@open-mercato/core 0.6.4-develop.4371.1.8f3030407e → 0.6.4

package/dist/modules/customers/commands/interactions.js

@@ -26,13 +26,16 @@ import {
   resolveParentResourceKind
 } from "./shared.js";
 import { resolveTranslations } from "@open-mercato/shared/lib/i18n/server";
+import { resolveRedoSnapshot } from "@open-mercato/shared/lib/commands/redo";
 import {
   loadCustomFieldSnapshot,
   buildCustomFieldResetMap
 } from "@open-mercato/shared/lib/commands/customFieldSnapshots";
 import { CrudHttpError } from "@open-mercato/shared/lib/crud/errors";
+import { enforceRecordGoneIsConflict, enforceCommandOptimisticLock } from "@open-mercato/shared/lib/crud/optimistic-lock-command";
 import { findOneWithDecryption } from "@open-mercato/shared/lib/encryption/find";
 import { recomputeNextInteraction } from "../lib/interactionProjection.js";
+import { canChangeEmailVisibility } from "../lib/visibilityFilter.js";
 const INTERACTION_ENTITY_ID = "customers:customer_interaction";
 const interactionCrudIndexer = {
   entityType: "customers:customer_interaction"
@@ -179,6 +182,39 @@ async function emitNextInteractionUpdatedEvent(ctx, projection, identifiers) {
     tenantId: identifiers.tenantId
   });
 }
+function buildInteractionGraph(em, values) {
+  return em.create(CustomerInteraction, {
+    ...values.id ? { id: values.id } : {},
+    organizationId: values.organizationId,
+    tenantId: values.tenantId,
+    entity: values.entity,
+    interactionType: values.interactionType,
+    title: values.title,
+    body: values.body,
+    status: values.status,
+    scheduledAt: values.scheduledAt,
+    occurredAt: values.occurredAt,
+    priority: values.priority,
+    authorUserId: values.authorUserId,
+    ownerUserId: values.ownerUserId,
+    dealId: values.dealId,
+    source: values.source,
+    appearanceIcon: values.appearanceIcon,
+    appearanceColor: values.appearanceColor,
+    durationMinutes: values.durationMinutes,
+    location: values.location,
+    allDay: values.allDay,
+    recurrenceRule: values.recurrenceRule,
+    recurrenceEnd: values.recurrenceEnd,
+    participants: values.participants,
+    reminderMinutes: values.reminderMinutes,
+    visibility: values.visibility,
+    linkedEntities: values.linkedEntities,
+    guestPermissions: values.guestPermissions,
+    createdAt: /* @__PURE__ */ new Date(),
+    updatedAt: /* @__PURE__ */ new Date()
+  });
+}
 const createInteractionCommand = {
   id: "customers.interactions.create",
   async execute(rawInput, ctx) {
@@ -192,7 +228,7 @@ const createInteractionCommand = {
       if (parsed.dealId) {
         await requireDealInScope(trx, parsed.dealId, entity.tenantId, entity.organizationId);
       }
-      const interaction2 = trx.create(CustomerInteraction, {
+      const interaction2 = buildInteractionGraph(trx, {
         ...parsed.id ? { id: parsed.id } : {},
         organizationId: entity.organizationId,
         tenantId: entity.tenantId,
@@ -219,9 +255,7 @@ const createInteractionCommand = {
         reminderMinutes: parsed.reminderMinutes ?? null,
         visibility: parsed.visibility ?? null,
         linkedEntities: parsed.linkedEntities ?? null,
-        guestPermissions: parsed.guestPermissions ?? null,
-        createdAt: /* @__PURE__ */ new Date(),
-        updatedAt: /* @__PURE__ */ new Date()
+        guestPermissions: parsed.guestPermissions ?? null
       });
       trx.persist(interaction2);
       await trx.flush();
@@ -309,6 +343,113 @@ const createInteractionCommand = {
       entityId: result.entityId,
       nextInteractionId: result.nextInteractionId
     }, result.identifiers);
+  },
+  redo: async ({ logEntry, ctx }) => {
+    const after = resolveRedoSnapshot(logEntry);
+    if (!after) {
+      throw new CrudHttpError(400, { error: "[internal] redo snapshot unavailable for interaction create" });
+    }
+    const em = ctx.container.resolve("em").fork();
+    const { interaction, nextInteractionId } = await runInTransaction(em, async (trx) => {
+      const entity = await requireTimelineParentEntity(trx, after.interaction.entityId);
+      let interaction2 = await findOneWithDecryption(trx, CustomerInteraction, { id: after.interaction.id });
+      if (!interaction2) {
+        interaction2 = buildInteractionGraph(trx, {
+          id: after.interaction.id,
+          organizationId: after.interaction.organizationId,
+          tenantId: after.interaction.tenantId,
+          entity,
+          interactionType: after.interaction.interactionType,
+          title: after.interaction.title,
+          body: after.interaction.body,
+          status: after.interaction.status,
+          scheduledAt: after.interaction.scheduledAt,
+          occurredAt: after.interaction.occurredAt,
+          priority: after.interaction.priority,
+          authorUserId: after.interaction.authorUserId,
+          ownerUserId: after.interaction.ownerUserId,
+          dealId: after.interaction.dealId,
+          source: after.interaction.source,
+          appearanceIcon: after.interaction.appearanceIcon,
+          appearanceColor: after.interaction.appearanceColor,
+          durationMinutes: after.interaction.durationMinutes,
+          location: after.interaction.location,
+          allDay: after.interaction.allDay,
+          recurrenceRule: after.interaction.recurrenceRule,
+          recurrenceEnd: after.interaction.recurrenceEnd,
+          participants: after.interaction.participants,
+          reminderMinutes: after.interaction.reminderMinutes,
+          visibility: after.interaction.visibility,
+          linkedEntities: after.interaction.linkedEntities,
+          guestPermissions: after.interaction.guestPermissions
+        });
+        trx.persist(interaction2);
+      } else {
+        interaction2.deletedAt = null;
+        interaction2.entity = entity;
+        interaction2.interactionType = after.interaction.interactionType;
+        interaction2.title = after.interaction.title;
+        interaction2.body = after.interaction.body;
+        interaction2.status = after.interaction.status;
+        interaction2.scheduledAt = after.interaction.scheduledAt;
+        interaction2.occurredAt = after.interaction.occurredAt;
+        interaction2.priority = after.interaction.priority;
+        interaction2.authorUserId = after.interaction.authorUserId;
+        interaction2.ownerUserId = after.interaction.ownerUserId;
+        interaction2.dealId = after.interaction.dealId;
+        interaction2.source = after.interaction.source;
+        interaction2.appearanceIcon = after.interaction.appearanceIcon;
+        interaction2.appearanceColor = after.interaction.appearanceColor;
+        interaction2.durationMinutes = after.interaction.durationMinutes;
+        interaction2.location = after.interaction.location;
+        interaction2.allDay = after.interaction.allDay;
+        interaction2.recurrenceRule = after.interaction.recurrenceRule;
+        interaction2.recurrenceEnd = after.interaction.recurrenceEnd;
+        interaction2.participants = after.interaction.participants;
+        interaction2.reminderMinutes = after.interaction.reminderMinutes;
+        interaction2.visibility = after.interaction.visibility;
+        interaction2.linkedEntities = after.interaction.linkedEntities;
+        interaction2.guestPermissions = after.interaction.guestPermissions;
+      }
+      await trx.flush();
+      const projection = await recomputeNextInteraction(trx, after.interaction.entityId);
+      const restoreValues = buildCustomFieldResetMap(after.custom, void 0);
+      if (Object.keys(restoreValues).length) {
+        await setCustomFieldsIfAny({
+          dataEngine: createTransactionalDataEngine(ctx, trx),
+          entityId: INTERACTION_ENTITY_ID,
+          recordId: interaction2.id,
+          organizationId: interaction2.organizationId,
+          tenantId: interaction2.tenantId,
+          values: restoreValues,
+          notify: false
+        });
+      }
+      return { interaction: interaction2, nextInteractionId: projection.nextInteractionId };
+    });
+    const de = ctx.container.resolve("dataEngine");
+    await emitCrudSideEffects({
+      dataEngine: de,
+      action: "created",
+      entity: interaction,
+      identifiers: {
+        id: interaction.id,
+        organizationId: interaction.organizationId,
+        tenantId: interaction.tenantId
+      },
+      syncOrigin: ctx.syncOrigin,
+      indexer: interactionCrudIndexer,
+      events: interactionCrudEvents
+    });
+    await emitNextInteractionUpdatedEvent(ctx, {
+      entityId: after.interaction.entityId,
+      nextInteractionId
+    }, {
+      id: interaction.id,
+      organizationId: interaction.organizationId,
+      tenantId: interaction.tenantId
+    });
+    return { interactionId: interaction.id, entityId: after.interaction.entityId };
   }
 };
 const updateInteractionCommand = {
@@ -324,9 +465,33 @@ const updateInteractionCommand = {
     const em = ctx.container.resolve("em").fork();
     const { interaction, entityId, nextInteractionId } = await runInTransaction(em, async (trx) => {
       const interaction2 = await findOneWithDecryption(trx, CustomerInteraction, { id: parsed.id, deletedAt: null });
-      if (!interaction2) throw new CrudHttpError(404, { error: "Interaction not found" });
+      if (!interaction2) {
+        enforceRecordGoneIsConflict({ resourceKind: "customers.interaction", resourceId: parsed.id, request: ctx.request ?? null });
+        throw new CrudHttpError(404, { error: "Interaction not found" });
+      }
       ensureTenantScope(ctx, interaction2.tenantId);
       ensureOrganizationScope(ctx, interaction2.organizationId);
+      enforceCommandOptimisticLock({
+        resourceKind: "customers.interaction",
+        resourceId: interaction2.id,
+        current: interaction2.updatedAt,
+        request: ctx.request ?? null
+      });
+      if (parsed.visibility !== void 0 && interaction2.interactionType === "email" && (parsed.visibility ?? null) !== (interaction2.visibility ?? null)) {
+        const actorUserId = ctx.auth?.sub ?? null;
+        if (!canChangeEmailVisibility({
+          interactionType: interaction2.interactionType,
+          currentVisibility: interaction2.visibility,
+          nextVisibility: parsed.visibility,
+          authorUserId: interaction2.authorUserId,
+          actorUserId,
+          // v1 strict owner-only: only the author may flip visibility; no admin
+          // bypass (canChangeEmailVisibility ignores caller features in v1).
+          userFeatures: void 0
+        })) {
+          throw new CrudHttpError(404, { error: "Email not found" });
+        }
+      }
       if (parsed.dealId !== void 0) {
         if (parsed.dealId) {
           await requireDealInScope(trx, parsed.dealId, interaction2.tenantId, interaction2.organizationId);
@@ -538,9 +703,18 @@ const completeInteractionCommand = {
     const em = ctx.container.resolve("em").fork();
     const { interaction, entityId, nextInteractionId } = await runInTransaction(em, async (trx) => {
       const interaction2 = await findOneWithDecryption(trx, CustomerInteraction, { id: parsed.id, deletedAt: null });
-      if (!interaction2) throw new CrudHttpError(404, { error: "Interaction not found" });
+      if (!interaction2) {
+        enforceRecordGoneIsConflict({ resourceKind: "customers.interaction", resourceId: parsed.id, request: ctx.request ?? null });
+        throw new CrudHttpError(404, { error: "Interaction not found" });
+      }
       ensureTenantScope(ctx, interaction2.tenantId);
       ensureOrganizationScope(ctx, interaction2.organizationId);
+      enforceCommandOptimisticLock({
+        resourceKind: "customers.interaction",
+        resourceId: interaction2.id,
+        current: interaction2.updatedAt,
+        request: ctx.request ?? null
+      });
       interaction2.status = "done";
       interaction2.occurredAt = parsed.occurredAt ?? /* @__PURE__ */ new Date();
       await trx.flush();
@@ -658,9 +832,18 @@ const cancelInteractionCommand = {
     const em = ctx.container.resolve("em").fork();
     const { interaction, entityId, nextInteractionId } = await runInTransaction(em, async (trx) => {
       const interaction2 = await findOneWithDecryption(trx, CustomerInteraction, { id: parsed.id, deletedAt: null });
-      if (!interaction2) throw new CrudHttpError(404, { error: "Interaction not found" });
+      if (!interaction2) {
+        enforceRecordGoneIsConflict({ resourceKind: "customers.interaction", resourceId: parsed.id, request: ctx.request ?? null });
+        throw new CrudHttpError(404, { error: "Interaction not found" });
+      }
       ensureTenantScope(ctx, interaction2.tenantId);
       ensureOrganizationScope(ctx, interaction2.organizationId);
+      enforceCommandOptimisticLock({
+        resourceKind: "customers.interaction",
+        resourceId: interaction2.id,
+        current: interaction2.updatedAt,
+        request: ctx.request ?? null
+      });
       interaction2.status = "canceled";
       await trx.flush();
       const entityId2 = typeof interaction2.entity === "string" ? interaction2.entity : interaction2.entity.id;
@@ -775,9 +958,18 @@ const deleteInteractionCommand = {
     const em = ctx.container.resolve("em").fork();
     const { interaction, entityId, nextInteractionId } = await runInTransaction(em, async (trx) => {
       const interaction2 = await findOneWithDecryption(trx, CustomerInteraction, { id, deletedAt: null });
-      if (!interaction2) throw new CrudHttpError(404, { error: "Interaction not found" });
+      if (!interaction2) {
+        enforceRecordGoneIsConflict({ resourceKind: "customers.interaction", resourceId: id, request: ctx.request ?? null });
+        throw new CrudHttpError(404, { error: "Interaction not found" });
+      }
       ensureTenantScope(ctx, interaction2.tenantId);
       ensureOrganizationScope(ctx, interaction2.organizationId);
+      enforceCommandOptimisticLock({
+        resourceKind: "customers.interaction",
+        resourceId: interaction2.id,
+        current: interaction2.updatedAt,
+        request: ctx.request ?? null
+      });
       const entityId2 = typeof interaction2.entity === "string" ? interaction2.entity : interaction2.entity.id;
       interaction2.deletedAt = /* @__PURE__ */ new Date();
       await trx.flush();