@wildo-ai/saas-models 1.1.5 → 1.1.6

package/dist/esm/inbound/conversation-threads.shared.schemas.js

@@ -0,0 +1,231 @@
+/**
+ * Conversation threads — the shared thread model every inbound channel correlates into (#1630).
+ *
+ * Three ORGANIZATIONS-scoped resources:
+ *
+ * | resource | one row per | what it is for |
+ * |---|---|---|
+ * | `conversationThreads` | exchange with one counterpart on one channel | correlation, the link to the case, closure |
+ * | `conversationMessages` | message, INBOUND or OUTBOUND | the thread's history; an OUTBOUND row is also the reply's delivery ledger |
+ * | `conversationReplyTokens` | reply address issued to one recipient on one thread | binding a reply to its thread, stored as a hash |
+ *
+ * ## Why one thread model and per-channel records
+ *
+ * Rejected: one table with a JSON union column per channel, which loses per-channel indexes and erasure
+ * matching. Rejected equally: channel-specific thread models only, which makes every handler re-implement
+ * correlation. So correlation is shared here, and what a message WAS on its channel (bodies, headers,
+ * attachments, raw MIME) stays in that channel's record — `INBOUND_EMAILS` for email (#1600) — with its
+ * own indexes, retention and erasure. A message points at it through `channelRecordRef`.
+ *
+ * ## One state, one row
+ *
+ * An INBOUND message has no status of its own: whether its handler ran is the inbound delivery's status.
+ * An OUTBOUND message's `outboundStatus` is the only record of whether its reply was accepted, because no
+ * other row describes that submission.
+ */
+import { z } from 'zod';
+import { addImpersonalizeWith } from '@wildo-ai/zod-decorators';
+import { PersonalDataCategory } from '../compliance/privacy/personal-data-category.shared.schemas.js';
+import { RedactionType } from '../compliance/privacy/redaction.shared.schemas.js';
+import { WorkUnitRefSchema } from '../resources/work-unit.shared.schemas.js';
+import { InboundChannelKind } from './inbound-channels.shared.schemas.js';
+/** @wildo_source:part:start saas.models.conversation-threads facet:layer:shared facet:family:inbound facet:audience:app-developer */
+/** Whether a thread still takes messages. */
+export var ConversationThreadStatus;
+(function (ConversationThreadStatus) {
+    ConversationThreadStatus["OPEN"] = "open";
+    /**
+     * The exchange is over. Closing revokes every reply token of the thread, and starts the thread's
+     * retention clock: a closed thread is kept for the `RESOURCE_DATA` period from `closedAt`. Its messages
+     * keep their own, statutory, clock.
+     */
+    ConversationThreadStatus["CLOSED"] = "closed";
+})(ConversationThreadStatus || (ConversationThreadStatus = {}));
+/** Which way a message travelled. */
+export var ConversationMessageDirection;
+(function (ConversationMessageDirection) {
+    /** Received from the counterpart; its handler run is recorded on the inbound delivery. */
+    ConversationMessageDirection["INBOUND"] = "inbound";
+    /** Sent by the application, as a handler's reply. */
+    ConversationMessageDirection["OUTBOUND"] = "outbound";
+})(ConversationMessageDirection || (ConversationMessageDirection = {}));
+/** Where an OUTBOUND message stands with the sending provider. */
+export var ConversationOutboundStatus;
+(function (ConversationOutboundStatus) {
+    /** Written by `ctx.reply` and waiting for the reply worker. */
+    ConversationOutboundStatus["QUEUED"] = "queued";
+    /** The sending provider accepted the submission. Terminal: a retry of the same submission never sends again. */
+    ConversationOutboundStatus["ACCEPTED_BY_PROVIDER"] = "accepted_by_provider";
+    /** The provider refused it, or the reply could not be sent at all. Terminal; the reason is `failureCode`. */
+    ConversationOutboundStatus["FAILED"] = "failed";
+})(ConversationOutboundStatus || (ConversationOutboundStatus = {}));
+/** Why a reply token stopped binding replies. */
+export var ReplyTokenRevocationReason;
+(function (ReplyTokenRevocationReason) {
+    /** Its thread was closed. */
+    ReplyTokenRevocationReason["THREAD_CLOSED"] = "thread_closed";
+    /** The thread's counterpart changed, so a token issued to the previous one names nobody on the thread. */
+    ReplyTokenRevocationReason["COUNTERPART_CHANGED"] = "counterpart_changed";
+    /**
+     * It was issued to a member of the organization who is no longer one. Detected when the token is next
+     * USED, which is the one place every removal door converges: whether the member left, was removed,
+     * suspended or erased, the token no longer binds from that moment.
+     */
+    ReplyTokenRevocationReason["MEMBER_REMOVED"] = "member_removed";
+    /** A newer token was issued to the same recipient on the same thread; one live address per recipient. */
+    ReplyTokenRevocationReason["ROTATED"] = "rotated";
+})(ReplyTokenRevocationReason || (ReplyTokenRevocationReason = {}));
+/** Placeholder written over free text an erasure scrubs. */
+export const ERASED_CONVERSATION_TEXT = '[erased]';
+const address = () => addImpersonalizeWith(z.string().min(1).max(320).dataCategories(PersonalDataCategory.CONTACT_DETAILS), RedactionType.MASK, { maskValue: ERASED_CONVERSATION_TEXT });
+/** What a message's channel record is. The record's resource type is decided by the channel. */
+export const ConversationChannelRecordRefSchema = z.strictObject({
+    resourceType: z.string().min(1).describe('The resource holding what the message was on its channel — `inboundEmails` for email.'),
+    resourceId: z.string().min(1).describe('The id of that row.'),
+});
+/**
+ * One exchange with one counterpart on one channel.
+ *
+ * `threadKey` is the channel's correlation key — for email, the `Message-ID` of the message that opened
+ * the thread — unique per organization and channel: the same message delivered to two organizations
+ * opens a thread in each.
+ */
+export const ConversationThreadSchema = z.object({
+    _id: z.string().min(1).isPrimaryKey().isSummaryField(),
+    organizationId: z.string().min(1).isDBIndexed().isForeignKey().isSummaryField().excludeFromUpdate(),
+    channel: z.enum(InboundChannelKind).systemEnum('InboundChannelKind').isSummaryField().excludeFromUpdate()
+        .describe('The channel the thread runs on. Replies go out on this channel only.'),
+    threadKey: z.string().min(1).max(998).isDBIndexed().excludeFromUpdate()
+        .describe("The channel's correlation key: for email, the Message-ID of the message that opened the thread."),
+    /** The address the application is exchanging messages with. Changing it revokes the previous counterpart's tokens. */
+    counterpartAddress: address().isDBIndexed().isSummaryField()
+        .describe('The address the application is exchanging messages with on this thread.'),
+    subject: addImpersonalizeWith(z.string().max(998).default('').isSummaryField().dataCategories(PersonalDataCategory.USER_CONTENT), RedactionType.MASK, { maskValue: ERASED_CONVERSATION_TEXT }).describe('The subject the thread opened with.'),
+    /**
+     * The case the thread is about, set by the handler once it knows (a todo it created, a matter it
+     * found). A `WorkUnitRef`: the one name for a case across the backbone epic.
+     */
+    linkedResource: WorkUnitRefSchema.nullable().default(null)
+        .describe('The case this thread is about — the record a handler linked it to — or null while it is linked to none.'),
+    status: z.enum(ConversationThreadStatus).systemEnum('ConversationThreadStatus').default(ConversationThreadStatus.OPEN)
+        .isDBIndexed().isSummaryField().describe('Whether the thread still takes messages.'),
+    lastMessageAt: z.date().isDBIndexed().isSummaryField().describe('When the latest message, in either direction, was recorded.'),
+    /** Set when the thread closes — the retention clock's start. Server-owned: a caller setting it could order a deletion. */
+    closedAt: z.date().isDBIndexed().nullable().default(null).excludeFromCreate().excludeFromUpdate()
+        .describe('When the thread was closed; null while it is open.'),
+    createdAt: z.date().default(() => new Date()).isDBIndexed().excludeFromCreate().excludeFromUpdate(),
+    updatedAt: z.date().default(() => new Date()).excludeFromCreate().excludeFromUpdate(),
+}).businessKeySet(['organizationId', 'channel', 'threadKey']);
+/** The threading identity of an OUTBOUND message, as it went on the wire. */
+export const ConversationOutboundThreadingSchema = z.strictObject({
+    inReplyTo: z.string().max(998).optional().describe('The Message-ID this reply answers.'),
+    references: z.array(z.string().max(998)).max(100).default([]).describe('The thread\'s Message-IDs, oldest first, ending with the one answered.'),
+});
+/** One message of a thread, in either direction. */
+export const ConversationMessageSchema = z.object({
+    _id: z.string().min(1).isPrimaryKey().isSummaryField(),
+    organizationId: z.string().min(1).isDBIndexed().isForeignKey().isSummaryField().excludeFromUpdate(),
+    threadId: z.string().min(1).isDBIndexed().isForeignKey().isSummaryField().excludeFromUpdate()
+        .describe('The thread this message belongs to.'),
+    direction: z.enum(ConversationMessageDirection).systemEnum('ConversationMessageDirection').isSummaryField().excludeFromUpdate()
+        .describe('Whether the message was received from the counterpart or sent by the application.'),
+    /** The RFC 5322 Message-ID on the wire — what a later In-Reply-To or References names. */
+    rfcMessageId: z.string().min(1).max(998).isDBIndexed().excludeFromUpdate()
+        .describe('The Message-ID the message carried on the wire, angle brackets included.'),
+    fromAddress: address().isSummaryField().describe('Who sent the message.'),
+    // RESET, not MASK: the treatment belongs to the ARRAY, and a mask string is not an array. Erasure returns
+    // the list to its default — empty.
+    toAddresses: addImpersonalizeWith(z.array(z.string().min(1).max(320)).default([]).dataCategories(PersonalDataCategory.CONTACT_DETAILS), RedactionType.RESET).describe('Who the message was addressed to.'),
+    subject: addImpersonalizeWith(z.string().max(998).default('').dataCategories(PersonalDataCategory.USER_CONTENT), RedactionType.MASK, { maskValue: ERASED_CONVERSATION_TEXT }).describe('The message subject.'),
+    /**
+     * The first characters of the message text, for the thread view. The whole message stays in its channel
+     * record; this is a preview, never the record.
+     */
+    textPreview: addImpersonalizeWith(z.string().max(500).default('').dataCategories(PersonalDataCategory.USER_CONTENT), RedactionType.MASK, { maskValue: ERASED_CONVERSATION_TEXT }).describe('The first 500 characters of the message text.'),
+    occurredAt: z.date().isDBIndexed().isSummaryField().describe('When the message was received, or queued to send.'),
+    // INBOUND ─────────────────────────────────────────────────────────────────
+    /** INBOUND: the delivery that carried it. Its status is this message's handler status — there is no second one. */
+    inboundDeliveryId: z.string().isDBIndexed().nullable().default(null).excludeFromUpdate()
+        .describe('For a received message, the inbound delivery that carried it; its status is the handler run\'s.'),
+    /** INBOUND: what the message was on its channel (the `INBOUND_EMAILS` row for email). */
+    channelRecordRef: ConversationChannelRecordRefSchema.nullable().default(null).excludeFromUpdate()
+        .describe('For a received message, the channel record holding the whole message.'),
+    // OUTBOUND ────────────────────────────────────────────────────────────────
+    /**
+     * OUTBOUND: the one logical submission this row stands for — deterministic, derived from the row, and
+     * handed to the sending provider as its idempotency key, so a retried reply is accepted at most once.
+     */
+    // `.optional()`, never `.nullable().default(null)`: a sparse unique index skips a MISSING field, not a
+    // stored null, so every received message would collide on `null` under MongoDB.
+    submissionId: z.string().min(1).isUnique({ scope: 'global', sparse: true }).optional().excludeFromUpdate()
+        .describe('For a reply, the idempotency key of its one submission to the sending provider.'),
+    outboundStatus: z.enum(ConversationOutboundStatus).systemEnum('ConversationOutboundStatus').isDBIndexed().nullable().default(null)
+        .excludeFromCreate().excludeFromUpdate()
+        .describe('For a reply, where it stands with the sending provider; null for a received message.'),
+    /** OUTBOUND: the template the HANDLER chose, and the variables it rendered with. */
+    templateRef: z.string().max(200).nullable().default(null).excludeFromUpdate()
+        .describe('For a reply, the email template the handler chose.'),
+    // RESET to the default (`null`): a field carrying a `.default()` is not clearable, so REMOVE is refused.
+    templateVariables: addImpersonalizeWith(z.record(z.string(), z.unknown()).nullable().default(null).excludeFromUpdate().dataCategories(PersonalDataCategory.USER_CONTENT), RedactionType.RESET).describe('For a reply, the variables the template rendered with.'),
+    locale: z.string().max(35).nullable().default(null).excludeFromUpdate()
+        .describe('For a reply, the locale the template rendered in.'),
+    /**
+     * For a reply, while it is QUEUED: the Reply-To address its first send attempt composed. It carries the
+     * reply token IN PLAINTEXT (I12), so it is backend-only — no API returns it — and it is cleared when the
+     * reply settles (accepted or failed). It is kept that long only so a retried attempt sends the same address.
+     */
+    replyToAddress: z.string().max(320).isBackendOnly().nullable().default(null).excludeFromUpdate()
+        .describe('For a queued reply only, the Reply-To address its send composed; cleared when the reply settles.'),
+    threading: ConversationOutboundThreadingSchema.nullable().default(null).excludeFromUpdate()
+        .describe('For a reply, the In-Reply-To and References it carried.'),
+    /** OUTBOUND: the provider's receipt, once accepted. */
+    providerMessageIds: z.array(z.string()).default([]).excludeFromCreate().excludeFromUpdate()
+        .describe('For an accepted reply, the ids the sending provider returned.'),
+    /** OUTBOUND: a classified failure, never an error message (which could quote the content). */
+    failureCode: z.string().max(200).nullable().default(null).excludeFromCreate().excludeFromUpdate()
+        .describe('For a failed reply, a classified failure code.'),
+    settledAt: z.date().nullable().default(null).excludeFromCreate().excludeFromUpdate()
+        .describe('For a reply, when it was accepted or failed.'),
+    createdAt: z.date().default(() => new Date()).isDBIndexed().excludeFromCreate().excludeFromUpdate(),
+    updatedAt: z.date().default(() => new Date()).excludeFromCreate().excludeFromUpdate(),
+});
+/**
+ * One reply address issued to one recipient on one thread.
+ *
+ * The token itself is a bearer secret — whoever holds the address can post to the thread under that
+ * recipient's name, as with any reply-by-email system — so only its SHA-256 is stored, and the plaintext
+ * exists only in the address the reply carried. At least 128 bits from a CSPRNG.
+ */
+export const ConversationReplyTokenSchema = z.object({
+    _id: z.string().min(1).isPrimaryKey().isSummaryField(),
+    organizationId: z.string().min(1).isDBIndexed().isForeignKey().isSummaryField().excludeFromUpdate(),
+    threadId: z.string().min(1).isDBIndexed().isForeignKey().isSummaryField().excludeFromUpdate()
+        .describe('The thread the token binds replies to.'),
+    recipientAddress: address().isSummaryField().excludeFromUpdate()
+        .describe('The address the token was issued to; only a reply from this address binds to the thread.'),
+    /**
+     * When the recipient was a member of the organization at issue, that member's user id — re-checked when
+     * the token is used, so a removed member's token stops binding.
+     */
+    recipientMemberUserId: z.string().nullable().default(null).excludeFromUpdate()
+        .describe('The organization member the token was issued to, when the recipient was one.'),
+    /** SHA-256 (hex) of the token. Lookup is global by hash; the token's organization must be the routed one. */
+    tokenHash: z.string().length(64).isUnique({ scope: 'global', sparse: false }).isBackendOnly().excludeFromUpdate()
+        .describe('The SHA-256 of the token. The token itself is never stored.'),
+    issuedAt: z.date().isSummaryField().excludeFromUpdate().describe('When the token was issued.'),
+    revokedAt: z.date().isDBIndexed().nullable().default(null).excludeFromCreate().excludeFromUpdate()
+        .describe('When the token stopped binding replies; null while it is live.'),
+    revocationReason: z.enum(ReplyTokenRevocationReason).systemEnum('ReplyTokenRevocationReason').nullable().default(null)
+        .excludeFromCreate().excludeFromUpdate()
+        .describe('Why the token stopped binding replies.'),
+    createdAt: z.date().default(() => new Date()).isDBIndexed().excludeFromCreate().excludeFromUpdate(),
+    updatedAt: z.date().default(() => new Date()).excludeFromCreate().excludeFromUpdate(),
+});
+/** @wildo_source:part:end saas.models.conversation-threads */
+/** Thread verbs a person may take. */
+export var ConversationThreads_Operations;
+(function (ConversationThreads_Operations) {
+    /** Close the exchange: revokes every reply token of the thread and starts its retention clock. */
+    ConversationThreads_Operations["CLOSE"] = "close";
+})(ConversationThreads_Operations || (ConversationThreads_Operations = {}));
+//# sourceMappingURL=conversation-threads.shared.schemas.js.map

package/dist/esm/inbound/conversation-threads.shared.schemas.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"conversation-threads.shared.schemas.js","sourceRoot":"","sources":["../../../../src/inbound/conversation-threads.shared.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAEhE,OAAO,EAAE,oBAAoB,EAAE,MAAM,6DAA6D,CAAC;AACnG,OAAO,EAAE,aAAa,EAAE,MAAM,gDAAgD,CAAC;AAC/E,OAAO,EAAE,iBAAiB,EAAE,MAAM,uCAAuC,CAAC;AAC1E,OAAO,EAAE,kBAAkB,EAAE,MAAM,mCAAmC,CAAC;AAEvE,qIAAqI;AAErI,6CAA6C;AAC7C,MAAM,CAAN,IAAY,wBAQX;AARD,WAAY,wBAAwB;IAClC,yCAAa,CAAA;IACb;;;;OAIG;IACH,6CAAiB,CAAA;AACnB,CAAC,EARW,wBAAwB,KAAxB,wBAAwB,QAQnC;AAED,qCAAqC;AACrC,MAAM,CAAN,IAAY,4BAKX;AALD,WAAY,4BAA4B;IACtC,0FAA0F;IAC1F,mDAAmB,CAAA;IACnB,qDAAqD;IACrD,qDAAqB,CAAA;AACvB,CAAC,EALW,4BAA4B,KAA5B,4BAA4B,QAKvC;AAED,kEAAkE;AAClE,MAAM,CAAN,IAAY,0BAOX;AAPD,WAAY,0BAA0B;IACpC,+DAA+D;IAC/D,+CAAiB,CAAA;IACjB,gHAAgH;IAChH,2EAA6C,CAAA;IAC7C,6GAA6G;IAC7G,+CAAiB,CAAA;AACnB,CAAC,EAPW,0BAA0B,KAA1B,0BAA0B,QAOrC;AAED,iDAAiD;AACjD,MAAM,CAAN,IAAY,0BAaX;AAbD,WAAY,0BAA0B;IACpC,6BAA6B;IAC7B,6DAA+B,CAAA;IAC/B,0GAA0G;IAC1G,yEAA2C,CAAA;IAC3C;;;;OAIG;IACH,+DAAiC,CAAA;IACjC,yGAAyG;IACzG,iDAAmB,CAAA;AACrB,CAAC,EAbW,0BAA0B,KAA1B,0BAA0B,QAarC;AAED,4DAA4D;AAC5D,MAAM,CAAC,MAAM,wBAAwB,GAAG,UAAU,CAAC;AAEnD,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,oBAAoB,CACxC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,cAAc,CAAC,oBAAoB,CAAC,eAAe,CAAC,EAC/E,aAAa,CAAC,IAAI,EAClB,EAAE,SAAS,EAAE,wBAAwB,EAAE,CACxC,CAAC;AAEF,gGAAgG;AAChG,MAAM,CAAC,MAAM,kCAAkC,GAAG,CAAC,CAAC,YAAY,CAAC;IAC/D,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,uFAAuF,CAAC;IACjI,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,qBAAqB,CAAC;CAC9D,CAAC,CAAC;AAIH;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/C,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC,cAAc,EAAE;IACtD,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,YAAY,EAAE,CAAC,cAAc,EAAE,CAAC,iBAAiB,EAAE;IACnG,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,UAAU,CAAC,oBAAoB,CAAC,CAAC,cAAc,EAAE,CAAC,iBAAiB,EAAE;SACtG,QAAQ,CAAC,sEAAsE,CAAC;IACnF,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC,iBAAiB,EAAE;SACpE,QAAQ,CAAC,iGAAiG,CAAC;IAC9G,sHAAsH;IACtH,kBAAkB,EAAE,OAAO,EAAE,CAAC,WAAW,EAAE,CAAC,cAAc,EAAE;SACzD,QAAQ,CAAC,yEAAyE,CAAC;IACtF,OAAO,EAAE,oBAAoB,CAC3B,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,cAAc,EAAE,CAAC,cAAc,CAAC,oBAAoB,CAAC,YAAY,CAAC,EAClG,aAAa,CAAC,IAAI,EAClB,EAAE,SAAS,EAAE,wBAAwB,EAAE,CACxC,CAAC,QAAQ,CAAC,qCAAqC,CAAC;IACjD;;;OAGG;IACH,cAAc,EAAE,iBAAiB,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;SACvD,QAAQ,CAAC,yGAAyG,CAAC;IACtH,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC,UAAU,CAAC,0BAA0B,CAAC,CAAC,OAAO,CAAC,wBAAwB,CAAC,IAAI,CAAC;SACnH,WAAW,EAAE,CAAC,cAAc,EAAE,CAAC,QAAQ,CAAC,0CAA0C,CAAC;IACtF,aAAa,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,cAAc,EAAE,CAAC,QAAQ,CAAC,6DAA6D,CAAC;IAC9H,0HAA0H;IAC1H,QAAQ,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,iBAAiB,EAAE,CAAC,iBAAiB,EAAE;SAC9F,QAAQ,CAAC,oDAAoD,CAAC;IACjE,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,iBAAiB,EAAE,CAAC,iBAAiB,EAAE;IACnG,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,iBAAiB,EAAE,CAAC,iBAAiB,EAAE;CACtF,CAAC,CAAC,cAAc,CAAC,CAAC,gBAAgB,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC,CAAC;AAI9D,6EAA6E;AAC7E,MAAM,CAAC,MAAM,mCAAmC,GAAG,CAAC,CAAC,YAAY,CAAC;IAChE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,oCAAoC,CAAC;IACxF,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,wEAAwE,CAAC;CACjJ,CAAC,CAAC;AAEH,oDAAoD;AACpD,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC,cAAc,EAAE;IACtD,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,YAAY,EAAE,CAAC,cAAc,EAAE,CAAC,iBAAiB,EAAE;IACnG,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,YAAY,EAAE,CAAC,cAAc,EAAE,CAAC,iBAAiB,EAAE;SAC1F,QAAQ,CAAC,qCAAqC,CAAC;IAClD,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC,UAAU,CAAC,8BAA8B,CAAC,CAAC,cAAc,EAAE,CAAC,iBAAiB,EAAE;SAC5H,QAAQ,CAAC,mFAAmF,CAAC;IAChG,0FAA0F;IAC1F,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC,iBAAiB,EAAE;SACvE,QAAQ,CAAC,0EAA0E,CAAC;IACvF,WAAW,EAAE,OAAO,EAAE,CAAC,cAAc,EAAE,CAAC,QAAQ,CAAC,uBAAuB,CAAC;IACzE,0GAA0G;IAC1G,mCAAmC;IACnC,WAAW,EAAE,oBAAoB,CAC/B,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,cAAc,CAAC,oBAAoB,CAAC,eAAe,CAAC,EACpG,aAAa,CAAC,KAAK,CACpB,CAAC,QAAQ,CAAC,mCAAmC,CAAC;IAC/C,OAAO,EAAE,oBAAoB,CAC3B,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,cAAc,CAAC,oBAAoB,CAAC,YAAY,CAAC,EACjF,aAAa,CAAC,IAAI,EAClB,EAAE,SAAS,EAAE,wBAAwB,EAAE,CACxC,CAAC,QAAQ,CAAC,sBAAsB,CAAC;IAClC;;;OAGG;IACH,WAAW,EAAE,oBAAoB,CAC/B,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,cAAc,CAAC,oBAAoB,CAAC,YAAY,CAAC,EACjF,aAAa,CAAC,IAAI,EAClB,EAAE,SAAS,EAAE,wBAAwB,EAAE,CACxC,CAAC,QAAQ,CAAC,+CAA+C,CAAC;IAC3D,UAAU,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,cAAc,EAAE,CAAC,QAAQ,CAAC,mDAAmD,CAAC;IAEjH,4EAA4E;IAC5E,mHAAmH;IACnH,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,iBAAiB,EAAE;SACrF,QAAQ,CAAC,iGAAiG,CAAC;IAC9G,yFAAyF;IACzF,gBAAgB,EAAE,kCAAkC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,iBAAiB,EAAE;SAC9F,QAAQ,CAAC,uEAAuE,CAAC;IAEpF,4EAA4E;IAC5E;;;OAGG;IACH,uGAAuG;IACvG,gFAAgF;IAChF,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,iBAAiB,EAAE;SACvG,QAAQ,CAAC,iFAAiF,CAAC;IAC9F,cAAc,EAAE,CAAC,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC,UAAU,CAAC,4BAA4B,CAAC,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;SAC/H,iBAAiB,EAAE,CAAC,iBAAiB,EAAE;SACvC,QAAQ,CAAC,sFAAsF,CAAC;IACnG,oFAAoF;IACpF,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,iBAAiB,EAAE;SAC1E,QAAQ,CAAC,oDAAoD,CAAC;IACjE,yGAAyG;IACzG,iBAAiB,EAAE,oBAAoB,CACrC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,iBAAiB,EAAE,CAAC,cAAc,CAAC,oBAAoB,CAAC,YAAY,CAAC,EAChI,aAAa,CAAC,KAAK,CACpB,CAAC,QAAQ,CAAC,wDAAwD,CAAC;IACpE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,iBAAiB,EAAE;SACpE,QAAQ,CAAC,mDAAmD,CAAC;IAChE;;;;OAIG;IACH,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,aAAa,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,iBAAiB,EAAE;SAC7F,QAAQ,CAAC,kGAAkG,CAAC;IAC/G,SAAS,EAAE,mCAAmC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,iBAAiB,EAAE;SACxF,QAAQ,CAAC,yDAAyD,CAAC;IACtE,uDAAuD;IACvD,kBAAkB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,iBAAiB,EAAE,CAAC,iBAAiB,EAAE;SACxF,QAAQ,CAAC,+DAA+D,CAAC;IAC5E,8FAA8F;IAC9F,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,iBAAiB,EAAE,CAAC,iBAAiB,EAAE;SAC9F,QAAQ,CAAC,gDAAgD,CAAC;IAC7D,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,iBAAiB,EAAE,CAAC,iBAAiB,EAAE;SACjF,QAAQ,CAAC,8CAA8C,CAAC;IAE3D,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,iBAAiB,EAAE,CAAC,iBAAiB,EAAE;IACnG,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,iBAAiB,EAAE,CAAC,iBAAiB,EAAE;CACtF,CAAC,CAAC;AAIH;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAC,MAAM,CAAC;IACnD,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC,cAAc,EAAE;IACtD,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,YAAY,EAAE,CAAC,cAAc,EAAE,CAAC,iBAAiB,EAAE;IACnG,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,YAAY,EAAE,CAAC,cAAc,EAAE,CAAC,iBAAiB,EAAE;SAC1F,QAAQ,CAAC,wCAAwC,CAAC;IACrD,gBAAgB,EAAE,OAAO,EAAE,CAAC,cAAc,EAAE,CAAC,iBAAiB,EAAE;SAC7D,QAAQ,CAAC,0FAA0F,CAAC;IACvG;;;OAGG;IACH,qBAAqB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,iBAAiB,EAAE;SAC3E,QAAQ,CAAC,8EAA8E,CAAC;IAC3F,6GAA6G;IAC7G,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,aAAa,EAAE,CAAC,iBAAiB,EAAE;SAC9G,QAAQ,CAAC,6DAA6D,CAAC;IAC1E,QAAQ,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,cAAc,EAAE,CAAC,iBAAiB,EAAE,CAAC,QAAQ,CAAC,4BAA4B,CAAC;IAC9F,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,iBAAiB,EAAE,CAAC,iBAAiB,EAAE;SAC/F,QAAQ,CAAC,gEAAgE,CAAC;IAC7E,gBAAgB,EAAE,CAAC,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC,UAAU,CAAC,4BAA4B,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;SACnH,iBAAiB,EAAE,CAAC,iBAAiB,EAAE;SACvC,QAAQ,CAAC,wCAAwC,CAAC;IACrD,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,iBAAiB,EAAE,CAAC,iBAAiB,EAAE;IACnG,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,iBAAiB,EAAE,CAAC,iBAAiB,EAAE;CACtF,CAAC,CAAC;AAIH,8DAA8D;AAE9D,sCAAsC;AACtC,MAAM,CAAN,IAAY,8BAGX;AAHD,WAAY,8BAA8B;IACxC,kGAAkG;IAClG,iDAAe,CAAA;AACjB,CAAC,EAHW,8BAA8B,KAA9B,8BAA8B,QAGzC","sourcesContent":["/**\n * Conversation threads — the shared thread model every inbound channel correlates into (#1630).\n *\n * Three ORGANIZATIONS-scoped resources:\n *\n * | resource | one row per | what it is for |\n * |---|---|---|\n * | `conversationThreads` | exchange with one counterpart on one channel | correlation, the link to the case, closure |\n * | `conversationMessages` | message, INBOUND or OUTBOUND | the thread's history; an OUTBOUND row is also the reply's delivery ledger |\n * | `conversationReplyTokens` | reply address issued to one recipient on one thread | binding a reply to its thread, stored as a hash |\n *\n * ## Why one thread model and per-channel records\n *\n * Rejected: one table with a JSON union column per channel, which loses per-channel indexes and erasure\n * matching. Rejected equally: channel-specific thread models only, which makes every handler re-implement\n * correlation. So correlation is shared here, and what a message WAS on its channel (bodies, headers,\n * attachments, raw MIME) stays in that channel's record — `INBOUND_EMAILS` for email (#1600) — with its\n * own indexes, retention and erasure. A message points at it through `channelRecordRef`.\n *\n * ## One state, one row\n *\n * An INBOUND message has no status of its own: whether its handler ran is the inbound delivery's status.\n * An OUTBOUND message's `outboundStatus` is the only record of whether its reply was accepted, because no\n * other row describes that submission.\n */\nimport { z } from 'zod';\nimport { addImpersonalizeWith } from '@wildo-ai/zod-decorators';\n\nimport { PersonalDataCategory } from '../compliance/privacy/personal-data-category.shared.schemas';\nimport { RedactionType } from '../compliance/privacy/redaction.shared.schemas';\nimport { WorkUnitRefSchema } from '../resources/work-unit.shared.schemas';\nimport { InboundChannelKind } from './inbound-channels.shared.schemas';\n\n/** @wildo_source:part:start saas.models.conversation-threads facet:layer:shared facet:family:inbound facet:audience:app-developer */\n\n/** Whether a thread still takes messages. */\nexport enum ConversationThreadStatus {\n  OPEN = 'open',\n  /**\n   * The exchange is over. Closing revokes every reply token of the thread, and starts the thread's\n   * retention clock: a closed thread is kept for the `RESOURCE_DATA` period from `closedAt`. Its messages\n   * keep their own, statutory, clock.\n   */\n  CLOSED = 'closed',\n}\n\n/** Which way a message travelled. */\nexport enum ConversationMessageDirection {\n  /** Received from the counterpart; its handler run is recorded on the inbound delivery. */\n  INBOUND = 'inbound',\n  /** Sent by the application, as a handler's reply. */\n  OUTBOUND = 'outbound',\n}\n\n/** Where an OUTBOUND message stands with the sending provider. */\nexport enum ConversationOutboundStatus {\n  /** Written by `ctx.reply` and waiting for the reply worker. */\n  QUEUED = 'queued',\n  /** The sending provider accepted the submission. Terminal: a retry of the same submission never sends again. */\n  ACCEPTED_BY_PROVIDER = 'accepted_by_provider',\n  /** The provider refused it, or the reply could not be sent at all. Terminal; the reason is `failureCode`. */\n  FAILED = 'failed',\n}\n\n/** Why a reply token stopped binding replies. */\nexport enum ReplyTokenRevocationReason {\n  /** Its thread was closed. */\n  THREAD_CLOSED = 'thread_closed',\n  /** The thread's counterpart changed, so a token issued to the previous one names nobody on the thread. */\n  COUNTERPART_CHANGED = 'counterpart_changed',\n  /**\n   * It was issued to a member of the organization who is no longer one. Detected when the token is next\n   * USED, which is the one place every removal door converges: whether the member left, was removed,\n   * suspended or erased, the token no longer binds from that moment.\n   */\n  MEMBER_REMOVED = 'member_removed',\n  /** A newer token was issued to the same recipient on the same thread; one live address per recipient. */\n  ROTATED = 'rotated',\n}\n\n/** Placeholder written over free text an erasure scrubs. */\nexport const ERASED_CONVERSATION_TEXT = '[erased]';\n\nconst address = () => addImpersonalizeWith(\n  z.string().min(1).max(320).dataCategories(PersonalDataCategory.CONTACT_DETAILS),\n  RedactionType.MASK,\n  { maskValue: ERASED_CONVERSATION_TEXT },\n);\n\n/** What a message's channel record is. The record's resource type is decided by the channel. */\nexport const ConversationChannelRecordRefSchema = z.strictObject({\n  resourceType: z.string().min(1).describe('The resource holding what the message was on its channel — `inboundEmails` for email.'),\n  resourceId: z.string().min(1).describe('The id of that row.'),\n});\n\nexport type ConversationChannelRecordRef = z.infer<typeof ConversationChannelRecordRefSchema>;\n\n/**\n * One exchange with one counterpart on one channel.\n *\n * `threadKey` is the channel's correlation key — for email, the `Message-ID` of the message that opened\n * the thread — unique per organization and channel: the same message delivered to two organizations\n * opens a thread in each.\n */\nexport const ConversationThreadSchema = z.object({\n  _id: z.string().min(1).isPrimaryKey().isSummaryField(),\n  organizationId: z.string().min(1).isDBIndexed().isForeignKey().isSummaryField().excludeFromUpdate(),\n  channel: z.enum(InboundChannelKind).systemEnum('InboundChannelKind').isSummaryField().excludeFromUpdate()\n    .describe('The channel the thread runs on. Replies go out on this channel only.'),\n  threadKey: z.string().min(1).max(998).isDBIndexed().excludeFromUpdate()\n    .describe(\"The channel's correlation key: for email, the Message-ID of the message that opened the thread.\"),\n  /** The address the application is exchanging messages with. Changing it revokes the previous counterpart's tokens. */\n  counterpartAddress: address().isDBIndexed().isSummaryField()\n    .describe('The address the application is exchanging messages with on this thread.'),\n  subject: addImpersonalizeWith(\n    z.string().max(998).default('').isSummaryField().dataCategories(PersonalDataCategory.USER_CONTENT),\n    RedactionType.MASK,\n    { maskValue: ERASED_CONVERSATION_TEXT },\n  ).describe('The subject the thread opened with.'),\n  /**\n   * The case the thread is about, set by the handler once it knows (a todo it created, a matter it\n   * found). A `WorkUnitRef`: the one name for a case across the backbone epic.\n   */\n  linkedResource: WorkUnitRefSchema.nullable().default(null)\n    .describe('The case this thread is about — the record a handler linked it to — or null while it is linked to none.'),\n  status: z.enum(ConversationThreadStatus).systemEnum('ConversationThreadStatus').default(ConversationThreadStatus.OPEN)\n    .isDBIndexed().isSummaryField().describe('Whether the thread still takes messages.'),\n  lastMessageAt: z.date().isDBIndexed().isSummaryField().describe('When the latest message, in either direction, was recorded.'),\n  /** Set when the thread closes — the retention clock's start. Server-owned: a caller setting it could order a deletion. */\n  closedAt: z.date().isDBIndexed().nullable().default(null).excludeFromCreate().excludeFromUpdate()\n    .describe('When the thread was closed; null while it is open.'),\n  createdAt: z.date().default(() => new Date()).isDBIndexed().excludeFromCreate().excludeFromUpdate(),\n  updatedAt: z.date().default(() => new Date()).excludeFromCreate().excludeFromUpdate(),\n}).businessKeySet(['organizationId', 'channel', 'threadKey']);\n\nexport type ConversationThread = z.infer<typeof ConversationThreadSchema>;\n\n/** The threading identity of an OUTBOUND message, as it went on the wire. */\nexport const ConversationOutboundThreadingSchema = z.strictObject({\n  inReplyTo: z.string().max(998).optional().describe('The Message-ID this reply answers.'),\n  references: z.array(z.string().max(998)).max(100).default([]).describe('The thread\\'s Message-IDs, oldest first, ending with the one answered.'),\n});\n\n/** One message of a thread, in either direction. */\nexport const ConversationMessageSchema = z.object({\n  _id: z.string().min(1).isPrimaryKey().isSummaryField(),\n  organizationId: z.string().min(1).isDBIndexed().isForeignKey().isSummaryField().excludeFromUpdate(),\n  threadId: z.string().min(1).isDBIndexed().isForeignKey().isSummaryField().excludeFromUpdate()\n    .describe('The thread this message belongs to.'),\n  direction: z.enum(ConversationMessageDirection).systemEnum('ConversationMessageDirection').isSummaryField().excludeFromUpdate()\n    .describe('Whether the message was received from the counterpart or sent by the application.'),\n  /** The RFC 5322 Message-ID on the wire — what a later In-Reply-To or References names. */\n  rfcMessageId: z.string().min(1).max(998).isDBIndexed().excludeFromUpdate()\n    .describe('The Message-ID the message carried on the wire, angle brackets included.'),\n  fromAddress: address().isSummaryField().describe('Who sent the message.'),\n  // RESET, not MASK: the treatment belongs to the ARRAY, and a mask string is not an array. Erasure returns\n  // the list to its default — empty.\n  toAddresses: addImpersonalizeWith(\n    z.array(z.string().min(1).max(320)).default([]).dataCategories(PersonalDataCategory.CONTACT_DETAILS),\n    RedactionType.RESET,\n  ).describe('Who the message was addressed to.'),\n  subject: addImpersonalizeWith(\n    z.string().max(998).default('').dataCategories(PersonalDataCategory.USER_CONTENT),\n    RedactionType.MASK,\n    { maskValue: ERASED_CONVERSATION_TEXT },\n  ).describe('The message subject.'),\n  /**\n   * The first characters of the message text, for the thread view. The whole message stays in its channel\n   * record; this is a preview, never the record.\n   */\n  textPreview: addImpersonalizeWith(\n    z.string().max(500).default('').dataCategories(PersonalDataCategory.USER_CONTENT),\n    RedactionType.MASK,\n    { maskValue: ERASED_CONVERSATION_TEXT },\n  ).describe('The first 500 characters of the message text.'),\n  occurredAt: z.date().isDBIndexed().isSummaryField().describe('When the message was received, or queued to send.'),\n\n  // INBOUND ─────────────────────────────────────────────────────────────────\n  /** INBOUND: the delivery that carried it. Its status is this message's handler status — there is no second one. */\n  inboundDeliveryId: z.string().isDBIndexed().nullable().default(null).excludeFromUpdate()\n    .describe('For a received message, the inbound delivery that carried it; its status is the handler run\\'s.'),\n  /** INBOUND: what the message was on its channel (the `INBOUND_EMAILS` row for email). */\n  channelRecordRef: ConversationChannelRecordRefSchema.nullable().default(null).excludeFromUpdate()\n    .describe('For a received message, the channel record holding the whole message.'),\n\n  // OUTBOUND ────────────────────────────────────────────────────────────────\n  /**\n   * OUTBOUND: the one logical submission this row stands for — deterministic, derived from the row, and\n   * handed to the sending provider as its idempotency key, so a retried reply is accepted at most once.\n   */\n  // `.optional()`, never `.nullable().default(null)`: a sparse unique index skips a MISSING field, not a\n  // stored null, so every received message would collide on `null` under MongoDB.\n  submissionId: z.string().min(1).isUnique({ scope: 'global', sparse: true }).optional().excludeFromUpdate()\n    .describe('For a reply, the idempotency key of its one submission to the sending provider.'),\n  outboundStatus: z.enum(ConversationOutboundStatus).systemEnum('ConversationOutboundStatus').isDBIndexed().nullable().default(null)\n    .excludeFromCreate().excludeFromUpdate()\n    .describe('For a reply, where it stands with the sending provider; null for a received message.'),\n  /** OUTBOUND: the template the HANDLER chose, and the variables it rendered with. */\n  templateRef: z.string().max(200).nullable().default(null).excludeFromUpdate()\n    .describe('For a reply, the email template the handler chose.'),\n  // RESET to the default (`null`): a field carrying a `.default()` is not clearable, so REMOVE is refused.\n  templateVariables: addImpersonalizeWith(\n    z.record(z.string(), z.unknown()).nullable().default(null).excludeFromUpdate().dataCategories(PersonalDataCategory.USER_CONTENT),\n    RedactionType.RESET,\n  ).describe('For a reply, the variables the template rendered with.'),\n  locale: z.string().max(35).nullable().default(null).excludeFromUpdate()\n    .describe('For a reply, the locale the template rendered in.'),\n  /**\n   * For a reply, while it is QUEUED: the Reply-To address its first send attempt composed. It carries the\n   * reply token IN PLAINTEXT (I12), so it is backend-only — no API returns it — and it is cleared when the\n   * reply settles (accepted or failed). It is kept that long only so a retried attempt sends the same address.\n   */\n  replyToAddress: z.string().max(320).isBackendOnly().nullable().default(null).excludeFromUpdate()\n    .describe('For a queued reply only, the Reply-To address its send composed; cleared when the reply settles.'),\n  threading: ConversationOutboundThreadingSchema.nullable().default(null).excludeFromUpdate()\n    .describe('For a reply, the In-Reply-To and References it carried.'),\n  /** OUTBOUND: the provider's receipt, once accepted. */\n  providerMessageIds: z.array(z.string()).default([]).excludeFromCreate().excludeFromUpdate()\n    .describe('For an accepted reply, the ids the sending provider returned.'),\n  /** OUTBOUND: a classified failure, never an error message (which could quote the content). */\n  failureCode: z.string().max(200).nullable().default(null).excludeFromCreate().excludeFromUpdate()\n    .describe('For a failed reply, a classified failure code.'),\n  settledAt: z.date().nullable().default(null).excludeFromCreate().excludeFromUpdate()\n    .describe('For a reply, when it was accepted or failed.'),\n\n  createdAt: z.date().default(() => new Date()).isDBIndexed().excludeFromCreate().excludeFromUpdate(),\n  updatedAt: z.date().default(() => new Date()).excludeFromCreate().excludeFromUpdate(),\n});\n\nexport type ConversationMessage = z.infer<typeof ConversationMessageSchema>;\n\n/**\n * One reply address issued to one recipient on one thread.\n *\n * The token itself is a bearer secret — whoever holds the address can post to the thread under that\n * recipient's name, as with any reply-by-email system — so only its SHA-256 is stored, and the plaintext\n * exists only in the address the reply carried. At least 128 bits from a CSPRNG.\n */\nexport const ConversationReplyTokenSchema = z.object({\n  _id: z.string().min(1).isPrimaryKey().isSummaryField(),\n  organizationId: z.string().min(1).isDBIndexed().isForeignKey().isSummaryField().excludeFromUpdate(),\n  threadId: z.string().min(1).isDBIndexed().isForeignKey().isSummaryField().excludeFromUpdate()\n    .describe('The thread the token binds replies to.'),\n  recipientAddress: address().isSummaryField().excludeFromUpdate()\n    .describe('The address the token was issued to; only a reply from this address binds to the thread.'),\n  /**\n   * When the recipient was a member of the organization at issue, that member's user id — re-checked when\n   * the token is used, so a removed member's token stops binding.\n   */\n  recipientMemberUserId: z.string().nullable().default(null).excludeFromUpdate()\n    .describe('The organization member the token was issued to, when the recipient was one.'),\n  /** SHA-256 (hex) of the token. Lookup is global by hash; the token's organization must be the routed one. */\n  tokenHash: z.string().length(64).isUnique({ scope: 'global', sparse: false }).isBackendOnly().excludeFromUpdate()\n    .describe('The SHA-256 of the token. The token itself is never stored.'),\n  issuedAt: z.date().isSummaryField().excludeFromUpdate().describe('When the token was issued.'),\n  revokedAt: z.date().isDBIndexed().nullable().default(null).excludeFromCreate().excludeFromUpdate()\n    .describe('When the token stopped binding replies; null while it is live.'),\n  revocationReason: z.enum(ReplyTokenRevocationReason).systemEnum('ReplyTokenRevocationReason').nullable().default(null)\n    .excludeFromCreate().excludeFromUpdate()\n    .describe('Why the token stopped binding replies.'),\n  createdAt: z.date().default(() => new Date()).isDBIndexed().excludeFromCreate().excludeFromUpdate(),\n  updatedAt: z.date().default(() => new Date()).excludeFromCreate().excludeFromUpdate(),\n});\n\nexport type ConversationReplyToken = z.infer<typeof ConversationReplyTokenSchema>;\n\n/** @wildo_source:part:end saas.models.conversation-threads */\n\n/** Thread verbs a person may take. */\nexport enum ConversationThreads_Operations {\n  /** Close the exchange: revokes every reply token of the thread and starts its retention clock. */\n  CLOSE = 'close',\n}\n"]}

package/dist/esm/inbound/inbound-channels.shared.schemas.d.ts

@@ -0,0 +1,195 @@
+/**
+ * Inbound channels — the vocabulary of HOW a message reached the application, how much is known about
+ * who sent it, and whether and how the handler answers (#1630).
+ *
+ * A CHANNEL is what the message arrived on, not who carried it. `EMAIL` is a channel an application
+ * declares a handler for; the provider that hosts the receiving domain is the application's
+ * `EMAIL_INBOUND` selection and is never named by a handler. `WEBHOOK` is the channel of every
+ * delivery #1596's endpoint sources receive, and is DERIVED for those rows, never declared.
+ *
+ * @see engine/saas-models/src/inbound/inbound-delivery.shared.schemas.ts — the durable delivery these
+ *   channels feed.
+ */
+import { type StandardInboundEmail_Authentication } from '@wildo-ai/external-connectors-models';
+/** @wildo_source:part:start saas.models.inbound-channels facet:layer:shared facet:family:inbound facet:audience:app-developer */
+/**
+ * What a message arrived on.
+ *
+ * SMS, chat and Slack join this vocabulary when a provider can fill them — a channel nothing can
+ * receive on is a slot no configuration can satisfy.
+ */
+export declare enum InboundChannelKind {
+    /** Email received through the application's `EMAIL_INBOUND` provider and routed to an organization. */
+    EMAIL = "email",
+    /**
+     * A signed HTTP delivery from another system (#1596). Derived for provider and application endpoint
+     * deliveries; a handler never declares it.
+     */
+    WEBHOOK = "webhook"
+}
+/**
+ * How much is known about who SENT a message.
+ *
+ * **Identification, never authentication.** An address, a domain or even a reply token identifies a
+ * sender to some degree; none of them authenticates a person. Assurance therefore GATES what a handler
+ * accepts (a handler declares the minimum it will act on) and grants NO authority: the handler acts
+ * with the roles it declares, whoever wrote.
+ *
+ * spec-cite: NIST SP 800-63B rev. 4 §3.1.3.1 ("Email SHALL NOT be used for out-of-band authentication");
+ * RFC 7489 §3.1 (DMARC authenticates the RFC5322.From DOMAIN by alignment with an authenticated
+ * identifier, not the person). Both as recorded in #1630's decisions log, 2026-09-25.
+ *
+ * **Ordered only within a channel.** Each channel has its own ladder ({@link INBOUND_SENDER_ASSURANCE_LADDERS});
+ * a signed webhook is not "more" or "less" than a domain-aligned email, so there is no total order and
+ * comparing across channels is refused.
+ */
+export declare enum InboundSenderAssurance {
+    /** Nothing about the sender verified. The floor of every ladder. */
+    UNVERIFIED = "unverified",
+    /** WEBHOOK: the delivery carried a valid signature under the source's secret. Identifies the SOURCE system. */
+    SOURCE_SIGNED = "source_signed",
+    /** EMAIL: DMARC passed and is aligned with the `From` domain — the domain, not the mailbox, is authenticated. */
+    DOMAIN_ALIGNED = "domain_aligned",
+    /**
+     * EMAIL: domain-aligned, and the address is known to the routed organization — a verified member, or a
+     * contact the application's resolver recognises.
+     */
+    KNOWN_CONTACT = "known_contact",
+    /**
+     * EMAIL: domain-aligned, arrived on an unrevoked reply token the application issued for this thread,
+     * and `From` is the address that token was issued to.
+     */
+    THREAD_TOKEN_BOUND = "thread_token_bound"
+}
+/** The assurance levels meaningful on each channel — the type a channel's ladder and minimum are drawn from. */
+export interface InboundSenderAssuranceByChannel {
+    [InboundChannelKind.EMAIL]: InboundSenderAssurance.UNVERIFIED | InboundSenderAssurance.DOMAIN_ALIGNED | InboundSenderAssurance.KNOWN_CONTACT | InboundSenderAssurance.THREAD_TOKEN_BOUND;
+    [InboundChannelKind.WEBHOOK]: InboundSenderAssurance.UNVERIFIED | InboundSenderAssurance.SOURCE_SIGNED;
+}
+/** An assurance level of channel `C`. `SenderAssuranceOf<EMAIL>` does not admit `SOURCE_SIGNED`. */
+export type SenderAssuranceOf<C extends InboundChannelKind> = InboundSenderAssuranceByChannel[C];
+/**
+ * Each channel's ladder, lowest first. Total over {@link InboundChannelKind}: a channel added without a
+ * ladder does not compile.
+ */
+export declare const INBOUND_SENDER_ASSURANCE_LADDERS: {
+    readonly [C in InboundChannelKind]: readonly SenderAssuranceOf<C>[];
+};
+/** Thrown when an assurance level is asked about on a channel whose ladder does not contain it. */
+export declare class InboundSenderAssuranceChannelError extends Error {
+    constructor(channel: InboundChannelKind, level: InboundSenderAssurance);
+}
+/**
+ * The rank of `level` on `channel`'s ladder, 0 for the floor.
+ *
+ * The type admits only that channel's levels, so `senderAssuranceRank(InboundChannelKind.WEBHOOK,
+ * InboundSenderAssurance.DOMAIN_ALIGNED)` does not compile; a value that reached here untyped (a stored
+ * row, a JSON payload) and is not on the ladder throws rather than ranking as anything.
+ */
+export declare function senderAssuranceRank<C extends InboundChannelKind>(channel: C, level: SenderAssuranceOf<C>): number;
+/** Whether `level` is at least `minimum`, both on `channel`'s ladder. */
+export declare function meetsMinimumSenderAssurance<C extends InboundChannelKind>(channel: C, level: SenderAssuranceOf<C>, minimum: SenderAssuranceOf<C>): boolean;
+/** Whether `level` is a level of `channel` — for narrowing a value read back from storage. */
+export declare function isSenderAssuranceOf<C extends InboundChannelKind>(channel: C, level: InboundSenderAssurance): level is SenderAssuranceOf<C>;
+/**
+ * Whether a channel handler answers, and how. Required on every handler, with no default: a handler
+ * that answers and one that does not are different programs, and the type system knows which one it
+ * is holding (`ctx.reply` exists only under {@link InboundReplyMode.THREAD}).
+ */
+export declare enum InboundReplyMode {
+    /** Replies go back on the thread the message arrived on, through the channel's outbound path. */
+    THREAD = "thread",
+    /** The handler never answers. Every endpoint handler (#1596) and billing declare this. */
+    NONE = "none"
+}
+/**
+ * What happened to a channel message whose sender assurance is below the selected handler's minimum
+ * (#1630). A below-minimum message never reaches the main handler (I11). What it causes instead is the
+ * application's binding: a declared below-minimum handler, or nothing but storage and an audit row.
+ */
+export declare enum InboundBelowMinimumDisposition {
+    /** The handler declared a below-minimum handler, and the message was dispatched to it instead. */
+    ROUTED_TO_BELOW_MINIMUM_HANDLER = "routed_to_below_minimum_handler",
+    /** No below-minimum handler: stored in its channel record and audited, and dispatched to nobody. */
+    STORED_NOT_DISPATCHED = "stored_not_dispatched"
+}
+/** What the routed organization knows about a sender's address. */
+export declare enum EmailSenderContactMatch {
+    /** Neither a member nor a contact the application recognises. */
+    NONE = "none",
+    /** A verified, active member of the routed organization (engine-known; sets `memberUserId`). */
+    ORGANIZATION_MEMBER = "organization_member",
+    /** The application's contact resolver answered true. The engine keeps no contacts of its own. */
+    APPLICATION_CONTACT = "application_contact"
+}
+/** How the reply token a message arrived on (if any) relates to its sender. */
+export declare enum EmailReplyTokenSenderMatch {
+    /** The message did not arrive on a live token of the routed organization. */
+    NO_TOKEN = "no_token",
+    /** A live token, and `From` is the address it was issued to. */
+    MATCHES_RECIPIENT = "matches_recipient",
+    /** A live token, `From` is on the recipient's domain but is another mailbox. */
+    OTHER_ADDRESS_SAME_DOMAIN = "other_address_same_domain",
+    /** A live token, `From` is on another domain than the address it was issued to. */
+    OTHER_DOMAIN = "other_domain"
+}
+/** Why a live reply token did not bind its message — recorded on `INBOUND_REPLY_TOKEN_DOWNGRADED`. */
+export declare enum ReplyTokenDowngradeReason {
+    /** `From` is not the address the token was issued to, though on its domain. */
+    SENDER_ADDRESS_MISMATCH = "sender_address_mismatch",
+    /** `From` is on another domain than the address the token was issued to — the case a leaked token looks like. */
+    SENDER_DOMAIN_MISMATCH = "sender_domain_mismatch",
+    /** The token is live but DMARC did not pass aligned, so the `From` domain itself is unauthenticated. */
+    DOMAIN_NOT_ALIGNED = "domain_not_aligned"
+}
+/** The inputs {@link deriveEmailSenderAssurance} reads. All of them are facts, never answers a sender gave. */
+export interface EmailSenderAssuranceInput {
+    readonly authentication: StandardInboundEmail_Authentication;
+    readonly contactMatch: EmailSenderContactMatch;
+    readonly tokenMatch: EmailReplyTokenSenderMatch;
+}
+export interface EmailSenderAssuranceDerivation {
+    readonly assurance: SenderAssuranceOf<InboundChannelKind.EMAIL>;
+    /** Set when a live token arrived and did not bind the message; the caller audits it. */
+    readonly tokenDowngrade?: ReplyTokenDowngradeReason;
+}
+/** DMARC passed AND aligned with the `From` domain — the one fact every level above the floor rests on. */
+export declare function isEmailDomainAligned(authentication: StandardInboundEmail_Authentication): boolean;
+/**
+ * Derive an email's sender assurance. PURE: every input is a fact the engine established (the
+ * provider's authentication results, a member or contact lookup, a token lookup).
+ *
+ * - `UNVERIFIED`: DMARC did not pass aligned with `From`. Nothing below is consulted: a token or a
+ *   known address on an unauthenticated domain proves nothing, since anyone can write that `From`.
+ * - `THREAD_TOKEN_BOUND`: aligned, and the message arrived on a live token issued to `From`.
+ * - `KNOWN_CONTACT`: aligned, and the address is a member or a recognised contact.
+ * - `DOMAIN_ALIGNED`: aligned, and nothing more is known.
+ *
+ * A live token that did not bind — `From` is someone else, or the domain did not align — falls back to
+ * the level the rest derives and reports why in `tokenDowngrade`, which the caller audits.
+ */
+export declare function deriveEmailSenderAssurance(input: EmailSenderAssuranceInput): EmailSenderAssuranceDerivation;
+/** The domain of an address, lower-cased; `undefined` when there is no `@`. */
+export declare function emailAddressDomain(address: string): string | undefined;
+/**
+ * Whether two addresses are on the same domain. An address with no domain shares a domain with nothing —
+ * not even another address with no domain — so a malformed `From` can never pass as a colleague's.
+ */
+export declare function emailAddressesShareDomain(first: string, second: string): boolean;
+/** How `from` relates to the address a reply token was issued to. Addresses compare case-insensitively. */
+export declare function matchReplyTokenSender(from: string, recipient: string): Exclude<EmailReplyTokenSenderMatch, EmailReplyTokenSenderMatch.NO_TOKEN>;
+/**
+ * One RFC 5322 `msg-id` — angle brackets, one `@`, no whitespace and no CR/LF. The one check for a
+ * Message-ID wherever the engine reads one from a sender (`In-Reply-To`, `References`) or writes one into
+ * a header, so a value that could inject a header or break threading is dropped where it arrives.
+ */
+export declare const EMAIL_MESSAGE_ID_PATTERN: RegExp;
+export declare function isEmailMessageId(value: unknown): value is string;
+/**
+ * What an inbound handler's `ref` looks like: lower-case, dot-separated segments of `[a-z0-9-]`
+ * (`todos.intake`, `matters.mail-intake`). One definition for the backend's `inboundHandlerRef()`, which
+ * refuses anything else at module load, and for a build plan naming the handler a task produces.
+ */
+export declare const INBOUND_HANDLER_REF_PATTERN: RegExp;
+/** @wildo_source:part:end saas.models.inbound-channels */
+//# sourceMappingURL=inbound-channels.shared.schemas.d.ts.map

package/dist/esm/inbound/inbound-channels.shared.schemas.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"inbound-channels.shared.schemas.d.ts","sourceRoot":"","sources":["../../../../src/inbound/inbound-channels.shared.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,EAA8B,KAAK,mCAAmC,EAAE,MAAM,sCAAsC,CAAC;AAE5H,iIAAiI;AAEjI;;;;;GAKG;AACH,oBAAY,kBAAkB;IAC5B,uGAAuG;IACvG,KAAK,UAAU;IACf;;;OAGG;IACH,OAAO,YAAY;CACpB;AAED;;;;;;;;;;;;;;;GAeG;AACH,oBAAY,sBAAsB;IAChC,oEAAoE;IACpE,UAAU,eAAe;IACzB,+GAA+G;IAC/G,aAAa,kBAAkB;IAC/B,iHAAiH;IACjH,cAAc,mBAAmB;IACjC;;;OAGG;IACH,aAAa,kBAAkB;IAC/B;;;OAGG;IACH,kBAAkB,uBAAuB;CAC1C;AAED,gHAAgH;AAChH,MAAM,WAAW,+BAA+B;IAC9C,CAAC,kBAAkB,CAAC,KAAK,CAAC,EACtB,sBAAsB,CAAC,UAAU,GACjC,sBAAsB,CAAC,cAAc,GACrC,sBAAsB,CAAC,aAAa,GACpC,sBAAsB,CAAC,kBAAkB,CAAC;IAC9C,CAAC,kBAAkB,CAAC,OAAO,CAAC,EAAE,sBAAsB,CAAC,UAAU,GAAG,sBAAsB,CAAC,aAAa,CAAC;CACxG;AAED,oGAAoG;AACpG,MAAM,MAAM,iBAAiB,CAAC,CAAC,SAAS,kBAAkB,IAAI,+BAA+B,CAAC,CAAC,CAAC,CAAC;AAEjG;;;GAGG;AACH,eAAO,MAAM,gCAAgC,EAAE;IAAE,QAAQ,EAAE,CAAC,IAAI,kBAAkB,GAAG,SAAS,iBAAiB,CAAC,CAAC,CAAC,EAAE;CAQnH,CAAC;AAEF,mGAAmG;AACnG,qBAAa,kCAAmC,SAAQ,KAAK;gBAC/C,OAAO,EAAE,kBAAkB,EAAE,KAAK,EAAE,sBAAsB;CAIvE;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,CAAC,SAAS,kBAAkB,EAAE,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,iBAAiB,CAAC,CAAC,CAAC,GAAG,MAAM,CAKjH;AAED,yEAAyE;AACzE,wBAAgB,2BAA2B,CAAC,CAAC,SAAS,kBAAkB,EAAE,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,iBAAiB,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,iBAAiB,CAAC,CAAC,CAAC,GAAG,OAAO,CAEzJ;AAED,8FAA8F;AAC9F,wBAAgB,mBAAmB,CAAC,CAAC,SAAS,kBAAkB,EAAE,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,sBAAsB,GAAG,KAAK,IAAI,iBAAiB,CAAC,CAAC,CAAC,CAE1I;AAED;;;;GAIG;AACH,oBAAY,gBAAgB;IAC1B,iGAAiG;IACjG,MAAM,WAAW;IACjB,0FAA0F;IAC1F,IAAI,SAAS;CACd;AAED;;;;GAIG;AACH,oBAAY,8BAA8B;IACxC,kGAAkG;IAClG,+BAA+B,oCAAoC;IACnE,oGAAoG;IACpG,qBAAqB,0BAA0B;CAChD;AAMD,mEAAmE;AACnE,oBAAY,uBAAuB;IACjC,iEAAiE;IACjE,IAAI,SAAS;IACb,gGAAgG;IAChG,mBAAmB,wBAAwB;IAC3C,iGAAiG;IACjG,mBAAmB,wBAAwB;CAC5C;AAED,+EAA+E;AAC/E,oBAAY,0BAA0B;IACpC,6EAA6E;IAC7E,QAAQ,aAAa;IACrB,gEAAgE;IAChE,iBAAiB,sBAAsB;IACvC,gFAAgF;IAChF,yBAAyB,8BAA8B;IACvD,mFAAmF;IACnF,YAAY,iBAAiB;CAC9B;AAED,sGAAsG;AACtG,oBAAY,yBAAyB;IACnC,+EAA+E;IAC/E,uBAAuB,4BAA4B;IACnD,iHAAiH;IACjH,sBAAsB,2BAA2B;IACjD,wGAAwG;IACxG,kBAAkB,uBAAuB;CAC1C;AAED,+GAA+G;AAC/G,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,cAAc,EAAE,mCAAmC,CAAC;IAC7D,QAAQ,CAAC,YAAY,EAAE,uBAAuB,CAAC;IAC/C,QAAQ,CAAC,UAAU,EAAE,0BAA0B,CAAC;CACjD;AAED,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,SAAS,EAAE,iBAAiB,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC;IAChE,wFAAwF;IACxF,QAAQ,CAAC,cAAc,CAAC,EAAE,yBAAyB,CAAC;CACrD;AAED,2GAA2G;AAC3G,wBAAgB,oBAAoB,CAAC,cAAc,EAAE,mCAAmC,GAAG,OAAO,CAEjG;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,yBAAyB,GAAG,8BAA8B,CAsB3G;AAED,+EAA+E;AAC/E,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAGtE;AAED;;;GAGG;AACH,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAGhF;AAED,2GAA2G;AAC3G,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,0BAA0B,EAAE,0BAA0B,CAAC,QAAQ,CAAC,CAK/I;AAED;;;;GAIG;AACH,eAAO,MAAM,wBAAwB,QAA4B,CAAC;AAElE,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAEhE;AAED;;;;GAIG;AACH,eAAO,MAAM,2BAA2B,QAA0C,CAAC;AAEnF,0DAA0D"}