Module Spec — messaging (schema messaging)

Entities & invariants

Table	Key invariants
message_templates	React Email; versioned; variables validated against attribute_definitions
campaigns	blast (segment one-shot) \| automation (standing trigger); category transactional\|marketing\|product
campaign_triggers	event \| date_property (timezone-aware: birthday, customer_since anniversary; per-contact tz else tenant tz) \| segment_entered \| segment_exited \| points_expiring_soon
sends	correlation_id + origin_event_id + channel_code; created only after resolveChannels passes ALL gates
send_status_history	partitioned; parametric statuses queued→sent→delivered→opened→clicked / bounced / complained / failed; fed by provider status adapters (Resend webhooks today)
suppressions	global per tenant; auto-write on hard bounce/complaint/unsubscribe; checked on EVERY send
sender_domains	per-tenant SPF/DKIM verification flow; default shared subdomain; custom = add-on (DEC-F4)
platform_channel_status / tenant_channel_settings / module_channel_settings / event_channel_routing	cascade levels 0–3

Blasts: batch endpoints only, marketing rail, per-tenant token bucket; a blast NEVER degrades transactional latency (ADR-015).
date_property triggers run on cron fan-out at tenant-local send window; duplicates impossible via (campaign, contact, date) idempotency key.
Unsubscribe link mandatory on marketing; preference center per channel×category; transactional no-opt-out.

⌘I