command_tower 0.3.1 → 0.10.0

data/app/workflows/command_tower/workflows/profile/show_workflow.rb

@@ -0,0 +1,27 @@
+# frozen_string_literal: true
+
+module CommandTower
+  module Workflows
+    module Profile
+      class ShowWorkflow < CommandTower::Workflows::ApplicationWorkflow
+        retry_strategy :none
+
+        def call(current_user:, auth_context: nil)
+          success(
+            payload: CommandTower::Serializers::Profile::ProfileSerializer.serialize(current_user),
+            http_status: :ok,
+            response_effects: expire_header_effects(auth_context)
+          )
+        end
+
+        private
+
+        def expire_header_effects(auth_context)
+          return if auth_context.nil?
+
+          { set_expire_header: auth_context.token_expires_at }
+        end
+      end
+    end
+  end
+end

data/app/workflows/command_tower/workflows/workflow_result.rb

@@ -0,0 +1,34 @@
+# frozen_string_literal: true
+
+module CommandTower
+  module Workflows
+    class WorkflowResult
+      attr_reader :payload, :errors, :http_status, :response_effects, :meta
+
+      def initialize(success:, payload:, errors:, http_status:, response_effects: nil, meta: {})
+        @success = success
+        @payload = payload
+        @errors = errors
+        @http_status = http_status
+        @response_effects = response_effects
+        @meta = meta
+      end
+
+      def success?
+        @success
+      end
+
+      def failure?
+        !success?
+      end
+
+      def self.success(payload:, http_status: :ok, response_effects: nil, meta: {})
+        new(success: true, payload:, errors: [], http_status:, response_effects:, meta:)
+      end
+
+      def self.failure(errors:, http_status:, response_effects: nil, meta: {})
+        new(success: false, payload: nil, errors:, http_status:, response_effects:, meta:)
+      end
+    end
+  end
+end

data/config/routes.rb

@@ -1,55 +1,103 @@
-Rails.application.routes.draw do
-  append_to_ass = "command_tower"
+# frozen_string_literal: true
 
-  constraints(->(_req) { CommandTower.config.username.realtime_username_check? }) do
-    scope "username" do
-      get "/available/:username", to: "command_tower/username#username_availability", as: :"#{append_to_ass}_username_availability_get"
-    end
+# Modern platform HTTP only — intended for host mount (e.g. DFM `/api`).
+CommandTower::Engine.routes.draw do
+  # Test-only auth harness for ApplicationController cookie/CSRF specs.
+  if Rails.env.test?
+    get "show", to: "protected_fixture#show"
+    post "modify", to: "protected_fixture#modify"
   end
 
-  scope "auth" do
+  namespace :auth do
+    post "logout", to: "logout#create"
+    get "session", to: "session#show"
+
     constraints(->(_req) { CommandTower.config.login.plain_text.enable? }) do
-      post "/login", to: "command_tower/auth/plain_text#login_post", as: :"#{append_to_ass}_auth_login_post"
-      post "/create", to: "command_tower/auth/plain_text#create_post", as: :"#{append_to_ass}_auth_create_post"
-
-      constraints(->(_req) { CommandTower.config.login.plain_text.email_verify? }) do
-        scope "email" do
-          post "/verify", to: "command_tower/auth/plain_text#email_verify_post", as: :"#{append_to_ass}_auth_email_verification"
-          post "/send", to: "command_tower/auth/plain_text#email_verify_resend_post", as: :"#{append_to_ass}_auth_email_verification_send"
-        end
+      scope path: "plain-text", module: "plain_text" do
+        post "login", to: "login#create"
       end
     end
-  end
 
-  scope "user" do
-    get "/", to: "command_tower/user#show", as: :"#{append_to_ass}_user_show_get"
-    post "/modify", to: "command_tower/user#modify", as: :"#{append_to_ass}_user_modify_post"
-  end
+    post "register", to: "register#create"
+    post "signup-session", to: "signup_session/create#create"
+    get "identity-policy", to: "identity_policy#show"
+
+    constraints(->(_req) { CommandTower.config.signup_session.email_availability? }) do
+      namespace :email do
+        get "availability", to: "availability#show"
+      end
+    end
+
+    # Parity with legacy SchemaHelper GET /username/available/:username gate.
+    constraints(->(_req) { CommandTower.config.username.realtime_username_check? }) do
+      namespace :username do
+        get "availability", to: "availability#show"
+      end
+    end
 
-  scope "inbox" do
-    scope "messages" do
-      get "/", to: "command_tower/inbox/message#metadata", as: :"#{append_to_ass}_inbox_metadata"
+    constraints(->(_req) { CommandTower.config.login.plain_text.email_verify? }) do
+      namespace :email_verification, path: "email-verification", module: "email_verification" do
+        post "send", to: "send#create"
+        post "verify", to: "verify#create"
+      end
+    end
 
-      get "/:id", to: "command_tower/inbox/message#message", as: :"#{append_to_ass}_inbox_message"
-      delete "/:id", to: "command_tower/inbox/message#delete", as: :"#{append_to_ass}_inbox_message_del"
+    post "password-recovery-session", to: "password_recovery_session/create#create"
 
-      post "/ack", to: "command_tower/inbox/message#ack", as: :"#{append_to_ass}_inbox_ack"
-      post "/delete", to: "command_tower/inbox/message#delete", as: :"#{append_to_ass}_inbox_delete"
+    constraints(->(_req) { CommandTower.config.login.plain_text.password_reset? }) do
+      namespace :password_reset, path: "password-reset", module: "password_reset" do
+        post "send", to: "send#create"
+        post "validate", to: "validate#create"
+        post "reset", to: "reset#create"
+      end
     end
+  end
 
-    scope "blast" do
-      get "/", to: "command_tower/inbox/message_blast#metadata", as: :"#{append_to_ass}_blast_metadata"
-      post "/", to: "command_tower/inbox/message_blast#create", as: :"#{append_to_ass}_blast_create"
+  get "me", to: "me#show"
+  get "profile", to: "profile#show"
+  namespace :me do
+    patch "name", to: "name#update"
+    patch "password", to: "password#update"
 
-      get "/:id", to: "command_tower/inbox/message_blast#blast", as: :"#{append_to_ass}_blast_blast"
-      patch "/:id", to: "command_tower/inbox/message_blast#modify", as: :"#{append_to_ass}_blast_modify"
-      delete "/:id", to: "command_tower/inbox/message_blast#delete", as: :"#{append_to_ass}_blast_delete"
+    resources :inbox, only: [:index, :show, :destroy], controller: "inbox" do
+      collection do
+        get :unread_count, path: "unread-count"
+        post "bulk/read", action: :bulk_read
+        post "bulk/unread", action: :bulk_unread
+        post "bulk/archive", action: :bulk_archive
+        post "bulk/restore", action: :bulk_restore
+        post "bulk/delete", action: :bulk_delete
+      end
+      member do
+        post :open
+        patch :archive
+      end
     end
+
+    resource :preferences, only: [:show], controller: "preferences"
+    patch "preferences/:notification_type_key", to: "preferences#update"
+
+    # Phone lifecycle always drawn (no SMS/Pushover route constraints).
+    # Product SMS readiness is workflow-gated as 503 sms_capability_unavailable.
+    patch "phone", to: "phone#update"
+    delete "phone", to: "phone#destroy"
+    post "phone/verification", to: "phone_verification/verifications#create"
+    post "phone/verification/verify", to: "phone_verification/verify#create"
+
+    # Pushover lifecycle always drawn (no route constraints).
+    # Product readiness is workflow-gated as 503 pushover_capability_unavailable.
+    # Explicit put + patch both → #update (frontend uses PUT for replace).
+    get "pushover", to: "pushover#show"
+    post "pushover", to: "pushover#create"
+    patch "pushover", to: "pushover#update"
+    put "pushover", to: "pushover#update"
+    delete "pushover", to: "pushover#destroy"
+    post "pushover/verification", to: "pushover/verifications#create"
   end
 
-  scope "admin" do
-    get "/", to: "command_tower/admin#show", as: :"#{append_to_ass}_admin_show_get"
-    post "/modify", to: "command_tower/admin#modify", as: :"#{append_to_ass}_admin_modify_post"
-    post "/modify/role", to: "command_tower/admin#modify_role", as: :"#{append_to_ass}_admin_modify_role_post"
+  namespace :admin do
+    namespace :messaging do
+      post "announcements", to: "announcements#create"
+    end
   end
 end

data/db/migrate/{20241117043720_create_command_tower_users.rb → 20260805000001_create_command_tower_users.rb}

@@ -1,3 +1,5 @@
+# frozen_string_literal: true
+
 class CreateCommandTowerUsers < ActiveRecord::Migration[7.2]
   def change
     create_table :users do |t|
@@ -14,9 +16,7 @@ class CreateCommandTowerUsers < ActiveRecord::Migration[7.2]
 
       t.string :roles, default: ""
 
-      ###
-      # Database token to verify JWT
-      # Token will allow JWT values to expire/reset all devices
+      # Database token to verify JWT — allows JWT values to expire/reset all devices
       t.string :verifier_token
       t.datetime :verifier_token_last_reset
 
@@ -27,16 +27,14 @@ class CreateCommandTowerUsers < ActiveRecord::Migration[7.2]
       t.string :password_digest, null: false, default: ""
       t.string :recovery_password_digest, null: false, default: ""
 
-      # OTP strategy
-      # t.string :otp_secret
-      # t.string :otp_temp_secret
-      # t.integer :otp_consumed_timestep
-      # t.boolean :otp_enabled, default: false
-      # t.text :otp_backup_codes
+      # Identity phone
+      t.string :phone_number
+      t.boolean :phone_number_validated, null: false, default: false
 
       t.timestamps
     end
 
     add_index :users, :username, unique: true
+    add_index :users, :phone_number, unique: true
   end
 end

data/db/migrate/{20241204065708_create_command_tower_user_secrets.rb → 20260805000002_create_command_tower_user_secrets.rb}

@@ -1,3 +1,5 @@
+# frozen_string_literal: true
+
 class CreateCommandTowerUserSecrets < ActiveRecord::Migration[7.2]
   def change
     create_table :user_secrets do |t|
@@ -11,6 +13,7 @@ class CreateCommandTowerUserSecrets < ActiveRecord::Migration[7.2]
 
       t.timestamps
     end
+
     add_index :user_secrets, :secret, unique: true
   end
 end

data/db/migrate/20260805000003_create_command_tower_messaging_core.rb

@@ -0,0 +1,90 @@
+# frozen_string_literal: true
+
+class CreateCommandTowerMessagingCore < ActiveRecord::Migration[7.2]
+  def change
+    create_table :messaging_communications do |t|
+      t.timestamps
+      t.references :user, null: false, foreign_key: true
+      t.string :notification_type_key, null: false
+      t.string :title, null: false
+      t.text :body, null: false
+      t.text :metadata
+      t.string :host_event_identity
+      t.string :accept_request_fingerprint
+      t.string :status
+      t.string :execution_handoff_status, null: false
+    end
+
+    add_index :messaging_communications,
+              %i[user_id notification_type_key host_event_identity],
+              unique: true,
+              name: "index_messaging_communications_on_idempotency_namespace"
+    add_index :messaging_communications,
+              %i[status execution_handoff_status updated_at],
+              name: "index_messaging_communications_on_handoff_recovery"
+
+    create_table :messaging_destination_plans do |t|
+      t.timestamps
+      t.references :communication,
+                   null: false,
+                   foreign_key: { to_table: :messaging_communications, on_delete: :cascade },
+                   index: { unique: true }
+      t.text :decision
+    end
+
+    create_table :messaging_inbox_items do |t|
+      t.timestamps
+      t.references :communication,
+                   null: false,
+                   foreign_key: { to_table: :messaging_communications, on_delete: :cascade },
+                   index: { unique: true }
+      t.string :status
+      t.datetime :viewed_at
+      t.datetime :archived_at
+      t.datetime :deleted_at
+    end
+
+    add_index :messaging_inbox_items,
+              %i[deleted_at archived_at viewed_at],
+              name: "index_messaging_inbox_items_on_lifecycle"
+
+    create_table :messaging_channel_deliveries do |t|
+      t.timestamps
+      t.references :communication,
+                   null: false,
+                   foreign_key: { to_table: :messaging_communications, on_delete: :cascade },
+                   index: true
+      t.string :channel_key, null: false
+      t.string :status
+      t.datetime :execution_claimed_at
+      t.integer :execution_attempt_count, null: false, default: 0
+    end
+
+    add_index :messaging_channel_deliveries,
+              %i[communication_id channel_key],
+              unique: true,
+              name: "index_messaging_channel_deliveries_on_comm_and_channel"
+    add_index :messaging_channel_deliveries,
+              %i[status execution_claimed_at updated_at],
+              name: "index_messaging_channel_deliveries_on_execution_recovery"
+
+    create_table :messaging_delivery_attempts do |t|
+      t.timestamps
+      t.references :channel_delivery,
+                   null: false,
+                   foreign_key: { to_table: :messaging_channel_deliveries, on_delete: :cascade },
+                   index: true
+      t.string :status, null: false
+      t.datetime :started_at, null: false
+      t.datetime :finished_at
+      t.string :error_class
+      t.string :error_code
+      t.string :provider_message_id
+      t.string :normalized_provider_status
+    end
+
+    add_index :messaging_delivery_attempts,
+              %i[channel_delivery_id status],
+              name: "index_messaging_delivery_attempts_on_delivery_and_status"
+  end
+end

data/db/migrate/20260805000004_create_messaging_notification_preferences.rb

@@ -0,0 +1,17 @@
+# frozen_string_literal: true
+
+class CreateMessagingNotificationPreferences < ActiveRecord::Migration[7.2]
+  def change
+    create_table :messaging_notification_preferences do |t|
+      t.timestamps
+      t.references :user, null: false, foreign_key: true
+      t.string :notification_type_key, null: false
+      t.text :state, null: false
+    end
+
+    add_index :messaging_notification_preferences,
+              %i[user_id notification_type_key],
+              unique: true,
+              name: "index_messaging_notification_preferences_unique"
+  end
+end

data/db/migrate/20260805000005_create_messaging_endpoints_and_pushover_credentials.rb

@@ -0,0 +1,72 @@
+# frozen_string_literal: true
+
+class CreateMessagingEndpointsAndPushoverCredentials < ActiveRecord::Migration[7.2]
+  def change
+    create_table :messaging_endpoints do |t|
+      t.timestamps
+      t.references :user, null: false, foreign_key: true
+      t.string :channel_key, null: false
+      t.string :lifecycle_state, null: false
+      t.string :verification_state, null: false
+      t.string :address_fingerprint, null: false
+      t.string :masked_display_value, null: false
+      t.text :address_ciphertext # nullable for typed credential channels (e.g. Pushover)
+      t.integer :encryption_key_version, null: false, default: 1
+      t.integer :lock_version, null: false, default: 0
+      t.datetime :verified_at
+      t.datetime :revoked_at
+      t.datetime :last_successful_use_at
+      t.string :active_fingerprint
+      t.string :single_active_slot
+    end
+
+    add_index :messaging_endpoints,
+              %i[user_id channel_key active_fingerprint],
+              unique: true,
+              name: "index_messaging_endpoints_active_fingerprint"
+    add_index :messaging_endpoints,
+              %i[single_active_slot],
+              unique: true,
+              name: "index_messaging_endpoints_single_active_slot"
+    add_index :messaging_endpoints,
+              %i[user_id channel_key],
+              name: "index_messaging_endpoints_owner_channel"
+
+    reversible do |dir|
+      dir.up do
+        execute <<~SQL.squish
+          ALTER TABLE messaging_endpoints
+          ADD CONSTRAINT chk_messaging_endpoints_lifecycle
+          CHECK (lifecycle_state IN ('active', 'revoked', 'invalid', 'retired'))
+        SQL
+        execute <<~SQL.squish
+          ALTER TABLE messaging_endpoints
+          ADD CONSTRAINT chk_messaging_endpoints_verification
+          CHECK (verification_state IN ('unverified', 'pending', 'verified', 'failed'))
+        SQL
+      end
+      dir.down do
+        execute "ALTER TABLE messaging_endpoints DROP CHECK chk_messaging_endpoints_lifecycle"
+        execute "ALTER TABLE messaging_endpoints DROP CHECK chk_messaging_endpoints_verification"
+      end
+    end
+
+    create_table :messaging_endpoint_pushover_credentials do |t|
+      t.timestamps
+      t.bigint :messaging_endpoint_id, null: false
+      t.text :user_key_ciphertext, null: false
+      t.text :application_token_ciphertext, null: false
+      t.integer :encryption_key_version, null: false, default: 1
+    end
+
+    add_index :messaging_endpoint_pushover_credentials,
+              :messaging_endpoint_id,
+              unique: true,
+              name: "index_messaging_pushover_credentials_on_endpoint_id"
+
+    add_foreign_key :messaging_endpoint_pushover_credentials,
+                    :messaging_endpoints,
+                    column: :messaging_endpoint_id,
+                    on_delete: :cascade
+  end
+end