@open-mercato/core 0.6.5-develop.4384.1.ce2ec6eaaa → 0.6.5-develop.4397.1.9a65481757

package/dist/modules/communication_channels/api/post/oauth/[provider]/initiate/route.js

@@ -0,0 +1,157 @@
+import { NextResponse } from "next/server";
+import { z } from "zod";
+import { getAuthFromRequest } from "@open-mercato/shared/lib/auth/server";
+import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
+import { readJsonSafe } from "@open-mercato/shared/lib/http/readJsonSafe";
+import { toAbsoluteUrl } from "@open-mercato/shared/lib/url";
+import { getChannelAdapter } from "../../../../../lib/adapter-registry-singleton.js";
+import { resolveOAuthClientCredentials } from "../../../../../lib/oauth-client-config.js";
+import {
+  COMMUNICATION_CHANNELS_OAUTH_STATE_COOKIE_NAME,
+  COMMUNICATION_CHANNELS_OAUTH_STATE_TTL_MS,
+  createOAuthState,
+  DEFAULT_OAUTH_RETURN_URL,
+  isSafeOAuthReturnUrl,
+  normalizeOAuthReturnUrl,
+  OAuthStateError
+} from "../../../../../lib/oauth-state.js";
+const metadata = {
+  path: "/communication_channels/oauth/[provider]/initiate",
+  POST: {
+    requireAuth: true,
+    requireFeatures: ["communication_channels.connect_user_channel"]
+  }
+};
+const initiateBodySchema = z.object({
+  channelType: z.literal("email").optional(),
+  /** Where to send the user after the callback succeeds. Defaults to the profile page. */
+  returnUrl: z.string().min(1).max(2048).refine(isSafeOAuthReturnUrl, {
+    message: "returnUrl must be a same-origin path"
+  }).optional(),
+  /** Optional pre-filled email — Google `login_hint`. */
+  loginHint: z.string().email().optional()
+});
+function defaultRedirectUri(req, providerKey) {
+  return toAbsoluteUrl(req, `/api/communication_channels/oauth/${providerKey}/callback`);
+}
+async function POST(req, context) {
+  const { provider } = await context.params;
+  if (!/^[a-z0-9_-]+$/i.test(provider)) {
+    return NextResponse.json({ error: "Invalid provider" }, { status: 400 });
+  }
+  const adapter = getChannelAdapter(provider);
+  if (!adapter) {
+    return NextResponse.json(
+      { error: `No ChannelAdapter for provider: ${provider}` },
+      { status: 404 }
+    );
+  }
+  if (typeof adapter.buildOAuthAuthorizeUrl !== "function") {
+    return NextResponse.json(
+      { error: `Provider '${provider}' does not support OAuth (no buildOAuthAuthorizeUrl)` },
+      { status: 400 }
+    );
+  }
+  const auth = await getAuthFromRequest(req);
+  if (!auth?.sub || !auth?.tenantId) {
+    return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
+  }
+  let body;
+  try {
+    const json = await readJsonSafe(req, {});
+    body = initiateBodySchema.parse(json ?? {});
+  } catch (err) {
+    return NextResponse.json(
+      { error: err instanceof Error ? err.message : "Invalid request body" },
+      { status: 422 }
+    );
+  }
+  const container = await createRequestContainer();
+  const credentialsService = (() => {
+    try {
+      return container.resolve("integrationCredentialsService");
+    } catch {
+      return null;
+    }
+  })();
+  const credentials = await resolveOAuthClientCredentials(credentialsService, provider, {
+    tenantId: auth.tenantId,
+    organizationId: auth.orgId ?? null
+  });
+  if (!credentials) {
+    return NextResponse.json(
+      {
+        error: `${provider} is not configured for this workspace yet. An administrator must add the OAuth Client ID and Secret under Integrations before mailboxes can be connected.`,
+        code: "oauth_client_not_configured"
+      },
+      { status: 409 }
+    );
+  }
+  const redirectUri = defaultRedirectUri(req, provider);
+  const stateEnvelope = createOAuthState({
+    userId: auth.sub,
+    tenantId: auth.tenantId,
+    organizationId: auth.orgId ?? null,
+    providerKey: provider,
+    returnUrl: normalizeOAuthReturnUrl(body.returnUrl, DEFAULT_OAUTH_RETURN_URL)
+  });
+  let result;
+  try {
+    result = await adapter.buildOAuthAuthorizeUrl({
+      state: stateEnvelope.stateParam,
+      nonce: stateEnvelope.payload.nonce,
+      redirectUri,
+      credentials,
+      scope: {
+        tenantId: auth.tenantId,
+        organizationId: auth.orgId ?? auth.tenantId
+      },
+      loginHint: body.loginHint
+    });
+  } catch (err) {
+    if (err instanceof OAuthStateError) {
+      return NextResponse.json({ error: err.message, code: err.code }, { status: 500 });
+    }
+    const message = err instanceof Error ? err.message : "Failed to build OAuth authorize URL";
+    return NextResponse.json({ error: message }, { status: 502 });
+  }
+  const finalCookie = result.extra ? (await import("../../../../../lib/oauth-state.js")).encryptOAuthState({
+    ...stateEnvelope.payload,
+    extra: { ...stateEnvelope.payload.extra ?? {}, ...result.extra }
+  }) : stateEnvelope.cookie;
+  const response = NextResponse.json({ authorizeUrl: result.authorizeUrl });
+  response.cookies.set({
+    name: COMMUNICATION_CHANNELS_OAUTH_STATE_COOKIE_NAME,
+    value: finalCookie,
+    httpOnly: true,
+    secure: process.env.NODE_ENV === "production",
+    sameSite: "lax",
+    path: "/",
+    maxAge: Math.floor(COMMUNICATION_CHANNELS_OAUTH_STATE_TTL_MS / 1e3)
+  });
+  return response;
+}
+const openApi = {
+  tags: ["CommunicationChannels"],
+  methods: {
+    POST: {
+      summary: "Start a per-user channel OAuth flow",
+      tags: ["CommunicationChannels"],
+      responses: [
+        { status: 200, description: "Authorize URL + state cookie set" },
+        { status: 400, description: "Invalid provider or unsupported (no OAuth)" },
+        { status: 401, description: "Unauthorized" },
+        { status: 422, description: "Invalid request body" },
+        { status: 502, description: "Adapter failed to build authorize URL" }
+      ]
+    }
+  }
+};
+var route_default = POST;
+export {
+  POST,
+  route_default as default,
+  metadata,
+  openApi
+};
+//# sourceMappingURL=route.js.map

package/dist/modules/communication_channels/api/post/oauth/[provider]/initiate/route.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../../../../src/modules/communication_channels/api/post/oauth/%5Bprovider%5D/initiate/route.ts"],
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { readJsonSafe } from '@open-mercato/shared/lib/http/readJsonSafe'\nimport { toAbsoluteUrl } from '@open-mercato/shared/lib/url'\nimport { getChannelAdapter } from '../../../../../lib/adapter-registry-singleton'\nimport { resolveOAuthClientCredentials } from '../../../../../lib/oauth-client-config'\nimport {\n  COMMUNICATION_CHANNELS_OAUTH_STATE_COOKIE_NAME,\n  COMMUNICATION_CHANNELS_OAUTH_STATE_TTL_MS,\n  createOAuthState,\n  DEFAULT_OAUTH_RETURN_URL,\n  isSafeOAuthReturnUrl,\n  normalizeOAuthReturnUrl,\n  OAuthStateError,\n} from '../../../../../lib/oauth-state'\n\nexport const metadata = {\n  path: '/communication_channels/oauth/[provider]/initiate',\n  POST: {\n    requireAuth: true,\n    requireFeatures: ['communication_channels.connect_user_channel'],\n  },\n}\n\nconst initiateBodySchema = z.object({\n  channelType: z.literal('email').optional(),\n  /** Where to send the user after the callback succeeds. Defaults to the profile page. */\n  returnUrl: z.string().min(1).max(2048).refine(isSafeOAuthReturnUrl, {\n    message: 'returnUrl must be a same-origin path',\n  }).optional(),\n  /** Optional pre-filled email \u2014 Google `login_hint`. */\n  loginHint: z.string().email().optional(),\n})\n\ntype RouteContext = {\n  params: Promise<{ provider: string }> | { provider: string }\n}\n\ntype CredentialsServiceLike = {\n  resolve: (\n    integrationId: string,\n    scope: { organizationId: string; tenantId: string },\n  ) => Promise<Record<string, unknown> | null>\n}\n\n/**\n * Default profile redirect \u2014 matches the per-user channels page registered by\n * slice 3d (the `/backend/profile/communication-channels` route).\n */\nfunction defaultRedirectUri(req: Request, providerKey: string): string {\n  // Derive the origin from the configured app URL / forwarded headers rather\n  // than the raw request origin, so the redirect_uri matches the value the\n  // provider has registered even when the app sits behind a reverse proxy.\n  return toAbsoluteUrl(req, `/api/communication_channels/oauth/${providerKey}/callback`)\n}\n\nexport async function POST(req: Request, context: RouteContext): Promise<Response> {\n  const { provider } = await context.params\n  if (!/^[a-z0-9_-]+$/i.test(provider)) {\n    return NextResponse.json({ error: 'Invalid provider' }, { status: 400 })\n  }\n\n  const adapter = getChannelAdapter(provider)\n  if (!adapter) {\n    return NextResponse.json(\n      { error: `No ChannelAdapter for provider: ${provider}` },\n      { status: 404 },\n    )\n  }\n  if (typeof adapter.buildOAuthAuthorizeUrl !== 'function') {\n    return NextResponse.json(\n      { error: `Provider '${provider}' does not support OAuth (no buildOAuthAuthorizeUrl)` },\n      { status: 400 },\n    )\n  }\n\n  const auth = await getAuthFromRequest(req)\n  if (!auth?.sub || !auth?.tenantId) {\n    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n  }\n\n  let body: z.infer<typeof initiateBodySchema>\n  try {\n    const json = await readJsonSafe(req, {})\n    body = initiateBodySchema.parse(json ?? {})\n  } catch (err) {\n    return NextResponse.json(\n      { error: err instanceof Error ? err.message : 'Invalid request body' },\n      { status: 422 },\n    )\n  }\n\n  const container = await createRequestContainer()\n  const credentialsService = (() => {\n    try {\n      return container.resolve('integrationCredentialsService') as CredentialsServiceLike\n    } catch {\n      return null\n    }\n  })()\n  // OAuth client credentials are tenant-level \u2014 the admin configures them under\n  // the `channel_<provider>` integration in the Integrations UI (stored at\n  // userId = null). A missing row means the provider has not been set up yet;\n  // we surface that as an actionable error instead of handing an empty object to\n  // the adapter (which would throw a cryptic Zod \"expected string\" message).\n  const credentials = await resolveOAuthClientCredentials(credentialsService, provider, {\n    tenantId: auth.tenantId as string,\n    organizationId: (auth as { orgId?: string | null }).orgId ?? null,\n  })\n  if (!credentials) {\n    return NextResponse.json(\n      {\n        error:\n          `${provider} is not configured for this workspace yet. An administrator must add the OAuth Client ID and Secret under Integrations before mailboxes can be connected.`,\n        code: 'oauth_client_not_configured',\n      },\n      { status: 409 },\n    )\n  }\n\n  const redirectUri = defaultRedirectUri(req, provider)\n  const stateEnvelope = createOAuthState({\n    userId: auth.sub as string,\n    tenantId: auth.tenantId as string,\n    organizationId: (auth as { orgId?: string | null }).orgId ?? null,\n    providerKey: provider,\n    returnUrl: normalizeOAuthReturnUrl(body.returnUrl, DEFAULT_OAUTH_RETURN_URL),\n  })\n\n  let result\n  try {\n    result = await adapter.buildOAuthAuthorizeUrl({\n      state: stateEnvelope.stateParam,\n      nonce: stateEnvelope.payload.nonce,\n      redirectUri,\n      credentials,\n      scope: {\n        tenantId: auth.tenantId as string,\n        organizationId:\n          (auth as { orgId?: string | null }).orgId ?? (auth.tenantId as string),\n      },\n      loginHint: body.loginHint,\n    })\n  } catch (err) {\n    if (err instanceof OAuthStateError) {\n      return NextResponse.json({ error: err.message, code: err.code }, { status: 500 })\n    }\n    const message = err instanceof Error ? err.message : 'Failed to build OAuth authorize URL'\n    return NextResponse.json({ error: message }, { status: 502 })\n  }\n\n  // If the adapter packed extras (PKCE verifier, scopes), bake them into the\n  // state cookie now so the callback handler can pass them to exchangeOAuthCode.\n  const finalCookie = result.extra\n    ? (await import('../../../../../lib/oauth-state')).encryptOAuthState({\n        ...stateEnvelope.payload,\n        extra: { ...(stateEnvelope.payload.extra ?? {}), ...result.extra },\n      })\n    : stateEnvelope.cookie\n\n  const response = NextResponse.json({ authorizeUrl: result.authorizeUrl })\n  response.cookies.set({\n    name: COMMUNICATION_CHANNELS_OAUTH_STATE_COOKIE_NAME,\n    value: finalCookie,\n    httpOnly: true,\n    secure: process.env.NODE_ENV === 'production',\n    sameSite: 'lax',\n    path: '/',\n    maxAge: Math.floor(COMMUNICATION_CHANNELS_OAUTH_STATE_TTL_MS / 1000),\n  })\n  return response\n}\n\nexport const openApi = {\n  tags: ['CommunicationChannels'],\n  methods: {\n    POST: {\n      summary: 'Start a per-user channel OAuth flow',\n      tags: ['CommunicationChannels'],\n      responses: [\n        { status: 200, description: 'Authorize URL + state cookie set' },\n        { status: 400, description: 'Invalid provider or unsupported (no OAuth)' },\n        { status: 401, description: 'Unauthorized' },\n        { status: 422, description: 'Invalid request body' },\n        { status: 502, description: 'Adapter failed to build authorize URL' },\n      ],\n    },\n  },\n}\nexport default POST\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAClB,SAAS,0BAA0B;AACnC,SAAS,8BAA8B;AACvC,SAAS,oBAAoB;AAC7B,SAAS,qBAAqB;AAC9B,SAAS,yBAAyB;AAClC,SAAS,qCAAqC;AAC9C;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEA,MAAM,WAAW;AAAA,EACtB,MAAM;AAAA,EACN,MAAM;AAAA,IACJ,aAAa;AAAA,IACb,iBAAiB,CAAC,6CAA6C;AAAA,EACjE;AACF;AAEA,MAAM,qBAAqB,EAAE,OAAO;AAAA,EAClC,aAAa,EAAE,QAAQ,OAAO,EAAE,SAAS;AAAA;AAAA,EAEzC,WAAW,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,IAAI,EAAE,OAAO,sBAAsB;AAAA,IAClE,SAAS;AAAA,EACX,CAAC,EAAE,SAAS;AAAA;AAAA,EAEZ,WAAW,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS;AACzC,CAAC;AAiBD,SAAS,mBAAmB,KAAc,aAA6B;AAIrE,SAAO,cAAc,KAAK,qCAAqC,WAAW,WAAW;AACvF;AAEA,eAAsB,KAAK,KAAc,SAA0C;AACjF,QAAM,EAAE,SAAS,IAAI,MAAM,QAAQ;AACnC,MAAI,CAAC,iBAAiB,KAAK,QAAQ,GAAG;AACpC,WAAO,aAAa,KAAK,EAAE,OAAO,mBAAmB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACzE;AAEA,QAAM,UAAU,kBAAkB,QAAQ;AAC1C,MAAI,CAAC,SAAS;AACZ,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,mCAAmC,QAAQ,GAAG;AAAA,MACvD,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACA,MAAI,OAAO,QAAQ,2BAA2B,YAAY;AACxD,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,aAAa,QAAQ,uDAAuD;AAAA,MACrF,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AAEA,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM,OAAO,CAAC,MAAM,UAAU;AACjC,WAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrE;AAEA,MAAI;AACJ,MAAI;AACF,UAAM,OAAO,MAAM,aAAa,KAAK,CAAC,CAAC;AACvC,WAAO,mBAAmB,MAAM,QAAQ,CAAC,CAAC;AAAA,EAC5C,SAAS,KAAK;AACZ,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,eAAe,QAAQ,IAAI,UAAU,uBAAuB;AAAA,MACrE,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,sBAAsB,MAAM;AAChC,QAAI;AACF,aAAO,UAAU,QAAQ,+BAA+B;AAAA,IAC1D,QAAQ;AACN,aAAO;AAAA,IACT;AAAA,EACF,GAAG;AAMH,QAAM,cAAc,MAAM,8BAA8B,oBAAoB,UAAU;AAAA,IACpF,UAAU,KAAK;AAAA,IACf,gBAAiB,KAAmC,SAAS;AAAA,EAC/D,CAAC;AACD,MAAI,CAAC,aAAa;AAChB,WAAO,aAAa;AAAA,MAClB;AAAA,QACE,OACE,GAAG,QAAQ;AAAA,QACb,MAAM;AAAA,MACR;AAAA,MACA,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AAEA,QAAM,cAAc,mBAAmB,KAAK,QAAQ;AACpD,QAAM,gBAAgB,iBAAiB;AAAA,IACrC,QAAQ,KAAK;AAAA,IACb,UAAU,KAAK;AAAA,IACf,gBAAiB,KAAmC,SAAS;AAAA,IAC7D,aAAa;AAAA,IACb,WAAW,wBAAwB,KAAK,WAAW,wBAAwB;AAAA,EAC7E,CAAC;AAED,MAAI;AACJ,MAAI;AACF,aAAS,MAAM,QAAQ,uBAAuB;AAAA,MAC5C,OAAO,cAAc;AAAA,MACrB,OAAO,cAAc,QAAQ;AAAA,MAC7B;AAAA,MACA;AAAA,MACA,OAAO;AAAA,QACL,UAAU,KAAK;AAAA,QACf,gBACG,KAAmC,SAAU,KAAK;AAAA,MACvD;AAAA,MACA,WAAW,KAAK;AAAA,IAClB,CAAC;AAAA,EACH,SAAS,KAAK;AACZ,QAAI,eAAe,iBAAiB;AAClC,aAAO,aAAa,KAAK,EAAE,OAAO,IAAI,SAAS,MAAM,IAAI,KAAK,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAClF;AACA,UAAM,UAAU,eAAe,QAAQ,IAAI,UAAU;AACrD,WAAO,aAAa,KAAK,EAAE,OAAO,QAAQ,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC9D;AAIA,QAAM,cAAc,OAAO,SACtB,MAAM,OAAO,gCAAgC,GAAG,kBAAkB;AAAA,IACjE,GAAG,cAAc;AAAA,IACjB,OAAO,EAAE,GAAI,cAAc,QAAQ,SAAS,CAAC,GAAI,GAAG,OAAO,MAAM;AAAA,EACnE,CAAC,IACD,cAAc;AAElB,QAAM,WAAW,aAAa,KAAK,EAAE,cAAc,OAAO,aAAa,CAAC;AACxE,WAAS,QAAQ,IAAI;AAAA,IACnB,MAAM;AAAA,IACN,OAAO;AAAA,IACP,UAAU;AAAA,IACV,QAAQ,QAAQ,IAAI,aAAa;AAAA,IACjC,UAAU;AAAA,IACV,MAAM;AAAA,IACN,QAAQ,KAAK,MAAM,4CAA4C,GAAI;AAAA,EACrE,CAAC;AACD,SAAO;AACT;AAEO,MAAM,UAAU;AAAA,EACrB,MAAM,CAAC,uBAAuB;AAAA,EAC9B,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,MAAM,CAAC,uBAAuB;AAAA,MAC9B,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,mCAAmC;AAAA,QAC/D,EAAE,QAAQ,KAAK,aAAa,6CAA6C;AAAA,QACzE,EAAE,QAAQ,KAAK,aAAa,eAAe;AAAA,QAC3C,EAAE,QAAQ,KAAK,aAAa,uBAAuB;AAAA,QACnD,EAAE,QAAQ,KAAK,aAAa,wCAAwC;AAAA,MACtE;AAAA,IACF;AAAA,EACF;AACF;AACA,IAAO,gBAAQ;",
+  "names": []
+}

package/dist/modules/communication_channels/api/post/send-as-user/route.js

@@ -0,0 +1,115 @@
+import { NextResponse } from "next/server";
+import { z } from "zod";
+import { getAuthFromRequest } from "@open-mercato/shared/lib/auth/server";
+import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
+import { readJsonSafe } from "@open-mercato/shared/lib/http/readJsonSafe";
+import { sendAsUser } from "../../../lib/send-as-user.js";
+import { validateRouteMutationGuard } from "../../../lib/route-mutation-guard.js";
+const metadata = {
+  path: "/communication_channels/send-as-user",
+  POST: {
+    requireAuth: true,
+    requireFeatures: ["communication_channels.manage"]
+  }
+};
+const bodySchema = z.object({
+  /** ID of the user-owned channel to send from. Caller MUST own the channel. */
+  userChannelId: z.string().uuid(),
+  to: z.array(z.string().email()).min(1),
+  cc: z.array(z.string().email()).optional(),
+  bcc: z.array(z.string().email()).optional(),
+  // `.regex(/^[^\r\n]*$/)` rejects CR/LF so a caller cannot inject extra email
+  // headers (e.g. a hidden Bcc) through the subject / threading fields. The
+  // outbound MIME assembler also sanitizes these, but fail fast at the edge.
+  subject: z.string().min(1).max(500).regex(/^[^\r\n]*$/),
+  body: z.object({
+    plain: z.string().max(5e4).optional(),
+    html: z.string().max(2e5).optional()
+  }),
+  inReplyTo: z.string().min(1).max(500).regex(/^[^\r\n]*$/).optional(),
+  references: z.array(z.string().min(1).max(500).regex(/^[^\r\n]*$/)).optional(),
+  /**
+   * Free-form metadata persisted on the resulting MessageChannelLink. Used by
+   * downstream subscribers (e.g. the customers module's link-channel-message
+   * subscriber) to anchor the sent message back to a CRM Person or honor a
+   * caller-specified visibility flag. Keys are caller-defined; the hub does
+   * not interpret them.
+   */
+  channelMetadata: z.record(z.string(), z.unknown()).optional()
+});
+async function POST(req) {
+  const auth = await getAuthFromRequest(req);
+  if (!auth?.sub || !auth?.tenantId) {
+    return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
+  }
+  let body;
+  try {
+    body = bodySchema.parse(await readJsonSafe(req, null));
+  } catch (err) {
+    return NextResponse.json(
+      { error: err instanceof Error ? err.message : "Invalid request body" },
+      { status: 422 }
+    );
+  }
+  const container = await createRequestContainer();
+  const organizationId = auth.orgId ?? null;
+  const guard = await validateRouteMutationGuard({
+    container,
+    req,
+    auth,
+    input: {
+      resourceKind: "communication_channels.channel",
+      resourceId: body.userChannelId,
+      operation: "custom",
+      mutationPayload: body
+    }
+  });
+  if ("response" in guard) return guard.response;
+  const result = await sendAsUser(
+    container,
+    { userId: auth.sub, tenantId: auth.tenantId, organizationId, auth },
+    body
+  );
+  if (!result.ok) {
+    return NextResponse.json(
+      result.fieldErrors ? { error: result.error, fieldErrors: result.fieldErrors } : { error: result.error },
+      { status: result.status }
+    );
+  }
+  await guard.afterSuccess();
+  return NextResponse.json(
+    {
+      messageId: result.messageId,
+      threadId: result.threadId,
+      channelId: result.channelId,
+      providerKey: result.providerKey,
+      enqueuedForDelivery: true
+    },
+    { status: 202 }
+  );
+}
+const openApi = {
+  tags: ["CommunicationChannels"],
+  methods: {
+    POST: {
+      summary: "Send a message through the current user's own channel",
+      tags: ["CommunicationChannels"],
+      responses: [
+        { status: 202, description: "Message persisted; outbound delivery enqueued" },
+        { status: 401, description: "Unauthorized" },
+        { status: 403, description: "Cannot send through a channel you don't own" },
+        { status: 404, description: "Channel not found" },
+        { status: 409, description: "Channel in a non-deliverable transitional status" },
+        { status: 422, description: "Invalid body, or channel requires_reauth / disconnected" }
+      ]
+    }
+  }
+};
+var route_default = POST;
+export {
+  POST,
+  route_default as default,
+  metadata,
+  openApi
+};
+//# sourceMappingURL=route.js.map

package/dist/modules/communication_channels/api/post/send-as-user/route.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../../src/modules/communication_channels/api/post/send-as-user/route.ts"],
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { readJsonSafe } from '@open-mercato/shared/lib/http/readJsonSafe'\nimport { sendAsUser } from '../../../lib/send-as-user'\nimport { validateRouteMutationGuard } from '../../../lib/route-mutation-guard'\n\nexport const metadata = {\n  path: '/communication_channels/send-as-user',\n  POST: {\n    requireAuth: true,\n    requireFeatures: ['communication_channels.manage'],\n  },\n}\n\nconst bodySchema = z.object({\n  /** ID of the user-owned channel to send from. Caller MUST own the channel. */\n  userChannelId: z.string().uuid(),\n  to: z.array(z.string().email()).min(1),\n  cc: z.array(z.string().email()).optional(),\n  bcc: z.array(z.string().email()).optional(),\n  // `.regex(/^[^\\r\\n]*$/)` rejects CR/LF so a caller cannot inject extra email\n  // headers (e.g. a hidden Bcc) through the subject / threading fields. The\n  // outbound MIME assembler also sanitizes these, but fail fast at the edge.\n  subject: z.string().min(1).max(500).regex(/^[^\\r\\n]*$/),\n  body: z.object({\n    plain: z.string().max(50_000).optional(),\n    html: z.string().max(200_000).optional(),\n  }),\n  inReplyTo: z.string().min(1).max(500).regex(/^[^\\r\\n]*$/).optional(),\n  references: z.array(z.string().min(1).max(500).regex(/^[^\\r\\n]*$/)).optional(),\n  /**\n   * Free-form metadata persisted on the resulting MessageChannelLink. Used by\n   * downstream subscribers (e.g. the customers module's link-channel-message\n   * subscriber) to anchor the sent message back to a CRM Person or honor a\n   * caller-specified visibility flag. Keys are caller-defined; the hub does\n   * not interpret them.\n   */\n  channelMetadata: z.record(z.string(), z.unknown()).optional(),\n})\n\n/**\n * Programmatic send-as-user facade (HTTP entry point).\n *\n * Thin wrapper around the in-process `sendAsUser` lib facade\n * (`../../../lib/send-as-user`), which is also resolvable via DI as\n * `communicationChannelsSendAsUser` for in-process cross-module callers.\n * Returns once the Message is persisted; the actual external send is async.\n */\nexport async function POST(req: Request): Promise<Response> {\n  const auth = await getAuthFromRequest(req)\n  if (!auth?.sub || !auth?.tenantId) {\n    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n  }\n\n  let body: z.infer<typeof bodySchema>\n  try {\n    body = bodySchema.parse(await readJsonSafe(req, null))\n  } catch (err) {\n    return NextResponse.json(\n      { error: err instanceof Error ? err.message : 'Invalid request body' },\n      { status: 422 },\n    )\n  }\n\n  const container = await createRequestContainer()\n  const organizationId = (auth as { orgId?: string | null }).orgId ?? null\n  const guard = await validateRouteMutationGuard({\n    container,\n    req,\n    auth,\n    input: {\n      resourceKind: 'communication_channels.channel',\n      resourceId: body.userChannelId,\n      operation: 'custom',\n      mutationPayload: body as unknown as Record<string, unknown>,\n    },\n  })\n  if ('response' in guard) return guard.response\n\n  const result = await sendAsUser(\n    container,\n    { userId: auth.sub as string, tenantId: auth.tenantId as string, organizationId, auth },\n    body,\n  )\n\n  if (!result.ok) {\n    return NextResponse.json(\n      result.fieldErrors ? { error: result.error, fieldErrors: result.fieldErrors } : { error: result.error },\n      { status: result.status },\n    )\n  }\n  await guard.afterSuccess()\n\n  return NextResponse.json(\n    {\n      messageId: result.messageId,\n      threadId: result.threadId,\n      channelId: result.channelId,\n      providerKey: result.providerKey,\n      enqueuedForDelivery: true,\n    },\n    { status: 202 },\n  )\n}\n\nexport const openApi = {\n  tags: ['CommunicationChannels'],\n  methods: {\n    POST: {\n      summary: 'Send a message through the current user\\'s own channel',\n      tags: ['CommunicationChannels'],\n      responses: [\n        { status: 202, description: 'Message persisted; outbound delivery enqueued' },\n        { status: 401, description: 'Unauthorized' },\n        { status: 403, description: 'Cannot send through a channel you don\\'t own' },\n        { status: 404, description: 'Channel not found' },\n        { status: 409, description: 'Channel in a non-deliverable transitional status' },\n        { status: 422, description: 'Invalid body, or channel requires_reauth / disconnected' },\n      ],\n    },\n  },\n}\nexport default POST\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAClB,SAAS,0BAA0B;AACnC,SAAS,8BAA8B;AACvC,SAAS,oBAAoB;AAC7B,SAAS,kBAAkB;AAC3B,SAAS,kCAAkC;AAEpC,MAAM,WAAW;AAAA,EACtB,MAAM;AAAA,EACN,MAAM;AAAA,IACJ,aAAa;AAAA,IACb,iBAAiB,CAAC,+BAA+B;AAAA,EACnD;AACF;AAEA,MAAM,aAAa,EAAE,OAAO;AAAA;AAAA,EAE1B,eAAe,EAAE,OAAO,EAAE,KAAK;AAAA,EAC/B,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,IAAI,CAAC;AAAA,EACrC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,SAAS;AAAA,EACzC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,SAAS;AAAA;AAAA;AAAA;AAAA,EAI1C,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,MAAM,YAAY;AAAA,EACtD,MAAM,EAAE,OAAO;AAAA,IACb,OAAO,EAAE,OAAO,EAAE,IAAI,GAAM,EAAE,SAAS;AAAA,IACvC,MAAM,EAAE,OAAO,EAAE,IAAI,GAAO,EAAE,SAAS;AAAA,EACzC,CAAC;AAAA,EACD,WAAW,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,MAAM,YAAY,EAAE,SAAS;AAAA,EACnE,YAAY,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,MAAM,YAAY,CAAC,EAAE,SAAS;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQ7E,iBAAiB,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,EAAE,SAAS;AAC9D,CAAC;AAUD,eAAsB,KAAK,KAAiC;AAC1D,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM,OAAO,CAAC,MAAM,UAAU;AACjC,WAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrE;AAEA,MAAI;AACJ,MAAI;AACF,WAAO,WAAW,MAAM,MAAM,aAAa,KAAK,IAAI,CAAC;AAAA,EACvD,SAAS,KAAK;AACZ,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,eAAe,QAAQ,IAAI,UAAU,uBAAuB;AAAA,MACrE,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,iBAAkB,KAAmC,SAAS;AACpE,QAAM,QAAQ,MAAM,2BAA2B;AAAA,IAC7C;AAAA,IACA;AAAA,IACA;AAAA,IACA,OAAO;AAAA,MACL,cAAc;AAAA,MACd,YAAY,KAAK;AAAA,MACjB,WAAW;AAAA,MACX,iBAAiB;AAAA,IACnB;AAAA,EACF,CAAC;AACD,MAAI,cAAc,MAAO,QAAO,MAAM;AAEtC,QAAM,SAAS,MAAM;AAAA,IACnB;AAAA,IACA,EAAE,QAAQ,KAAK,KAAe,UAAU,KAAK,UAAoB,gBAAgB,KAAK;AAAA,IACtF;AAAA,EACF;AAEA,MAAI,CAAC,OAAO,IAAI;AACd,WAAO,aAAa;AAAA,MAClB,OAAO,cAAc,EAAE,OAAO,OAAO,OAAO,aAAa,OAAO,YAAY,IAAI,EAAE,OAAO,OAAO,MAAM;AAAA,MACtG,EAAE,QAAQ,OAAO,OAAO;AAAA,IAC1B;AAAA,EACF;AACA,QAAM,MAAM,aAAa;AAEzB,SAAO,aAAa;AAAA,IAClB;AAAA,MACE,WAAW,OAAO;AAAA,MAClB,UAAU,OAAO;AAAA,MACjB,WAAW,OAAO;AAAA,MAClB,aAAa,OAAO;AAAA,MACpB,qBAAqB;AAAA,IACvB;AAAA,IACA,EAAE,QAAQ,IAAI;AAAA,EAChB;AACF;AAEO,MAAM,UAAU;AAAA,EACrB,MAAM,CAAC,uBAAuB;AAAA,EAC9B,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,MAAM,CAAC,uBAAuB;AAAA,MAC9B,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,gDAAgD;AAAA,QAC5E,EAAE,QAAQ,KAAK,aAAa,eAAe;AAAA,QAC3C,EAAE,QAAQ,KAAK,aAAa,8CAA+C;AAAA,QAC3E,EAAE,QAAQ,KAAK,aAAa,oBAAoB;AAAA,QAChD,EAAE,QAAQ,KAAK,aAAa,mDAAmD;AAAA,QAC/E,EAAE,QAAQ,KAAK,aAAa,0DAA0D;AAAA,MACxF;AAAA,IACF;AAAA,EACF;AACF;AACA,IAAO,gBAAQ;",
+  "names": []
+}

package/dist/modules/communication_channels/api/post/test-seed/route.js

@@ -0,0 +1,217 @@
+import { NextResponse } from "next/server";
+import { z } from "zod";
+import { getAuthFromRequest } from "@open-mercato/shared/lib/auth/server";
+import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
+import { readJsonSafe } from "@open-mercato/shared/lib/http/readJsonSafe";
+import { ExternalConversation, MessageChannelLink } from "../../../data/entities.js";
+import {
+  COMMUNICATION_CHANNELS_CONNECT_CREDENTIAL_CHANNEL_COMMAND_ID
+} from "../../../commands/connect-credential-channel.js";
+import { emitCommunicationChannelsEvent } from "../../../events.js";
+import {
+  TEST_SEED_PROVIDER_KEY,
+  ensureTestSeedAdapterRegistered,
+  isTestChannelSeedingEnabled
+} from "../../../lib/test-seed.js";
+const metadata = {
+  path: "/communication_channels/test-seed",
+  POST: {
+    requireAuth: true,
+    requireFeatures: ["communication_channels.connect_user_channel"]
+  }
+};
+const addressObjectSchema = z.object({ address: z.string(), name: z.string().optional() });
+const addressFieldSchema = z.union([
+  z.string(),
+  addressObjectSchema,
+  z.array(z.union([z.string(), addressObjectSchema]))
+]);
+const connectChannelSchema = z.object({
+  action: z.literal("connect-channel"),
+  displayName: z.string().min(1).max(255).optional(),
+  externalIdentifier: z.string().min(1).max(255).optional()
+});
+const emitInboundSchema = z.object({
+  action: z.literal("emit-inbound"),
+  /** Channel that owns the inbound message; controls authorUserId + default visibility. */
+  channelId: z.string().uuid(),
+  /** Provider key persisted on the link (defaults to the stub provider). */
+  providerKey: z.string().min(1).max(64).optional(),
+  /** Normalized inbound addresses (stored under channelPayload). */
+  from: addressFieldSchema.optional(),
+  to: addressFieldSchema.optional(),
+  cc: addressFieldSchema.optional(),
+  subject: z.string().max(500).optional(),
+  bodyText: z.string().max(2e5).optional(),
+  /** RFC2822 Message-ID of this inbound message (for In-Reply-To matching). */
+  messageId: z.string().max(500).optional(),
+  /** RFC2822 In-Reply-To header (threading-inheritance fallback). */
+  inReplyTo: z.string().max(500).optional(),
+  references: z.array(z.string().max(500)).max(50).optional(),
+  /**
+   * Open Mercato `messages.message` thread id this inbound message belongs to.
+   * When set, a `messages.message` row is created with this `threadId` so the
+   * hub-thread inheritance join can resolve a Person from a sibling message.
+   */
+  messageThreadId: z.string().uuid().optional()
+});
+const bodySchema = z.discriminatedUnion("action", [connectChannelSchema, emitInboundSchema]);
+async function POST(req) {
+  if (!isTestChannelSeedingEnabled()) {
+    return NextResponse.json({ error: "Not found" }, { status: 404 });
+  }
+  const auth = await getAuthFromRequest(req);
+  if (!auth?.sub || !auth?.tenantId) {
+    return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
+  }
+  let body;
+  try {
+    body = bodySchema.parse(await readJsonSafe(req, null));
+  } catch (err) {
+    return NextResponse.json(
+      { error: err instanceof Error ? err.message : "Invalid request body" },
+      { status: 422 }
+    );
+  }
+  const container = await createRequestContainer();
+  ensureTestSeedAdapterRegistered();
+  const tenantId = auth.tenantId;
+  const organizationId = auth.orgId ?? null;
+  const userId = auth.sub;
+  if (body.action === "connect-channel") {
+    const stamp = Date.now();
+    const commandBus = container.resolve("commandBus");
+    const input = {
+      providerKey: TEST_SEED_PROVIDER_KEY,
+      displayName: body.displayName ?? `Test Seed Channel ${stamp}`,
+      credentials: {
+        username: body.externalIdentifier ?? `test-seed-${stamp}@test-seed.local`,
+        fromAddress: body.externalIdentifier ?? `test-seed-${stamp}@test-seed.local`
+      },
+      userId,
+      scope: { tenantId, organizationId }
+    };
+    const { result } = await commandBus.execute(COMMUNICATION_CHANNELS_CONNECT_CREDENTIAL_CHANNEL_COMMAND_ID, {
+      input,
+      ctx: {
+        container,
+        auth,
+        organizationScope: null,
+        selectedOrganizationId: organizationId,
+        organizationIds: organizationId ? [organizationId] : null
+      }
+    });
+    if (result.status !== "connected") {
+      return NextResponse.json(
+        { error: "[internal] test-seed connect failed", detail: result },
+        { status: 500 }
+      );
+    }
+    return NextResponse.json(
+      { channelId: result.channelId, externalIdentifier: result.externalIdentifier },
+      { status: 201 }
+    );
+  }
+  const em = container.resolve("em").fork();
+  const providerKey = body.providerKey ?? TEST_SEED_PROVIDER_KEY;
+  const conversation = em.create(ExternalConversation, {
+    channelId: body.channelId,
+    externalConversationId: `inbound-seed:${Date.now()}:${Math.random().toString(16).slice(2, 8)}`,
+    subject: body.subject ?? null,
+    tenantId,
+    organizationId,
+    lastMessageAt: /* @__PURE__ */ new Date()
+  });
+  em.persist(conversation);
+  await em.flush();
+  const messageRows = await em.getConnection().execute(
+    `INSERT INTO messages
+       (type, thread_id, sender_user_id, subject, body, body_format, priority, status,
+        is_draft, sent_at, visibility, source_entity_type, source_entity_id,
+        tenant_id, organization_id, created_at, updated_at)
+     VALUES
+       (?, ?, ?, ?, ?, 'text', 'normal', 'sent',
+        false, now(), 'public', 'communication_channels.test_seed_inbound', ?,
+        ?, ?, now(), now())
+     RETURNING id`,
+    [
+      `channel.${providerKey}`,
+      body.messageThreadId ?? null,
+      userId,
+      body.subject ?? "(no subject)",
+      body.bodyText ?? "",
+      body.channelId,
+      tenantId,
+      organizationId
+    ]
+  );
+  const messageId = messageRows[0]?.id;
+  if (!messageId) {
+    return NextResponse.json({ error: "[internal] failed to seed message row" }, { status: 500 });
+  }
+  const link = em.create(MessageChannelLink, {
+    messageId,
+    externalConversationId: conversation.id,
+    providerKey,
+    channelType: "email",
+    direction: "inbound",
+    deliveryStatus: "delivered",
+    channelPayload: {
+      ...body.from !== void 0 ? { from: body.from } : {},
+      ...body.to !== void 0 ? { to: body.to } : {},
+      ...body.cc !== void 0 ? { cc: body.cc } : {},
+      ...body.subject !== void 0 ? { subject: body.subject } : {},
+      ...body.bodyText !== void 0 ? { text: body.bodyText } : {},
+      ...body.inReplyTo !== void 0 ? { inReplyTo: body.inReplyTo } : {},
+      ...body.references !== void 0 ? { references: body.references } : {}
+    },
+    channelContentType: "text/plain",
+    channelMetadata: {
+      ...body.messageId !== void 0 ? { messageId: body.messageId } : {}
+    },
+    tenantId,
+    organizationId
+  });
+  em.persist(link);
+  await em.flush();
+  await emitCommunicationChannelsEvent(
+    "communication_channels.message.received",
+    {
+      channelLinkId: link.id,
+      channelId: body.channelId,
+      providerKey,
+      direction: "inbound",
+      tenantId,
+      organizationId
+    },
+    { persistent: true }
+  );
+  return NextResponse.json(
+    { channelLinkId: link.id, messageId, conversationId: conversation.id },
+    { status: 201 }
+  );
+}
+const openApi = {
+  tags: ["CommunicationChannels"],
+  methods: {
+    POST: {
+      summary: "Test-only: seed a connected channel or emit an inbound message (env-gated)",
+      tags: ["CommunicationChannels"],
+      responses: [
+        { status: 201, description: "Channel seeded / inbound message emitted" },
+        { status: 401, description: "Unauthorized" },
+        { status: 404, description: "Test channel seeding disabled (production default)" },
+        { status: 422, description: "Invalid request body" },
+        { status: 500, description: "Seed failed" }
+      ]
+    }
+  }
+};
+var route_default = POST;
+export {
+  POST,
+  route_default as default,
+  metadata,
+  openApi
+};
+//# sourceMappingURL=route.js.map

package/dist/modules/communication_channels/api/post/test-seed/route.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../../src/modules/communication_channels/api/post/test-seed/route.ts"],
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport type { CommandBus } from '@open-mercato/shared/lib/commands'\nimport { readJsonSafe } from '@open-mercato/shared/lib/http/readJsonSafe'\nimport { ExternalConversation, MessageChannelLink } from '../../../data/entities'\nimport {\n  COMMUNICATION_CHANNELS_CONNECT_CREDENTIAL_CHANNEL_COMMAND_ID,\n  type ConnectCredentialChannelInput,\n  type ConnectCredentialChannelResult,\n} from '../../../commands/connect-credential-channel'\nimport { emitCommunicationChannelsEvent } from '../../../events'\nimport {\n  TEST_SEED_PROVIDER_KEY,\n  ensureTestSeedAdapterRegistered,\n  isTestChannelSeedingEnabled,\n} from '../../../lib/test-seed'\n\n/**\n * TEST-ONLY channel seeding endpoint.\n *\n * Gated by `OM_ENABLE_TEST_CHANNEL_SEEDING` \u2014 when the flag is unset (the\n * production default) every request returns 404, so this route is invisible and\n * inert in production. See `lib/test-seed.ts` for the full rationale.\n *\n * Two actions, both scoped to the caller's tenant/org:\n *   - `connect-channel`: connect a network-free `__test_seed__` channel owned by\n *     the caller (delegates to the real connect-credential command so the channel\n *     persists credentials + lands in `status='connected'`). Enables the outbound\n *     compose \u2192 deliver \u2192 `.sent` chain to complete in CI.\n *   - `emit-inbound`: insert an inbound `MessageChannelLink` (+ a `messages.message`\n *     row for threading) and emit `communication_channels.message.received` so the\n *     customers link-channel-message subscriber runs against real Postgres. Enables\n *     the inbound auto-link tests (TC-CRM-EMAIL-002..005).\n */\nexport const metadata = {\n  path: '/communication_channels/test-seed',\n  POST: {\n    requireAuth: true,\n    requireFeatures: ['communication_channels.connect_user_channel'],\n  },\n}\n\nconst addressObjectSchema = z.object({ address: z.string(), name: z.string().optional() })\nconst addressFieldSchema = z.union([\n  z.string(),\n  addressObjectSchema,\n  z.array(z.union([z.string(), addressObjectSchema])),\n])\n\nconst connectChannelSchema = z.object({\n  action: z.literal('connect-channel'),\n  displayName: z.string().min(1).max(255).optional(),\n  externalIdentifier: z.string().min(1).max(255).optional(),\n})\n\nconst emitInboundSchema = z.object({\n  action: z.literal('emit-inbound'),\n  /** Channel that owns the inbound message; controls authorUserId + default visibility. */\n  channelId: z.string().uuid(),\n  /** Provider key persisted on the link (defaults to the stub provider). */\n  providerKey: z.string().min(1).max(64).optional(),\n  /** Normalized inbound addresses (stored under channelPayload). */\n  from: addressFieldSchema.optional(),\n  to: addressFieldSchema.optional(),\n  cc: addressFieldSchema.optional(),\n  subject: z.string().max(500).optional(),\n  bodyText: z.string().max(200_000).optional(),\n  /** RFC2822 Message-ID of this inbound message (for In-Reply-To matching). */\n  messageId: z.string().max(500).optional(),\n  /** RFC2822 In-Reply-To header (threading-inheritance fallback). */\n  inReplyTo: z.string().max(500).optional(),\n  references: z.array(z.string().max(500)).max(50).optional(),\n  /**\n   * Open Mercato `messages.message` thread id this inbound message belongs to.\n   * When set, a `messages.message` row is created with this `threadId` so the\n   * hub-thread inheritance join can resolve a Person from a sibling message.\n   */\n  messageThreadId: z.string().uuid().optional(),\n})\n\nconst bodySchema = z.discriminatedUnion('action', [connectChannelSchema, emitInboundSchema])\n\nexport async function POST(req: Request): Promise<Response> {\n  // Fail-closed: invisible in production. Mirrors an unknown route (404) rather\n  // than 403 so the surface leaks nothing when the flag is off.\n  if (!isTestChannelSeedingEnabled()) {\n    return NextResponse.json({ error: 'Not found' }, { status: 404 })\n  }\n\n  const auth = await getAuthFromRequest(req)\n  if (!auth?.sub || !auth?.tenantId) {\n    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n  }\n\n  let body: z.infer<typeof bodySchema>\n  try {\n    body = bodySchema.parse(await readJsonSafe(req, null))\n  } catch (err) {\n    return NextResponse.json(\n      { error: err instanceof Error ? err.message : 'Invalid request body' },\n      { status: 422 },\n    )\n  }\n\n  const container = await createRequestContainer()\n  // Defensive: make sure the stub adapter is registered for this process even if\n  // a worker-only node skipped module di registration.\n  ensureTestSeedAdapterRegistered()\n\n  const tenantId = auth.tenantId as string\n  const organizationId = (auth as { orgId?: string | null }).orgId ?? null\n  const userId = auth.sub as string\n\n  if (body.action === 'connect-channel') {\n    const stamp = Date.now()\n    const commandBus = container.resolve('commandBus') as CommandBus\n    const input: ConnectCredentialChannelInput = {\n      providerKey: TEST_SEED_PROVIDER_KEY,\n      displayName: body.displayName ?? `Test Seed Channel ${stamp}`,\n      credentials: {\n        username: body.externalIdentifier ?? `test-seed-${stamp}@test-seed.local`,\n        fromAddress: body.externalIdentifier ?? `test-seed-${stamp}@test-seed.local`,\n      },\n      userId,\n      scope: { tenantId, organizationId },\n    }\n    const { result } = await commandBus.execute<\n      ConnectCredentialChannelInput,\n      ConnectCredentialChannelResult\n    >(COMMUNICATION_CHANNELS_CONNECT_CREDENTIAL_CHANNEL_COMMAND_ID, {\n      input,\n      ctx: {\n        container,\n        auth: auth as never,\n        organizationScope: null,\n        selectedOrganizationId: organizationId,\n        organizationIds: organizationId ? [organizationId] : null,\n      },\n    })\n    if (result.status !== 'connected') {\n      return NextResponse.json(\n        { error: '[internal] test-seed connect failed', detail: result },\n        { status: 500 },\n      )\n    }\n    return NextResponse.json(\n      { channelId: result.channelId, externalIdentifier: result.externalIdentifier },\n      { status: 201 },\n    )\n  }\n\n  // action === 'emit-inbound'\n  const em = (container.resolve('em') as EntityManager).fork()\n  const providerKey = body.providerKey ?? TEST_SEED_PROVIDER_KEY\n\n  // A MessageChannelLink requires a non-null external_conversation_id (FK) and\n  // message_id. Create a synthetic conversation + (optionally threaded) message\n  // so the link is shaped like a real inbound row the subscriber can consume.\n  const conversation = em.create(ExternalConversation, {\n    channelId: body.channelId,\n    externalConversationId: `inbound-seed:${Date.now()}:${Math.random().toString(16).slice(2, 8)}`,\n    subject: body.subject ?? null,\n    tenantId,\n    organizationId,\n    lastMessageAt: new Date(),\n  })\n  em.persist(conversation)\n  await em.flush()\n\n  // Insert the platform `messages.message` row via raw SQL rather than importing\n  // the messages module's entity class (cross-module ORM coupling rule). Only\n  // `thread_id` matters for the hub-thread inheritance join (TC-CRM-EMAIL-005);\n  // the rest satisfy NOT NULL constraints.\n  const messageRows = (await em.getConnection().execute(\n    `INSERT INTO messages\n       (type, thread_id, sender_user_id, subject, body, body_format, priority, status,\n        is_draft, sent_at, visibility, source_entity_type, source_entity_id,\n        tenant_id, organization_id, created_at, updated_at)\n     VALUES\n       (?, ?, ?, ?, ?, 'text', 'normal', 'sent',\n        false, now(), 'public', 'communication_channels.test_seed_inbound', ?,\n        ?, ?, now(), now())\n     RETURNING id`,\n    [\n      `channel.${providerKey}`,\n      body.messageThreadId ?? null,\n      userId,\n      body.subject ?? '(no subject)',\n      body.bodyText ?? '',\n      body.channelId,\n      tenantId,\n      organizationId,\n    ],\n  )) as Array<{ id: string }>\n  const messageId = messageRows[0]?.id\n  if (!messageId) {\n    return NextResponse.json({ error: '[internal] failed to seed message row' }, { status: 500 })\n  }\n\n  const link = em.create(MessageChannelLink, {\n    messageId,\n    externalConversationId: conversation.id,\n    providerKey,\n    channelType: 'email',\n    direction: 'inbound',\n    deliveryStatus: 'delivered',\n    channelPayload: {\n      ...(body.from !== undefined ? { from: body.from } : {}),\n      ...(body.to !== undefined ? { to: body.to } : {}),\n      ...(body.cc !== undefined ? { cc: body.cc } : {}),\n      ...(body.subject !== undefined ? { subject: body.subject } : {}),\n      ...(body.bodyText !== undefined ? { text: body.bodyText } : {}),\n      ...(body.inReplyTo !== undefined ? { inReplyTo: body.inReplyTo } : {}),\n      ...(body.references !== undefined ? { references: body.references } : {}),\n    },\n    channelContentType: 'text/plain',\n    channelMetadata: {\n      ...(body.messageId !== undefined ? { messageId: body.messageId } : {}),\n    },\n    tenantId,\n    organizationId,\n  })\n  em.persist(link)\n  await em.flush()\n\n  // Emit the hub event through the real event bus so the persistent customers\n  // link-channel-message-received subscriber is enqueued to the `events` queue.\n  await emitCommunicationChannelsEvent(\n    'communication_channels.message.received',\n    {\n      channelLinkId: link.id,\n      channelId: body.channelId,\n      providerKey,\n      direction: 'inbound',\n      tenantId,\n      organizationId,\n    },\n    { persistent: true },\n  )\n\n  return NextResponse.json(\n    { channelLinkId: link.id, messageId, conversationId: conversation.id },\n    { status: 201 },\n  )\n}\n\nexport const openApi = {\n  tags: ['CommunicationChannels'],\n  methods: {\n    POST: {\n      summary: 'Test-only: seed a connected channel or emit an inbound message (env-gated)',\n      tags: ['CommunicationChannels'],\n      responses: [\n        { status: 201, description: 'Channel seeded / inbound message emitted' },\n        { status: 401, description: 'Unauthorized' },\n        { status: 404, description: 'Test channel seeding disabled (production default)' },\n        { status: 422, description: 'Invalid request body' },\n        { status: 500, description: 'Seed failed' },\n      ],\n    },\n  },\n}\n\nexport default POST\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAElB,SAAS,0BAA0B;AACnC,SAAS,8BAA8B;AAEvC,SAAS,oBAAoB;AAC7B,SAAS,sBAAsB,0BAA0B;AACzD;AAAA,EACE;AAAA,OAGK;AACP,SAAS,sCAAsC;AAC/C;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAmBA,MAAM,WAAW;AAAA,EACtB,MAAM;AAAA,EACN,MAAM;AAAA,IACJ,aAAa;AAAA,IACb,iBAAiB,CAAC,6CAA6C;AAAA,EACjE;AACF;AAEA,MAAM,sBAAsB,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,GAAG,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;AACzF,MAAM,qBAAqB,EAAE,MAAM;AAAA,EACjC,EAAE,OAAO;AAAA,EACT;AAAA,EACA,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,OAAO,GAAG,mBAAmB,CAAC,CAAC;AACpD,CAAC;AAED,MAAM,uBAAuB,EAAE,OAAO;AAAA,EACpC,QAAQ,EAAE,QAAQ,iBAAiB;AAAA,EACnC,aAAa,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EACjD,oBAAoB,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,SAAS;AAC1D,CAAC;AAED,MAAM,oBAAoB,EAAE,OAAO;AAAA,EACjC,QAAQ,EAAE,QAAQ,cAAc;AAAA;AAAA,EAEhC,WAAW,EAAE,OAAO,EAAE,KAAK;AAAA;AAAA,EAE3B,aAAa,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,SAAS;AAAA;AAAA,EAEhD,MAAM,mBAAmB,SAAS;AAAA,EAClC,IAAI,mBAAmB,SAAS;AAAA,EAChC,IAAI,mBAAmB,SAAS;AAAA,EAChC,SAAS,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EACtC,UAAU,EAAE,OAAO,EAAE,IAAI,GAAO,EAAE,SAAS;AAAA;AAAA,EAE3C,WAAW,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA;AAAA,EAExC,WAAW,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EACxC,YAAY,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,GAAG,CAAC,EAAE,IAAI,EAAE,EAAE,SAAS;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAM1D,iBAAiB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAC9C,CAAC;AAED,MAAM,aAAa,EAAE,mBAAmB,UAAU,CAAC,sBAAsB,iBAAiB,CAAC;AAE3F,eAAsB,KAAK,KAAiC;AAG1D,MAAI,CAAC,4BAA4B,GAAG;AAClC,WAAO,aAAa,KAAK,EAAE,OAAO,YAAY,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAClE;AAEA,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM,OAAO,CAAC,MAAM,UAAU;AACjC,WAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrE;AAEA,MAAI;AACJ,MAAI;AACF,WAAO,WAAW,MAAM,MAAM,aAAa,KAAK,IAAI,CAAC;AAAA,EACvD,SAAS,KAAK;AACZ,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,eAAe,QAAQ,IAAI,UAAU,uBAAuB;AAAA,MACrE,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAG/C,kCAAgC;AAEhC,QAAM,WAAW,KAAK;AACtB,QAAM,iBAAkB,KAAmC,SAAS;AACpE,QAAM,SAAS,KAAK;AAEpB,MAAI,KAAK,WAAW,mBAAmB;AACrC,UAAM,QAAQ,KAAK,IAAI;AACvB,UAAM,aAAa,UAAU,QAAQ,YAAY;AACjD,UAAM,QAAuC;AAAA,MAC3C,aAAa;AAAA,MACb,aAAa,KAAK,eAAe,qBAAqB,KAAK;AAAA,MAC3D,aAAa;AAAA,QACX,UAAU,KAAK,sBAAsB,aAAa,KAAK;AAAA,QACvD,aAAa,KAAK,sBAAsB,aAAa,KAAK;AAAA,MAC5D;AAAA,MACA;AAAA,MACA,OAAO,EAAE,UAAU,eAAe;AAAA,IACpC;AACA,UAAM,EAAE,OAAO,IAAI,MAAM,WAAW,QAGlC,8DAA8D;AAAA,MAC9D;AAAA,MACA,KAAK;AAAA,QACH;AAAA,QACA;AAAA,QACA,mBAAmB;AAAA,QACnB,wBAAwB;AAAA,QACxB,iBAAiB,iBAAiB,CAAC,cAAc,IAAI;AAAA,MACvD;AAAA,IACF,CAAC;AACD,QAAI,OAAO,WAAW,aAAa;AACjC,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,uCAAuC,QAAQ,OAAO;AAAA,QAC/D,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AACA,WAAO,aAAa;AAAA,MAClB,EAAE,WAAW,OAAO,WAAW,oBAAoB,OAAO,mBAAmB;AAAA,MAC7E,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AAGA,QAAM,KAAM,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC3D,QAAM,cAAc,KAAK,eAAe;AAKxC,QAAM,eAAe,GAAG,OAAO,sBAAsB;AAAA,IACnD,WAAW,KAAK;AAAA,IAChB,wBAAwB,gBAAgB,KAAK,IAAI,CAAC,IAAI,KAAK,OAAO,EAAE,SAAS,EAAE,EAAE,MAAM,GAAG,CAAC,CAAC;AAAA,IAC5F,SAAS,KAAK,WAAW;AAAA,IACzB;AAAA,IACA;AAAA,IACA,eAAe,oBAAI,KAAK;AAAA,EAC1B,CAAC;AACD,KAAG,QAAQ,YAAY;AACvB,QAAM,GAAG,MAAM;AAMf,QAAM,cAAe,MAAM,GAAG,cAAc,EAAE;AAAA,IAC5C;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IASA;AAAA,MACE,WAAW,WAAW;AAAA,MACtB,KAAK,mBAAmB;AAAA,MACxB;AAAA,MACA,KAAK,WAAW;AAAA,MAChB,KAAK,YAAY;AAAA,MACjB,KAAK;AAAA,MACL;AAAA,MACA;AAAA,IACF;AAAA,EACF;AACA,QAAM,YAAY,YAAY,CAAC,GAAG;AAClC,MAAI,CAAC,WAAW;AACd,WAAO,aAAa,KAAK,EAAE,OAAO,wCAAwC,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC9F;AAEA,QAAM,OAAO,GAAG,OAAO,oBAAoB;AAAA,IACzC;AAAA,IACA,wBAAwB,aAAa;AAAA,IACrC;AAAA,IACA,aAAa;AAAA,IACb,WAAW;AAAA,IACX,gBAAgB;AAAA,IAChB,gBAAgB;AAAA,MACd,GAAI,KAAK,SAAS,SAAY,EAAE,MAAM,KAAK,KAAK,IAAI,CAAC;AAAA,MACrD,GAAI,KAAK,OAAO,SAAY,EAAE,IAAI,KAAK,GAAG,IAAI,CAAC;AAAA,MAC/C,GAAI,KAAK,OAAO,SAAY,EAAE,IAAI,KAAK,GAAG,IAAI,CAAC;AAAA,MAC/C,GAAI,KAAK,YAAY,SAAY,EAAE,SAAS,KAAK,QAAQ,IAAI,CAAC;AAAA,MAC9D,GAAI,KAAK,aAAa,SAAY,EAAE,MAAM,KAAK,SAAS,IAAI,CAAC;AAAA,MAC7D,GAAI,KAAK,cAAc,SAAY,EAAE,WAAW,KAAK,UAAU,IAAI,CAAC;AAAA,MACpE,GAAI,KAAK,eAAe,SAAY,EAAE,YAAY,KAAK,WAAW,IAAI,CAAC;AAAA,IACzE;AAAA,IACA,oBAAoB;AAAA,IACpB,iBAAiB;AAAA,MACf,GAAI,KAAK,cAAc,SAAY,EAAE,WAAW,KAAK,UAAU,IAAI,CAAC;AAAA,IACtE;AAAA,IACA;AAAA,IACA;AAAA,EACF,CAAC;AACD,KAAG,QAAQ,IAAI;AACf,QAAM,GAAG,MAAM;AAIf,QAAM;AAAA,IACJ;AAAA,IACA;AAAA,MACE,eAAe,KAAK;AAAA,MACpB,WAAW,KAAK;AAAA,MAChB;AAAA,MACA,WAAW;AAAA,MACX;AAAA,MACA;AAAA,IACF;AAAA,IACA,EAAE,YAAY,KAAK;AAAA,EACrB;AAEA,SAAO,aAAa;AAAA,IAClB,EAAE,eAAe,KAAK,IAAI,WAAW,gBAAgB,aAAa,GAAG;AAAA,IACrE,EAAE,QAAQ,IAAI;AAAA,EAChB;AACF;AAEO,MAAM,UAAU;AAAA,EACrB,MAAM,CAAC,uBAAuB;AAAA,EAC9B,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,MAAM,CAAC,uBAAuB;AAAA,MAC9B,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,2CAA2C;AAAA,QACvE,EAAE,QAAQ,KAAK,aAAa,eAAe;AAAA,QAC3C,EAAE,QAAQ,KAAK,aAAa,qDAAqD;AAAA,QACjF,EAAE,QAAQ,KAAK,aAAa,uBAAuB;AAAA,QACnD,EAAE,QAAQ,KAAK,aAAa,cAAc;AAAA,MAC5C;AAAA,IACF;AAAA,EACF;AACF;AAEA,IAAO,gBAAQ;",
+  "names": []
+}