command_tower 0.4.0 → 0.11.0

data/app/workflows/command_tower/workflows/messaging/preferences/update_workflow.rb

@@ -0,0 +1,37 @@
+# frozen_string_literal: true
+
+module CommandTower
+  module Workflows
+    module Messaging
+      module Preferences
+        class UpdateWorkflow < CommandTower::Workflows::ApplicationWorkflow
+          retry_strategy :none
+
+          def call(user:, notification_type_key:, preference_state:)
+            result = CommandTower::Services::Messaging::Preferences::Update.call(
+              user:,
+              notification_type_key:,
+              preference_state:,
+            )
+
+            unless result.success?
+              error = result.errors.first
+              return failure(
+                errors: result.errors,
+                http_status: CommandTower::Workflows::Messaging::ErrorMapping.http_status_for(error)
+              )
+            end
+
+            payload = {
+              notification: CommandTower::Serializers::Messaging::Preferences::NotificationSerializer.serialize(
+                result.data[:notification],
+              ),
+            }
+
+            success(payload:, http_status: :ok)
+          end
+        end
+      end
+    end
+  end
+end

data/app/workflows/command_tower/workflows/profile/show_workflow.rb

@@ -0,0 +1,28 @@
+# frozen_string_literal: true
+
+module CommandTower
+  module Workflows
+    module Profile
+      class ShowWorkflow < CommandTower::Workflows::ApplicationWorkflow
+        retry_strategy :none
+        impersonation_activity!
+
+        def call(current_user:, auth_context: nil)
+          success(
+            payload: CommandTower::Serializers::Profile::ProfileSerializer.serialize(current_user),
+            http_status: :ok,
+            response_effects: expire_header_effects(auth_context)
+          )
+        end
+
+        private
+
+        def expire_header_effects(auth_context)
+          return if auth_context.nil?
+
+          { set_expire_header: auth_context.token_expires_at }
+        end
+      end
+    end
+  end
+end

data/app/workflows/command_tower/workflows/workflow_result.rb

@@ -0,0 +1,58 @@
+# frozen_string_literal: true
+
+module CommandTower
+  module Workflows
+    class WorkflowResult
+      STATUSES = %i[success deferred failure].freeze
+
+      attr_reader :payload, :errors, :http_status, :response_effects, :meta, :reason, :retry_after
+
+      def initialize(status:, payload:, errors:, http_status:, response_effects: nil, meta: {},
+                     reason: nil, retry_after: nil)
+        @status = status.to_sym
+        raise ArgumentError, "invalid WorkflowResult status #{@status}" unless STATUSES.include?(@status)
+
+        @payload = payload
+        @errors = errors
+        @http_status = http_status
+        @response_effects = response_effects
+        @meta = meta
+        @reason = reason
+        @retry_after = retry_after
+      end
+
+      def success?
+        @status == :success
+      end
+
+      def deferred?
+        @status == :deferred
+      end
+
+      def failure?
+        @status == :failure
+      end
+
+      def self.success(payload:, http_status: :ok, response_effects: nil, meta: {})
+        new(status: :success, payload:, errors: [], http_status:, response_effects:, meta:)
+      end
+
+      def self.failure(errors:, http_status:, response_effects: nil, meta: {})
+        new(status: :failure, payload: nil, errors:, http_status:, response_effects:, meta:)
+      end
+
+      def self.deferred(reason:, retry_after:, payload: {}, http_status: :accepted, response_effects: nil, meta: {})
+        new(
+          status: :deferred,
+          payload:,
+          errors: [],
+          http_status:,
+          response_effects:,
+          meta:,
+          reason: reason.to_sym,
+          retry_after: Integer(retry_after)
+        )
+      end
+    end
+  end
+end

data/config/routes.rb

@@ -1,55 +1,123 @@
-Rails.application.routes.draw do
-  append_to_ass = "command_tower"
+# frozen_string_literal: true
 
-  constraints(->(_req) { CommandTower.config.username.realtime_username_check? }) do
-    scope "username" do
-      get "/available/:username", to: "command_tower/username#username_availability", as: :"#{append_to_ass}_username_availability_get"
-    end
+# Modern platform HTTP only — intended for host mount (e.g. DFM `/api`).
+CommandTower::Engine.routes.draw do
+  # Test-only auth harness for ApplicationController cookie/CSRF specs.
+  if Rails.env.test?
+    get "show", to: "protected_fixture#show"
+    post "modify", to: "protected_fixture#modify"
   end
 
-  scope "auth" do
+  namespace :auth do
+    post "logout", to: "logout#create"
+    get "session", to: "session#show"
+    get "principal-capabilities", to: "principal_capabilities#show"
+    delete "impersonation-session", to: "impersonation_session#destroy"
+
     constraints(->(_req) { CommandTower.config.login.plain_text.enable? }) do
-      post "/login", to: "command_tower/auth/plain_text#login_post", as: :"#{append_to_ass}_auth_login_post"
-      post "/create", to: "command_tower/auth/plain_text#create_post", as: :"#{append_to_ass}_auth_create_post"
-
-      constraints(->(_req) { CommandTower.config.login.plain_text.email_verify? }) do
-        scope "email" do
-          post "/verify", to: "command_tower/auth/plain_text#email_verify_post", as: :"#{append_to_ass}_auth_email_verification"
-          post "/send", to: "command_tower/auth/plain_text#email_verify_resend_post", as: :"#{append_to_ass}_auth_email_verification_send"
-        end
+      scope path: "plain-text", module: "plain_text" do
+        post "login", to: "login#create"
       end
     end
-  end
 
-  scope "user" do
-    get "/", to: "command_tower/user#show", as: :"#{append_to_ass}_user_show_get"
-    post "/modify", to: "command_tower/user#modify", as: :"#{append_to_ass}_user_modify_post"
-  end
+    post "register", to: "register#create"
+    post "signup-session", to: "signup_session/create#create"
+    get "identity-policy", to: "identity_policy#show"
 
-  scope "inbox" do
-    scope "messages" do
-      get "/", to: "command_tower/inbox/message#metadata", as: :"#{append_to_ass}_inbox_metadata"
+    constraints(->(_req) { CommandTower.config.signup_session.email_availability? }) do
+      namespace :email do
+        get "availability", to: "availability#show"
+      end
+    end
+
+    # Parity with legacy SchemaHelper GET /username/available/:username gate.
+    constraints(->(_req) { CommandTower.config.username.realtime_username_check? }) do
+      namespace :username do
+        get "availability", to: "availability#show"
+      end
+    end
+
+    constraints(->(_req) { CommandTower.config.login.plain_text.email_verify? }) do
+      namespace :email_verification, path: "email-verification", module: "email_verification" do
+        post "send", to: "send#create"
+        post "verify", to: "verify#create"
+      end
+    end
 
-      get "/:id", to: "command_tower/inbox/message#message", as: :"#{append_to_ass}_inbox_message"
-      delete "/:id", to: "command_tower/inbox/message#delete", as: :"#{append_to_ass}_inbox_message_del"
+    post "password-recovery-session", to: "password_recovery_session/create#create"
 
-      post "/ack", to: "command_tower/inbox/message#ack", as: :"#{append_to_ass}_inbox_ack"
-      post "/delete", to: "command_tower/inbox/message#delete", as: :"#{append_to_ass}_inbox_delete"
+    constraints(->(_req) { CommandTower.config.login.plain_text.password_reset? }) do
+      namespace :password_reset, path: "password-reset", module: "password_reset" do
+        post "send", to: "send#create"
+        post "validate", to: "validate#create"
+        post "reset", to: "reset#create"
+      end
     end
+  end
 
-    scope "blast" do
-      get "/", to: "command_tower/inbox/message_blast#metadata", as: :"#{append_to_ass}_blast_metadata"
-      post "/", to: "command_tower/inbox/message_blast#create", as: :"#{append_to_ass}_blast_create"
+  get "me", to: "me#show"
+  get "profile", to: "profile#show"
+  namespace :me do
+    patch "name", to: "name#update"
+    patch "password", to: "password#update"
 
-      get "/:id", to: "command_tower/inbox/message_blast#blast", as: :"#{append_to_ass}_blast_blast"
-      patch "/:id", to: "command_tower/inbox/message_blast#modify", as: :"#{append_to_ass}_blast_modify"
-      delete "/:id", to: "command_tower/inbox/message_blast#delete", as: :"#{append_to_ass}_blast_delete"
+    resources :inbox, only: [:index, :show, :destroy], controller: "inbox" do
+      collection do
+        get :unread_count, path: "unread-count"
+        post "bulk/read", action: :bulk_read
+        post "bulk/unread", action: :bulk_unread
+        post "bulk/archive", action: :bulk_archive
+        post "bulk/restore", action: :bulk_restore
+        post "bulk/delete", action: :bulk_delete
+      end
+      member do
+        post :open
+        patch :archive
+      end
     end
+
+    get "audit-events/filter-options", to: "audit_events#filter_options"
+    get "audit-events", to: "audit_events#index"
+    get "audit-events/:id", to: "audit_events#show"
+
+    resource :preferences, only: [:show], controller: "preferences"
+    patch "preferences/:notification_type_key", to: "preferences#update"
+
+    # Phone lifecycle always drawn (no SMS/Pushover route constraints).
+    # Product SMS readiness is workflow-gated as 503 sms_capability_unavailable.
+    patch "phone", to: "phone#update"
+    delete "phone", to: "phone#destroy"
+    post "phone/verification", to: "phone_verification/verifications#create"
+    post "phone/verification/verify", to: "phone_verification/verify#create"
+
+    # Pushover lifecycle always drawn (no route constraints).
+    # Product readiness is workflow-gated as 503 pushover_capability_unavailable.
+    # Explicit put + patch both → #update (frontend uses PUT for replace).
+    get "pushover", to: "pushover#show"
+    post "pushover", to: "pushover#create"
+    patch "pushover", to: "pushover#update"
+    put "pushover", to: "pushover#update"
+    delete "pushover", to: "pushover#destroy"
+    post "pushover/verification", to: "pushover/verifications#create"
   end
 
-  scope "admin" do
-    get "/", to: "command_tower/admin#show", as: :"#{append_to_ass}_admin_show_get"
-    post "/modify", to: "command_tower/admin#modify", as: :"#{append_to_ass}_admin_modify_post"
-    post "/modify/role", to: "command_tower/admin#modify_role", as: :"#{append_to_ass}_admin_modify_role_post"
+  namespace :admin do
+    get "audit-events/filter-options", to: "audit/events#filter_options"
+    get "audit-events", to: "audit/events#index"
+    get "audit-events/:id", to: "audit/events#show"
+    get "users", to: "users#index"
+    get "users/assignable-roles", to: "users/roles#index"
+    get "users/:id", to: "users#show"
+    patch "users/:id/name", to: "users/identities#update_name"
+    patch "users/:id/username", to: "users/identities#update_username"
+    patch "users/:id/email", to: "users/identities#update_email"
+    patch "users/:id/email-validation", to: "users/identities#update_email_validation"
+    patch "users/:id/roles", to: "users/roles#update"
+    post "users/:id/impersonation-sessions", to: "users/impersonation_sessions#create"
+    get "workspace", to: "workspace#show"
+
+    namespace :messaging do
+      post "announcements", to: "announcements#create"
+    end
   end
 end

data/db/migrate/{20241117043720_create_command_tower_users.rb → 20260805000001_create_command_tower_users.rb}

@@ -1,3 +1,5 @@
+# frozen_string_literal: true
+
 class CreateCommandTowerUsers < ActiveRecord::Migration[7.2]
   def change
     create_table :users do |t|
@@ -14,9 +16,7 @@ class CreateCommandTowerUsers < ActiveRecord::Migration[7.2]
 
       t.string :roles, default: ""
 
-      ###
-      # Database token to verify JWT
-      # Token will allow JWT values to expire/reset all devices
+      # Database token to verify JWT — allows JWT values to expire/reset all devices
       t.string :verifier_token
       t.datetime :verifier_token_last_reset
 
@@ -27,16 +27,14 @@ class CreateCommandTowerUsers < ActiveRecord::Migration[7.2]
       t.string :password_digest, null: false, default: ""
       t.string :recovery_password_digest, null: false, default: ""
 
-      # OTP strategy
-      # t.string :otp_secret
-      # t.string :otp_temp_secret
-      # t.integer :otp_consumed_timestep
-      # t.boolean :otp_enabled, default: false
-      # t.text :otp_backup_codes
+      # Identity phone
+      t.string :phone_number
+      t.boolean :phone_number_validated, null: false, default: false
 
       t.timestamps
     end
 
     add_index :users, :username, unique: true
+    add_index :users, :phone_number, unique: true
   end
 end

data/db/migrate/{20241204065708_create_command_tower_user_secrets.rb → 20260805000002_create_command_tower_user_secrets.rb}

@@ -1,3 +1,5 @@
+# frozen_string_literal: true
+
 class CreateCommandTowerUserSecrets < ActiveRecord::Migration[7.2]
   def change
     create_table :user_secrets do |t|
@@ -11,6 +13,7 @@ class CreateCommandTowerUserSecrets < ActiveRecord::Migration[7.2]
 
       t.timestamps
     end
+
     add_index :user_secrets, :secret, unique: true
   end
 end

data/db/migrate/20260805000003_create_command_tower_messaging_core.rb

@@ -0,0 +1,90 @@
+# frozen_string_literal: true
+
+class CreateCommandTowerMessagingCore < ActiveRecord::Migration[7.2]
+  def change
+    create_table :messaging_communications do |t|
+      t.timestamps
+      t.references :user, null: false, foreign_key: true
+      t.string :notification_type_key, null: false
+      t.string :title, null: false
+      t.text :body, null: false
+      t.text :metadata
+      t.string :host_event_identity
+      t.string :accept_request_fingerprint
+      t.string :status
+      t.string :execution_handoff_status, null: false
+    end
+
+    add_index :messaging_communications,
+              %i[user_id notification_type_key host_event_identity],
+              unique: true,
+              name: "index_messaging_communications_on_idempotency_namespace"
+    add_index :messaging_communications,
+              %i[status execution_handoff_status updated_at],
+              name: "index_messaging_communications_on_handoff_recovery"
+
+    create_table :messaging_destination_plans do |t|
+      t.timestamps
+      t.references :communication,
+                   null: false,
+                   foreign_key: { to_table: :messaging_communications, on_delete: :cascade },
+                   index: { unique: true }
+      t.text :decision
+    end
+
+    create_table :messaging_inbox_items do |t|
+      t.timestamps
+      t.references :communication,
+                   null: false,
+                   foreign_key: { to_table: :messaging_communications, on_delete: :cascade },
+                   index: { unique: true }
+      t.string :status
+      t.datetime :viewed_at
+      t.datetime :archived_at
+      t.datetime :deleted_at
+    end
+
+    add_index :messaging_inbox_items,
+              %i[deleted_at archived_at viewed_at],
+              name: "index_messaging_inbox_items_on_lifecycle"
+
+    create_table :messaging_channel_deliveries do |t|
+      t.timestamps
+      t.references :communication,
+                   null: false,
+                   foreign_key: { to_table: :messaging_communications, on_delete: :cascade },
+                   index: true
+      t.string :channel_key, null: false
+      t.string :status
+      t.datetime :execution_claimed_at
+      t.integer :execution_attempt_count, null: false, default: 0
+    end
+
+    add_index :messaging_channel_deliveries,
+              %i[communication_id channel_key],
+              unique: true,
+              name: "index_messaging_channel_deliveries_on_comm_and_channel"
+    add_index :messaging_channel_deliveries,
+              %i[status execution_claimed_at updated_at],
+              name: "index_messaging_channel_deliveries_on_execution_recovery"
+
+    create_table :messaging_delivery_attempts do |t|
+      t.timestamps
+      t.references :channel_delivery,
+                   null: false,
+                   foreign_key: { to_table: :messaging_channel_deliveries, on_delete: :cascade },
+                   index: true
+      t.string :status, null: false
+      t.datetime :started_at, null: false
+      t.datetime :finished_at
+      t.string :error_class
+      t.string :error_code
+      t.string :provider_message_id
+      t.string :normalized_provider_status
+    end
+
+    add_index :messaging_delivery_attempts,
+              %i[channel_delivery_id status],
+              name: "index_messaging_delivery_attempts_on_delivery_and_status"
+  end
+end

data/db/migrate/20260805000004_create_messaging_notification_preferences.rb

@@ -0,0 +1,17 @@
+# frozen_string_literal: true
+
+class CreateMessagingNotificationPreferences < ActiveRecord::Migration[7.2]
+  def change
+    create_table :messaging_notification_preferences do |t|
+      t.timestamps
+      t.references :user, null: false, foreign_key: true
+      t.string :notification_type_key, null: false
+      t.text :state, null: false
+    end
+
+    add_index :messaging_notification_preferences,
+              %i[user_id notification_type_key],
+              unique: true,
+              name: "index_messaging_notification_preferences_unique"
+  end
+end

data/db/migrate/20260805000005_create_messaging_endpoints_and_pushover_credentials.rb

@@ -0,0 +1,72 @@
+# frozen_string_literal: true
+
+class CreateMessagingEndpointsAndPushoverCredentials < ActiveRecord::Migration[7.2]
+  def change
+    create_table :messaging_endpoints do |t|
+      t.timestamps
+      t.references :user, null: false, foreign_key: true
+      t.string :channel_key, null: false
+      t.string :lifecycle_state, null: false
+      t.string :verification_state, null: false
+      t.string :address_fingerprint, null: false
+      t.string :masked_display_value, null: false
+      t.text :address_ciphertext # nullable for typed credential channels (e.g. Pushover)
+      t.integer :encryption_key_version, null: false, default: 1
+      t.integer :lock_version, null: false, default: 0
+      t.datetime :verified_at
+      t.datetime :revoked_at
+      t.datetime :last_successful_use_at
+      t.string :active_fingerprint
+      t.string :single_active_slot
+    end
+
+    add_index :messaging_endpoints,
+              %i[user_id channel_key active_fingerprint],
+              unique: true,
+              name: "index_messaging_endpoints_active_fingerprint"
+    add_index :messaging_endpoints,
+              %i[single_active_slot],
+              unique: true,
+              name: "index_messaging_endpoints_single_active_slot"
+    add_index :messaging_endpoints,
+              %i[user_id channel_key],
+              name: "index_messaging_endpoints_owner_channel"
+
+    reversible do |dir|
+      dir.up do
+        execute <<~SQL.squish
+          ALTER TABLE messaging_endpoints
+          ADD CONSTRAINT chk_messaging_endpoints_lifecycle
+          CHECK (lifecycle_state IN ('active', 'revoked', 'invalid', 'retired'))
+        SQL
+        execute <<~SQL.squish
+          ALTER TABLE messaging_endpoints
+          ADD CONSTRAINT chk_messaging_endpoints_verification
+          CHECK (verification_state IN ('unverified', 'pending', 'verified', 'failed'))
+        SQL
+      end
+      dir.down do
+        execute "ALTER TABLE messaging_endpoints DROP CHECK chk_messaging_endpoints_lifecycle"
+        execute "ALTER TABLE messaging_endpoints DROP CHECK chk_messaging_endpoints_verification"
+      end
+    end
+
+    create_table :messaging_endpoint_pushover_credentials do |t|
+      t.timestamps
+      t.bigint :messaging_endpoint_id, null: false
+      t.text :user_key_ciphertext, null: false
+      t.text :application_token_ciphertext, null: false
+      t.integer :encryption_key_version, null: false, default: 1
+    end
+
+    add_index :messaging_endpoint_pushover_credentials,
+              :messaging_endpoint_id,
+              unique: true,
+              name: "index_messaging_pushover_credentials_on_endpoint_id"
+
+    add_foreign_key :messaging_endpoint_pushover_credentials,
+                    :messaging_endpoints,
+                    column: :messaging_endpoint_id,
+                    on_delete: :cascade
+  end
+end

data/db/migrate/20260816000001_create_command_tower_audit_events.rb

@@ -0,0 +1,45 @@
+# frozen_string_literal: true
+
+class CreateCommandTowerAuditEvents < ActiveRecord::Migration[7.2]
+  def change
+    create_table :command_tower_audit_events, charset: "utf8mb4", collation: "utf8mb4_0900_ai_ci" do |t|
+      t.string :event_uuid, null: false
+      t.string :action, null: false
+      t.datetime :occurred_at, null: false
+
+      t.string :execution_uuid
+      t.string :correlation_id
+      t.string :request_id
+      t.string :causation_id
+      t.string :source
+
+      t.bigint :actor_user_id
+      t.bigint :affected_user_id
+      t.bigint :effective_user_id
+      t.bigint :originating_administrator_id
+      t.boolean :impersonation_active, null: false, default: false
+      t.string :attribution_mode, null: false
+
+      t.string :subject_type
+      t.bigint :subject_id
+      t.string :subject_label
+
+      t.json :change_set, null: false
+      t.json :metadata, null: false
+
+      t.boolean :user_history, null: false
+      t.json :sensitive_fields, null: false
+      t.string :retention, null: false
+
+      t.timestamps
+    end
+
+    add_index :command_tower_audit_events, :event_uuid, unique: true, name: "index_ct_audit_events_on_event_uuid"
+    add_index :command_tower_audit_events, %i[affected_user_id occurred_at], name: "index_ct_audit_events_on_affected_occurred"
+    add_index :command_tower_audit_events, %i[actor_user_id occurred_at], name: "index_ct_audit_events_on_actor_occurred"
+    add_index :command_tower_audit_events, %i[action occurred_at], name: "index_ct_audit_events_on_action_occurred"
+    add_index :command_tower_audit_events, :execution_uuid, name: "index_ct_audit_events_on_execution_uuid"
+    add_index :command_tower_audit_events, :correlation_id, name: "index_ct_audit_events_on_correlation_id"
+    add_index :command_tower_audit_events, %i[originating_administrator_id occurred_at], name: "index_ct_audit_events_on_originating_admin_occurred"
+  end
+end

data/db/migrate/20260817000001_add_scope_columns_to_command_tower_audit_events.rb

@@ -0,0 +1,34 @@
+# frozen_string_literal: true
+
+class AddScopeColumnsToCommandTowerAuditEvents < ActiveRecord::Migration[7.2]
+  def up
+    change_table :command_tower_audit_events, bulk: true do |t|
+      t.string :scope_class, null: false, default: "legacy"
+      t.string :host_context_type
+      t.string :host_context_identifier
+    end
+
+    execute <<~SQL.squish
+      UPDATE command_tower_audit_events
+      SET scope_class = 'legacy'
+      WHERE scope_class IS NULL OR scope_class = 'legacy'
+    SQL
+
+    add_index :command_tower_audit_events,
+      %i[host_context_type host_context_identifier occurred_at],
+      name: "index_ct_audit_events_on_host_context_occurred"
+    add_index :command_tower_audit_events,
+      %i[scope_class occurred_at],
+      name: "index_ct_audit_events_on_scope_class_occurred"
+  end
+
+  def down
+    change_table :command_tower_audit_events, bulk: true do |t|
+      t.remove_index name: "index_ct_audit_events_on_host_context_occurred"
+      t.remove_index name: "index_ct_audit_events_on_scope_class_occurred"
+      t.remove :scope_class
+      t.remove :host_context_type
+      t.remove :host_context_identifier
+    end
+  end
+end

data/db/migrate/20260817000003_create_command_tower_impersonation_sessions.rb

@@ -0,0 +1,26 @@
+# frozen_string_literal: true
+
+class CreateCommandTowerImpersonationSessions < ActiveRecord::Migration[7.2]
+  def change
+    create_table :command_tower_impersonation_sessions, id: { type: :string, limit: 36 } do |t|
+      t.bigint :actor_user_id, null: false
+      t.bigint :target_user_id, null: false
+      t.datetime :started_at, null: false
+      t.datetime :last_activity_at, null: false
+      t.datetime :absolute_expires_at, null: false
+      t.datetime :idle_expires_at, null: false
+        t.datetime :ended_at
+        t.string :end_reason, limit: 32
+        t.timestamps
+      end
+
+      add_index :command_tower_impersonation_sessions, :actor_user_id
+      add_index :command_tower_impersonation_sessions, :target_user_id
+      add_index :command_tower_impersonation_sessions,
+        %i[actor_user_id ended_at],
+        name: "index_ct_impersonation_sessions_on_actor_ended"
+
+      add_foreign_key :command_tower_impersonation_sessions, :users, column: :actor_user_id
+      add_foreign_key :command_tower_impersonation_sessions, :users, column: :target_user_id
+    end
+end