@open-mercato/core 0.4.5-develop-5191db4ef3 → 0.4.5-develop-033a719bf2

package/dist/modules/messages/api/token/[token]/route.js

@@ -0,0 +1,99 @@
+import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
+import { Message, MessageObject } from "../../../data/entities.js";
+import { messageTokenResponseSchema } from "../../openapi.js";
+const metadata = {
+  GET: { requireAuth: false }
+};
+async function GET(_req, { params }) {
+  const container = await createRequestContainer();
+  const commandBus = container.resolve("commandBus");
+  const em = container.resolve("em");
+  let commandResult;
+  try {
+    const executed = await commandBus.execute("messages.tokens.consume", {
+      input: { token: params.token },
+      ctx: {
+        container,
+        auth: null,
+        organizationScope: null,
+        selectedOrganizationId: null,
+        organizationIds: null
+      }
+    });
+    commandResult = executed.result;
+  } catch (error) {
+    if (error instanceof Error) {
+      if (error.message === "Invalid or expired link") {
+        return Response.json({ error: "Invalid or expired link" }, { status: 404 });
+      }
+      if (error.message === "This link has expired") {
+        return Response.json({ error: "This link has expired" }, { status: 410 });
+      }
+      if (error.message === "This link can no longer be used") {
+        return Response.json({ error: "This link can no longer be used" }, { status: 409 });
+      }
+      if (error.message === "Message not found") {
+        return Response.json({ error: "Message not found" }, { status: 404 });
+      }
+    }
+    throw error;
+  }
+  const message = await em.findOne(Message, {
+    id: commandResult.messageId,
+    deletedAt: null
+  });
+  if (!message) {
+    return Response.json({ error: "Message not found" }, { status: 404 });
+  }
+  const objects = await em.find(MessageObject, { messageId: message.id });
+  return Response.json({
+    id: message.id,
+    type: message.type,
+    subject: message.subject,
+    body: message.body,
+    bodyFormat: message.bodyFormat,
+    priority: message.priority,
+    senderUserId: message.senderUserId,
+    sentAt: message.sentAt,
+    actionData: message.actionData,
+    actionTaken: message.actionTaken,
+    actionTakenAt: message.actionTakenAt,
+    actionTakenByUserId: message.actionTakenByUserId,
+    objects: objects.map((item) => ({
+      id: item.id,
+      entityModule: item.entityModule,
+      entityType: item.entityType,
+      entityId: item.entityId,
+      actionRequired: item.actionRequired,
+      actionType: item.actionType,
+      actionLabel: item.actionLabel,
+      snapshot: item.entitySnapshot
+    })),
+    requiresAuth: objects.some((item) => item.actionRequired),
+    recipientUserId: commandResult.recipientUserId
+  });
+}
+const openApi = {
+  tag: "Messages",
+  methods: {
+    GET: {
+      summary: "Access message via token",
+      responses: [
+        {
+          status: 200,
+          description: "Message detail via token",
+          schema: messageTokenResponseSchema
+        },
+        { status: 404, description: "Invalid or expired link" },
+        { status: 409, description: "Token usage exceeded" },
+        { status: 410, description: "Token expired" }
+      ]
+    }
+  }
+};
+export {
+  GET,
+  metadata,
+  openApi
+};
+//# sourceMappingURL=route.js.map

package/dist/modules/messages/api/token/[token]/route.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../../src/modules/messages/api/token/%5Btoken%5D/route.ts"],
+  "sourcesContent": ["import type { CommandBus } from '@open-mercato/shared/lib/commands/command-bus'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi/types'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { Message, MessageObject } from '../../../data/entities'\nimport { messageTokenResponseSchema } from '../../openapi'\n\nexport const metadata = {\n  GET: { requireAuth: false },\n}\n\nexport async function GET(_req: Request, { params }: { params: { token: string } }) {\n  const container = await createRequestContainer()\n  const commandBus = container.resolve('commandBus') as CommandBus\n  const em = container.resolve('em') as EntityManager\n\n  let commandResult: { messageId: string; recipientUserId: string }\n  try {\n    const executed = await commandBus.execute<unknown, { messageId: string; recipientUserId: string }>('messages.tokens.consume', {\n      input: { token: params.token },\n      ctx: {\n        container,\n        auth: null,\n        organizationScope: null,\n        selectedOrganizationId: null,\n        organizationIds: null,\n      },\n    })\n    commandResult = executed.result\n  } catch (error) {\n    if (error instanceof Error) {\n      if (error.message === 'Invalid or expired link') {\n        return Response.json({ error: 'Invalid or expired link' }, { status: 404 })\n      }\n      if (error.message === 'This link has expired') {\n        return Response.json({ error: 'This link has expired' }, { status: 410 })\n      }\n      if (error.message === 'This link can no longer be used') {\n        return Response.json({ error: 'This link can no longer be used' }, { status: 409 })\n      }\n      if (error.message === 'Message not found') {\n        return Response.json({ error: 'Message not found' }, { status: 404 })\n      }\n    }\n    throw error\n  }\n\n  const message = await em.findOne(Message, {\n    id: commandResult.messageId,\n    deletedAt: null,\n  })\n  if (!message) {\n    return Response.json({ error: 'Message not found' }, { status: 404 })\n  }\n\n  const objects = await em.find(MessageObject, { messageId: message.id })\n\n  return Response.json({\n    id: message.id,\n    type: message.type,\n    subject: message.subject,\n    body: message.body,\n    bodyFormat: message.bodyFormat,\n    priority: message.priority,\n    senderUserId: message.senderUserId,\n    sentAt: message.sentAt,\n    actionData: message.actionData,\n    actionTaken: message.actionTaken,\n    actionTakenAt: message.actionTakenAt,\n    actionTakenByUserId: message.actionTakenByUserId,\n    objects: objects.map((item) => ({\n      id: item.id,\n      entityModule: item.entityModule,\n      entityType: item.entityType,\n      entityId: item.entityId,\n      actionRequired: item.actionRequired,\n      actionType: item.actionType,\n      actionLabel: item.actionLabel,\n      snapshot: item.entitySnapshot,\n    })),\n    requiresAuth: objects.some((item) => item.actionRequired),\n    recipientUserId: commandResult.recipientUserId,\n  })\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Messages',\n  methods: {\n    GET: {\n      summary: 'Access message via token',\n      responses: [\n        {\n          status: 200,\n          description: 'Message detail via token',\n          schema: messageTokenResponseSchema,\n        },\n        { status: 404, description: 'Invalid or expired link' },\n        { status: 409, description: 'Token usage exceeded' },\n        { status: 410, description: 'Token expired' },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AACA,SAAS,8BAA8B;AAGvC,SAAS,SAAS,qBAAqB;AACvC,SAAS,kCAAkC;AAEpC,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM;AAC5B;AAEA,eAAsB,IAAI,MAAe,EAAE,OAAO,GAAkC;AAClF,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,aAAa,UAAU,QAAQ,YAAY;AACjD,QAAM,KAAK,UAAU,QAAQ,IAAI;AAEjC,MAAI;AACJ,MAAI;AACF,UAAM,WAAW,MAAM,WAAW,QAAiE,2BAA2B;AAAA,MAC5H,OAAO,EAAE,OAAO,OAAO,MAAM;AAAA,MAC7B,KAAK;AAAA,QACH;AAAA,QACA,MAAM;AAAA,QACN,mBAAmB;AAAA,QACnB,wBAAwB;AAAA,QACxB,iBAAiB;AAAA,MACnB;AAAA,IACF,CAAC;AACD,oBAAgB,SAAS;AAAA,EAC3B,SAAS,OAAO;AACd,QAAI,iBAAiB,OAAO;AAC1B,UAAI,MAAM,YAAY,2BAA2B;AAC/C,eAAO,SAAS,KAAK,EAAE,OAAO,0BAA0B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,MAC5E;AACA,UAAI,MAAM,YAAY,yBAAyB;AAC7C,eAAO,SAAS,KAAK,EAAE,OAAO,wBAAwB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,MAC1E;AACA,UAAI,MAAM,YAAY,mCAAmC;AACvD,eAAO,SAAS,KAAK,EAAE,OAAO,kCAAkC,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,MACpF;AACA,UAAI,MAAM,YAAY,qBAAqB;AACzC,eAAO,SAAS,KAAK,EAAE,OAAO,oBAAoB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,MACtE;AAAA,IACF;AACA,UAAM;AAAA,EACR;AAEA,QAAM,UAAU,MAAM,GAAG,QAAQ,SAAS;AAAA,IACxC,IAAI,cAAc;AAAA,IAClB,WAAW;AAAA,EACb,CAAC;AACD,MAAI,CAAC,SAAS;AACZ,WAAO,SAAS,KAAK,EAAE,OAAO,oBAAoB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACtE;AAEA,QAAM,UAAU,MAAM,GAAG,KAAK,eAAe,EAAE,WAAW,QAAQ,GAAG,CAAC;AAEtE,SAAO,SAAS,KAAK;AAAA,IACnB,IAAI,QAAQ;AAAA,IACZ,MAAM,QAAQ;AAAA,IACd,SAAS,QAAQ;AAAA,IACjB,MAAM,QAAQ;AAAA,IACd,YAAY,QAAQ;AAAA,IACpB,UAAU,QAAQ;AAAA,IAClB,cAAc,QAAQ;AAAA,IACtB,QAAQ,QAAQ;AAAA,IAChB,YAAY,QAAQ;AAAA,IACpB,aAAa,QAAQ;AAAA,IACrB,eAAe,QAAQ;AAAA,IACvB,qBAAqB,QAAQ;AAAA,IAC7B,SAAS,QAAQ,IAAI,CAAC,UAAU;AAAA,MAC9B,IAAI,KAAK;AAAA,MACT,cAAc,KAAK;AAAA,MACnB,YAAY,KAAK;AAAA,MACjB,UAAU,KAAK;AAAA,MACf,gBAAgB,KAAK;AAAA,MACrB,YAAY,KAAK;AAAA,MACjB,aAAa,KAAK;AAAA,MAClB,UAAU,KAAK;AAAA,IACjB,EAAE;AAAA,IACF,cAAc,QAAQ,KAAK,CAAC,SAAS,KAAK,cAAc;AAAA,IACxD,iBAAiB,cAAc;AAAA,EACjC,CAAC;AACH;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ;AAAA,QACV;AAAA,QACA,EAAE,QAAQ,KAAK,aAAa,0BAA0B;AAAA,QACtD,EAAE,QAAQ,KAAK,aAAa,uBAAuB;AAAA,QACnD,EAAE,QAAQ,KAAK,aAAa,gBAAgB;AAAA,MAC9C;AAAA,IACF;AAAA,EACF;AACF;",
+  "names": []
+}

package/dist/modules/messages/api/types/route.js

@@ -0,0 +1,40 @@
+import { getAllMessageTypes } from "../../lib/message-types-registry.js";
+import { messageTypeListResponseSchema } from "../openapi.js";
+const metadata = {
+  GET: { requireAuth: true, requireFeatures: ["messages.view"] }
+};
+async function GET() {
+  const items = getAllMessageTypes().map((type) => ({
+    type: type.type,
+    module: type.module,
+    labelKey: type.labelKey,
+    icon: type.icon,
+    color: type.color ?? null,
+    allowReply: type.allowReply ?? true,
+    allowForward: type.allowForward ?? true,
+    actionsExpireAfterHours: type.actionsExpireAfterHours ?? null,
+    ui: {
+      listItemComponent: type.ui?.listItemComponent ?? null,
+      contentComponent: type.ui?.contentComponent ?? null,
+      actionsComponent: type.ui?.actionsComponent ?? null
+    }
+  }));
+  return Response.json({ items });
+}
+const openApi = {
+  tag: "Messages",
+  methods: {
+    GET: {
+      summary: "List registered message types",
+      responses: [
+        { status: 200, description: "Message types", schema: messageTypeListResponseSchema }
+      ]
+    }
+  }
+};
+export {
+  GET,
+  metadata,
+  openApi
+};
+//# sourceMappingURL=route.js.map

package/dist/modules/messages/api/types/route.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../src/modules/messages/api/types/route.ts"],
+  "sourcesContent": ["import type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi/types'\nimport { getAllMessageTypes } from '../../lib/message-types-registry'\nimport { messageTypeListResponseSchema } from '../openapi'\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['messages.view'] },\n}\n\nexport async function GET() {\n  const items = getAllMessageTypes().map((type) => ({\n    type: type.type,\n    module: type.module,\n    labelKey: type.labelKey,\n    icon: type.icon,\n    color: type.color ?? null,\n    allowReply: type.allowReply ?? true,\n    allowForward: type.allowForward ?? true,\n    actionsExpireAfterHours: type.actionsExpireAfterHours ?? null,\n    ui: {\n      listItemComponent: type.ui?.listItemComponent ?? null,\n      contentComponent: type.ui?.contentComponent ?? null,\n      actionsComponent: type.ui?.actionsComponent ?? null,\n    },\n  }))\n\n  return Response.json({ items })\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Messages',\n  methods: {\n    GET: {\n      summary: 'List registered message types',\n      responses: [\n        { status: 200, description: 'Message types', schema: messageTypeListResponseSchema },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AACA,SAAS,0BAA0B;AACnC,SAAS,qCAAqC;AAEvC,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,eAAe,EAAE;AAC/D;AAEA,eAAsB,MAAM;AAC1B,QAAM,QAAQ,mBAAmB,EAAE,IAAI,CAAC,UAAU;AAAA,IAChD,MAAM,KAAK;AAAA,IACX,QAAQ,KAAK;AAAA,IACb,UAAU,KAAK;AAAA,IACf,MAAM,KAAK;AAAA,IACX,OAAO,KAAK,SAAS;AAAA,IACrB,YAAY,KAAK,cAAc;AAAA,IAC/B,cAAc,KAAK,gBAAgB;AAAA,IACnC,yBAAyB,KAAK,2BAA2B;AAAA,IACzD,IAAI;AAAA,MACF,mBAAmB,KAAK,IAAI,qBAAqB;AAAA,MACjD,kBAAkB,KAAK,IAAI,oBAAoB;AAAA,MAC/C,kBAAkB,KAAK,IAAI,oBAAoB;AAAA,IACjD;AAAA,EACF,EAAE;AAEF,SAAO,SAAS,KAAK,EAAE,MAAM,CAAC;AAChC;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,iBAAiB,QAAQ,8BAA8B;AAAA,MACrF;AAAA,IACF;AAAA,EACF;AACF;",
+  "names": []
+}

package/dist/modules/messages/api/unread-count/route.js

@@ -0,0 +1,43 @@
+import { resolveMessageContext } from "../../lib/routeHelpers.js";
+import { unreadCountResponseSchema } from "../openapi.js";
+const metadata = {
+  GET: { requireAuth: true, requireFeatures: ["messages.view"] }
+};
+function getKnex(em) {
+  return em.getConnection().getKnex();
+}
+async function GET(req) {
+  const { ctx, scope } = await resolveMessageContext(req);
+  const em = ctx.container.resolve("em");
+  const knex = getKnex(em);
+  let query = knex("message_recipients as r").join("messages as m", "m.id", "r.message_id").where("r.recipient_user_id", scope.userId).where("r.status", "unread").whereNull("r.deleted_at").whereNull("r.archived_at").where("m.tenant_id", scope.tenantId).whereNull("m.deleted_at");
+  if (scope.organizationId) {
+    query = query.where("m.organization_id", scope.organizationId);
+  } else {
+    query = query.whereNull("m.organization_id");
+  }
+  const row = await query.count("* as count").first();
+  const count = Number(row?.count ?? 0);
+  return Response.json({ unreadCount: count });
+}
+const openApi = {
+  tag: "Messages",
+  methods: {
+    GET: {
+      summary: "Get unread message count",
+      responses: [
+        {
+          status: 200,
+          description: "Unread count",
+          schema: unreadCountResponseSchema
+        }
+      ]
+    }
+  }
+};
+export {
+  GET,
+  metadata,
+  openApi
+};
+//# sourceMappingURL=route.js.map

package/dist/modules/messages/api/unread-count/route.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../src/modules/messages/api/unread-count/route.ts"],
+  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport type { Knex } from 'knex'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi/types'\nimport { resolveMessageContext } from '../../lib/routeHelpers'\nimport { unreadCountResponseSchema } from '../openapi'\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['messages.view'] },\n}\n\nfunction getKnex(em: EntityManager): Knex {\n  return (em.getConnection() as unknown as { getKnex: () => Knex }).getKnex()\n}\n\nexport async function GET(req: Request) {\n  const { ctx, scope } = await resolveMessageContext(req)\n  const em = ctx.container.resolve('em') as EntityManager\n  const knex = getKnex(em)\n\n  let query = knex('message_recipients as r')\n    .join('messages as m', 'm.id', 'r.message_id')\n    .where('r.recipient_user_id', scope.userId)\n    .where('r.status', 'unread')\n    .whereNull('r.deleted_at')\n    .whereNull('r.archived_at')\n    .where('m.tenant_id', scope.tenantId)\n    .whereNull('m.deleted_at')\n\n  if (scope.organizationId) {\n    query = query.where('m.organization_id', scope.organizationId)\n  } else {\n    query = query.whereNull('m.organization_id')\n  }\n\n  const row = await query.count('* as count').first<{ count: string | number }>()\n  const count = Number(row?.count ?? 0)\n\n  return Response.json({ unreadCount: count })\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Messages',\n  methods: {\n    GET: {\n      summary: 'Get unread message count',\n      responses: [\n        {\n          status: 200,\n          description: 'Unread count',\n          schema: unreadCountResponseSchema,\n        },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAGA,SAAS,6BAA6B;AACtC,SAAS,iCAAiC;AAEnC,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,eAAe,EAAE;AAC/D;AAEA,SAAS,QAAQ,IAAyB;AACxC,SAAQ,GAAG,cAAc,EAAyC,QAAQ;AAC5E;AAEA,eAAsB,IAAI,KAAc;AACtC,QAAM,EAAE,KAAK,MAAM,IAAI,MAAM,sBAAsB,GAAG;AACtD,QAAM,KAAK,IAAI,UAAU,QAAQ,IAAI;AACrC,QAAM,OAAO,QAAQ,EAAE;AAEvB,MAAI,QAAQ,KAAK,yBAAyB,EACvC,KAAK,iBAAiB,QAAQ,cAAc,EAC5C,MAAM,uBAAuB,MAAM,MAAM,EACzC,MAAM,YAAY,QAAQ,EAC1B,UAAU,cAAc,EACxB,UAAU,eAAe,EACzB,MAAM,eAAe,MAAM,QAAQ,EACnC,UAAU,cAAc;AAE3B,MAAI,MAAM,gBAAgB;AACxB,YAAQ,MAAM,MAAM,qBAAqB,MAAM,cAAc;AAAA,EAC/D,OAAO;AACL,YAAQ,MAAM,UAAU,mBAAmB;AAAA,EAC7C;AAEA,QAAM,MAAM,MAAM,MAAM,MAAM,YAAY,EAAE,MAAkC;AAC9E,QAAM,QAAQ,OAAO,KAAK,SAAS,CAAC;AAEpC,SAAO,SAAS,KAAK,EAAE,aAAa,MAAM,CAAC;AAC7C;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;",
+  "names": []
+}

package/dist/modules/messages/backend/messages/[id]/page.js

@@ -0,0 +1,10 @@
+import { jsx } from "react/jsx-runtime";
+import { Page, PageBody } from "@open-mercato/ui/backend/Page";
+import { MessageDetailPageClient } from "../../../components/MessageDetailPageClient.js";
+function MessageDetailPage({ params }) {
+  return /* @__PURE__ */ jsx(Page, { children: /* @__PURE__ */ jsx(PageBody, { children: /* @__PURE__ */ jsx(MessageDetailPageClient, { id: params.id }) }) });
+}
+export {
+  MessageDetailPage as default
+};
+//# sourceMappingURL=page.js.map

package/dist/modules/messages/backend/messages/[id]/page.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../../src/modules/messages/backend/messages/%5Bid%5D/page.tsx"],
+  "sourcesContent": ["import { Page, PageBody } from '@open-mercato/ui/backend/Page'\nimport { MessageDetailPageClient } from '../../../components/MessageDetailPageClient'\n\nexport default function MessageDetailPage({ params }: { params: { id: string } }) {\n  return (\n    <Page>\n      <PageBody>\n        <MessageDetailPageClient id={params.id} />\n      </PageBody>\n    </Page>\n  )\n}\n"],
+  "mappings": "AAOQ;AAPR,SAAS,MAAM,gBAAgB;AAC/B,SAAS,+BAA+B;AAEzB,SAAR,kBAAmC,EAAE,OAAO,GAA+B;AAChF,SACE,oBAAC,QACC,8BAAC,YACC,8BAAC,2BAAwB,IAAI,OAAO,IAAI,GAC1C,GACF;AAEJ;",
+  "names": []
+}

package/dist/modules/messages/backend/messages/[id]/page.meta.js

@@ -0,0 +1,16 @@
+const metadata = {
+  requireAuth: true,
+  requireFeatures: ["messages.view"],
+  pageTitle: "Message details",
+  pageTitleKey: "messages.nav.detail",
+  pageGroup: "Messages",
+  pageGroupKey: "messages.nav.group",
+  navHidden: true,
+  breadcrumb: [
+    { label: "Messages", labelKey: "messages.nav.inbox", href: "/backend/messages" }
+  ]
+};
+export {
+  metadata
+};
+//# sourceMappingURL=page.meta.js.map

package/dist/modules/messages/backend/messages/[id]/page.meta.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../../src/modules/messages/backend/messages/%5Bid%5D/page.meta.ts"],
+  "sourcesContent": ["export const metadata = {\n  requireAuth: true,\n  requireFeatures: ['messages.view'],\n  pageTitle: 'Message details',\n  pageTitleKey: 'messages.nav.detail',\n  pageGroup: 'Messages',\n  pageGroupKey: 'messages.nav.group',\n  navHidden: true,\n  breadcrumb: [\n    { label: 'Messages', labelKey: 'messages.nav.inbox', href: '/backend/messages' },\n  ],\n} as const\n"],
+  "mappings": "AAAO,MAAM,WAAW;AAAA,EACtB,aAAa;AAAA,EACb,iBAAiB,CAAC,eAAe;AAAA,EACjC,WAAW;AAAA,EACX,cAAc;AAAA,EACd,WAAW;AAAA,EACX,cAAc;AAAA,EACd,WAAW;AAAA,EACX,YAAY;AAAA,IACV,EAAE,OAAO,YAAY,UAAU,sBAAsB,MAAM,oBAAoB;AAAA,EACjF;AACF;",
+  "names": []
+}

package/dist/modules/messages/backend/messages/compose/page.js

@@ -0,0 +1,10 @@
+import { jsx } from "react/jsx-runtime";
+import { Page, PageBody } from "@open-mercato/ui/backend/Page";
+import { ComposeMessagePageClient } from "../../../components/ComposeMessagePageClient.js";
+function ComposeMessagePage() {
+  return /* @__PURE__ */ jsx(Page, { children: /* @__PURE__ */ jsx(PageBody, { children: /* @__PURE__ */ jsx(ComposeMessagePageClient, {}) }) });
+}
+export {
+  ComposeMessagePage as default
+};
+//# sourceMappingURL=page.js.map

package/dist/modules/messages/backend/messages/compose/page.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../../src/modules/messages/backend/messages/compose/page.tsx"],
+  "sourcesContent": ["import { Page, PageBody } from '@open-mercato/ui/backend/Page'\nimport { ComposeMessagePageClient } from '../../../components/ComposeMessagePageClient'\n\nexport default function ComposeMessagePage() {\n  return (\n    <Page>\n      <PageBody>\n        <ComposeMessagePageClient />\n      </PageBody>\n    </Page>\n  )\n}\n"],
+  "mappings": "AAOQ;AAPR,SAAS,MAAM,gBAAgB;AAC/B,SAAS,gCAAgC;AAE1B,SAAR,qBAAsC;AAC3C,SACE,oBAAC,QACC,8BAAC,YACC,8BAAC,4BAAyB,GAC5B,GACF;AAEJ;",
+  "names": []
+}

package/dist/modules/messages/backend/messages/compose/page.meta.js

@@ -0,0 +1,17 @@
+const metadata = {
+  requireAuth: true,
+  requireFeatures: ["messages.compose"],
+  pageTitle: "Compose message",
+  pageTitleKey: "messages.nav.compose",
+  pageGroup: "Messages",
+  pageGroupKey: "messages.nav.group",
+  navHidden: true,
+  breadcrumb: [
+    { label: "Messages", labelKey: "messages.nav.inbox", href: "/backend/messages" },
+    { label: "Compose", labelKey: "messages.nav.compose" }
+  ]
+};
+export {
+  metadata
+};
+//# sourceMappingURL=page.meta.js.map

package/dist/modules/messages/backend/messages/compose/page.meta.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../../src/modules/messages/backend/messages/compose/page.meta.ts"],
+  "sourcesContent": ["export const metadata = {\n  requireAuth: true,\n  requireFeatures: ['messages.compose'],\n  pageTitle: 'Compose message',\n  pageTitleKey: 'messages.nav.compose',\n  pageGroup: 'Messages',\n  pageGroupKey: 'messages.nav.group',\n  navHidden: true,\n  breadcrumb: [\n    { label: 'Messages', labelKey: 'messages.nav.inbox', href: '/backend/messages' },\n    { label: 'Compose', labelKey: 'messages.nav.compose' },\n  ],\n} as const\n"],
+  "mappings": "AAAO,MAAM,WAAW;AAAA,EACtB,aAAa;AAAA,EACb,iBAAiB,CAAC,kBAAkB;AAAA,EACpC,WAAW;AAAA,EACX,cAAc;AAAA,EACd,WAAW;AAAA,EACX,cAAc;AAAA,EACd,WAAW;AAAA,EACX,YAAY;AAAA,IACV,EAAE,OAAO,YAAY,UAAU,sBAAsB,MAAM,oBAAoB;AAAA,IAC/E,EAAE,OAAO,WAAW,UAAU,uBAAuB;AAAA,EACvD;AACF;",
+  "names": []
+}

package/dist/modules/messages/backend/page.js

@@ -0,0 +1,10 @@
+import { jsx } from "react/jsx-runtime";
+import { Page, PageBody } from "@open-mercato/ui/backend/Page";
+import { MessagesInboxPageClient } from "../components/MessagesInboxPageClient.js";
+function MessagesInboxPage() {
+  return /* @__PURE__ */ jsx(Page, { children: /* @__PURE__ */ jsx(PageBody, { children: /* @__PURE__ */ jsx(MessagesInboxPageClient, {}) }) });
+}
+export {
+  MessagesInboxPage as default
+};
+//# sourceMappingURL=page.js.map

package/dist/modules/messages/backend/page.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/messages/backend/page.tsx"],
+  "sourcesContent": ["import { Page, PageBody } from '@open-mercato/ui/backend/Page'\nimport { MessagesInboxPageClient } from '../components/MessagesInboxPageClient'\n\nexport default function MessagesInboxPage() {\n  return (\n    <Page>\n      <PageBody>\n        <MessagesInboxPageClient />\n      </PageBody>\n    </Page>\n  )\n}\n"],
+  "mappings": "AAOQ;AAPR,SAAS,MAAM,gBAAgB;AAC/B,SAAS,+BAA+B;AAEzB,SAAR,oBAAqC;AAC1C,SACE,oBAAC,QACC,8BAAC,YACC,8BAAC,2BAAwB,GAC3B,GACF;AAEJ;",
+  "names": []
+}

package/dist/modules/messages/backend/page.meta.js

@@ -0,0 +1,33 @@
+import React from "react";
+const mailIcon = React.createElement(
+  "svg",
+  {
+    width: 16,
+    height: 16,
+    viewBox: "0 0 24 24",
+    fill: "none",
+    stroke: "currentColor",
+    strokeWidth: 2,
+    strokeLinecap: "round",
+    strokeLinejoin: "round"
+  },
+  React.createElement("rect", { x: 2, y: 4, width: 20, height: 16, rx: 2 }),
+  React.createElement("path", { d: "m22 7-8.97 5.7a2 2 0 0 1-2.06 0L2 7" })
+);
+const metadata = {
+  requireAuth: true,
+  requireFeatures: ["messages.view"],
+  pageTitle: "Messages",
+  pageTitleKey: "messages.nav.inbox",
+  pageGroup: "Messages",
+  pageGroupKey: "messages.nav.group",
+  pageOrder: 460,
+  icon: mailIcon,
+  breadcrumb: [
+    { label: "Messages", labelKey: "messages.nav.inbox" }
+  ]
+};
+export {
+  metadata
+};
+//# sourceMappingURL=page.meta.js.map

package/dist/modules/messages/backend/page.meta.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/messages/backend/page.meta.ts"],
+  "sourcesContent": ["import React from 'react'\n\nconst mailIcon = React.createElement(\n  'svg',\n  {\n    width: 16,\n    height: 16,\n    viewBox: '0 0 24 24',\n    fill: 'none',\n    stroke: 'currentColor',\n    strokeWidth: 2,\n    strokeLinecap: 'round',\n    strokeLinejoin: 'round',\n  },\n  React.createElement('rect', { x: 2, y: 4, width: 20, height: 16, rx: 2 }),\n  React.createElement('path', { d: 'm22 7-8.97 5.7a2 2 0 0 1-2.06 0L2 7' }),\n)\n\nexport const metadata = {\n  requireAuth: true,\n  requireFeatures: ['messages.view'],\n  pageTitle: 'Messages',\n  pageTitleKey: 'messages.nav.inbox',\n  pageGroup: 'Messages',\n  pageGroupKey: 'messages.nav.group',\n  pageOrder: 460,\n  icon: mailIcon,\n  breadcrumb: [\n    { label: 'Messages', labelKey: 'messages.nav.inbox' },\n  ],\n} as const\n"],
+  "mappings": "AAAA,OAAO,WAAW;AAElB,MAAM,WAAW,MAAM;AAAA,EACrB;AAAA,EACA;AAAA,IACE,OAAO;AAAA,IACP,QAAQ;AAAA,IACR,SAAS;AAAA,IACT,MAAM;AAAA,IACN,QAAQ;AAAA,IACR,aAAa;AAAA,IACb,eAAe;AAAA,IACf,gBAAgB;AAAA,EAClB;AAAA,EACA,MAAM,cAAc,QAAQ,EAAE,GAAG,GAAG,GAAG,GAAG,OAAO,IAAI,QAAQ,IAAI,IAAI,EAAE,CAAC;AAAA,EACxE,MAAM,cAAc,QAAQ,EAAE,GAAG,sCAAsC,CAAC;AAC1E;AAEO,MAAM,WAAW;AAAA,EACtB,aAAa;AAAA,EACb,iBAAiB,CAAC,eAAe;AAAA,EACjC,WAAW;AAAA,EACX,cAAc;AAAA,EACd,WAAW;AAAA,EACX,cAAc;AAAA,EACd,WAAW;AAAA,EACX,MAAM;AAAA,EACN,YAAY;AAAA,IACV,EAAE,OAAO,YAAY,UAAU,qBAAqB;AAAA,EACtD;AACF;",
+  "names": []
+}

package/dist/modules/messages/commands/actions.js

@@ -0,0 +1,265 @@
+import { z } from "zod";
+import { registerCommand } from "@open-mercato/shared/lib/commands";
+import { extractUndoPayload } from "@open-mercato/shared/lib/commands/undo";
+import { Message, MessageObject, MessageRecipient } from "../data/entities.js";
+import { emitMessagesEvent } from "../events.js";
+import {
+  findResolvedMessageActionById,
+  isTerminalMessageAction,
+  resolveActionCommandInput,
+  resolveActionHref
+} from "../lib/actions.js";
+import { getMessageType } from "../lib/message-types-registry.js";
+import { assertOrganizationAccess } from "./shared.js";
+const recordTerminalActionSchema = z.object({
+  messageId: z.string().uuid(),
+  actionId: z.string().min(1),
+  result: z.record(z.string(), z.unknown()),
+  tenantId: z.string().uuid(),
+  organizationId: z.string().uuid().nullable(),
+  userId: z.string().uuid()
+});
+const executeActionSchema = z.object({
+  messageId: z.string().uuid(),
+  actionId: z.string().min(1),
+  payload: z.record(z.string(), z.unknown()).optional(),
+  tenantId: z.string().uuid(),
+  organizationId: z.string().uuid().nullable(),
+  userId: z.string().uuid()
+});
+function toIso(value) {
+  return value ? value.toISOString() : null;
+}
+function toDate(value) {
+  if (!value) return null;
+  return new Date(value);
+}
+async function requireActionTarget(em, input) {
+  const message = await em.findOne(Message, {
+    id: input.messageId,
+    tenantId: input.tenantId,
+    deletedAt: null
+  });
+  if (!message) throw new Error("Message not found");
+  assertOrganizationAccess(input, message);
+  const recipient = await em.findOne(MessageRecipient, {
+    messageId: input.messageId,
+    recipientUserId: input.userId,
+    deletedAt: null
+  });
+  if (!recipient) throw new Error("Access denied");
+  return message;
+}
+async function requireActionMessage(em, input) {
+  const message = await em.findOne(Message, {
+    id: input.messageId,
+    tenantId: input.tenantId,
+    deletedAt: null
+  });
+  if (!message) throw new Error("Message not found");
+  assertOrganizationAccess(input, message);
+  const recipient = await em.findOne(MessageRecipient, {
+    messageId: input.messageId,
+    recipientUserId: input.userId,
+    deletedAt: null
+  });
+  if (!recipient) throw new Error("Access denied");
+  return message;
+}
+function snapshotActionState(message) {
+  return {
+    actionTaken: message.actionTaken ?? null,
+    actionTakenByUserId: message.actionTakenByUserId ?? null,
+    actionTakenAt: toIso(message.actionTakenAt),
+    actionResult: message.actionResult ?? null
+  };
+}
+const recordTerminalActionCommand = {
+  id: "messages.actions.record_terminal",
+  async prepare(rawInput, ctx) {
+    const input = recordTerminalActionSchema.parse(rawInput);
+    const em = ctx.container.resolve("em").fork();
+    const message = await requireActionTarget(em, input);
+    return { before: snapshotActionState(message) };
+  },
+  async execute(rawInput, ctx) {
+    const input = recordTerminalActionSchema.parse(rawInput);
+    const em = ctx.container.resolve("em").fork();
+    const message = await requireActionTarget(em, input);
+    if (message.actionTaken) {
+      throw new Error("Action already taken");
+    }
+    message.actionTaken = input.actionId;
+    message.actionTakenByUserId = input.userId;
+    message.actionTakenAt = /* @__PURE__ */ new Date();
+    message.actionResult = input.result;
+    await em.flush();
+    return { ok: true };
+  },
+  async captureAfter(rawInput, _result, ctx) {
+    const input = recordTerminalActionSchema.parse(rawInput);
+    const em = ctx.container.resolve("em").fork();
+    const message = await requireActionTarget(em, input);
+    return snapshotActionState(message);
+  },
+  buildLog: async ({ input, snapshots }) => {
+    const parsed = recordTerminalActionSchema.parse(input);
+    return {
+      actionLabel: "Execute message terminal action",
+      resourceKind: "messages.message",
+      resourceId: parsed.messageId,
+      tenantId: parsed.tenantId,
+      organizationId: parsed.organizationId,
+      payload: {
+        undo: {
+          before: snapshots.before ?? null,
+          after: snapshots.after ?? null
+        }
+      },
+      snapshotBefore: snapshots.before ?? null,
+      snapshotAfter: snapshots.after ?? null
+    };
+  },
+  undo: async ({ logEntry, ctx }) => {
+    const undo = extractUndoPayload(logEntry);
+    const before = undo?.before;
+    if (!before) return;
+    const messageId = logEntry?.resourceId;
+    if (!messageId) return;
+    const em = ctx.container.resolve("em").fork();
+    const message = await em.findOne(Message, { id: messageId });
+    if (!message) return;
+    message.actionTaken = before.actionTaken;
+    message.actionTakenByUserId = before.actionTakenByUserId;
+    message.actionTakenAt = toDate(before.actionTakenAt);
+    message.actionResult = before.actionResult;
+    await em.flush();
+  }
+};
+const executeActionCommand = {
+  id: "messages.actions.execute",
+  async execute(rawInput, ctx) {
+    const input = executeActionSchema.parse(rawInput);
+    const em = ctx.container.resolve("em").fork();
+    const message = await requireActionMessage(em, input);
+    const objects = await em.find(MessageObject, { messageId: message.id });
+    const action = findResolvedMessageActionById(message, objects, input.actionId);
+    if (!action) {
+      throw new Error("Action not found");
+    }
+    if (message.actionTaken) {
+      throw Object.assign(new Error("Action already taken"), { actionTaken: message.actionTaken });
+    }
+    const shouldRecordActionTaken = isTerminalMessageAction(action);
+    if (message.actionData?.expiresAt) {
+      if (new Date(message.actionData.expiresAt) < /* @__PURE__ */ new Date()) {
+        throw new Error("Actions have expired");
+      }
+    } else {
+      const messageType = getMessageType(message.type);
+      if (messageType?.actionsExpireAfterHours && message.sentAt) {
+        const expiry = new Date(message.sentAt.getTime() + messageType.actionsExpireAfterHours * 60 * 60 * 1e3);
+        if (expiry < /* @__PURE__ */ new Date()) {
+          throw new Error("Actions have expired");
+        }
+      }
+    }
+    const commandBus = ctx.container.resolve("commandBus");
+    let result = {};
+    let operationLogEntry = null;
+    if (action.commandId) {
+      try {
+        const actionInput = resolveActionCommandInput(
+          action,
+          message,
+          {
+            tenantId: input.tenantId,
+            organizationId: input.organizationId,
+            userId: input.userId
+          },
+          input.payload ?? {}
+        );
+        if (actionInput.id == null) {
+          const fallbackId = action.objectRef?.entityId ?? message.sourceEntityId ?? null;
+          if (typeof fallbackId === "string" && fallbackId.trim().length > 0) {
+            actionInput.id = fallbackId;
+          }
+        }
+        const commandResult = await commandBus.execute(action.commandId, {
+          input: actionInput,
+          ctx: {
+            container: ctx.container,
+            auth: {
+              sub: input.userId,
+              tenantId: input.tenantId,
+              orgId: input.organizationId
+            },
+            organizationScope: null,
+            selectedOrganizationId: input.organizationId,
+            organizationIds: input.organizationId ? [input.organizationId] : null
+          },
+          metadata: {
+            tenantId: input.tenantId,
+            organizationId: input.organizationId,
+            resourceKind: "messages"
+          }
+        });
+        result = commandResult.result ?? {};
+        operationLogEntry = commandResult.logEntry ?? null;
+      } catch (err) {
+        console.error("[messages] executeActionCommand sub-command failed", err);
+        throw new Error("Action failed");
+      }
+    } else if (action.href) {
+      result = {
+        redirect: resolveActionHref(action, message, {
+          tenantId: input.tenantId,
+          organizationId: input.organizationId,
+          userId: input.userId
+        }) ?? action.href
+      };
+    } else {
+      throw new Error("Action has no executable target");
+    }
+    if (shouldRecordActionTaken) {
+      await commandBus.execute("messages.actions.record_terminal", {
+        input: {
+          messageId: message.id,
+          actionId: action.id,
+          result,
+          tenantId: input.tenantId,
+          organizationId: input.organizationId,
+          userId: input.userId
+        },
+        ctx: {
+          container: ctx.container,
+          auth: ctx.auth ?? null,
+          organizationScope: null,
+          selectedOrganizationId: input.organizationId,
+          organizationIds: input.organizationId ? [input.organizationId] : null
+        }
+      });
+      await emitMessagesEvent(
+        "messages.message.action_taken",
+        {
+          messageId: message.id,
+          actionId: action.id,
+          userId: input.userId,
+          result,
+          tenantId: input.tenantId,
+          organizationId: input.organizationId
+        },
+        { persistent: true }
+      );
+    }
+    return {
+      ok: true,
+      actionId: action.id,
+      result,
+      operationLogEntry
+    };
+  }
+};
+registerCommand(recordTerminalActionCommand);
+registerCommand(executeActionCommand);
+//# sourceMappingURL=actions.js.map