@open-mercato/core 0.4.5-develop-5191db4ef3 → 0.4.5-develop-033a719bf2

package/dist/modules/messages/api/[id]/conversation/read/route.js

@@ -0,0 +1,68 @@
+import { attachOperationMetadataHeader } from "../../../../lib/operationMetadata.js";
+import { resolveMessageContext } from "../../../../lib/routeHelpers.js";
+import {
+  conversationMutationResponseSchema,
+  errorResponseSchema
+} from "../../../openapi.js";
+const metadata = {
+  DELETE: { requireAuth: true, requireFeatures: ["messages.view"] }
+};
+async function DELETE(req, { params }) {
+  const { ctx, scope } = await resolveMessageContext(req);
+  const commandBus = ctx.container.resolve("commandBus");
+  try {
+    const { result, logEntry } = await commandBus.execute("messages.conversation.mark_unread_for_actor", {
+      input: {
+        anchorMessageId: params.id,
+        tenantId: scope.tenantId,
+        organizationId: scope.organizationId,
+        userId: scope.userId
+      },
+      ctx: {
+        container: ctx.container,
+        auth: ctx.auth ?? null,
+        organizationScope: null,
+        selectedOrganizationId: scope.organizationId,
+        organizationIds: scope.organizationId ? [scope.organizationId] : null,
+        request: req
+      }
+    });
+    const response = Response.json(result);
+    attachOperationMetadataHeader(response, logEntry, {
+      resourceKind: "messages.conversation",
+      resourceId: params.id
+    });
+    return response;
+  } catch (error) {
+    if (error instanceof Error) {
+      if (error.message === "Message not found") {
+        return Response.json({ error: error.message }, { status: 404 });
+      }
+      if (error.message === "Access denied") {
+        return Response.json({ error: error.message }, { status: 403 });
+      }
+    }
+    throw error;
+  }
+}
+const openApi = {
+  tag: "Messages",
+  methods: {
+    DELETE: {
+      summary: "Mark entire conversation as unread for current actor",
+      responses: [
+        { status: 200, description: "Conversation marked unread", schema: conversationMutationResponseSchema }
+      ],
+      errors: [
+        { status: 403, description: "Access denied", schema: errorResponseSchema },
+        { status: 404, description: "Message not found", schema: errorResponseSchema }
+      ]
+    }
+  }
+};
+export {
+  DELETE,
+  metadata,
+  openApi
+};
+//# sourceMappingURL=route.js.map

package/dist/modules/messages/api/[id]/conversation/read/route.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../../../src/modules/messages/api/%5Bid%5D/conversation/read/route.ts"],
+  "sourcesContent": ["import type { CommandBus } from '@open-mercato/shared/lib/commands/command-bus'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi/types'\nimport { attachOperationMetadataHeader } from '../../../../lib/operationMetadata'\nimport { resolveMessageContext } from '../../../../lib/routeHelpers'\nimport {\n  conversationMutationResponseSchema,\n  errorResponseSchema,\n} from '../../../openapi'\n\nexport const metadata = {\n  DELETE: { requireAuth: true, requireFeatures: ['messages.view'] },\n}\n\nexport async function DELETE(req: Request, { params }: { params: { id: string } }) {\n  const { ctx, scope } = await resolveMessageContext(req)\n  const commandBus = ctx.container.resolve('commandBus') as CommandBus\n\n  try {\n    const { result, logEntry } = await commandBus.execute('messages.conversation.mark_unread_for_actor', {\n      input: {\n        anchorMessageId: params.id,\n        tenantId: scope.tenantId,\n        organizationId: scope.organizationId,\n        userId: scope.userId,\n      },\n      ctx: {\n        container: ctx.container,\n        auth: ctx.auth ?? null,\n        organizationScope: null,\n        selectedOrganizationId: scope.organizationId,\n        organizationIds: scope.organizationId ? [scope.organizationId] : null,\n        request: req,\n      },\n    })\n\n    const response = Response.json(result)\n    attachOperationMetadataHeader(response, logEntry, {\n      resourceKind: 'messages.conversation',\n      resourceId: params.id,\n    })\n    return response\n  } catch (error) {\n    if (error instanceof Error) {\n      if (error.message === 'Message not found') {\n        return Response.json({ error: error.message }, { status: 404 })\n      }\n      if (error.message === 'Access denied') {\n        return Response.json({ error: error.message }, { status: 403 })\n      }\n    }\n    throw error\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Messages',\n  methods: {\n    DELETE: {\n      summary: 'Mark entire conversation as unread for current actor',\n      responses: [\n        { status: 200, description: 'Conversation marked unread', schema: conversationMutationResponseSchema },\n      ],\n      errors: [\n        { status: 403, description: 'Access denied', schema: errorResponseSchema },\n        { status: 404, description: 'Message not found', schema: errorResponseSchema },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAEA,SAAS,qCAAqC;AAC9C,SAAS,6BAA6B;AACtC;AAAA,EACE;AAAA,EACA;AAAA,OACK;AAEA,MAAM,WAAW;AAAA,EACtB,QAAQ,EAAE,aAAa,MAAM,iBAAiB,CAAC,eAAe,EAAE;AAClE;AAEA,eAAsB,OAAO,KAAc,EAAE,OAAO,GAA+B;AACjF,QAAM,EAAE,KAAK,MAAM,IAAI,MAAM,sBAAsB,GAAG;AACtD,QAAM,aAAa,IAAI,UAAU,QAAQ,YAAY;AAErD,MAAI;AACF,UAAM,EAAE,QAAQ,SAAS,IAAI,MAAM,WAAW,QAAQ,+CAA+C;AAAA,MACnG,OAAO;AAAA,QACL,iBAAiB,OAAO;AAAA,QACxB,UAAU,MAAM;AAAA,QAChB,gBAAgB,MAAM;AAAA,QACtB,QAAQ,MAAM;AAAA,MAChB;AAAA,MACA,KAAK;AAAA,QACH,WAAW,IAAI;AAAA,QACf,MAAM,IAAI,QAAQ;AAAA,QAClB,mBAAmB;AAAA,QACnB,wBAAwB,MAAM;AAAA,QAC9B,iBAAiB,MAAM,iBAAiB,CAAC,MAAM,cAAc,IAAI;AAAA,QACjE,SAAS;AAAA,MACX;AAAA,IACF,CAAC;AAED,UAAM,WAAW,SAAS,KAAK,MAAM;AACrC,kCAA8B,UAAU,UAAU;AAAA,MAChD,cAAc;AAAA,MACd,YAAY,OAAO;AAAA,IACrB,CAAC;AACD,WAAO;AAAA,EACT,SAAS,OAAO;AACd,QAAI,iBAAiB,OAAO;AAC1B,UAAI,MAAM,YAAY,qBAAqB;AACzC,eAAO,SAAS,KAAK,EAAE,OAAO,MAAM,QAAQ,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,MAChE;AACA,UAAI,MAAM,YAAY,iBAAiB;AACrC,eAAO,SAAS,KAAK,EAAE,OAAO,MAAM,QAAQ,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,MAChE;AAAA,IACF;AACA,UAAM;AAAA,EACR;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,IACP,QAAQ;AAAA,MACN,SAAS;AAAA,MACT,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,8BAA8B,QAAQ,mCAAmC;AAAA,MACvG;AAAA,MACA,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,iBAAiB,QAAQ,oBAAoB;AAAA,QACzE,EAAE,QAAQ,KAAK,aAAa,qBAAqB,QAAQ,oBAAoB;AAAA,MAC/E;AAAA,IACF;AAAA,EACF;AACF;",
+  "names": []
+}

package/dist/modules/messages/api/[id]/conversation/route.js

@@ -0,0 +1,68 @@
+import { attachOperationMetadataHeader } from "../../../lib/operationMetadata.js";
+import { resolveMessageContext } from "../../../lib/routeHelpers.js";
+import {
+  conversationMutationResponseSchema,
+  errorResponseSchema
+} from "../../openapi.js";
+const metadata = {
+  DELETE: { requireAuth: true, requireFeatures: ["messages.view"] }
+};
+async function DELETE(req, { params }) {
+  const { ctx, scope } = await resolveMessageContext(req);
+  const commandBus = ctx.container.resolve("commandBus");
+  try {
+    const { result, logEntry } = await commandBus.execute("messages.conversation.delete_for_actor", {
+      input: {
+        anchorMessageId: params.id,
+        tenantId: scope.tenantId,
+        organizationId: scope.organizationId,
+        userId: scope.userId
+      },
+      ctx: {
+        container: ctx.container,
+        auth: ctx.auth ?? null,
+        organizationScope: null,
+        selectedOrganizationId: scope.organizationId,
+        organizationIds: scope.organizationId ? [scope.organizationId] : null,
+        request: req
+      }
+    });
+    const response = Response.json(result);
+    attachOperationMetadataHeader(response, logEntry, {
+      resourceKind: "messages.conversation",
+      resourceId: params.id
+    });
+    return response;
+  } catch (error) {
+    if (error instanceof Error) {
+      if (error.message === "Message not found") {
+        return Response.json({ error: error.message }, { status: 404 });
+      }
+      if (error.message === "Access denied") {
+        return Response.json({ error: error.message }, { status: 403 });
+      }
+    }
+    throw error;
+  }
+}
+const openApi = {
+  tag: "Messages",
+  methods: {
+    DELETE: {
+      summary: "Delete conversation for current actor",
+      responses: [
+        { status: 200, description: "Conversation deleted", schema: conversationMutationResponseSchema }
+      ],
+      errors: [
+        { status: 403, description: "Access denied", schema: errorResponseSchema },
+        { status: 404, description: "Message not found", schema: errorResponseSchema }
+      ]
+    }
+  }
+};
+export {
+  DELETE,
+  metadata,
+  openApi
+};
+//# sourceMappingURL=route.js.map

package/dist/modules/messages/api/[id]/conversation/route.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../../src/modules/messages/api/%5Bid%5D/conversation/route.ts"],
+  "sourcesContent": ["import type { CommandBus } from '@open-mercato/shared/lib/commands/command-bus'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi/types'\nimport { attachOperationMetadataHeader } from '../../../lib/operationMetadata'\nimport { resolveMessageContext } from '../../../lib/routeHelpers'\nimport {\n  conversationMutationResponseSchema,\n  errorResponseSchema,\n} from '../../openapi'\n\nexport const metadata = {\n  DELETE: { requireAuth: true, requireFeatures: ['messages.view'] },\n}\n\nexport async function DELETE(req: Request, { params }: { params: { id: string } }) {\n  const { ctx, scope } = await resolveMessageContext(req)\n  const commandBus = ctx.container.resolve('commandBus') as CommandBus\n\n  try {\n    const { result, logEntry } = await commandBus.execute('messages.conversation.delete_for_actor', {\n      input: {\n        anchorMessageId: params.id,\n        tenantId: scope.tenantId,\n        organizationId: scope.organizationId,\n        userId: scope.userId,\n      },\n      ctx: {\n        container: ctx.container,\n        auth: ctx.auth ?? null,\n        organizationScope: null,\n        selectedOrganizationId: scope.organizationId,\n        organizationIds: scope.organizationId ? [scope.organizationId] : null,\n        request: req,\n      },\n    })\n\n    const response = Response.json(result)\n    attachOperationMetadataHeader(response, logEntry, {\n      resourceKind: 'messages.conversation',\n      resourceId: params.id,\n    })\n    return response\n  } catch (error) {\n    if (error instanceof Error) {\n      if (error.message === 'Message not found') {\n        return Response.json({ error: error.message }, { status: 404 })\n      }\n      if (error.message === 'Access denied') {\n        return Response.json({ error: error.message }, { status: 403 })\n      }\n    }\n    throw error\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Messages',\n  methods: {\n    DELETE: {\n      summary: 'Delete conversation for current actor',\n      responses: [\n        { status: 200, description: 'Conversation deleted', schema: conversationMutationResponseSchema },\n      ],\n      errors: [\n        { status: 403, description: 'Access denied', schema: errorResponseSchema },\n        { status: 404, description: 'Message not found', schema: errorResponseSchema },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAEA,SAAS,qCAAqC;AAC9C,SAAS,6BAA6B;AACtC;AAAA,EACE;AAAA,EACA;AAAA,OACK;AAEA,MAAM,WAAW;AAAA,EACtB,QAAQ,EAAE,aAAa,MAAM,iBAAiB,CAAC,eAAe,EAAE;AAClE;AAEA,eAAsB,OAAO,KAAc,EAAE,OAAO,GAA+B;AACjF,QAAM,EAAE,KAAK,MAAM,IAAI,MAAM,sBAAsB,GAAG;AACtD,QAAM,aAAa,IAAI,UAAU,QAAQ,YAAY;AAErD,MAAI;AACF,UAAM,EAAE,QAAQ,SAAS,IAAI,MAAM,WAAW,QAAQ,0CAA0C;AAAA,MAC9F,OAAO;AAAA,QACL,iBAAiB,OAAO;AAAA,QACxB,UAAU,MAAM;AAAA,QAChB,gBAAgB,MAAM;AAAA,QACtB,QAAQ,MAAM;AAAA,MAChB;AAAA,MACA,KAAK;AAAA,QACH,WAAW,IAAI;AAAA,QACf,MAAM,IAAI,QAAQ;AAAA,QAClB,mBAAmB;AAAA,QACnB,wBAAwB,MAAM;AAAA,QAC9B,iBAAiB,MAAM,iBAAiB,CAAC,MAAM,cAAc,IAAI;AAAA,QACjE,SAAS;AAAA,MACX;AAAA,IACF,CAAC;AAED,UAAM,WAAW,SAAS,KAAK,MAAM;AACrC,kCAA8B,UAAU,UAAU;AAAA,MAChD,cAAc;AAAA,MACd,YAAY,OAAO;AAAA,IACrB,CAAC;AACD,WAAO;AAAA,EACT,SAAS,OAAO;AACd,QAAI,iBAAiB,OAAO;AAC1B,UAAI,MAAM,YAAY,qBAAqB;AACzC,eAAO,SAAS,KAAK,EAAE,OAAO,MAAM,QAAQ,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,MAChE;AACA,UAAI,MAAM,YAAY,iBAAiB;AACrC,eAAO,SAAS,KAAK,EAAE,OAAO,MAAM,QAAQ,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,MAChE;AAAA,IACF;AACA,UAAM;AAAA,EACR;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,IACP,QAAQ;AAAA,MACN,SAAS;AAAA,MACT,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,wBAAwB,QAAQ,mCAAmC;AAAA,MACjG;AAAA,MACA,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,iBAAiB,QAAQ,oBAAoB;AAAA,QACzE,EAAE,QAAQ,KAAK,aAAa,qBAAqB,QAAQ,oBAAoB;AAAA,MAC/E;AAAA,IACF;AAAA,EACF;AACF;",
+  "names": []
+}

package/dist/modules/messages/api/[id]/forward/route.js

@@ -0,0 +1,85 @@
+import { forwardMessageSchema } from "../../../data/validators.js";
+import { attachOperationMetadataHeader } from "../../../lib/operationMetadata.js";
+import { canUseMessageEmailFeature, parseRequestBodySafe, resolveMessageContext } from "../../../lib/routeHelpers.js";
+import { forwardResponseSchema, forwardMessageSchema as forwardSchema } from "../../openapi.js";
+const metadata = {
+  POST: { requireAuth: true, requireFeatures: ["messages.compose"] }
+};
+async function POST(req, { params }) {
+  const { ctx, scope } = await resolveMessageContext(req);
+  const commandBus = ctx.container.resolve("commandBus");
+  const body = await parseRequestBodySafe(req);
+  const input = forwardMessageSchema.parse(body);
+  if (input.sendViaEmail && !await canUseMessageEmailFeature(ctx, scope)) {
+    return Response.json({ error: "Missing feature: messages.email" }, { status: 403 });
+  }
+  let commandResult;
+  try {
+    commandResult = await commandBus.execute("messages.messages.forward", {
+      input: {
+        ...input,
+        messageId: params.id,
+        tenantId: scope.tenantId,
+        organizationId: scope.organizationId,
+        userId: scope.userId
+      },
+      ctx: {
+        container: ctx.container,
+        auth: ctx.auth ?? null,
+        organizationScope: null,
+        selectedOrganizationId: scope.organizationId,
+        organizationIds: scope.organizationId ? [scope.organizationId] : null,
+        request: req
+      }
+    });
+  } catch (error) {
+    if (error instanceof Error) {
+      if (error.message === "Message not found") {
+        return Response.json({ error: "Message not found" }, { status: 404 });
+      }
+      if (error.message === "Access denied") {
+        return Response.json({ error: "Access denied" }, { status: 403 });
+      }
+      if (error.message === "Forward is not allowed for this message type") {
+        return Response.json({ error: "Forward is not allowed for this message type" }, { status: 409 });
+      }
+      if (error.message === "Forward body exceeds maximum length") {
+        return Response.json({ error: "Forward body exceeds maximum length" }, { status: 413 });
+      }
+    }
+    throw error;
+  }
+  const newMessageId = commandResult.result.id;
+  const response = Response.json({ id: newMessageId }, { status: 201 });
+  attachOperationMetadataHeader(response, commandResult.logEntry, {
+    resourceKind: "messages.message",
+    resourceId: newMessageId
+  });
+  return response;
+}
+const openApi = {
+  tag: "Messages",
+  methods: {
+    POST: {
+      summary: "Forward a message and optionally include attachments from the forwarded conversation slice",
+      requestBody: { schema: forwardSchema },
+      responses: [
+        {
+          status: 201,
+          description: "Message forwarded",
+          schema: forwardResponseSchema
+        },
+        { status: 403, description: "Access denied" },
+        { status: 404, description: "Message not found" },
+        { status: 409, description: "Forward not allowed for message type" },
+        { status: 413, description: "Forward body exceeds maximum length" }
+      ]
+    }
+  }
+};
+export {
+  POST,
+  metadata,
+  openApi
+};
+//# sourceMappingURL=route.js.map

package/dist/modules/messages/api/[id]/forward/route.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../../src/modules/messages/api/%5Bid%5D/forward/route.ts"],
+  "sourcesContent": ["import type { CommandBus } from '@open-mercato/shared/lib/commands/command-bus'\nimport { forwardMessageSchema } from '../../../data/validators'\nimport { attachOperationMetadataHeader, OperationLogEntryLike } from '../../../lib/operationMetadata'\nimport { canUseMessageEmailFeature, parseRequestBodySafe, resolveMessageContext } from '../../../lib/routeHelpers'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi/types'\nimport { forwardResponseSchema, forwardMessageSchema as forwardSchema } from '../../openapi'\nimport { MessageCommandExecuteResult } from '../../../commands/shared'\n\nexport const metadata = {\n  POST: { requireAuth: true, requireFeatures: ['messages.compose'] },\n}\n\nexport async function POST(req: Request, { params }: { params: { id: string } }) {\n  const { ctx, scope } = await resolveMessageContext(req)\n  const commandBus = ctx.container.resolve('commandBus') as CommandBus\n  const body = await parseRequestBodySafe(req)\n  const input = forwardMessageSchema.parse(body)\n  if (input.sendViaEmail && !(await canUseMessageEmailFeature(ctx, scope))) {\n    return Response.json({ error: 'Missing feature: messages.email' }, { status: 403 })\n  }\n\n  let commandResult: { result: MessageCommandExecuteResult; logEntry: unknown }\n  try {\n    commandResult = await commandBus.execute<unknown, MessageCommandExecuteResult>('messages.messages.forward', {\n      input: {\n        ...input,\n        messageId: params.id,\n        tenantId: scope.tenantId,\n        organizationId: scope.organizationId,\n        userId: scope.userId,\n      },\n      ctx: {\n        container: ctx.container,\n        auth: ctx.auth ?? null,\n        organizationScope: null,\n        selectedOrganizationId: scope.organizationId,\n        organizationIds: scope.organizationId ? [scope.organizationId] : null,\n        request: req,\n      },\n    })\n  } catch (error) {\n    if (error instanceof Error) {\n      if (error.message === 'Message not found') {\n        return Response.json({ error: 'Message not found' }, { status: 404 })\n      }\n      if (error.message === 'Access denied') {\n        return Response.json({ error: 'Access denied' }, { status: 403 })\n      }\n      if (error.message === 'Forward is not allowed for this message type') {\n        return Response.json({ error: 'Forward is not allowed for this message type' }, { status: 409 })\n      }\n      if (error.message === 'Forward body exceeds maximum length') {\n        return Response.json({ error: 'Forward body exceeds maximum length' }, { status: 413 })\n      }\n    }\n    throw error\n  }\n  const newMessageId = commandResult.result.id\n\n  const response = Response.json({ id: newMessageId }, { status: 201 })\n  attachOperationMetadataHeader(response, commandResult.logEntry as OperationLogEntryLike, {\n    resourceKind: 'messages.message',\n    resourceId: newMessageId,\n  })\n  return response\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Messages',\n  methods: {\n    POST: {\n      summary: 'Forward a message and optionally include attachments from the forwarded conversation slice',\n      requestBody: { schema: forwardSchema },\n      responses: [\n        {\n          status: 201,\n          description: 'Message forwarded',\n          schema: forwardResponseSchema,\n        },\n        { status: 403, description: 'Access denied' },\n        { status: 404, description: 'Message not found' },\n        { status: 409, description: 'Forward not allowed for message type' },\n        { status: 413, description: 'Forward body exceeds maximum length' },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AACA,SAAS,4BAA4B;AACrC,SAAS,qCAA4D;AACrE,SAAS,2BAA2B,sBAAsB,6BAA6B;AAEvF,SAAS,uBAAuB,wBAAwB,qBAAqB;AAGtE,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,kBAAkB,EAAE;AACnE;AAEA,eAAsB,KAAK,KAAc,EAAE,OAAO,GAA+B;AAC/E,QAAM,EAAE,KAAK,MAAM,IAAI,MAAM,sBAAsB,GAAG;AACtD,QAAM,aAAa,IAAI,UAAU,QAAQ,YAAY;AACrD,QAAM,OAAO,MAAM,qBAAqB,GAAG;AAC3C,QAAM,QAAQ,qBAAqB,MAAM,IAAI;AAC7C,MAAI,MAAM,gBAAgB,CAAE,MAAM,0BAA0B,KAAK,KAAK,GAAI;AACxE,WAAO,SAAS,KAAK,EAAE,OAAO,kCAAkC,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACpF;AAEA,MAAI;AACJ,MAAI;AACF,oBAAgB,MAAM,WAAW,QAA8C,6BAA6B;AAAA,MAC1G,OAAO;AAAA,QACL,GAAG;AAAA,QACH,WAAW,OAAO;AAAA,QAClB,UAAU,MAAM;AAAA,QAChB,gBAAgB,MAAM;AAAA,QACtB,QAAQ,MAAM;AAAA,MAChB;AAAA,MACA,KAAK;AAAA,QACH,WAAW,IAAI;AAAA,QACf,MAAM,IAAI,QAAQ;AAAA,QAClB,mBAAmB;AAAA,QACnB,wBAAwB,MAAM;AAAA,QAC9B,iBAAiB,MAAM,iBAAiB,CAAC,MAAM,cAAc,IAAI;AAAA,QACjE,SAAS;AAAA,MACX;AAAA,IACF,CAAC;AAAA,EACH,SAAS,OAAO;AACd,QAAI,iBAAiB,OAAO;AAC1B,UAAI,MAAM,YAAY,qBAAqB;AACzC,eAAO,SAAS,KAAK,EAAE,OAAO,oBAAoB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,MACtE;AACA,UAAI,MAAM,YAAY,iBAAiB;AACrC,eAAO,SAAS,KAAK,EAAE,OAAO,gBAAgB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,MAClE;AACA,UAAI,MAAM,YAAY,gDAAgD;AACpE,eAAO,SAAS,KAAK,EAAE,OAAO,+CAA+C,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,MACjG;AACA,UAAI,MAAM,YAAY,uCAAuC;AAC3D,eAAO,SAAS,KAAK,EAAE,OAAO,sCAAsC,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,MACxF;AAAA,IACF;AACA,UAAM;AAAA,EACR;AACA,QAAM,eAAe,cAAc,OAAO;AAE1C,QAAM,WAAW,SAAS,KAAK,EAAE,IAAI,aAAa,GAAG,EAAE,QAAQ,IAAI,CAAC;AACpE,gCAA8B,UAAU,cAAc,UAAmC;AAAA,IACvF,cAAc;AAAA,IACd,YAAY;AAAA,EACd,CAAC;AACD,SAAO;AACT;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aAAa,EAAE,QAAQ,cAAc;AAAA,MACrC,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ;AAAA,QACV;AAAA,QACA,EAAE,QAAQ,KAAK,aAAa,gBAAgB;AAAA,QAC5C,EAAE,QAAQ,KAAK,aAAa,oBAAoB;AAAA,QAChD,EAAE,QAAQ,KAAK,aAAa,uCAAuC;AAAA,QACnE,EAAE,QAAQ,KAAK,aAAa,sCAAsC;AAAA,MACpE;AAAA,IACF;AAAA,EACF;AACF;",
+  "names": []
+}

package/dist/modules/messages/api/[id]/forward-preview/route.js

@@ -0,0 +1,70 @@
+import { Message, MessageRecipient } from "../../../data/entities.js";
+import { buildForwardPreview } from "../../../lib/forwarding.js";
+import { hasOrganizationAccess, resolveMessageContext } from "../../../lib/routeHelpers.js";
+import {
+  errorResponseSchema,
+  forwardPreviewResponseSchema
+} from "../../openapi.js";
+const metadata = {
+  GET: { requireAuth: true, requireFeatures: ["messages.compose"] }
+};
+async function GET(req, { params }) {
+  const { ctx, scope } = await resolveMessageContext(req);
+  const em = ctx.container.resolve("em").fork();
+  const message = await em.findOne(Message, {
+    id: params.id,
+    tenantId: scope.tenantId,
+    deletedAt: null
+  });
+  if (!message) {
+    return Response.json({ error: "Message not found" }, { status: 404 });
+  }
+  if (!hasOrganizationAccess(scope.organizationId, message.organizationId)) {
+    return Response.json({ error: "Access denied" }, { status: 403 });
+  }
+  const recipient = await em.findOne(MessageRecipient, {
+    messageId: params.id,
+    recipientUserId: scope.userId,
+    deletedAt: null
+  });
+  const isSender = message.senderUserId === scope.userId;
+  const isRecipient = Boolean(recipient);
+  if (!isSender && !isRecipient) {
+    return Response.json({ error: "Access denied" }, { status: 403 });
+  }
+  try {
+    const preview = await buildForwardPreview(em, {
+      tenantId: scope.tenantId,
+      organizationId: scope.organizationId,
+      userId: scope.userId
+    }, message);
+    return Response.json(preview);
+  } catch (error) {
+    if (error instanceof Error && error.message === "Forward body exceeds maximum length") {
+      return Response.json({ error: error.message }, { status: 413 });
+    }
+    throw error;
+  }
+}
+const openApi = {
+  tag: "Messages",
+  methods: {
+    GET: {
+      summary: "Get forward preview for a message",
+      responses: [
+        { status: 200, description: "Forward preview generated", schema: forwardPreviewResponseSchema }
+      ],
+      errors: [
+        { status: 403, description: "Access denied", schema: errorResponseSchema },
+        { status: 404, description: "Message not found", schema: errorResponseSchema },
+        { status: 413, description: "Forward body exceeds maximum length", schema: errorResponseSchema }
+      ]
+    }
+  }
+};
+export {
+  GET,
+  metadata,
+  openApi
+};
+//# sourceMappingURL=route.js.map

package/dist/modules/messages/api/[id]/forward-preview/route.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../../src/modules/messages/api/%5Bid%5D/forward-preview/route.ts"],
+  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi/types'\nimport { Message, MessageRecipient } from '../../../data/entities'\nimport { buildForwardPreview } from '../../../lib/forwarding'\nimport { hasOrganizationAccess, resolveMessageContext } from '../../../lib/routeHelpers'\nimport {\n  errorResponseSchema,\n  forwardPreviewResponseSchema,\n} from '../../openapi'\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['messages.compose'] },\n}\n\nexport async function GET(req: Request, { params }: { params: { id: string } }) {\n  const { ctx, scope } = await resolveMessageContext(req)\n  const em = (ctx.container.resolve('em') as EntityManager).fork()\n\n  const message = await em.findOne(Message, {\n    id: params.id,\n    tenantId: scope.tenantId,\n    deletedAt: null,\n  })\n\n  if (!message) {\n    return Response.json({ error: 'Message not found' }, { status: 404 })\n  }\n\n  if (!hasOrganizationAccess(scope.organizationId, message.organizationId)) {\n    return Response.json({ error: 'Access denied' }, { status: 403 })\n  }\n\n  const recipient = await em.findOne(MessageRecipient, {\n    messageId: params.id,\n    recipientUserId: scope.userId,\n    deletedAt: null,\n  })\n\n  const isSender = message.senderUserId === scope.userId\n  const isRecipient = Boolean(recipient)\n  if (!isSender && !isRecipient) {\n    return Response.json({ error: 'Access denied' }, { status: 403 })\n  }\n\n  try {\n    const preview = await buildForwardPreview(em, {\n      tenantId: scope.tenantId,\n      organizationId: scope.organizationId,\n      userId: scope.userId,\n    }, message)\n    return Response.json(preview)\n  } catch (error) {\n    if (error instanceof Error && error.message === 'Forward body exceeds maximum length') {\n      return Response.json({ error: error.message }, { status: 413 })\n    }\n    throw error\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Messages',\n  methods: {\n    GET: {\n      summary: 'Get forward preview for a message',\n      responses: [\n        { status: 200, description: 'Forward preview generated', schema: forwardPreviewResponseSchema },\n      ],\n      errors: [\n        { status: 403, description: 'Access denied', schema: errorResponseSchema },\n        { status: 404, description: 'Message not found', schema: errorResponseSchema },\n        { status: 413, description: 'Forward body exceeds maximum length', schema: errorResponseSchema },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAEA,SAAS,SAAS,wBAAwB;AAC1C,SAAS,2BAA2B;AACpC,SAAS,uBAAuB,6BAA6B;AAC7D;AAAA,EACE;AAAA,EACA;AAAA,OACK;AAEA,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,kBAAkB,EAAE;AAClE;AAEA,eAAsB,IAAI,KAAc,EAAE,OAAO,GAA+B;AAC9E,QAAM,EAAE,KAAK,MAAM,IAAI,MAAM,sBAAsB,GAAG;AACtD,QAAM,KAAM,IAAI,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAE/D,QAAM,UAAU,MAAM,GAAG,QAAQ,SAAS;AAAA,IACxC,IAAI,OAAO;AAAA,IACX,UAAU,MAAM;AAAA,IAChB,WAAW;AAAA,EACb,CAAC;AAED,MAAI,CAAC,SAAS;AACZ,WAAO,SAAS,KAAK,EAAE,OAAO,oBAAoB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACtE;AAEA,MAAI,CAAC,sBAAsB,MAAM,gBAAgB,QAAQ,cAAc,GAAG;AACxE,WAAO,SAAS,KAAK,EAAE,OAAO,gBAAgB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAClE;AAEA,QAAM,YAAY,MAAM,GAAG,QAAQ,kBAAkB;AAAA,IACnD,WAAW,OAAO;AAAA,IAClB,iBAAiB,MAAM;AAAA,IACvB,WAAW;AAAA,EACb,CAAC;AAED,QAAM,WAAW,QAAQ,iBAAiB,MAAM;AAChD,QAAM,cAAc,QAAQ,SAAS;AACrC,MAAI,CAAC,YAAY,CAAC,aAAa;AAC7B,WAAO,SAAS,KAAK,EAAE,OAAO,gBAAgB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAClE;AAEA,MAAI;AACF,UAAM,UAAU,MAAM,oBAAoB,IAAI;AAAA,MAC5C,UAAU,MAAM;AAAA,MAChB,gBAAgB,MAAM;AAAA,MACtB,QAAQ,MAAM;AAAA,IAChB,GAAG,OAAO;AACV,WAAO,SAAS,KAAK,OAAO;AAAA,EAC9B,SAAS,OAAO;AACd,QAAI,iBAAiB,SAAS,MAAM,YAAY,uCAAuC;AACrF,aAAO,SAAS,KAAK,EAAE,OAAO,MAAM,QAAQ,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAChE;AACA,UAAM;AAAA,EACR;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,6BAA6B,QAAQ,6BAA6B;AAAA,MAChG;AAAA,MACA,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,iBAAiB,QAAQ,oBAAoB;AAAA,QACzE,EAAE,QAAQ,KAAK,aAAa,qBAAqB,QAAQ,oBAAoB;AAAA,QAC7E,EAAE,QAAQ,KAAK,aAAa,uCAAuC,QAAQ,oBAAoB;AAAA,MACjG;AAAA,IACF;AAAA,EACF;AACF;",
+  "names": []
+}

package/dist/modules/messages/api/[id]/read/route.js

@@ -0,0 +1,120 @@
+import { Message, MessageRecipient } from "../../../data/entities.js";
+import { attachOperationMetadataHeader } from "../../../lib/operationMetadata.js";
+import { hasOrganizationAccess, resolveMessageContext } from "../../../lib/routeHelpers.js";
+import { errorResponseSchema, okResponseSchema } from "../../openapi.js";
+const metadata = {
+  PUT: { requireAuth: true, requireFeatures: ["messages.view"] },
+  DELETE: { requireAuth: true, requireFeatures: ["messages.view"] }
+};
+async function resolveRecipientContext(req, id) {
+  const { ctx, scope } = await resolveMessageContext(req);
+  const em = ctx.container.resolve("em").fork();
+  const message = await em.findOne(Message, {
+    id,
+    tenantId: scope.tenantId,
+    deletedAt: null
+  });
+  if (!message) {
+    return { response: Response.json({ error: "Message not found" }, { status: 404 }) };
+  }
+  if (!hasOrganizationAccess(scope.organizationId, message.organizationId)) {
+    return { response: Response.json({ error: "Access denied" }, { status: 403 }) };
+  }
+  const recipient = await em.findOne(MessageRecipient, {
+    messageId: id,
+    recipientUserId: scope.userId,
+    deletedAt: null
+  });
+  if (!recipient) {
+    return { response: Response.json({ error: "Access denied" }, { status: 403 }) };
+  }
+  return { ctx, scope, em, recipient };
+}
+async function PUT(req, { params }) {
+  const context = await resolveRecipientContext(req, params.id);
+  if ("response" in context) return context.response;
+  const { ctx, scope } = context;
+  const commandBus = ctx.container.resolve("commandBus");
+  const { logEntry } = await commandBus.execute("messages.recipients.mark_read", {
+    input: {
+      messageId: params.id,
+      tenantId: scope.tenantId,
+      organizationId: scope.organizationId,
+      userId: scope.userId
+    },
+    ctx: {
+      container: ctx.container,
+      auth: ctx.auth ?? null,
+      organizationScope: null,
+      selectedOrganizationId: scope.organizationId,
+      organizationIds: scope.organizationId ? [scope.organizationId] : null,
+      request: req
+    }
+  });
+  const response = Response.json({ ok: true });
+  attachOperationMetadataHeader(response, logEntry, {
+    resourceKind: "messages.message",
+    resourceId: params.id
+  });
+  return response;
+}
+async function DELETE(req, { params }) {
+  const context = await resolveRecipientContext(req, params.id);
+  if ("response" in context) return context.response;
+  const { ctx, scope } = context;
+  const commandBus = ctx.container.resolve("commandBus");
+  const { logEntry } = await commandBus.execute("messages.recipients.mark_unread", {
+    input: {
+      messageId: params.id,
+      tenantId: scope.tenantId,
+      organizationId: scope.organizationId,
+      userId: scope.userId
+    },
+    ctx: {
+      container: ctx.container,
+      auth: ctx.auth ?? null,
+      organizationScope: null,
+      selectedOrganizationId: scope.organizationId,
+      organizationIds: scope.organizationId ? [scope.organizationId] : null,
+      request: req
+    }
+  });
+  const response = Response.json({ ok: true });
+  attachOperationMetadataHeader(response, logEntry, {
+    resourceKind: "messages.message",
+    resourceId: params.id
+  });
+  return response;
+}
+const openApi = {
+  tag: "Messages",
+  methods: {
+    PUT: {
+      summary: "Mark message as read",
+      responses: [
+        { status: 200, description: "Message marked read", schema: okResponseSchema }
+      ],
+      errors: [
+        { status: 403, description: "Access denied", schema: errorResponseSchema },
+        { status: 404, description: "Message not found", schema: errorResponseSchema }
+      ]
+    },
+    DELETE: {
+      summary: "Mark message as unread",
+      responses: [
+        { status: 200, description: "Message marked unread", schema: okResponseSchema }
+      ],
+      errors: [
+        { status: 403, description: "Access denied", schema: errorResponseSchema },
+        { status: 404, description: "Message not found", schema: errorResponseSchema }
+      ]
+    }
+  }
+};
+export {
+  DELETE,
+  PUT,
+  metadata,
+  openApi
+};
+//# sourceMappingURL=route.js.map

package/dist/modules/messages/api/[id]/read/route.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../../src/modules/messages/api/%5Bid%5D/read/route.ts"],
+  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/core'\nimport type { CommandBus } from '@open-mercato/shared/lib/commands/command-bus'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi/types'\nimport { Message, MessageRecipient } from '../../../data/entities'\nimport { attachOperationMetadataHeader } from '../../../lib/operationMetadata'\nimport { hasOrganizationAccess, resolveMessageContext } from '../../../lib/routeHelpers'\nimport type { MessageScope } from '../../../lib/routeHelpers'\nimport { errorResponseSchema, okResponseSchema } from '../../openapi'\n\nexport const metadata = {\n  PUT: { requireAuth: true, requireFeatures: ['messages.view'] },\n  DELETE: { requireAuth: true, requireFeatures: ['messages.view'] },\n}\n\ntype ResolvedCtx = Awaited<ReturnType<typeof resolveMessageContext>>['ctx']\n\nasync function resolveRecipientContext(\n  req: Request,\n  id: string,\n): Promise<\n  | { ctx: ResolvedCtx; scope: MessageScope; em: EntityManager; recipient: MessageRecipient }\n  | { response: Response }\n> {\n  const { ctx, scope } = await resolveMessageContext(req)\n  const em = (ctx.container.resolve('em') as EntityManager).fork()\n\n  const message = await em.findOne(Message, {\n    id,\n    tenantId: scope.tenantId,\n    deletedAt: null,\n  })\n\n  if (!message) {\n    return { response: Response.json({ error: 'Message not found' }, { status: 404 }) }\n  }\n\n  if (!hasOrganizationAccess(scope.organizationId, message.organizationId)) {\n    return { response: Response.json({ error: 'Access denied' }, { status: 403 }) }\n  }\n\n  const recipient = await em.findOne(MessageRecipient, {\n    messageId: id,\n    recipientUserId: scope.userId,\n    deletedAt: null,\n  })\n\n  if (!recipient) {\n    return { response: Response.json({ error: 'Access denied' }, { status: 403 }) }\n  }\n\n  return { ctx, scope, em, recipient }\n}\n\nexport async function PUT(req: Request, { params }: { params: { id: string } }) {\n  const context = await resolveRecipientContext(req, params.id)\n  if ('response' in context) return context.response\n  const { ctx, scope } = context\n  const commandBus = ctx.container.resolve('commandBus') as CommandBus\n  const { logEntry } = await commandBus.execute('messages.recipients.mark_read', {\n    input: {\n      messageId: params.id,\n      tenantId: scope.tenantId,\n      organizationId: scope.organizationId,\n      userId: scope.userId,\n    },\n    ctx: {\n      container: ctx.container,\n      auth: ctx.auth ?? null,\n      organizationScope: null,\n      selectedOrganizationId: scope.organizationId,\n      organizationIds: scope.organizationId ? [scope.organizationId] : null,\n      request: req,\n    },\n  })\n\n  const response = Response.json({ ok: true })\n  attachOperationMetadataHeader(response, logEntry, {\n    resourceKind: 'messages.message',\n    resourceId: params.id,\n  })\n  return response\n}\n\nexport async function DELETE(req: Request, { params }: { params: { id: string } }) {\n  const context = await resolveRecipientContext(req, params.id)\n  if ('response' in context) return context.response\n  const { ctx, scope } = context\n  const commandBus = ctx.container.resolve('commandBus') as CommandBus\n  const { logEntry } = await commandBus.execute('messages.recipients.mark_unread', {\n    input: {\n      messageId: params.id,\n      tenantId: scope.tenantId,\n      organizationId: scope.organizationId,\n      userId: scope.userId,\n    },\n    ctx: {\n      container: ctx.container,\n      auth: ctx.auth ?? null,\n      organizationScope: null,\n      selectedOrganizationId: scope.organizationId,\n      organizationIds: scope.organizationId ? [scope.organizationId] : null,\n      request: req,\n    },\n  })\n\n  const response = Response.json({ ok: true })\n  attachOperationMetadataHeader(response, logEntry, {\n    resourceKind: 'messages.message',\n    resourceId: params.id,\n  })\n  return response\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Messages',\n  methods: {\n    PUT: {\n      summary: 'Mark message as read',\n      responses: [\n        { status: 200, description: 'Message marked read', schema: okResponseSchema },\n      ],\n      errors: [\n        { status: 403, description: 'Access denied', schema: errorResponseSchema },\n        { status: 404, description: 'Message not found', schema: errorResponseSchema },\n      ],\n    },\n    DELETE: {\n      summary: 'Mark message as unread',\n      responses: [\n        { status: 200, description: 'Message marked unread', schema: okResponseSchema },\n      ],\n      errors: [\n        { status: 403, description: 'Access denied', schema: errorResponseSchema },\n        { status: 404, description: 'Message not found', schema: errorResponseSchema },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAGA,SAAS,SAAS,wBAAwB;AAC1C,SAAS,qCAAqC;AAC9C,SAAS,uBAAuB,6BAA6B;AAE7D,SAAS,qBAAqB,wBAAwB;AAE/C,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,eAAe,EAAE;AAAA,EAC7D,QAAQ,EAAE,aAAa,MAAM,iBAAiB,CAAC,eAAe,EAAE;AAClE;AAIA,eAAe,wBACb,KACA,IAIA;AACA,QAAM,EAAE,KAAK,MAAM,IAAI,MAAM,sBAAsB,GAAG;AACtD,QAAM,KAAM,IAAI,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAE/D,QAAM,UAAU,MAAM,GAAG,QAAQ,SAAS;AAAA,IACxC;AAAA,IACA,UAAU,MAAM;AAAA,IAChB,WAAW;AAAA,EACb,CAAC;AAED,MAAI,CAAC,SAAS;AACZ,WAAO,EAAE,UAAU,SAAS,KAAK,EAAE,OAAO,oBAAoB,GAAG,EAAE,QAAQ,IAAI,CAAC,EAAE;AAAA,EACpF;AAEA,MAAI,CAAC,sBAAsB,MAAM,gBAAgB,QAAQ,cAAc,GAAG;AACxE,WAAO,EAAE,UAAU,SAAS,KAAK,EAAE,OAAO,gBAAgB,GAAG,EAAE,QAAQ,IAAI,CAAC,EAAE;AAAA,EAChF;AAEA,QAAM,YAAY,MAAM,GAAG,QAAQ,kBAAkB;AAAA,IACnD,WAAW;AAAA,IACX,iBAAiB,MAAM;AAAA,IACvB,WAAW;AAAA,EACb,CAAC;AAED,MAAI,CAAC,WAAW;AACd,WAAO,EAAE,UAAU,SAAS,KAAK,EAAE,OAAO,gBAAgB,GAAG,EAAE,QAAQ,IAAI,CAAC,EAAE;AAAA,EAChF;AAEA,SAAO,EAAE,KAAK,OAAO,IAAI,UAAU;AACrC;AAEA,eAAsB,IAAI,KAAc,EAAE,OAAO,GAA+B;AAC9E,QAAM,UAAU,MAAM,wBAAwB,KAAK,OAAO,EAAE;AAC5D,MAAI,cAAc,QAAS,QAAO,QAAQ;AAC1C,QAAM,EAAE,KAAK,MAAM,IAAI;AACvB,QAAM,aAAa,IAAI,UAAU,QAAQ,YAAY;AACrD,QAAM,EAAE,SAAS,IAAI,MAAM,WAAW,QAAQ,iCAAiC;AAAA,IAC7E,OAAO;AAAA,MACL,WAAW,OAAO;AAAA,MAClB,UAAU,MAAM;AAAA,MAChB,gBAAgB,MAAM;AAAA,MACtB,QAAQ,MAAM;AAAA,IAChB;AAAA,IACA,KAAK;AAAA,MACH,WAAW,IAAI;AAAA,MACf,MAAM,IAAI,QAAQ;AAAA,MAClB,mBAAmB;AAAA,MACnB,wBAAwB,MAAM;AAAA,MAC9B,iBAAiB,MAAM,iBAAiB,CAAC,MAAM,cAAc,IAAI;AAAA,MACjE,SAAS;AAAA,IACX;AAAA,EACF,CAAC;AAED,QAAM,WAAW,SAAS,KAAK,EAAE,IAAI,KAAK,CAAC;AAC3C,gCAA8B,UAAU,UAAU;AAAA,IAChD,cAAc;AAAA,IACd,YAAY,OAAO;AAAA,EACrB,CAAC;AACD,SAAO;AACT;AAEA,eAAsB,OAAO,KAAc,EAAE,OAAO,GAA+B;AACjF,QAAM,UAAU,MAAM,wBAAwB,KAAK,OAAO,EAAE;AAC5D,MAAI,cAAc,QAAS,QAAO,QAAQ;AAC1C,QAAM,EAAE,KAAK,MAAM,IAAI;AACvB,QAAM,aAAa,IAAI,UAAU,QAAQ,YAAY;AACrD,QAAM,EAAE,SAAS,IAAI,MAAM,WAAW,QAAQ,mCAAmC;AAAA,IAC/E,OAAO;AAAA,MACL,WAAW,OAAO;AAAA,MAClB,UAAU,MAAM;AAAA,MAChB,gBAAgB,MAAM;AAAA,MACtB,QAAQ,MAAM;AAAA,IAChB;AAAA,IACA,KAAK;AAAA,MACH,WAAW,IAAI;AAAA,MACf,MAAM,IAAI,QAAQ;AAAA,MAClB,mBAAmB;AAAA,MACnB,wBAAwB,MAAM;AAAA,MAC9B,iBAAiB,MAAM,iBAAiB,CAAC,MAAM,cAAc,IAAI;AAAA,MACjE,SAAS;AAAA,IACX;AAAA,EACF,CAAC;AAED,QAAM,WAAW,SAAS,KAAK,EAAE,IAAI,KAAK,CAAC;AAC3C,gCAA8B,UAAU,UAAU;AAAA,IAChD,cAAc;AAAA,IACd,YAAY,OAAO;AAAA,EACrB,CAAC;AACD,SAAO;AACT;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,uBAAuB,QAAQ,iBAAiB;AAAA,MAC9E;AAAA,MACA,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,iBAAiB,QAAQ,oBAAoB;AAAA,QACzE,EAAE,QAAQ,KAAK,aAAa,qBAAqB,QAAQ,oBAAoB;AAAA,MAC/E;AAAA,IACF;AAAA,IACA,QAAQ;AAAA,MACN,SAAS;AAAA,MACT,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,yBAAyB,QAAQ,iBAAiB;AAAA,MAChF;AAAA,MACA,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,iBAAiB,QAAQ,oBAAoB;AAAA,QACzE,EAAE,QAAQ,KAAK,aAAa,qBAAqB,QAAQ,oBAAoB;AAAA,MAC/E;AAAA,IACF;AAAA,EACF;AACF;",
+  "names": []
+}

package/dist/modules/messages/api/[id]/reply/route.js

@@ -0,0 +1,87 @@
+import { replyMessageSchema } from "../../../data/validators.js";
+import { attachOperationMetadataHeader } from "../../../lib/operationMetadata.js";
+import { canUseMessageEmailFeature, resolveMessageContext } from "../../../lib/routeHelpers.js";
+import {
+  errorResponseSchema,
+  forwardResponseSchema,
+  replyMessageSchema as replyOpenApiSchema
+} from "../../openapi.js";
+const metadata = {
+  POST: { requireAuth: true, requireFeatures: ["messages.compose"] }
+};
+async function POST(req, { params }) {
+  const { ctx, scope } = await resolveMessageContext(req);
+  const commandBus = ctx.container.resolve("commandBus");
+  const body = await req.json().catch(() => ({}));
+  const input = replyMessageSchema.parse(body);
+  if (input.sendViaEmail && !await canUseMessageEmailFeature(ctx, scope)) {
+    return Response.json({ error: "Missing feature: messages.email" }, { status: 403 });
+  }
+  let commandResult;
+  try {
+    commandResult = await commandBus.execute("messages.messages.reply", {
+      input: {
+        ...input,
+        messageId: params.id,
+        tenantId: scope.tenantId,
+        organizationId: scope.organizationId,
+        userId: scope.userId
+      },
+      ctx: {
+        container: ctx.container,
+        auth: ctx.auth ?? null,
+        organizationScope: null,
+        selectedOrganizationId: scope.organizationId,
+        organizationIds: scope.organizationId ? [scope.organizationId] : null,
+        request: req
+      }
+    });
+  } catch (error) {
+    if (error instanceof Error) {
+      if (error.message === "Message not found") {
+        return Response.json({ error: "Message not found" }, { status: 404 });
+      }
+      if (error.message === "Access denied") {
+        return Response.json({ error: "Access denied" }, { status: 403 });
+      }
+      if (error.message === "Reply is not allowed for this message type") {
+        return Response.json({ error: "Reply is not allowed for this message type" }, { status: 409 });
+      }
+      if (error.message === "No recipients available for reply") {
+        return Response.json({ error: "No recipients available for reply" }, { status: 409 });
+      }
+    }
+    throw error;
+  }
+  const messageId = commandResult.result.id;
+  const response = Response.json({ id: messageId }, { status: 201 });
+  attachOperationMetadataHeader(response, commandResult.logEntry, {
+    resourceKind: "messages.message",
+    resourceId: messageId
+  });
+  return response;
+}
+const openApi = {
+  tag: "Messages",
+  methods: {
+    POST: {
+      summary: "Reply to message",
+      requestBody: { schema: replyOpenApiSchema },
+      responses: [
+        { status: 201, description: "Reply created", schema: forwardResponseSchema }
+      ],
+      errors: [
+        { status: 403, description: "Access denied", schema: errorResponseSchema },
+        { status: 404, description: "Message not found", schema: errorResponseSchema },
+        { status: 409, description: "Reply not allowed for message type", schema: errorResponseSchema },
+        { status: 409, description: "No recipients available for reply", schema: errorResponseSchema }
+      ]
+    }
+  }
+};
+export {
+  POST,
+  metadata,
+  openApi
+};
+//# sourceMappingURL=route.js.map

package/dist/modules/messages/api/[id]/reply/route.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../../src/modules/messages/api/%5Bid%5D/reply/route.ts"],
+  "sourcesContent": ["import type { CommandBus } from '@open-mercato/shared/lib/commands/command-bus'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi/types'\nimport { replyMessageSchema } from '../../../data/validators'\nimport { attachOperationMetadataHeader } from '../../../lib/operationMetadata'\nimport { canUseMessageEmailFeature, resolveMessageContext } from '../../../lib/routeHelpers'\nimport {\n  errorResponseSchema,\n  forwardResponseSchema,\n  replyMessageSchema as replyOpenApiSchema,\n} from '../../openapi'\nimport { MessageCommandExecuteResult } from '../../../commands/shared'\n\nexport const metadata = {\n  POST: { requireAuth: true, requireFeatures: ['messages.compose'] },\n}\n\nexport async function POST(req: Request, { params }: { params: { id: string } }) {\n  const { ctx, scope } = await resolveMessageContext(req)\n  const commandBus = ctx.container.resolve('commandBus') as CommandBus\n  const body = await req.json().catch(() => ({}))\n  const input = replyMessageSchema.parse(body)\n  if (input.sendViaEmail && !(await canUseMessageEmailFeature(ctx, scope))) {\n    return Response.json({ error: 'Missing feature: messages.email' }, { status: 403 })\n  }\n\n  let commandResult\n  try {\n    commandResult = await commandBus.execute<unknown, MessageCommandExecuteResult>('messages.messages.reply', {\n      input: {\n        ...input,\n        messageId: params.id,\n        tenantId: scope.tenantId,\n        organizationId: scope.organizationId,\n        userId: scope.userId,\n      },\n      ctx: {\n        container: ctx.container,\n        auth: ctx.auth ?? null,\n        organizationScope: null,\n        selectedOrganizationId: scope.organizationId,\n        organizationIds: scope.organizationId ? [scope.organizationId] : null,\n        request: req,\n      },\n    })\n  } catch (error) {\n    if (error instanceof Error) {\n      if (error.message === 'Message not found') {\n        return Response.json({ error: 'Message not found' }, { status: 404 })\n      }\n      if (error.message === 'Access denied') {\n        return Response.json({ error: 'Access denied' }, { status: 403 })\n      }\n      if (error.message === 'Reply is not allowed for this message type') {\n        return Response.json({ error: 'Reply is not allowed for this message type' }, { status: 409 })\n      }\n      if (error.message === 'No recipients available for reply') {\n        return Response.json({ error: 'No recipients available for reply' }, { status: 409 })\n      }\n    }\n    throw error\n  }\n  const messageId = commandResult.result.id\n\n  const response = Response.json({ id: messageId }, { status: 201 })\n  attachOperationMetadataHeader(response, commandResult.logEntry, {\n    resourceKind: 'messages.message',\n    resourceId: messageId,\n  })\n  return response\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Messages',\n  methods: {\n    POST: {\n      summary: 'Reply to message',\n      requestBody: { schema: replyOpenApiSchema },\n      responses: [\n        { status: 201, description: 'Reply created', schema: forwardResponseSchema },\n      ],\n      errors: [\n        { status: 403, description: 'Access denied', schema: errorResponseSchema },\n        { status: 404, description: 'Message not found', schema: errorResponseSchema },\n        { status: 409, description: 'Reply not allowed for message type', schema: errorResponseSchema },\n        { status: 409, description: 'No recipients available for reply', schema: errorResponseSchema },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAEA,SAAS,0BAA0B;AACnC,SAAS,qCAAqC;AAC9C,SAAS,2BAA2B,6BAA6B;AACjE;AAAA,EACE;AAAA,EACA;AAAA,EACA,sBAAsB;AAAA,OACjB;AAGA,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,kBAAkB,EAAE;AACnE;AAEA,eAAsB,KAAK,KAAc,EAAE,OAAO,GAA+B;AAC/E,QAAM,EAAE,KAAK,MAAM,IAAI,MAAM,sBAAsB,GAAG;AACtD,QAAM,aAAa,IAAI,UAAU,QAAQ,YAAY;AACrD,QAAM,OAAO,MAAM,IAAI,KAAK,EAAE,MAAM,OAAO,CAAC,EAAE;AAC9C,QAAM,QAAQ,mBAAmB,MAAM,IAAI;AAC3C,MAAI,MAAM,gBAAgB,CAAE,MAAM,0BAA0B,KAAK,KAAK,GAAI;AACxE,WAAO,SAAS,KAAK,EAAE,OAAO,kCAAkC,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACpF;AAEA,MAAI;AACJ,MAAI;AACF,oBAAgB,MAAM,WAAW,QAA8C,2BAA2B;AAAA,MACxG,OAAO;AAAA,QACL,GAAG;AAAA,QACH,WAAW,OAAO;AAAA,QAClB,UAAU,MAAM;AAAA,QAChB,gBAAgB,MAAM;AAAA,QACtB,QAAQ,MAAM;AAAA,MAChB;AAAA,MACA,KAAK;AAAA,QACH,WAAW,IAAI;AAAA,QACf,MAAM,IAAI,QAAQ;AAAA,QAClB,mBAAmB;AAAA,QACnB,wBAAwB,MAAM;AAAA,QAC9B,iBAAiB,MAAM,iBAAiB,CAAC,MAAM,cAAc,IAAI;AAAA,QACjE,SAAS;AAAA,MACX;AAAA,IACF,CAAC;AAAA,EACH,SAAS,OAAO;AACd,QAAI,iBAAiB,OAAO;AAC1B,UAAI,MAAM,YAAY,qBAAqB;AACzC,eAAO,SAAS,KAAK,EAAE,OAAO,oBAAoB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,MACtE;AACA,UAAI,MAAM,YAAY,iBAAiB;AACrC,eAAO,SAAS,KAAK,EAAE,OAAO,gBAAgB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,MAClE;AACA,UAAI,MAAM,YAAY,8CAA8C;AAClE,eAAO,SAAS,KAAK,EAAE,OAAO,6CAA6C,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,MAC/F;AACA,UAAI,MAAM,YAAY,qCAAqC;AACzD,eAAO,SAAS,KAAK,EAAE,OAAO,oCAAoC,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,MACtF;AAAA,IACF;AACA,UAAM;AAAA,EACR;AACA,QAAM,YAAY,cAAc,OAAO;AAEvC,QAAM,WAAW,SAAS,KAAK,EAAE,IAAI,UAAU,GAAG,EAAE,QAAQ,IAAI,CAAC;AACjE,gCAA8B,UAAU,cAAc,UAAU;AAAA,IAC9D,cAAc;AAAA,IACd,YAAY;AAAA,EACd,CAAC;AACD,SAAO;AACT;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aAAa,EAAE,QAAQ,mBAAmB;AAAA,MAC1C,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,iBAAiB,QAAQ,sBAAsB;AAAA,MAC7E;AAAA,MACA,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,iBAAiB,QAAQ,oBAAoB;AAAA,QACzE,EAAE,QAAQ,KAAK,aAAa,qBAAqB,QAAQ,oBAAoB;AAAA,QAC7E,EAAE,QAAQ,KAAK,aAAa,sCAAsC,QAAQ,oBAAoB;AAAA,QAC9F,EAAE,QAAQ,KAAK,aAAa,qCAAqC,QAAQ,oBAAoB;AAAA,MAC/F;AAAA,IACF;AAAA,EACF;AACF;",
+  "names": []
+}