN],\n          riskLevel: ResourceOperationRiskLevel.MEDIUM,\n          resourceOperationLike: CoreResourceOperation.UPDATE,\n          requestDto: z.object({}),\n          enabledCondition: ({ currentObject }) => currentObject.status === ConversationThreadStatus.OPEN,\n        }],\n      },\n    },\n  });\n\nexport const conversationMessagesResourceConfiguration_InitializationFactory = (resourcesRelationships: ResourceRelationship[]) =>\n  createResourceConfiguration_Initialization<Record<string, never>, ConversationCoreOperations, typeof ConversationMessageSchema>({\n    mainSchema: ConversationMessageSchema,\n    resourceIdentifier: CoreResourceType.CONVERSATION_MESSAGES,\n    resourceFieldIdentifier: coreResourceShared_FieldIdentifier[CoreResourceType.CONVERSATION_MESSAGES],\n    resourceRelationships: resourcesRelationships,\n    isSystemResource: true,\n    systemAccessPolicy: engineOwned,\n    /*\n     * Every message — received or sent — is business correspondence, which commercial and tax statutes\n     * require kept for a period counted from the end of the calendar year it was received or sent. So an\n     * erasure RESTRICTS a message inside that period instead of scrubbing it (#1635), and the sweep deletes\n     * it once the application's `BUSINESS_RECORDS` period has passed.\n     *\n     * `RETAIN_AND_IMPERSONALIZE`, not `RETAIN_ONLY`: `RETAIN_ONLY` declares that the row holds no personal\n     * data of its own, and a message holds addresses, a subject and a preview. The mode states what the row\n     * IS; the statutory ground decides that, inside its period, erasure restricts rather than scrubs.\n     */\n    retentionPolicy: {\n      mode: ErasureRetentionMode.RETAIN_AND_IMPERSONALIZE,\n      statutoryRetention: {\n        ground: StatutoryRetentionGround.LEGAL_OBLIGATION,\n        rationale: 'Business correspondence received and sent: HGB §257(1) no. 2-3 and AO §147(1) no. 2-3 (six years, counted from the end of the calendar year, §257(5) / §147(4)); Code de commerce L123-22 where it is accounting evidence.',\n      },\n    },\n    retentionBinding: {\n      retentionClass: DataRetentionClass.BUSINESS_RECORDS,\n      startPoint: RetentionStartPoint.END_OF_CALENDAR_YEAR,\n    },\n    dataSubjectPolicy: NO_PRINCIPAL,\n    coreOperations: CORE_OPERATIONS,\n    operationsConfiguration: {\n      [CoreResourceOperation.READ]: { variants: [{ variantType: ResourceOperationVariantType.API_CALL, isDefault: true, roles: [CORE_ORG_ROLES.ORG_MEMBER], riskLevel: ResourceOperationRiskLevel.LOW }] },\n      // A thread's messages, newest first by default or sorted by `occurredAt`; `direction` tells what was received from what was answered.\n      [CoreResourceOperation.LIST]: {\n        variants: [{\n          variantType: ResourceOperationVariantType.API_CALL,\n          isDefault: true,\n          roles: [CORE_ORG_ROLES.ORG_MEMBER],\n          riskLevel: ResourceOperationRiskLevel.LOW,\n          filterFields: { threadId: z.string(), direction: z.enum(ConversationMessageDirection) },\n          sortFields: ['occurredAt'],\n        }],\n      },\n      [CoreResourceOperation.CREATE]: { variants: [{ variantType: ResourceOperationVariantType.REPOSITORY_ONLY, isDefault: true, roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN], riskLevel: ResourceOperationRiskLevel.LOW }] },\n      [CoreResourceOperation.UPDATE]: { variants: [{ variantType: ResourceOperationVariantType.REPOSITORY_ONLY, isDefault: true, roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN], riskLevel: ResourceOperationRiskLevel.LOW }] },\n      [CoreResourceOperation.UPDATE_MANY]: { variants: [{ variantType: ResourceOperationVariantType.INTERNAL_CALL, isDefault: true, roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN], riskLevel: ResourceOperationRiskLevel.CRITICAL }] },\n      // HIGH: deleting correspondence removes evidence of what a client sent and what the firm answered.\n      [CoreResourceOperation.DELETE]: { variants: [{ variantType: ResourceOperationVariantType.INTERNAL_CALL, isDefault: true, roles: [], riskLevel: ResourceOperationRiskLevel.HIGH }] },\n      [CoreResourceOperation.DELETE_MANY]: { variants: [{ variantType: ResourceOperationVariantType.INTERNAL_CALL, isDefault: true, roles: [], riskLevel: ResourceOperationRiskLevel.HIGH }] },\n    },\n  });\n\nexport const conversationReplyTokensResourceConfiguration_InitializationFactory = (resourcesRelationships: ResourceRelationship[]) =>\n  createResourceConfiguration_Initialization<Record<string, never>, ConversationCoreOperations, typeof ConversationReplyTokenSchema>({\n    mainSchema: ConversationReplyTokenSchema,\n    resourceIdentifier: CoreResourceType.CONVERSATION_REPLY_TOKENS,\n    resourceFieldIdentifier: coreResourceShared_FieldIdentifier[CoreResourceType.CONVERSATION_REPLY_TOKENS],\n    resourceRelationships: resourcesRelationships,\n    isSystemResource: true,\n    systemAccessPolicy: engineOwned,\n    retentionPolicy: RETAIN,\n    dataSubjectPolicy: NO_PRINCIPAL,\n    coreOperations: CORE_OPERATIONS,\n    operationsConfiguration: {\n      // No API read: a reply address is a bearer secret, and knowing which exist is the engine's alone.\n      [CoreResourceOperation.READ]: { variants: [{ variantType: ResourceOperationVariantType.INTERNAL_CALL, isDefault: true, roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN], riskLevel: ResourceOperationRiskLevel.LOW }] },\n      [CoreResourceOperation.LIST]: { variants: [{ variantType: ResourceOperationVariantType.INTERNAL_CALL, isDefault: true, roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN], riskLevel: ResourceOperationRiskLevel.LOW }] },\n      [CoreResourceOperation.CREATE]: { variants: [{ variantType: ResourceOperationVariantType.REPOSITORY_ONLY, isDefault: true, roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN], riskLevel: ResourceOperationRiskLevel.LOW }] },\n      [CoreResourceOperation.UPDATE]: { variants: [{ variantType: ResourceOperationVariantType.REPOSITORY_ONLY, isDefault: true, roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN], riskLevel: ResourceOperationRiskLevel.LOW }] },\n      [CoreResourceOperation.UPDATE_MANY]: { variants: [{ variantType: ResourceOperationVariantType.INTERNAL_CALL, isDefault: true, roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN], riskLevel: ResourceOperationRiskLevel.CRITICAL }] },\n      // Route-less: a token leaves with its thread (the COMPOSITION cascade), never on its own.\n      [CoreResourceOperation.DELETE]: { variants: [{ variantType: ResourceOperationVariantType.INTERNAL_CALL, isDefault: true, roles: [], riskLevel: ResourceOperationRiskLevel.HIGH }] },\n      [CoreResourceOperation.DELETE_MANY]: { variants: [{ variantType: ResourceOperationVariantType.INTERNAL_CALL, isDefault: true, roles: [], riskLevel: ResourceOperationRiskLevel.HIGH }] },\n    },\n  });\n"]}

package/dist/esm/inbound/conversation-threads.shared.schemas.d.ts

@@ -0,0 +1,169 @@
+/**
+ * Conversation threads — the shared thread model every inbound channel correlates into (#1630).
+ *
+ * Three ORGANIZATIONS-scoped resources:
+ *
+ * | resource | one row per | what it is for |
+ * |---|---|---|
+ * | `conversationThreads` | exchange with one counterpart on one channel | correlation, the link to the case, closure |
+ * | `conversationMessages` | message, INBOUND or OUTBOUND | the thread's history; an OUTBOUND row is also the reply's delivery ledger |
+ * | `conversationReplyTokens` | reply address issued to one recipient on one thread | binding a reply to its thread, stored as a hash |
+ *
+ * ## Why one thread model and per-channel records
+ *
+ * Rejected: one table with a JSON union column per channel, which loses per-channel indexes and erasure
+ * matching. Rejected equally: channel-specific thread models only, which makes every handler re-implement
+ * correlation. So correlation is shared here, and what a message WAS on its channel (bodies, headers,
+ * attachments, raw MIME) stays in that channel's record — `INBOUND_EMAILS` for email (#1600) — with its
+ * own indexes, retention and erasure. A message points at it through `channelRecordRef`.
+ *
+ * ## One state, one row
+ *
+ * An INBOUND message has no status of its own: whether its handler ran is the inbound delivery's status.
+ * An OUTBOUND message's `outboundStatus` is the only record of whether its reply was accepted, because no
+ * other row describes that submission.
+ */
+import { z } from 'zod';
+import { InboundChannelKind } from './inbound-channels.shared.schemas';
+/** @wildo_source:part:start saas.models.conversation-threads facet:layer:shared facet:family:inbound facet:audience:app-developer */
+/** Whether a thread still takes messages. */
+export declare enum ConversationThreadStatus {
+    OPEN = "open",
+    /**
+     * The exchange is over. Closing revokes every reply token of the thread, and starts the thread's
+     * retention clock: a closed thread is kept for the `RESOURCE_DATA` period from `closedAt`. Its messages
+     * keep their own, statutory, clock.
+     */
+    CLOSED = "closed"
+}
+/** Which way a message travelled. */
+export declare enum ConversationMessageDirection {
+    /** Received from the counterpart; its handler run is recorded on the inbound delivery. */
+    INBOUND = "inbound",
+    /** Sent by the application, as a handler's reply. */
+    OUTBOUND = "outbound"
+}
+/** Where an OUTBOUND message stands with the sending provider. */
+export declare enum ConversationOutboundStatus {
+    /** Written by `ctx.reply` and waiting for the reply worker. */
+    QUEUED = "queued",
+    /** The sending provider accepted the submission. Terminal: a retry of the same submission never sends again. */
+    ACCEPTED_BY_PROVIDER = "accepted_by_provider",
+    /** The provider refused it, or the reply could not be sent at all. Terminal; the reason is `failureCode`. */
+    FAILED = "failed"
+}
+/** Why a reply token stopped binding replies. */
+export declare enum ReplyTokenRevocationReason {
+    /** Its thread was closed. */
+    THREAD_CLOSED = "thread_closed",
+    /** The thread's counterpart changed, so a token issued to the previous one names nobody on the thread. */
+    COUNTERPART_CHANGED = "counterpart_changed",
+    /**
+     * It was issued to a member of the organization who is no longer one. Detected when the token is next
+     * USED, which is the one place every removal door converges: whether the member left, was removed,
+     * suspended or erased, the token no longer binds from that moment.
+     */
+    MEMBER_REMOVED = "member_removed",
+    /** A newer token was issued to the same recipient on the same thread; one live address per recipient. */
+    ROTATED = "rotated"
+}
+/** Placeholder written over free text an erasure scrubs. */
+export declare const ERASED_CONVERSATION_TEXT = "[erased]";
+/** What a message's channel record is. The record's resource type is decided by the channel. */
+export declare const ConversationChannelRecordRefSchema: z.ZodObject<{
+    resourceType: z.ZodString;
+    resourceId: z.ZodString;
+}, z.core.$strict>;
+export type ConversationChannelRecordRef = z.infer<typeof ConversationChannelRecordRefSchema>;
+/**
+ * One exchange with one counterpart on one channel.
+ *
+ * `threadKey` is the channel's correlation key — for email, the `Message-ID` of the message that opened
+ * the thread — unique per organization and channel: the same message delivered to two organizations
+ * opens a thread in each.
+ */
+export declare const ConversationThreadSchema: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodObject<{
+    _id: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>;
+    organizationId: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>>>;
+    channel: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodEnum<typeof InboundChannelKind>>>>;
+    threadKey: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>;
+    counterpartAddress: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>>;
+    subject: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodString>>>;
+    linkedResource: z.ZodDefault<z.ZodNullable<z.ZodObject<{
+        resourceType: z.ZodString;
+        resourceId: z.ZodString;
+    }, z.core.$strict>>>;
+    status: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodEnum<typeof ConversationThreadStatus>>>>>;
+    lastMessageAt: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDate>>;
+    closedAt: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodNullable<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDate>>>>>;
+    createdAt: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodDate>>>>;
+    updatedAt: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodDate>>>;
+}, z.core.$strip>>;
+export type ConversationThread = z.infer<typeof ConversationThreadSchema>;
+/** The threading identity of an OUTBOUND message, as it went on the wire. */
+export declare const ConversationOutboundThreadingSchema: z.ZodObject<{
+    inReplyTo: z.ZodOptional<z.ZodString>;
+    references: z.ZodDefault<z.ZodArray<z.ZodString>>;
+}, z.core.$strict>;
+/** One message of a thread, in either direction. */
+export declare const ConversationMessageSchema: z.ZodObject<{
+    _id: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>;
+    organizationId: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>>>;
+    threadId: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>>>;
+    direction: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodEnum<typeof ConversationMessageDirection>>>>;
+    rfcMessageId: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>;
+    fromAddress: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>;
+    toAddresses: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodArray<z.ZodString>>>;
+    subject: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodString>>;
+    textPreview: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodString>>;
+    occurredAt: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDate>>;
+    inboundDeliveryId: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodNullable<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>>>;
+    channelRecordRef: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodNullable<z.ZodObject<{
+        resourceType: z.ZodString;
+        resourceId: z.ZodString;
+    }, z.core.$strict>>>>;
+    submissionId: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodOptional<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>>;
+    outboundStatus: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodNullable<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodEnum<typeof ConversationOutboundStatus>>>>>>>;
+    templateRef: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodNullable<z.ZodString>>>;
+    templateVariables: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodUnknown>>>>>;
+    locale: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodNullable<z.ZodString>>>;
+    replyToAddress: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodNullable<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>>>;
+    threading: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodNullable<z.ZodObject<{
+        inReplyTo: z.ZodOptional<z.ZodString>;
+        references: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    }, z.core.$strict>>>>;
+    providerMessageIds: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodArray<z.ZodString>>>>;
+    failureCode: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodNullable<z.ZodString>>>>;
+    settledAt: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodNullable<z.ZodDate>>>>;
+    createdAt: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodDate>>>>;
+    updatedAt: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodDate>>>;
+}, z.core.$strip>;
+export type ConversationMessage = z.infer<typeof ConversationMessageSchema>;
+/**
+ * One reply address issued to one recipient on one thread.
+ *
+ * The token itself is a bearer secret — whoever holds the address can post to the thread under that
+ * recipient's name, as with any reply-by-email system — so only its SHA-256 is stored, and the plaintext
+ * exists only in the address the reply carried. At least 128 bits from a CSPRNG.
+ */
+export declare const ConversationReplyTokenSchema: z.ZodObject<{
+    _id: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>;
+    organizationId: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>>>;
+    threadId: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>>>;
+    recipientAddress: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>>;
+    recipientMemberUserId: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodNullable<z.ZodString>>>;
+    tokenHash: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>>;
+    issuedAt: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDate>>;
+    revokedAt: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodNullable<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDate>>>>>;
+    revocationReason: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodNullable<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodEnum<typeof ReplyTokenRevocationReason>>>>>>;
+    createdAt: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodDate>>>>;
+    updatedAt: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodDate>>>;
+}, z.core.$strip>;
+export type ConversationReplyToken = z.infer<typeof ConversationReplyTokenSchema>;
+/** @wildo_source:part:end saas.models.conversation-threads */
+/** Thread verbs a person may take. */
+export declare enum ConversationThreads_Operations {
+    /** Close the exchange: revokes every reply token of the thread and starts its retention clock. */
+    CLOSE = "close"
+}
+//# sourceMappingURL=conversation-threads.shared.schemas.d.ts.map

package/dist/esm/inbound/conversation-threads.shared.schemas.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"conversation-threads.shared.schemas.d.ts","sourceRoot":"","sources":["../../../../src/inbound/conversation-threads.shared.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAMxB,OAAO,EAAE,kBAAkB,EAAE,MAAM,mCAAmC,CAAC;AAEvE,qIAAqI;AAErI,6CAA6C;AAC7C,oBAAY,wBAAwB;IAClC,IAAI,SAAS;IACb;;;;OAIG;IACH,MAAM,WAAW;CAClB;AAED,qCAAqC;AACrC,oBAAY,4BAA4B;IACtC,0FAA0F;IAC1F,OAAO,YAAY;IACnB,qDAAqD;IACrD,QAAQ,aAAa;CACtB;AAED,kEAAkE;AAClE,oBAAY,0BAA0B;IACpC,+DAA+D;IAC/D,MAAM,WAAW;IACjB,gHAAgH;IAChH,oBAAoB,yBAAyB;IAC7C,6GAA6G;IAC7G,MAAM,WAAW;CAClB;AAED,iDAAiD;AACjD,oBAAY,0BAA0B;IACpC,6BAA6B;IAC7B,aAAa,kBAAkB;IAC/B,0GAA0G;IAC1G,mBAAmB,wBAAwB;IAC3C;;;;OAIG;IACH,cAAc,mBAAmB;IACjC,yGAAyG;IACzG,OAAO,YAAY;CACpB;AAED,4DAA4D;AAC5D,eAAO,MAAM,wBAAwB,aAAa,CAAC;AAQnD,gGAAgG;AAChG,eAAO,MAAM,kCAAkC;;;kBAG7C,CAAC;AAEH,MAAM,MAAM,4BAA4B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kCAAkC,CAAC,CAAC;AAE9F;;;;;;GAMG;AACH,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;kBA6BwB,CAAC;AAE9D,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAE1E,6EAA6E;AAC7E,eAAO,MAAM,mCAAmC;;;kBAG9C,CAAC;AAEH,oDAAoD;AACpD,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAmFpC,CAAC;AAEH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAE5E;;;;;;GAMG;AACH,eAAO,MAAM,4BAA4B;;;;;;;;;;;;iBAwBvC,CAAC;AAEH,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAElF,8DAA8D;AAE9D,sCAAsC;AACtC,oBAAY,8BAA8B;IACxC,kGAAkG;IAClG,KAAK,UAAU;CAChB"}

package/dist/esm/inbound/conversation-threads.shared.schemas.js

@@ -0,0 +1,231 @@
+/**
+ * Conversation threads — the shared thread model every inbound channel correlates into (#1630).
+ *
+ * Three ORGANIZATIONS-scoped resources:
+ *
+ * | resource | one row per | what it is for |
+ * |---|---|---|
+ * | `conversationThreads` | exchange with one counterpart on one channel | correlation, the link to the case, closure |
+ * | `conversationMessages` | message, INBOUND or OUTBOUND | the thread's history; an OUTBOUND row is also the reply's delivery ledger |
+ * | `conversationReplyTokens` | reply address issued to one recipient on one thread | binding a reply to its thread, stored as a hash |
+ *
+ * ## Why one thread model and per-channel records
+ *
+ * Rejected: one table with a JSON union column per channel, which loses per-channel indexes and erasure
+ * matching. Rejected equally: channel-specific thread models only, which makes every handler re-implement
+ * correlation. So correlation is shared here, and what a message WAS on its channel (bodies, headers,
+ * attachments, raw MIME) stays in that channel's record — `INBOUND_EMAILS` for email (#1600) — with its
+ * own indexes, retention and erasure. A message points at it through `channelRecordRef`.
+ *
+ * ## One state, one row
+ *
+ * An INBOUND message has no status of its own: whether its handler ran is the inbound delivery's status.
+ * An OUTBOUND message's `outboundStatus` is the only record of whether its reply was accepted, because no
+ * other row describes that submission.
+ */
+import { z } from 'zod';
+import { addImpersonalizeWith } from '@wildo-ai/zod-decorators';
+import { PersonalDataCategory } from '../compliance/privacy/personal-data-category.shared.schemas.js';
+import { RedactionType } from '../compliance/privacy/redaction.shared.schemas.js';
+import { WorkUnitRefSchema } from '../resources/work-unit.shared.schemas.js';
+import { InboundChannelKind } from './inbound-channels.shared.schemas.js';
+/** @wildo_source:part:start saas.models.conversation-threads facet:layer:shared facet:family:inbound facet:audience:app-developer */
+/** Whether a thread still takes messages. */
+export var ConversationThreadStatus;
+(function (ConversationThreadStatus) {
+    ConversationThreadStatus["OPEN"] = "open";
+    /**
+     * The exchange is over. Closing revokes every reply token of the thread, and starts the thread's
+     * retention clock: a closed thread is kept for the `RESOURCE_DATA` period from `closedAt`. Its messages
+     * keep their own, statutory, clock.
+     */
+    ConversationThreadStatus["CLOSED"] = "closed";
+})(ConversationThreadStatus || (ConversationThreadStatus = {}));
+/** Which way a message travelled. */
+export var ConversationMessageDirection;
+(function (ConversationMessageDirection) {
+    /** Received from the counterpart; its handler run is recorded on the inbound delivery. */
+    ConversationMessageDirection["INBOUND"] = "inbound";
+    /** Sent by the application, as a handler's reply. */
+    ConversationMessageDirection["OUTBOUND"] = "outbound";
+})(ConversationMessageDirection || (ConversationMessageDirection = {}));
+/** Where an OUTBOUND message stands with the sending provider. */
+export var ConversationOutboundStatus;
+(function (ConversationOutboundStatus) {
+    /** Written by `ctx.reply` and waiting for the reply worker. */
+    ConversationOutboundStatus["QUEUED"] = "queued";
+    /** The sending provider accepted the submission. Terminal: a retry of the same submission never sends again. */
+    ConversationOutboundStatus["ACCEPTED_BY_PROVIDER"] = "accepted_by_provider";
+    /** The provider refused it, or the reply could not be sent at all. Terminal; the reason is `failureCode`. */
+    ConversationOutboundStatus["FAILED"] = "failed";
+})(ConversationOutboundStatus || (ConversationOutboundStatus = {}));
+/** Why a reply token stopped binding replies. */
+export var ReplyTokenRevocationReason;
+(function (ReplyTokenRevocationReason) {
+    /** Its thread was closed. */
+    ReplyTokenRevocationReason["THREAD_CLOSED"] = "thread_closed";
+    /** The thread's counterpart changed, so a token issued to the previous one names nobody on the thread. */
+    ReplyTokenRevocationReason["COUNTERPART_CHANGED"] = "counterpart_changed";
+    /**
+     * It was issued to a member of the organization who is no longer one. Detected when the token is next
+     * USED, which is the one place every removal door converges: whether the member left, was removed,
+     * suspended or erased, the token no longer binds from that moment.
+     */
+    ReplyTokenRevocationReason["MEMBER_REMOVED"] = "member_removed";
+    /** A newer token was issued to the same recipient on the same thread; one live address per recipient. */
+    ReplyTokenRevocationReason["ROTATED"] = "rotated";
+})(ReplyTokenRevocationReason || (ReplyTokenRevocationReason = {}));
+/** Placeholder written over free text an erasure scrubs. */
+export const ERASED_CONVERSATION_TEXT = '[erased]';
+const address = () => addImpersonalizeWith(z.string().min(1).max(320).dataCategories(PersonalDataCategory.CONTACT_DETAILS), RedactionType.MASK, { maskValue: ERASED_CONVERSATION_TEXT });
+/** What a message's channel record is. The record's resource type is decided by the channel. */
+export const ConversationChannelRecordRefSchema = z.strictObject({
+    resourceType: z.string().min(1).describe('The resource holding what the message was on its channel — `inboundEmails` for email.'),
+    resourceId: z.string().min(1).describe('The id of that row.'),
+});
+/**
+ * One exchange with one counterpart on one channel.
+ *
+ * `threadKey` is the channel's correlation key — for email, the `Message-ID` of the message that opened
+ * the thread — unique per organization and channel: the same message delivered to two organizations
+ * opens a thread in each.
+ */
+export const ConversationThreadSchema = z.object({
+    _id: z.string().min(1).isPrimaryKey().isSummaryField(),
+    organizationId: z.string().min(1).isDBIndexed().isForeignKey().isSummaryField().excludeFromUpdate(),
+    channel: z.enum(InboundChannelKind).systemEnum('InboundChannelKind').isSummaryField().excludeFromUpdate()
+        .describe('The channel the thread runs on. Replies go out on this channel only.'),
+    threadKey: z.string().min(1).max(998).isDBIndexed().excludeFromUpdate()
+        .describe("The channel's correlation key: for email, the Message-ID of the message that opened the thread."),
+    /** The address the application is exchanging messages with. Changing it revokes the previous counterpart's tokens. */
+    counterpartAddress: address().isDBIndexed().isSummaryField()
+        .describe('The address the application is exchanging messages with on this thread.'),
+    subject: addImpersonalizeWith(z.string().max(998).default('').isSummaryField().dataCategories(PersonalDataCategory.USER_CONTENT), RedactionType.MASK, { maskValue: ERASED_CONVERSATION_TEXT }).describe('The subject the thread opened with.'),
+    /**
+     * The case the thread is about, set by the handler once it knows (a todo it created, a matter it
+     * found). A `WorkUnitRef`: the one name for a case across the backbone epic.
+     */
+    linkedResource: WorkUnitRefSchema.nullable().default(null)
+        .describe('The case this thread is about — the record a handler linked it to — or null while it is linked to none.'),
+    status: z.enum(ConversationThreadStatus).systemEnum('ConversationThreadStatus').default(ConversationThreadStatus.OPEN)
+        .isDBIndexed().isSummaryField().describe('Whether the thread still takes messages.'),
+    lastMessageAt: z.date().isDBIndexed().isSummaryField().describe('When the latest message, in either direction, was recorded.'),
+    /** Set when the thread closes — the retention clock's start. Server-owned: a caller setting it could order a deletion. */
+    closedAt: z.date().isDBIndexed().nullable().default(null).excludeFromCreate().excludeFromUpdate()
+        .describe('When the thread was closed; null while it is open.'),
+    createdAt: z.date().default(() => new Date()).isDBIndexed().excludeFromCreate().excludeFromUpdate(),
+    updatedAt: z.date().default(() => new Date()).excludeFromCreate().excludeFromUpdate(),
+}).businessKeySet(['organizationId', 'channel', 'threadKey']);
+/** The threading identity of an OUTBOUND message, as it went on the wire. */
+export const ConversationOutboundThreadingSchema = z.strictObject({
+    inReplyTo: z.string().max(998).optional().describe('The Message-ID this reply answers.'),
+    references: z.array(z.string().max(998)).max(100).default([]).describe('The thread\'s Message-IDs, oldest first, ending with the one answered.'),
+});
+/** One message of a thread, in either direction. */
+export const ConversationMessageSchema = z.object({
+    _id: z.string().min(1).isPrimaryKey().isSummaryField(),
+    organizationId: z.string().min(1).isDBIndexed().isForeignKey().isSummaryField().excludeFromUpdate(),
+    threadId: z.string().min(1).isDBIndexed().isForeignKey().isSummaryField().excludeFromUpdate()
+        .describe('The thread this message belongs to.'),
+    direction: z.enum(ConversationMessageDirection).systemEnum('ConversationMessageDirection').isSummaryField().excludeFromUpdate()
+        .describe('Whether the message was received from the counterpart or sent by the application.'),
+    /** The RFC 5322 Message-ID on the wire — what a later In-Reply-To or References names. */
+    rfcMessageId: z.string().min(1).max(998).isDBIndexed().excludeFromUpdate()
+        .describe('The Message-ID the message carried on the wire, angle brackets included.'),
+    fromAddress: address().isSummaryField().describe('Who sent the message.'),
+    // RESET, not MASK: the treatment belongs to the ARRAY, and a mask string is not an array. Erasure returns
+    // the list to its default — empty.
+    toAddresses: addImpersonalizeWith(z.array(z.string().min(1).max(320)).default([]).dataCategories(PersonalDataCategory.CONTACT_DETAILS), RedactionType.RESET).describe('Who the message was addressed to.'),
+    subject: addImpersonalizeWith(z.string().max(998).default('').dataCategories(PersonalDataCategory.USER_CONTENT), RedactionType.MASK, { maskValue: ERASED_CONVERSATION_TEXT }).describe('The message subject.'),
+    /**
+     * The first characters of the message text, for the thread view. The whole message stays in its channel
+     * record; this is a preview, never the record.
+     */
+    textPreview: addImpersonalizeWith(z.string().max(500).default('').dataCategories(PersonalDataCategory.USER_CONTENT), RedactionType.MASK, { maskValue: ERASED_CONVERSATION_TEXT }).describe('The first 500 characters of the message text.'),
+    occurredAt: z.date().isDBIndexed().isSummaryField().describe('When the message was received, or queued to send.'),
+    // INBOUND ─────────────────────────────────────────────────────────────────
+    /** INBOUND: the delivery that carried it. Its status is this message's handler status — there is no second one. */
+    inboundDeliveryId: z.string().isDBIndexed().nullable().default(null).excludeFromUpdate()
+        .describe('For a received message, the inbound delivery that carried it; its status is the handler run\'s.'),
+    /** INBOUND: what the message was on its channel (the `INBOUND_EMAILS` row for email). */
+    channelRecordRef: ConversationChannelRecordRefSchema.nullable().default(null).excludeFromUpdate()
+        .describe('For a received message, the channel record holding the whole message.'),
+    // OUTBOUND ────────────────────────────────────────────────────────────────
+    /**
+     * OUTBOUND: the one logical submission this row stands for — deterministic, derived from the row, and
+     * handed to the sending provider as its idempotency key, so a retried reply is accepted at most once.
+     */
+    // `.optional()`, never `.nullable().default(null)`: a sparse unique index skips a MISSING field, not a
+    // stored null, so every received message would collide on `null` under MongoDB.
+    submissionId: z.string().min(1).isUnique({ scope: 'global', sparse: true }).optional().excludeFromUpdate()
+        .describe('For a reply, the idempotency key of its one submission to the sending provider.'),
+    outboundStatus: z.enum(ConversationOutboundStatus).systemEnum('ConversationOutboundStatus').isDBIndexed().nullable().default(null)
+        .excludeFromCreate().excludeFromUpdate()
+        .describe('For a reply, where it stands with the sending provider; null for a received message.'),
+    /** OUTBOUND: the template the HANDLER chose, and the variables it rendered with. */
+    templateRef: z.string().max(200).nullable().default(null).excludeFromUpdate()
+        .describe('For a reply, the email template the handler chose.'),
+    // RESET to the default (`null`): a field carrying a `.default()` is not clearable, so REMOVE is refused.
+    templateVariables: addImpersonalizeWith(z.record(z.string(), z.unknown()).nullable().default(null).excludeFromUpdate().dataCategories(PersonalDataCategory.USER_CONTENT), RedactionType.RESET).describe('For a reply, the variables the template rendered with.'),
+    locale: z.string().max(35).nullable().default(null).excludeFromUpdate()
+        .describe('For a reply, the locale the template rendered in.'),
+    /**
+     * For a reply, while it is QUEUED: the Reply-To address its first send attempt composed. It carries the
+     * reply token IN PLAINTEXT (I12), so it is backend-only — no API returns it — and it is cleared when the
+     * reply settles (accepted or failed). It is kept that long only so a retried attempt sends the same address.
+     */
+    replyToAddress: z.string().max(320).isBackendOnly().nullable().default(null).excludeFromUpdate()
+        .describe('For a queued reply only, the Reply-To address its send composed; cleared when the reply settles.'),
+    threading: ConversationOutboundThreadingSchema.nullable().default(null).excludeFromUpdate()
+        .describe('For a reply, the In-Reply-To and References it carried.'),
+    /** OUTBOUND: the provider's receipt, once accepted. */
+    providerMessageIds: z.array(z.string()).default([]).excludeFromCreate().excludeFromUpdate()
+        .describe('For an accepted reply, the ids the sending provider returned.'),
+    /** OUTBOUND: a classified failure, never an error message (which could quote the content). */
+    failureCode: z.string().max(200).nullable().default(null).excludeFromCreate().excludeFromUpdate()
+        .describe('For a failed reply, a classified failure code.'),
+    settledAt: z.date().nullable().default(null).excludeFromCreate().excludeFromUpdate()
+        .describe('For a reply, when it was accepted or failed.'),
+    createdAt: z.date().default(() => new Date()).isDBIndexed().excludeFromCreate().excludeFromUpdate(),
+    updatedAt: z.date().default(() => new Date()).excludeFromCreate().excludeFromUpdate(),
+});
+/**
+ * One reply address issued to one recipient on one thread.
+ *
+ * The token itself is a bearer secret — whoever holds the address can post to the thread under that
+ * recipient's name, as with any reply-by-email system — so only its SHA-256 is stored, and the plaintext
+ * exists only in the address the reply carried. At least 128 bits from a CSPRNG.
+ */
+export const ConversationReplyTokenSchema = z.object({
+    _id: z.string().min(1).isPrimaryKey().isSummaryField(),
+    organizationId: z.string().min(1).isDBIndexed().isForeignKey().isSummaryField().excludeFromUpdate(),
+    threadId: z.string().min(1).isDBIndexed().isForeignKey().isSummaryField().excludeFromUpdate()
+        .describe('The thread the token binds replies to.'),
+    recipientAddress: address().isSummaryField().excludeFromUpdate()
+        .describe('The address the token was issued to; only a reply from this address binds to the thread.'),
+    /**
+     * When the recipient was a member of the organization at issue, that member's user id — re-checked when
+     * the token is used, so a removed member's token stops binding.
+     */
+    recipientMemberUserId: z.string().nullable().default(null).excludeFromUpdate()
+        .describe('The organization member the token was issued to, when the recipient was one.'),
+    /** SHA-256 (hex) of the token. Lookup is global by hash; the token's organization must be the routed one. */
+    tokenHash: z.string().length(64).isUnique({ scope: 'global', sparse: false }).isBackendOnly().excludeFromUpdate()
+        .describe('The SHA-256 of the token. The token itself is never stored.'),
+    issuedAt: z.date().isSummaryField().excludeFromUpdate().describe('When the token was issued.'),
+    revokedAt: z.date().isDBIndexed().nullable().default(null).excludeFromCreate().excludeFromUpdate()
+        .describe('When the token stopped binding replies; null while it is live.'),
+    revocationReason: z.enum(ReplyTokenRevocationReason).systemEnum('ReplyTokenRevocationReason').nullable().default(null)
+        .excludeFromCreate().excludeFromUpdate()
+        .describe('Why the token stopped binding replies.'),
+    createdAt: z.date().default(() => new Date()).isDBIndexed().excludeFromCreate().excludeFromUpdate(),
+    updatedAt: z.date().default(() => new Date()).excludeFromCreate().excludeFromUpdate(),
+});
+/** @wildo_source:part:end saas.models.conversation-threads */
+/** Thread verbs a person may take. */
+export var ConversationThreads_Operations;
+(function (ConversationThreads_Operations) {
+    /** Close the exchange: revokes every reply token of the thread and starts its retention clock. */
+    ConversationThreads_Operations["CLOSE"] = "close";
+})(ConversationThreads_Operations || (ConversationThreads_Operations = {}));
+//# sourceMappingURL=conversation-threads.shared.schemas.js.map

package/dist/esm/inbound/conversation-threads.shared.schemas.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"conversation-threads.shared.schemas.js","sourceRoot":"","sources":["../../../../src/inbound/conversation-threads.shared.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAEhE,OAAO,EAAE,oBAAoB,EAAE,MAAM,6DAA6D,CAAC;AACnG,OAAO,EAAE,aAAa,EAAE,MAAM,gDAAgD,CAAC;AAC/E,OAAO,EAAE,iBAAiB,EAAE,MAAM,uCAAuC,CAAC;AAC1E,OAAO,EAAE,kBAAkB,EAAE,MAAM,mCAAmC,CAAC;AAEvE,qIAAqI;AAErI,6CAA6C;AAC7C,MAAM,CAAN,IAAY,wBAQX;AARD,WAAY,wBAAwB;IAClC,yCAAa,CAAA;IACb;;;;OAIG;IACH,6CAAiB,CAAA;AACnB,CAAC,EARW,wBAAwB,KAAxB,wBAAwB,QAQnC;AAED,qCAAqC;AACrC,MAAM,CAAN,IAAY,4BAKX;AALD,WAAY,4BAA4B;IACtC,0FAA0F;IAC1F,mDAAmB,CAAA;IACnB,qDAAqD;IACrD,qDAAqB,CAAA;AACvB,CAAC,EALW,4BAA4B,KAA5B,4BAA4B,QAKvC;AAED,kEAAkE;AAClE,MAAM,CAAN,IAAY,0BAOX;AAPD,WAAY,0BAA0B;IACpC,+DAA+D;IAC/D,+CAAiB,CAAA;IACjB,gHAAgH;IAChH,2EAA6C,CAAA;IAC7C,6GAA6G;IAC7G,+CAAiB,CAAA;AACnB,CAAC,EAPW,0BAA0B,KAA1B,0BAA0B,QAOrC;AAED,iDAAiD;AACjD,MAAM,CAAN,IAAY,0BAaX;AAbD,WAAY,0BAA0B;IACpC,6BAA6B;IAC7B,6DAA+B,CAAA;IAC/B,0GAA0G;IAC1G,yEAA2C,CAAA;IAC3C;;;;OAIG;IACH,+DAAiC,CAAA;IACjC,yGAAyG;IACzG,iDAAmB,CAAA;AACrB,CAAC,EAbW,0BAA0B,KAA1B,0BAA0B,QAarC;AAED,4DAA4D;AAC5D,MAAM,CAAC,MAAM,wBAAwB,GAAG,UAAU,CAAC;AAEnD,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,oBAAoB,CACxC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,cAAc,CAAC,oBAAoB,CAAC,eAAe,CAAC,EAC/E,aAAa,CAAC,IAAI,EAClB,EAAE,SAAS,EAAE,wBAAwB,EAAE,CACxC,CAAC;AAEF,gGAAgG;AAChG,MAAM,CAAC,MAAM,kCAAkC,GAAG,CAAC,CAAC,YAAY,CAAC;IAC/D,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,uFAAuF,CAAC;IACjI,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,qBAAqB,CAAC;CAC9D,CAAC,CAAC;AAIH;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/C,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC,cAAc,EAAE;IACtD,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,YAAY,EAAE,CAAC,cAAc,EAAE,CAAC,iBAAiB,EAAE;IACnG,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,UAAU,CAAC,oBAAoB,CAAC,CAAC,cAAc,EAAE,CAAC,iBAAiB,EAAE;SACtG,QAAQ,CAAC,sEAAsE,CAAC;IACnF,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC,iBAAiB,EAAE;SACpE,QAAQ,CAAC,iGAAiG,CAAC;IAC9G,sHAAsH;IACtH,kBAAkB,EAAE,OAAO,EAAE,CAAC,WAAW,EAAE,CAAC,cAAc,EAAE;SACzD,QAAQ,CAAC,yEAAyE,CAAC;IACtF,OAAO,EAAE,oBAAoB,CAC3B,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,cAAc,EAAE,CAAC,cAAc,CAAC,oBAAoB,CAAC,YAAY,CAAC,EAClG,aAAa,CAAC,IAAI,EAClB,EAAE,SAAS,EAAE,wBAAwB,EAAE,CACxC,CAAC,QAAQ,CAAC,qCAAqC,CAAC;IACjD;;;OAGG;IACH,cAAc,EAAE,iBAAiB,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;SACvD,QAAQ,CAAC,yGAAyG,CAAC;IACtH,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC,UAAU,CAAC,0BAA0B,CAAC,CAAC,OAAO,CAAC,wBAAwB,CAAC,IAAI,CAAC;SACnH,WAAW,EAAE,CAAC,cAAc,EAAE,CAAC,QAAQ,CAAC,0CAA0C,CAAC;IACtF,aAAa,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,cAAc,EAAE,CAAC,QAAQ,CAAC,6DAA6D,CAAC;IAC9H,0HAA0H;IAC1H,QAAQ,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,iBAAiB,EAAE,CAAC,iBAAiB,EAAE;SAC9F,QAAQ,CAAC,oDAAoD,CAAC;IACjE,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,iBAAiB,EAAE,CAAC,iBAAiB,EAAE;IACnG,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,iBAAiB,EAAE,CAAC,iBAAiB,EAAE;CACtF,CAAC,CAAC,cAAc,CAAC,CAAC,gBAAgB,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC,CAAC;AAI9D,6EAA6E;AAC7E,MAAM,CAAC,MAAM,mCAAmC,GAAG,CAAC,CAAC,YAAY,CAAC;IAChE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,oCAAoC,CAAC;IACxF,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,wEAAwE,CAAC;CACjJ,CAAC,CAAC;AAEH,oDAAoD;AACpD,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC,cAAc,EAAE;IACtD,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,YAAY,EAAE,CAAC,cAAc,EAAE,CAAC,iBAAiB,EAAE;IACnG,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,YAAY,EAAE,CAAC,cAAc,EAAE,CAAC,iBAAiB,EAAE;SAC1F,QAAQ,CAAC,qCAAqC,CAAC;IAClD,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC,UAAU,CAAC,8BAA8B,CAAC,CAAC,cAAc,EAAE,CAAC,iBAAiB,EAAE;SAC5H,QAAQ,CAAC,mFAAmF,CAAC;IAChG,0FAA0F;IAC1F,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC,iBAAiB,EAAE;SACvE,QAAQ,CAAC,0EAA0E,CAAC;IACvF,WAAW,EAAE,OAAO,EAAE,CAAC,cAAc,EAAE,CAAC,QAAQ,CAAC,uBAAuB,CAAC;IACzE,0GAA0G;IAC1G,mCAAmC;IACnC,WAAW,EAAE,oBAAoB,CAC/B,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,cAAc,CAAC,oBAAoB,CAAC,eAAe,CAAC,EACpG,aAAa,CAAC,KAAK,CACpB,CAAC,QAAQ,CAAC,mCAAmC,CAAC;IAC/C,OAAO,EAAE,oBAAoB,CAC3B,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,cAAc,CAAC,oBAAoB,CAAC,YAAY,CAAC,EACjF,aAAa,CAAC,IAAI,EAClB,EAAE,SAAS,EAAE,wBAAwB,EAAE,CACxC,CAAC,QAAQ,CAAC,sBAAsB,CAAC;IAClC;;;OAGG;IACH,WAAW,EAAE,oBAAoB,CAC/B,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,cAAc,CAAC,oBAAoB,CAAC,YAAY,CAAC,EACjF,aAAa,CAAC,IAAI,EAClB,EAAE,SAAS,EAAE,wBAAwB,EAAE,CACxC,CAAC,QAAQ,CAAC,+CAA+C,CAAC;IAC3D,UAAU,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,cAAc,EAAE,CAAC,QAAQ,CAAC,mDAAmD,CAAC;IAEjH,4EAA4E;IAC5E,mHAAmH;IACnH,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,iBAAiB,EAAE;SACrF,QAAQ,CAAC,iGAAiG,CAAC;IAC9G,yFAAyF;IACzF,gBAAgB,EAAE,kCAAkC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,iBAAiB,EAAE;SAC9F,QAAQ,CAAC,uEAAuE,CAAC;IAEpF,4EAA4E;IAC5E;;;OAGG;IACH,uGAAuG;IACvG,gFAAgF;IAChF,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,iBAAiB,EAAE;SACvG,QAAQ,CAAC,iFAAiF,CAAC;IAC9F,cAAc,EAAE,CAAC,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC,UAAU,CAAC,4BAA4B,CAAC,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;SAC/H,iBAAiB,EAAE,CAAC,iBAAiB,EAAE;SACvC,QAAQ,CAAC,sFAAsF,CAAC;IACnG,oFAAoF;IACpF,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,iBAAiB,EAAE;SAC1E,QAAQ,CAAC,oDAAoD,CAAC;IACjE,yGAAyG;IACzG,iBAAiB,EAAE,oBAAoB,CACrC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,iBAAiB,EAAE,CAAC,cAAc,CAAC,oBAAoB,CAAC,YAAY,CAAC,EAChI,aAAa,CAAC,KAAK,CACpB,CAAC,QAAQ,CAAC,wDAAwD,CAAC;IACpE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,iBAAiB,EAAE;SACpE,QAAQ,CAAC,mDAAmD,CAAC;IAChE;;;;OAIG;IACH,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,aAAa,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,iBAAiB,EAAE;SAC7F,QAAQ,CAAC,kGAAkG,CAAC;IAC/G,SAAS,EAAE,mCAAmC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,iBAAiB,EAAE;SACxF,QAAQ,CAAC,yDAAyD,CAAC;IACtE,uDAAuD;IACvD,kBAAkB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,iBAAiB,EAAE,CAAC,iBAAiB,EAAE;SACxF,QAAQ,CAAC,+DAA+D,CAAC;IAC5E,8FAA8F;IAC9F,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,iBAAiB,EAAE,CAAC,iBAAiB,EAAE;SAC9F,QAAQ,CAAC,gDAAgD,CAAC;IAC7D,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,iBAAiB,EAAE,CAAC,iBAAiB,EAAE;SACjF,QAAQ,CAAC,8CAA8C,CAAC;IAE3D,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,iBAAiB,EAAE,CAAC,iBAAiB,EAAE;IACnG,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,iBAAiB,EAAE,CAAC,iBAAiB,EAAE;CACtF,CAAC,CAAC;AAIH;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAC,MAAM,CAAC;IACnD,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC,cAAc,EAAE;IACtD,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,YAAY,EAAE,CAAC,cAAc,EAAE,CAAC,iBAAiB,EAAE;IACnG,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,YAAY,EAAE,CAAC,cAAc,EAAE,CAAC,iBAAiB,EAAE;SAC1F,QAAQ,CAAC,wCAAwC,CAAC;IACrD,gBAAgB,EAAE,OAAO,EAAE,CAAC,cAAc,EAAE,CAAC,iBAAiB,EAAE;SAC7D,QAAQ,CAAC,0FAA0F,CAAC;IACvG;;;OAGG;IACH,qBAAqB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,iBAAiB,EAAE;SAC3E,QAAQ,CAAC,8EAA8E,CAAC;IAC3F,6GAA6G;IAC7G,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,aAAa,EAAE,CAAC,iBAAiB,EAAE;SAC9G,QAAQ,CAAC,6DAA6D,CAAC;IAC1E,QAAQ,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,cAAc,EAAE,CAAC,iBAAiB,EAAE,CAAC,QAAQ,CAAC,4BAA4B,CAAC;IAC9F,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,iBAAiB,EAAE,CAAC,iBAAiB,EAAE;SAC/F,QAAQ,CAAC,gEAAgE,CAAC;IAC7E,gBAAgB,EAAE,CAAC,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC,UAAU,CAAC,4BAA4B,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;SACnH,iBAAiB,EAAE,CAAC,iBAAiB,EAAE;SACvC,QAAQ,CAAC,wCAAwC,CAAC;IACrD,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,iBAAiB,EAAE,CAAC,iBAAiB,EAAE;IACnG,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,iBAAiB,EAAE,CAAC,iBAAiB,EAAE;CACtF,CAAC,CAAC;AAIH,8DAA8D;AAE9D,sCAAsC;AACtC,MAAM,CAAN,IAAY,8BAGX;AAHD,WAAY,8BAA8B;IACxC,kGAAkG;IAClG,iDAAe,CAAA;AACjB,CAAC,EAHW,8BAA8B,KAA9B,8BAA8B,QAGzC","sourcesContent":["/**\n * Conversation threads — the shared thread model every inbound channel correlates into (#1630).\n *\n * Three ORGANIZATIONS-scoped resources:\n *\n * | resource | one row per | what it is for |\n * |---|---|---|\n * | `conversationThreads` | exchange with one counterpart on one channel | correlation, the link to the case, closure |\n * | `conversationMessages` | message, INBOUND or OUTBOUND | the thread's history; an OUTBOUND row is also the reply's delivery ledger |\n * | `conversationReplyTokens` | reply address issued to one recipient on one thread | binding a reply to its thread, stored as a hash |\n *\n * ## Why one thread model and per-channel records\n *\n * Rejected: one table with a JSON union column per channel, which loses per-channel indexes and erasure\n * matching. Rejected equally: channel-specific thread models only, which makes every handler re-implement\n * correlation. So correlation is shared here, and what a message WAS on its channel (bodies, headers,\n * attachments, raw MIME) stays in that channel's record — `INBOUND_EMAILS` for email (#1600) — with its\n * own indexes, retention and erasure. A message points at it through `channelRecordRef`.\n *\n * ## One state, one row\n *\n * An INBOUND message has no status of its own: whether its handler ran is the inbound delivery's status.\n * An OUTBOUND message's `outboundStatus` is the only record of whether its reply was accepted, because no\n * other row describes that submission.\n */\nimport { z } from 'zod';\nimport { addImpersonalizeWith } from '@wildo-ai/zod-decorators';\n\nimport { PersonalDataCategory } from '../compliance/privacy/personal-data-category.shared.schemas';\nimport { RedactionType } from '../compliance/privacy/redaction.shared.schemas';\nimport { WorkUnitRefSchema } from '../resources/work-unit.shared.schemas';\nimport { InboundChannelKind } from './inbound-channels.shared.schemas';\n\n/** @wildo_source:part:start saas.models.conversation-threads facet:layer:shared facet:family:inbound facet:audience:app-developer */\n\n/** Whether a thread still takes messages. */\nexport enum ConversationThreadStatus {\n  OPEN = 'open',\n  /**\n   * The exchange is over. Closing revokes every reply token of the thread, and starts the thread's\n   * retention clock: a closed thread is kept for the `RESOURCE_DATA` period from `closedAt`. Its messages\n   * keep their own, statutory, clock.\n   */\n  CLOSED = 'closed',\n}\n\n/** Which way a message travelled. */\nexport enum ConversationMessageDirection {\n  /** Received from the counterpart; its handler run is recorded on the inbound delivery. */\n  INBOUND = 'inbound',\n  /** Sent by the application, as a handler's reply. */\n  OUTBOUND = 'outbound',\n}\n\n/** Where an OUTBOUND message stands with the sending provider. */\nexport enum ConversationOutboundStatus {\n  /** Written by `ctx.reply` and waiting for the reply worker. */\n  QUEUED = 'queued',\n  /** The sending provider accepted the submission. Terminal: a retry of the same submission never sends again. */\n  ACCEPTED_BY_PROVIDER = 'accepted_by_provider',\n  /** The provider refused it, or the reply could not be sent at all. Terminal; the reason is `failureCode`. */\n  FAILED = 'failed',\n}\n\n/** Why a reply token stopped binding replies. */\nexport enum ReplyTokenRevocationReason {\n  /** Its thread was closed. */\n  THREAD_CLOSED = 'thread_closed',\n  /** The thread's counterpart changed, so a token issued to the previous one names nobody on the thread. */\n  COUNTERPART_CHANGED = 'counterpart_changed',\n  /**\n   * It was issued to a member of the organization who is no longer one. Detected when the token is next\n   * USED, which is the one place every removal door converges: whether the member left, was removed,\n   * suspended or erased, the token no longer binds from that moment.\n   */\n  MEMBER_REMOVED = 'member_removed',\n  /** A newer token was issued to the same recipient on the same thread; one live address per recipient. */\n  ROTATED = 'rotated',\n}\n\n/** Placeholder written over free text an erasure scrubs. */\nexport const ERASED_CONVERSATION_TEXT = '[erased]';\n\nconst address = () => addImpersonalizeWith(\n  z.string().min(1).max(320).dataCategories(PersonalDataCategory.CONTACT_DETAILS),\n  RedactionType.MASK,\n  { maskValue: ERASED_CONVERSATION_TEXT },\n);\n\n/** What a message's channel record is. The record's resource type is decided by the channel. */\nexport const ConversationChannelRecordRefSchema = z.strictObject({\n  resourceType: z.string().min(1).describe('The resource holding what the message was on its channel — `inboundEmails` for email.'),\n  resourceId: z.string().min(1).describe('The id of that row.'),\n});\n\nexport type ConversationChannelRecordRef = z.infer<typeof ConversationChannelRecordRefSchema>;\n\n/**\n * One exchange with one counterpart on one channel.\n *\n * `threadKey` is the channel's correlation key — for email, the `Message-ID` of the message that opened\n * the thread — unique per organization and channel: the same message delivered to two organizations\n * opens a thread in each.\n */\nexport const ConversationThreadSchema = z.object({\n  _id: z.string().min(1).isPrimaryKey().isSummaryField(),\n  organizationId: z.string().min(1).isDBIndexed().isForeignKey().isSummaryField().excludeFromUpdate(),\n  channel: z.enum(InboundChannelKind).systemEnum('InboundChannelKind').isSummaryField().excludeFromUpdate()\n    .describe('The channel the thread runs on. Replies go out on this channel only.'),\n  threadKey: z.string().min(1).max(998).isDBIndexed().excludeFromUpdate()\n    .describe(\"The channel's correlation key: for email, the Message-ID of the message that opened the thread.\"),\n  /** The address the application is exchanging messages with. Changing it revokes the previous counterpart's tokens. */\n  counterpartAddress: address().isDBIndexed().isSummaryField()\n    .describe('The address the application is exchanging messages with on this thread.'),\n  subject: addImpersonalizeWith(\n    z.string().max(998).default('').isSummaryField().dataCategories(PersonalDataCategory.USER_CONTENT),\n    RedactionType.MASK,\n    { maskValue: ERASED_CONVERSATION_TEXT },\n  ).describe('The subject the thread opened with.'),\n  /**\n   * The case the thread is about, set by the handler once it knows (a todo it created, a matter it\n   * found). A `WorkUnitRef`: the one name for a case across the backbone epic.\n   */\n  linkedResource: WorkUnitRefSchema.nullable().default(null)\n    .describe('The case this thread is about — the record a handler linked it to — or null while it is linked to none.'),\n  status: z.enum(ConversationThreadStatus).systemEnum('ConversationThreadStatus').default(ConversationThreadStatus.OPEN)\n    .isDBIndexed().isSummaryField().describe('Whether the thread still takes messages.'),\n  lastMessageAt: z.date().isDBIndexed().isSummaryField().describe('When the latest message, in either direction, was recorded.'),\n  /** Set when the thread closes — the retention clock's start. Server-owned: a caller setting it could order a deletion. */\n  closedAt: z.date().isDBIndexed().nullable().default(null).excludeFromCreate().excludeFromUpdate()\n    .describe('When the thread was closed; null while it is open.'),\n  createdAt: z.date().default(() => new Date()).isDBIndexed().excludeFromCreate().excludeFromUpdate(),\n  updatedAt: z.date().default(() => new Date()).excludeFromCreate().excludeFromUpdate(),\n}).businessKeySet(['organizationId', 'channel', 'threadKey']);\n\nexport type ConversationThread = z.infer<typeof ConversationThreadSchema>;\n\n/** The threading identity of an OUTBOUND message, as it went on the wire. */\nexport const ConversationOutboundThreadingSchema = z.strictObject({\n  inReplyTo: z.string().max(998).optional().describe('The Message-ID this reply answers.'),\n  references: z.array(z.string().max(998)).max(100).default([]).describe('The thread\\'s Message-IDs, oldest first, ending with the one answered.'),\n});\n\n/** One message of a thread, in either direction. */\nexport const ConversationMessageSchema = z.object({\n  _id: z.string().min(1).isPrimaryKey().isSummaryField(),\n  organizationId: z.string().min(1).isDBIndexed().isForeignKey().isSummaryField().excludeFromUpdate(),\n  threadId: z.string().min(1).isDBIndexed().isForeignKey().isSummaryField().excludeFromUpdate()\n    .describe('The thread this message belongs to.'),\n  direction: z.enum(ConversationMessageDirection).systemEnum('ConversationMessageDirection').isSummaryField().excludeFromUpdate()\n    .describe('Whether the message was received from the counterpart or sent by the application.'),\n  /** The RFC 5322 Message-ID on the wire — what a later In-Reply-To or References names. */\n  rfcMessageId: z.string().min(1).max(998).isDBIndexed().excludeFromUpdate()\n    .describe('The Message-ID the message carried on the wire, angle brackets included.'),\n  fromAddress: address().isSummaryField().describe('Who sent the message.'),\n  // RESET, not MASK: the treatment belongs to the ARRAY, and a mask string is not an array. Erasure returns\n  // the list to its default — empty.\n  toAddresses: addImpersonalizeWith(\n    z.array(z.string().min(1).max(320)).default([]).dataCategories(PersonalDataCategory.CONTACT_DETAILS),\n    RedactionType.RESET,\n  ).describe('Who the message was addressed to.'),\n  subject: addImpersonalizeWith(\n    z.string().max(998).default('').dataCategories(PersonalDataCategory.USER_CONTENT),\n    RedactionType.MASK,\n    { maskValue: ERASED_CONVERSATION_TEXT },\n  ).describe('The message subject.'),\n  /**\n   * The first characters of the message text, for the thread view. The whole message stays in its channel\n   * record; this is a preview, never the record.\n   */\n  textPreview: addImpersonalizeWith(\n    z.string().max(500).default('').dataCategories(PersonalDataCategory.USER_CONTENT),\n    RedactionType.MASK,\n    { maskValue: ERASED_CONVERSATION_TEXT },\n  ).describe('The first 500 characters of the message text.'),\n  occurredAt: z.date().isDBIndexed().isSummaryField().describe('When the message was received, or queued to send.'),\n\n  // INBOUND ─────────────────────────────────────────────────────────────────\n  /** INBOUND: the delivery that carried it. Its status is this message's handler status — there is no second one. */\n  inboundDeliveryId: z.string().isDBIndexed().nullable().default(null).excludeFromUpdate()\n    .describe('For a received message, the inbound delivery that carried it; its status is the handler run\\'s.'),\n  /** INBOUND: what the message was on its channel (the `INBOUND_EMAILS` row for email). */\n  channelRecordRef: ConversationChannelRecordRefSchema.nullable().default(null).excludeFromUpdate()\n    .describe('For a received message, the channel record holding the whole message.'),\n\n  // OUTBOUND ────────────────────────────────────────────────────────────────\n  /**\n   * OUTBOUND: the one logical submission this row stands for — deterministic, derived from the row, and\n   * handed to the sending provider as its idempotency key, so a retried reply is accepted at most once.\n   */\n  // `.optional()`, never `.nullable().default(null)`: a sparse unique index skips a MISSING field, not a\n  // stored null, so every received message would collide on `null` under MongoDB.\n  submissionId: z.string().min(1).isUnique({ scope: 'global', sparse: true }).optional().excludeFromUpdate()\n    .describe('For a reply, the idempotency key of its one submission to the sending provider.'),\n  outboundStatus: z.enum(ConversationOutboundStatus).systemEnum('ConversationOutboundStatus').isDBIndexed().nullable().default(null)\n    .excludeFromCreate().excludeFromUpdate()\n    .describe('For a reply, where it stands with the sending provider; null for a received message.'),\n  /** OUTBOUND: the template the HANDLER chose, and the variables it rendered with. */\n  templateRef: z.string().max(200).nullable().default(null).excludeFromUpdate()\n    .describe('For a reply, the email template the handler chose.'),\n  // RESET to the default (`null`): a field carrying a `.default()` is not clearable, so REMOVE is refused.\n  templateVariables: addImpersonalizeWith(\n    z.record(z.string(), z.unknown()).nullable().default(null).excludeFromUpdate().dataCategories(PersonalDataCategory.USER_CONTENT),\n    RedactionType.RESET,\n  ).describe('For a reply, the variables the template rendered with.'),\n  locale: z.string().max(35).nullable().default(null).excludeFromUpdate()\n    .describe('For a reply, the locale the template rendered in.'),\n  /**\n   * For a reply, while it is QUEUED: the Reply-To address its first send attempt composed. It carries the\n   * reply token IN PLAINTEXT (I12), so it is backend-only — no API returns it — and it is cleared when the\n   * reply settles (accepted or failed). It is kept that long only so a retried attempt sends the same address.\n   */\n  replyToAddress: z.string().max(320).isBackendOnly().nullable().default(null).excludeFromUpdate()\n    .describe('For a queued reply only, the Reply-To address its send composed; cleared when the reply settles.'),\n  threading: ConversationOutboundThreadingSchema.nullable().default(null).excludeFromUpdate()\n    .describe('For a reply, the In-Reply-To and References it carried.'),\n  /** OUTBOUND: the provider's receipt, once accepted. */\n  providerMessageIds: z.array(z.string()).default([]).excludeFromCreate().excludeFromUpdate()\n    .describe('For an accepted reply, the ids the sending provider returned.'),\n  /** OUTBOUND: a classified failure, never an error message (which could quote the content). */\n  failureCode: z.string().max(200).nullable().default(null).excludeFromCreate().excludeFromUpdate()\n    .describe('For a failed reply, a classified failure code.'),\n  settledAt: z.date().nullable().default(null).excludeFromCreate().excludeFromUpdate()\n    .describe('For a reply, when it was accepted or failed.'),\n\n  createdAt: z.date().default(() => new Date()).isDBIndexed().excludeFromCreate().excludeFromUpdate(),\n  updatedAt: z.date().default(() => new Date()).excludeFromCreate().excludeFromUpdate(),\n});\n\nexport type ConversationMessage = z.infer<typeof ConversationMessageSchema>;\n\n/**\n * One reply address issued to one recipient on one thread.\n *\n * The token itself is a bearer secret — whoever holds the address can post to the thread under that\n * recipient's name, as with any reply-by-email system — so only its SHA-256 is stored, and the plaintext\n * exists only in the address the reply carried. At least 128 bits from a CSPRNG.\n */\nexport const ConversationReplyTokenSchema = z.object({\n  _id: z.string().min(1).isPrimaryKey().isSummaryField(),\n  organizationId: z.string().min(1).isDBIndexed().isForeignKey().isSummaryField().excludeFromUpdate(),\n  threadId: z.string().min(1).isDBIndexed().isForeignKey().isSummaryField().excludeFromUpdate()\n    .describe('The thread the token binds replies to.'),\n  recipientAddress: address().isSummaryField().excludeFromUpdate()\n    .describe('The address the token was issued to; only a reply from this address binds to the thread.'),\n  /**\n   * When the recipient was a member of the organization at issue, that member's user id — re-checked when\n   * the token is used, so a removed member's token stops binding.\n   */\n  recipientMemberUserId: z.string().nullable().default(null).excludeFromUpdate()\n    .describe('The organization member the token was issued to, when the recipient was one.'),\n  /** SHA-256 (hex) of the token. Lookup is global by hash; the token's organization must be the routed one. */\n  tokenHash: z.string().length(64).isUnique({ scope: 'global', sparse: false }).isBackendOnly().excludeFromUpdate()\n    .describe('The SHA-256 of the token. The token itself is never stored.'),\n  issuedAt: z.date().isSummaryField().excludeFromUpdate().describe('When the token was issued.'),\n  revokedAt: z.date().isDBIndexed().nullable().default(null).excludeFromCreate().excludeFromUpdate()\n    .describe('When the token stopped binding replies; null while it is live.'),\n  revocationReason: z.enum(ReplyTokenRevocationReason).systemEnum('ReplyTokenRevocationReason').nullable().default(null)\n    .excludeFromCreate().excludeFromUpdate()\n    .describe('Why the token stopped binding replies.'),\n  createdAt: z.date().default(() => new Date()).isDBIndexed().excludeFromCreate().excludeFromUpdate(),\n  updatedAt: z.date().default(() => new Date()).excludeFromCreate().excludeFromUpdate(),\n});\n\nexport type ConversationReplyToken = z.infer<typeof ConversationReplyTokenSchema>;\n\n/** @wildo_source:part:end saas.models.conversation-threads */\n\n/** Thread verbs a person may take. */\nexport enum ConversationThreads_Operations {\n  /** Close the exchange: revokes every reply token of the thread and starts its retention clock. */\n  CLOSE = 'close',\n}\n"]}