@wildo-ai/saas-models 1.1.5 → 1.1.6

package/dist/esm/inbound/inbound-delivery.shared.schemas.d.ts

@@ -0,0 +1,404 @@
+/**
+ * Inbound deliveries — the durable record of every verified message an application RECEIVED from
+ * another system, and the named vocabularies the inbound pipeline speaks (#1596).
+ *
+ * ## What an inbound delivery is
+ *
+ * A webhook POST (or, later, another inbound channel) that arrived at the application, passed
+ * signature verification, and was written here BEFORE anything acted on it. The row is three things
+ * at once, like its outbound twin `m2mWebhookDeliveryLog`:
+ *
+ *  1. the DEDUPLICATION LEDGER — `(sourceKey, dedupKey)` is unique, so one provider event causes at
+ *     most one handler run however many times the provider retries it (a Redis claim cannot promise
+ *     that: its TTL is shorter than a provider's retry window — Stripe retries for three days);
+ *  2. the WORK QUEUE the dispatch worker drains — `status` + `nextAttemptAt`;
+ *  3. the OPERATOR'S LOG — an administrator lists deliveries, sees why one is `DEAD`, and replays it.
+ *
+ * ## Why it is polymorphic over ORGANIZATION and APPLICATION
+ *
+ * A delivery's payload usually carries a client organization's personal data. Storing the row in its
+ * resolved organization's variant means it is erased with that organization (COMPOSITION,
+ * `onParentDelete: IMMEDIATE`) and is visible to that organization's administrator — the same
+ * tenant-segregation argument as the outbound delivery log. A delivery that resolves to no
+ * organization (an APPLICATION-scope handler, or an `UNROUTABLE` delivery) lives in the application
+ * variant.
+ *
+ * The consequence, stated rather than hidden: the two variants are two tables, so the unique index is
+ * per variant. The pipeline therefore resolves scope BEFORE inserting, and checks the other variant
+ * for the same key first. See `inbound-delivery-store.backend.service.ts` for the residual that
+ * leaves (two concurrent copies of one event resolving to different scopes in the same instant).
+ *
+ * @see engine/saas-models/src/notifications/m2m/m2m-webhook-delivery-log.shared.schemas.ts — the
+ *   outbound twin this is modelled on.
+ */
+import { z } from 'zod';
+import { InboundChannelKind, InboundSenderAssurance } from './inbound-channels.shared.schemas';
+/**
+ * Where an inbound delivery came from — decides which route receives it and who owns its
+ * verification.
+ */
+export declare enum InboundSourceKind {
+    /**
+     * A PROVIDER declared the endpoint (`Hook_Endpoint` under `WEBHOOK_ORIGINATOR`) and owns its
+     * verification — Stripe's SDK `constructEvent`, for one. Route: `POST /webhooks/{providerRef}/{endpointKey}`.
+     */
+    PROVIDER_ENDPOINT = "provider_endpoint",
+    /**
+     * The APPLICATION declared the endpoint on a handler and chose an engine-owned verification
+     * scheme. Route: `POST /webhooks/app/{endpointKey}` — the provider ref `app` is reserved so the
+     * two route families can never collide.
+     */
+    APPLICATION_ENDPOINT = "application_endpoint",
+    /**
+     * A message received on an inbound CHANNEL (#1630) — email today — routed to an organization and
+     * handed to the channel handler selected for it. The handler names the channel, never the provider
+     * that received the message: that is the application's `EMAIL_INBOUND` selection.
+     */
+    CHANNEL = "channel"
+}
+/**
+ * Which scope a handler's deliveries run in. Declared by the handler, enforced by the pipeline: a
+ * delivery never runs in a scope its handler did not declare, and nothing ever FALLS BACK to the
+ * application scope.
+ */
+export declare enum InboundHandlerScopeMode {
+    /**
+     * Every delivery must resolve to one organization. One that does not is `UNROUTABLE` — recorded,
+     * audited, acknowledged with 200 and never run. It is NOT run at application scope, because the
+     * handler was written for a tenant and application scope would give it every tenant.
+     */
+    ORGANIZATION_REQUIRED = "organization_required",
+    /** Deliveries run at application scope; no organization is resolved. */
+    APPLICATION = "application",
+    /**
+     * The handler's `resolveScope` decides per delivery, because the source's events genuinely belong to
+     * different scopes (billing: a subscription event belongs to an organization's billing account, or to one
+     * person's). `resolveScope` must answer one of {@link InboundResolvedScopeKind}; there is no default.
+     *
+     * The handler is admitted to exactly the scopes it declares `actingRoles` for, and must declare at least
+     * one (#1629). A resolver answering a scope the handler holds no roles in makes the delivery `UNROUTABLE`
+     * (`SCOPE_NOT_ADMITTED_BY_HANDLER`). The `USER` scope is reachable only through this mode.
+     */
+    RESOLVED_PER_DELIVERY = "resolved_per_delivery"
+}
+/** What scope resolution concluded for one delivery. */
+export declare enum InboundResolvedScopeKind {
+    ORGANIZATION = "organization",
+    APPLICATION = "application",
+    /**
+     * The delivery belongs to ONE person — their personal (`USER_SELF`) data, such as a personal billing
+     * account (#1629). The handler acts with its declared `actingRoles.user` (application roles, since
+     * personal resources gate on them), confined to that person's rows. The person is the delivery's SCOPE:
+     * nobody authenticated as them. Stored in the application variant, where the application's operators
+     * see it.
+     */
+    USER = "user",
+    /** No admissible scope — the delivery is recorded and acknowledged, never run. */
+    UNROUTABLE = "unroutable"
+}
+/**
+ * The engine-owned signature schemes an APPLICATION endpoint may declare. Each is implemented by the
+ * engine; an application picks one and supplies a secret. A scheme is added with its first user.
+ */
+export declare enum InboundVerificationScheme {
+    /**
+     * Svix (also used by Resend and the Standard Webhooks convention): HMAC-SHA256 over
+     * `{id}.{timestamp}.{body}` with a base64 `whsec_` secret, a versioned space-delimited signature
+     * header, and a five-minute timestamp window.
+     */
+    SVIX_V1 = "svix_v1",
+    /**
+     * HMAC-SHA256 of the raw body (or of `{timestamp}.{body}` when a timestamp header is declared)
+     * carried in one declared header.
+     */
+    HMAC_SHA256_HEADER = "hmac_sha256_header"
+}
+/** How an {@link InboundVerificationScheme.HMAC_SHA256_HEADER} signature is encoded in its header. */
+export declare enum HmacSignatureEncoding {
+    HEX = "hex",
+    BASE64 = "base64"
+}
+/**
+ * The lifecycle of one stored delivery.
+ *
+ * ```
+ * RECEIVED → PROCESSING → PROCESSED
+ *                       → RETRY_SCHEDULED → PROCESSING → …
+ *                       → DEAD            (attempts or window exhausted)
+ * DEAD → RECEIVED                         (operator replay, justified and audited)
+ * UNROUTABLE                              (terminal: no admissible scope, never run)
+ * ```
+ */
+export declare enum InboundDeliveryStatus {
+    /** Verified and stored; waiting for the dispatch worker. */
+    RECEIVED = "received",
+    /** A worker holds it and is running the handler. */
+    PROCESSING = "processing",
+    /** The last attempt failed; `nextAttemptAt` says when the next one runs. */
+    RETRY_SCHEDULED = "retry_scheduled",
+    /** The handler completed. Terminal. */
+    PROCESSED = "processed",
+    /** Every attempt the handler's retry policy allows has failed. Terminal until an operator replays it. */
+    DEAD = "dead",
+    /** No admissible scope was resolved, so the handler never ran. Terminal. */
+    UNROUTABLE = "unroutable"
+}
+/** Statuses a row never leaves on its own — the retention clock starts at the instant a row reaches one. */
+export declare const INBOUND_DELIVERY_TERMINAL_STATUSES: readonly InboundDeliveryStatus[];
+/** Why an inbound request was refused BEFORE it became a delivery. Carried on `INBOUND_DELIVERY_REJECTED`. */
+export declare enum InboundDeliveryRejectionReason {
+    /** The signature did not verify under the configured secret, or was absent. */
+    SIGNATURE_INVALID = "signature_invalid",
+    /** The signed timestamp is outside the scheme's window — a stale or replayed message. */
+    TIMESTAMP_OUT_OF_WINDOW = "timestamp_out_of_window",
+    /** No verification secret is configured, so nothing can be verified. */
+    SECRET_NOT_CONFIGURED = "secret_not_configured",
+    /** The body exceeds the endpoint's `maxBodyBytes`. */
+    BODY_TOO_LARGE = "body_too_large",
+    /** The endpoint accepts `application/json` only. */
+    UNSUPPORTED_MEDIA_TYPE = "unsupported_media_type",
+    /** The body verified but is not what the handler declared (not JSON, or its payload schema refused it). */
+    MALFORMED = "malformed"
+}
+/** Why a verified delivery was never run. Carried on the row and on `INBOUND_DELIVERY_UNROUTABLE`. */
+export declare enum InboundDeliveryUnroutableReason {
+    /** An `ORGANIZATION_REQUIRED` handler's resolver found no organization. */
+    NO_ORGANIZATION_RESOLVED = "no_organization_resolved",
+    /** The handler's `resolveScope` itself answered `UNROUTABLE`. */
+    RESOLVER_DECLARED_UNROUTABLE = "resolver_declared_unroutable",
+    /** A resolver answered a scope the handler's scope mode does not admit. */
+    SCOPE_NOT_ADMITTED_BY_HANDLER = "scope_not_admitted_by_handler",
+    /** The resolver named an organization that does not exist. */
+    ORGANIZATION_NOT_FOUND = "organization_not_found",
+    /**
+     * The resolver named an organization whose status confers no authority (suspended, marked for
+     * deletion). Its own members could not act there either, so a handler must not.
+     */
+    ORGANIZATION_WITHOUT_AUTHORITY = "organization_without_authority",
+    /**
+     * A channel message arrived on a reply token that belongs to ANOTHER organization than the one its
+     * address routed to (#1630, I12). Either a misconfiguration or an attempt to reach across tenants; in
+     * both cases it must not run in either.
+     */
+    REPLY_TOKEN_OF_ANOTHER_ORGANIZATION = "reply_token_of_another_organization",
+    /** The resolver named a person who does not exist (#1629). */
+    USER_NOT_FOUND = "user_not_found",
+    /**
+     * The resolver named a person whose status confers no authority (anything but active). They could not
+     * act on their own data either, so a handler must not act on it for them (#1629).
+     */
+    USER_WITHOUT_AUTHORITY = "user_without_authority",
+    /** An email recipient no route reaches: no reply token, client mailbox, verified organization domain or shared-domain slug matched it (#1600). */
+    EMAIL_ADDRESS_NOT_ROUTED = "email_address_not_routed",
+    /** An email recipient on a claimed organization domain that is not VERIFIED — pending, failed or suspended (#1600, E3). */
+    EMAIL_DOMAIN_NOT_VERIFIED = "email_domain_not_verified",
+    /**
+     * An email recipient on a client mailbox whose authority does not hold right now: the relationship is not ACTIVE,
+     * or the domain is not VERIFIED, or it is not the firm's (#1600, E4).
+     */
+    CLIENT_MAILBOX_NOT_AUTHORIZED = "client_mailbox_not_authorized",
+    /** An email recipient on the shared domain whose slug belonged to a DELETED organization (#1600, L3). */
+    SHARED_DOMAIN_SLUG_TOMBSTONED = "shared_domain_slug_tombstoned"
+}
+/** How the wait between a handler's failed attempts grows. */
+export declare enum InboundRetryBackoffKind {
+    /** `baseSeconds × 2^(attempt−1)`, capped at `maxSeconds`. The default: a failing dependency gets room to recover. */
+    EXPONENTIAL = "exponential",
+    /** `baseSeconds` every time. */
+    FIXED = "fixed"
+}
+/** The outcome of one handler attempt, recorded on the row. */
+export declare enum InboundDeliveryAttemptOutcome {
+    PROCESSED = "processed",
+    FAILED = "failed"
+}
+export declare const InboundSvixVerificationConfigSchema: z.ZodObject<{
+    scheme: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodLiteral<InboundVerificationScheme.SVIX_V1>>;
+}, z.core.$strict>;
+export declare const InboundHmacSha256HeaderVerificationConfigSchema: z.ZodObject<{
+    scheme: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodLiteral<InboundVerificationScheme.HMAC_SHA256_HEADER>>;
+    /** Header carrying the signature, e.g. `x-hub-signature-256`. Matched case-insensitively. */
+    signatureHeader: z.ZodString;
+    encoding: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodEnum<typeof HmacSignatureEncoding>>;
+    /**
+     * A literal the sender puts in front of the signature, e.g. `sha256=`. Stripped before comparison;
+     * a header that does not start with it is refused.
+     */
+    signaturePrefix: z.ZodOptional<z.ZodString>;
+    /**
+     * Header carrying the send time in seconds since the epoch. When declared, the SIGNED content is
+     * `{timestamp}.{rawBody}` and the timestamp must fall within `toleranceSeconds` of now.
+     *
+     * A timestamp that is checked but not signed would be a control that does nothing: whoever
+     * replays a captured message rewrites the header too. So declaring one changes what is signed.
+     */
+    timestampHeader: z.ZodOptional<z.ZodString>;
+    /** Window for `timestampHeader`, in seconds. Defaults to 300 (five minutes). */
+    toleranceSeconds: z.ZodOptional<z.ZodNumber>;
+}, z.core.$strict>;
+/** The verification an APPLICATION endpoint declares. Discriminated on `scheme`. */
+export declare const InboundVerificationConfigSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    scheme: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodLiteral<InboundVerificationScheme.SVIX_V1>>;
+}, z.core.$strict>, z.ZodObject<{
+    scheme: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodLiteral<InboundVerificationScheme.HMAC_SHA256_HEADER>>;
+    /** Header carrying the signature, e.g. `x-hub-signature-256`. Matched case-insensitively. */
+    signatureHeader: z.ZodString;
+    encoding: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodEnum<typeof HmacSignatureEncoding>>;
+    /**
+     * A literal the sender puts in front of the signature, e.g. `sha256=`. Stripped before comparison;
+     * a header that does not start with it is refused.
+     */
+    signaturePrefix: z.ZodOptional<z.ZodString>;
+    /**
+     * Header carrying the send time in seconds since the epoch. When declared, the SIGNED content is
+     * `{timestamp}.{rawBody}` and the timestamp must fall within `toleranceSeconds` of now.
+     *
+     * A timestamp that is checked but not signed would be a control that does nothing: whoever
+     * replays a captured message rewrites the header too. So declaring one changes what is signed.
+     */
+    timestampHeader: z.ZodOptional<z.ZodString>;
+    /** Window for `timestampHeader`, in seconds. Defaults to 300 (five minutes). */
+    toleranceSeconds: z.ZodOptional<z.ZodNumber>;
+}, z.core.$strict>], "scheme">;
+export type InboundVerificationConfig = z.infer<typeof InboundVerificationConfigSchema>;
+/** Engine default for an application endpoint's body cap: 256 KB. Per endpoint, never per route prefix. */
+export declare const INBOUND_APPLICATION_ENDPOINT_DEFAULT_MAX_BODY_BYTES: number;
+/** The provider ref reserved for application endpoints: `/webhooks/app/{endpointKey}`. */
+export declare const INBOUND_APPLICATION_ENDPOINT_PROVIDER_REF = "app";
+/** The scope a stored delivery resolved to. Discriminated on `kind`; never absent. */
+export declare const InboundDeliveryResolvedScopeSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    kind: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodLiteral<InboundResolvedScopeKind.ORGANIZATION>>;
+    organizationId: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    kind: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodLiteral<InboundResolvedScopeKind.APPLICATION>>;
+}, z.core.$strict>, z.ZodObject<{
+    kind: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodLiteral<InboundResolvedScopeKind.USER>>;
+    userId: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    kind: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodLiteral<InboundResolvedScopeKind.UNROUTABLE>>;
+    reason: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodEnum<typeof InboundDeliveryUnroutableReason>>;
+}, z.core.$strict>], "kind">;
+export type InboundDeliveryResolvedScope = z.infer<typeof InboundDeliveryResolvedScopeSchema>;
+export declare const InboundDeliveryAttemptSchema: z.ZodObject<{
+    at: z.ZodDate;
+    outcome: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodEnum<typeof InboundDeliveryAttemptOutcome>>;
+    /** A classified code, never the error message: a message can quote the payload. */
+    errorCode: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>;
+export type InboundDeliveryAttempt = z.infer<typeof InboundDeliveryAttemptSchema>;
+export declare const InboundDeliveryReplaySchema: z.ZodObject<{
+    /** The user who replayed the delivery. */
+    by: z.ZodString;
+    at: z.ZodDate;
+    justification: z.ZodString;
+}, z.core.$strict>;
+export type InboundDeliveryReplay = z.infer<typeof InboundDeliveryReplaySchema>;
+/**
+ * One stored delivery. Written by the pipeline only (CREATE and UPDATE are REPOSITORY_ONLY); an
+ * administrator reads it and may REPLAY a `DEAD` one.
+ */
+export declare const InboundDeliveryBaseSchema: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodObject<{
+    _id: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>;
+    sourceKind: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodEnum<typeof InboundSourceKind>>>;
+    sourceKey: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>;
+    handlerRef: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>;
+    dedupKey: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>;
+    orderingKey: z.ZodDefault<z.ZodNullable<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>>;
+    providerDeliveryId: z.ZodOptional<z.ZodString>;
+    signedAt: z.ZodOptional<z.ZodDate>;
+    receivedAt: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDate>>;
+    rawBody: z.ZodString;
+    headers: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
+    resolvedScope: z.ZodDiscriminatedUnion<[z.ZodObject<{
+        kind: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodLiteral<InboundResolvedScopeKind.ORGANIZATION>>;
+        organizationId: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodLiteral<InboundResolvedScopeKind.APPLICATION>>;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodLiteral<InboundResolvedScopeKind.USER>>;
+        userId: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodLiteral<InboundResolvedScopeKind.UNROUTABLE>>;
+        reason: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodEnum<typeof InboundDeliveryUnroutableReason>>;
+    }, z.core.$strict>], "kind">;
+    channel: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodEnum<typeof InboundChannelKind>>>>;
+    senderAssurance: z.ZodDefault<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodEnum<typeof InboundSenderAssurance>>>;
+    threadId: z.ZodDefault<z.ZodNullable<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>>;
+    status: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodEnum<typeof InboundDeliveryStatus>>>>>;
+    attemptCount: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodNumber>>;
+    attempts: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        at: z.ZodDate;
+        outcome: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodEnum<typeof InboundDeliveryAttemptOutcome>>;
+        /** A classified code, never the error message: a message can quote the payload. */
+        errorCode: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>>>;
+    nextAttemptAt: z.ZodDefault<z.ZodNullable<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDate>>>;
+    leaseExpiresAt: z.ZodDefault<z.ZodNullable<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDate>>>;
+    budgetStartedAt: z.ZodDate;
+    budgetBaseAttemptCount: z.ZodDefault<z.ZodNumber>;
+    terminalAt: z.ZodDefault<z.ZodNullable<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDate>>>;
+    replays: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        /** The user who replayed the delivery. */
+        by: z.ZodString;
+        at: z.ZodDate;
+        justification: z.ZodString;
+    }, z.core.$strict>>>;
+    createdAt: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodDate>>>>;
+    updatedAt: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodDate>>>;
+}, z.core.$strip>>;
+export type InboundDeliveryBase = z.infer<typeof InboundDeliveryBaseSchema>;
+/**
+ * Yields `organizationInboundDeliveries` (FK `organizationId`) and `applicationInboundDeliveries`
+ * (FK `applicationId`). Many rows per scope, so the singleton business-key default is opted out of;
+ * the row's identity is the `(sourceKey, dedupKey)` set above.
+ */
+export declare const inboundDeliveryPolymorphicDeclaration: import("..").PolymorphicSchemaDeclaration<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodObject<{
+    _id: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>;
+    sourceKind: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodEnum<typeof InboundSourceKind>>>;
+    sourceKey: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>;
+    handlerRef: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>;
+    dedupKey: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>;
+    orderingKey: z.ZodDefault<z.ZodNullable<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>>;
+    providerDeliveryId: z.ZodOptional<z.ZodString>;
+    signedAt: z.ZodOptional<z.ZodDate>;
+    receivedAt: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDate>>;
+    rawBody: z.ZodString;
+    headers: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
+    resolvedScope: z.ZodDiscriminatedUnion<[z.ZodObject<{
+        kind: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodLiteral<InboundResolvedScopeKind.ORGANIZATION>>;
+        organizationId: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodLiteral<InboundResolvedScopeKind.APPLICATION>>;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodLiteral<InboundResolvedScopeKind.USER>>;
+        userId: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodLiteral<InboundResolvedScopeKind.UNROUTABLE>>;
+        reason: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodEnum<typeof InboundDeliveryUnroutableReason>>;
+    }, z.core.$strict>], "kind">;
+    channel: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodEnum<typeof InboundChannelKind>>>>;
+    senderAssurance: z.ZodDefault<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodEnum<typeof InboundSenderAssurance>>>;
+    threadId: z.ZodDefault<z.ZodNullable<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>>;
+    status: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodEnum<typeof InboundDeliveryStatus>>>>>;
+    attemptCount: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodNumber>>;
+    attempts: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        at: z.ZodDate;
+        outcome: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodEnum<typeof InboundDeliveryAttemptOutcome>>;
+        /** A classified code, never the error message: a message can quote the payload. */
+        errorCode: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>>>;
+    nextAttemptAt: z.ZodDefault<z.ZodNullable<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDate>>>;
+    leaseExpiresAt: z.ZodDefault<z.ZodNullable<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDate>>>;
+    budgetStartedAt: z.ZodDate;
+    budgetBaseAttemptCount: z.ZodDefault<z.ZodNumber>;
+    terminalAt: z.ZodDefault<z.ZodNullable<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDate>>>;
+    replays: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        /** The user who replayed the delivery. */
+        by: z.ZodString;
+        at: z.ZodDate;
+        justification: z.ZodString;
+    }, z.core.$strict>>>;
+    createdAt: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodDate>>>>;
+    updatedAt: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodDate>>>;
+}, z.core.$strip>>>;
+//# sourceMappingURL=inbound-delivery.shared.schemas.d.ts.map

package/dist/esm/inbound/inbound-delivery.shared.schemas.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"inbound-delivery.shared.schemas.d.ts","sourceRoot":"","sources":["../../../../src/inbound/inbound-delivery.shared.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAYxB,OAAO,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,MAAM,mCAAmC,CAAC;AAM/F;;;GAGG;AACH,oBAAY,iBAAiB;IAC3B;;;OAGG;IACH,iBAAiB,sBAAsB;IACvC;;;;OAIG;IACH,oBAAoB,yBAAyB;IAC7C;;;;OAIG;IACH,OAAO,YAAY;CACpB;AAED;;;;GAIG;AACH,oBAAY,uBAAuB;IACjC;;;;OAIG;IACH,qBAAqB,0BAA0B;IAC/C,wEAAwE;IACxE,WAAW,gBAAgB;IAC3B;;;;;;;;OAQG;IACH,qBAAqB,0BAA0B;CAChD;AAED,wDAAwD;AACxD,oBAAY,wBAAwB;IAClC,YAAY,iBAAiB;IAC7B,WAAW,gBAAgB;IAC3B;;;;;;OAMG;IACH,IAAI,SAAS;IACb,kFAAkF;IAClF,UAAU,eAAe;CAC1B;AAED;;;GAGG;AACH,oBAAY,yBAAyB;IACnC;;;;OAIG;IACH,OAAO,YAAY;IACnB;;;OAGG;IACH,kBAAkB,uBAAuB;CAC1C;AAED,sGAAsG;AACtG,oBAAY,qBAAqB;IAC/B,GAAG,QAAQ;IACX,MAAM,WAAW;CAClB;AAED;;;;;;;;;;GAUG;AACH,oBAAY,qBAAqB;IAC/B,4DAA4D;IAC5D,QAAQ,aAAa;IACrB,oDAAoD;IACpD,UAAU,eAAe;IACzB,4EAA4E;IAC5E,eAAe,oBAAoB;IACnC,uCAAuC;IACvC,SAAS,cAAc;IACvB,yGAAyG;IACzG,IAAI,SAAS;IACb,4EAA4E;IAC5E,UAAU,eAAe;CAC1B;AAED,4GAA4G;AAC5G,eAAO,MAAM,kCAAkC,EAAE,SAAS,qBAAqB,EAI7E,CAAC;AAEH,8GAA8G;AAC9G,oBAAY,8BAA8B;IACxC,+EAA+E;IAC/E,iBAAiB,sBAAsB;IACvC,yFAAyF;IACzF,uBAAuB,4BAA4B;IACnD,wEAAwE;IACxE,qBAAqB,0BAA0B;IAC/C,sDAAsD;IACtD,cAAc,mBAAmB;IACjC,oDAAoD;IACpD,sBAAsB,2BAA2B;IACjD,2GAA2G;IAC3G,SAAS,cAAc;CACxB;AAED,sGAAsG;AACtG,oBAAY,+BAA+B;IACzC,2EAA2E;IAC3E,wBAAwB,6BAA6B;IACrD,iEAAiE;IACjE,4BAA4B,iCAAiC;IAC7D,2EAA2E;IAC3E,6BAA6B,kCAAkC;IAC/D,8DAA8D;IAC9D,sBAAsB,2BAA2B;IACjD;;;OAGG;IACH,8BAA8B,mCAAmC;IACjE;;;;OAIG;IACH,mCAAmC,wCAAwC;IAC3E,8DAA8D;IAC9D,cAAc,mBAAmB;IACjC;;;OAGG;IACH,sBAAsB,2BAA2B;IACjD,kJAAkJ;IAClJ,wBAAwB,6BAA6B;IACrD,2HAA2H;IAC3H,yBAAyB,8BAA8B;IACvD;;;OAGG;IACH,6BAA6B,kCAAkC;IAC/D,yGAAyG;IACzG,6BAA6B,kCAAkC;CAChE;AAED,8DAA8D;AAC9D,oBAAY,uBAAuB;IACjC,qHAAqH;IACrH,WAAW,gBAAgB;IAC3B,gCAAgC;IAChC,KAAK,UAAU;CAChB;AAED,+DAA+D;AAC/D,oBAAY,6BAA6B;IACvC,SAAS,cAAc;IACvB,MAAM,WAAW;CAClB;AAMD,eAAO,MAAM,mCAAmC;;kBAE9C,CAAC;AAEH,eAAO,MAAM,+CAA+C;;IAE1D,6FAA6F;;;IAG7F;;;OAGG;;IAEH;;;;;;OAMG;;IAEH,gFAAgF;;kBAEhF,CAAC;AAEH,oFAAoF;AACpF,eAAO,MAAM,+BAA+B;;;;IArB1C,6FAA6F;;;IAG7F;;;OAGG;;IAEH;;;;;;OAMG;;IAEH,gFAAgF;;8BAQhF,CAAC;AAEH,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,+BAA+B,CAAC,CAAC;AAExF,2GAA2G;AAC3G,eAAO,MAAM,mDAAmD,QAAa,CAAC;AAE9E,0FAA0F;AAC1F,eAAO,MAAM,yCAAyC,QAAQ,CAAC;AAM/D,sFAAsF;AACtF,eAAO,MAAM,kCAAkC;;;;;;;;;;;4BA+B7C,CAAC;AAEH,MAAM,MAAM,4BAA4B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kCAAkC,CAAC,CAAC;AAE9F,eAAO,MAAM,4BAA4B;;;IAMvC,mFAAmF;;kBAQnF,CAAC;AAEH,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAElF,eAAO,MAAM,2BAA2B;IACtC,0CAA0C;;;;kBAI1C,CAAC;AAEH,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAehF;;;GAGG;AACH,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;QAtCpC,mFAAmF;;;;;;;;;QAanF,0CAA0C;;;;;;;kBA4HA,CAAC;AAE7C,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAE5E;;;;GAIG;AACH,eAAO,MAAM,qCAAqC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;QAlJhD,mFAAmF;;;;;;;;;QAanF,0CAA0C;;;;;;;mBA2I1C,CAAC"}