@open-mercato/core 0.6.5-develop.4384.1.ce2ec6eaaa → 0.6.5-develop.4393.1.de282b5dfd

package/generated/entities/message_channel_link/index.ts

@@ -0,0 +1,15 @@
+export const id = "id";
+export const message_id = "message_id";
+export const external_conversation_id = "external_conversation_id";
+export const external_message_id = "external_message_id";
+export const provider_key = "provider_key";
+export const channel_type = "channel_type";
+export const direction = "direction";
+export const delivery_status = "delivery_status";
+export const channel_payload = "channel_payload";
+export const channel_content_type = "channel_content_type";
+export const interactive_state = "interactive_state";
+export const channel_metadata = "channel_metadata";
+export const tenant_id = "tenant_id";
+export const organization_id = "organization_id";
+export const created_at = "created_at";

package/generated/entities/message_reaction/index.ts

@@ -0,0 +1,11 @@
+export const id = "id";
+export const message_id = "message_id";
+export const emoji = "emoji";
+export const reacted_by_user_id = "reacted_by_user_id";
+export const reacted_by_external_id = "reacted_by_external_id";
+export const reacted_by_display_name = "reacted_by_display_name";
+export const provider_key = "provider_key";
+export const external_reaction_id = "external_reaction_id";
+export const tenant_id = "tenant_id";
+export const organization_id = "organization_id";
+export const created_at = "created_at";

package/generated/entities.ids.generated.ts

@@ -28,6 +28,7 @@ export const M = {
     "data_sync": "data_sync",
     "sync_excel": "sync_excel",
     "messages": "messages",
+    "communication_channels": "communication_channels",
     "translations": "translations",
     "inbox_ops": "inbox_ops",
     "payment_gateways": "payment_gateways",
@@ -243,6 +244,16 @@ export const M = {
       "message_access_token": "messages:message_access_token",
       "message_confirmation": "messages:message_confirmation"
     },
+    "communication_channels": {
+      "communication_channel": "communication_channels:communication_channel",
+      "external_conversation": "communication_channels:external_conversation",
+      "external_message": "communication_channels:external_message",
+      "message_channel_link": "communication_channels:message_channel_link",
+      "channel_thread_mapping": "communication_channels:channel_thread_mapping",
+      "message_reaction": "communication_channels:message_reaction",
+      "channel_thread_token": "communication_channels:channel_thread_token",
+      "channel_ingest_dead_letter": "communication_channels:channel_ingest_dead_letter"
+    },
     "translations": {
       "entity_translation": "translations:entity_translation"
     },

package/generated/entity-fields-registry.ts

@@ -366,6 +366,63 @@ export const entityFieldsRegistry: Record<string, Record<string, string>> = {
       "created_at": "created_at",
       "updated_at": "updated_at"
     },
+    "channel_ingest_dead_letter": {
+      "id": "id",
+      "tenant_id": "tenant_id",
+      "organization_id": "organization_id",
+      "channel_id": "channel_id",
+      "provider_key": "provider_key",
+      "external_uid": "external_uid",
+      "external_message_id": "external_message_id",
+      "error_class": "error_class",
+      "error_message": "error_message",
+      "raw_body": "raw_body",
+      "created_at": "created_at"
+    },
+    "channel_thread_mapping": {
+      "id": "id",
+      "external_conversation_id": "external_conversation_id",
+      "message_thread_id": "message_thread_id",
+      "channel_id": "channel_id",
+      "provider_key": "provider_key",
+      "external_thread_ref": "external_thread_ref",
+      "assigned_user_id": "assigned_user_id",
+      "tenant_id": "tenant_id",
+      "organization_id": "organization_id",
+      "created_at": "created_at",
+      "updated_at": "updated_at"
+    },
+    "channel_thread_token": {
+      "id": "id",
+      "tenant_id": "tenant_id",
+      "organization_id": "organization_id",
+      "message_thread_id": "message_thread_id",
+      "token": "token",
+      "created_at": "created_at",
+      "last_seen_at": "last_seen_at"
+    },
+    "communication_channel": {
+      "id": "id",
+      "provider_key": "provider_key",
+      "channel_type": "channel_type",
+      "display_name": "display_name",
+      "external_identifier": "external_identifier",
+      "credentials_ref": "credentials_ref",
+      "capabilities": "capabilities",
+      "is_active": "is_active",
+      "user_id": "user_id",
+      "is_primary": "is_primary",
+      "poll_interval_seconds": "poll_interval_seconds",
+      "last_polled_at": "last_polled_at",
+      "status": "status",
+      "last_error": "last_error",
+      "channel_state": "channel_state",
+      "tenant_id": "tenant_id",
+      "organization_id": "organization_id",
+      "created_at": "created_at",
+      "updated_at": "updated_at",
+      "deleted_at": "deleted_at"
+    },
     "currency": {
       "id": "id",
       "organization_id": "organization_id",
@@ -679,6 +736,8 @@ export const entityFieldsRegistry: Record<string, Record<string, string>> = {
       "interaction_type": "interaction_type",
       "title": "title",
       "body": "body",
+      "external_message_id": "external_message_id",
+      "channel_provider_key": "channel_provider_key",
       "status": "status",
       "scheduled_at": "scheduled_at",
       "occurred_at": "occurred_at",
@@ -1079,6 +1138,32 @@ export const entityFieldsRegistry: Record<string, Record<string, string>> = {
       "updated_at": "updated_at",
       "deleted_at": "deleted_at"
     },
+    "external_conversation": {
+      "id": "id",
+      "channel_id": "channel_id",
+      "external_conversation_id": "external_conversation_id",
+      "subject": "subject",
+      "contact_person_id": "contact_person_id",
+      "assigned_user_id": "assigned_user_id",
+      "last_message_at": "last_message_at",
+      "tenant_id": "tenant_id",
+      "organization_id": "organization_id",
+      "created_at": "created_at",
+      "updated_at": "updated_at"
+    },
+    "external_message": {
+      "id": "id",
+      "channel_id": "channel_id",
+      "conversation_id": "conversation_id",
+      "external_message_id": "external_message_id",
+      "direction": "direction",
+      "sender_identifier": "sender_identifier",
+      "sender_display_name": "sender_display_name",
+      "provider_timestamp": "provider_timestamp",
+      "tenant_id": "tenant_id",
+      "organization_id": "organization_id",
+      "created_at": "created_at"
+    },
     "feature_toggle": {
       "id": "id",
       "identifier": "identifier",
@@ -1260,6 +1345,7 @@ export const entityFieldsRegistry: Record<string, Record<string, string>> = {
       "credentials": "credentials",
       "organization_id": "organization_id",
       "tenant_id": "tenant_id",
+      "user_id": "user_id",
       "created_at": "created_at",
       "updated_at": "updated_at",
       "deleted_at": "deleted_at"
@@ -1323,6 +1409,7 @@ export const entityFieldsRegistry: Record<string, Record<string, string>> = {
       "source_entity_id": "source_entity_id",
       "external_email": "external_email",
       "external_email_hash": "external_email_hash",
+      "idempotency_key": "idempotency_key",
       "external_name": "external_name",
       "external_email_sent_at": "external_email_sent_at",
       "external_email_failed_at": "external_email_failed_at",
@@ -1338,6 +1425,23 @@ export const entityFieldsRegistry: Record<string, Record<string, string>> = {
       "use_count": "use_count",
       "created_at": "created_at"
     },
+    "message_channel_link": {
+      "id": "id",
+      "message_id": "message_id",
+      "external_conversation_id": "external_conversation_id",
+      "external_message_id": "external_message_id",
+      "provider_key": "provider_key",
+      "channel_type": "channel_type",
+      "direction": "direction",
+      "delivery_status": "delivery_status",
+      "channel_payload": "channel_payload",
+      "channel_content_type": "channel_content_type",
+      "interactive_state": "interactive_state",
+      "channel_metadata": "channel_metadata",
+      "tenant_id": "tenant_id",
+      "organization_id": "organization_id",
+      "created_at": "created_at"
+    },
     "message_confirmation": {
       "id": "id",
       "message_id": "message_id",
@@ -1361,6 +1465,19 @@ export const entityFieldsRegistry: Record<string, Record<string, string>> = {
       "entity_snapshot": "entity_snapshot",
       "created_at": "created_at"
     },
+    "message_reaction": {
+      "id": "id",
+      "message_id": "message_id",
+      "emoji": "emoji",
+      "reacted_by_user_id": "reacted_by_user_id",
+      "reacted_by_external_id": "reacted_by_external_id",
+      "reacted_by_display_name": "reacted_by_display_name",
+      "provider_key": "provider_key",
+      "external_reaction_id": "external_reaction_id",
+      "tenant_id": "tenant_id",
+      "organization_id": "organization_id",
+      "created_at": "created_at"
+    },
     "message_recipient": {
       "id": "id",
       "message_id": "message_id",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@open-mercato/core",
-  "version": "0.6.5-develop.4384.1.ce2ec6eaaa",
+  "version": "0.6.5-develop.4393.1.de282b5dfd",
   "type": "module",
   "main": "./dist/index.js",
   "scripts": {
@@ -237,22 +237,23 @@
     "html-to-text": "^10.0.0",
     "mammoth": "^1.9.0",
     "pdfjs-dist": "^6.0.227",
+    "sanitize-html": "^2.13.0",
     "semver": "^7.8.1",
     "svix": "^1.95.1",
     "ts-pattern": "^5.0.0",
     "zod": "^4.4.3"
   },
   "peerDependencies": {
-    "@open-mercato/ai-assistant": "0.6.5-develop.4384.1.ce2ec6eaaa",
-    "@open-mercato/shared": "0.6.5-develop.4384.1.ce2ec6eaaa",
-    "@open-mercato/ui": "0.6.5-develop.4384.1.ce2ec6eaaa",
+    "@open-mercato/ai-assistant": "0.6.5-develop.4393.1.de282b5dfd",
+    "@open-mercato/shared": "0.6.5-develop.4393.1.de282b5dfd",
+    "@open-mercato/ui": "0.6.5-develop.4393.1.de282b5dfd",
     "react": "^19.0.0",
     "react-dom": "^19.0.0"
   },
   "devDependencies": {
-    "@open-mercato/ai-assistant": "0.6.5-develop.4384.1.ce2ec6eaaa",
-    "@open-mercato/shared": "0.6.5-develop.4384.1.ce2ec6eaaa",
-    "@open-mercato/ui": "0.6.5-develop.4384.1.ce2ec6eaaa",
+    "@open-mercato/ai-assistant": "0.6.5-develop.4393.1.de282b5dfd",
+    "@open-mercato/shared": "0.6.5-develop.4393.1.de282b5dfd",
+    "@open-mercato/ui": "0.6.5-develop.4393.1.de282b5dfd",
     "@testing-library/dom": "^10.4.1",
     "@testing-library/jest-dom": "^6.9.1",
     "@testing-library/react": "^16.3.1",
@@ -261,6 +262,7 @@
     "@types/jest": "^30.0.0",
     "@types/react": "^19.2.16",
     "@types/react-dom": "^19.2.3",
+    "@types/sanitize-html": "^2.13.0",
     "@types/semver": "^7.5.8",
     "chance": "^1.1.13",
     "jest": "^30.4.2",

package/src/helpers/integration/authFixtures.ts

@@ -1,7 +1,10 @@
 import { expect, type APIRequestContext } from '@playwright/test';
-import { apiRequest } from './api';
+import { apiRequest, getAuthToken } from './api';
 import { expectId, readJsonSafe } from './generalFixtures';
 
+// Re-exported so tests can import auth helpers from a single fixtures module.
+export { getAuthToken };
+
 const BASE_URL = process.env.BASE_URL?.trim() || null;
 
 function resolveUrl(path: string): string {

package/src/helpers/integration/communicationChannelsFixtures.ts

@@ -0,0 +1,124 @@
+import { expect, type APIRequestContext } from '@playwright/test';
+import { apiRequest } from './api';
+import { expectId, readJsonSafe } from './generalFixtures';
+
+/**
+ * Communication-channels integration fixtures.
+ *
+ * These drive the TEST-ONLY seed endpoint `POST /api/communication_channels/test-seed`,
+ * which is gated by `OM_ENABLE_TEST_CHANNEL_SEEDING` (inert/404 in production). Use
+ * {@link isChannelSeedingAvailable} to skip tests when the gate is off rather than
+ * failing them.
+ */
+
+export type SeedAddressField =
+  | string
+  | { address: string; name?: string }
+  | Array<string | { address: string; name?: string }>;
+
+const TEST_SEED_PATH = '/api/communication_channels/test-seed';
+
+/**
+ * Probe whether the env-gated test-seed endpoint is enabled in the target app.
+ * Returns false when the route answers 404 (flag off) so callers can `test.skip`.
+ * The caller's token must hold `communication_channels.connect_user_channel`.
+ */
+export async function isChannelSeedingAvailable(
+  request: APIRequestContext,
+  token: string,
+): Promise<boolean> {
+  // A malformed body returns 422 when the gate is ON and 404 when it is OFF.
+  const response = await apiRequest(request, 'POST', TEST_SEED_PATH, {
+    token,
+    data: { action: '__probe__' },
+  });
+  return response.status() !== 404;
+}
+
+/**
+ * Seed a connected, network-free `__test_seed__` channel owned by the caller.
+ * Returns the new channel id. Tear down with {@link deleteChannelIfExists}.
+ */
+export async function seedConnectedChannel(
+  request: APIRequestContext,
+  token: string,
+  input: { displayName?: string; externalIdentifier?: string } = {},
+): Promise<string> {
+  const response = await apiRequest(request, 'POST', TEST_SEED_PATH, {
+    token,
+    data: { action: 'connect-channel', ...input },
+  });
+  expect(
+    response.status(),
+    'POST /api/communication_channels/test-seed (connect-channel) should return 201',
+  ).toBe(201);
+  const body = await readJsonSafe<{ channelId?: string }>(response);
+  return expectId(body?.channelId, 'connect-channel response should include channelId');
+}
+
+/**
+ * Seed an inbound `MessageChannelLink` for `channelId` and emit
+ * `communication_channels.message.received` through the real event bus. The
+ * persistent customers link-channel-message-received subscriber is enqueued to
+ * the `events` queue — drain it with `drainIntegrationQueue('events')`.
+ *
+ * Returns the created link + message ids (the message id is the platform
+ * `messages.message` id, usable as `messageThreadId` to thread a follow-up).
+ */
+export async function seedInboundMessage(
+  request: APIRequestContext,
+  token: string,
+  input: {
+    channelId: string;
+    from?: SeedAddressField;
+    to?: SeedAddressField;
+    cc?: SeedAddressField;
+    subject?: string;
+    bodyText?: string;
+    messageId?: string;
+    inReplyTo?: string;
+    references?: string[];
+    messageThreadId?: string;
+    providerKey?: string;
+  },
+): Promise<{ channelLinkId: string; messageId: string; conversationId: string }> {
+  const response = await apiRequest(request, 'POST', TEST_SEED_PATH, {
+    token,
+    data: { action: 'emit-inbound', ...input },
+  });
+  expect(
+    response.status(),
+    'POST /api/communication_channels/test-seed (emit-inbound) should return 201',
+  ).toBe(201);
+  const body = await readJsonSafe<{
+    channelLinkId?: string;
+    messageId?: string;
+    conversationId?: string;
+  }>(response);
+  return {
+    channelLinkId: expectId(body?.channelLinkId, 'emit-inbound response should include channelLinkId'),
+    messageId: expectId(body?.messageId, 'emit-inbound response should include messageId'),
+    conversationId: expectId(
+      body?.conversationId,
+      'emit-inbound response should include conversationId',
+    ),
+  };
+}
+
+/**
+ * Best-effort delete of a seeded channel via the owner-scoped DELETE route.
+ * Safe to call with a null id in `finally`.
+ */
+export async function deleteChannelIfExists(
+  request: APIRequestContext,
+  token: string | null,
+  channelId: string | null,
+): Promise<void> {
+  if (!token || !channelId) return;
+  await apiRequest(
+    request,
+    'DELETE',
+    `/api/communication_channels/channels/${encodeURIComponent(channelId)}`,
+    { token },
+  ).catch(() => undefined);
+}

package/src/modules/communication_channels/acl.ts

@@ -0,0 +1,43 @@
+export const features = [
+  { id: 'communication_channels.view', title: 'View communication channels', module: 'communication_channels' },
+  { id: 'communication_channels.manage', title: 'Manage communication channels', module: 'communication_channels' },
+  { id: 'communication_channels.react', title: 'React to channel messages', module: 'communication_channels' },
+  { id: 'communication_channels.assign', title: 'Assign channel conversations', module: 'communication_channels' },
+  /**
+   * Per-user channel ownership (added by the email integration spec).
+   *
+   * Gates the "Connect my mailbox" flow on the per-user profile page. Split from
+   * `communication_channels.manage` so policy can disable new linking while
+   * preserving existing accounts (e.g. during a security incident response).
+   * Default-granted to all roles in `setup.ts`.
+   */
+  { id: 'communication_channels.connect_user_channel', title: 'Connect own communication channel', module: 'communication_channels' },
+  /**
+   * Reserved for a future v2 team-oversight capability. NOT consulted in v1:
+   * personal mailboxes (`CommunicationChannel.user_id` set) follow the strict
+   * owner-only privacy model, so this feature grants NO cross-user channel view.
+   * The admin channels list (`GET /api/communication_channels/channels`) returns
+   * `user_id IS NULL` rows only; personal mailboxes surface exclusively on the
+   * owner's profile page and are never exposed to admins/superadmins in v1.
+   * Granted to `superadmin` + `admin` only so the inert grant is in place ahead
+   * of the audited v2 oversight feature that will re-activate it.
+   */
+  { id: 'communication_channels.admin', title: 'Administer all communication channels (tenant-wide)', module: 'communication_channels' },
+  /**
+   * Trigger the "Import history" job for a channel — fetch older messages
+   * the channel never saw at bootstrap (Spec B § Phase B6). Separate from
+   * `manage` so policy can gate bulk historical imports during quiet hours
+   * or cost-controlled rollouts while leaving normal channel CRUD open.
+   */
+  { id: 'communication_channels.channel.import_history', title: 'Import channel history', module: 'communication_channels' },
+  /**
+   * Manage provider push delivery (Spec C — Gmail Pub/Sub push
+   * subscriptions). Gates the "Re-register push" operator button and any
+   * future push-status manipulation. Granted to admin + superadmin only —
+   * regular users don't need to think about whether mail arrives via
+   * push or polling, the system handles it.
+   */
+  { id: 'communication_channels.channel.push.manage', title: 'Manage push delivery', module: 'communication_channels' },
+] as const
+
+export default features

package/src/modules/communication_channels/api/delete/channels/[id]/route.ts

@@ -0,0 +1,163 @@
+import { NextResponse } from 'next/server'
+import { z } from 'zod'
+import { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'
+import { createRequestContainer } from '@open-mercato/shared/lib/di/container'
+import type { CommandBus } from '@open-mercato/shared/lib/commands'
+import type { EntityManager } from '@mikro-orm/postgresql'
+import { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'
+import { CommunicationChannel } from '../../../../data/entities'
+import { ChannelAccessDeniedError, assertCanManageChannel } from '../../../../lib/access-control'
+import {
+  COMMUNICATION_CHANNELS_DELETE_CHANNEL_COMMAND_ID,
+  type DeleteChannelInput,
+  type DeleteChannelResult,
+} from '../../../../commands/delete-channel'
+import { validateRouteMutationGuard } from '../../../../lib/route-mutation-guard'
+
+type RbacServiceLike = {
+  loadAcl: (
+    userId: string,
+    scope: { tenantId: string | null; organizationId: string | null },
+  ) => Promise<{ isSuperAdmin: boolean; features: string[]; organizations: string[] | null }>
+}
+
+/**
+ * Soft-delete (remove) a communication channel.
+ *
+ * Per-user access guard: only the channel owner — or an admin holding
+ * `communication_channels.admin` — may delete a channel. Non-owners get a 404
+ * (existence masking), consistent with the other channel routes. The declarative
+ * `communication_channels.manage` feature gates the route itself; deletion is a
+ * management operation alongside disconnect/set-primary.
+ */
+export const metadata = {
+  path: '/communication_channels/channels/[id]',
+  DELETE: {
+    // Owner self-service: a user may disconnect their OWN personal mailbox
+    // (gated by `connect_user_channel`). Deleting a shared/tenant-wide channel
+    // still requires `manage` — enforced per channel type by
+    // `assertCanManageChannel` in the handler.
+    requireAuth: true,
+    requireFeatures: ['communication_channels.connect_user_channel'],
+  },
+}
+
+type RouteContext = {
+  params: Promise<{ id: string }> | { id: string }
+}
+
+export async function DELETE(req: Request, context: RouteContext): Promise<Response> {
+  const { id } = await context.params
+  if (!z.string().uuid().safeParse(id).success) {
+    return NextResponse.json({ error: 'Invalid channel id' }, { status: 400 })
+  }
+
+  const auth = await getAuthFromRequest(req)
+  if (!auth?.sub || !auth?.tenantId) {
+    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })
+  }
+
+  const container = await createRequestContainer()
+  const em = (container.resolve('em') as EntityManager).fork()
+  const organizationId = (auth as { orgId?: string | null }).orgId ?? null
+  const dscope = { tenantId: auth.tenantId as string, organizationId }
+
+  const channel = await findOneWithDecryption(
+    em,
+    CommunicationChannel,
+    {
+      id,
+      tenantId: auth.tenantId as string,
+      organizationId,
+      deletedAt: null,
+    },
+    undefined,
+    dscope,
+  )
+  if (!channel) {
+    return NextResponse.json({ error: 'Channel not found' }, { status: 404 })
+  }
+
+  let userFeatures: string[] = []
+  try {
+    const rbac = container.resolve('rbacService') as RbacServiceLike
+    const acl = await rbac.loadAcl(auth.sub as string, {
+      tenantId: auth.tenantId as string,
+      organizationId,
+    })
+    userFeatures = acl?.isSuperAdmin ? ['*'] : Array.isArray(acl?.features) ? acl.features : []
+  } catch {
+    userFeatures = []
+  }
+  try {
+    assertCanManageChannel(
+      { userId: (channel as { userId?: string | null }).userId },
+      auth.sub as string,
+      userFeatures,
+      'communication_channels.manage',
+    )
+  } catch (err) {
+    if (err instanceof ChannelAccessDeniedError) {
+      return NextResponse.json({ error: 'Channel not found' }, { status: 404 })
+    }
+    throw err
+  }
+
+  const guard = await validateRouteMutationGuard({
+    container,
+    req,
+    auth,
+    input: {
+      resourceKind: 'communication_channels.channel',
+      resourceId: id,
+      operation: 'delete',
+    },
+  })
+  if ('response' in guard) return guard.response
+
+  const commandBus = container.resolve('commandBus') as CommandBus
+  const input: DeleteChannelInput = {
+    channelId: id,
+    userId: auth.sub as string,
+    scope: { tenantId: auth.tenantId as string, organizationId },
+  }
+  const { result } = await commandBus.execute<DeleteChannelInput, DeleteChannelResult>(
+    COMMUNICATION_CHANNELS_DELETE_CHANNEL_COMMAND_ID,
+    {
+      input,
+      ctx: {
+        container,
+        auth: auth as never,
+        organizationScope: null,
+        selectedOrganizationId: organizationId,
+        organizationIds: organizationId ? [organizationId] : null,
+      },
+    },
+  )
+
+  // 'noop' (channel vanished between the load and the command) and 'not_owner'
+  // both map to 404 to avoid leaking ownership/existence.
+  if (result.status !== 'deleted') {
+    return NextResponse.json({ error: 'Channel not found' }, { status: 404 })
+  }
+  await guard.afterSuccess()
+  return new NextResponse(null, { status: 204 })
+}
+
+export const openApi = {
+  tags: ['CommunicationChannels'],
+  methods: {
+    DELETE: {
+      summary: 'Delete (soft-delete) a communication channel',
+      tags: ['CommunicationChannels'],
+      responses: [
+        { status: 204, description: 'Channel deleted' },
+        { status: 400, description: 'Invalid channel id' },
+        { status: 401, description: 'Unauthorized' },
+        { status: 404, description: 'Channel not found or not owned by current user' },
+      ],
+    },
+  },
+}
+
+export default DELETE