@open-mercato/core 0.6.4-develop.4382.1.6b4f656b77 → 0.6.4

package/src/modules/communication_channels/data/validators.ts

@@ -0,0 +1,138 @@
+import { z } from 'zod'
+
+/**
+ * Zod schemas for adapter inputs and API request/response bodies.
+ *
+ * These mirror the TypeScript interfaces in `lib/adapter.ts`. They are used by:
+ *   - API route handlers to validate incoming requests
+ *   - Adapter implementations that prefer runtime validation over TypeScript-only types
+ *   - `validateCredentials?(...)` flow on credential-based providers
+ */
+
+export const tenantScopeSchema = z.object({
+  organizationId: z.string().uuid().nullable().optional(),
+  tenantId: z.string().uuid(),
+})
+
+export const channelCapabilitiesSchema = z.object({
+  threading: z.boolean(),
+  richText: z.boolean(),
+  fileSharing: z.boolean(),
+  maxFileSize: z.number().int().nonnegative().optional(),
+  supportedMimeTypes: z.array(z.string()).optional(),
+  readReceipts: z.boolean(),
+  deliveryReceipts: z.boolean(),
+  typingIndicators: z.boolean(),
+  reactions: z.boolean(),
+  multiReactionPerUser: z.boolean(),
+  editMessage: z.boolean(),
+  deleteMessage: z.boolean(),
+  presence: z.boolean(),
+  richBlocks: z.boolean(),
+  interactiveComponents: z.boolean(),
+  inlineImages: z.boolean(),
+  conversationHistory: z.boolean(),
+  contactCards: z.boolean(),
+  locationSharing: z.boolean(),
+  voiceNotes: z.boolean(),
+  stickers: z.boolean(),
+  supportedBodyFormats: z.array(z.enum(['text', 'markdown', 'html'])),
+  maxBodyLength: z.number().int().positive().optional(),
+  realtimePush: z.boolean().optional(),
+})
+
+export const normalizedAttachmentSchema = z.object({
+  url: z.string().url(),
+  mimeType: z.string().min(1),
+  fileName: z.string().min(1),
+  fileSize: z.number().int().nonnegative().optional(),
+  inline: z.boolean().optional(),
+})
+
+export const messageContentSchema = z.object({
+  text: z.string().optional(),
+  html: z.string().optional(),
+  bodyFormat: z.enum(['text', 'markdown', 'html']).optional(),
+  attachments: z.array(normalizedAttachmentSchema).optional(),
+  raw: z.record(z.string(), z.unknown()).optional(),
+})
+
+export const sendMessageInputSchema = z.object({
+  conversationId: z.string().optional(),
+  content: messageContentSchema,
+  credentials: z.record(z.string(), z.unknown()),
+  scope: tenantScopeSchema,
+  metadata: z.record(z.string(), z.unknown()).optional(),
+})
+
+export const validateCredentialsInputSchema = z.object({
+  providerKey: z.string().min(1),
+  credentials: z.record(z.string(), z.unknown()),
+  scope: tenantScopeSchema,
+})
+
+export const validateCredentialsResultSchema = z.object({
+  ok: z.boolean(),
+  errors: z.record(z.string(), z.string()).optional(),
+})
+
+export const refreshCredentialsInputSchema = z.object({
+  channelId: z.string().uuid(),
+  credentials: z.record(z.string(), z.unknown()),
+  scope: tenantScopeSchema,
+})
+
+export const refreshedCredentialsSchema = z.object({
+  credentials: z.record(z.string(), z.unknown()),
+  expiresAt: z.date().optional(),
+})
+
+export const inboundReactionSchema = z.object({
+  emoji: z.string().min(1),
+  userIdentifier: z.string().min(1),
+  userDisplayName: z.string().optional(),
+  timestamp: z.date().optional(),
+})
+
+/**
+ * Canonical normalized inbound reaction event — matches `InboundReactionEvent`
+ * in `lib/adapter.ts`. Used by the reactions queue for type-safe payloads.
+ */
+export const inboundReactionEventSchema = z.object({
+  externalMessageId: z.string().min(1),
+  externalConversationId: z.string().min(1).optional(),
+  externalReactionId: z.string().min(1).optional(),
+  emoji: z.string().min(1).max(64),
+  userIdentifier: z.string().min(1),
+  userDisplayName: z.string().optional(),
+  action: z.enum(['added', 'removed']),
+  timestamp: z.date().optional(),
+  raw: z.record(z.string(), z.unknown()).optional(),
+})
+
+export const normalizedInboundMessageSchema = z.object({
+  externalMessageId: z.string().min(1),
+  externalConversationId: z.string().min(1),
+  senderIdentifier: z.string().min(1),
+  senderDisplayName: z.string().optional(),
+  senderAvatarUrl: z.string().url().optional(),
+  subject: z.string().optional(),
+  body: z.string(),
+  bodyFormat: z.enum(['text', 'markdown', 'html']),
+  attachments: z.array(normalizedAttachmentSchema).optional(),
+  timestamp: z.date(),
+  replyToExternalId: z.string().optional(),
+  channelPayload: z.record(z.string(), z.unknown()),
+  channelContentType: z.string().min(1),
+  channelMetadata: z.record(z.string(), z.unknown()),
+  reactions: z.array(inboundReactionSchema).optional(),
+})
+
+export const reactionApiBodySchema = z.object({
+  emoji: z.string().min(1).max(64),
+})
+
+export type SendMessageInputDto = z.infer<typeof sendMessageInputSchema>
+export type NormalizedInboundMessageDto = z.infer<typeof normalizedInboundMessageSchema>
+export type ChannelCapabilitiesDto = z.infer<typeof channelCapabilitiesSchema>
+export type ReactionApiBodyDto = z.infer<typeof reactionApiBodySchema>

package/src/modules/communication_channels/di.ts

@@ -0,0 +1,40 @@
+import { asValue } from 'awilix'
+import type { AppContainer } from '@open-mercato/shared/lib/di/container'
+import {
+  CommunicationChannel,
+  ExternalConversation,
+  ExternalMessage,
+  MessageChannelLink,
+  ChannelThreadMapping,
+  MessageReaction,
+} from './data/entities'
+import { getChannelAdapterRegistry } from './lib/adapter-registry-singleton'
+import { ensureTestSeedAdapterRegistered } from './lib/test-seed'
+import { sendAsUser } from './lib/send-as-user'
+
+export function register(container: AppContainer) {
+  // Test-only: register the network-free stub channel adapter when
+  // `OM_ENABLE_TEST_CHANNEL_SEEDING` is set (no-op in production). Lets the
+  // integration harness connect a channel + complete the outbound send chain.
+  // See lib/test-seed.ts.
+  ensureTestSeedAdapterRegistered()
+
+  container.register({
+    // Entity class registrations (for EntityManager lookups by string)
+    CommunicationChannel: asValue(CommunicationChannel),
+    ExternalConversation: asValue(ExternalConversation),
+    ExternalMessage: asValue(ExternalMessage),
+    MessageChannelLink: asValue(MessageChannelLink),
+    ChannelThreadMapping: asValue(ChannelThreadMapping),
+    MessageReaction: asValue(MessageReaction),
+
+    // Channel adapter registry — process-wide singleton backed by globalThis so
+    // the auth-less webhook route resolves the same registry as DI consumers.
+    // See lib/adapter-registry-singleton.ts.
+    channelAdapterRegistry: asValue(getChannelAdapterRegistry()),
+
+    // In-process send-as-user facade. Cross-module callers (e.g. the customers
+    // compose route) resolve this instead of making an HTTP self-call.
+    communicationChannelsSendAsUser: asValue(sendAsUser),
+  })
+}

package/src/modules/communication_channels/encryption.ts

@@ -0,0 +1,44 @@
+import type { ModuleEncryptionMap } from '@open-mercato/shared/modules/encryption'
+
+/**
+ * Per-entity encryption maps for the communication_channels module.
+ *
+ * Credential encryption for `IntegrationCredentials.credentials` is owned by
+ * the `integrations` module (see packages/core/src/modules/integrations/encryption.ts).
+ *
+ * `ChannelIngestDeadLetter.raw_body` holds truncated MIME bodies of
+ * permanently-failed inbound messages. MIME bodies routinely contain PII
+ * (sender/recipient addresses, quoted prior emails, attachments), so the
+ * column is encrypted at rest. Reads use `findWithDecryption` per the
+ * `packages/core/AGENTS.md` Encryption section.
+ *
+ * At-rest posture for the OTHER PII-bearing hub columns (deliberate, reviewed):
+ *   - The canonical email content is already encrypted in its PRIMARY stores —
+ *     `messages.message` (subject/body/external_email+hash; see
+ *     messages/encryption.ts) and `customers.customer_interaction` (title/body).
+ *   - The hub keeps SECONDARY copies that are currently PLAINTEXT at rest:
+ *     `external_messages.sender_identifier`/`sender_display_name`,
+ *     `external_conversations.subject`, and `message_channel_links.channel_payload`.
+ *     The per-user access-control layer governs who can READ these; at-rest
+ *     encryption is a separate concern tracked as a follow-up (it requires
+ *     auditing every read path — the `_channelPayload` enricher and the
+ *     channel-payload renderer read these — to route through `findWithDecryption`).
+ *   - `message_channel_links.channel_metadata` MUST stay plaintext: the thread
+ *     matcher and sent-folder dedup query `channel_metadata->>'messageId'` BY
+ *     VALUE, and an encrypted column is not queryable by value (§16 footgun).
+ *   - `external_messages.sender_identifier` similarly needs a deterministic
+ *     `*_hash` blind-index column before it can be encrypted, because inbound
+ *     contact resolution looks addresses up by value (see the address blind-index
+ *     follow-up in customers/lib/findPeopleByAddresses.ts).
+ *
+ * See `.ai/specs/2026-05-27-email-integration-inbound-reliability-and-threading.md`
+ * (§ 3 Encryption posture).
+ */
+export const defaultEncryptionMaps: ModuleEncryptionMap[] = [
+  {
+    entityId: 'communication_channels:channel_ingest_dead_letter',
+    fields: [{ field: 'raw_body' }],
+  },
+]
+
+export default defaultEncryptionMaps

package/src/modules/communication_channels/events.ts

@@ -0,0 +1,122 @@
+import { createModuleEvents } from '@open-mercato/shared/modules/events'
+
+const events = [
+  // ── Bridge events ────────────────────────────────────────
+  {
+    id: 'communication_channels.message.received',
+    label: 'External Message Received',
+    entity: 'external_message',
+    category: 'custom',
+    clientBroadcast: true,
+  },
+  {
+    id: 'communication_channels.message.sent',
+    label: 'External Message Sent (Outbound)',
+    entity: 'external_message',
+    category: 'custom',
+    clientBroadcast: true,
+  },
+  {
+    id: 'communication_channels.message.delivery_failed',
+    label: 'External Message Delivery Failed',
+    entity: 'external_message',
+    category: 'custom',
+    clientBroadcast: true,
+  },
+  {
+    id: 'communication_channels.conversation.created',
+    label: 'External Conversation Created',
+    entity: 'external_conversation',
+    category: 'custom',
+  },
+  {
+    id: 'communication_channels.conversation.reassigned',
+    label: 'External Conversation Reassigned',
+    entity: 'external_conversation',
+    category: 'custom',
+  },
+  {
+    id: 'communication_channels.contact.resolved',
+    label: 'External Contact Resolved to CRM Person',
+    entity: 'external_conversation',
+    category: 'custom',
+  },
+  // ── Channel lifecycle events ─────────────────────────────
+  {
+    id: 'communication_channels.channel.requires_reauth',
+    label: 'Channel Requires Re-authentication',
+    entity: 'communication_channel',
+    category: 'lifecycle',
+    clientBroadcast: true,
+  },
+  {
+    id: 'communication_channels.channel.disconnected',
+    label: 'Channel Disconnected',
+    entity: 'communication_channel',
+    category: 'lifecycle',
+    clientBroadcast: true,
+  },
+  {
+    id: 'communication_channels.channel.deleted',
+    label: 'Channel Deleted',
+    entity: 'communication_channel',
+    category: 'lifecycle',
+    clientBroadcast: true,
+  },
+  {
+    id: 'communication_channels.channel.primary_changed',
+    label: 'Primary Channel Changed',
+    entity: 'communication_channel',
+    category: 'lifecycle',
+    clientBroadcast: true,
+  },
+  // ── Reaction events ──────────────────────────────────────
+  {
+    id: 'communication_channels.reaction.added',
+    label: 'Reaction Added',
+    entity: 'message_reaction',
+    category: 'custom',
+    clientBroadcast: true,
+  },
+  {
+    id: 'communication_channels.reaction.removed',
+    label: 'Reaction Removed',
+    entity: 'message_reaction',
+    category: 'custom',
+    clientBroadcast: true,
+  },
+  // ── Push delivery lifecycle (Spec C) ─────────────────────
+  {
+    id: 'communication_channels.push.registered',
+    label: 'Push Delivery Registered',
+    entity: 'communication_channel',
+    category: 'lifecycle',
+    clientBroadcast: true,
+  },
+  {
+    id: 'communication_channels.push.failed',
+    label: 'Push Delivery Failed (Falling Back to Polling)',
+    entity: 'communication_channel',
+    category: 'lifecycle',
+    clientBroadcast: true,
+  },
+  {
+    id: 'communication_channels.push.renewed',
+    label: 'Push Delivery Renewed',
+    entity: 'communication_channel',
+    category: 'lifecycle',
+  },
+  {
+    id: 'communication_channels.push.deactivated',
+    label: 'Push Delivery Deactivated',
+    entity: 'communication_channel',
+    category: 'lifecycle',
+    clientBroadcast: true,
+  },
+] as const
+
+export const eventsConfig = createModuleEvents({ moduleId: 'communication_channels', events })
+export const emitCommunicationChannelsEvent = eventsConfig.emit
+export type CommunicationChannelsEventId = (typeof events)[number]['id']
+
+export default eventsConfig

package/src/modules/communication_channels/i18n/de.json

@@ -0,0 +1,138 @@
+{
+  "communication_channels.channel.providers.gmail": "Gmail",
+  "communication_channels.channel.providers.imap": "IMAP",
+  "communication_channels.channel.providers.slack": "Slack",
+  "communication_channels.channel.providers.whatsapp": "WhatsApp",
+  "communication_channels.channelPayload.aria": "Kanalinhalt",
+  "communication_channels.channelPayload.email.aria": "E-Mail-Inhalt",
+  "communication_channels.channelPayload.types.email/mime": "E-Mail (MIME)",
+  "communication_channels.columns.displayName": "Kanal",
+  "communication_channels.columns.identifier": "Externe ID",
+  "communication_channels.columns.provider": "Anbieter",
+  "communication_channels.columns.status": "Status",
+  "communication_channels.columns.type": "Typ",
+  "communication_channels.detail.capabilities": "Funktionen",
+  "communication_channels.detail.health": "Zustellungszustand (letzte 24 Std.)",
+  "communication_channels.detail.loading": "Kanal wird geladen...",
+  "communication_channels.detail.messages": "Nachrichten",
+  "communication_channels.detail.noCapabilities": "Für diesen Kanal wurde noch keine Funktionsübersicht erfasst.",
+  "communication_channels.detail.noHealth": "Keine Zustandsdaten verfügbar.",
+  "communication_channels.detail.notFound": "Kanal nicht gefunden",
+  "communication_channels.detail.recentFailures": "Letzte Fehler",
+  "communication_channels.detail.title": "Kanaldetails",
+  "communication_channels.emptyState": "Noch keine gemeinsamen Kanäle. Diese Seite listet gemeinsame, mandantenweite Kanäle auf. Ihr persönliches E-Mail-Postfach ist privat – verbinden und verwalten Sie es unter Profil → Kommunikationskanäle.",
+  "communication_channels.errors.loadDetail": "Kanal konnte nicht geladen werden",
+  "communication_channels.errors.loadList": "Kanäle konnten nicht geladen werden",
+  "communication_channels.errors.reactionFailed": "Reaktion fehlgeschlagen",
+  "communication_channels.errors.undoBlockedPrimaryConflict": "Ein anderer Kanal ist jetzt für diesen Benutzer als primär festgelegt. Setze ihn auf nicht-primär, bevor du den getrennten Kanal wieder als primär festlegst.",
+  "communication_channels.infoPanel.aria": "Kanalinfo",
+  "communication_channels.infoPanel.assignedTo": "Zugewiesen an",
+  "communication_channels.infoPanel.contactPerson": "CRM-Kontakt",
+  "communication_channels.infoPanel.direction": "Richtung",
+  "communication_channels.infoPanel.noThread": "Diese Nachricht gehört zu keinem Thread; Neuzuweisung nicht verfügbar.",
+  "communication_channels.infoPanel.provider": "Anbieter",
+  "communication_channels.infoPanel.reassignError": "Neuzuweisung fehlgeschlagen",
+  "communication_channels.infoPanel.reassignSuccess": "Konversation neu zugewiesen.",
+  "communication_channels.infoPanel.status": "Status",
+  "communication_channels.infoPanel.subject": "Betreff",
+  "communication_channels.infoPanel.title": "Kanalinfo",
+  "communication_channels.infoPanel.type": "Typ",
+  "communication_channels.infoPanel.unassigned": "Nicht zugewiesen",
+  "communication_channels.nav.group": "Integrationen",
+  "communication_channels.nav.title": "Kommunikationskanäle",
+  "communication_channels.notifications.channel_requires_reauth.body": "Authentifizierung abgelaufen. Verbinden Sie diesen Kanal erneut, um das Senden und Empfangen von Nachrichten fortzusetzen.",
+  "communication_channels.notifications.channel_requires_reauth.reconnect": "Erneut verbinden",
+  "communication_channels.notifications.channel_requires_reauth.title": "Kanal muss erneut verbunden werden",
+  "communication_channels.notifications.channel_requires_reauth.unknownChannel": "Ein Kanal",
+  "communication_channels.notifications.message_received.body": "Sie haben eine neue Nachricht über {{providerKey}} erhalten.",
+  "communication_channels.notifications.message_received.title": "Neue externe Nachricht",
+  "communication_channels.notifications.message_received.unknownSender": "Unbekannter Absender",
+  "communication_channels.profile.actions.disconnect": "Trennen",
+  "communication_channels.profile.actions.disconnectFailed": "Kanal konnte nicht getrennt werden",
+  "communication_channels.profile.actions.disconnectSuccess": "Kanal getrennt. Sie können ihn jederzeit erneut verbinden.",
+  "communication_channels.profile.actions.importHistory": "Verlauf importieren",
+  "communication_channels.profile.actions.pollNow": "Jetzt abrufen",
+  "communication_channels.profile.actions.pollNowFailed": "Abruf konnte nicht ausgelöst werden",
+  "communication_channels.profile.actions.pollNowSuccess": "Abruf ausgelöst — neue Nachrichten erscheinen in wenigen Sekunden auf den verknüpften Personen-Zeitleisten.",
+  "communication_channels.profile.actions.retryPoll": "Wiederholen",
+  "communication_channels.profile.actions.setPrimary": "Als primär festlegen",
+  "communication_channels.profile.actions.setPrimaryFailed": "Festlegen als primär fehlgeschlagen",
+  "communication_channels.profile.actions.setPrimarySuccess": "Als primär markiert.",
+  "communication_channels.profile.alerts.requiresReauth": "{count} Kanäle müssen erneut verbunden werden. Klicken Sie unten beim betroffenen Kanal auf \"Erneut verbinden\".",
+  "communication_channels.profile.columns.disconnect": "Verbindung",
+  "communication_channels.profile.columns.importHistory": "Verlauf",
+  "communication_channels.profile.columns.lastPolled": "Zuletzt synchronisiert",
+  "communication_channels.profile.columns.pollNow": "Synchronisieren",
+  "communication_channels.profile.columns.primary": "Primär",
+  "communication_channels.profile.connect.blocked": "Verbindung durch Validierung blockiert",
+  "communication_channels.profile.connect.cancel": "Abbrechen",
+  "communication_channels.profile.connect.connected": "Kanal verbunden.",
+  "communication_channels.profile.connect.connecting": "Wird verbunden...",
+  "communication_channels.profile.connect.credentialsFailed": "Postfach konnte nicht verbunden werden.",
+  "communication_channels.profile.connect.fields.displayName": "Anzeigename",
+  "communication_channels.profile.connect.fields.fromAddress": "Absenderadresse",
+  "communication_channels.profile.connect.fields.imapHost": "IMAP-Host",
+  "communication_channels.profile.connect.fields.imapPassword": "IMAP-Passwort",
+  "communication_channels.profile.connect.fields.imapPort": "IMAP-Port",
+  "communication_channels.profile.connect.fields.imapTls": "IMAP-Sicherheit",
+  "communication_channels.profile.connect.fields.imapUser": "IMAP-Benutzername",
+  "communication_channels.profile.connect.fields.smtpHost": "SMTP-Host",
+  "communication_channels.profile.connect.fields.smtpPassword": "SMTP-Passwort",
+  "communication_channels.profile.connect.fields.smtpPort": "SMTP-Port",
+  "communication_channels.profile.connect.fields.smtpTls": "SMTP-Sicherheit",
+  "communication_channels.profile.connect.fields.smtpUser": "SMTP-Benutzername",
+  "communication_channels.profile.connect.gmail": "Gmail verbinden",
+  "communication_channels.profile.connect.imap": "IMAP verbinden",
+  "communication_channels.profile.connect.imapTitle": "IMAP-Postfach verbinden",
+  "communication_channels.profile.connect.mailboxAlreadyConnected": "Dieses Postfach ist bereits über einen anderen Anbieter verbunden. Trennen Sie es zuerst, um es mit einem anderen Anbieter erneut zu verbinden.",
+  "communication_channels.profile.connect.notConfigured": "Dieser Anbieter ist noch nicht konfiguriert. Bitten Sie einen Administrator, die OAuth-Client-ID und das Secret unter Integrationen zu hinterlegen, bevor ein Postfach verbunden wird.",
+  "communication_channels.profile.connect.oauthFailed": "OAuth-Verbindung konnte nicht gestartet werden.",
+  "communication_channels.profile.connect.save": "Verbinden",
+  "communication_channels.profile.connect.tls.none": "Keine",
+  "communication_channels.profile.connect.tls.starttls": "STARTTLS",
+  "communication_channels.profile.connect.tls.tls": "TLS",
+  "communication_channels.profile.disconnect.cancel": "Abbrechen",
+  "communication_channels.profile.disconnect.confirm": "Trennen",
+  "communication_channels.profile.disconnect.description": "Dies entfernt die Verbindung und stoppt die Synchronisierung. Bereits importierte E-Mails bleiben in Ihren Timelines. Sie können den Kanal jederzeit erneut verbinden.",
+  "communication_channels.profile.disconnect.submitting": "Wird getrennt…",
+  "communication_channels.profile.disconnect.title": "Kanal trennen",
+  "communication_channels.profile.empty": "Sie haben noch keine verbundenen Kanäle. Verwenden Sie oben den Eintrag \"Kanal verbinden\", um Gmail oder IMAP hinzuzufügen.",
+  "communication_channels.profile.flash.connected": "Kanal verbunden.",
+  "communication_channels.profile.flash.connectedWithProvider": "Kanal verbunden ({provider}).",
+  "communication_channels.profile.flash.error": "Kanal konnte nicht verbunden werden.",
+  "communication_channels.profile.flash.errorWithCode": "Kanal konnte nicht verbunden werden — {code}.",
+  "communication_channels.profile.group": "Profil",
+  "communication_channels.profile.importHistory.cancel": "Abbrechen",
+  "communication_channels.profile.importHistory.description": "Ältere Nachrichten abrufen, die dieser Kanal beim Verbinden noch nicht gesehen hat. Filter schränken die Suche serverseitig ein.",
+  "communication_channels.profile.importHistory.errors.contactEmails": "Mindestens ein Eintrag ist keine gültige E-Mail-Adresse.",
+  "communication_channels.profile.importHistory.errors.maxMessages": "Wählen Sie eine Zahl zwischen 1 und 5000 Nachrichten.",
+  "communication_channels.profile.importHistory.errors.sinceDays": "Wählen Sie eine Zahl zwischen 1 und 365 Tagen.",
+  "communication_channels.profile.importHistory.fields.contactEmails": "Nach Absender filtern (optional)",
+  "communication_channels.profile.importHistory.fields.contactEmailsHint": "Leer lassen, um alle Absender im Zeitraum zu scannen.",
+  "communication_channels.profile.importHistory.fields.contactEmailsPlaceholder": "alice@example.com, bob@example.com",
+  "communication_channels.profile.importHistory.fields.maxMessages": "Maximale Nachrichten",
+  "communication_channels.profile.importHistory.fields.sinceDays": "Zurückblicken (Tage)",
+  "communication_channels.profile.importHistory.flash.error": "Verlaufsimport konnte nicht in die Warteschlange gestellt werden.",
+  "communication_channels.profile.importHistory.flash.success": "Verlaufsimport in der Warteschlange — Fortschritt oben verfolgen.",
+  "communication_channels.profile.importHistory.submit": "Import starten",
+  "communication_channels.profile.importHistory.submitting": "Wird eingereiht…",
+  "communication_channels.profile.importHistory.title": "Kanalverlauf importieren",
+  "communication_channels.profile.primary": "Primär",
+  "communication_channels.profile.subtitle": "Verbinden Sie Ihr persönliches Postfach, damit ausgehende Nachrichten von Ihrer Adresse stammen und eingehende E-Mails in Ihrem einheitlichen Posteingang landen.",
+  "communication_channels.profile.tableTitle": "Ihre Kanäle",
+  "communication_channels.profile.title": "Meine Kommunikationskanäle",
+  "communication_channels.push.button.reregister": "Push neu registrieren",
+  "communication_channels.push.flash.registerFailed": "Push-Registrierung fehlgeschlagen",
+  "communication_channels.push.status.active": "Push aktiv",
+  "communication_channels.push.status.failed": "Push fehlgeschlagen — nutze Polling",
+  "communication_channels.push.status.inactive": "Nur Polling",
+  "communication_channels.reaction.bar.aria": "Reaktionen",
+  "communication_channels.reaction.cannotRemoveExternal": "Reaktionen externer Teilnehmer können nur in der Anbieter-App entfernt werden.",
+  "communication_channels.reaction.toggleAria": "Reaktion {emoji} umschalten",
+  "communication_channels.status.active": "Aktiv",
+  "communication_channels.status.connected": "Verbunden",
+  "communication_channels.status.disconnected": "Getrennt",
+  "communication_channels.status.error": "Fehler",
+  "communication_channels.status.inactive": "Inaktiv",
+  "communication_channels.status.requiresReauth": "Erneutes Verbinden erforderlich"
+}

package/src/modules/communication_channels/i18n/en.json

@@ -0,0 +1,138 @@
+{
+  "communication_channels.channel.providers.gmail": "Gmail",
+  "communication_channels.channel.providers.imap": "IMAP",
+  "communication_channels.channel.providers.slack": "Slack",
+  "communication_channels.channel.providers.whatsapp": "WhatsApp",
+  "communication_channels.channelPayload.aria": "Channel payload",
+  "communication_channels.channelPayload.email.aria": "Email payload",
+  "communication_channels.channelPayload.types.email/mime": "Email (MIME)",
+  "communication_channels.columns.displayName": "Channel",
+  "communication_channels.columns.identifier": "External ID",
+  "communication_channels.columns.provider": "Provider",
+  "communication_channels.columns.status": "Status",
+  "communication_channels.columns.type": "Type",
+  "communication_channels.detail.capabilities": "Capabilities",
+  "communication_channels.detail.health": "Delivery health (last 24h)",
+  "communication_channels.detail.loading": "Loading channel...",
+  "communication_channels.detail.messages": "messages",
+  "communication_channels.detail.noCapabilities": "No capabilities snapshot recorded for this channel yet.",
+  "communication_channels.detail.noHealth": "No health data available.",
+  "communication_channels.detail.notFound": "Channel not found",
+  "communication_channels.detail.recentFailures": "Recent failures",
+  "communication_channels.detail.title": "Channel detail",
+  "communication_channels.emptyState": "No shared channels yet. This page lists shared, tenant-wide channels. Your personal email mailbox is private — connect and manage it under Profile → Communication Channels.",
+  "communication_channels.errors.loadDetail": "Failed to load channel",
+  "communication_channels.errors.loadList": "Failed to load channels",
+  "communication_channels.errors.reactionFailed": "Reaction failed",
+  "communication_channels.errors.undoBlockedPrimaryConflict": "Another channel is now primary for this user. Set it as non-primary before restoring the disconnected channel as primary.",
+  "communication_channels.infoPanel.aria": "Channel info",
+  "communication_channels.infoPanel.assignedTo": "Assigned to",
+  "communication_channels.infoPanel.contactPerson": "CRM contact",
+  "communication_channels.infoPanel.direction": "Direction",
+  "communication_channels.infoPanel.noThread": "This message is not on a thread; reassignment unavailable.",
+  "communication_channels.infoPanel.provider": "Provider",
+  "communication_channels.infoPanel.reassignError": "Reassignment failed",
+  "communication_channels.infoPanel.reassignSuccess": "Conversation reassigned.",
+  "communication_channels.infoPanel.status": "Status",
+  "communication_channels.infoPanel.subject": "Subject",
+  "communication_channels.infoPanel.title": "Channel info",
+  "communication_channels.infoPanel.type": "Type",
+  "communication_channels.infoPanel.unassigned": "Unassigned",
+  "communication_channels.nav.group": "Integrations",
+  "communication_channels.nav.title": "Communication Channels",
+  "communication_channels.notifications.channel_requires_reauth.body": "Authentication expired. Reconnect this channel to resume sending and receiving messages.",
+  "communication_channels.notifications.channel_requires_reauth.reconnect": "Reconnect",
+  "communication_channels.notifications.channel_requires_reauth.title": "Channel needs reconnection",
+  "communication_channels.notifications.channel_requires_reauth.unknownChannel": "A channel",
+  "communication_channels.notifications.message_received.body": "You received a new message via {{providerKey}}.",
+  "communication_channels.notifications.message_received.title": "New external message",
+  "communication_channels.notifications.message_received.unknownSender": "Unknown sender",
+  "communication_channels.profile.actions.disconnect": "Disconnect",
+  "communication_channels.profile.actions.disconnectFailed": "Failed to disconnect channel",
+  "communication_channels.profile.actions.disconnectSuccess": "Channel disconnected. You can reconnect it anytime.",
+  "communication_channels.profile.actions.importHistory": "Import history",
+  "communication_channels.profile.actions.pollNow": "Poll now",
+  "communication_channels.profile.actions.pollNowFailed": "Failed to trigger poll",
+  "communication_channels.profile.actions.pollNowSuccess": "Poll triggered — new messages will appear on linked Person timelines in a few seconds.",
+  "communication_channels.profile.actions.retryPoll": "Retry",
+  "communication_channels.profile.actions.setPrimary": "Set as primary",
+  "communication_channels.profile.actions.setPrimaryFailed": "Failed to set as primary",
+  "communication_channels.profile.actions.setPrimarySuccess": "Marked as primary.",
+  "communication_channels.profile.alerts.requiresReauth": "{count} channel(s) need reconnection. Click \"Reconnect\" on the affected channel below.",
+  "communication_channels.profile.columns.disconnect": "Connection",
+  "communication_channels.profile.columns.importHistory": "History",
+  "communication_channels.profile.columns.lastPolled": "Last synced",
+  "communication_channels.profile.columns.pollNow": "Sync",
+  "communication_channels.profile.columns.primary": "Primary",
+  "communication_channels.profile.connect.blocked": "Connection blocked by validation",
+  "communication_channels.profile.connect.cancel": "Cancel",
+  "communication_channels.profile.connect.connected": "Channel connected.",
+  "communication_channels.profile.connect.connecting": "Connecting...",
+  "communication_channels.profile.connect.credentialsFailed": "Could not connect mailbox.",
+  "communication_channels.profile.connect.fields.displayName": "Display name",
+  "communication_channels.profile.connect.fields.fromAddress": "From address",
+  "communication_channels.profile.connect.fields.imapHost": "IMAP host",
+  "communication_channels.profile.connect.fields.imapPassword": "IMAP password",
+  "communication_channels.profile.connect.fields.imapPort": "IMAP port",
+  "communication_channels.profile.connect.fields.imapTls": "IMAP security",
+  "communication_channels.profile.connect.fields.imapUser": "IMAP username",
+  "communication_channels.profile.connect.fields.smtpHost": "SMTP host",
+  "communication_channels.profile.connect.fields.smtpPassword": "SMTP password",
+  "communication_channels.profile.connect.fields.smtpPort": "SMTP port",
+  "communication_channels.profile.connect.fields.smtpTls": "SMTP security",
+  "communication_channels.profile.connect.fields.smtpUser": "SMTP username",
+  "communication_channels.profile.connect.gmail": "Connect Gmail",
+  "communication_channels.profile.connect.imap": "Connect IMAP",
+  "communication_channels.profile.connect.imapTitle": "Connect IMAP mailbox",
+  "communication_channels.profile.connect.mailboxAlreadyConnected": "This mailbox is already connected through another provider. Disconnect it first to reconnect it with a different one.",
+  "communication_channels.profile.connect.notConfigured": "This provider is not configured yet. Ask an administrator to add the OAuth Client ID and Secret under Integrations before connecting a mailbox.",
+  "communication_channels.profile.connect.oauthFailed": "Could not start OAuth connection.",
+  "communication_channels.profile.connect.save": "Connect",
+  "communication_channels.profile.connect.tls.none": "None",
+  "communication_channels.profile.connect.tls.starttls": "STARTTLS",
+  "communication_channels.profile.connect.tls.tls": "TLS",
+  "communication_channels.profile.disconnect.cancel": "Cancel",
+  "communication_channels.profile.disconnect.confirm": "Disconnect",
+  "communication_channels.profile.disconnect.description": "This removes the connection and stops syncing. Emails already imported stay on your timelines. You can reconnect anytime.",
+  "communication_channels.profile.disconnect.submitting": "Disconnecting…",
+  "communication_channels.profile.disconnect.title": "Disconnect channel",
+  "communication_channels.profile.empty": "You have no connected channels yet. Use the \"Connect channel\" entry above to add Gmail or IMAP.",
+  "communication_channels.profile.flash.connected": "Channel connected.",
+  "communication_channels.profile.flash.connectedWithProvider": "Channel connected ({provider}).",
+  "communication_channels.profile.flash.error": "Failed to connect channel.",
+  "communication_channels.profile.flash.errorWithCode": "Failed to connect channel — {code}.",
+  "communication_channels.profile.group": "Profile",
+  "communication_channels.profile.importHistory.cancel": "Cancel",
+  "communication_channels.profile.importHistory.description": "Pull older messages this channel never observed at connect-time. Filters narrow the search server-side.",
+  "communication_channels.profile.importHistory.errors.contactEmails": "One or more entries is not a valid email address.",
+  "communication_channels.profile.importHistory.errors.maxMessages": "Choose a number between 1 and 5000 messages.",
+  "communication_channels.profile.importHistory.errors.sinceDays": "Choose a number between 1 and 365 days.",
+  "communication_channels.profile.importHistory.fields.contactEmails": "Filter by sender (optional)",
+  "communication_channels.profile.importHistory.fields.contactEmailsHint": "Leave empty to scan all senders in the window.",
+  "communication_channels.profile.importHistory.fields.contactEmailsPlaceholder": "alice@example.com, bob@example.com",
+  "communication_channels.profile.importHistory.fields.maxMessages": "Maximum messages",
+  "communication_channels.profile.importHistory.fields.sinceDays": "Look back (days)",
+  "communication_channels.profile.importHistory.flash.error": "Failed to queue history import.",
+  "communication_channels.profile.importHistory.flash.success": "History import queued — track progress in the top bar.",
+  "communication_channels.profile.importHistory.submit": "Start import",
+  "communication_channels.profile.importHistory.submitting": "Queueing…",
+  "communication_channels.profile.importHistory.title": "Import channel history",
+  "communication_channels.profile.primary": "Primary",
+  "communication_channels.profile.subtitle": "Connect your personal mailbox so outbound messages come from your address and inbound emails land in your unified inbox.",
+  "communication_channels.profile.tableTitle": "Your channels",
+  "communication_channels.profile.title": "My communication channels",
+  "communication_channels.push.button.reregister": "Re-register push",
+  "communication_channels.push.flash.registerFailed": "Failed to register push",
+  "communication_channels.push.status.active": "Push active",
+  "communication_channels.push.status.failed": "Push failed — using polling",
+  "communication_channels.push.status.inactive": "Polling only",
+  "communication_channels.reaction.bar.aria": "Reactions",
+  "communication_channels.reaction.cannotRemoveExternal": "Reactions from external participants can only be removed in the provider app.",
+  "communication_channels.reaction.toggleAria": "Toggle {emoji} reaction",
+  "communication_channels.status.active": "Active",
+  "communication_channels.status.connected": "Connected",
+  "communication_channels.status.disconnected": "Disconnected",
+  "communication_channels.status.error": "Error",
+  "communication_channels.status.inactive": "Inactive",
+  "communication_channels.status.requiresReauth": "Needs reconnection"
+}