@wildo-ai/saas-models 1.1.5 → 1.1.7

package/dist/esm/inbound/conversation-threads.shared.schemas.d.ts

@@ -0,0 +1,169 @@
+/**
+ * Conversation threads — the shared thread model every inbound channel correlates into (#1630).
+ *
+ * Three ORGANIZATIONS-scoped resources:
+ *
+ * | resource | one row per | what it is for |
+ * |---|---|---|
+ * | `conversationThreads` | exchange with one counterpart on one channel | correlation, the link to the case, closure |
+ * | `conversationMessages` | message, INBOUND or OUTBOUND | the thread's history; an OUTBOUND row is also the reply's delivery ledger |
+ * | `conversationReplyTokens` | reply address issued to one recipient on one thread | binding a reply to its thread, stored as a hash |
+ *
+ * ## Why one thread model and per-channel records
+ *
+ * Rejected: one table with a JSON union column per channel, which loses per-channel indexes and erasure
+ * matching. Rejected equally: channel-specific thread models only, which makes every handler re-implement
+ * correlation. So correlation is shared here, and what a message WAS on its channel (bodies, headers,
+ * attachments, raw MIME) stays in that channel's record — `INBOUND_EMAILS` for email (#1600) — with its
+ * own indexes, retention and erasure. A message points at it through `channelRecordRef`.
+ *
+ * ## One state, one row
+ *
+ * An INBOUND message has no status of its own: whether its handler ran is the inbound delivery's status.
+ * An OUTBOUND message's `outboundStatus` is the only record of whether its reply was accepted, because no
+ * other row describes that submission.
+ */
+import { z } from 'zod';
+import { InboundChannelKind } from './inbound-channels.shared.schemas';
+/** @wildo_source:part:start saas.models.conversation-threads facet:layer:shared facet:family:inbound facet:audience:app-developer */
+/** Whether a thread still takes messages. */
+export declare enum ConversationThreadStatus {
+    OPEN = "open",
+    /**
+     * The exchange is over. Closing revokes every reply token of the thread, and starts the thread's
+     * retention clock: a closed thread is kept for the `RESOURCE_DATA` period from `closedAt`. Its messages
+     * keep their own, statutory, clock.
+     */
+    CLOSED = "closed"
+}
+/** Which way a message travelled. */
+export declare enum ConversationMessageDirection {
+    /** Received from the counterpart; its handler run is recorded on the inbound delivery. */
+    INBOUND = "inbound",
+    /** Sent by the application, as a handler's reply. */
+    OUTBOUND = "outbound"
+}
+/** Where an OUTBOUND message stands with the sending provider. */
+export declare enum ConversationOutboundStatus {
+    /** Written by `ctx.reply` and waiting for the reply worker. */
+    QUEUED = "queued",
+    /** The sending provider accepted the submission. Terminal: a retry of the same submission never sends again. */
+    ACCEPTED_BY_PROVIDER = "accepted_by_provider",
+    /** The provider refused it, or the reply could not be sent at all. Terminal; the reason is `failureCode`. */
+    FAILED = "failed"
+}
+/** Why a reply token stopped binding replies. */
+export declare enum ReplyTokenRevocationReason {
+    /** Its thread was closed. */
+    THREAD_CLOSED = "thread_closed",
+    /** The thread's counterpart changed, so a token issued to the previous one names nobody on the thread. */
+    COUNTERPART_CHANGED = "counterpart_changed",
+    /**
+     * It was issued to a member of the organization who is no longer one. Detected when the token is next
+     * USED, which is the one place every removal door converges: whether the member left, was removed,
+     * suspended or erased, the token no longer binds from that moment.
+     */
+    MEMBER_REMOVED = "member_removed",
+    /** A newer token was issued to the same recipient on the same thread; one live address per recipient. */
+    ROTATED = "rotated"
+}
+/** Placeholder written over free text an erasure scrubs. */
+export declare const ERASED_CONVERSATION_TEXT = "[erased]";
+/** What a message's channel record is. The record's resource type is decided by the channel. */
+export declare const ConversationChannelRecordRefSchema: z.ZodObject<{
+    resourceType: z.ZodString;
+    resourceId: z.ZodString;
+}, z.core.$strict>;
+export type ConversationChannelRecordRef = z.infer<typeof ConversationChannelRecordRefSchema>;
+/**
+ * One exchange with one counterpart on one channel.
+ *
+ * `threadKey` is the channel's correlation key — for email, the `Message-ID` of the message that opened
+ * the thread — unique per organization and channel: the same message delivered to two organizations
+ * opens a thread in each.
+ */
+export declare const ConversationThreadSchema: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodObject<{
+    _id: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>;
+    organizationId: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>>>;
+    channel: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodEnum<typeof InboundChannelKind>>>>;
+    threadKey: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>;
+    counterpartAddress: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>>;
+    subject: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodString>>>;
+    linkedResource: z.ZodDefault<z.ZodNullable<z.ZodObject<{
+        resourceType: z.ZodString;
+        resourceId: z.ZodString;
+    }, z.core.$strict>>>;
+    status: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodEnum<typeof ConversationThreadStatus>>>>>;
+    lastMessageAt: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDate>>;
+    closedAt: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodNullable<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDate>>>>>;
+    createdAt: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodDate>>>>;
+    updatedAt: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodDate>>>;
+}, z.core.$strip>>;
+export type ConversationThread = z.infer<typeof ConversationThreadSchema>;
+/** The threading identity of an OUTBOUND message, as it went on the wire. */
+export declare const ConversationOutboundThreadingSchema: z.ZodObject<{
+    inReplyTo: z.ZodOptional<z.ZodString>;
+    references: z.ZodDefault<z.ZodArray<z.ZodString>>;
+}, z.core.$strict>;
+/** One message of a thread, in either direction. */
+export declare const ConversationMessageSchema: z.ZodObject<{
+    _id: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>;
+    organizationId: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>>>;
+    threadId: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>>>;
+    direction: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodEnum<typeof ConversationMessageDirection>>>>;
+    rfcMessageId: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>;
+    fromAddress: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>;
+    toAddresses: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodArray<z.ZodString>>>;
+    subject: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodString>>;
+    textPreview: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodString>>;
+    occurredAt: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDate>>;
+    inboundDeliveryId: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodNullable<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>>>;
+    channelRecordRef: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodNullable<z.ZodObject<{
+        resourceType: z.ZodString;
+        resourceId: z.ZodString;
+    }, z.core.$strict>>>>;
+    submissionId: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodOptional<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>>;
+    outboundStatus: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodNullable<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodEnum<typeof ConversationOutboundStatus>>>>>>>;
+    templateRef: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodNullable<z.ZodString>>>;
+    templateVariables: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodUnknown>>>>>;
+    locale: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodNullable<z.ZodString>>>;
+    replyToAddress: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodNullable<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>>>;
+    threading: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodNullable<z.ZodObject<{
+        inReplyTo: z.ZodOptional<z.ZodString>;
+        references: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    }, z.core.$strict>>>>;
+    providerMessageIds: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodArray<z.ZodString>>>>;
+    failureCode: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodNullable<z.ZodString>>>>;
+    settledAt: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodNullable<z.ZodDate>>>>;
+    createdAt: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodDate>>>>;
+    updatedAt: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodDate>>>;
+}, z.core.$strip>;
+export type ConversationMessage = z.infer<typeof ConversationMessageSchema>;
+/**
+ * One reply address issued to one recipient on one thread.
+ *
+ * The token itself is a bearer secret — whoever holds the address can post to the thread under that
+ * recipient's name, as with any reply-by-email system — so only its SHA-256 is stored, and the plaintext
+ * exists only in the address the reply carried. At least 128 bits from a CSPRNG.
+ */
+export declare const ConversationReplyTokenSchema: z.ZodObject<{
+    _id: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>;
+    organizationId: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>>>;
+    threadId: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>>>;
+    recipientAddress: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>>;
+    recipientMemberUserId: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodNullable<z.ZodString>>>;
+    tokenHash: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>>;
+    issuedAt: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDate>>;
+    revokedAt: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodNullable<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDate>>>>>;
+    revocationReason: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodNullable<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodEnum<typeof ReplyTokenRevocationReason>>>>>>;
+    createdAt: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodDate>>>>;
+    updatedAt: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodDate>>>;
+}, z.core.$strip>;
+export type ConversationReplyToken = z.infer<typeof ConversationReplyTokenSchema>;
+/** @wildo_source:part:end saas.models.conversation-threads */
+/** Thread verbs a person may take. */
+export declare enum ConversationThreads_Operations {
+    /** Close the exchange: revokes every reply token of the thread and starts its retention clock. */
+    CLOSE = "close"
+}
+//# sourceMappingURL=conversation-threads.shared.schemas.d.ts.map

package/dist/esm/inbound/conversation-threads.shared.schemas.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"conversation-threads.shared.schemas.d.ts","sourceRoot":"","sources":["../../../src/inbound/conversation-threads.shared.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAMxB,OAAO,EAAE,kBAAkB,EAAE,MAAM,mCAAmC,CAAC;AAEvE,qIAAqI;AAErI,6CAA6C;AAC7C,oBAAY,wBAAwB;IAClC,IAAI,SAAS;IACb;;;;OAIG;IACH,MAAM,WAAW;CAClB;AAED,qCAAqC;AACrC,oBAAY,4BAA4B;IACtC,0FAA0F;IAC1F,OAAO,YAAY;IACnB,qDAAqD;IACrD,QAAQ,aAAa;CACtB;AAED,kEAAkE;AAClE,oBAAY,0BAA0B;IACpC,+DAA+D;IAC/D,MAAM,WAAW;IACjB,gHAAgH;IAChH,oBAAoB,yBAAyB;IAC7C,6GAA6G;IAC7G,MAAM,WAAW;CAClB;AAED,iDAAiD;AACjD,oBAAY,0BAA0B;IACpC,6BAA6B;IAC7B,aAAa,kBAAkB;IAC/B,0GAA0G;IAC1G,mBAAmB,wBAAwB;IAC3C;;;;OAIG;IACH,cAAc,mBAAmB;IACjC,yGAAyG;IACzG,OAAO,YAAY;CACpB;AAED,4DAA4D;AAC5D,eAAO,MAAM,wBAAwB,aAAa,CAAC;AAQnD,gGAAgG;AAChG,eAAO,MAAM,kCAAkC;;;kBAG7C,CAAC;AAEH,MAAM,MAAM,4BAA4B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kCAAkC,CAAC,CAAC;AAE9F;;;;;;GAMG;AACH,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;kBA6BwB,CAAC;AAE9D,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAE1E,6EAA6E;AAC7E,eAAO,MAAM,mCAAmC;;;kBAG9C,CAAC;AAEH,oDAAoD;AACpD,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAmFpC,CAAC;AAEH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAE5E;;;;;;GAMG;AACH,eAAO,MAAM,4BAA4B;;;;;;;;;;;;iBAwBvC,CAAC;AAEH,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAElF,8DAA8D;AAE9D,sCAAsC;AACtC,oBAAY,8BAA8B;IACxC,kGAAkG;IAClG,KAAK,UAAU;CAChB"}

package/dist/esm/inbound/conversation-threads.shared.schemas.js

@@ -0,0 +1,231 @@
+/**
+ * Conversation threads — the shared thread model every inbound channel correlates into (#1630).
+ *
+ * Three ORGANIZATIONS-scoped resources:
+ *
+ * | resource | one row per | what it is for |
+ * |---|---|---|
+ * | `conversationThreads` | exchange with one counterpart on one channel | correlation, the link to the case, closure |
+ * | `conversationMessages` | message, INBOUND or OUTBOUND | the thread's history; an OUTBOUND row is also the reply's delivery ledger |
+ * | `conversationReplyTokens` | reply address issued to one recipient on one thread | binding a reply to its thread, stored as a hash |
+ *
+ * ## Why one thread model and per-channel records
+ *
+ * Rejected: one table with a JSON union column per channel, which loses per-channel indexes and erasure
+ * matching. Rejected equally: channel-specific thread models only, which makes every handler re-implement
+ * correlation. So correlation is shared here, and what a message WAS on its channel (bodies, headers,
+ * attachments, raw MIME) stays in that channel's record — `INBOUND_EMAILS` for email (#1600) — with its
+ * own indexes, retention and erasure. A message points at it through `channelRecordRef`.
+ *
+ * ## One state, one row
+ *
+ * An INBOUND message has no status of its own: whether its handler ran is the inbound delivery's status.
+ * An OUTBOUND message's `outboundStatus` is the only record of whether its reply was accepted, because no
+ * other row describes that submission.
+ */
+import { z } from 'zod';
+import { addImpersonalizeWith } from '@wildo-ai/zod-decorators';
+import { PersonalDataCategory } from '../compliance/privacy/personal-data-category.shared.schemas.js';
+import { RedactionType } from '../compliance/privacy/redaction.shared.schemas.js';
+import { WorkUnitRefSchema } from '../resources/work-unit.shared.schemas.js';
+import { InboundChannelKind } from './inbound-channels.shared.schemas.js';
+/** @wildo_source:part:start saas.models.conversation-threads facet:layer:shared facet:family:inbound facet:audience:app-developer */
+/** Whether a thread still takes messages. */
+export var ConversationThreadStatus;
+(function (ConversationThreadStatus) {
+    ConversationThreadStatus["OPEN"] = "open";
+    /**
+     * The exchange is over. Closing revokes every reply token of the thread, and starts the thread's
+     * retention clock: a closed thread is kept for the `RESOURCE_DATA` period from `closedAt`. Its messages
+     * keep their own, statutory, clock.
+     */
+    ConversationThreadStatus["CLOSED"] = "closed";
+})(ConversationThreadStatus || (ConversationThreadStatus = {}));
+/** Which way a message travelled. */
+export var ConversationMessageDirection;
+(function (ConversationMessageDirection) {
+    /** Received from the counterpart; its handler run is recorded on the inbound delivery. */
+    ConversationMessageDirection["INBOUND"] = "inbound";
+    /** Sent by the application, as a handler's reply. */
+    ConversationMessageDirection["OUTBOUND"] = "outbound";
+})(ConversationMessageDirection || (ConversationMessageDirection = {}));
+/** Where an OUTBOUND message stands with the sending provider. */
+export var ConversationOutboundStatus;
+(function (ConversationOutboundStatus) {
+    /** Written by `ctx.reply` and waiting for the reply worker. */
+    ConversationOutboundStatus["QUEUED"] = "queued";
+    /** The sending provider accepted the submission. Terminal: a retry of the same submission never sends again. */
+    ConversationOutboundStatus["ACCEPTED_BY_PROVIDER"] = "accepted_by_provider";
+    /** The provider refused it, or the reply could not be sent at all. Terminal; the reason is `failureCode`. */
+    ConversationOutboundStatus["FAILED"] = "failed";
+})(ConversationOutboundStatus || (ConversationOutboundStatus = {}));
+/** Why a reply token stopped binding replies. */
+export var ReplyTokenRevocationReason;
+(function (ReplyTokenRevocationReason) {
+    /** Its thread was closed. */
+    ReplyTokenRevocationReason["THREAD_CLOSED"] = "thread_closed";
+    /** The thread's counterpart changed, so a token issued to the previous one names nobody on the thread. */
+    ReplyTokenRevocationReason["COUNTERPART_CHANGED"] = "counterpart_changed";
+    /**
+     * It was issued to a member of the organization who is no longer one. Detected when the token is next
+     * USED, which is the one place every removal door converges: whether the member left, was removed,
+     * suspended or erased, the token no longer binds from that moment.
+     */
+    ReplyTokenRevocationReason["MEMBER_REMOVED"] = "member_removed";
+    /** A newer token was issued to the same recipient on the same thread; one live address per recipient. */
+    ReplyTokenRevocationReason["ROTATED"] = "rotated";
+})(ReplyTokenRevocationReason || (ReplyTokenRevocationReason = {}));
+/** Placeholder written over free text an erasure scrubs. */
+export const ERASED_CONVERSATION_TEXT = '[erased]';
+const address = () => addImpersonalizeWith(z.string().min(1).max(320).dataCategories(PersonalDataCategory.CONTACT_DETAILS), RedactionType.MASK, { maskValue: ERASED_CONVERSATION_TEXT });
+/** What a message's channel record is. The record's resource type is decided by the channel. */
+export const ConversationChannelRecordRefSchema = z.strictObject({
+    resourceType: z.string().min(1).describe('The resource holding what the message was on its channel — `inboundEmails` for email.'),
+    resourceId: z.string().min(1).describe('The id of that row.'),
+});
+/**
+ * One exchange with one counterpart on one channel.
+ *
+ * `threadKey` is the channel's correlation key — for email, the `Message-ID` of the message that opened
+ * the thread — unique per organization and channel: the same message delivered to two organizations
+ * opens a thread in each.
+ */
+export const ConversationThreadSchema = z.object({
+    _id: z.string().min(1).isPrimaryKey().isSummaryField(),
+    organizationId: z.string().min(1).isDBIndexed().isForeignKey().isSummaryField().excludeFromUpdate(),
+    channel: z.enum(InboundChannelKind).systemEnum('InboundChannelKind').isSummaryField().excludeFromUpdate()
+        .describe('The channel the thread runs on. Replies go out on this channel only.'),
+    threadKey: z.string().min(1).max(998).isDBIndexed().excludeFromUpdate()
+        .describe("The channel's correlation key: for email, the Message-ID of the message that opened the thread."),
+    /** The address the application is exchanging messages with. Changing it revokes the previous counterpart's tokens. */
+    counterpartAddress: address().isDBIndexed().isSummaryField()
+        .describe('The address the application is exchanging messages with on this thread.'),
+    subject: addImpersonalizeWith(z.string().max(998).default('').isSummaryField().dataCategories(PersonalDataCategory.USER_CONTENT), RedactionType.MASK, { maskValue: ERASED_CONVERSATION_TEXT }).describe('The subject the thread opened with.'),
+    /**
+     * The case the thread is about, set by the handler once it knows (a todo it created, a matter it
+     * found). A `WorkUnitRef`: the one name for a case across the backbone epic.
+     */
+    linkedResource: WorkUnitRefSchema.nullable().default(null)
+        .describe('The case this thread is about — the record a handler linked it to — or null while it is linked to none.'),
+    status: z.enum(ConversationThreadStatus).systemEnum('ConversationThreadStatus').default(ConversationThreadStatus.OPEN)
+        .isDBIndexed().isSummaryField().describe('Whether the thread still takes messages.'),
+    lastMessageAt: z.date().isDBIndexed().isSummaryField().describe('When the latest message, in either direction, was recorded.'),
+    /** Set when the thread closes — the retention clock's start. Server-owned: a caller setting it could order a deletion. */
+    closedAt: z.date().isDBIndexed().nullable().default(null).excludeFromCreate().excludeFromUpdate()
+        .describe('When the thread was closed; null while it is open.'),
+    createdAt: z.date().default(() => new Date()).isDBIndexed().excludeFromCreate().excludeFromUpdate(),
+    updatedAt: z.date().default(() => new Date()).excludeFromCreate().excludeFromUpdate(),
+}).businessKeySet(['organizationId', 'channel', 'threadKey']);
+/** The threading identity of an OUTBOUND message, as it went on the wire. */
+export const ConversationOutboundThreadingSchema = z.strictObject({
+    inReplyTo: z.string().max(998).optional().describe('The Message-ID this reply answers.'),
+    references: z.array(z.string().max(998)).max(100).default([]).describe('The thread\'s Message-IDs, oldest first, ending with the one answered.'),
+});
+/** One message of a thread, in either direction. */
+export const ConversationMessageSchema = z.object({
+    _id: z.string().min(1).isPrimaryKey().isSummaryField(),
+    organizationId: z.string().min(1).isDBIndexed().isForeignKey().isSummaryField().excludeFromUpdate(),
+    threadId: z.string().min(1).isDBIndexed().isForeignKey().isSummaryField().excludeFromUpdate()
+        .describe('The thread this message belongs to.'),
+    direction: z.enum(ConversationMessageDirection).systemEnum('ConversationMessageDirection').isSummaryField().excludeFromUpdate()
+        .describe('Whether the message was received from the counterpart or sent by the application.'),
+    /** The RFC 5322 Message-ID on the wire — what a later In-Reply-To or References names. */
+    rfcMessageId: z.string().min(1).max(998).isDBIndexed().excludeFromUpdate()
+        .describe('The Message-ID the message carried on the wire, angle brackets included.'),
+    fromAddress: address().isSummaryField().describe('Who sent the message.'),
+    // RESET, not MASK: the treatment belongs to the ARRAY, and a mask string is not an array. Erasure returns
+    // the list to its default — empty.
+    toAddresses: addImpersonalizeWith(z.array(z.string().min(1).max(320)).default([]).dataCategories(PersonalDataCategory.CONTACT_DETAILS), RedactionType.RESET).describe('Who the message was addressed to.'),
+    subject: addImpersonalizeWith(z.string().max(998).default('').dataCategories(PersonalDataCategory.USER_CONTENT), RedactionType.MASK, { maskValue: ERASED_CONVERSATION_TEXT }).describe('The message subject.'),
+    /**
+     * The first characters of the message text, for the thread view. The whole message stays in its channel
+     * record; this is a preview, never the record.
+     */
+    textPreview: addImpersonalizeWith(z.string().max(500).default('').dataCategories(PersonalDataCategory.USER_CONTENT), RedactionType.MASK, { maskValue: ERASED_CONVERSATION_TEXT }).describe('The first 500 characters of the message text.'),
+    occurredAt: z.date().isDBIndexed().isSummaryField().describe('When the message was received, or queued to send.'),
+    // INBOUND ─────────────────────────────────────────────────────────────────
+    /** INBOUND: the delivery that carried it. Its status is this message's handler status — there is no second one. */
+    inboundDeliveryId: z.string().isDBIndexed().nullable().default(null).excludeFromUpdate()
+        .describe('For a received message, the inbound delivery that carried it; its status is the handler run\'s.'),
+    /** INBOUND: what the message was on its channel (the `INBOUND_EMAILS` row for email). */
+    channelRecordRef: ConversationChannelRecordRefSchema.nullable().default(null).excludeFromUpdate()
+        .describe('For a received message, the channel record holding the whole message.'),
+    // OUTBOUND ────────────────────────────────────────────────────────────────
+    /**
+     * OUTBOUND: the one logical submission this row stands for — deterministic, derived from the row, and
+     * handed to the sending provider as its idempotency key, so a retried reply is accepted at most once.
+     */
+    // `.optional()`, never `.nullable().default(null)`: a sparse unique index skips a MISSING field, not a
+    // stored null, so every received message would collide on `null` under MongoDB.
+    submissionId: z.string().min(1).isUnique({ scope: 'global', sparse: true }).optional().excludeFromUpdate()
+        .describe('For a reply, the idempotency key of its one submission to the sending provider.'),
+    outboundStatus: z.enum(ConversationOutboundStatus).systemEnum('ConversationOutboundStatus').isDBIndexed().nullable().default(null)
+        .excludeFromCreate().excludeFromUpdate()
+        .describe('For a reply, where it stands with the sending provider; null for a received message.'),
+    /** OUTBOUND: the template the HANDLER chose, and the variables it rendered with. */
+    templateRef: z.string().max(200).nullable().default(null).excludeFromUpdate()
+        .describe('For a reply, the email template the handler chose.'),
+    // RESET to the default (`null`): a field carrying a `.default()` is not clearable, so REMOVE is refused.
+    templateVariables: addImpersonalizeWith(z.record(z.string(), z.unknown()).nullable().default(null).excludeFromUpdate().dataCategories(PersonalDataCategory.USER_CONTENT), RedactionType.RESET).describe('For a reply, the variables the template rendered with.'),
+    locale: z.string().max(35).nullable().default(null).excludeFromUpdate()
+        .describe('For a reply, the locale the template rendered in.'),
+    /**
+     * For a reply, while it is QUEUED: the Reply-To address its first send attempt composed. It carries the
+     * reply token IN PLAINTEXT (I12), so it is backend-only — no API returns it — and it is cleared when the
+     * reply settles (accepted or failed). It is kept that long only so a retried attempt sends the same address.
+     */
+    replyToAddress: z.string().max(320).isBackendOnly().nullable().default(null).excludeFromUpdate()
+        .describe('For a queued reply only, the Reply-To address its send composed; cleared when the reply settles.'),
+    threading: ConversationOutboundThreadingSchema.nullable().default(null).excludeFromUpdate()
+        .describe('For a reply, the In-Reply-To and References it carried.'),
+    /** OUTBOUND: the provider's receipt, once accepted. */
+    providerMessageIds: z.array(z.string()).default([]).excludeFromCreate().excludeFromUpdate()
+        .describe('For an accepted reply, the ids the sending provider returned.'),
+    /** OUTBOUND: a classified failure, never an error message (which could quote the content). */
+    failureCode: z.string().max(200).nullable().default(null).excludeFromCreate().excludeFromUpdate()
+        .describe('For a failed reply, a classified failure code.'),
+    settledAt: z.date().nullable().default(null).excludeFromCreate().excludeFromUpdate()
+        .describe('For a reply, when it was accepted or failed.'),
+    createdAt: z.date().default(() => new Date()).isDBIndexed().excludeFromCreate().excludeFromUpdate(),
+    updatedAt: z.date().default(() => new Date()).excludeFromCreate().excludeFromUpdate(),
+});
+/**
+ * One reply address issued to one recipient on one thread.
+ *
+ * The token itself is a bearer secret — whoever holds the address can post to the thread under that
+ * recipient's name, as with any reply-by-email system — so only its SHA-256 is stored, and the plaintext
+ * exists only in the address the reply carried. At least 128 bits from a CSPRNG.
+ */
+export const ConversationReplyTokenSchema = z.object({
+    _id: z.string().min(1).isPrimaryKey().isSummaryField(),
+    organizationId: z.string().min(1).isDBIndexed().isForeignKey().isSummaryField().excludeFromUpdate(),
+    threadId: z.string().min(1).isDBIndexed().isForeignKey().isSummaryField().excludeFromUpdate()
+        .describe('The thread the token binds replies to.'),
+    recipientAddress: address().isSummaryField().excludeFromUpdate()
+        .describe('The address the token was issued to; only a reply from this address binds to the thread.'),
+    /**
+     * When the recipient was a member of the organization at issue, that member's user id — re-checked when
+     * the token is used, so a removed member's token stops binding.
+     */
+    recipientMemberUserId: z.string().nullable().default(null).excludeFromUpdate()
+        .describe('The organization member the token was issued to, when the recipient was one.'),
+    /** SHA-256 (hex) of the token. Lookup is global by hash; the token's organization must be the routed one. */
+    tokenHash: z.string().length(64).isUnique({ scope: 'global', sparse: false }).isBackendOnly().excludeFromUpdate()
+        .describe('The SHA-256 of the token. The token itself is never stored.'),
+    issuedAt: z.date().isSummaryField().excludeFromUpdate().describe('When the token was issued.'),
+    revokedAt: z.date().isDBIndexed().nullable().default(null).excludeFromCreate().excludeFromUpdate()
+        .describe('When the token stopped binding replies; null while it is live.'),
+    revocationReason: z.enum(ReplyTokenRevocationReason).systemEnum('ReplyTokenRevocationReason').nullable().default(null)
+        .excludeFromCreate().excludeFromUpdate()
+        .describe('Why the token stopped binding replies.'),
+    createdAt: z.date().default(() => new Date()).isDBIndexed().excludeFromCreate().excludeFromUpdate(),
+    updatedAt: z.date().default(() => new Date()).excludeFromCreate().excludeFromUpdate(),
+});
+/** @wildo_source:part:end saas.models.conversation-threads */
+/** Thread verbs a person may take. */
+export var ConversationThreads_Operations;
+(function (ConversationThreads_Operations) {
+    /** Close the exchange: revokes every reply token of the thread and starts its retention clock. */
+    ConversationThreads_Operations["CLOSE"] = "close";
+})(ConversationThreads_Operations || (ConversationThreads_Operations = {}));
+//# sourceMappingURL=conversation-threads.shared.schemas.js.map

package/dist/esm/inbound/conversation-threads.shared.schemas.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"conversation-threads.shared.schemas.js","sourceRoot":"","sources":["../../../src/inbound/conversation-threads.shared.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAEhE,OAAO,EAAE,oBAAoB,EAAE,MAAM,6DAA6D,CAAC;AACnG,OAAO,EAAE,aAAa,EAAE,MAAM,gDAAgD,CAAC;AAC/E,OAAO,EAAE,iBAAiB,EAAE,MAAM,uCAAuC,CAAC;AAC1E,OAAO,EAAE,kBAAkB,EAAE,MAAM,mCAAmC,CAAC;AAEvE,qIAAqI;AAErI,6CAA6C;AAC7C,MAAM,CAAN,IAAY,wBAQX;AARD,WAAY,wBAAwB;IAClC,yCAAa,CAAA;IACb;;;;OAIG;IACH,6CAAiB,CAAA;AACnB,CAAC,EARW,wBAAwB,KAAxB,wBAAwB,QAQnC;AAED,qCAAqC;AACrC,MAAM,CAAN,IAAY,4BAKX;AALD,WAAY,4BAA4B;IACtC,0FAA0F;IAC1F,mDAAmB,CAAA;IACnB,qDAAqD;IACrD,qDAAqB,CAAA;AACvB,CAAC,EALW,4BAA4B,KAA5B,4BAA4B,QAKvC;AAED,kEAAkE;AAClE,MAAM,CAAN,IAAY,0BAOX;AAPD,WAAY,0BAA0B;IACpC,+DAA+D;IAC/D,+CAAiB,CAAA;IACjB,gHAAgH;IAChH,2EAA6C,CAAA;IAC7C,6GAA6G;IAC7G,+CAAiB,CAAA;AACnB,CAAC,EAPW,0BAA0B,KAA1B,0BAA0B,QAOrC;AAED,iDAAiD;AACjD,MAAM,CAAN,IAAY,0BAaX;AAbD,WAAY,0BAA0B;IACpC,6BAA6B;IAC7B,6DAA+B,CAAA;IAC/B,0GAA0G;IAC1G,yEAA2C,CAAA;IAC3C;;;;OAIG;IACH,+DAAiC,CAAA;IACjC,yGAAyG;IACzG,iDAAmB,CAAA;AACrB,CAAC,EAbW,0BAA0B,KAA1B,0BAA0B,QAarC;AAED,4DAA4D;AAC5D,MAAM,CAAC,MAAM,wBAAwB,GAAG,UAAU,CAAC;AAEnD,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,oBAAoB,CACxC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,cAAc,CAAC,oBAAoB,CAAC,eAAe,CAAC,EAC/E,aAAa,CAAC,IAAI,EAClB,EAAE,SAAS,EAAE,wBAAwB,EAAE,CACxC,CAAC;AAEF,gGAAgG;AAChG,MAAM,CAAC,MAAM,kCAAkC,GAAG,CAAC,CAAC,YAAY,CAAC;IAC/D,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,uFAAuF,CAAC;IACjI,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,qBAAqB,CAAC;CAC9D,CAAC,CAAC;AAIH;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/C,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC,cAAc,EAAE;IACtD,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,YAAY,EAAE,CAAC,cAAc,EAAE,CAAC,iBAAiB,EAAE;IACnG,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,UAAU,CAAC,oBAAoB,CAAC,CAAC,cAAc,EAAE,CAAC,iBAAiB,EAAE;SACtG,QAAQ,CAAC,sEAAsE,CAAC;IACnF,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC,iBAAiB,EAAE;SACpE,QAAQ,CAAC,iGAAiG,CAAC;IAC9G,sHAAsH;IACtH,kBAAkB,EAAE,OAAO,EAAE,CAAC,WAAW,EAAE,CAAC,cAAc,EAAE;SACzD,QAAQ,CAAC,yEAAyE,CAAC;IACtF,OAAO,EAAE,oBAAoB,CAC3B,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,cAAc,EAAE,CAAC,cAAc,CAAC,oBAAoB,CAAC,YAAY,CAAC,EAClG,aAAa,CAAC,IAAI,EAClB,EAAE,SAAS,EAAE,wBAAwB,EAAE,CACxC,CAAC,QAAQ,CAAC,qCAAqC,CAAC;IACjD;;;OAGG;IACH,cAAc,EAAE,iBAAiB,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;SACvD,QAAQ,CAAC,yGAAyG,CAAC;IACtH,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC,UAAU,CAAC,0BAA0B,CAAC,CAAC,OAAO,CAAC,wBAAwB,CAAC,IAAI,CAAC;SACnH,WAAW,EAAE,CAAC,cAAc,EAAE,CAAC,QAAQ,CAAC,0CAA0C,CAAC;IACtF,aAAa,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,cAAc,EAAE,CAAC,QAAQ,CAAC,6DAA6D,CAAC;IAC9H,0HAA0H;IAC1H,QAAQ,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,iBAAiB,EAAE,CAAC,iBAAiB,EAAE;SAC9F,QAAQ,CAAC,oDAAoD,CAAC;IACjE,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,iBAAiB,EAAE,CAAC,iBAAiB,EAAE;IACnG,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,iBAAiB,EAAE,CAAC,iBAAiB,EAAE;CACtF,CAAC,CAAC,cAAc,CAAC,CAAC,gBAAgB,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC,CAAC;AAI9D,6EAA6E;AAC7E,MAAM,CAAC,MAAM,mCAAmC,GAAG,CAAC,CAAC,YAAY,CAAC;IAChE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,oCAAoC,CAAC;IACxF,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,wEAAwE,CAAC;CACjJ,CAAC,CAAC;AAEH,oDAAoD;AACpD,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC,cAAc,EAAE;IACtD,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,YAAY,EAAE,CAAC,cAAc,EAAE,CAAC,iBAAiB,EAAE;IACnG,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,YAAY,EAAE,CAAC,cAAc,EAAE,CAAC,iBAAiB,EAAE;SAC1F,QAAQ,CAAC,qCAAqC,CAAC;IAClD,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC,UAAU,CAAC,8BAA8B,CAAC,CAAC,cAAc,EAAE,CAAC,iBAAiB,EAAE;SAC5H,QAAQ,CAAC,mFAAmF,CAAC;IAChG,0FAA0F;IAC1F,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC,iBAAiB,EAAE;SACvE,QAAQ,CAAC,0EAA0E,CAAC;IACvF,WAAW,EAAE,OAAO,EAAE,CAAC,cAAc,EAAE,CAAC,QAAQ,CAAC,uBAAuB,CAAC;IACzE,0GAA0G;IAC1G,mCAAmC;IACnC,WAAW,EAAE,oBAAoB,CAC/B,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,cAAc,CAAC,oBAAoB,CAAC,eAAe,CAAC,EACpG,aAAa,CAAC,KAAK,CACpB,CAAC,QAAQ,CAAC,mCAAmC,CAAC;IAC/C,OAAO,EAAE,oBAAoB,CAC3B,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,cAAc,CAAC,oBAAoB,CAAC,YAAY,CAAC,EACjF,aAAa,CAAC,IAAI,EAClB,EAAE,SAAS,EAAE,wBAAwB,EAAE,CACxC,CAAC,QAAQ,CAAC,sBAAsB,CAAC;IAClC;;;OAGG;IACH,WAAW,EAAE,oBAAoB,CAC/B,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,cAAc,CAAC,oBAAoB,CAAC,YAAY,CAAC,EACjF,aAAa,CAAC,IAAI,EAClB,EAAE,SAAS,EAAE,wBAAwB,EAAE,CACxC,CAAC,QAAQ,CAAC,+CAA+C,CAAC;IAC3D,UAAU,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,cAAc,EAAE,CAAC,QAAQ,CAAC,mDAAmD,CAAC;IAEjH,4EAA4E;IAC5E,mHAAmH;IACnH,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,iBAAiB,EAAE;SACrF,QAAQ,CAAC,iGAAiG,CAAC;IAC9G,yFAAyF;IACzF,gBAAgB,EAAE,kCAAkC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,iBAAiB,EAAE;SAC9F,QAAQ,CAAC,uEAAuE,CAAC;IAEpF,4EAA4E;IAC5E;;;OAGG;IACH,uGAAuG;IACvG,gFAAgF;IAChF,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,iBAAiB,EAAE;SACvG,QAAQ,CAAC,iFAAiF,CAAC;IAC9F,cAAc,EAAE,CAAC,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC,UAAU,CAAC,4BAA4B,CAAC,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;SAC/H,iBAAiB,EAAE,CAAC,iBAAiB,EAAE;SACvC,QAAQ,CAAC,sFAAsF,CAAC;IACnG,oFAAoF;IACpF,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,iBAAiB,EAAE;SAC1E,QAAQ,CAAC,oDAAoD,CAAC;IACjE,yGAAyG;IACzG,iBAAiB,EAAE,oBAAoB,CACrC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,iBAAiB,EAAE,CAAC,cAAc,CAAC,oBAAoB,CAAC,YAAY,CAAC,EAChI,aAAa,CAAC,KAAK,CACpB,CAAC,QAAQ,CAAC,wDAAwD,CAAC;IACpE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,iBAAiB,EAAE;SACpE,QAAQ,CAAC,mDAAmD,CAAC;IAChE;;;;OAIG;IACH,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,aAAa,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,iBAAiB,EAAE;SAC7F,QAAQ,CAAC,kGAAkG,CAAC;IAC/G,SAAS,EAAE,mCAAmC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,iBAAiB,EAAE;SACxF,QAAQ,CAAC,yDAAyD,CAAC;IACtE,uDAAuD;IACvD,kBAAkB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,iBAAiB,EAAE,CAAC,iBAAiB,EAAE;SACxF,QAAQ,CAAC,+DAA+D,CAAC;IAC5E,8FAA8F;IAC9F,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,iBAAiB,EAAE,CAAC,iBAAiB,EAAE;SAC9F,QAAQ,CAAC,gDAAgD,CAAC;IAC7D,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,iBAAiB,EAAE,CAAC,iBAAiB,EAAE;SACjF,QAAQ,CAAC,8CAA8C,CAAC;IAE3D,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,iBAAiB,EAAE,CAAC,iBAAiB,EAAE;IACnG,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,iBAAiB,EAAE,CAAC,iBAAiB,EAAE;CACtF,CAAC,CAAC;AAIH;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAC,MAAM,CAAC;IACnD,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC,cAAc,EAAE;IACtD,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,YAAY,EAAE,CAAC,cAAc,EAAE,CAAC,iBAAiB,EAAE;IACnG,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,YAAY,EAAE,CAAC,cAAc,EAAE,CAAC,iBAAiB,EAAE;SAC1F,QAAQ,CAAC,wCAAwC,CAAC;IACrD,gBAAgB,EAAE,OAAO,EAAE,CAAC,cAAc,EAAE,CAAC,iBAAiB,EAAE;SAC7D,QAAQ,CAAC,0FAA0F,CAAC;IACvG;;;OAGG;IACH,qBAAqB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,iBAAiB,EAAE;SAC3E,QAAQ,CAAC,8EAA8E,CAAC;IAC3F,6GAA6G;IAC7G,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,aAAa,EAAE,CAAC,iBAAiB,EAAE;SAC9G,QAAQ,CAAC,6DAA6D,CAAC;IAC1E,QAAQ,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,cAAc,EAAE,CAAC,iBAAiB,EAAE,CAAC,QAAQ,CAAC,4BAA4B,CAAC;IAC9F,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,iBAAiB,EAAE,CAAC,iBAAiB,EAAE;SAC/F,QAAQ,CAAC,gEAAgE,CAAC;IAC7E,gBAAgB,EAAE,CAAC,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC,UAAU,CAAC,4BAA4B,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;SACnH,iBAAiB,EAAE,CAAC,iBAAiB,EAAE;SACvC,QAAQ,CAAC,wCAAwC,CAAC;IACrD,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,iBAAiB,EAAE,CAAC,iBAAiB,EAAE;IACnG,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,iBAAiB,EAAE,CAAC,iBAAiB,EAAE;CACtF,CAAC,CAAC;AAIH,8DAA8D;AAE9D,sCAAsC;AACtC,MAAM,CAAN,IAAY,8BAGX;AAHD,WAAY,8BAA8B;IACxC,kGAAkG;IAClG,iDAAe,CAAA;AACjB,CAAC,EAHW,8BAA8B,KAA9B,8BAA8B,QAGzC","sourcesContent":["/**\n * Conversation threads — the shared thread model every inbound channel correlates into (#1630).\n *\n * Three ORGANIZATIONS-scoped resources:\n *\n * | resource | one row per | what it is for |\n * |---|---|---|\n * | `conversationThreads` | exchange with one counterpart on one channel | correlation, the link to the case, closure |\n * | `conversationMessages` | message, INBOUND or OUTBOUND | the thread's history; an OUTBOUND row is also the reply's delivery ledger |\n * | `conversationReplyTokens` | reply address issued to one recipient on one thread | binding a reply to its thread, stored as a hash |\n *\n * ## Why one thread model and per-channel records\n *\n * Rejected: one table with a JSON union column per channel, which loses per-channel indexes and erasure\n * matching. Rejected equally: channel-specific thread models only, which makes every handler re-implement\n * correlation. So correlation is shared here, and what a message WAS on its channel (bodies, headers,\n * attachments, raw MIME) stays in that channel's record — `INBOUND_EMAILS` for email (#1600) — with its\n * own indexes, retention and erasure. A message points at it through `channelRecordRef`.\n *\n * ## One state, one row\n *\n * An INBOUND message has no status of its own: whether its handler ran is the inbound delivery's status.\n * An OUTBOUND message's `outboundStatus` is the only record of whether its reply was accepted, because no\n * other row describes that submission.\n */\nimport { z } from 'zod';\nimport { addImpersonalizeWith } from '@wildo-ai/zod-decorators';\n\nimport { PersonalDataCategory } from '../compliance/privacy/personal-data-category.shared.schemas';\nimport { RedactionType } from '../compliance/privacy/redaction.shared.schemas';\nimport { WorkUnitRefSchema } from '../resources/work-unit.shared.schemas';\nimport { InboundChannelKind } from './inbound-channels.shared.schemas';\n\n/** @wildo_source:part:start saas.models.conversation-threads facet:layer:shared facet:family:inbound facet:audience:app-developer */\n\n/** Whether a thread still takes messages. */\nexport enum ConversationThreadStatus {\n  OPEN = 'open',\n  /**\n   * The exchange is over. Closing revokes every reply token of the thread, and starts the thread's\n   * retention clock: a closed thread is kept for the `RESOURCE_DATA` period from `closedAt`. Its messages\n   * keep their own, statutory, clock.\n   */\n  CLOSED = 'closed',\n}\n\n/** Which way a message travelled. */\nexport enum ConversationMessageDirection {\n  /** Received from the counterpart; its handler run is recorded on the inbound delivery. */\n  INBOUND = 'inbound',\n  /** Sent by the application, as a handler's reply. */\n  OUTBOUND = 'outbound',\n}\n\n/** Where an OUTBOUND message stands with the sending provider. */\nexport enum ConversationOutboundStatus {\n  /** Written by `ctx.reply` and waiting for the reply worker. */\n  QUEUED = 'queued',\n  /** The sending provider accepted the submission. Terminal: a retry of the same submission never sends again. */\n  ACCEPTED_BY_PROVIDER = 'accepted_by_provider',\n  /** The provider refused it, or the reply could not be sent at all. Terminal; the reason is `failureCode`. */\n  FAILED = 'failed',\n}\n\n/** Why a reply token stopped binding replies. */\nexport enum ReplyTokenRevocationReason {\n  /** Its thread was closed. */\n  THREAD_CLOSED = 'thread_closed',\n  /** The thread's counterpart changed, so a token issued to the previous one names nobody on the thread. */\n  COUNTERPART_CHANGED = 'counterpart_changed',\n  /**\n   * It was issued to a member of the organization who is no longer one. Detected when the token is next\n   * USED, which is the one place every removal door converges: whether the member left, was removed,\n   * suspended or erased, the token no longer binds from that moment.\n   */\n  MEMBER_REMOVED = 'member_removed',\n  /** A newer token was issued to the same recipient on the same thread; one live address per recipient. */\n  ROTATED = 'rotated',\n}\n\n/** Placeholder written over free text an erasure scrubs. */\nexport const ERASED_CONVERSATION_TEXT = '[erased]';\n\nconst address = () => addImpersonalizeWith(\n  z.string().min(1).max(320).dataCategories(PersonalDataCategory.CONTACT_DETAILS),\n  RedactionType.MASK,\n  { maskValue: ERASED_CONVERSATION_TEXT },\n);\n\n/** What a message's channel record is. The record's resource type is decided by the channel. */\nexport const ConversationChannelRecordRefSchema = z.strictObject({\n  resourceType: z.string().min(1).describe('The resource holding what the message was on its channel — `inboundEmails` for email.'),\n  resourceId: z.string().min(1).describe('The id of that row.'),\n});\n\nexport type ConversationChannelRecordRef = z.infer<typeof ConversationChannelRecordRefSchema>;\n\n/**\n * One exchange with one counterpart on one channel.\n *\n * `threadKey` is the channel's correlation key — for email, the `Message-ID` of the message that opened\n * the thread — unique per organization and channel: the same message delivered to two organizations\n * opens a thread in each.\n */\nexport const ConversationThreadSchema = z.object({\n  _id: z.string().min(1).isPrimaryKey().isSummaryField(),\n  organizationId: z.string().min(1).isDBIndexed().isForeignKey().isSummaryField().excludeFromUpdate(),\n  channel: z.enum(InboundChannelKind).systemEnum('InboundChannelKind').isSummaryField().excludeFromUpdate()\n    .describe('The channel the thread runs on. Replies go out on this channel only.'),\n  threadKey: z.string().min(1).max(998).isDBIndexed().excludeFromUpdate()\n    .describe(\"The channel's correlation key: for email, the Message-ID of the message that opened the thread.\"),\n  /** The address the application is exchanging messages with. Changing it revokes the previous counterpart's tokens. */\n  counterpartAddress: address().isDBIndexed().isSummaryField()\n    .describe('The address the application is exchanging messages with on this thread.'),\n  subject: addImpersonalizeWith(\n    z.string().max(998).default('').isSummaryField().dataCategories(PersonalDataCategory.USER_CONTENT),\n    RedactionType.MASK,\n    { maskValue: ERASED_CONVERSATION_TEXT },\n  ).describe('The subject the thread opened with.'),\n  /**\n   * The case the thread is about, set by the handler once it knows (a todo it created, a matter it\n   * found). A `WorkUnitRef`: the one name for a case across the backbone epic.\n   */\n  linkedResource: WorkUnitRefSchema.nullable().default(null)\n    .describe('The case this thread is about — the record a handler linked it to — or null while it is linked to none.'),\n  status: z.enum(ConversationThreadStatus).systemEnum('ConversationThreadStatus').default(ConversationThreadStatus.OPEN)\n    .isDBIndexed().isSummaryField().describe('Whether the thread still takes messages.'),\n  lastMessageAt: z.date().isDBIndexed().isSummaryField().describe('When the latest message, in either direction, was recorded.'),\n  /** Set when the thread closes — the retention clock's start. Server-owned: a caller setting it could order a deletion. */\n  closedAt: z.date().isDBIndexed().nullable().default(null).excludeFromCreate().excludeFromUpdate()\n    .describe('When the thread was closed; null while it is open.'),\n  createdAt: z.date().default(() => new Date()).isDBIndexed().excludeFromCreate().excludeFromUpdate(),\n  updatedAt: z.date().default(() => new Date()).excludeFromCreate().excludeFromUpdate(),\n}).businessKeySet(['organizationId', 'channel', 'threadKey']);\n\nexport type ConversationThread = z.infer<typeof ConversationThreadSchema>;\n\n/** The threading identity of an OUTBOUND message, as it went on the wire. */\nexport const ConversationOutboundThreadingSchema = z.strictObject({\n  inReplyTo: z.string().max(998).optional().describe('The Message-ID this reply answers.'),\n  references: z.array(z.string().max(998)).max(100).default([]).describe('The thread\\'s Message-IDs, oldest first, ending with the one answered.'),\n});\n\n/** One message of a thread, in either direction. */\nexport const ConversationMessageSchema = z.object({\n  _id: z.string().min(1).isPrimaryKey().isSummaryField(),\n  organizationId: z.string().min(1).isDBIndexed().isForeignKey().isSummaryField().excludeFromUpdate(),\n  threadId: z.string().min(1).isDBIndexed().isForeignKey().isSummaryField().excludeFromUpdate()\n    .describe('The thread this message belongs to.'),\n  direction: z.enum(ConversationMessageDirection).systemEnum('ConversationMessageDirection').isSummaryField().excludeFromUpdate()\n    .describe('Whether the message was received from the counterpart or sent by the application.'),\n  /** The RFC 5322 Message-ID on the wire — what a later In-Reply-To or References names. */\n  rfcMessageId: z.string().min(1).max(998).isDBIndexed().excludeFromUpdate()\n    .describe('The Message-ID the message carried on the wire, angle brackets included.'),\n  fromAddress: address().isSummaryField().describe('Who sent the message.'),\n  // RESET, not MASK: the treatment belongs to the ARRAY, and a mask string is not an array. Erasure returns\n  // the list to its default — empty.\n  toAddresses: addImpersonalizeWith(\n    z.array(z.string().min(1).max(320)).default([]).dataCategories(PersonalDataCategory.CONTACT_DETAILS),\n    RedactionType.RESET,\n  ).describe('Who the message was addressed to.'),\n  subject: addImpersonalizeWith(\n    z.string().max(998).default('').dataCategories(PersonalDataCategory.USER_CONTENT),\n    RedactionType.MASK,\n    { maskValue: ERASED_CONVERSATION_TEXT },\n  ).describe('The message subject.'),\n  /**\n   * The first characters of the message text, for the thread view. The whole message stays in its channel\n   * record; this is a preview, never the record.\n   */\n  textPreview: addImpersonalizeWith(\n    z.string().max(500).default('').dataCategories(PersonalDataCategory.USER_CONTENT),\n    RedactionType.MASK,\n    { maskValue: ERASED_CONVERSATION_TEXT },\n  ).describe('The first 500 characters of the message text.'),\n  occurredAt: z.date().isDBIndexed().isSummaryField().describe('When the message was received, or queued to send.'),\n\n  // INBOUND ─────────────────────────────────────────────────────────────────\n  /** INBOUND: the delivery that carried it. Its status is this message's handler status — there is no second one. */\n  inboundDeliveryId: z.string().isDBIndexed().nullable().default(null).excludeFromUpdate()\n    .describe('For a received message, the inbound delivery that carried it; its status is the handler run\\'s.'),\n  /** INBOUND: what the message was on its channel (the `INBOUND_EMAILS` row for email). */\n  channelRecordRef: ConversationChannelRecordRefSchema.nullable().default(null).excludeFromUpdate()\n    .describe('For a received message, the channel record holding the whole message.'),\n\n  // OUTBOUND ────────────────────────────────────────────────────────────────\n  /**\n   * OUTBOUND: the one logical submission this row stands for — deterministic, derived from the row, and\n   * handed to the sending provider as its idempotency key, so a retried reply is accepted at most once.\n   */\n  // `.optional()`, never `.nullable().default(null)`: a sparse unique index skips a MISSING field, not a\n  // stored null, so every received message would collide on `null` under MongoDB.\n  submissionId: z.string().min(1).isUnique({ scope: 'global', sparse: true }).optional().excludeFromUpdate()\n    .describe('For a reply, the idempotency key of its one submission to the sending provider.'),\n  outboundStatus: z.enum(ConversationOutboundStatus).systemEnum('ConversationOutboundStatus').isDBIndexed().nullable().default(null)\n    .excludeFromCreate().excludeFromUpdate()\n    .describe('For a reply, where it stands with the sending provider; null for a received message.'),\n  /** OUTBOUND: the template the HANDLER chose, and the variables it rendered with. */\n  templateRef: z.string().max(200).nullable().default(null).excludeFromUpdate()\n    .describe('For a reply, the email template the handler chose.'),\n  // RESET to the default (`null`): a field carrying a `.default()` is not clearable, so REMOVE is refused.\n  templateVariables: addImpersonalizeWith(\n    z.record(z.string(), z.unknown()).nullable().default(null).excludeFromUpdate().dataCategories(PersonalDataCategory.USER_CONTENT),\n    RedactionType.RESET,\n  ).describe('For a reply, the variables the template rendered with.'),\n  locale: z.string().max(35).nullable().default(null).excludeFromUpdate()\n    .describe('For a reply, the locale the template rendered in.'),\n  /**\n   * For a reply, while it is QUEUED: the Reply-To address its first send attempt composed. It carries the\n   * reply token IN PLAINTEXT (I12), so it is backend-only — no API returns it — and it is cleared when the\n   * reply settles (accepted or failed). It is kept that long only so a retried attempt sends the same address.\n   */\n  replyToAddress: z.string().max(320).isBackendOnly().nullable().default(null).excludeFromUpdate()\n    .describe('For a queued reply only, the Reply-To address its send composed; cleared when the reply settles.'),\n  threading: ConversationOutboundThreadingSchema.nullable().default(null).excludeFromUpdate()\n    .describe('For a reply, the In-Reply-To and References it carried.'),\n  /** OUTBOUND: the provider's receipt, once accepted. */\n  providerMessageIds: z.array(z.string()).default([]).excludeFromCreate().excludeFromUpdate()\n    .describe('For an accepted reply, the ids the sending provider returned.'),\n  /** OUTBOUND: a classified failure, never an error message (which could quote the content). */\n  failureCode: z.string().max(200).nullable().default(null).excludeFromCreate().excludeFromUpdate()\n    .describe('For a failed reply, a classified failure code.'),\n  settledAt: z.date().nullable().default(null).excludeFromCreate().excludeFromUpdate()\n    .describe('For a reply, when it was accepted or failed.'),\n\n  createdAt: z.date().default(() => new Date()).isDBIndexed().excludeFromCreate().excludeFromUpdate(),\n  updatedAt: z.date().default(() => new Date()).excludeFromCreate().excludeFromUpdate(),\n});\n\nexport type ConversationMessage = z.infer<typeof ConversationMessageSchema>;\n\n/**\n * One reply address issued to one recipient on one thread.\n *\n * The token itself is a bearer secret — whoever holds the address can post to the thread under that\n * recipient's name, as with any reply-by-email system — so only its SHA-256 is stored, and the plaintext\n * exists only in the address the reply carried. At least 128 bits from a CSPRNG.\n */\nexport const ConversationReplyTokenSchema = z.object({\n  _id: z.string().min(1).isPrimaryKey().isSummaryField(),\n  organizationId: z.string().min(1).isDBIndexed().isForeignKey().isSummaryField().excludeFromUpdate(),\n  threadId: z.string().min(1).isDBIndexed().isForeignKey().isSummaryField().excludeFromUpdate()\n    .describe('The thread the token binds replies to.'),\n  recipientAddress: address().isSummaryField().excludeFromUpdate()\n    .describe('The address the token was issued to; only a reply from this address binds to the thread.'),\n  /**\n   * When the recipient was a member of the organization at issue, that member's user id — re-checked when\n   * the token is used, so a removed member's token stops binding.\n   */\n  recipientMemberUserId: z.string().nullable().default(null).excludeFromUpdate()\n    .describe('The organization member the token was issued to, when the recipient was one.'),\n  /** SHA-256 (hex) of the token. Lookup is global by hash; the token's organization must be the routed one. */\n  tokenHash: z.string().length(64).isUnique({ scope: 'global', sparse: false }).isBackendOnly().excludeFromUpdate()\n    .describe('The SHA-256 of the token. The token itself is never stored.'),\n  issuedAt: z.date().isSummaryField().excludeFromUpdate().describe('When the token was issued.'),\n  revokedAt: z.date().isDBIndexed().nullable().default(null).excludeFromCreate().excludeFromUpdate()\n    .describe('When the token stopped binding replies; null while it is live.'),\n  revocationReason: z.enum(ReplyTokenRevocationReason).systemEnum('ReplyTokenRevocationReason').nullable().default(null)\n    .excludeFromCreate().excludeFromUpdate()\n    .describe('Why the token stopped binding replies.'),\n  createdAt: z.date().default(() => new Date()).isDBIndexed().excludeFromCreate().excludeFromUpdate(),\n  updatedAt: z.date().default(() => new Date()).excludeFromCreate().excludeFromUpdate(),\n});\n\nexport type ConversationReplyToken = z.infer<typeof ConversationReplyTokenSchema>;\n\n/** @wildo_source:part:end saas.models.conversation-threads */\n\n/** Thread verbs a person may take. */\nexport enum ConversationThreads_Operations {\n  /** Close the exchange: revokes every reply token of the thread and starts its retention clock. */\n  CLOSE = 'close',\n}\n"]}