command_tower 0.16.0 → 0.18.0

data/lib/command_tower/configuration/registry/inbox_presentations/presentation_definition.rb

@@ -0,0 +1,71 @@
+# frozen_string_literal: true
+
+require "class_composer"
+
+module CommandTower
+  module Configuration
+    module Registry
+      module InboxPresentations
+        class PresentationDefinition
+          include ClassComposer::Generator
+
+          add_composer :composer_class,
+            desc: "String class name of the registered presentation composer " \
+                  "(`.call(communication:, recipient_id:) -> Hash`), resolved via `.constantize` " \
+                  "at InboxDocumentRenderer render time — never at registration time",
+            allowed: String,
+            default: ""
+
+          # Explicit output projection (Rich Messaging corrective slice —
+          # ServiceResult/context leak fix). `InboxDocumentRenderer#presentation_block`
+          # slices the composer's raw result down to exactly these keys before
+          # it ever reaches `content.blocks[].data` — every other key (declared
+          # `ApplicationService` inputs, incidental intermediate context state,
+          # or anything else a composer happens to set) is dropped
+          # unconditionally, regardless of whether the composer is an
+          # `ApplicationService` or a plain Hash-returning class. This is a
+          # declared allow-list owned by the registration, not an inference
+          # from `ServiceResult`/`ApplicationService` argument metadata.
+          add_composer :output_keys,
+            desc: "Array of Symbol keys that are the ONLY keys copied from the composer's " \
+                  "result onto the Inbox wire (`content.blocks[].data`) — every other " \
+                  "context/result key (composer inputs, intermediate state, anything else) " \
+                  "is dropped at render time, regardless of composer shape",
+            allowed: Array,
+            default: []
+
+          attr_accessor :owner, :id
+
+          def validate_definition!(key:)
+            self.id = key.to_s
+            self.owner = owner&.to_sym || :host
+            self.composer_class = require_present_string!(composer_class, field: "composer_class", key:)
+            self.output_keys = require_present_output_keys!(output_keys, key:)
+          end
+
+          private
+
+          def require_present_string!(value, field:, key:)
+            text = value.to_s.strip
+            if text.empty?
+              raise CommandTower::InboxPresentations::InvalidPresentationDefinitionError,
+                "inbox presentation #{key} is missing #{field}"
+            end
+
+            text
+          end
+
+          def require_present_output_keys!(value, key:)
+            keys = Array(value).map { |entry| entry.to_s.strip }
+            if keys.empty? || keys.any?(&:empty?)
+              raise CommandTower::InboxPresentations::InvalidPresentationDefinitionError,
+                "inbox presentation #{key} is missing output_keys"
+            end
+
+            keys.map(&:to_sym)
+          end
+        end
+      end
+    end
+  end
+end

data/lib/command_tower/current.rb

@@ -15,5 +15,6 @@ module CommandTower
     attribute :impersonation_activity_recorded, default: false
     attribute :remote_ip
     attribute :user_agent
+    attribute :client_compatibility_recommendation
   end
 end

data/lib/command_tower/engine.rb

@@ -22,12 +22,15 @@ module CommandTower
         # ensure defaults are instantiated and all variables are assigned
         CommandTower.config.class_composer_assign_defaults!(children: true)
         CommandTower::CredentialResolution::SmtpActionMailerBridge.apply!
+        CommandTower.config.registry.client_compatibility.apply_env_overlay!
 
         unless Rails.env.test?
           CommandTower.config.impersonation.validate!
           CommandTower.config.registry.audit.finalize!
           CommandTower.config.registry.admin_workspace.finalize!
           CommandTower.config.registry.principal_capabilities.finalize!
+          CommandTower.config.registry.client_compatibility.finalize!
+          CommandTower.config.registry.inbox_presentations.finalize!
           CommandTower.config.admin_scope.finalize!
           # Now that we can confirm all variables are defined, freeze all objects an their children
           CommandTower.config.class_composer_freeze_objects!(behavior: :raise, children: true)
@@ -62,6 +65,7 @@ module CommandTower
         entities = CommandTower::Authorization::Entity.entities
         CommandTower.config.registry.admin_workspace.validate_required_entities!(entities)
         CommandTower.config.registry.principal_capabilities.validate_required_entities!(entities)
+        CommandTower.config.registry.client_compatibility.validate!(entities)
         CommandTower.config.admin_scope.validate_scoped_tools!
       end
       CommandTower::Logging::Subscriber.attach!

data/lib/command_tower/inbox_presentations.rb

@@ -0,0 +1,19 @@
+# frozen_string_literal: true
+
+module CommandTower
+  # Rich Messaging Slice 2.5 — registry of registered Inbox presentation
+  # capabilities (semantic keys such as `pickem.make_picks`) mapped to a
+  # trusted, host- or CommandTower-owned composer class. See
+  # artifacts/visual-improvements/rich-messaging/authority/RICH_MESSAGING_PRESENTATION_AUTHORITY.md
+  # Part I and
+  # artifacts/visual-improvements/rich-messaging/authority/RICH_MESSAGING_RUBY_INBOX_DEFINITION_DISCOVERY.md §9.
+  module InboxPresentations
+    class Error < CommandTower::Error; end
+
+    class UnregisteredCapabilityError < Error; end
+    class DuplicateCapabilityError < Error; end
+    class InvalidKeyError < Error; end
+    class InvalidPresentationDefinitionError < Error; end
+    class FrozenRegistryError < Error; end
+  end
+end

data/lib/command_tower/install/baseline.rb

@@ -16,6 +16,8 @@ module CommandTower
         20260817000003_create_command_tower_impersonation_sessions.rb
         20260826140000_add_deleted_at_to_users.rb
         20260906180000_create_user_experience_states.rb
+        20261010000001_add_inbox_presentation_snapshot_to_messaging_communications.rb
+        20261010000002_add_conversation_identity_to_messaging_communications.rb
       ].freeze
 
       module_function

data/lib/command_tower/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module CommandTower
-  VERSION = "0.16.0"
+  VERSION = "0.18.0"
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: command_tower
 version: !ruby/object:Gem::Version
-  version: 0.16.0
+  version: 0.18.0
 platform: ruby
 authors:
 - matt-taylor
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2026-09-07 00:00:00.000000000 Z
+date: 2026-10-11 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: phonelib
@@ -231,6 +231,7 @@ files:
 - app/controllers/concerns/command_tower/auth/invalid_credentials_deserializer_renderer.rb
 - app/controllers/concerns/command_tower/auth/password_recovery_session_boundary.rb
 - app/controllers/concerns/command_tower/auth/signup_session_boundary.rb
+- app/controllers/concerns/command_tower/execution/client_compatibility_boundary.rb
 - app/controllers/concerns/command_tower/execution/http_boundary.rb
 - app/deserializers/command_tower/deserializers/admin/messaging/create_announcement_deserializer.rb
 - app/deserializers/command_tower/deserializers/admin/scope_parameter.rb
@@ -309,6 +310,7 @@ files:
 - app/errors/command_tower/errors/auth/signup_session_rate_limit_error.rb
 - app/errors/command_tower/errors/auth/verification_code_invalid_error.rb
 - app/errors/command_tower/errors/auth/verification_send_failed_error.rb
+- app/errors/command_tower/errors/client_update_required_error.rb
 - app/errors/command_tower/errors/continuation_exhausted_error.rb
 - app/errors/command_tower/errors/forbidden_error.rb
 - app/errors/command_tower/errors/internal_error.rb
@@ -409,6 +411,7 @@ files:
 - app/services/command_tower/clients/transport/request.rb
 - app/services/command_tower/clients/transport/response.rb
 - app/services/command_tower/clients/url.rb
+- app/services/command_tower/email_theme/resolver.rb
 - app/services/command_tower/identity/phone/normalizer.rb
 - app/services/command_tower/identity/phone_verification/sms_configuration.rb
 - app/services/command_tower/identity/phone_verification/sms_transport.rb
@@ -524,6 +527,8 @@ files:
 - app/services/command_tower/messaging/handoff/recovery.rb
 - app/services/command_tower/messaging/inbox.rb
 - app/services/command_tower/messaging/inbox/bulk_result.rb
+- app/services/command_tower/messaging/inbox/conversation_result.rb
+- app/services/command_tower/messaging/inbox/entry_result.rb
 - app/services/command_tower/messaging/inbox/error.rb
 - app/services/command_tower/messaging/inbox/invalid_bulk_items_error.rb
 - app/services/command_tower/messaging/inbox/invariant_error.rb
@@ -592,11 +597,16 @@ files:
 - app/services/command_tower/messaging/recipient_readiness/recipient_result.rb
 - app/services/command_tower/messaging/recipient_readiness/unknown_channel_error.rb
 - app/services/command_tower/messaging/rendering/channel_renderer.rb
+- app/services/command_tower/messaging/rendering/inbox_document.rb
+- app/services/command_tower/messaging/rendering/inbox_document_renderer.rb
+- app/services/command_tower/messaging/rendering/inbox_presentation_resolver.rb
+- app/services/command_tower/messaging/rendering/inbox_presentation_snapshot.rb
 - app/services/command_tower/messaging/rendering/render_error.rb
 - app/services/command_tower/messaging/rendering/rendered_payload.rb
 - app/services/command_tower/messaging/rendering/rendered_push_payload.rb
 - app/services/command_tower/messaging/rendering/rendered_pushover_payload.rb
 - app/services/command_tower/messaging/rendering/rendered_sms_payload.rb
+- app/services/command_tower/messaging/rendering/template_resolver.rb
 - app/services/command_tower/secrets.rb
 - app/services/command_tower/secrets/cleanse.rb
 - app/services/command_tower/secrets/generate.rb
@@ -660,6 +670,7 @@ files:
 - app/services/command_tower/services/auth/signup_session/validate.rb
 - app/services/command_tower/services/auth/tombstone_user.rb
 - app/services/command_tower/services/auth/username_availability.rb
+- app/services/command_tower/services/client_compatibility/evaluate.rb
 - app/services/command_tower/services/impersonation/create.rb
 - app/services/command_tower/services/impersonation/end.rb
 - app/services/command_tower/services/impersonation/record_activity.rb
@@ -737,6 +748,8 @@ files:
 - app/workflows/command_tower/workflows/auth/signup_session/authenticate_workflow.rb
 - app/workflows/command_tower/workflows/auth/signup_session/create_workflow.rb
 - app/workflows/command_tower/workflows/auth/username_availability_workflow.rb
+- app/workflows/command_tower/workflows/client_compatibility/evaluate_workflow.rb
+- app/workflows/command_tower/workflows/client_compatibility/recommendation_meta.rb
 - app/workflows/command_tower/workflows/impersonation/error_mapping.rb
 - app/workflows/command_tower/workflows/impersonation/start_workflow.rb
 - app/workflows/command_tower/workflows/impersonation/stop_workflow.rb
@@ -785,6 +798,8 @@ files:
 - db/migrate/20260817000003_create_command_tower_impersonation_sessions.rb
 - db/migrate/20260826140000_add_deleted_at_to_users.rb
 - db/migrate/20260906180000_create_user_experience_states.rb
+- db/migrate/20261010000001_add_inbox_presentation_snapshot_to_messaging_communications.rb
+- db/migrate/20261010000002_add_conversation_identity_to_messaging_communications.rb
 - docs/admin_workspace.md
 - docs/api_reference.md
 - docs/architecture.md
@@ -792,6 +807,22 @@ files:
 - docs/authentication.md
 - docs/authentication_authorization_guide.md
 - docs/authorization.md
+- docs/bootstrap/00-ownership.md
+- docs/bootstrap/01-docker-make-compose.md
+- docs/bootstrap/02-create-the-rails-app.md
+- docs/bootstrap/03-pin-the-gem.md
+- docs/bootstrap/04-secrets-and-env.md
+- docs/bootstrap/05-install-migrate-doctor.md
+- docs/bootstrap/06-mount-and-health.md
+- docs/bootstrap/07-execution-bases.md
+- docs/bootstrap/08-initializer.md
+- docs/bootstrap/09-rbac.md
+- docs/bootstrap/10-roles-and-gates.md
+- docs/bootstrap/11-auth-client-path.md
+- docs/bootstrap/12-smoke-check.md
+- docs/bootstrap/13-optional.md
+- docs/bootstrap/14-sanity-checks.md
+- docs/bootstrap/README.md
 - docs/change_password_workflow.md
 - docs/controllers.md
 - docs/cookie_authentication_guide.md
@@ -816,6 +847,8 @@ files:
 - docs/upgrades/0.14.0.md
 - docs/upgrades/0.15.0.md
 - docs/upgrades/0.16.0.md
+- docs/upgrades/0.17.0.md
+- docs/upgrades/0.18.0.md
 - docs/upgrades/README.md
 - lib/command_tower.rb
 - lib/command_tower/admin_scope.rb
@@ -838,6 +871,8 @@ files:
 - lib/command_tower/authorization/effective_entity_grants.rb
 - lib/command_tower/authorization/entity.rb
 - lib/command_tower/authorization/role.rb
+- lib/command_tower/client_compatibility.rb
+- lib/command_tower/client_compatibility/version.rb
 - lib/command_tower/configuration/account_deletion/config.rb
 - lib/command_tower/configuration/admin/config.rb
 - lib/command_tower/configuration/admin_scope/config.rb
@@ -850,6 +885,7 @@ files:
 - lib/command_tower/configuration/credentials/smtp.rb
 - lib/command_tower/configuration/credentials/twilio.rb
 - lib/command_tower/configuration/email/config.rb
+- lib/command_tower/configuration/email_theme/config.rb
 - lib/command_tower/configuration/identity/config.rb
 - lib/command_tower/configuration/identity/phone_verification.rb
 - lib/command_tower/configuration/impersonation/config.rb
@@ -873,7 +909,15 @@ files:
 - lib/command_tower/configuration/registry/admin_workspace/tool_definition.rb
 - lib/command_tower/configuration/registry/audit/config.rb
 - lib/command_tower/configuration/registry/audit/event_definition.rb
+- lib/command_tower/configuration/registry/client_compatibility/binding_definition.rb
+- lib/command_tower/configuration/registry/client_compatibility/config.rb
+- lib/command_tower/configuration/registry/client_compatibility/contract_definition.rb
+- lib/command_tower/configuration/registry/client_compatibility/entity_requirement_definition.rb
+- lib/command_tower/configuration/registry/client_compatibility/minimum_overrides.rb
+- lib/command_tower/configuration/registry/client_compatibility/platform_definition.rb
 - lib/command_tower/configuration/registry/config.rb
+- lib/command_tower/configuration/registry/inbox_presentations/config.rb
+- lib/command_tower/configuration/registry/inbox_presentations/presentation_definition.rb
 - lib/command_tower/configuration/registry/principal_capabilities/capability_definition.rb
 - lib/command_tower/configuration/registry/principal_capabilities/config.rb
 - lib/command_tower/configuration/signup_session/config.rb
@@ -896,6 +940,7 @@ files:
 - lib/command_tower/impersonation/apply_overlay.rb
 - lib/command_tower/impersonation/clear_overlay_for_audit.rb
 - lib/command_tower/impersonation/establish_identity.rb
+- lib/command_tower/inbox_presentations.rb
 - lib/command_tower/install/baseline.rb
 - lib/command_tower/install/doctor.rb
 - lib/command_tower/intervention/severity.rb