@wildo-ai/saas-models 1.1.5 → 1.1.7

package/dist/esm/i18n/engine-open-vocabulary.shared.d.ts

@@ -0,0 +1,20 @@
+/**
+ * The engine's OPEN vocabularies (#1791): named sets of values that a STRING field carries and the engine declares
+ * outside any schema.
+ *
+ * `z.enum` is how a field normally names its vocabulary, and it lets the labeller read the values off the field.
+ * Some fields cannot be an enum because the schema does not own their values. An audit event's `eventType` is a
+ * string, because an event type is written by whoever emits it. Such a field declares its vocabulary with
+ * `.systemEnum(EngineOpenVocabulary.X)`: the display reads `system_enums.<name>.<value>`, and the labeller plans
+ * those keys from {@link ENGINE_OPEN_VOCABULARY_VALUES}, the one place the values are listed.
+ *
+ * A vocabulary whose values an APPLICATION declares is not here: those are `ApplicationConfigVocabulary`, and the
+ * labeller reads their values from the application's configuration.
+ *
+ * Kept in its own file with no imports, so a schema can name its vocabulary without importing the values.
+ */
+export declare enum EngineOpenVocabulary {
+    /** Every `CoreAuditableEventType` the engine emits: the words an audit trail shows for an event. */
+    CORE_AUDITABLE_EVENT_TYPE = "CoreAuditableEventType"
+}
+//# sourceMappingURL=engine-open-vocabulary.shared.d.ts.map

package/dist/esm/i18n/engine-open-vocabulary.shared.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"engine-open-vocabulary.shared.d.ts","sourceRoot":"","sources":["../../../src/i18n/engine-open-vocabulary.shared.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,oBAAY,oBAAoB;IAC9B,oGAAoG;IACpG,yBAAyB,2BAA2B;CACrD"}

package/dist/esm/i18n/engine-open-vocabulary.shared.js

@@ -0,0 +1,21 @@
+/**
+ * The engine's OPEN vocabularies (#1791): named sets of values that a STRING field carries and the engine declares
+ * outside any schema.
+ *
+ * `z.enum` is how a field normally names its vocabulary, and it lets the labeller read the values off the field.
+ * Some fields cannot be an enum because the schema does not own their values. An audit event's `eventType` is a
+ * string, because an event type is written by whoever emits it. Such a field declares its vocabulary with
+ * `.systemEnum(EngineOpenVocabulary.X)`: the display reads `system_enums.<name>.<value>`, and the labeller plans
+ * those keys from {@link ENGINE_OPEN_VOCABULARY_VALUES}, the one place the values are listed.
+ *
+ * A vocabulary whose values an APPLICATION declares is not here: those are `ApplicationConfigVocabulary`, and the
+ * labeller reads their values from the application's configuration.
+ *
+ * Kept in its own file with no imports, so a schema can name its vocabulary without importing the values.
+ */
+export var EngineOpenVocabulary;
+(function (EngineOpenVocabulary) {
+    /** Every `CoreAuditableEventType` the engine emits: the words an audit trail shows for an event. */
+    EngineOpenVocabulary["CORE_AUDITABLE_EVENT_TYPE"] = "CoreAuditableEventType";
+})(EngineOpenVocabulary || (EngineOpenVocabulary = {}));
+//# sourceMappingURL=engine-open-vocabulary.shared.js.map

package/dist/esm/i18n/engine-open-vocabulary.shared.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"engine-open-vocabulary.shared.js","sourceRoot":"","sources":["../../../src/i18n/engine-open-vocabulary.shared.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAN,IAAY,oBAGX;AAHD,WAAY,oBAAoB;IAC9B,oGAAoG;IACpG,4EAAoD,CAAA;AACtD,CAAC,EAHW,oBAAoB,KAApB,oBAAoB,QAG/B","sourcesContent":["/**\n * The engine's OPEN vocabularies (#1791): named sets of values that a STRING field carries and the engine declares\n * outside any schema.\n *\n * `z.enum` is how a field normally names its vocabulary, and it lets the labeller read the values off the field.\n * Some fields cannot be an enum because the schema does not own their values. An audit event's `eventType` is a\n * string, because an event type is written by whoever emits it. Such a field declares its vocabulary with\n * `.systemEnum(EngineOpenVocabulary.X)`: the display reads `system_enums.<name>.<value>`, and the labeller plans\n * those keys from {@link ENGINE_OPEN_VOCABULARY_VALUES}, the one place the values are listed.\n *\n * A vocabulary whose values an APPLICATION declares is not here: those are `ApplicationConfigVocabulary`, and the\n * labeller reads their values from the application's configuration.\n *\n * Kept in its own file with no imports, so a schema can name its vocabulary without importing the values.\n */\nexport enum EngineOpenVocabulary {\n  /** Every `CoreAuditableEventType` the engine emits: the words an audit trail shows for an event. */\n  CORE_AUDITABLE_EVENT_TYPE = 'CoreAuditableEventType',\n}\n"]}

package/dist/esm/i18n/interpolate-label-params.shared.utils.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"interpolate-label-params.shared.utils.d.ts","sourceRoot":"","sources":["../../../../src/i18n/interpolate-label-params.shared.utils.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiDG;AACH,wBAAgB,sBAAsB,CACpC,QAAQ,EAAE,MAAM,EAChB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,GAAG,IAAI,CAAC,GAC1D,MAAM,CAYR"}
+{"version":3,"file":"interpolate-label-params.shared.utils.d.ts","sourceRoot":"","sources":["../../../src/i18n/interpolate-label-params.shared.utils.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiDG;AACH,wBAAgB,sBAAsB,CACpC,QAAQ,EAAE,MAAM,EAChB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,GAAG,IAAI,CAAC,GAC1D,MAAM,CAYR"}

package/dist/esm/i18n/interpolate-label-params.shared.utils.js.map

@@ -1 +1 @@
-{"version":3,"file":"interpolate-label-params.shared.utils.js","sourceRoot":"","sources":["../../../../src/i18n/interpolate-label-params.shared.utils.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiDG;AACH,MAAM,UAAU,sBAAsB,CACpC,QAAgB,EAChB,MAA2D;IAE3D,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,OAAO,QAAQ,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC,KAAK,EAAE,GAAW,EAAE,EAAE;QAC3D,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QAC1B,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YAC1C,OAAO,KAAK,CAAC;QACf,CAAC;QACD,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC,CAAC,CAAC;AACL,CAAC","sourcesContent":["/**\n * interpolateLabelParams — the single canonical placeholder substitution for\n * every translated label in the framework.\n *\n * ## Convention (the ONE contract content authors and the generator follow)\n *\n * SINGLE braces, and the placeholder name is exactly the declared param name:\n *\n * ```\n * interpolateLabelParams('Enter at least {count} characters', { count: 2 })\n *   // -> 'Enter at least 2 characters'\n * interpolateLabelParams('Showing {from}–{to} of {total}', { from: 1, to: 10, total: 42 })\n *   // -> 'Showing 1–10 of 42'\n * ```\n *\n * This util is the single source of truth shared by:\n *   - the frontend translation engine (`t()` in `I18nContext`)\n *   - the backend email/label interpolation (`interpolateEmailLabel`)\n * and it mirrors the convention the LLM label generator is instructed to emit\n * (single-brace placeholders whose names match the declared `params` of each\n * label).\n *\n * ## Why these exact semantics\n *\n * - **Name-based, not positional** — multi-param labels\n *   (`Select between {min} and {max}`) and locale reorderings\n *   (`{total} éléments` vs `{total} items`) stay correct because each\n *   placeholder binds to its named value, never to an index.\n * - **Unknown placeholder left verbatim** — a `{token}` with no matching param\n *   is returned untouched rather than blanked. This means (a) a label that\n *   legitimately contains brace text is never corrupted, and (b) a\n *   genuinely-missing param surfaces as a visible `{token}` instead of a silent\n *   gap, which is the louder, easier-to-catch failure.\n * - **No params → identity** — passing `undefined`/no params returns the\n *   template unchanged (the common case for paramless labels).\n *\n * ## History (do not regress)\n *\n * The frontend `t()` historically matched DOUBLE braces (`{{param}}`) while\n * 100% of generated content and the backend interpolator used single braces —\n * so no frontend parameter ever interpolated and users saw literal `{value}` /\n * `{count}` text. Centralizing the substitution here removes that divergence:\n * there is now exactly one brace convention, defined in one place.\n *\n * @param template the (already locale-resolved) label string\n * @param params   name → value map; values are coerced with `String(...)`\n * @returns the template with every `{name}` whose `name` is present in `params`\n *          replaced by its stringified value; all other text (including\n *          unmatched `{tokens}`) left exactly as authored.\n */\nexport function interpolateLabelParams(\n  template: string,\n  params?: Record<string, string | number | undefined | null>,\n): string {\n  if (!params) {\n    return template;\n  }\n\n  return template.replace(/\\{(\\w+)\\}/g, (match, key: string) => {\n    const value = params[key];\n    if (value === undefined || value === null) {\n      return match;\n    }\n    return String(value);\n  });\n}\n"]}
+{"version":3,"file":"interpolate-label-params.shared.utils.js","sourceRoot":"","sources":["../../../src/i18n/interpolate-label-params.shared.utils.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiDG;AACH,MAAM,UAAU,sBAAsB,CACpC,QAAgB,EAChB,MAA2D;IAE3D,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,OAAO,QAAQ,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC,KAAK,EAAE,GAAW,EAAE,EAAE;QAC3D,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QAC1B,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YAC1C,OAAO,KAAK,CAAC;QACf,CAAC;QACD,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC,CAAC,CAAC;AACL,CAAC","sourcesContent":["/**\n * interpolateLabelParams — the single canonical placeholder substitution for\n * every translated label in the framework.\n *\n * ## Convention (the ONE contract content authors and the generator follow)\n *\n * SINGLE braces, and the placeholder name is exactly the declared param name:\n *\n * ```\n * interpolateLabelParams('Enter at least {count} characters', { count: 2 })\n *   // -> 'Enter at least 2 characters'\n * interpolateLabelParams('Showing {from}–{to} of {total}', { from: 1, to: 10, total: 42 })\n *   // -> 'Showing 1–10 of 42'\n * ```\n *\n * This util is the single source of truth shared by:\n *   - the frontend translation engine (`t()` in `I18nContext`)\n *   - the backend email/label interpolation (`interpolateEmailLabel`)\n * and it mirrors the convention the LLM label generator is instructed to emit\n * (single-brace placeholders whose names match the declared `params` of each\n * label).\n *\n * ## Why these exact semantics\n *\n * - **Name-based, not positional** — multi-param labels\n *   (`Select between {min} and {max}`) and locale reorderings\n *   (`{total} éléments` vs `{total} items`) stay correct because each\n *   placeholder binds to its named value, never to an index.\n * - **Unknown placeholder left verbatim** — a `{token}` with no matching param\n *   is returned untouched rather than blanked. This means (a) a label that\n *   legitimately contains brace text is never corrupted, and (b) a\n *   genuinely-missing param surfaces as a visible `{token}` instead of a silent\n *   gap, which is the louder, easier-to-catch failure.\n * - **No params → identity** — passing `undefined`/no params returns the\n *   template unchanged (the common case for paramless labels).\n *\n * ## History (do not regress)\n *\n * The frontend `t()` historically matched DOUBLE braces (`{{param}}`) while\n * 100% of generated content and the backend interpolator used single braces —\n * so no frontend parameter ever interpolated and users saw literal `{value}` /\n * `{count}` text. Centralizing the substitution here removes that divergence:\n * there is now exactly one brace convention, defined in one place.\n *\n * @param template the (already locale-resolved) label string\n * @param params   name → value map; values are coerced with `String(...)`\n * @returns the template with every `{name}` whose `name` is present in `params`\n *          replaced by its stringified value; all other text (including\n *          unmatched `{tokens}`) left exactly as authored.\n */\nexport function interpolateLabelParams(\n  template: string,\n  params?: Record<string, string | number | undefined | null>,\n): string {\n  if (!params) {\n    return template;\n  }\n\n  return template.replace(/\\{(\\w+)\\}/g, (match, key: string) => {\n    const value = params[key];\n    if (value === undefined || value === null) {\n      return match;\n    }\n    return String(value);\n  });\n}\n"]}

package/dist/esm/i18n/labelling.dto.shared.schemas.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"labelling.dto.shared.schemas.d.ts","sourceRoot":"","sources":["../../../../src/i18n/labelling.dto.shared.schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,iBAAiB,EAAE,MAAM,qCAAqC,CAAC;AAExE,QAAA,MAAM,qBAAqB;;;;;iBAKzB,CAAC;AAEH,eAAO,MAAM,oBAAoB,EAAE,OAAO,qBAA6C,CAAC;AACxF,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEnE,QAAA,MAAM,2BAA2B;;;;iBAK/B,CAAC;AAEH,eAAO,MAAM,0BAA0B,EAAE,OAAO,2BAAyD,CAAC;AAC1G,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAE/E,QAAA,MAAM,4BAA4B;;;;iBAIhC,CAAC;AAEH,eAAO,MAAM,2BAA2B,EAAE,OAAO,4BAA2D,CAAC;AAC7G,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC"}
+{"version":3,"file":"labelling.dto.shared.schemas.d.ts","sourceRoot":"","sources":["../../../src/i18n/labelling.dto.shared.schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,iBAAiB,EAAE,MAAM,qCAAqC,CAAC;AAExE,QAAA,MAAM,qBAAqB;;;;;iBAKzB,CAAC;AAEH,eAAO,MAAM,oBAAoB,EAAE,OAAO,qBAA6C,CAAC;AACxF,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEnE,QAAA,MAAM,2BAA2B;;;;iBAK/B,CAAC;AAEH,eAAO,MAAM,0BAA0B,EAAE,OAAO,2BAAyD,CAAC;AAC1G,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAE/E,QAAA,MAAM,4BAA4B;;;;iBAIhC,CAAC;AAEH,eAAO,MAAM,2BAA2B,EAAE,OAAO,4BAA2D,CAAC;AAC7G,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC"}

package/dist/esm/i18n/labelling.dto.shared.schemas.js.map

@@ -1 +1 @@
-{"version":3,"file":"labelling.dto.shared.schemas.js","sourceRoot":"","sources":["../../../../src/i18n/labelling.dto.shared.schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,iBAAiB,EAAE,MAAM,qCAAqC,CAAC;AAExE,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IACrC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC;CAChC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,oBAAoB,GAAiC,qBAAqB,CAAC;AAGxF,MAAM,2BAA2B,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC;IACnC,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACxC,wGAAwG;IACxG,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;CACrC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,0BAA0B,GAAuC,2BAA2B,CAAC;AAG1G,MAAM,4BAA4B,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC;IACnC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,0CAA0C;IACjF,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,2CAA2C;CACrE,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,2BAA2B,GAAwC,4BAA4B,CAAC","sourcesContent":["import { z } from \"zod\";\nimport { AvailableLanguage } from '@wildo-ai/presets-components-models';\n\nconst _EmailUpdateDtoSchema = z.object({\n  subject: z.string(),\n  bodyHtml: z.string(),\n  bodyText: z.string(),\n  lang: z.enum(AvailableLanguage),\n});\n\nexport const EmailUpdateDtoSchema: typeof _EmailUpdateDtoSchema = _EmailUpdateDtoSchema;\nexport type EmailUpdateDto = z.infer<typeof _EmailUpdateDtoSchema>;\n\nconst _I18nLabelsRequestDtoSchema = z.object({\n  language: z.enum(AvailableLanguage),\n  sections: z.array(z.string()).optional(),\n  /** Dot-path keys for sub-section granularity (e.g. `components.low_level_button`, `resources.todos`) */\n  keys: z.array(z.string()).optional(),\n});\n\nexport const I18nLabelsRequestDtoSchema: typeof _I18nLabelsRequestDtoSchema = _I18nLabelsRequestDtoSchema;\nexport type I18nLabelsRequestDto = z.infer<typeof _I18nLabelsRequestDtoSchema>;\n\nconst _I18nLabelsResponseDtoSchema = z.object({\n  language: z.enum(AvailableLanguage),\n  labels: z.record(z.string(), z.any()), // The actual labels object (StringRecord)\n  generatedAt: z.string(), // ISO timestamp when labels were generated\n});\n\nexport const I18nLabelsResponseDtoSchema: typeof _I18nLabelsResponseDtoSchema = _I18nLabelsResponseDtoSchema;\nexport type I18nLabelsResponseDto = z.infer<typeof _I18nLabelsResponseDtoSchema>;"]}
+{"version":3,"file":"labelling.dto.shared.schemas.js","sourceRoot":"","sources":["../../../src/i18n/labelling.dto.shared.schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,iBAAiB,EAAE,MAAM,qCAAqC,CAAC;AAExE,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IACrC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC;CAChC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,oBAAoB,GAAiC,qBAAqB,CAAC;AAGxF,MAAM,2BAA2B,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC;IACnC,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACxC,wGAAwG;IACxG,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;CACrC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,0BAA0B,GAAuC,2BAA2B,CAAC;AAG1G,MAAM,4BAA4B,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC;IACnC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,0CAA0C;IACjF,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,2CAA2C;CACrE,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,2BAA2B,GAAwC,4BAA4B,CAAC","sourcesContent":["import { z } from \"zod\";\nimport { AvailableLanguage } from '@wildo-ai/presets-components-models';\n\nconst _EmailUpdateDtoSchema = z.object({\n  subject: z.string(),\n  bodyHtml: z.string(),\n  bodyText: z.string(),\n  lang: z.enum(AvailableLanguage),\n});\n\nexport const EmailUpdateDtoSchema: typeof _EmailUpdateDtoSchema = _EmailUpdateDtoSchema;\nexport type EmailUpdateDto = z.infer<typeof _EmailUpdateDtoSchema>;\n\nconst _I18nLabelsRequestDtoSchema = z.object({\n  language: z.enum(AvailableLanguage),\n  sections: z.array(z.string()).optional(),\n  /** Dot-path keys for sub-section granularity (e.g. `components.low_level_button`, `resources.todos`) */\n  keys: z.array(z.string()).optional(),\n});\n\nexport const I18nLabelsRequestDtoSchema: typeof _I18nLabelsRequestDtoSchema = _I18nLabelsRequestDtoSchema;\nexport type I18nLabelsRequestDto = z.infer<typeof _I18nLabelsRequestDtoSchema>;\n\nconst _I18nLabelsResponseDtoSchema = z.object({\n  language: z.enum(AvailableLanguage),\n  labels: z.record(z.string(), z.any()), // The actual labels object (StringRecord)\n  generatedAt: z.string(), // ISO timestamp when labels were generated\n});\n\nexport const I18nLabelsResponseDtoSchema: typeof _I18nLabelsResponseDtoSchema = _I18nLabelsResponseDtoSchema;\nexport type I18nLabelsResponseDto = z.infer<typeof _I18nLabelsResponseDtoSchema>;"]}

package/dist/esm/inbound/conversation-threads.shared.resources-config.schemas.d.ts

@@ -0,0 +1,94 @@
+/**
+ * Conversation threads, messages and reply tokens — resource configurations (#1630).
+ *
+ * The engine writes all three: the channel intake opens threads and records received messages,
+ * `ctx.reply` records replies, the reply worker settles them, and the token service issues and revokes
+ * tokens. None of those writes is an HTTP surface (CREATE / UPDATE are REPOSITORY_ONLY), so no caller can
+ * backdate a closure or invent a message.
+ *
+ * What a person may do: members of the organization READ its threads and messages (the correspondence of
+ * the organization's own cases), and an organization administrator CLOSES a thread. Tokens have no API at
+ * all — a reply address is a bearer secret, and the list of them is nobody's business but the engine's.
+ *
+ * DELETE / DELETE_MANY / UPDATE_MANY are INTERNAL_CALL: the retention sweep deletes expired rows through the
+ * service layer (a closed thread's tokens go with it), and the erasure writer scrubs through UPDATE_MANY.
+ * Route-less, so reachable by no request.
+ */
+import { z } from 'zod';
+import { CoreResourceOperation } from '../resources/resources.shared.core.definitions';
+import { type ResourceRelationship } from '../resources/resources.shared.schemas';
+import { ConversationMessageDirection, ConversationThreadStatus, ConversationThreads_Operations } from './conversation-threads.shared.schemas';
+/**
+ * The two `conversationThreads` LIST filter keys that find the conversations linked to one record (#1630): dotted
+ * paths into `linkedResource`. One source for the backend's `filterFields` and for the frontend embed that pins them
+ * (`EmbedLinkedConversations`), so the two cannot disagree on a spelling.
+ */
+export declare const CONVERSATION_THREAD_LINKED_RESOURCE_FILTER: {
+    readonly RESOURCE_TYPE: "linkedResource.resourceType";
+    readonly RESOURCE_ID: "linkedResource.resourceId";
+};
+type ConversationCoreOperations = CoreResourceOperation.READ | CoreResourceOperation.LIST | CoreResourceOperation.CREATE | CoreResourceOperation.UPDATE | CoreResourceOperation.UPDATE_MANY | CoreResourceOperation.DELETE | CoreResourceOperation.DELETE_MANY;
+export declare const conversationThreadsResourceConfiguration_InitializationFactory: (resourcesRelationships: ResourceRelationship[]) => import("..").ResourceConfiguration<typeof ConversationThreads_Operations, ConversationCoreOperations, import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodObject<{
+    _id: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>;
+    organizationId: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>>>;
+    channel: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodEnum<typeof import("./inbound-channels.shared.schemas").InboundChannelKind>>>>;
+    threadKey: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>;
+    counterpartAddress: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>>;
+    subject: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodString>>>;
+    linkedResource: z.ZodDefault<z.ZodNullable<z.ZodObject<{
+        resourceType: z.ZodString;
+        resourceId: z.ZodString;
+    }, z.core.$strict>>>;
+    status: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodEnum<typeof ConversationThreadStatus>>>>>;
+    lastMessageAt: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDate>>;
+    closedAt: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodNullable<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDate>>>>>;
+    createdAt: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodDate>>>>;
+    updatedAt: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodDate>>>;
+}, z.core.$strip>>>;
+export declare const conversationMessagesResourceConfiguration_InitializationFactory: (resourcesRelationships: ResourceRelationship[]) => import("..").ResourceConfiguration<Record<string, never>, ConversationCoreOperations, z.ZodObject<{
+    _id: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>;
+    organizationId: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>>>;
+    threadId: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>>>;
+    direction: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodEnum<typeof ConversationMessageDirection>>>>;
+    rfcMessageId: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>;
+    fromAddress: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>;
+    toAddresses: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodArray<z.ZodString>>>;
+    subject: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodString>>;
+    textPreview: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodString>>;
+    occurredAt: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDate>>;
+    inboundDeliveryId: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodNullable<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>>>;
+    channelRecordRef: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodNullable<z.ZodObject<{
+        resourceType: z.ZodString;
+        resourceId: z.ZodString;
+    }, z.core.$strict>>>>;
+    submissionId: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodOptional<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>>;
+    outboundStatus: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodNullable<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodEnum<typeof import("./conversation-threads.shared.schemas").ConversationOutboundStatus>>>>>>>;
+    templateRef: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodNullable<z.ZodString>>>;
+    templateVariables: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodUnknown>>>>>;
+    locale: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodNullable<z.ZodString>>>;
+    replyToAddress: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodNullable<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>>>;
+    threading: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodNullable<z.ZodObject<{
+        inReplyTo: z.ZodOptional<z.ZodString>;
+        references: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    }, z.core.$strict>>>>;
+    providerMessageIds: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodArray<z.ZodString>>>>;
+    failureCode: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodNullable<z.ZodString>>>>;
+    settledAt: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodNullable<z.ZodDate>>>>;
+    createdAt: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodDate>>>>;
+    updatedAt: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodDate>>>;
+}, z.core.$strip>>;
+export declare const conversationReplyTokensResourceConfiguration_InitializationFactory: (resourcesRelationships: ResourceRelationship[]) => import("..").ResourceConfiguration<Record<string, never>, ConversationCoreOperations, z.ZodObject<{
+    _id: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>;
+    organizationId: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>>>;
+    threadId: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>>>;
+    recipientAddress: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>>;
+    recipientMemberUserId: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodNullable<z.ZodString>>>;
+    tokenHash: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>>;
+    issuedAt: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDate>>;
+    revokedAt: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodNullable<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDate>>>>>;
+    revocationReason: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodNullable<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodEnum<typeof import("./conversation-threads.shared.schemas").ReplyTokenRevocationReason>>>>>>;
+    createdAt: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodDate>>>>;
+    updatedAt: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodDate>>>;
+}, z.core.$strip>>;
+export {};
+//# sourceMappingURL=conversation-threads.shared.resources-config.schemas.d.ts.map

package/dist/esm/inbound/conversation-threads.shared.resources-config.schemas.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"conversation-threads.shared.resources-config.schemas.d.ts","sourceRoot":"","sources":["../../../src/inbound/conversation-threads.shared.resources-config.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,qBAAqB,EAAwD,MAAM,gDAAgD,CAAC;AAC7I,OAAO,EAA4D,KAAK,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AAO5I,OAAO,EACL,4BAA4B,EAI5B,wBAAwB,EACxB,8BAA8B,EAC/B,MAAM,uCAAuC,CAAC;AAE/C;;;;GAIG;AACH,eAAO,MAAM,0CAA0C;;;CAG7C,CAAC;AAEX,KAAK,0BAA0B,GAC3B,qBAAqB,CAAC,IAAI,GAC1B,qBAAqB,CAAC,IAAI,GAC1B,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,WAAW,GACjC,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,WAAW,CAAC;AAoCtC,eAAO,MAAM,8DAA8D,GAAI,wBAAwB,oBAAoB,EAAE;;;;;;;;;;;;;;;;mBAoEzH,CAAC;AAEL,eAAO,MAAM,+DAA+D,GAAI,wBAAwB,oBAAoB,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAmD1H,CAAC;AAEL,eAAO,MAAM,kEAAkE,GAAI,wBAAwB,oBAAoB,EAAE;;;;;;;;;;;;kBAsB7H,CAAC"}

package/dist/esm/inbound/conversation-threads.shared.resources-config.schemas.js

@@ -0,0 +1,206 @@
+/**
+ * Conversation threads, messages and reply tokens — resource configurations (#1630).
+ *
+ * The engine writes all three: the channel intake opens threads and records received messages,
+ * `ctx.reply` records replies, the reply worker settles them, and the token service issues and revokes
+ * tokens. None of those writes is an HTTP surface (CREATE / UPDATE are REPOSITORY_ONLY), so no caller can
+ * backdate a closure or invent a message.
+ *
+ * What a person may do: members of the organization READ its threads and messages (the correspondence of
+ * the organization's own cases), and an organization administrator CLOSES a thread. Tokens have no API at
+ * all — a reply address is a bearer secret, and the list of them is nobody's business but the engine's.
+ *
+ * DELETE / DELETE_MANY / UPDATE_MANY are INTERNAL_CALL: the retention sweep deletes expired rows through the
+ * service layer (a closed thread's tokens go with it), and the erasure writer scrubs through UPDATE_MANY.
+ * Route-less, so reachable by no request.
+ */
+import { z } from 'zod';
+import { CoreResourceOperation, CoreResourceType, coreResourceShared_FieldIdentifier } from '../resources/resources.shared.core.definitions.js';
+import { ResourceOperationRiskLevel, ResourceOperationVariantType } from '../resources/resources.shared.schemas.js';
+import { createResourceConfiguration_Initialization } from '../resources/resources-config.shared.factory.js';
+import { ResourceSystemAccessMode } from '../resources/resources-config.shared.schemas.js';
+import { WorkUnitRefSchema } from '../resources/work-unit.shared.schemas.js';
+import { CORE_APP_ROLES, CORE_ORG_ROLES } from '../security/authorizations/roles.shared.schemas.js';
+import { ErasureRetentionMode, ResourceDataSubjectKind, StatutoryRetentionGround } from '../compliance/privacy/impersonalization.shared.schemas.js';
+import { DataRetentionClass, RetentionStartPoint } from '../compliance/privacy/retention-schedule.shared.schemas.js';
+import { ConversationMessageDirection, ConversationMessageSchema, ConversationReplyTokenSchema, ConversationThreadSchema, ConversationThreadStatus, ConversationThreads_Operations, } from './conversation-threads.shared.schemas.js';
+/**
+ * The two `conversationThreads` LIST filter keys that find the conversations linked to one record (#1630): dotted
+ * paths into `linkedResource`. One source for the backend's `filterFields` and for the frontend embed that pins them
+ * (`EmbedLinkedConversations`), so the two cannot disagree on a spelling.
+ */
+export const CONVERSATION_THREAD_LINKED_RESOURCE_FILTER = {
+    RESOURCE_TYPE: 'linkedResource.resourceType',
+    RESOURCE_ID: 'linkedResource.resourceId',
+};
+const CORE_OPERATIONS = [
+    CoreResourceOperation.READ,
+    CoreResourceOperation.LIST,
+    CoreResourceOperation.CREATE,
+    CoreResourceOperation.UPDATE,
+    CoreResourceOperation.UPDATE_MANY,
+    CoreResourceOperation.DELETE,
+    CoreResourceOperation.DELETE_MANY,
+];
+/**
+ * The engine reads threads and tokens on a system context to correlate a message BEFORE any handler
+ * authority exists, and the intake, reply worker and token service write them as the engine.
+ */
+const engineOwned = {
+    read: ResourceSystemAccessMode.ALLOWED,
+    list: ResourceSystemAccessMode.ALLOWED,
+    create: ResourceSystemAccessMode.ALLOWED,
+    update: ResourceSystemAccessMode.ALLOWED,
+    updateMany: ResourceSystemAccessMode.ALLOWED,
+};
+/** Retained on erasure, scrubbed of the addresses and the text; the thread's structure is the record. */
+const RETAIN = { mode: ErasureRetentionMode.RETAIN_AND_IMPERSONALIZE };
+/** The counterpart is a person with no account, or another organization: no login is reachable from a row. */
+const NO_PRINCIPAL = { kind: ResourceDataSubjectKind.NO_PRINCIPAL };
+/*
+ * The operation configurations below are written out per resource rather than shared through a helper:
+ * contextual typing needs each variant literal in place, and a shared constant widens `variantType` to the
+ * whole enum, which the builder refuses.
+ */
+export const conversationThreadsResourceConfiguration_InitializationFactory = (resourcesRelationships) => createResourceConfiguration_Initialization({
+    mainSchema: ConversationThreadSchema,
+    resourceIdentifier: CoreResourceType.CONVERSATION_THREADS,
+    resourceFieldIdentifier: coreResourceShared_FieldIdentifier[CoreResourceType.CONVERSATION_THREADS],
+    resourceRelationships: resourcesRelationships,
+    isSystemResource: true,
+    systemAccessPolicy: engineOwned,
+    retentionPolicy: RETAIN,
+    /*
+     * A thread is CORRELATION, not the record (#1613, #1635): its messages are the business letters a
+     * statute keeps, and each carries its own statutory clock. So a thread is kept while the exchange may
+     * continue and for the application's `RESOURCE_DATA` period after it CLOSES — an open thread never
+     * expires — and deleting it takes its reply tokens but never its messages (the edge to them is a
+     * REFERENCE), which stand on their own until their statutory period ends.
+     */
+    retentionBinding: {
+        retentionClass: DataRetentionClass.RESOURCE_DATA,
+        startPoint: RetentionStartPoint.CLOSURE_EVENT,
+        closureFieldName: 'closedAt',
+    },
+    dataSubjectPolicy: NO_PRINCIPAL,
+    coreOperations: CORE_OPERATIONS,
+    operationsConfiguration: {
+        [CoreResourceOperation.READ]: { variants: [{ variantType: ResourceOperationVariantType.API_CALL, isDefault: true, roles: [CORE_ORG_ROLES.ORG_MEMBER], riskLevel: ResourceOperationRiskLevel.LOW }] },
+        /*
+         * `linkedResource.*` lets a record's page find the conversations linked to it. Dotted keys into the stored
+         * object rather than a copy of the link in two top-level columns: one source for the link, and both
+         * adapters filter on a path (MongoDB natively, PostgreSQL through the jsonb root the object is stored in).
+         */
+        [CoreResourceOperation.LIST]: {
+            variants: [{
+                    variantType: ResourceOperationVariantType.API_CALL,
+                    isDefault: true,
+                    roles: [CORE_ORG_ROLES.ORG_MEMBER],
+                    riskLevel: ResourceOperationRiskLevel.LOW,
+                    filterFields: {
+                        status: z.enum(ConversationThreadStatus),
+                        // The link's own field schemas, not bare strings: a filter on a field is that field, so it carries the
+                        // field's limits and its description into every LIST variant's published query parameters (#1625).
+                        [CONVERSATION_THREAD_LINKED_RESOURCE_FILTER.RESOURCE_TYPE]: WorkUnitRefSchema.shape.resourceType,
+                        [CONVERSATION_THREAD_LINKED_RESOURCE_FILTER.RESOURCE_ID]: WorkUnitRefSchema.shape.resourceId,
+                    },
+                    sortFields: ['lastMessageAt', 'createdAt'],
+                }],
+        },
+        [CoreResourceOperation.CREATE]: { variants: [{ variantType: ResourceOperationVariantType.REPOSITORY_ONLY, isDefault: true, roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN], riskLevel: ResourceOperationRiskLevel.LOW }] },
+        [CoreResourceOperation.UPDATE]: { variants: [{ variantType: ResourceOperationVariantType.REPOSITORY_ONLY, isDefault: true, roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN], riskLevel: ResourceOperationRiskLevel.LOW }] },
+        [CoreResourceOperation.UPDATE_MANY]: { variants: [{ variantType: ResourceOperationVariantType.INTERNAL_CALL, isDefault: true, roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN], riskLevel: ResourceOperationRiskLevel.CRITICAL }] },
+        // HIGH: deleting correspondence removes evidence of what a client sent and what the firm answered.
+        [CoreResourceOperation.DELETE]: { variants: [{ variantType: ResourceOperationVariantType.INTERNAL_CALL, isDefault: true, roles: [], riskLevel: ResourceOperationRiskLevel.HIGH }] },
+        [CoreResourceOperation.DELETE_MANY]: { variants: [{ variantType: ResourceOperationVariantType.INTERNAL_CALL, isDefault: true, roles: [], riskLevel: ResourceOperationRiskLevel.HIGH }] },
+        /**
+         * Close the exchange. Revokes every live reply token of the thread (a reply to it no longer binds),
+         * and starts the retention clock. Empty request: the implementation owns the transition.
+         */
+        [ConversationThreads_Operations.CLOSE]: {
+            variants: [{
+                    variantType: ResourceOperationVariantType.API_CALL,
+                    isDefault: true,
+                    roles: [CORE_ORG_ROLES.ORG_ADMIN],
+                    riskLevel: ResourceOperationRiskLevel.MEDIUM,
+                    resourceOperationLike: CoreResourceOperation.UPDATE,
+                    requestDto: z.object({}),
+                    enabledCondition: ({ currentObject }) => currentObject.status === ConversationThreadStatus.OPEN,
+                }],
+        },
+    },
+});
+export const conversationMessagesResourceConfiguration_InitializationFactory = (resourcesRelationships) => createResourceConfiguration_Initialization({
+    mainSchema: ConversationMessageSchema,
+    resourceIdentifier: CoreResourceType.CONVERSATION_MESSAGES,
+    resourceFieldIdentifier: coreResourceShared_FieldIdentifier[CoreResourceType.CONVERSATION_MESSAGES],
+    resourceRelationships: resourcesRelationships,
+    isSystemResource: true,
+    systemAccessPolicy: engineOwned,
+    /*
+     * Every message — received or sent — is business correspondence, which commercial and tax statutes
+     * require kept for a period counted from the end of the calendar year it was received or sent. So an
+     * erasure RESTRICTS a message inside that period instead of scrubbing it (#1635), and the sweep deletes
+     * it once the application's `BUSINESS_RECORDS` period has passed.
+     *
+     * `RETAIN_AND_IMPERSONALIZE`, not `RETAIN_ONLY`: `RETAIN_ONLY` declares that the row holds no personal
+     * data of its own, and a message holds addresses, a subject and a preview. The mode states what the row
+     * IS; the statutory ground decides that, inside its period, erasure restricts rather than scrubs.
+     */
+    retentionPolicy: {
+        mode: ErasureRetentionMode.RETAIN_AND_IMPERSONALIZE,
+        statutoryRetention: {
+            ground: StatutoryRetentionGround.LEGAL_OBLIGATION,
+            rationale: 'Business correspondence received and sent: HGB §257(1) no. 2-3 and AO §147(1) no. 2-3 (six years, counted from the end of the calendar year, §257(5) / §147(4)); Code de commerce L123-22 where it is accounting evidence.',
+        },
+    },
+    retentionBinding: {
+        retentionClass: DataRetentionClass.BUSINESS_RECORDS,
+        startPoint: RetentionStartPoint.END_OF_CALENDAR_YEAR,
+    },
+    dataSubjectPolicy: NO_PRINCIPAL,
+    coreOperations: CORE_OPERATIONS,
+    operationsConfiguration: {
+        [CoreResourceOperation.READ]: { variants: [{ variantType: ResourceOperationVariantType.API_CALL, isDefault: true, roles: [CORE_ORG_ROLES.ORG_MEMBER], riskLevel: ResourceOperationRiskLevel.LOW }] },
+        // A thread's messages, newest first by default or sorted by `occurredAt`; `direction` tells what was received from what was answered.
+        [CoreResourceOperation.LIST]: {
+            variants: [{
+                    variantType: ResourceOperationVariantType.API_CALL,
+                    isDefault: true,
+                    roles: [CORE_ORG_ROLES.ORG_MEMBER],
+                    riskLevel: ResourceOperationRiskLevel.LOW,
+                    filterFields: { threadId: z.string(), direction: z.enum(ConversationMessageDirection) },
+                    sortFields: ['occurredAt'],
+                }],
+        },
+        [CoreResourceOperation.CREATE]: { variants: [{ variantType: ResourceOperationVariantType.REPOSITORY_ONLY, isDefault: true, roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN], riskLevel: ResourceOperationRiskLevel.LOW }] },
+        [CoreResourceOperation.UPDATE]: { variants: [{ variantType: ResourceOperationVariantType.REPOSITORY_ONLY, isDefault: true, roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN], riskLevel: ResourceOperationRiskLevel.LOW }] },
+        [CoreResourceOperation.UPDATE_MANY]: { variants: [{ variantType: ResourceOperationVariantType.INTERNAL_CALL, isDefault: true, roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN], riskLevel: ResourceOperationRiskLevel.CRITICAL }] },
+        // HIGH: deleting correspondence removes evidence of what a client sent and what the firm answered.
+        [CoreResourceOperation.DELETE]: { variants: [{ variantType: ResourceOperationVariantType.INTERNAL_CALL, isDefault: true, roles: [], riskLevel: ResourceOperationRiskLevel.HIGH }] },
+        [CoreResourceOperation.DELETE_MANY]: { variants: [{ variantType: ResourceOperationVariantType.INTERNAL_CALL, isDefault: true, roles: [], riskLevel: ResourceOperationRiskLevel.HIGH }] },
+    },
+});
+export const conversationReplyTokensResourceConfiguration_InitializationFactory = (resourcesRelationships) => createResourceConfiguration_Initialization({
+    mainSchema: ConversationReplyTokenSchema,
+    resourceIdentifier: CoreResourceType.CONVERSATION_REPLY_TOKENS,
+    resourceFieldIdentifier: coreResourceShared_FieldIdentifier[CoreResourceType.CONVERSATION_REPLY_TOKENS],
+    resourceRelationships: resourcesRelationships,
+    isSystemResource: true,
+    systemAccessPolicy: engineOwned,
+    retentionPolicy: RETAIN,
+    dataSubjectPolicy: NO_PRINCIPAL,
+    coreOperations: CORE_OPERATIONS,
+    operationsConfiguration: {
+        // No API read: a reply address is a bearer secret, and knowing which exist is the engine's alone.
+        [CoreResourceOperation.READ]: { variants: [{ variantType: ResourceOperationVariantType.INTERNAL_CALL, isDefault: true, roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN], riskLevel: ResourceOperationRiskLevel.LOW }] },
+        [CoreResourceOperation.LIST]: { variants: [{ variantType: ResourceOperationVariantType.INTERNAL_CALL, isDefault: true, roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN], riskLevel: ResourceOperationRiskLevel.LOW }] },
+        [CoreResourceOperation.CREATE]: { variants: [{ variantType: ResourceOperationVariantType.REPOSITORY_ONLY, isDefault: true, roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN], riskLevel: ResourceOperationRiskLevel.LOW }] },
+        [CoreResourceOperation.UPDATE]: { variants: [{ variantType: ResourceOperationVariantType.REPOSITORY_ONLY, isDefault: true, roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN], riskLevel: ResourceOperationRiskLevel.LOW }] },
+        [CoreResourceOperation.UPDATE_MANY]: { variants: [{ variantType: ResourceOperationVariantType.INTERNAL_CALL, isDefault: true, roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN], riskLevel: ResourceOperationRiskLevel.CRITICAL }] },
+        // Route-less: a token leaves with its thread (the COMPOSITION cascade), never on its own.
+        [CoreResourceOperation.DELETE]: { variants: [{ variantType: ResourceOperationVariantType.INTERNAL_CALL, isDefault: true, roles: [], riskLevel: ResourceOperationRiskLevel.HIGH }] },
+        [CoreResourceOperation.DELETE_MANY]: { variants: [{ variantType: ResourceOperationVariantType.INTERNAL_CALL, isDefault: true, roles: [], riskLevel: ResourceOperationRiskLevel.HIGH }] },
+    },
+});
+//# sourceMappingURL=conversation-threads.shared.resources-config.schemas.js.map

package/dist/esm/inbound/conversation-threads.shared.resources-config.schemas.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"conversation-threads.shared.resources-config.schemas.js","sourceRoot":"","sources":["../../../src/inbound/conversation-threads.shared.resources-config.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,kCAAkC,EAAE,MAAM,gDAAgD,CAAC;AAC7I,OAAO,EAAE,0BAA0B,EAAE,4BAA4B,EAA6B,MAAM,uCAAuC,CAAC;AAC5I,OAAO,EAAE,0CAA0C,EAAE,MAAM,8CAA8C,CAAC;AAC1G,OAAO,EAAE,wBAAwB,EAAE,MAAM,8CAA8C,CAAC;AACxF,OAAO,EAAE,iBAAiB,EAAE,MAAM,uCAAuC,CAAC;AAC1E,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,iDAAiD,CAAC;AACjG,OAAO,EAAE,oBAAoB,EAAE,uBAAuB,EAAE,wBAAwB,EAAE,MAAM,wDAAwD,CAAC;AACjJ,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,yDAAyD,CAAC;AAClH,OAAO,EACL,4BAA4B,EAC5B,yBAAyB,EACzB,4BAA4B,EAC5B,wBAAwB,EACxB,wBAAwB,EACxB,8BAA8B,GAC/B,MAAM,uCAAuC,CAAC;AAE/C;;;;GAIG;AACH,MAAM,CAAC,MAAM,0CAA0C,GAAG;IACxD,aAAa,EAAE,6BAA6B;IAC5C,WAAW,EAAE,2BAA2B;CAChC,CAAC;AAWX,MAAM,eAAe,GAAiC;IACpD,qBAAqB,CAAC,IAAI;IAC1B,qBAAqB,CAAC,IAAI;IAC1B,qBAAqB,CAAC,MAAM;IAC5B,qBAAqB,CAAC,MAAM;IAC5B,qBAAqB,CAAC,WAAW;IACjC,qBAAqB,CAAC,MAAM;IAC5B,qBAAqB,CAAC,WAAW;CAClC,CAAC;AAEF;;;GAGG;AACH,MAAM,WAAW,GAAG;IAClB,IAAI,EAAE,wBAAwB,CAAC,OAAO;IACtC,IAAI,EAAE,wBAAwB,CAAC,OAAO;IACtC,MAAM,EAAE,wBAAwB,CAAC,OAAO;IACxC,MAAM,EAAE,wBAAwB,CAAC,OAAO;IACxC,UAAU,EAAE,wBAAwB,CAAC,OAAO;CAC7C,CAAC;AAEF,yGAAyG;AACzG,MAAM,MAAM,GAAG,EAAE,IAAI,EAAE,oBAAoB,CAAC,wBAAwB,EAAE,CAAC;AAEvE,8GAA8G;AAC9G,MAAM,YAAY,GAAG,EAAE,IAAI,EAAE,uBAAuB,CAAC,YAAY,EAAE,CAAC;AAEpE;;;;GAIG;AAEH,MAAM,CAAC,MAAM,8DAA8D,GAAG,CAAC,sBAA8C,EAAE,EAAE,CAC/H,0CAA0C,CAAqG;IAC7I,UAAU,EAAE,wBAAwB;IACpC,kBAAkB,EAAE,gBAAgB,CAAC,oBAAoB;IACzD,uBAAuB,EAAE,kCAAkC,CAAC,gBAAgB,CAAC,oBAAoB,CAAC;IAClG,qBAAqB,EAAE,sBAAsB;IAC7C,gBAAgB,EAAE,IAAI;IACtB,kBAAkB,EAAE,WAAW;IAC/B,eAAe,EAAE,MAAM;IACvB;;;;;;OAMG;IACH,gBAAgB,EAAE;QAChB,cAAc,EAAE,kBAAkB,CAAC,aAAa;QAChD,UAAU,EAAE,mBAAmB,CAAC,aAAa;QAC7C,gBAAgB,EAAE,UAAU;KAC7B;IACD,iBAAiB,EAAE,YAAY;IAC/B,cAAc,EAAE,eAAe;IAC/B,uBAAuB,EAAE;QACvB,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,WAAW,EAAE,4BAA4B,CAAC,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,cAAc,CAAC,UAAU,CAAC,EAAE,SAAS,EAAE,0BAA0B,CAAC,GAAG,EAAE,CAAC,EAAE;QACpM;;;;WAIG;QACH,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE;YAC5B,QAAQ,EAAE,CAAC;oBACT,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,UAAU,CAAC;oBAClC,SAAS,EAAE,0BAA0B,CAAC,GAAG;oBACzC,YAAY,EAAE;wBACZ,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,wBAAwB,CAAC;wBACxC,uGAAuG;wBACvG,mGAAmG;wBACnG,CAAC,0CAA0C,CAAC,aAAa,CAAC,EAAE,iBAAiB,CAAC,KAAK,CAAC,YAAY;wBAChG,CAAC,0CAA0C,CAAC,WAAW,CAAC,EAAE,iBAAiB,CAAC,KAAK,CAAC,UAAU;qBAC7F;oBACD,UAAU,EAAE,CAAC,eAAe,EAAE,WAAW,CAAC;iBAC3C,CAAC;SACH;QACD,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,WAAW,EAAE,4BAA4B,CAAC,eAAe,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC,EAAE,SAAS,EAAE,0BAA0B,CAAC,GAAG,EAAE,CAAC,EAAE;QACxN,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,WAAW,EAAE,4BAA4B,CAAC,eAAe,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC,EAAE,SAAS,EAAE,0BAA0B,CAAC,GAAG,EAAE,CAAC,EAAE;QACxN,CAAC,qBAAqB,CAAC,WAAW,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,WAAW,EAAE,4BAA4B,CAAC,aAAa,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC,EAAE,SAAS,EAAE,0BAA0B,CAAC,QAAQ,EAAE,CAAC,EAAE;QAChO,mGAAmG;QACnG,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,WAAW,EAAE,4BAA4B,CAAC,aAAa,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,SAAS,EAAE,0BAA0B,CAAC,IAAI,EAAE,CAAC,EAAE;QACnL,CAAC,qBAAqB,CAAC,WAAW,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,WAAW,EAAE,4BAA4B,CAAC,aAAa,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,SAAS,EAAE,0BAA0B,CAAC,IAAI,EAAE,CAAC,EAAE;QACxL;;;WAGG;QACH,CAAC,8BAA8B,CAAC,KAAK,CAAC,EAAE;YACtC,QAAQ,EAAE,CAAC;oBACT,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC;oBACjC,SAAS,EAAE,0BAA0B,CAAC,MAAM;oBAC5C,qBAAqB,EAAE,qBAAqB,CAAC,MAAM;oBACnD,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;oBACxB,gBAAgB,EAAE,CAAC,EAAE,aAAa,EAAE,EAAE,EAAE,CAAC,aAAa,CAAC,MAAM,KAAK,wBAAwB,CAAC,IAAI;iBAChG,CAAC;SACH;KACF;CACF,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,+DAA+D,GAAG,CAAC,sBAA8C,EAAE,EAAE,CAChI,0CAA0C,CAAsF;IAC9H,UAAU,EAAE,yBAAyB;IACrC,kBAAkB,EAAE,gBAAgB,CAAC,qBAAqB;IAC1D,uBAAuB,EAAE,kCAAkC,CAAC,gBAAgB,CAAC,qBAAqB,CAAC;IACnG,qBAAqB,EAAE,sBAAsB;IAC7C,gBAAgB,EAAE,IAAI;IACtB,kBAAkB,EAAE,WAAW;IAC/B;;;;;;;;;OASG;IACH,eAAe,EAAE;QACf,IAAI,EAAE,oBAAoB,CAAC,wBAAwB;QACnD,kBAAkB,EAAE;YAClB,MAAM,EAAE,wBAAwB,CAAC,gBAAgB;YACjD,SAAS,EAAE,4NAA4N;SACxO;KACF;IACD,gBAAgB,EAAE;QAChB,cAAc,EAAE,kBAAkB,CAAC,gBAAgB;QACnD,UAAU,EAAE,mBAAmB,CAAC,oBAAoB;KACrD;IACD,iBAAiB,EAAE,YAAY;IAC/B,cAAc,EAAE,eAAe;IAC/B,uBAAuB,EAAE;QACvB,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,WAAW,EAAE,4BAA4B,CAAC,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,cAAc,CAAC,UAAU,CAAC,EAAE,SAAS,EAAE,0BAA0B,CAAC,GAAG,EAAE,CAAC,EAAE;QACpM,sIAAsI;QACtI,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE;YAC5B,QAAQ,EAAE,CAAC;oBACT,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,UAAU,CAAC;oBAClC,SAAS,EAAE,0BAA0B,CAAC,GAAG;oBACzC,YAAY,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,4BAA4B,CAAC,EAAE;oBACvF,UAAU,EAAE,CAAC,YAAY,CAAC;iBAC3B,CAAC;SACH;QACD,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,WAAW,EAAE,4BAA4B,CAAC,eAAe,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC,EAAE,SAAS,EAAE,0BAA0B,CAAC,GAAG,EAAE,CAAC,EAAE;QACxN,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,WAAW,EAAE,4BAA4B,CAAC,eAAe,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC,EAAE,SAAS,EAAE,0BAA0B,CAAC,GAAG,EAAE,CAAC,EAAE;QACxN,CAAC,qBAAqB,CAAC,WAAW,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,WAAW,EAAE,4BAA4B,CAAC,aAAa,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC,EAAE,SAAS,EAAE,0BAA0B,CAAC,QAAQ,EAAE,CAAC,EAAE;QAChO,mGAAmG;QACnG,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,WAAW,EAAE,4BAA4B,CAAC,aAAa,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,SAAS,EAAE,0BAA0B,CAAC,IAAI,EAAE,CAAC,EAAE;QACnL,CAAC,qBAAqB,CAAC,WAAW,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,WAAW,EAAE,4BAA4B,CAAC,aAAa,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,SAAS,EAAE,0BAA0B,CAAC,IAAI,EAAE,CAAC,EAAE;KACzL;CACF,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,kEAAkE,GAAG,CAAC,sBAA8C,EAAE,EAAE,CACnI,0CAA0C,CAAyF;IACjI,UAAU,EAAE,4BAA4B;IACxC,kBAAkB,EAAE,gBAAgB,CAAC,yBAAyB;IAC9D,uBAAuB,EAAE,kCAAkC,CAAC,gBAAgB,CAAC,yBAAyB,CAAC;IACvG,qBAAqB,EAAE,sBAAsB;IAC7C,gBAAgB,EAAE,IAAI;IACtB,kBAAkB,EAAE,WAAW;IAC/B,eAAe,EAAE,MAAM;IACvB,iBAAiB,EAAE,YAAY;IAC/B,cAAc,EAAE,eAAe;IAC/B,uBAAuB,EAAE;QACvB,kGAAkG;QAClG,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,WAAW,EAAE,4BAA4B,CAAC,aAAa,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC,EAAE,SAAS,EAAE,0BAA0B,CAAC,GAAG,EAAE,CAAC,EAAE;QACpN,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,WAAW,EAAE,4BAA4B,CAAC,aAAa,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC,EAAE,SAAS,EAAE,0BAA0B,CAAC,GAAG,EAAE,CAAC,EAAE;QACpN,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,WAAW,EAAE,4BAA4B,CAAC,eAAe,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC,EAAE,SAAS,EAAE,0BAA0B,CAAC,GAAG,EAAE,CAAC,EAAE;QACxN,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,WAAW,EAAE,4BAA4B,CAAC,eAAe,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC,EAAE,SAAS,EAAE,0BAA0B,CAAC,GAAG,EAAE,CAAC,EAAE;QACxN,CAAC,qBAAqB,CAAC,WAAW,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,WAAW,EAAE,4BAA4B,CAAC,aAAa,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC,EAAE,SAAS,EAAE,0BAA0B,CAAC,QAAQ,EAAE,CAAC,EAAE;QAChO,0FAA0F;QAC1F,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,WAAW,EAAE,4BAA4B,CAAC,aAAa,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,SAAS,EAAE,0BAA0B,CAAC,IAAI,EAAE,CAAC,EAAE;QACnL,CAAC,qBAAqB,CAAC,WAAW,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,WAAW,EAAE,4BAA4B,CAAC,aAAa,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,SAAS,EAAE,0BAA0B,CAAC,IAAI,EAAE,CAAC,EAAE;KACzL;CACF,CAAC,CAAC","sourcesContent":["/**\n * Conversation threads, messages and reply tokens — resource configurations (#1630).\n *\n * The engine writes all three: the channel intake opens threads and records received messages,\n * `ctx.reply` records replies, the reply worker settles them, and the token service issues and revokes\n * tokens. None of those writes is an HTTP surface (CREATE / UPDATE are REPOSITORY_ONLY), so no caller can\n * backdate a closure or invent a message.\n *\n * What a person may do: members of the organization READ its threads and messages (the correspondence of\n * the organization's own cases), and an organization administrator CLOSES a thread. Tokens have no API at\n * all — a reply address is a bearer secret, and the list of them is nobody's business but the engine's.\n *\n * DELETE / DELETE_MANY / UPDATE_MANY are INTERNAL_CALL: the retention sweep deletes expired rows through the\n * service layer (a closed thread's tokens go with it), and the erasure writer scrubs through UPDATE_MANY.\n * Route-less, so reachable by no request.\n */\nimport { z } from 'zod';\n\nimport { CoreResourceOperation, CoreResourceType, coreResourceShared_FieldIdentifier } from '../resources/resources.shared.core.definitions';\nimport { ResourceOperationRiskLevel, ResourceOperationVariantType, type ResourceRelationship } from '../resources/resources.shared.schemas';\nimport { createResourceConfiguration_Initialization } from '../resources/resources-config.shared.factory';\nimport { ResourceSystemAccessMode } from '../resources/resources-config.shared.schemas';\nimport { WorkUnitRefSchema } from '../resources/work-unit.shared.schemas';\nimport { CORE_APP_ROLES, CORE_ORG_ROLES } from '../security/authorizations/roles.shared.schemas';\nimport { ErasureRetentionMode, ResourceDataSubjectKind, StatutoryRetentionGround } from '../compliance/privacy/impersonalization.shared.schemas';\nimport { DataRetentionClass, RetentionStartPoint } from '../compliance/privacy/retention-schedule.shared.schemas';\nimport {\n  ConversationMessageDirection,\n  ConversationMessageSchema,\n  ConversationReplyTokenSchema,\n  ConversationThreadSchema,\n  ConversationThreadStatus,\n  ConversationThreads_Operations,\n} from './conversation-threads.shared.schemas';\n\n/**\n * The two `conversationThreads` LIST filter keys that find the conversations linked to one record (#1630): dotted\n * paths into `linkedResource`. One source for the backend's `filterFields` and for the frontend embed that pins them\n * (`EmbedLinkedConversations`), so the two cannot disagree on a spelling.\n */\nexport const CONVERSATION_THREAD_LINKED_RESOURCE_FILTER = {\n  RESOURCE_TYPE: 'linkedResource.resourceType',\n  RESOURCE_ID: 'linkedResource.resourceId',\n} as const;\n\ntype ConversationCoreOperations =\n  | CoreResourceOperation.READ\n  | CoreResourceOperation.LIST\n  | CoreResourceOperation.CREATE\n  | CoreResourceOperation.UPDATE\n  | CoreResourceOperation.UPDATE_MANY\n  | CoreResourceOperation.DELETE\n  | CoreResourceOperation.DELETE_MANY;\n\nconst CORE_OPERATIONS: ConversationCoreOperations[] = [\n  CoreResourceOperation.READ,\n  CoreResourceOperation.LIST,\n  CoreResourceOperation.CREATE,\n  CoreResourceOperation.UPDATE,\n  CoreResourceOperation.UPDATE_MANY,\n  CoreResourceOperation.DELETE,\n  CoreResourceOperation.DELETE_MANY,\n];\n\n/**\n * The engine reads threads and tokens on a system context to correlate a message BEFORE any handler\n * authority exists, and the intake, reply worker and token service write them as the engine.\n */\nconst engineOwned = {\n  read: ResourceSystemAccessMode.ALLOWED,\n  list: ResourceSystemAccessMode.ALLOWED,\n  create: ResourceSystemAccessMode.ALLOWED,\n  update: ResourceSystemAccessMode.ALLOWED,\n  updateMany: ResourceSystemAccessMode.ALLOWED,\n};\n\n/** Retained on erasure, scrubbed of the addresses and the text; the thread's structure is the record. */\nconst RETAIN = { mode: ErasureRetentionMode.RETAIN_AND_IMPERSONALIZE };\n\n/** The counterpart is a person with no account, or another organization: no login is reachable from a row. */\nconst NO_PRINCIPAL = { kind: ResourceDataSubjectKind.NO_PRINCIPAL };\n\n/*\n * The operation configurations below are written out per resource rather than shared through a helper:\n * contextual typing needs each variant literal in place, and a shared constant widens `variantType` to the\n * whole enum, which the builder refuses.\n */\n\nexport const conversationThreadsResourceConfiguration_InitializationFactory = (resourcesRelationships: ResourceRelationship[]) =>\n  createResourceConfiguration_Initialization<typeof ConversationThreads_Operations, ConversationCoreOperations, typeof ConversationThreadSchema>({\n    mainSchema: ConversationThreadSchema,\n    resourceIdentifier: CoreResourceType.CONVERSATION_THREADS,\n    resourceFieldIdentifier: coreResourceShared_FieldIdentifier[CoreResourceType.CONVERSATION_THREADS],\n    resourceRelationships: resourcesRelationships,\n    isSystemResource: true,\n    systemAccessPolicy: engineOwned,\n    retentionPolicy: RETAIN,\n    /*\n     * A thread is CORRELATION, not the record (#1613, #1635): its messages are the business letters a\n     * statute keeps, and each carries its own statutory clock. So a thread is kept while the exchange may\n     * continue and for the application's `RESOURCE_DATA` period after it CLOSES — an open thread never\n     * expires — and deleting it takes its reply tokens but never its messages (the edge to them is a\n     * REFERENCE), which stand on their own until their statutory period ends.\n     */\n    retentionBinding: {\n      retentionClass: DataRetentionClass.RESOURCE_DATA,\n      startPoint: RetentionStartPoint.CLOSURE_EVENT,\n      closureFieldName: 'closedAt',\n    },\n    dataSubjectPolicy: NO_PRINCIPAL,\n    coreOperations: CORE_OPERATIONS,\n    operationsConfiguration: {\n      [CoreResourceOperation.READ]: { variants: [{ variantType: ResourceOperationVariantType.API_CALL, isDefault: true, roles: [CORE_ORG_ROLES.ORG_MEMBER], riskLevel: ResourceOperationRiskLevel.LOW }] },\n      /*\n       * `linkedResource.*` lets a record's page find the conversations linked to it. Dotted keys into the stored\n       * object rather than a copy of the link in two top-level columns: one source for the link, and both\n       * adapters filter on a path (MongoDB natively, PostgreSQL through the jsonb root the object is stored in).\n       */\n      [CoreResourceOperation.LIST]: {\n        variants: [{\n          variantType: ResourceOperationVariantType.API_CALL,\n          isDefault: true,\n          roles: [CORE_ORG_ROLES.ORG_MEMBER],\n          riskLevel: ResourceOperationRiskLevel.LOW,\n          filterFields: {\n            status: z.enum(ConversationThreadStatus),\n            // The link's own field schemas, not bare strings: a filter on a field is that field, so it carries the\n            // field's limits and its description into every LIST variant's published query parameters (#1625).\n            [CONVERSATION_THREAD_LINKED_RESOURCE_FILTER.RESOURCE_TYPE]: WorkUnitRefSchema.shape.resourceType,\n            [CONVERSATION_THREAD_LINKED_RESOURCE_FILTER.RESOURCE_ID]: WorkUnitRefSchema.shape.resourceId,\n          },\n          sortFields: ['lastMessageAt', 'createdAt'],\n        }],\n      },\n      [CoreResourceOperation.CREATE]: { variants: [{ variantType: ResourceOperationVariantType.REPOSITORY_ONLY, isDefault: true, roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN], riskLevel: ResourceOperationRiskLevel.LOW }] },\n      [CoreResourceOperation.UPDATE]: { variants: [{ variantType: ResourceOperationVariantType.REPOSITORY_ONLY, isDefault: true, roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN], riskLevel: ResourceOperationRiskLevel.LOW }] },\n      [CoreResourceOperation.UPDATE_MANY]: { variants: [{ variantType: ResourceOperationVariantType.INTERNAL_CALL, isDefault: true, roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN], riskLevel: ResourceOperationRiskLevel.CRITICAL }] },\n      // HIGH: deleting correspondence removes evidence of what a client sent and what the firm answered.\n      [CoreResourceOperation.DELETE]: { variants: [{ variantType: ResourceOperationVariantType.INTERNAL_CALL, isDefault: true, roles: [], riskLevel: ResourceOperationRiskLevel.HIGH }] },\n      [CoreResourceOperation.DELETE_MANY]: { variants: [{ variantType: ResourceOperationVariantType.INTERNAL_CALL, isDefault: true, roles: [], riskLevel: ResourceOperationRiskLevel.HIGH }] },\n      /**\n       * Close the exchange. Revokes every live reply token of the thread (a reply to it no longer binds),\n       * and starts the retention clock. Empty request: the implementation owns the transition.\n       */\n      [ConversationThreads_Operations.CLOSE]: {\n        variants: [{\n          variantType: ResourceOperationVariantType.API_CALL,\n          isDefault: true,\n          roles: [CORE_ORG_ROLES.ORG_ADMIN],\n          riskLevel: ResourceOperationRiskLevel.MEDIUM,\n          resourceOperationLike: CoreResourceOperation.UPDATE,\n          requestDto: z.object({}),\n          enabledCondition: ({ currentObject }) => currentObject.status === ConversationThreadStatus.OPEN,\n        }],\n      },\n    },\n  });\n\nexport const conversationMessagesResourceConfiguration_InitializationFactory = (resourcesRelationships: ResourceRelationship[]) =>\n  createResourceConfiguration_Initialization<Record<string, never>, ConversationCoreOperations, typeof ConversationMessageSchema>({\n    mainSchema: ConversationMessageSchema,\n    resourceIdentifier: CoreResourceType.CONVERSATION_MESSAGES,\n    resourceFieldIdentifier: coreResourceShared_FieldIdentifier[CoreResourceType.CONVERSATION_MESSAGES],\n    resourceRelationships: resourcesRelationships,\n    isSystemResource: true,\n    systemAccessPolicy: engineOwned,\n    /*\n     * Every message — received or sent — is business correspondence, which commercial and tax statutes\n     * require kept for a period counted from the end of the calendar year it was received or sent. So an\n     * erasure RESTRICTS a message inside that period instead of scrubbing it (#1635), and the sweep deletes\n     * it once the application's `BUSINESS_RECORDS` period has passed.\n     *\n     * `RETAIN_AND_IMPERSONALIZE`, not `RETAIN_ONLY`: `RETAIN_ONLY` declares that the row holds no personal\n     * data of its own, and a message holds addresses, a subject and a preview. The mode states what the row\n     * IS; the statutory ground decides that, inside its period, erasure restricts rather than scrubs.\n     */\n    retentionPolicy: {\n      mode: ErasureRetentionMode.RETAIN_AND_IMPERSONALIZE,\n      statutoryRetention: {\n        ground: StatutoryRetentionGround.LEGAL_OBLIGATION,\n        rationale: 'Business correspondence received and sent: HGB §257(1) no. 2-3 and AO §147(1) no. 2-3 (six years, counted from the end of the calendar year, §257(5) / §147(4)); Code de commerce L123-22 where it is accounting evidence.',\n      },\n    },\n    retentionBinding: {\n      retentionClass: DataRetentionClass.BUSINESS_RECORDS,\n      startPoint: RetentionStartPoint.END_OF_CALENDAR_YEAR,\n    },\n    dataSubjectPolicy: NO_PRINCIPAL,\n    coreOperations: CORE_OPERATIONS,\n    operationsConfiguration: {\n      [CoreResourceOperation.READ]: { variants: [{ variantType: ResourceOperationVariantType.API_CALL, isDefault: true, roles: [CORE_ORG_ROLES.ORG_MEMBER], riskLevel: ResourceOperationRiskLevel.LOW }] },\n      // A thread's messages, newest first by default or sorted by `occurredAt`; `direction` tells what was received from what was answered.\n      [CoreResourceOperation.LIST]: {\n        variants: [{\n          variantType: ResourceOperationVariantType.API_CALL,\n          isDefault: true,\n          roles: [CORE_ORG_ROLES.ORG_MEMBER],\n          riskLevel: ResourceOperationRiskLevel.LOW,\n          filterFields: { threadId: z.string(), direction: z.enum(ConversationMessageDirection) },\n          sortFields: ['occurredAt'],\n        }],\n      },\n      [CoreResourceOperation.CREATE]: { variants: [{ variantType: ResourceOperationVariantType.REPOSITORY_ONLY, isDefault: true, roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN], riskLevel: ResourceOperationRiskLevel.LOW }] },\n      [CoreResourceOperation.UPDATE]: { variants: [{ variantType: ResourceOperationVariantType.REPOSITORY_ONLY, isDefault: true, roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN], riskLevel: ResourceOperationRiskLevel.LOW }] },\n      [CoreResourceOperation.UPDATE_MANY]: { variants: [{ variantType: ResourceOperationVariantType.INTERNAL_CALL, isDefault: true, roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN], riskLevel: ResourceOperationRiskLevel.CRITICAL }] },\n      // HIGH: deleting correspondence removes evidence of what a client sent and what the firm answered.\n      [CoreResourceOperation.DELETE]: { variants: [{ variantType: ResourceOperationVariantType.INTERNAL_CALL, isDefault: true, roles: [], riskLevel: ResourceOperationRiskLevel.HIGH }] },\n      [CoreResourceOperation.DELETE_MANY]: { variants: [{ variantType: ResourceOperationVariantType.INTERNAL_CALL, isDefault: true, roles: [], riskLevel: ResourceOperationRiskLevel.HIGH }] },\n    },\n  });\n\nexport const conversationReplyTokensResourceConfiguration_InitializationFactory = (resourcesRelationships: ResourceRelationship[]) =>\n  createResourceConfiguration_Initialization<Record<string, never>, ConversationCoreOperations, typeof ConversationReplyTokenSchema>({\n    mainSchema: ConversationReplyTokenSchema,\n    resourceIdentifier: CoreResourceType.CONVERSATION_REPLY_TOKENS,\n    resourceFieldIdentifier: coreResourceShared_FieldIdentifier[CoreResourceType.CONVERSATION_REPLY_TOKENS],\n    resourceRelationships: resourcesRelationships,\n    isSystemResource: true,\n    systemAccessPolicy: engineOwned,\n    retentionPolicy: RETAIN,\n    dataSubjectPolicy: NO_PRINCIPAL,\n    coreOperations: CORE_OPERATIONS,\n    operationsConfiguration: {\n      // No API read: a reply address is a bearer secret, and knowing which exist is the engine's alone.\n      [CoreResourceOperation.READ]: { variants: [{ variantType: ResourceOperationVariantType.INTERNAL_CALL, isDefault: true, roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN], riskLevel: ResourceOperationRiskLevel.LOW }] },\n      [CoreResourceOperation.LIST]: { variants: [{ variantType: ResourceOperationVariantType.INTERNAL_CALL, isDefault: true, roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN], riskLevel: ResourceOperationRiskLevel.LOW }] },\n      [CoreResourceOperation.CREATE]: { variants: [{ variantType: ResourceOperationVariantType.REPOSITORY_ONLY, isDefault: true, roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN], riskLevel: ResourceOperationRiskLevel.LOW }] },\n      [CoreResourceOperation.UPDATE]: { variants: [{ variantType: ResourceOperationVariantType.REPOSITORY_ONLY, isDefault: true, roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN], riskLevel: ResourceOperationRiskLevel.LOW }] },\n      [CoreResourceOperation.UPDATE_MANY]: { variants: [{ variantType: ResourceOperationVariantType.INTERNAL_CALL, isDefault: true, roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN], riskLevel: ResourceOperationRiskLevel.CRITICAL }] },\n      // Route-less: a token leaves with its thread (the COMPOSITION cascade), never on its own.\n      [CoreResourceOperation.DELETE]: { variants: [{ variantType: ResourceOperationVariantType.INTERNAL_CALL, isDefault: true, roles: [], riskLevel: ResourceOperationRiskLevel.HIGH }] },\n      [CoreResourceOperation.DELETE_MANY]: { variants: [{ variantType: ResourceOperationVariantType.INTERNAL_CALL, isDefault: true, roles: [], riskLevel: ResourceOperationRiskLevel.HIGH }] },\n    },\n  });\n"]}