@open-mercato/core 0.4.5-develop-5191db4ef3 → 0.4.5-develop-033a719bf2

package/src/modules/customers/backend/customers/deals/[id]/page.tsx

@@ -8,6 +8,7 @@ import { Page, PageBody } from '@open-mercato/ui/backend/Page'
 import { Button } from '@open-mercato/ui/primitives/button'
 import { FormHeader } from '@open-mercato/ui/backend/forms'
 import { VersionHistoryAction } from '@open-mercato/ui/backend/version-history'
+import { SendObjectMessageDialog } from '@open-mercato/ui/backend/messages'
 import { Spinner } from '@open-mercato/ui/primitives/spinner'
 import { flash } from '@open-mercato/ui/backend/FlashMessages'
 import { apiCallOrThrow, readApiResultOrThrow } from '@open-mercato/ui/backend/utils/apiCall'
@@ -394,10 +395,25 @@ export default function DealDetailPage({ params }: { params?: { id?: string } })
             backHref="/backend/customers/deals"
             backLabel={t('customers.deals.detail.backToList', 'Back to deals')}
             utilityActions={(
-              <VersionHistoryAction
-                config={{ resourceKind: 'customers.deal', resourceId: data.deal.id }}
-                t={t}
-              />
+              <>
+                <SendObjectMessageDialog
+                  object={{
+                    entityModule: 'customers',
+                    entityType: 'deal',
+                    entityId: data.deal.id,
+                    sourceEntityType: 'customers.deal',
+                    sourceEntityId: data.deal.id,
+                  }}
+                  defaultValues={{
+                    sourceEntityType: 'customers.deal',
+                    sourceEntityId: data.deal.id,
+                  }}
+                />
+                <VersionHistoryAction
+                  config={{ resourceKind: 'customers.deal', resourceId: data.deal.id }}
+                  t={t}
+                />
+              </>
             )}
             title={
               <div className="flex flex-wrap items-center gap-2">

package/src/modules/customers/i18n/de.json

@@ -462,6 +462,10 @@
   "customers.errors.todo_unlink_failed": "To-do-Verknüpfung konnte nicht gelöst werden",
   "customers.errors.unassign_failed": "Tag konnte nicht entfernt werden",
   "customers.errors.unauthorized": "Nicht autorisiert",
+  "customers.messageObjects.company.title": "Unternehmen",
+  "customers.messageObjects.deal.title": "Transaktion",
+  "customers.messageObjects.notFound": "Nicht gefunden",
+  "customers.messageObjects.person.title": "Person",
   "customers.nav.activities": "Aktivitäten",
   "customers.nav.companies": "Unternehmen",
   "customers.nav.companies.create": "Neues Unternehmen",

package/src/modules/customers/i18n/en.json

@@ -462,6 +462,10 @@
   "customers.errors.todo_unlink_failed": "Failed to unlink todo",
   "customers.errors.unassign_failed": "Failed to unassign tag",
   "customers.errors.unauthorized": "Unauthorized",
+  "customers.messageObjects.company.title": "Company",
+  "customers.messageObjects.deal.title": "Deal",
+  "customers.messageObjects.notFound": "Not found",
+  "customers.messageObjects.person.title": "Person",
   "customers.nav.activities": "Activities",
   "customers.nav.companies": "Companies",
   "customers.nav.companies.create": "New company",

package/src/modules/customers/i18n/es.json

@@ -462,6 +462,10 @@
   "customers.errors.todo_unlink_failed": "No se pudo desvincular la tarea",
   "customers.errors.unassign_failed": "No se pudo quitar la etiqueta",
   "customers.errors.unauthorized": "No autorizado",
+  "customers.messageObjects.company.title": "Empresa",
+  "customers.messageObjects.deal.title": "Trato",
+  "customers.messageObjects.notFound": "No encontrado",
+  "customers.messageObjects.person.title": "Persona",
   "customers.nav.activities": "Actividades",
   "customers.nav.companies": "Empresas",
   "customers.nav.companies.create": "Nueva empresa",

package/src/modules/customers/i18n/pl.json

@@ -462,6 +462,10 @@
   "customers.errors.todo_unlink_failed": "Nie udało się odpiąć zadania",
   "customers.errors.unassign_failed": "Nie udało się odpiąć tagu",
   "customers.errors.unauthorized": "Brak autoryzacji",
+  "customers.messageObjects.company.title": "Firma",
+  "customers.messageObjects.deal.title": "Transakcja",
+  "customers.messageObjects.notFound": "Nie znaleziono",
+  "customers.messageObjects.person.title": "Osoba",
   "customers.nav.activities": "Aktywności",
   "customers.nav.companies": "Firmy",
   "customers.nav.companies.create": "Nowa firma",

package/src/modules/customers/lib/messageObjectPreviews.ts

@@ -0,0 +1,154 @@
+import { createRequestContainer } from '@open-mercato/shared/lib/di/container'
+import { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'
+import { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'
+import type { ObjectPreviewData } from '@open-mercato/shared/modules/messages/types'
+import type { EntityManager } from '@mikro-orm/postgresql'
+import { CustomerDeal, CustomerEntity } from '../data/entities'
+
+type PreviewContext = {
+  tenantId: string
+  organizationId?: string | null
+}
+
+function formatCurrency(amount: string | null | undefined, currency: string | null | undefined): string | null {
+  if (!amount) return null
+  const value = Number(amount)
+  if (!Number.isFinite(value)) return currency ? `${amount} ${currency}` : amount
+  if (!currency) return value.toLocaleString()
+  try {
+    return new Intl.NumberFormat(undefined, { style: 'currency', currency }).format(value)
+  } catch {
+    return `${value.toLocaleString()} ${currency}`
+  }
+}
+
+function statusColor(status: string | null | undefined): string | undefined {
+  if (!status) return undefined
+  const value = status.toLowerCase()
+  if (value.includes('won') || value.includes('active') || value.includes('qualified')) return 'green'
+  if (value.includes('lost') || value.includes('rejected') || value.includes('inactive')) return 'red'
+  if (value.includes('open') || value.includes('new') || value.includes('pending')) return 'amber'
+  return 'blue'
+}
+
+async function resolveEm() {
+  const { resolve } = await createRequestContainer()
+  return resolve('em') as EntityManager
+}
+
+export async function loadCustomerPersonPreview(entityId: string, ctx: PreviewContext): Promise<ObjectPreviewData> {
+  const { t } = await resolveTranslations()
+  const defaultTitle = t('customers.messageObjects.person.title')
+
+  if (!ctx.organizationId) {
+    return { title: defaultTitle, subtitle: entityId }
+  }
+
+  const em = await resolveEm()
+  const entity = await findOneWithDecryption(
+    em,
+    CustomerEntity,
+    {
+      id: entityId,
+      kind: 'person',
+      tenantId: ctx.tenantId,
+      organizationId: ctx.organizationId,
+      deletedAt: null,
+    },
+    undefined,
+    { tenantId: ctx.tenantId, organizationId: ctx.organizationId },
+  )
+
+  if (!entity) {
+    return { title: defaultTitle, subtitle: entityId, status: t('customers.messageObjects.notFound'), statusColor: 'gray' }
+  }
+
+  const subtitleParts = [entity.primaryEmail, entity.primaryPhone]
+    .filter((part): part is string => Boolean(part && part.trim().length > 0))
+  return {
+    title: entity.displayName,
+    subtitle: subtitleParts.join(' • ') || entityId,
+    status: entity.status ?? undefined,
+    statusColor: statusColor(entity.status),
+  }
+}
+
+export async function loadCustomerCompanyPreview(entityId: string, ctx: PreviewContext): Promise<ObjectPreviewData> {
+  const { t } = await resolveTranslations()
+  const defaultTitle = t('customers.messageObjects.company.title')
+
+  if (!ctx.organizationId) {
+    return { title: defaultTitle, subtitle: entityId }
+  }
+
+  const em = await resolveEm()
+  const entity = await findOneWithDecryption(
+    em,
+    CustomerEntity,
+    {
+      id: entityId,
+      kind: 'company',
+      tenantId: ctx.tenantId,
+      organizationId: ctx.organizationId,
+      deletedAt: null,
+    },
+    undefined,
+    { tenantId: ctx.tenantId, organizationId: ctx.organizationId },
+  )
+
+  if (!entity) {
+    return { title: defaultTitle, subtitle: entityId, status: t('customers.messageObjects.notFound'), statusColor: 'gray' }
+  }
+
+  const subtitleParts = [entity.primaryEmail, entity.primaryPhone]
+    .filter((part): part is string => Boolean(part && part.trim().length > 0))
+  return {
+    title: entity.displayName,
+    subtitle: subtitleParts.join(' • ') || entityId,
+    status: entity.status ?? undefined,
+    statusColor: statusColor(entity.status),
+  }
+}
+
+export async function loadCustomerDealPreview(entityId: string, ctx: PreviewContext): Promise<ObjectPreviewData> {
+  const { t } = await resolveTranslations()
+  const defaultTitle = t('customers.messageObjects.deal.title')
+
+  if (!ctx.organizationId) {
+    return { title: defaultTitle, subtitle: entityId }
+  }
+
+  const em = await resolveEm()
+  const deal = await findOneWithDecryption(
+    em,
+    CustomerDeal,
+    {
+      id: entityId,
+      tenantId: ctx.tenantId,
+      organizationId: ctx.organizationId,
+      deletedAt: null,
+    },
+    undefined,
+    { tenantId: ctx.tenantId, organizationId: ctx.organizationId },
+  )
+
+  if (!deal) {
+    return { title: defaultTitle, subtitle: entityId, status: t('customers.messageObjects.notFound'), statusColor: 'gray' }
+  }
+
+  const amount = formatCurrency(deal.valueAmount, deal.valueCurrency)
+  const probability = typeof deal.probability === 'number' ? `${deal.probability}%` : null
+  const subtitle = [amount, probability].filter((part): part is string => Boolean(part && part.length > 0)).join(' • ')
+  const metadata: Record<string, string> = {}
+  if (amount) metadata.Value = amount
+  if (probability) metadata.Probability = probability
+
+  return {
+    title: deal.title,
+    subtitle: subtitle || entityId,
+    status: deal.status ?? undefined,
+    statusColor: statusColor(deal.status),
+    metadata: Object.keys(metadata).length > 0 ? metadata : undefined,
+  }
+}
+

package/src/modules/customers/message-objects.ts

@@ -0,0 +1,70 @@
+import type { MessageObjectTypeDefinition } from '@open-mercato/shared/modules/messages/types'
+import { CustomerMessageObjectDetail } from './widgets/messages/CustomerMessageObjectDetail'
+import { CustomerMessageObjectPreview } from './widgets/messages/CustomerMessageObjectPreview'
+
+const objectMessageTypes = ['default', 'messages.defaultWithObjects']
+
+export const messageObjectTypes: MessageObjectTypeDefinition[] = [
+  {
+    module: 'customers',
+    entityType: 'person',
+    messageTypes: objectMessageTypes,
+    entityId: 'customers:customer_person_profile',
+    optionLabelField: 'name',
+    optionSubtitleField: 'email',
+    labelKey: 'customers.people.list.title',
+    icon: 'user-round',
+    PreviewComponent: CustomerMessageObjectPreview,
+    DetailComponent: CustomerMessageObjectDetail,
+    actions: [],
+    loadPreview: async (entityId, ctx) => {
+      if (typeof window !== 'undefined') {
+        return { title: 'Person', subtitle: entityId }
+      }
+      const { loadCustomerPersonPreview } = await import('./lib/messageObjectPreviews')
+      return loadCustomerPersonPreview(entityId, ctx)
+    },
+  },
+  {
+    module: 'customers',
+    entityType: 'company',
+    messageTypes: objectMessageTypes,
+    entityId: 'customers:customer_company_profile',
+    optionLabelField: 'name',
+    optionSubtitleField: 'taxId',
+    labelKey: 'customers.companies.list.title',
+    icon: 'building2',
+    PreviewComponent: CustomerMessageObjectPreview,
+    DetailComponent: CustomerMessageObjectDetail,
+    actions: [],
+    loadPreview: async (entityId, ctx) => {
+      if (typeof window !== 'undefined') {
+        return { title: 'Company', subtitle: entityId }
+      }
+      const { loadCustomerCompanyPreview } = await import('./lib/messageObjectPreviews')
+      return loadCustomerCompanyPreview(entityId, ctx)
+    },
+  },
+  {
+    module: 'customers',
+    entityType: 'deal',
+    messageTypes: objectMessageTypes,
+    entityId: 'customers:customer_deal',
+    optionLabelField: 'title',
+    optionSubtitleField: 'status',
+    labelKey: 'customers.deals.list.title',
+    icon: 'briefcase-business',
+    PreviewComponent: CustomerMessageObjectPreview,
+    DetailComponent: CustomerMessageObjectDetail,
+    actions: [],
+    loadPreview: async (entityId, ctx) => {
+      if (typeof window !== 'undefined') {
+        return { title: 'Deal', subtitle: entityId }
+      }
+      const { loadCustomerDealPreview } = await import('./lib/messageObjectPreviews')
+      return loadCustomerDealPreview(entityId, ctx)
+    },
+  },
+]
+
+export default messageObjectTypes

package/src/modules/customers/widgets/messages/CustomerMessageObjectDetail.tsx

@@ -0,0 +1,57 @@
+"use client"
+
+import * as React from 'react'
+import { useT } from '@open-mercato/shared/lib/i18n/context'
+import type { ObjectDetailProps } from '@open-mercato/shared/modules/messages/types'
+import { Button } from '@open-mercato/ui/primitives/button'
+import { CustomerMessageObjectPreview } from './CustomerMessageObjectPreview'
+
+export function CustomerMessageObjectDetail(props: ObjectDetailProps) {
+  const t = useT()
+  const [executingActionId, setExecutingActionId] = React.useState<string | null>(null)
+
+  return (
+    <div className="space-y-3 rounded border p-3">
+      <CustomerMessageObjectPreview
+        entityId={props.entityId}
+        entityModule={props.entityModule}
+        entityType={props.entityType}
+        snapshot={props.snapshot}
+        previewData={props.previewData}
+        actionRequired={props.actionRequired}
+        actionType={props.actionType}
+        actionLabel={props.actionLabel}
+      />
+
+      {props.actions.length > 0 ? (
+        <div className="flex flex-wrap gap-2">
+          {props.actions.map((action) => (
+            <Button
+              key={action.id}
+              type="button"
+              size="sm"
+              variant={action.variant ?? 'default'}
+              disabled={executingActionId !== null}
+              onClick={async () => {
+                if (executingActionId) return
+                setExecutingActionId(action.id)
+                try {
+                  await props.onAction(action.id, { id: props.entityId })
+                } finally {
+                  setExecutingActionId(null)
+                }
+              }}
+            >
+              {executingActionId === action.id
+                ? t('messages.actions.executing', 'Executing...')
+                : t(action.labelKey ?? action.id, action.id)}
+            </Button>
+          ))}
+        </div>
+      ) : null}
+    </div>
+  )
+}
+
+export default CustomerMessageObjectDetail
+

package/src/modules/customers/widgets/messages/CustomerMessageObjectPreview.tsx

@@ -0,0 +1,49 @@
+"use client"
+
+import { Building2, BriefcaseBusiness, UserRound } from 'lucide-react'
+import { useT } from '@open-mercato/shared/lib/i18n/context'
+import type { ObjectPreviewProps } from '@open-mercato/shared/modules/messages/types'
+import { Badge } from '@open-mercato/ui/primitives/badge'
+
+export function CustomerMessageObjectPreview({
+  entityType,
+  entityId,
+  previewData,
+  actionRequired,
+  actionLabel,
+}: ObjectPreviewProps) {
+  const t = useT()
+
+  const isCompany = entityType === 'company'
+  const isDeal = entityType === 'deal'
+  const Icon = isDeal ? BriefcaseBusiness : isCompany ? Building2 : UserRound
+
+  const fallbackTitle = isDeal
+    ? t('customers.deals.list.title', 'Deals')
+    : isCompany
+      ? t('customers.companies.list.title', 'Companies')
+      : t('customers.people.list.title', 'People')
+
+  return (
+    <div className="flex items-start gap-3 rounded-md border bg-muted/20 p-3">
+      <Icon className="mt-0.5 h-4 w-4 text-muted-foreground" />
+      <div className="min-w-0 flex-1 space-y-1">
+        <div className="flex items-center gap-2">
+          <p className="truncate text-sm font-medium">{previewData?.title || fallbackTitle}</p>
+          {actionRequired ? (
+            <Badge variant="secondary" className="text-xs">
+              {actionLabel || t('messages.composer.objectActionRequired', 'Action required')}
+            </Badge>
+          ) : null}
+        </div>
+        <p className="truncate text-xs text-muted-foreground">{previewData?.subtitle || entityId}</p>
+        {previewData?.status ? (
+          <Badge variant="outline" className="text-xs">{previewData.status}</Badge>
+        ) : null}
+      </div>
+    </div>
+  )
+}
+
+export default CustomerMessageObjectPreview
+

package/src/modules/customers/widgets/messages/index.ts

@@ -0,0 +1,2 @@
+export { CustomerMessageObjectDetail } from './CustomerMessageObjectDetail'
+export { CustomerMessageObjectPreview } from './CustomerMessageObjectPreview'

package/src/modules/messages/acl.ts

@@ -0,0 +1,11 @@
+export const features = [
+  'messages.view',
+  'messages.compose',
+  'messages.attach',
+  'messages.attach_files',
+  'messages.email',
+  'messages.actions',
+  'messages.manage',
+]
+
+export default features

package/src/modules/messages/api/[id]/actions/[actionId]/route.ts

@@ -0,0 +1,103 @@
+import { z } from 'zod'
+import type { CommandBus } from '@open-mercato/shared/lib/commands/command-bus'
+import { attachOperationMetadataHeader, type OperationLogEntryLike } from '../../../../lib/operationMetadata'
+import { resolveMessageContext } from '../../../../lib/routeHelpers'
+import type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi/types'
+import { actionResultResponseSchema } from '../../../openapi'
+
+export const metadata = {
+  POST: { requireAuth: true, requireFeatures: ['messages.actions'] },
+}
+
+export async function POST(
+  req: Request,
+  { params }: { params: { id: string; actionId: string } }
+) {
+  const { ctx, scope } = await resolveMessageContext(req)
+  const commandBus = ctx.container.resolve('commandBus') as CommandBus
+
+  const rawBody = await req.json().catch(() => ({}))
+  const body = (typeof rawBody === 'object' && rawBody && !Array.isArray(rawBody)
+    ? rawBody
+    : {}) as Record<string, unknown>
+  try {
+    const commandResult = await commandBus.execute('messages.actions.execute', {
+      input: {
+        messageId: params.id,
+        actionId: params.actionId,
+        payload: body,
+        tenantId: scope.tenantId,
+        organizationId: scope.organizationId,
+        userId: scope.userId,
+      },
+      ctx: {
+        container: ctx.container,
+        auth: ctx.auth ?? null,
+        organizationScope: null,
+        selectedOrganizationId: scope.organizationId,
+        organizationIds: scope.organizationId ? [scope.organizationId] : null,
+        request: req,
+      },
+    })
+
+    const result = commandResult.result as {
+      ok: boolean
+      actionId: string
+      result: Record<string, unknown>
+      operationLogEntry?: OperationLogEntryLike | null
+    }
+    const response = Response.json({
+      ok: result.ok,
+      actionId: result.actionId,
+      result: result.result,
+    })
+    attachOperationMetadataHeader(response, result.operationLogEntry ?? null, {
+      resourceKind: 'messages.message',
+      resourceId: params.id,
+    })
+    return response
+  } catch (error) {
+    if (error instanceof Error) {
+      if (error.message === 'Message not found') {
+        return Response.json({ error: 'Message not found' }, { status: 404 })
+      }
+      if (error.message === 'Access denied') {
+        return Response.json({ error: 'Access denied' }, { status: 403 })
+      }
+      if (error.message === 'Action not found') {
+        return Response.json({ error: 'Action not found' }, { status: 404 })
+      }
+      if (error.message === 'Action already taken') {
+        const actionTaken = (error as Error & { actionTaken?: string }).actionTaken ?? null
+        return Response.json({ error: 'Action already taken', actionTaken }, { status: 409 })
+      }
+      if (error.message === 'Actions have expired') {
+        return Response.json({ error: 'Actions have expired' }, { status: 410 })
+      }
+      if (error.message === 'Action has no executable target') {
+        return Response.json({ error: 'Action has no executable target' }, { status: 409 })
+      }
+      if (error.message === 'Action failed') {
+        return Response.json({ error: 'Action failed' }, { status: 500 })
+      }
+    }
+    throw error
+  }
+}
+
+export const openApi: OpenApiRouteDoc = {
+  tag: 'Messages',
+  methods: {
+    POST: {
+      summary: 'Execute message action',
+      requestBody: { schema: z.record(z.string(), z.unknown()).optional() },
+      responses: [
+        { status: 200, description: 'Action executed', schema: actionResultResponseSchema },
+        { status: 403, description: 'Access denied' },
+        { status: 404, description: 'Action not found' },
+        { status: 409, description: 'Action already taken' },
+        { status: 410, description: 'Action expired' },
+      ],
+    },
+  },
+}

package/src/modules/messages/api/[id]/archive/route.ts

@@ -0,0 +1,138 @@
+import type { EntityManager } from '@mikro-orm/core'
+import type { CommandBus } from '@open-mercato/shared/lib/commands/command-bus'
+import type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi/types'
+import { Message, MessageRecipient } from '../../../data/entities'
+import { attachOperationMetadataHeader } from '../../../lib/operationMetadata'
+import { hasOrganizationAccess, resolveMessageContext } from '../../../lib/routeHelpers'
+import type { MessageScope } from '../../../lib/routeHelpers'
+import { errorResponseSchema, okResponseSchema } from '../../openapi'
+
+export const metadata = {
+  PUT: { requireAuth: true, requireFeatures: ['messages.view'] },
+  DELETE: { requireAuth: true, requireFeatures: ['messages.view'] },
+}
+
+type ResolvedCtx = Awaited<ReturnType<typeof resolveMessageContext>>['ctx']
+
+async function resolveRecipientContext(
+  req: Request,
+  id: string,
+): Promise<
+  | { ctx: ResolvedCtx; scope: MessageScope; em: EntityManager; recipient: MessageRecipient }
+  | { response: Response }
+> {
+  const { ctx, scope } = await resolveMessageContext(req)
+  const em = (ctx.container.resolve('em') as EntityManager).fork()
+
+  const message = await em.findOne(Message, {
+    id,
+    tenantId: scope.tenantId,
+    deletedAt: null,
+  })
+
+  if (!message) {
+    return { response: Response.json({ error: 'Message not found' }, { status: 404 }) }
+  }
+
+  if (!hasOrganizationAccess(scope.organizationId, message.organizationId)) {
+    return { response: Response.json({ error: 'Access denied' }, { status: 403 }) }
+  }
+
+  const recipient = await em.findOne(MessageRecipient, {
+    messageId: id,
+    recipientUserId: scope.userId,
+    deletedAt: null,
+  })
+
+  if (!recipient) {
+    return { response: Response.json({ error: 'Access denied' }, { status: 403 }) }
+  }
+
+  return { ctx, scope, em, recipient }
+}
+
+export async function PUT(req: Request, { params }: { params: { id: string } }) {
+  const context = await resolveRecipientContext(req, params.id)
+  if ('response' in context) return context.response
+  const { ctx, scope } = context
+  const commandBus = ctx.container.resolve('commandBus') as CommandBus
+  const { logEntry } = await commandBus.execute('messages.recipients.archive', {
+    input: {
+      messageId: params.id,
+      tenantId: scope.tenantId,
+      organizationId: scope.organizationId,
+      userId: scope.userId,
+    },
+    ctx: {
+      container: ctx.container,
+      auth: ctx.auth ?? null,
+      organizationScope: null,
+      selectedOrganizationId: scope.organizationId,
+      organizationIds: scope.organizationId ? [scope.organizationId] : null,
+      request: req,
+    },
+  })
+
+  const response = Response.json({ ok: true })
+  attachOperationMetadataHeader(response, logEntry, {
+    resourceKind: 'messages.message',
+    resourceId: params.id,
+  })
+  return response
+}
+
+export async function DELETE(req: Request, { params }: { params: { id: string } }) {
+  const context = await resolveRecipientContext(req, params.id)
+  if ('response' in context) return context.response
+  const { ctx, scope } = context
+  const commandBus = ctx.container.resolve('commandBus') as CommandBus
+  const { logEntry } = await commandBus.execute('messages.recipients.unarchive', {
+    input: {
+      messageId: params.id,
+      tenantId: scope.tenantId,
+      organizationId: scope.organizationId,
+      userId: scope.userId,
+    },
+    ctx: {
+      container: ctx.container,
+      auth: ctx.auth ?? null,
+      organizationScope: null,
+      selectedOrganizationId: scope.organizationId,
+      organizationIds: scope.organizationId ? [scope.organizationId] : null,
+      request: req,
+    },
+  })
+
+  const response = Response.json({ ok: true })
+  attachOperationMetadataHeader(response, logEntry, {
+    resourceKind: 'messages.message',
+    resourceId: params.id,
+  })
+  return response
+}
+
+export const openApi: OpenApiRouteDoc = {
+  tag: 'Messages',
+  methods: {
+    PUT: {
+      summary: 'Archive message',
+      responses: [
+        { status: 200, description: 'Message archived', schema: okResponseSchema },
+      ],
+      errors: [
+        { status: 403, description: 'Access denied', schema: errorResponseSchema },
+        { status: 404, description: 'Message not found', schema: errorResponseSchema },
+      ],
+    },
+    DELETE: {
+      summary: 'Unarchive message',
+      responses: [
+        { status: 200, description: 'Message unarchived', schema: okResponseSchema },
+      ],
+      errors: [
+        { status: 403, description: 'Access denied', schema: errorResponseSchema },
+        { status: 404, description: 'Message not found', schema: errorResponseSchema },
+      ],
+    },
+  },
+}