@open-mercato/core 0.6.8-develop.6983.1.e4f794099e → 0.6.8-develop.6985.1.fb93574faa

package/dist/modules/communication_channels/api/delete/admin/channels/[id]/route.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../../../../src/modules/communication_channels/api/delete/admin/channels/%5Bid%5D/route.ts"],
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport type { CommandBus } from '@open-mercato/shared/lib/commands'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { CommunicationChannel } from '../../../../../data/entities'\nimport {\n  ChannelAccessDeniedError,\n  assertCanManageChannel,\n  channelOrgScopeWhere,\n} from '../../../../../lib/access-control'\nimport {\n  COMMUNICATION_CHANNELS_ADMIN_DELETE_CHANNEL_COMMAND_ID,\n  type AdminDeleteChannelInput,\n  type AdminDeleteChannelResult,\n} from '../../../../../commands/admin-delete-channel'\nimport { validateRouteMutationGuard } from '../../../../../lib/route-mutation-guard'\n\ntype RbacServiceLike = {\n  loadAcl: (\n    userId: string,\n    scope: { tenantId: string | null; organizationId: string | null },\n  ) => Promise<{ isSuperAdmin: boolean; features: string[]; organizations: string[] | null }>\n}\n\n/**\n * Admin soft-delete for a TENANT-WIDE communication channel (`user_id IS NULL`).\n *\n * Companion to `/communication_channels/channels/[id]` (owner-only, per-user\n * path). Tenant-wide channels \u2014 shared inboxes and the push providers\n * FCM/APNs/Expo \u2014 have no owner, so the owner route rejects them; this route\n * deletes them under `communication_channels.admin`. The channel is loaded\n * org-agnostically so tenant-wide `organization_id IS NULL` rows resolve from\n * any session org; per-user channels are masked as 404.\n */\nexport const metadata = {\n  path: '/communication_channels/admin/channels/[id]',\n  DELETE: {\n    requireAuth: true,\n    requireFeatures: ['communication_channels.admin'],\n  },\n}\n\ntype RouteContext = {\n  params: Promise<{ id: string }> | { id: string }\n}\n\nexport async function DELETE(req: Request, context: RouteContext): Promise<Response> {\n  const { id } = await context.params\n  if (!z.string().uuid().safeParse(id).success) {\n    return NextResponse.json({ error: 'Invalid channel id' }, { status: 400 })\n  }\n\n  const auth = await getAuthFromRequest(req)\n  if (!auth?.sub || !auth?.tenantId) {\n    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n  }\n\n  const container = await createRequestContainer()\n  const em = (container.resolve('em') as EntityManager).fork()\n  const organizationId = (auth as { orgId?: string | null }).orgId ?? null\n  const dscope = { tenantId: auth.tenantId as string, organizationId }\n\n  const channel = await findOneWithDecryption(\n    em,\n    CommunicationChannel,\n    {\n      id,\n      tenantId: auth.tenantId as string,\n      ...channelOrgScopeWhere(organizationId),\n      deletedAt: null,\n    },\n    undefined,\n    dscope,\n  )\n  // Mask a missing channel AND a per-user channel (which must go through the\n  // owner path) as 404 so admins can't probe personal-mailbox existence.\n  if (!channel || (channel as { userId?: string | null }).userId != null) {\n    return NextResponse.json({ error: 'Channel not found' }, { status: 404 })\n  }\n\n  let userFeatures: string[] = []\n  try {\n    const rbac = container.resolve('rbacService') as RbacServiceLike\n    const acl = await rbac.loadAcl(auth.sub as string, {\n      tenantId: auth.tenantId as string,\n      organizationId,\n    })\n    userFeatures = acl?.isSuperAdmin ? ['*'] : Array.isArray(acl?.features) ? acl.features : []\n  } catch {\n    userFeatures = []\n  }\n  try {\n    assertCanManageChannel(\n      { userId: (channel as { userId?: string | null }).userId },\n      auth.sub as string,\n      userFeatures,\n      'communication_channels.manage',\n    )\n  } catch (err) {\n    if (err instanceof ChannelAccessDeniedError) {\n      return NextResponse.json({ error: 'Channel not found' }, { status: 404 })\n    }\n    throw err\n  }\n\n  const guard = await validateRouteMutationGuard({\n    container,\n    req,\n    auth,\n    input: {\n      resourceKind: 'communication_channels.channel',\n      resourceId: id,\n      operation: 'delete',\n    },\n  })\n  if ('response' in guard) return guard.response\n\n  const commandBus = container.resolve('commandBus') as CommandBus\n  // Use the CHANNEL's own org (not the caller's session org) so push teardown\n  // and credential resolution key where the channel stored them.\n  const channelOrganizationId = (channel as { organizationId?: string | null }).organizationId ?? null\n  const input: AdminDeleteChannelInput = {\n    channelId: id,\n    scope: { tenantId: auth.tenantId as string, organizationId: channelOrganizationId },\n  }\n  const { result } = await commandBus.execute<AdminDeleteChannelInput, AdminDeleteChannelResult>(\n    COMMUNICATION_CHANNELS_ADMIN_DELETE_CHANNEL_COMMAND_ID,\n    {\n      input,\n      ctx: {\n        container,\n        auth: auth as never,\n        organizationScope: null,\n        selectedOrganizationId: organizationId,\n        organizationIds: organizationId ? [organizationId] : null,\n      },\n    },\n  )\n\n  // 'noop' (channel vanished between the load and the command) and\n  // 'not_tenant_wide' both map to 404 to avoid leaking existence.\n  if (result.status !== 'deleted') {\n    return NextResponse.json({ error: 'Channel not found' }, { status: 404 })\n  }\n  await guard.afterSuccess()\n  return new NextResponse(null, { status: 204 })\n}\n\nexport const openApi = {\n  tags: ['CommunicationChannels'],\n  methods: {\n    DELETE: {\n      summary: 'Admin delete (soft-delete) a tenant-wide communication channel',\n      tags: ['CommunicationChannels'],\n      responses: [\n        { status: 204, description: 'Channel deleted' },\n        { status: 400, description: 'Invalid channel id' },\n        { status: 401, description: 'Unauthorized' },\n        { status: 404, description: 'Channel not found or not a tenant-wide channel' },\n      ],\n    },\n  },\n}\n\nexport default DELETE\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAClB,SAAS,0BAA0B;AACnC,SAAS,8BAA8B;AAGvC,SAAS,6BAA6B;AACtC,SAAS,4BAA4B;AACrC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,OAGK;AACP,SAAS,kCAAkC;AAmBpC,MAAM,WAAW;AAAA,EACtB,MAAM;AAAA,EACN,QAAQ;AAAA,IACN,aAAa;AAAA,IACb,iBAAiB,CAAC,8BAA8B;AAAA,EAClD;AACF;AAMA,eAAsB,OAAO,KAAc,SAA0C;AACnF,QAAM,EAAE,GAAG,IAAI,MAAM,QAAQ;AAC7B,MAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,SAAS;AAC5C,WAAO,aAAa,KAAK,EAAE,OAAO,qBAAqB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC3E;AAEA,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM,OAAO,CAAC,MAAM,UAAU;AACjC,WAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrE;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,KAAM,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC3D,QAAM,iBAAkB,KAAmC,SAAS;AACpE,QAAM,SAAS,EAAE,UAAU,KAAK,UAAoB,eAAe;AAEnE,QAAM,UAAU,MAAM;AAAA,IACpB;AAAA,IACA;AAAA,IACA;AAAA,MACE;AAAA,MACA,UAAU,KAAK;AAAA,MACf,GAAG,qBAAqB,cAAc;AAAA,MACtC,WAAW;AAAA,IACb;AAAA,IACA;AAAA,IACA;AAAA,EACF;AAGA,MAAI,CAAC,WAAY,QAAuC,UAAU,MAAM;AACtE,WAAO,aAAa,KAAK,EAAE,OAAO,oBAAoB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC1E;AAEA,MAAI,eAAyB,CAAC;AAC9B,MAAI;AACF,UAAM,OAAO,UAAU,QAAQ,aAAa;AAC5C,UAAM,MAAM,MAAM,KAAK,QAAQ,KAAK,KAAe;AAAA,MACjD,UAAU,KAAK;AAAA,MACf;AAAA,IACF,CAAC;AACD,mBAAe,KAAK,eAAe,CAAC,GAAG,IAAI,MAAM,QAAQ,KAAK,QAAQ,IAAI,IAAI,WAAW,CAAC;AAAA,EAC5F,QAAQ;AACN,mBAAe,CAAC;AAAA,EAClB;AACA,MAAI;AACF;AAAA,MACE,EAAE,QAAS,QAAuC,OAAO;AAAA,MACzD,KAAK;AAAA,MACL;AAAA,MACA;AAAA,IACF;AAAA,EACF,SAAS,KAAK;AACZ,QAAI,eAAe,0BAA0B;AAC3C,aAAO,aAAa,KAAK,EAAE,OAAO,oBAAoB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC1E;AACA,UAAM;AAAA,EACR;AAEA,QAAM,QAAQ,MAAM,2BAA2B;AAAA,IAC7C;AAAA,IACA;AAAA,IACA;AAAA,IACA,OAAO;AAAA,MACL,cAAc;AAAA,MACd,YAAY;AAAA,MACZ,WAAW;AAAA,IACb;AAAA,EACF,CAAC;AACD,MAAI,cAAc,MAAO,QAAO,MAAM;AAEtC,QAAM,aAAa,UAAU,QAAQ,YAAY;AAGjD,QAAM,wBAAyB,QAA+C,kBAAkB;AAChG,QAAM,QAAiC;AAAA,IACrC,WAAW;AAAA,IACX,OAAO,EAAE,UAAU,KAAK,UAAoB,gBAAgB,sBAAsB;AAAA,EACpF;AACA,QAAM,EAAE,OAAO,IAAI,MAAM,WAAW;AAAA,IAClC;AAAA,IACA;AAAA,MACE;AAAA,MACA,KAAK;AAAA,QACH;AAAA,QACA;AAAA,QACA,mBAAmB;AAAA,QACnB,wBAAwB;AAAA,QACxB,iBAAiB,iBAAiB,CAAC,cAAc,IAAI;AAAA,MACvD;AAAA,IACF;AAAA,EACF;AAIA,MAAI,OAAO,WAAW,WAAW;AAC/B,WAAO,aAAa,KAAK,EAAE,OAAO,oBAAoB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC1E;AACA,QAAM,MAAM,aAAa;AACzB,SAAO,IAAI,aAAa,MAAM,EAAE,QAAQ,IAAI,CAAC;AAC/C;AAEO,MAAM,UAAU;AAAA,EACrB,MAAM,CAAC,uBAAuB;AAAA,EAC9B,SAAS;AAAA,IACP,QAAQ;AAAA,MACN,SAAS;AAAA,MACT,MAAM,CAAC,uBAAuB;AAAA,MAC9B,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,kBAAkB;AAAA,QAC9C,EAAE,QAAQ,KAAK,aAAa,qBAAqB;AAAA,QACjD,EAAE,QAAQ,KAAK,aAAa,eAAe;AAAA,QAC3C,EAAE,QAAQ,KAAK,aAAa,iDAAiD;AAAA,MAC/E;AAAA,IACF;AAAA,EACF;AACF;AAEA,IAAO,gBAAQ;",
+  "names": []
+}

package/dist/modules/communication_channels/api/get/channels/[id]/health/route.js

@@ -7,7 +7,11 @@ import { findOneWithDecryption, findWithDecryption } from "@open-mercato/shared/
 import { resolveOrganizationScopeForRequest } from "@open-mercato/core/modules/directory/utils/organizationScope";
 import { resolveOrganizationScopeFilter } from "@open-mercato/core/modules/directory/utils/organizationScopeFilter";
 import { CommunicationChannel, ExternalConversation, MessageChannelLink } from "../../../../../data/entities.js";
-import { ChannelAccessDeniedError, assertCanAccessChannel } from "../../../../../lib/access-control.js";
+import {
+  ChannelAccessDeniedError,
+  assertCanAccessChannel,
+  channelOrgScopeWhereFromFilter
+} from "../../../../../lib/access-control.js";
 const metadata = {
   path: "/communication_channels/channels/[id]/health",
   GET: { requireAuth: true, requireFeatures: ["communication_channels.view"] }
@@ -34,7 +38,7 @@ async function GET(req, context) {
   const channel = await findOneWithDecryption(
     em,
     CommunicationChannel,
-    { id, tenantId: auth.tenantId, ...orgFilter.where, deletedAt: null },
+    { id, tenantId: auth.tenantId, ...channelOrgScopeWhereFromFilter(orgFilter), deletedAt: null },
     void 0,
     dscope
   );

package/dist/modules/communication_channels/api/get/channels/[id]/health/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../../../src/modules/communication_channels/api/get/channels/%5Bid%5D/health/route.ts"],
-  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport { sql } from 'kysely'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { findOneWithDecryption, findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport { resolveOrganizationScopeFilter } from '@open-mercato/core/modules/directory/utils/organizationScopeFilter'\nimport { CommunicationChannel, ExternalConversation, MessageChannelLink } from '../../../../../data/entities'\nimport { ChannelAccessDeniedError, assertCanAccessChannel } from '../../../../../lib/access-control'\n\ntype RbacServiceLike = {\n  loadAcl: (\n    userId: string,\n    scope: { tenantId: string | null; organizationId: string | null },\n  ) => Promise<{ isSuperAdmin: boolean; features: string[]; organizations: string[] | null }>\n}\n\nexport const metadata = {\n  path: '/communication_channels/channels/[id]/health',\n  GET: { requireAuth: true, requireFeatures: ['communication_channels.view'] },\n}\n\ntype RouteContext = {\n  params: Promise<{ id: string }> | { id: string }\n}\n\nconst WINDOW_HOURS = 24\nconst RECENT_FAILURES_LIMIT = 10\n\n/**\n * Channel health snapshot \u2014 live aggregates from `message_channel_links` rather\n * than a dedicated `HealthLog` table.\n *\n * Returns counts of `sent` / `failed` / `pending` deliveries in the trailing\n * 24-hour window, plus the most recent failed links with last-error context.\n *\n * Per-user isolation: aggregates are scoped to **this channel only** via the\n * `external_conversations.channelId` join (a MessageChannelLink does not have a\n * direct channelId column \u2014 the link goes through ExternalConversation). Before\n * any DB read for aggregates, the channel must pass `assertCanAccessChannel`\n * so a non-admin caller cannot inspect another user's channel telemetry.\n */\nexport async function GET(req: Request, context: RouteContext): Promise<Response> {\n  const { id } = await context.params\n  if (!z.string().uuid().safeParse(id).success) {\n    return NextResponse.json({ error: 'Invalid channel id' }, { status: 400 })\n  }\n\n  const auth = await getAuthFromRequest(req)\n  if (!auth?.tenantId) {\n    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n  }\n\n  const container = await createRequestContainer()\n  const em = (container.resolve('em') as EntityManager).fork()\n\n  // Same selected-organization scoping as the list and detail routes (#5012).\n  const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req })\n  const orgFilter = resolveOrganizationScopeFilter(scope, auth)\n\n  const dscope = {\n    tenantId: auth.tenantId as string,\n    organizationId: orgFilter.rbacOrganizationId,\n  }\n  const channel = await findOneWithDecryption(\n    em,\n    CommunicationChannel,\n    { id, tenantId: auth.tenantId, ...orgFilter.where, deletedAt: null },\n    undefined,\n    dscope,\n  )\n  if (!channel) {\n    return NextResponse.json({ error: 'Channel not found' }, { status: 404 })\n  }\n\n  let userFeatures: string[] = []\n  try {\n    const rbac = container.resolve('rbacService') as RbacServiceLike\n    const acl = await rbac.loadAcl(auth.sub as string, {\n      tenantId: auth.tenantId as string,\n      organizationId: dscope.organizationId,\n    })\n    userFeatures = acl?.isSuperAdmin ? ['*'] : Array.isArray(acl?.features) ? acl.features : []\n  } catch {\n    userFeatures = []\n  }\n  try {\n    assertCanAccessChannel(channel, auth.sub as string, userFeatures)\n  } catch (err) {\n    if (err instanceof ChannelAccessDeniedError) {\n      return NextResponse.json({ error: 'Channel not found' }, { status: 404 })\n    }\n    throw err\n  }\n\n  // ExternalConversation is append-only on the hub side \u2014 no soft-delete column.\n  // Scope by channel + tenant so aggregates stay isolated even when the same\n  // provider is connected by multiple users in the same tenant.\n  const conversations = await findWithDecryption(\n    em,\n    ExternalConversation,\n    { channelId: channel.id, tenantId: auth.tenantId },\n    undefined,\n    dscope,\n  )\n  const conversationIds = conversations.map((c) => c.id).filter(Boolean) as string[]\n\n  const counts = { sent: 0, delivered: 0, read: 0, failed: 0, pending: 0, queued: 0, other: 0 }\n  let totalsLast24h = 0\n  let recentFailures: MessageChannelLink[] = []\n  if (conversationIds.length > 0) {\n    const since = new Date(Date.now() - WINDOW_HOURS * 60 * 60 * 1000)\n\n    // Aggregate the delivery-status counts in the database so the response stays\n    // a small fixed shape regardless of how much traffic the channel saw in the\n    // window. `delivery_status`, `external_conversation_id`, `tenant_id` and\n    // `created_at` are plaintext columns (see encryption.ts \u2014 only\n    // `channel_ingest_dead_letter.raw_body` is encrypted on this module), so a\n    // grouped count is safe without the decryption helpers.\n    const db = em.getKysely<any>() as any\n    const statusRows = (await db\n      .selectFrom('message_channel_links')\n      .select(['delivery_status', sql<string>`count(*)`.as('count')])\n      .where('external_conversation_id', 'in', conversationIds)\n      .where('tenant_id', '=', auth.tenantId)\n      .where('created_at', '>=', since)\n      .groupBy('delivery_status')\n      .execute()) as Array<{ delivery_status: string | null; count: string | number }>\n\n    for (const row of statusRows) {\n      const value = Number(row.count) || 0\n      totalsLast24h += value\n      const key = row.delivery_status as keyof typeof counts\n      if (key && key in counts) counts[key] += value\n      else counts.other += value\n    }\n\n    recentFailures = await findWithDecryption(\n      em,\n      MessageChannelLink,\n      {\n        externalConversationId: { $in: conversationIds },\n        tenantId: auth.tenantId,\n        deliveryStatus: 'failed',\n      },\n      { limit: RECENT_FAILURES_LIMIT, orderBy: { createdAt: 'desc' } },\n      dscope,\n    )\n  }\n\n  return NextResponse.json({\n    channelId: channel.id,\n    providerKey: channel.providerKey,\n    channelType: channel.channelType,\n    windowHours: WINDOW_HOURS,\n    counts,\n    totalsLast24h,\n    recentFailures: recentFailures.map((link) => ({\n      id: link.id,\n      messageId: link.messageId,\n      direction: link.direction,\n      createdAt: link.createdAt?.toISOString?.() ?? null,\n      lastError:\n        (link.channelMetadata as Record<string, unknown> | null)?.lastError ?? null,\n      transient:\n        (link.channelMetadata as Record<string, unknown> | null)?.transient ?? null,\n    })),\n  })\n}\n\nexport const openApi = {\n  tags: ['CommunicationChannels'],\n  methods: {\n    GET: {\n      summary: 'Snapshot of channel delivery health (last 24h)',\n      tags: ['CommunicationChannels'],\n      responses: [\n        { status: 200, description: 'Health snapshot' },\n        { status: 400, description: 'Invalid channel id' },\n        { status: 401, description: 'Unauthorized' },\n        { status: 404, description: 'Channel not found' },\n      ],\n    },\n  },\n}\nexport default GET\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAClB,SAAS,WAAW;AACpB,SAAS,0BAA0B;AACnC,SAAS,8BAA8B;AAEvC,SAAS,uBAAuB,0BAA0B;AAC1D,SAAS,0CAA0C;AACnD,SAAS,sCAAsC;AAC/C,SAAS,sBAAsB,sBAAsB,0BAA0B;AAC/E,SAAS,0BAA0B,8BAA8B;AAS1D,MAAM,WAAW;AAAA,EACtB,MAAM;AAAA,EACN,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,6BAA6B,EAAE;AAC7E;AAMA,MAAM,eAAe;AACrB,MAAM,wBAAwB;AAe9B,eAAsB,IAAI,KAAc,SAA0C;AAChF,QAAM,EAAE,GAAG,IAAI,MAAM,QAAQ;AAC7B,MAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,SAAS;AAC5C,WAAO,aAAa,KAAK,EAAE,OAAO,qBAAqB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC3E;AAEA,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM,UAAU;AACnB,WAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrE;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,KAAM,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAG3D,QAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,SAAS,IAAI,CAAC;AACxF,QAAM,YAAY,+BAA+B,OAAO,IAAI;AAE5D,QAAM,SAAS;AAAA,IACb,UAAU,KAAK;AAAA,IACf,gBAAgB,UAAU;AAAA,EAC5B;AACA,QAAM,UAAU,MAAM;AAAA,IACpB;AAAA,IACA;AAAA,IACA,EAAE,IAAI,UAAU,KAAK,UAAU,GAAG,UAAU,OAAO,WAAW,KAAK;AAAA,IACnE;AAAA,IACA;AAAA,EACF;AACA,MAAI,CAAC,SAAS;AACZ,WAAO,aAAa,KAAK,EAAE,OAAO,oBAAoB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC1E;AAEA,MAAI,eAAyB,CAAC;AAC9B,MAAI;AACF,UAAM,OAAO,UAAU,QAAQ,aAAa;AAC5C,UAAM,MAAM,MAAM,KAAK,QAAQ,KAAK,KAAe;AAAA,MACjD,UAAU,KAAK;AAAA,MACf,gBAAgB,OAAO;AAAA,IACzB,CAAC;AACD,mBAAe,KAAK,eAAe,CAAC,GAAG,IAAI,MAAM,QAAQ,KAAK,QAAQ,IAAI,IAAI,WAAW,CAAC;AAAA,EAC5F,QAAQ;AACN,mBAAe,CAAC;AAAA,EAClB;AACA,MAAI;AACF,2BAAuB,SAAS,KAAK,KAAe,YAAY;AAAA,EAClE,SAAS,KAAK;AACZ,QAAI,eAAe,0BAA0B;AAC3C,aAAO,aAAa,KAAK,EAAE,OAAO,oBAAoB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC1E;AACA,UAAM;AAAA,EACR;AAKA,QAAM,gBAAgB,MAAM;AAAA,IAC1B;AAAA,IACA;AAAA,IACA,EAAE,WAAW,QAAQ,IAAI,UAAU,KAAK,SAAS;AAAA,IACjD;AAAA,IACA;AAAA,EACF;AACA,QAAM,kBAAkB,cAAc,IAAI,CAAC,MAAM,EAAE,EAAE,EAAE,OAAO,OAAO;AAErE,QAAM,SAAS,EAAE,MAAM,GAAG,WAAW,GAAG,MAAM,GAAG,QAAQ,GAAG,SAAS,GAAG,QAAQ,GAAG,OAAO,EAAE;AAC5F,MAAI,gBAAgB;AACpB,MAAI,iBAAuC,CAAC;AAC5C,MAAI,gBAAgB,SAAS,GAAG;AAC9B,UAAM,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,eAAe,KAAK,KAAK,GAAI;AAQjE,UAAM,KAAK,GAAG,UAAe;AAC7B,UAAM,aAAc,MAAM,GACvB,WAAW,uBAAuB,EAClC,OAAO,CAAC,mBAAmB,cAAsB,GAAG,OAAO,CAAC,CAAC,EAC7D,MAAM,4BAA4B,MAAM,eAAe,EACvD,MAAM,aAAa,KAAK,KAAK,QAAQ,EACrC,MAAM,cAAc,MAAM,KAAK,EAC/B,QAAQ,iBAAiB,EACzB,QAAQ;AAEX,eAAW,OAAO,YAAY;AAC5B,YAAM,QAAQ,OAAO,IAAI,KAAK,KAAK;AACnC,uBAAiB;AACjB,YAAM,MAAM,IAAI;AAChB,UAAI,OAAO,OAAO,OAAQ,QAAO,GAAG,KAAK;AAAA,UACpC,QAAO,SAAS;AAAA,IACvB;AAEA,qBAAiB,MAAM;AAAA,MACrB;AAAA,MACA;AAAA,MACA;AAAA,QACE,wBAAwB,EAAE,KAAK,gBAAgB;AAAA,QAC/C,UAAU,KAAK;AAAA,QACf,gBAAgB;AAAA,MAClB;AAAA,MACA,EAAE,OAAO,uBAAuB,SAAS,EAAE,WAAW,OAAO,EAAE;AAAA,MAC/D;AAAA,IACF;AAAA,EACF;AAEA,SAAO,aAAa,KAAK;AAAA,IACvB,WAAW,QAAQ;AAAA,IACnB,aAAa,QAAQ;AAAA,IACrB,aAAa,QAAQ;AAAA,IACrB,aAAa;AAAA,IACb;AAAA,IACA;AAAA,IACA,gBAAgB,eAAe,IAAI,CAAC,UAAU;AAAA,MAC5C,IAAI,KAAK;AAAA,MACT,WAAW,KAAK;AAAA,MAChB,WAAW,KAAK;AAAA,MAChB,WAAW,KAAK,WAAW,cAAc,KAAK;AAAA,MAC9C,WACG,KAAK,iBAAoD,aAAa;AAAA,MACzE,WACG,KAAK,iBAAoD,aAAa;AAAA,IAC3E,EAAE;AAAA,EACJ,CAAC;AACH;AAEO,MAAM,UAAU;AAAA,EACrB,MAAM,CAAC,uBAAuB;AAAA,EAC9B,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,MAAM,CAAC,uBAAuB;AAAA,MAC9B,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,kBAAkB;AAAA,QAC9C,EAAE,QAAQ,KAAK,aAAa,qBAAqB;AAAA,QACjD,EAAE,QAAQ,KAAK,aAAa,eAAe;AAAA,QAC3C,EAAE,QAAQ,KAAK,aAAa,oBAAoB;AAAA,MAClD;AAAA,IACF;AAAA,EACF;AACF;AACA,IAAO,gBAAQ;",
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport { sql } from 'kysely'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { findOneWithDecryption, findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport { resolveOrganizationScopeFilter } from '@open-mercato/core/modules/directory/utils/organizationScopeFilter'\nimport { CommunicationChannel, ExternalConversation, MessageChannelLink } from '../../../../../data/entities'\nimport {\n  ChannelAccessDeniedError,\n  assertCanAccessChannel,\n  channelOrgScopeWhereFromFilter,\n} from '../../../../../lib/access-control'\n\ntype RbacServiceLike = {\n  loadAcl: (\n    userId: string,\n    scope: { tenantId: string | null; organizationId: string | null },\n  ) => Promise<{ isSuperAdmin: boolean; features: string[]; organizations: string[] | null }>\n}\n\nexport const metadata = {\n  path: '/communication_channels/channels/[id]/health',\n  GET: { requireAuth: true, requireFeatures: ['communication_channels.view'] },\n}\n\ntype RouteContext = {\n  params: Promise<{ id: string }> | { id: string }\n}\n\nconst WINDOW_HOURS = 24\nconst RECENT_FAILURES_LIMIT = 10\n\n/**\n * Channel health snapshot \u2014 live aggregates from `message_channel_links` rather\n * than a dedicated `HealthLog` table.\n *\n * Returns counts of `sent` / `failed` / `pending` deliveries in the trailing\n * 24-hour window, plus the most recent failed links with last-error context.\n *\n * Per-user isolation: aggregates are scoped to **this channel only** via the\n * `external_conversations.channelId` join (a MessageChannelLink does not have a\n * direct channelId column \u2014 the link goes through ExternalConversation). Before\n * any DB read for aggregates, the channel must pass `assertCanAccessChannel`\n * so a non-admin caller cannot inspect another user's channel telemetry.\n */\nexport async function GET(req: Request, context: RouteContext): Promise<Response> {\n  const { id } = await context.params\n  if (!z.string().uuid().safeParse(id).success) {\n    return NextResponse.json({ error: 'Invalid channel id' }, { status: 400 })\n  }\n\n  const auth = await getAuthFromRequest(req)\n  if (!auth?.tenantId) {\n    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n  }\n\n  const container = await createRequestContainer()\n  const em = (container.resolve('em') as EntityManager).fork()\n\n  // Same selected-organization scoping as the list and detail routes (#5012).\n  const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req })\n  const orgFilter = resolveOrganizationScopeFilter(scope, auth)\n\n  const dscope = {\n    tenantId: auth.tenantId as string,\n    organizationId: orgFilter.rbacOrganizationId,\n  }\n  const channel = await findOneWithDecryption(\n    em,\n    CommunicationChannel,\n    { id, tenantId: auth.tenantId, ...channelOrgScopeWhereFromFilter(orgFilter), deletedAt: null },\n    undefined,\n    dscope,\n  )\n  if (!channel) {\n    return NextResponse.json({ error: 'Channel not found' }, { status: 404 })\n  }\n\n  let userFeatures: string[] = []\n  try {\n    const rbac = container.resolve('rbacService') as RbacServiceLike\n    const acl = await rbac.loadAcl(auth.sub as string, {\n      tenantId: auth.tenantId as string,\n      organizationId: dscope.organizationId,\n    })\n    userFeatures = acl?.isSuperAdmin ? ['*'] : Array.isArray(acl?.features) ? acl.features : []\n  } catch {\n    userFeatures = []\n  }\n  try {\n    assertCanAccessChannel(channel, auth.sub as string, userFeatures)\n  } catch (err) {\n    if (err instanceof ChannelAccessDeniedError) {\n      return NextResponse.json({ error: 'Channel not found' }, { status: 404 })\n    }\n    throw err\n  }\n\n  // ExternalConversation is append-only on the hub side \u2014 no soft-delete column.\n  // Scope by channel + tenant so aggregates stay isolated even when the same\n  // provider is connected by multiple users in the same tenant.\n  const conversations = await findWithDecryption(\n    em,\n    ExternalConversation,\n    { channelId: channel.id, tenantId: auth.tenantId },\n    undefined,\n    dscope,\n  )\n  const conversationIds = conversations.map((c) => c.id).filter(Boolean) as string[]\n\n  const counts = { sent: 0, delivered: 0, read: 0, failed: 0, pending: 0, queued: 0, other: 0 }\n  let totalsLast24h = 0\n  let recentFailures: MessageChannelLink[] = []\n  if (conversationIds.length > 0) {\n    const since = new Date(Date.now() - WINDOW_HOURS * 60 * 60 * 1000)\n\n    // Aggregate the delivery-status counts in the database so the response stays\n    // a small fixed shape regardless of how much traffic the channel saw in the\n    // window. `delivery_status`, `external_conversation_id`, `tenant_id` and\n    // `created_at` are plaintext columns (see encryption.ts \u2014 only\n    // `channel_ingest_dead_letter.raw_body` is encrypted on this module), so a\n    // grouped count is safe without the decryption helpers.\n    const db = em.getKysely<any>() as any\n    const statusRows = (await db\n      .selectFrom('message_channel_links')\n      .select(['delivery_status', sql<string>`count(*)`.as('count')])\n      .where('external_conversation_id', 'in', conversationIds)\n      .where('tenant_id', '=', auth.tenantId)\n      .where('created_at', '>=', since)\n      .groupBy('delivery_status')\n      .execute()) as Array<{ delivery_status: string | null; count: string | number }>\n\n    for (const row of statusRows) {\n      const value = Number(row.count) || 0\n      totalsLast24h += value\n      const key = row.delivery_status as keyof typeof counts\n      if (key && key in counts) counts[key] += value\n      else counts.other += value\n    }\n\n    recentFailures = await findWithDecryption(\n      em,\n      MessageChannelLink,\n      {\n        externalConversationId: { $in: conversationIds },\n        tenantId: auth.tenantId,\n        deliveryStatus: 'failed',\n      },\n      { limit: RECENT_FAILURES_LIMIT, orderBy: { createdAt: 'desc' } },\n      dscope,\n    )\n  }\n\n  return NextResponse.json({\n    channelId: channel.id,\n    providerKey: channel.providerKey,\n    channelType: channel.channelType,\n    windowHours: WINDOW_HOURS,\n    counts,\n    totalsLast24h,\n    recentFailures: recentFailures.map((link) => ({\n      id: link.id,\n      messageId: link.messageId,\n      direction: link.direction,\n      createdAt: link.createdAt?.toISOString?.() ?? null,\n      lastError:\n        (link.channelMetadata as Record<string, unknown> | null)?.lastError ?? null,\n      transient:\n        (link.channelMetadata as Record<string, unknown> | null)?.transient ?? null,\n    })),\n  })\n}\n\nexport const openApi = {\n  tags: ['CommunicationChannels'],\n  methods: {\n    GET: {\n      summary: 'Snapshot of channel delivery health (last 24h)',\n      tags: ['CommunicationChannels'],\n      responses: [\n        { status: 200, description: 'Health snapshot' },\n        { status: 400, description: 'Invalid channel id' },\n        { status: 401, description: 'Unauthorized' },\n        { status: 404, description: 'Channel not found' },\n      ],\n    },\n  },\n}\nexport default GET\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAClB,SAAS,WAAW;AACpB,SAAS,0BAA0B;AACnC,SAAS,8BAA8B;AAEvC,SAAS,uBAAuB,0BAA0B;AAC1D,SAAS,0CAA0C;AACnD,SAAS,sCAAsC;AAC/C,SAAS,sBAAsB,sBAAsB,0BAA0B;AAC/E;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AASA,MAAM,WAAW;AAAA,EACtB,MAAM;AAAA,EACN,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,6BAA6B,EAAE;AAC7E;AAMA,MAAM,eAAe;AACrB,MAAM,wBAAwB;AAe9B,eAAsB,IAAI,KAAc,SAA0C;AAChF,QAAM,EAAE,GAAG,IAAI,MAAM,QAAQ;AAC7B,MAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,SAAS;AAC5C,WAAO,aAAa,KAAK,EAAE,OAAO,qBAAqB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC3E;AAEA,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM,UAAU;AACnB,WAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrE;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,KAAM,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAG3D,QAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,SAAS,IAAI,CAAC;AACxF,QAAM,YAAY,+BAA+B,OAAO,IAAI;AAE5D,QAAM,SAAS;AAAA,IACb,UAAU,KAAK;AAAA,IACf,gBAAgB,UAAU;AAAA,EAC5B;AACA,QAAM,UAAU,MAAM;AAAA,IACpB;AAAA,IACA;AAAA,IACA,EAAE,IAAI,UAAU,KAAK,UAAU,GAAG,+BAA+B,SAAS,GAAG,WAAW,KAAK;AAAA,IAC7F;AAAA,IACA;AAAA,EACF;AACA,MAAI,CAAC,SAAS;AACZ,WAAO,aAAa,KAAK,EAAE,OAAO,oBAAoB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC1E;AAEA,MAAI,eAAyB,CAAC;AAC9B,MAAI;AACF,UAAM,OAAO,UAAU,QAAQ,aAAa;AAC5C,UAAM,MAAM,MAAM,KAAK,QAAQ,KAAK,KAAe;AAAA,MACjD,UAAU,KAAK;AAAA,MACf,gBAAgB,OAAO;AAAA,IACzB,CAAC;AACD,mBAAe,KAAK,eAAe,CAAC,GAAG,IAAI,MAAM,QAAQ,KAAK,QAAQ,IAAI,IAAI,WAAW,CAAC;AAAA,EAC5F,QAAQ;AACN,mBAAe,CAAC;AAAA,EAClB;AACA,MAAI;AACF,2BAAuB,SAAS,KAAK,KAAe,YAAY;AAAA,EAClE,SAAS,KAAK;AACZ,QAAI,eAAe,0BAA0B;AAC3C,aAAO,aAAa,KAAK,EAAE,OAAO,oBAAoB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC1E;AACA,UAAM;AAAA,EACR;AAKA,QAAM,gBAAgB,MAAM;AAAA,IAC1B;AAAA,IACA;AAAA,IACA,EAAE,WAAW,QAAQ,IAAI,UAAU,KAAK,SAAS;AAAA,IACjD;AAAA,IACA;AAAA,EACF;AACA,QAAM,kBAAkB,cAAc,IAAI,CAAC,MAAM,EAAE,EAAE,EAAE,OAAO,OAAO;AAErE,QAAM,SAAS,EAAE,MAAM,GAAG,WAAW,GAAG,MAAM,GAAG,QAAQ,GAAG,SAAS,GAAG,QAAQ,GAAG,OAAO,EAAE;AAC5F,MAAI,gBAAgB;AACpB,MAAI,iBAAuC,CAAC;AAC5C,MAAI,gBAAgB,SAAS,GAAG;AAC9B,UAAM,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,eAAe,KAAK,KAAK,GAAI;AAQjE,UAAM,KAAK,GAAG,UAAe;AAC7B,UAAM,aAAc,MAAM,GACvB,WAAW,uBAAuB,EAClC,OAAO,CAAC,mBAAmB,cAAsB,GAAG,OAAO,CAAC,CAAC,EAC7D,MAAM,4BAA4B,MAAM,eAAe,EACvD,MAAM,aAAa,KAAK,KAAK,QAAQ,EACrC,MAAM,cAAc,MAAM,KAAK,EAC/B,QAAQ,iBAAiB,EACzB,QAAQ;AAEX,eAAW,OAAO,YAAY;AAC5B,YAAM,QAAQ,OAAO,IAAI,KAAK,KAAK;AACnC,uBAAiB;AACjB,YAAM,MAAM,IAAI;AAChB,UAAI,OAAO,OAAO,OAAQ,QAAO,GAAG,KAAK;AAAA,UACpC,QAAO,SAAS;AAAA,IACvB;AAEA,qBAAiB,MAAM;AAAA,MACrB;AAAA,MACA;AAAA,MACA;AAAA,QACE,wBAAwB,EAAE,KAAK,gBAAgB;AAAA,QAC/C,UAAU,KAAK;AAAA,QACf,gBAAgB;AAAA,MAClB;AAAA,MACA,EAAE,OAAO,uBAAuB,SAAS,EAAE,WAAW,OAAO,EAAE;AAAA,MAC/D;AAAA,IACF;AAAA,EACF;AAEA,SAAO,aAAa,KAAK;AAAA,IACvB,WAAW,QAAQ;AAAA,IACnB,aAAa,QAAQ;AAAA,IACrB,aAAa,QAAQ;AAAA,IACrB,aAAa;AAAA,IACb;AAAA,IACA;AAAA,IACA,gBAAgB,eAAe,IAAI,CAAC,UAAU;AAAA,MAC5C,IAAI,KAAK;AAAA,MACT,WAAW,KAAK;AAAA,MAChB,WAAW,KAAK;AAAA,MAChB,WAAW,KAAK,WAAW,cAAc,KAAK;AAAA,MAC9C,WACG,KAAK,iBAAoD,aAAa;AAAA,MACzE,WACG,KAAK,iBAAoD,aAAa;AAAA,IAC3E,EAAE;AAAA,EACJ,CAAC;AACH;AAEO,MAAM,UAAU;AAAA,EACrB,MAAM,CAAC,uBAAuB;AAAA,EAC9B,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,MAAM,CAAC,uBAAuB;AAAA,MAC9B,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,kBAAkB;AAAA,QAC9C,EAAE,QAAQ,KAAK,aAAa,qBAAqB;AAAA,QACjD,EAAE,QAAQ,KAAK,aAAa,eAAe;AAAA,QAC3C,EAAE,QAAQ,KAAK,aAAa,oBAAoB;AAAA,MAClD;AAAA,IACF;AAAA,EACF;AACF;AACA,IAAO,gBAAQ;",
   "names": []
 }

package/dist/modules/communication_channels/api/get/channels/[id]/route.js

@@ -6,7 +6,11 @@ import { findOneWithDecryption } from "@open-mercato/shared/lib/encryption/find"
 import { resolveOrganizationScopeForRequest } from "@open-mercato/core/modules/directory/utils/organizationScope";
 import { resolveOrganizationScopeFilter } from "@open-mercato/core/modules/directory/utils/organizationScopeFilter";
 import { CommunicationChannel } from "../../../../data/entities.js";
-import { ChannelAccessDeniedError, assertCanAccessChannel } from "../../../../lib/access-control.js";
+import {
+  ChannelAccessDeniedError,
+  assertCanAccessChannel,
+  channelOrgScopeWhereFromFilter
+} from "../../../../lib/access-control.js";
 const metadata = {
   path: "/communication_channels/channels/[id]",
   GET: { requireAuth: true, requireFeatures: ["communication_channels.view"] }
@@ -30,7 +34,7 @@ async function GET(req, context) {
     {
       id,
       tenantId: auth.tenantId,
-      ...orgFilter.where,
+      ...channelOrgScopeWhereFromFilter(orgFilter),
       deletedAt: null
     },
     void 0,

package/dist/modules/communication_channels/api/get/channels/[id]/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../../src/modules/communication_channels/api/get/channels/%5Bid%5D/route.ts"],
-  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport { resolveOrganizationScopeFilter } from '@open-mercato/core/modules/directory/utils/organizationScopeFilter'\nimport { CommunicationChannel } from '../../../../data/entities'\nimport { ChannelAccessDeniedError, assertCanAccessChannel } from '../../../../lib/access-control'\n\ntype RbacServiceLike = {\n  loadAcl: (\n    userId: string,\n    scope: { tenantId: string | null; organizationId: string | null },\n  ) => Promise<{ isSuperAdmin: boolean; features: string[]; organizations: string[] | null }>\n}\n\nexport const metadata = {\n  path: '/communication_channels/channels/[id]',\n  GET: { requireAuth: true, requireFeatures: ['communication_channels.view'] },\n}\n\ntype RouteContext = {\n  params: Promise<{ id: string }> | { id: string }\n}\n\nexport async function GET(req: Request, context: RouteContext): Promise<Response> {\n  const { id } = await context.params\n  if (!z.string().uuid().safeParse(id).success) {\n    return NextResponse.json({ error: 'Invalid channel id' }, { status: 400 })\n  }\n\n  const auth = await getAuthFromRequest(req)\n  if (!auth?.tenantId) {\n    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n  }\n\n  const container = await createRequestContainer()\n  const em = (container.resolve('em') as EntityManager).fork()\n\n  // Same selected-organization scoping as the list route (#5012) so a channel\n  // the list shows under the switched organization stays openable here.\n  const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req })\n  const orgFilter = resolveOrganizationScopeFilter(scope, auth)\n\n  const channel = await findOneWithDecryption(\n    em,\n    CommunicationChannel,\n    {\n      id,\n      tenantId: auth.tenantId,\n      ...orgFilter.where,\n      deletedAt: null,\n    },\n    undefined,\n    { tenantId: auth.tenantId as string, organizationId: orgFilter.rbacOrganizationId },\n  )\n  if (!channel) {\n    return NextResponse.json({ error: 'Channel not found' }, { status: 404 })\n  }\n\n  // Per-user access guard: callers without `communication_channels.admin` can\n  // only see tenant-wide channels (userId IS NULL) or channels they own.\n  let userFeatures: string[] = []\n  try {\n    const rbac = container.resolve('rbacService') as RbacServiceLike\n    const acl = await rbac.loadAcl(auth.sub as string, {\n      tenantId: auth.tenantId as string,\n      organizationId: orgFilter.rbacOrganizationId,\n    })\n    userFeatures = acl?.isSuperAdmin\n      ? ['*']\n      : (Array.isArray(acl?.features) ? acl.features : [])\n  } catch {\n    userFeatures = []\n  }\n  try {\n    assertCanAccessChannel(channel, auth.sub as string, userFeatures)\n  } catch (err) {\n    if (err instanceof ChannelAccessDeniedError) {\n      // 404 (not 403) \u2014 don't leak existence of other users' channels.\n      return NextResponse.json({ error: 'Channel not found' }, { status: 404 })\n    }\n    throw err\n  }\n\n  return NextResponse.json({\n    id: channel.id,\n    providerKey: channel.providerKey,\n    channelType: channel.channelType,\n    displayName: channel.displayName,\n    externalIdentifier: channel.externalIdentifier ?? null,\n    credentialsRef: channel.credentialsRef ?? null,\n    capabilities: channel.capabilities ?? null,\n    isActive: channel.isActive,\n    organizationId: channel.organizationId ?? null,\n    createdAt: channel.createdAt?.toISOString?.() ?? null,\n    updatedAt: channel.updatedAt?.toISOString?.() ?? null,\n  })\n}\n\nexport const openApi = {\n  tags: ['CommunicationChannels'],\n  methods: {\n    GET: {\n      summary: 'Get a single communication channel by id',\n      tags: ['CommunicationChannels'],\n      responses: [\n        { status: 200, description: 'Channel detail' },\n        { status: 400, description: 'Invalid channel id' },\n        { status: 401, description: 'Unauthorized' },\n        { status: 404, description: 'Channel not found' },\n      ],\n    },\n  },\n}\nexport default GET\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAClB,SAAS,0BAA0B;AACnC,SAAS,8BAA8B;AAEvC,SAAS,6BAA6B;AACtC,SAAS,0CAA0C;AACnD,SAAS,sCAAsC;AAC/C,SAAS,4BAA4B;AACrC,SAAS,0BAA0B,8BAA8B;AAS1D,MAAM,WAAW;AAAA,EACtB,MAAM;AAAA,EACN,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,6BAA6B,EAAE;AAC7E;AAMA,eAAsB,IAAI,KAAc,SAA0C;AAChF,QAAM,EAAE,GAAG,IAAI,MAAM,QAAQ;AAC7B,MAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,SAAS;AAC5C,WAAO,aAAa,KAAK,EAAE,OAAO,qBAAqB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC3E;AAEA,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM,UAAU;AACnB,WAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrE;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,KAAM,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAI3D,QAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,SAAS,IAAI,CAAC;AACxF,QAAM,YAAY,+BAA+B,OAAO,IAAI;AAE5D,QAAM,UAAU,MAAM;AAAA,IACpB;AAAA,IACA;AAAA,IACA;AAAA,MACE;AAAA,MACA,UAAU,KAAK;AAAA,MACf,GAAG,UAAU;AAAA,MACb,WAAW;AAAA,IACb;AAAA,IACA;AAAA,IACA,EAAE,UAAU,KAAK,UAAoB,gBAAgB,UAAU,mBAAmB;AAAA,EACpF;AACA,MAAI,CAAC,SAAS;AACZ,WAAO,aAAa,KAAK,EAAE,OAAO,oBAAoB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC1E;AAIA,MAAI,eAAyB,CAAC;AAC9B,MAAI;AACF,UAAM,OAAO,UAAU,QAAQ,aAAa;AAC5C,UAAM,MAAM,MAAM,KAAK,QAAQ,KAAK,KAAe;AAAA,MACjD,UAAU,KAAK;AAAA,MACf,gBAAgB,UAAU;AAAA,IAC5B,CAAC;AACD,mBAAe,KAAK,eAChB,CAAC,GAAG,IACH,MAAM,QAAQ,KAAK,QAAQ,IAAI,IAAI,WAAW,CAAC;AAAA,EACtD,QAAQ;AACN,mBAAe,CAAC;AAAA,EAClB;AACA,MAAI;AACF,2BAAuB,SAAS,KAAK,KAAe,YAAY;AAAA,EAClE,SAAS,KAAK;AACZ,QAAI,eAAe,0BAA0B;AAE3C,aAAO,aAAa,KAAK,EAAE,OAAO,oBAAoB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC1E;AACA,UAAM;AAAA,EACR;AAEA,SAAO,aAAa,KAAK;AAAA,IACvB,IAAI,QAAQ;AAAA,IACZ,aAAa,QAAQ;AAAA,IACrB,aAAa,QAAQ;AAAA,IACrB,aAAa,QAAQ;AAAA,IACrB,oBAAoB,QAAQ,sBAAsB;AAAA,IAClD,gBAAgB,QAAQ,kBAAkB;AAAA,IAC1C,cAAc,QAAQ,gBAAgB;AAAA,IACtC,UAAU,QAAQ;AAAA,IAClB,gBAAgB,QAAQ,kBAAkB;AAAA,IAC1C,WAAW,QAAQ,WAAW,cAAc,KAAK;AAAA,IACjD,WAAW,QAAQ,WAAW,cAAc,KAAK;AAAA,EACnD,CAAC;AACH;AAEO,MAAM,UAAU;AAAA,EACrB,MAAM,CAAC,uBAAuB;AAAA,EAC9B,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,MAAM,CAAC,uBAAuB;AAAA,MAC9B,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,iBAAiB;AAAA,QAC7C,EAAE,QAAQ,KAAK,aAAa,qBAAqB;AAAA,QACjD,EAAE,QAAQ,KAAK,aAAa,eAAe;AAAA,QAC3C,EAAE,QAAQ,KAAK,aAAa,oBAAoB;AAAA,MAClD;AAAA,IACF;AAAA,EACF;AACF;AACA,IAAO,gBAAQ;",
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport { resolveOrganizationScopeFilter } from '@open-mercato/core/modules/directory/utils/organizationScopeFilter'\nimport { CommunicationChannel } from '../../../../data/entities'\nimport {\n  ChannelAccessDeniedError,\n  assertCanAccessChannel,\n  channelOrgScopeWhereFromFilter,\n} from '../../../../lib/access-control'\n\ntype RbacServiceLike = {\n  loadAcl: (\n    userId: string,\n    scope: { tenantId: string | null; organizationId: string | null },\n  ) => Promise<{ isSuperAdmin: boolean; features: string[]; organizations: string[] | null }>\n}\n\nexport const metadata = {\n  path: '/communication_channels/channels/[id]',\n  GET: { requireAuth: true, requireFeatures: ['communication_channels.view'] },\n}\n\ntype RouteContext = {\n  params: Promise<{ id: string }> | { id: string }\n}\n\nexport async function GET(req: Request, context: RouteContext): Promise<Response> {\n  const { id } = await context.params\n  if (!z.string().uuid().safeParse(id).success) {\n    return NextResponse.json({ error: 'Invalid channel id' }, { status: 400 })\n  }\n\n  const auth = await getAuthFromRequest(req)\n  if (!auth?.tenantId) {\n    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n  }\n\n  const container = await createRequestContainer()\n  const em = (container.resolve('em') as EntityManager).fork()\n\n  // Same selected-organization scoping as the list route (#5012) so a channel\n  // the list shows under the switched organization stays openable here.\n  const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req })\n  const orgFilter = resolveOrganizationScopeFilter(scope, auth)\n\n  const channel = await findOneWithDecryption(\n    em,\n    CommunicationChannel,\n    {\n      id,\n      tenantId: auth.tenantId,\n      ...channelOrgScopeWhereFromFilter(orgFilter),\n      deletedAt: null,\n    },\n    undefined,\n    { tenantId: auth.tenantId as string, organizationId: orgFilter.rbacOrganizationId },\n  )\n  if (!channel) {\n    return NextResponse.json({ error: 'Channel not found' }, { status: 404 })\n  }\n\n  // Per-user access guard: callers without `communication_channels.admin` can\n  // only see tenant-wide channels (userId IS NULL) or channels they own.\n  let userFeatures: string[] = []\n  try {\n    const rbac = container.resolve('rbacService') as RbacServiceLike\n    const acl = await rbac.loadAcl(auth.sub as string, {\n      tenantId: auth.tenantId as string,\n      organizationId: orgFilter.rbacOrganizationId,\n    })\n    userFeatures = acl?.isSuperAdmin\n      ? ['*']\n      : (Array.isArray(acl?.features) ? acl.features : [])\n  } catch {\n    userFeatures = []\n  }\n  try {\n    assertCanAccessChannel(channel, auth.sub as string, userFeatures)\n  } catch (err) {\n    if (err instanceof ChannelAccessDeniedError) {\n      // 404 (not 403) \u2014 don't leak existence of other users' channels.\n      return NextResponse.json({ error: 'Channel not found' }, { status: 404 })\n    }\n    throw err\n  }\n\n  return NextResponse.json({\n    id: channel.id,\n    providerKey: channel.providerKey,\n    channelType: channel.channelType,\n    displayName: channel.displayName,\n    externalIdentifier: channel.externalIdentifier ?? null,\n    credentialsRef: channel.credentialsRef ?? null,\n    capabilities: channel.capabilities ?? null,\n    isActive: channel.isActive,\n    organizationId: channel.organizationId ?? null,\n    createdAt: channel.createdAt?.toISOString?.() ?? null,\n    updatedAt: channel.updatedAt?.toISOString?.() ?? null,\n  })\n}\n\nexport const openApi = {\n  tags: ['CommunicationChannels'],\n  methods: {\n    GET: {\n      summary: 'Get a single communication channel by id',\n      tags: ['CommunicationChannels'],\n      responses: [\n        { status: 200, description: 'Channel detail' },\n        { status: 400, description: 'Invalid channel id' },\n        { status: 401, description: 'Unauthorized' },\n        { status: 404, description: 'Channel not found' },\n      ],\n    },\n  },\n}\nexport default GET\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAClB,SAAS,0BAA0B;AACnC,SAAS,8BAA8B;AAEvC,SAAS,6BAA6B;AACtC,SAAS,0CAA0C;AACnD,SAAS,sCAAsC;AAC/C,SAAS,4BAA4B;AACrC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AASA,MAAM,WAAW;AAAA,EACtB,MAAM;AAAA,EACN,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,6BAA6B,EAAE;AAC7E;AAMA,eAAsB,IAAI,KAAc,SAA0C;AAChF,QAAM,EAAE,GAAG,IAAI,MAAM,QAAQ;AAC7B,MAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,SAAS;AAC5C,WAAO,aAAa,KAAK,EAAE,OAAO,qBAAqB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC3E;AAEA,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM,UAAU;AACnB,WAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrE;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,KAAM,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAI3D,QAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,SAAS,IAAI,CAAC;AACxF,QAAM,YAAY,+BAA+B,OAAO,IAAI;AAE5D,QAAM,UAAU,MAAM;AAAA,IACpB;AAAA,IACA;AAAA,IACA;AAAA,MACE;AAAA,MACA,UAAU,KAAK;AAAA,MACf,GAAG,+BAA+B,SAAS;AAAA,MAC3C,WAAW;AAAA,IACb;AAAA,IACA;AAAA,IACA,EAAE,UAAU,KAAK,UAAoB,gBAAgB,UAAU,mBAAmB;AAAA,EACpF;AACA,MAAI,CAAC,SAAS;AACZ,WAAO,aAAa,KAAK,EAAE,OAAO,oBAAoB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC1E;AAIA,MAAI,eAAyB,CAAC;AAC9B,MAAI;AACF,UAAM,OAAO,UAAU,QAAQ,aAAa;AAC5C,UAAM,MAAM,MAAM,KAAK,QAAQ,KAAK,KAAe;AAAA,MACjD,UAAU,KAAK;AAAA,MACf,gBAAgB,UAAU;AAAA,IAC5B,CAAC;AACD,mBAAe,KAAK,eAChB,CAAC,GAAG,IACH,MAAM,QAAQ,KAAK,QAAQ,IAAI,IAAI,WAAW,CAAC;AAAA,EACtD,QAAQ;AACN,mBAAe,CAAC;AAAA,EAClB;AACA,MAAI;AACF,2BAAuB,SAAS,KAAK,KAAe,YAAY;AAAA,EAClE,SAAS,KAAK;AACZ,QAAI,eAAe,0BAA0B;AAE3C,aAAO,aAAa,KAAK,EAAE,OAAO,oBAAoB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC1E;AACA,UAAM;AAAA,EACR;AAEA,SAAO,aAAa,KAAK;AAAA,IACvB,IAAI,QAAQ;AAAA,IACZ,aAAa,QAAQ;AAAA,IACrB,aAAa,QAAQ;AAAA,IACrB,aAAa,QAAQ;AAAA,IACrB,oBAAoB,QAAQ,sBAAsB;AAAA,IAClD,gBAAgB,QAAQ,kBAAkB;AAAA,IAC1C,cAAc,QAAQ,gBAAgB;AAAA,IACtC,UAAU,QAAQ;AAAA,IAClB,gBAAgB,QAAQ,kBAAkB;AAAA,IAC1C,WAAW,QAAQ,WAAW,cAAc,KAAK;AAAA,IACjD,WAAW,QAAQ,WAAW,cAAc,KAAK;AAAA,EACnD,CAAC;AACH;AAEO,MAAM,UAAU;AAAA,EACrB,MAAM,CAAC,uBAAuB;AAAA,EAC9B,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,MAAM,CAAC,uBAAuB;AAAA,MAC9B,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,iBAAiB;AAAA,QAC7C,EAAE,QAAQ,KAAK,aAAa,qBAAqB;AAAA,QACjD,EAAE,QAAQ,KAAK,aAAa,eAAe;AAAA,QAC3C,EAAE,QAAQ,KAAK,aAAa,oBAAoB;AAAA,MAClD;AAAA,IACF;AAAA,EACF;AACF;AACA,IAAO,gBAAQ;",
   "names": []
 }

package/dist/modules/communication_channels/api/get/channels/route.js

@@ -6,6 +6,7 @@ import { findAndCountWithDecryption } from "@open-mercato/shared/lib/encryption/
 import { resolveOrganizationScopeForRequest } from "@open-mercato/core/modules/directory/utils/organizationScope";
 import { resolveOrganizationScopeFilter } from "@open-mercato/core/modules/directory/utils/organizationScopeFilter";
 import { CommunicationChannel } from "../../../data/entities.js";
+import { channelOrgScopeWhereFromFilter } from "../../../lib/access-control.js";
 const metadata = {
   path: "/communication_channels/channels",
   GET: { requireAuth: true, requireFeatures: ["communication_channels.view"] }
@@ -37,7 +38,7 @@ async function GET(req) {
   const orgFilter = resolveOrganizationScopeFilter(scope, auth);
   const where = {
     tenantId: auth.tenantId,
-    ...orgFilter.where,
+    ...channelOrgScopeWhereFromFilter(orgFilter),
     deletedAt: null,
     userId: null
   };

package/dist/modules/communication_channels/api/get/channels/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../src/modules/communication_channels/api/get/channels/route.ts"],
-  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { findAndCountWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport { resolveOrganizationScopeFilter } from '@open-mercato/core/modules/directory/utils/organizationScopeFilter'\nimport { CommunicationChannel } from '../../../data/entities'\n\nexport const metadata = {\n  path: '/communication_channels/channels',\n  GET: { requireAuth: true, requireFeatures: ['communication_channels.view'] },\n}\n\nconst listQuerySchema = z.object({\n  page: z.coerce.number().int().min(1).default(1),\n  pageSize: z.coerce.number().int().min(1).max(100).default(50),\n  providerKey: z.string().optional(),\n  channelType: z.string().optional(),\n  isActive: z\n    .union([z.literal('true'), z.literal('false')])\n    .optional()\n    .transform((value) => (value === undefined ? undefined : value === 'true')),\n})\n\nexport async function GET(req: Request): Promise<Response> {\n  const auth = await getAuthFromRequest(req)\n  if (!auth?.tenantId) {\n    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n  }\n\n  const url = new URL(req.url)\n  const parsed = listQuerySchema.safeParse(Object.fromEntries(url.searchParams.entries()))\n  if (!parsed.success) {\n    return NextResponse.json(\n      { error: 'Invalid query', details: parsed.error.flatten() },\n      { status: 400 },\n    )\n  }\n  const { page, pageSize, providerKey, channelType, isActive } = parsed.data\n\n  const container = await createRequestContainer()\n  const em = (container.resolve('em') as EntityManager).fork()\n\n  // Organization scoping follows the caller's *selected* organization (the\n  // `om_selected_org` cookie the top-bar switcher writes), not the org baked\n  // into the session token \u2014 `auth.orgId` only tracks the switcher for\n  // super-admins, so filtering on it made the list ignore every switch (#5012).\n  const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req })\n  const orgFilter = resolveOrganizationScopeFilter(scope, auth)\n\n  // Personal mailbox privacy (v1: strict owner-only). The admin Channels page\n  // lists ONLY shared / tenant-wide channels (WhatsApp Business, shared inboxes,\n  // Slack workspaces) \u2014 rows where `user_id IS NULL`. Per-user email mailboxes\n  // (`user_id` set) are private to their owner and surface exclusively on the\n  // profile page (`/api/communication_channels/me/channels`), never here, so no\n  // one \u2014 admins included \u2014 can see another user's connected personal account.\n  const where: Record<string, unknown> = {\n    tenantId: auth.tenantId,\n    ...orgFilter.where,\n    deletedAt: null,\n    userId: null,\n  }\n  if (providerKey) where.providerKey = providerKey\n  if (channelType) where.channelType = channelType\n  if (isActive !== undefined) where.isActive = isActive\n\n  const [items, total] = await findAndCountWithDecryption(\n    em,\n    CommunicationChannel,\n    where,\n    {\n      limit: pageSize,\n      offset: (page - 1) * pageSize,\n      orderBy: { createdAt: 'desc' },\n    },\n    { tenantId: auth.tenantId as string, organizationId: orgFilter.rbacOrganizationId },\n  )\n\n  return NextResponse.json({\n    items: items.map(serializeChannel),\n    total,\n    page,\n    pageSize,\n    totalPages: Math.max(1, Math.ceil(total / pageSize)),\n  })\n}\n\nfunction serializeChannel(channel: CommunicationChannel) {\n  return {\n    id: channel.id,\n    providerKey: channel.providerKey,\n    channelType: channel.channelType,\n    displayName: channel.displayName,\n    externalIdentifier: channel.externalIdentifier ?? null,\n    isActive: channel.isActive,\n    capabilities: channel.capabilities ?? null,\n    createdAt: channel.createdAt?.toISOString?.() ?? null,\n    updatedAt: channel.updatedAt?.toISOString?.() ?? null,\n  }\n}\n\nexport const openApi = {\n  tags: ['CommunicationChannels'],\n  methods: {\n    GET: {\n      summary: 'List communication channels for the current tenant',\n      tags: ['CommunicationChannels'],\n      responses: [\n        { status: 200, description: 'Channel list (paginated)' },\n        { status: 400, description: 'Invalid query parameters' },\n        { status: 401, description: 'Unauthorized' },\n      ],\n    },\n  },\n}\nexport default GET\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAClB,SAAS,0BAA0B;AACnC,SAAS,8BAA8B;AAEvC,SAAS,kCAAkC;AAC3C,SAAS,0CAA0C;AACnD,SAAS,sCAAsC;AAC/C,SAAS,4BAA4B;AAE9B,MAAM,WAAW;AAAA,EACtB,MAAM;AAAA,EACN,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,6BAA6B,EAAE;AAC7E;AAEA,MAAM,kBAAkB,EAAE,OAAO;AAAA,EAC/B,MAAM,EAAE,OAAO,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,QAAQ,CAAC;AAAA,EAC9C,UAAU,EAAE,OAAO,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,QAAQ,EAAE;AAAA,EAC5D,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA,EACjC,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA,EACjC,UAAU,EACP,MAAM,CAAC,EAAE,QAAQ,MAAM,GAAG,EAAE,QAAQ,OAAO,CAAC,CAAC,EAC7C,SAAS,EACT,UAAU,CAAC,UAAW,UAAU,SAAY,SAAY,UAAU,MAAO;AAC9E,CAAC;AAED,eAAsB,IAAI,KAAiC;AACzD,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM,UAAU;AACnB,WAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrE;AAEA,QAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAC3B,QAAM,SAAS,gBAAgB,UAAU,OAAO,YAAY,IAAI,aAAa,QAAQ,CAAC,CAAC;AACvF,MAAI,CAAC,OAAO,SAAS;AACnB,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,iBAAiB,SAAS,OAAO,MAAM,QAAQ,EAAE;AAAA,MAC1D,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACA,QAAM,EAAE,MAAM,UAAU,aAAa,aAAa,SAAS,IAAI,OAAO;AAEtE,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,KAAM,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAM3D,QAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,SAAS,IAAI,CAAC;AACxF,QAAM,YAAY,+BAA+B,OAAO,IAAI;AAQ5D,QAAM,QAAiC;AAAA,IACrC,UAAU,KAAK;AAAA,IACf,GAAG,UAAU;AAAA,IACb,WAAW;AAAA,IACX,QAAQ;AAAA,EACV;AACA,MAAI,YAAa,OAAM,cAAc;AACrC,MAAI,YAAa,OAAM,cAAc;AACrC,MAAI,aAAa,OAAW,OAAM,WAAW;AAE7C,QAAM,CAAC,OAAO,KAAK,IAAI,MAAM;AAAA,IAC3B;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,MACE,OAAO;AAAA,MACP,SAAS,OAAO,KAAK;AAAA,MACrB,SAAS,EAAE,WAAW,OAAO;AAAA,IAC/B;AAAA,IACA,EAAE,UAAU,KAAK,UAAoB,gBAAgB,UAAU,mBAAmB;AAAA,EACpF;AAEA,SAAO,aAAa,KAAK;AAAA,IACvB,OAAO,MAAM,IAAI,gBAAgB;AAAA,IACjC;AAAA,IACA;AAAA,IACA;AAAA,IACA,YAAY,KAAK,IAAI,GAAG,KAAK,KAAK,QAAQ,QAAQ,CAAC;AAAA,EACrD,CAAC;AACH;AAEA,SAAS,iBAAiB,SAA+B;AACvD,SAAO;AAAA,IACL,IAAI,QAAQ;AAAA,IACZ,aAAa,QAAQ;AAAA,IACrB,aAAa,QAAQ;AAAA,IACrB,aAAa,QAAQ;AAAA,IACrB,oBAAoB,QAAQ,sBAAsB;AAAA,IAClD,UAAU,QAAQ;AAAA,IAClB,cAAc,QAAQ,gBAAgB;AAAA,IACtC,WAAW,QAAQ,WAAW,cAAc,KAAK;AAAA,IACjD,WAAW,QAAQ,WAAW,cAAc,KAAK;AAAA,EACnD;AACF;AAEO,MAAM,UAAU;AAAA,EACrB,MAAM,CAAC,uBAAuB;AAAA,EAC9B,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,MAAM,CAAC,uBAAuB;AAAA,MAC9B,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,2BAA2B;AAAA,QACvD,EAAE,QAAQ,KAAK,aAAa,2BAA2B;AAAA,QACvD,EAAE,QAAQ,KAAK,aAAa,eAAe;AAAA,MAC7C;AAAA,IACF;AAAA,EACF;AACF;AACA,IAAO,gBAAQ;",
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { findAndCountWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport { resolveOrganizationScopeFilter } from '@open-mercato/core/modules/directory/utils/organizationScopeFilter'\nimport { CommunicationChannel } from '../../../data/entities'\nimport { channelOrgScopeWhereFromFilter } from '../../../lib/access-control'\n\nexport const metadata = {\n  path: '/communication_channels/channels',\n  GET: { requireAuth: true, requireFeatures: ['communication_channels.view'] },\n}\n\nconst listQuerySchema = z.object({\n  page: z.coerce.number().int().min(1).default(1),\n  pageSize: z.coerce.number().int().min(1).max(100).default(50),\n  providerKey: z.string().optional(),\n  channelType: z.string().optional(),\n  isActive: z\n    .union([z.literal('true'), z.literal('false')])\n    .optional()\n    .transform((value) => (value === undefined ? undefined : value === 'true')),\n})\n\nexport async function GET(req: Request): Promise<Response> {\n  const auth = await getAuthFromRequest(req)\n  if (!auth?.tenantId) {\n    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n  }\n\n  const url = new URL(req.url)\n  const parsed = listQuerySchema.safeParse(Object.fromEntries(url.searchParams.entries()))\n  if (!parsed.success) {\n    return NextResponse.json(\n      { error: 'Invalid query', details: parsed.error.flatten() },\n      { status: 400 },\n    )\n  }\n  const { page, pageSize, providerKey, channelType, isActive } = parsed.data\n\n  const container = await createRequestContainer()\n  const em = (container.resolve('em') as EntityManager).fork()\n\n  // Organization scoping follows the caller's *selected* organization (the\n  // `om_selected_org` cookie the top-bar switcher writes), not the org baked\n  // into the session token \u2014 `auth.orgId` only tracks the switcher for\n  // super-admins, so filtering on it made the list ignore every switch (#5012).\n  const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req })\n  const orgFilter = resolveOrganizationScopeFilter(scope, auth)\n\n  // Personal mailbox privacy (v1: strict owner-only). The admin Channels page\n  // lists ONLY shared / tenant-wide channels (WhatsApp Business, shared inboxes,\n  // Slack workspaces) \u2014 rows where `user_id IS NULL`. Per-user email mailboxes\n  // (`user_id` set) are private to their owner and surface exclusively on the\n  // profile page (`/api/communication_channels/me/channels`), never here, so no\n  // one \u2014 admins included \u2014 can see another user's connected personal account.\n  const where: Record<string, unknown> = {\n    tenantId: auth.tenantId,\n    ...channelOrgScopeWhereFromFilter(orgFilter),\n    deletedAt: null,\n    userId: null,\n  }\n  if (providerKey) where.providerKey = providerKey\n  if (channelType) where.channelType = channelType\n  if (isActive !== undefined) where.isActive = isActive\n\n  const [items, total] = await findAndCountWithDecryption(\n    em,\n    CommunicationChannel,\n    where,\n    {\n      limit: pageSize,\n      offset: (page - 1) * pageSize,\n      orderBy: { createdAt: 'desc' },\n    },\n    { tenantId: auth.tenantId as string, organizationId: orgFilter.rbacOrganizationId },\n  )\n\n  return NextResponse.json({\n    items: items.map(serializeChannel),\n    total,\n    page,\n    pageSize,\n    totalPages: Math.max(1, Math.ceil(total / pageSize)),\n  })\n}\n\nfunction serializeChannel(channel: CommunicationChannel) {\n  return {\n    id: channel.id,\n    providerKey: channel.providerKey,\n    channelType: channel.channelType,\n    displayName: channel.displayName,\n    externalIdentifier: channel.externalIdentifier ?? null,\n    isActive: channel.isActive,\n    capabilities: channel.capabilities ?? null,\n    createdAt: channel.createdAt?.toISOString?.() ?? null,\n    updatedAt: channel.updatedAt?.toISOString?.() ?? null,\n  }\n}\n\nexport const openApi = {\n  tags: ['CommunicationChannels'],\n  methods: {\n    GET: {\n      summary: 'List communication channels for the current tenant',\n      tags: ['CommunicationChannels'],\n      responses: [\n        { status: 200, description: 'Channel list (paginated)' },\n        { status: 400, description: 'Invalid query parameters' },\n        { status: 401, description: 'Unauthorized' },\n      ],\n    },\n  },\n}\nexport default GET\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAClB,SAAS,0BAA0B;AACnC,SAAS,8BAA8B;AAEvC,SAAS,kCAAkC;AAC3C,SAAS,0CAA0C;AACnD,SAAS,sCAAsC;AAC/C,SAAS,4BAA4B;AACrC,SAAS,sCAAsC;AAExC,MAAM,WAAW;AAAA,EACtB,MAAM;AAAA,EACN,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,6BAA6B,EAAE;AAC7E;AAEA,MAAM,kBAAkB,EAAE,OAAO;AAAA,EAC/B,MAAM,EAAE,OAAO,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,QAAQ,CAAC;AAAA,EAC9C,UAAU,EAAE,OAAO,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,QAAQ,EAAE;AAAA,EAC5D,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA,EACjC,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA,EACjC,UAAU,EACP,MAAM,CAAC,EAAE,QAAQ,MAAM,GAAG,EAAE,QAAQ,OAAO,CAAC,CAAC,EAC7C,SAAS,EACT,UAAU,CAAC,UAAW,UAAU,SAAY,SAAY,UAAU,MAAO;AAC9E,CAAC;AAED,eAAsB,IAAI,KAAiC;AACzD,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM,UAAU;AACnB,WAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrE;AAEA,QAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAC3B,QAAM,SAAS,gBAAgB,UAAU,OAAO,YAAY,IAAI,aAAa,QAAQ,CAAC,CAAC;AACvF,MAAI,CAAC,OAAO,SAAS;AACnB,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,iBAAiB,SAAS,OAAO,MAAM,QAAQ,EAAE;AAAA,MAC1D,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACA,QAAM,EAAE,MAAM,UAAU,aAAa,aAAa,SAAS,IAAI,OAAO;AAEtE,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,KAAM,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAM3D,QAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,SAAS,IAAI,CAAC;AACxF,QAAM,YAAY,+BAA+B,OAAO,IAAI;AAQ5D,QAAM,QAAiC;AAAA,IACrC,UAAU,KAAK;AAAA,IACf,GAAG,+BAA+B,SAAS;AAAA,IAC3C,WAAW;AAAA,IACX,QAAQ;AAAA,EACV;AACA,MAAI,YAAa,OAAM,cAAc;AACrC,MAAI,YAAa,OAAM,cAAc;AACrC,MAAI,aAAa,OAAW,OAAM,WAAW;AAE7C,QAAM,CAAC,OAAO,KAAK,IAAI,MAAM;AAAA,IAC3B;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,MACE,OAAO;AAAA,MACP,SAAS,OAAO,KAAK;AAAA,MACrB,SAAS,EAAE,WAAW,OAAO;AAAA,IAC/B;AAAA,IACA,EAAE,UAAU,KAAK,UAAoB,gBAAgB,UAAU,mBAAmB;AAAA,EACpF;AAEA,SAAO,aAAa,KAAK;AAAA,IACvB,OAAO,MAAM,IAAI,gBAAgB;AAAA,IACjC;AAAA,IACA;AAAA,IACA;AAAA,IACA,YAAY,KAAK,IAAI,GAAG,KAAK,KAAK,QAAQ,QAAQ,CAAC;AAAA,EACrD,CAAC;AACH;AAEA,SAAS,iBAAiB,SAA+B;AACvD,SAAO;AAAA,IACL,IAAI,QAAQ;AAAA,IACZ,aAAa,QAAQ;AAAA,IACrB,aAAa,QAAQ;AAAA,IACrB,aAAa,QAAQ;AAAA,IACrB,oBAAoB,QAAQ,sBAAsB;AAAA,IAClD,UAAU,QAAQ;AAAA,IAClB,cAAc,QAAQ,gBAAgB;AAAA,IACtC,WAAW,QAAQ,WAAW,cAAc,KAAK;AAAA,IACjD,WAAW,QAAQ,WAAW,cAAc,KAAK;AAAA,EACnD;AACF;AAEO,MAAM,UAAU;AAAA,EACrB,MAAM,CAAC,uBAAuB;AAAA,EAC9B,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,MAAM,CAAC,uBAAuB;AAAA,MAC9B,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,2BAA2B;AAAA,QACvD,EAAE,QAAQ,KAAK,aAAa,2BAA2B;AAAA,QACvD,EAAE,QAAQ,KAAK,aAAa,eAAe;AAAA,MAC7C;AAAA,IACF;AAAA,EACF;AACF;AACA,IAAO,gBAAQ;",
   "names": []
 }

package/dist/modules/communication_channels/api/post/channels/[id]/test-send/route.js

@@ -6,7 +6,11 @@ import { readJsonSafe } from "@open-mercato/shared/lib/http/readJsonSafe";
 import { findOneWithDecryption } from "@open-mercato/shared/lib/encryption/find";
 import { CommunicationChannel } from "../../../../../data/entities.js";
 import { getChannelAdapter } from "../../../../../lib/adapter-registry-singleton.js";
-import { ChannelAccessDeniedError, assertCanManageChannel } from "../../../../../lib/access-control.js";
+import {
+  ChannelAccessDeniedError,
+  assertCanManageChannel,
+  channelOrgScopeWhere
+} from "../../../../../lib/access-control.js";
 import { refreshCredentialsIfNeeded } from "../../../../../lib/credential-refresh.js";
 import { validateRouteMutationGuard } from "../../../../../lib/route-mutation-guard.js";
 const metadata = {
@@ -52,7 +56,7 @@ async function POST(req, context) {
     {
       id,
       tenantId: auth.tenantId,
-      organizationId,
+      ...channelOrgScopeWhere(organizationId),
       deletedAt: null
     },
     void 0,
@@ -61,6 +65,7 @@ async function POST(req, context) {
   if (!channel) {
     return NextResponse.json({ error: "Channel not found" }, { status: 404 });
   }
+  const channelCredentialsOrg = channel.organizationId ?? auth.tenantId;
   let userFeatures = [];
   try {
     const rbac = container.resolve("rbacService");
@@ -124,13 +129,13 @@ async function POST(req, context) {
   if (channel.credentialsRef && credentialsService) {
     credentials = await credentialsService.resolve(`channel_${channel.providerKey}`, {
       tenantId: auth.tenantId,
-      organizationId: organizationId ?? auth.tenantId,
+      organizationId: channelCredentialsOrg,
       userId: channel.userId ?? null
     }).catch(() => null) ?? {};
   }
   const credentialScope = {
     tenantId: auth.tenantId,
-    organizationId: organizationId ?? auth.tenantId,
+    organizationId: channelCredentialsOrg,
     userId: channel.userId ?? null
   };
   const refreshed = await refreshCredentialsIfNeeded(
@@ -153,7 +158,7 @@ async function POST(req, context) {
       credentials,
       scope: {
         tenantId: auth.tenantId,
-        organizationId: organizationId ?? auth.tenantId
+        organizationId: channelCredentialsOrg
       },
       metadata: { to: body.to, subject: body.subject ?? "Test send", testSend: true }
     });

package/dist/modules/communication_channels/api/post/channels/[id]/test-send/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../../../src/modules/communication_channels/api/post/channels/%5Bid%5D/test-send/route.ts"],
-  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { readJsonSafe } from '@open-mercato/shared/lib/http/readJsonSafe'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { CommunicationChannel } from '../../../../../data/entities'\nimport { getChannelAdapter } from '../../../../../lib/adapter-registry-singleton'\nimport { ChannelAccessDeniedError, assertCanManageChannel } from '../../../../../lib/access-control'\nimport { refreshCredentialsIfNeeded } from '../../../../../lib/credential-refresh'\nimport { validateRouteMutationGuard } from '../../../../../lib/route-mutation-guard'\n\ntype RbacServiceLike = {\n  loadAcl: (\n    userId: string,\n    scope: { tenantId: string | null; organizationId: string | null },\n  ) => Promise<{ isSuperAdmin: boolean; features: string[]; organizations: string[] | null }>\n}\n\nexport const metadata = {\n  path: '/communication_channels/channels/[id]/test-send',\n  POST: {\n    // Owner self-service: a user may send a test from their OWN mailbox (gated\n    // by `connect_user_channel`). Test-sending from a shared/tenant-wide channel\n    // still requires `manage` \u2014 enforced per channel type by `assertCanManageChannel`.\n    requireAuth: true,\n    requireFeatures: ['communication_channels.connect_user_channel'],\n  },\n}\n\nconst bodySchema = z.object({\n  to: z.string().email(),\n  subject: z.string().min(1).max(500).optional(),\n  body: z.string().max(50_000).optional(),\n})\n\ntype RouteContext = {\n  params: Promise<{ id: string }> | { id: string }\n}\n\ntype CredentialsServiceLike = {\n  resolve: (\n    integrationId: string,\n    scope: { organizationId: string; tenantId: string; userId?: string | null },\n  ) => Promise<Record<string, unknown> | null>\n  save?: (\n    integrationId: string,\n    credentials: Record<string, unknown>,\n    scope: { organizationId: string; tenantId: string; userId?: string | null },\n  ) => Promise<void>\n}\n\n/**\n * Admin diagnostic \u2014 send a test message via the adapter without creating a\n * platform `Message`. Useful for verifying credentials + outbound connectivity\n * after a channel is configured.\n *\n * The result is NOT persisted to `ExternalMessage` / `MessageChannelLink` \u2014 it\n * is a one-shot probe.\n */\nexport async function POST(req: Request, context: RouteContext): Promise<Response> {\n  const { id } = await context.params\n  if (!z.string().uuid().safeParse(id).success) {\n    return NextResponse.json({ error: 'Invalid channel id' }, { status: 400 })\n  }\n\n  const auth = await getAuthFromRequest(req)\n  if (!auth?.sub || !auth?.tenantId) {\n    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n  }\n\n  let body: z.infer<typeof bodySchema>\n  try {\n    body = bodySchema.parse(await readJsonSafe(req, null))\n  } catch (err) {\n    return NextResponse.json(\n      { error: err instanceof Error ? err.message : 'Invalid request body' },\n      { status: 422 },\n    )\n  }\n\n  const container = await createRequestContainer()\n  const em = (container.resolve('em') as EntityManager).fork()\n  const organizationId = (auth as { orgId?: string | null }).orgId ?? null\n  const dscope = { tenantId: auth.tenantId as string, organizationId }\n  const channel = await findOneWithDecryption(\n    em,\n    CommunicationChannel,\n    {\n      id,\n      tenantId: auth.tenantId as string,\n      organizationId,\n      deletedAt: null,\n    },\n    undefined,\n    dscope,\n  )\n  if (!channel) {\n    return NextResponse.json({ error: 'Channel not found' }, { status: 404 })\n  }\n  // Load features via RBAC service so admin bypass (`communication_channels.admin`,\n  // wildcards, super-admin) is honoured. The `auth` object from\n  // `getAuthFromRequest` carries identity only \u2014 feature ACLs live in the RBAC\n  // service and must be loaded per request.\n  let userFeatures: string[] = []\n  try {\n    const rbac = container.resolve('rbacService') as RbacServiceLike\n    const acl = await rbac.loadAcl(auth.sub as string, {\n      tenantId: auth.tenantId as string,\n      organizationId,\n    })\n    userFeatures = acl?.isSuperAdmin ? ['*'] : Array.isArray(acl?.features) ? acl.features : []\n  } catch {\n    userFeatures = []\n  }\n  try {\n    assertCanManageChannel(\n      { userId: channel.userId },\n      auth.sub as string,\n      userFeatures,\n      'communication_channels.manage',\n    )\n  } catch (err) {\n    if (err instanceof ChannelAccessDeniedError) {\n      return NextResponse.json({ error: 'Channel not found' }, { status: 404 })\n    }\n    const status = (err as { statusCode?: number }).statusCode ?? 403\n    return NextResponse.json(\n      { error: err instanceof Error ? err.message : 'Access denied' },\n      { status },\n    )\n  }\n  if (!channel.isActive || channel.status !== 'connected') {\n    return NextResponse.json(\n      { error: `Channel is in status '${channel.status}' (not connected)` },\n      { status: 409 },\n    )\n  }\n\n  const guard = await validateRouteMutationGuard({\n    container,\n    req,\n    auth,\n    input: {\n      resourceKind: 'communication_channels.channel',\n      resourceId: channel.id,\n      operation: 'custom',\n      mutationPayload: body as unknown as Record<string, unknown>,\n    },\n  })\n  if ('response' in guard) return guard.response\n\n  const adapter = getChannelAdapter(channel.providerKey)\n  if (!adapter) {\n    return NextResponse.json(\n      { error: `No adapter registered for provider '${channel.providerKey}'` },\n      { status: 404 },\n    )\n  }\n\n  // Resolve credentials + optionally refresh.\n  let credentials: Record<string, unknown> = {}\n  let credentialsService: CredentialsServiceLike | null = null\n  try {\n    credentialsService = container.resolve('integrationCredentialsService') as CredentialsServiceLike\n  } catch {\n    credentialsService = null\n  }\n  if (channel.credentialsRef && credentialsService) {\n    credentials =\n      (await credentialsService\n        .resolve(`channel_${channel.providerKey}`, {\n          tenantId: auth.tenantId as string,\n          organizationId: organizationId ?? (auth.tenantId as string),\n          userId: channel.userId ?? null,\n        })\n        .catch(() => null)) ?? {}\n  }\n  const credentialScope = {\n    tenantId: auth.tenantId as string,\n    organizationId: organizationId ?? (auth.tenantId as string),\n    userId: channel.userId ?? null,\n  }\n  const refreshed = await refreshCredentialsIfNeeded(\n    {\n      adapter,\n      channelId: channel.id,\n      credentials,\n      scope: credentialScope,\n    },\n    { credentialsService },\n  )\n  credentials = refreshed.credentials\n\n  try {\n    const converted = await adapter.convertOutbound({\n      body: body.body ?? 'Test message from Open Mercato',\n      bodyFormat: 'text',\n    })\n    const result = await adapter.sendMessage({\n      content: converted.content,\n      credentials,\n      scope: {\n        tenantId: auth.tenantId as string,\n        organizationId: organizationId ?? (auth.tenantId as string),\n      },\n      metadata: { to: body.to, subject: body.subject ?? 'Test send', testSend: true },\n    })\n    await guard.afterSuccess()\n    return NextResponse.json({\n      status: result.status,\n      externalMessageId: result.externalMessageId,\n      providerError: result.error ?? null,\n    })\n  } catch (err) {\n    const message = err instanceof Error ? err.message : 'send failed'\n    return NextResponse.json({ status: 'failed', error: message }, { status: 502 })\n  }\n}\n\nexport const openApi = {\n  tags: ['CommunicationChannels'],\n  methods: {\n    POST: {\n      summary: 'Diagnostic \u2014 send a test message through the channel without persisting',\n      tags: ['CommunicationChannels'],\n      responses: [\n        { status: 200, description: 'Test send result' },\n        { status: 400, description: 'Invalid channel id' },\n        { status: 401, description: 'Unauthorized' },\n        { status: 403, description: 'Not allowed to manage this channel' },\n        { status: 404, description: 'Channel or adapter not found' },\n        { status: 409, description: 'Channel not connected' },\n        { status: 422, description: 'Invalid request body' },\n        { status: 502, description: 'Provider error' },\n      ],\n    },\n  },\n}\nexport default POST\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAClB,SAAS,0BAA0B;AACnC,SAAS,8BAA8B;AACvC,SAAS,oBAAoB;AAE7B,SAAS,6BAA6B;AACtC,SAAS,4BAA4B;AACrC,SAAS,yBAAyB;AAClC,SAAS,0BAA0B,8BAA8B;AACjE,SAAS,kCAAkC;AAC3C,SAAS,kCAAkC;AASpC,MAAM,WAAW;AAAA,EACtB,MAAM;AAAA,EACN,MAAM;AAAA;AAAA;AAAA;AAAA,IAIJ,aAAa;AAAA,IACb,iBAAiB,CAAC,6CAA6C;AAAA,EACjE;AACF;AAEA,MAAM,aAAa,EAAE,OAAO;AAAA,EAC1B,IAAI,EAAE,OAAO,EAAE,MAAM;AAAA,EACrB,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EAC7C,MAAM,EAAE,OAAO,EAAE,IAAI,GAAM,EAAE,SAAS;AACxC,CAAC;AA0BD,eAAsB,KAAK,KAAc,SAA0C;AACjF,QAAM,EAAE,GAAG,IAAI,MAAM,QAAQ;AAC7B,MAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,SAAS;AAC5C,WAAO,aAAa,KAAK,EAAE,OAAO,qBAAqB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC3E;AAEA,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM,OAAO,CAAC,MAAM,UAAU;AACjC,WAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrE;AAEA,MAAI;AACJ,MAAI;AACF,WAAO,WAAW,MAAM,MAAM,aAAa,KAAK,IAAI,CAAC;AAAA,EACvD,SAAS,KAAK;AACZ,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,eAAe,QAAQ,IAAI,UAAU,uBAAuB;AAAA,MACrE,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,KAAM,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC3D,QAAM,iBAAkB,KAAmC,SAAS;AACpE,QAAM,SAAS,EAAE,UAAU,KAAK,UAAoB,eAAe;AACnE,QAAM,UAAU,MAAM;AAAA,IACpB;AAAA,IACA;AAAA,IACA;AAAA,MACE;AAAA,MACA,UAAU,KAAK;AAAA,MACf;AAAA,MACA,WAAW;AAAA,IACb;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACA,MAAI,CAAC,SAAS;AACZ,WAAO,aAAa,KAAK,EAAE,OAAO,oBAAoB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC1E;AAKA,MAAI,eAAyB,CAAC;AAC9B,MAAI;AACF,UAAM,OAAO,UAAU,QAAQ,aAAa;AAC5C,UAAM,MAAM,MAAM,KAAK,QAAQ,KAAK,KAAe;AAAA,MACjD,UAAU,KAAK;AAAA,MACf;AAAA,IACF,CAAC;AACD,mBAAe,KAAK,eAAe,CAAC,GAAG,IAAI,MAAM,QAAQ,KAAK,QAAQ,IAAI,IAAI,WAAW,CAAC;AAAA,EAC5F,QAAQ;AACN,mBAAe,CAAC;AAAA,EAClB;AACA,MAAI;AACF;AAAA,MACE,EAAE,QAAQ,QAAQ,OAAO;AAAA,MACzB,KAAK;AAAA,MACL;AAAA,MACA;AAAA,IACF;AAAA,EACF,SAAS,KAAK;AACZ,QAAI,eAAe,0BAA0B;AAC3C,aAAO,aAAa,KAAK,EAAE,OAAO,oBAAoB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC1E;AACA,UAAM,SAAU,IAAgC,cAAc;AAC9D,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,eAAe,QAAQ,IAAI,UAAU,gBAAgB;AAAA,MAC9D,EAAE,OAAO;AAAA,IACX;AAAA,EACF;AACA,MAAI,CAAC,QAAQ,YAAY,QAAQ,WAAW,aAAa;AACvD,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,yBAAyB,QAAQ,MAAM,oBAAoB;AAAA,MACpE,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AAEA,QAAM,QAAQ,MAAM,2BAA2B;AAAA,IAC7C;AAAA,IACA;AAAA,IACA;AAAA,IACA,OAAO;AAAA,MACL,cAAc;AAAA,MACd,YAAY,QAAQ;AAAA,MACpB,WAAW;AAAA,MACX,iBAAiB;AAAA,IACnB;AAAA,EACF,CAAC;AACD,MAAI,cAAc,MAAO,QAAO,MAAM;AAEtC,QAAM,UAAU,kBAAkB,QAAQ,WAAW;AACrD,MAAI,CAAC,SAAS;AACZ,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,uCAAuC,QAAQ,WAAW,IAAI;AAAA,MACvE,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AAGA,MAAI,cAAuC,CAAC;AAC5C,MAAI,qBAAoD;AACxD,MAAI;AACF,yBAAqB,UAAU,QAAQ,+BAA+B;AAAA,EACxE,QAAQ;AACN,yBAAqB;AAAA,EACvB;AACA,MAAI,QAAQ,kBAAkB,oBAAoB;AAChD,kBACG,MAAM,mBACJ,QAAQ,WAAW,QAAQ,WAAW,IAAI;AAAA,MACzC,UAAU,KAAK;AAAA,MACf,gBAAgB,kBAAmB,KAAK;AAAA,MACxC,QAAQ,QAAQ,UAAU;AAAA,IAC5B,CAAC,EACA,MAAM,MAAM,IAAI,KAAM,CAAC;AAAA,EAC9B;AACA,QAAM,kBAAkB;AAAA,IACtB,UAAU,KAAK;AAAA,IACf,gBAAgB,kBAAmB,KAAK;AAAA,IACxC,QAAQ,QAAQ,UAAU;AAAA,EAC5B;AACA,QAAM,YAAY,MAAM;AAAA,IACtB;AAAA,MACE;AAAA,MACA,WAAW,QAAQ;AAAA,MACnB;AAAA,MACA,OAAO;AAAA,IACT;AAAA,IACA,EAAE,mBAAmB;AAAA,EACvB;AACA,gBAAc,UAAU;AAExB,MAAI;AACF,UAAM,YAAY,MAAM,QAAQ,gBAAgB;AAAA,MAC9C,MAAM,KAAK,QAAQ;AAAA,MACnB,YAAY;AAAA,IACd,CAAC;AACD,UAAM,SAAS,MAAM,QAAQ,YAAY;AAAA,MACvC,SAAS,UAAU;AAAA,MACnB;AAAA,MACA,OAAO;AAAA,QACL,UAAU,KAAK;AAAA,QACf,gBAAgB,kBAAmB,KAAK;AAAA,MAC1C;AAAA,MACA,UAAU,EAAE,IAAI,KAAK,IAAI,SAAS,KAAK,WAAW,aAAa,UAAU,KAAK;AAAA,IAChF,CAAC;AACD,UAAM,MAAM,aAAa;AACzB,WAAO,aAAa,KAAK;AAAA,MACvB,QAAQ,OAAO;AAAA,MACf,mBAAmB,OAAO;AAAA,MAC1B,eAAe,OAAO,SAAS;AAAA,IACjC,CAAC;AAAA,EACH,SAAS,KAAK;AACZ,UAAM,UAAU,eAAe,QAAQ,IAAI,UAAU;AACrD,WAAO,aAAa,KAAK,EAAE,QAAQ,UAAU,OAAO,QAAQ,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAChF;AACF;AAEO,MAAM,UAAU;AAAA,EACrB,MAAM,CAAC,uBAAuB;AAAA,EAC9B,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,MAAM,CAAC,uBAAuB;AAAA,MAC9B,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,mBAAmB;AAAA,QAC/C,EAAE,QAAQ,KAAK,aAAa,qBAAqB;AAAA,QACjD,EAAE,QAAQ,KAAK,aAAa,eAAe;AAAA,QAC3C,EAAE,QAAQ,KAAK,aAAa,qCAAqC;AAAA,QACjE,EAAE,QAAQ,KAAK,aAAa,+BAA+B;AAAA,QAC3D,EAAE,QAAQ,KAAK,aAAa,wBAAwB;AAAA,QACpD,EAAE,QAAQ,KAAK,aAAa,uBAAuB;AAAA,QACnD,EAAE,QAAQ,KAAK,aAAa,iBAAiB;AAAA,MAC/C;AAAA,IACF;AAAA,EACF;AACF;AACA,IAAO,gBAAQ;",
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { readJsonSafe } from '@open-mercato/shared/lib/http/readJsonSafe'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { CommunicationChannel } from '../../../../../data/entities'\nimport { getChannelAdapter } from '../../../../../lib/adapter-registry-singleton'\nimport {\n  ChannelAccessDeniedError,\n  assertCanManageChannel,\n  channelOrgScopeWhere,\n} from '../../../../../lib/access-control'\nimport { refreshCredentialsIfNeeded } from '../../../../../lib/credential-refresh'\nimport { validateRouteMutationGuard } from '../../../../../lib/route-mutation-guard'\n\ntype RbacServiceLike = {\n  loadAcl: (\n    userId: string,\n    scope: { tenantId: string | null; organizationId: string | null },\n  ) => Promise<{ isSuperAdmin: boolean; features: string[]; organizations: string[] | null }>\n}\n\nexport const metadata = {\n  path: '/communication_channels/channels/[id]/test-send',\n  POST: {\n    // Owner self-service: a user may send a test from their OWN mailbox (gated\n    // by `connect_user_channel`). Test-sending from a shared/tenant-wide channel\n    // still requires `manage` \u2014 enforced per channel type by `assertCanManageChannel`.\n    requireAuth: true,\n    requireFeatures: ['communication_channels.connect_user_channel'],\n  },\n}\n\nconst bodySchema = z.object({\n  to: z.string().email(),\n  subject: z.string().min(1).max(500).optional(),\n  body: z.string().max(50_000).optional(),\n})\n\ntype RouteContext = {\n  params: Promise<{ id: string }> | { id: string }\n}\n\ntype CredentialsServiceLike = {\n  resolve: (\n    integrationId: string,\n    scope: { organizationId: string; tenantId: string; userId?: string | null },\n  ) => Promise<Record<string, unknown> | null>\n  save?: (\n    integrationId: string,\n    credentials: Record<string, unknown>,\n    scope: { organizationId: string; tenantId: string; userId?: string | null },\n  ) => Promise<void>\n}\n\n/**\n * Admin diagnostic \u2014 send a test message via the adapter without creating a\n * platform `Message`. Useful for verifying credentials + outbound connectivity\n * after a channel is configured.\n *\n * The result is NOT persisted to `ExternalMessage` / `MessageChannelLink` \u2014 it\n * is a one-shot probe.\n */\nexport async function POST(req: Request, context: RouteContext): Promise<Response> {\n  const { id } = await context.params\n  if (!z.string().uuid().safeParse(id).success) {\n    return NextResponse.json({ error: 'Invalid channel id' }, { status: 400 })\n  }\n\n  const auth = await getAuthFromRequest(req)\n  if (!auth?.sub || !auth?.tenantId) {\n    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n  }\n\n  let body: z.infer<typeof bodySchema>\n  try {\n    body = bodySchema.parse(await readJsonSafe(req, null))\n  } catch (err) {\n    return NextResponse.json(\n      { error: err instanceof Error ? err.message : 'Invalid request body' },\n      { status: 422 },\n    )\n  }\n\n  const container = await createRequestContainer()\n  const em = (container.resolve('em') as EntityManager).fork()\n  const organizationId = (auth as { orgId?: string | null }).orgId ?? null\n  const dscope = { tenantId: auth.tenantId as string, organizationId }\n  const channel = await findOneWithDecryption(\n    em,\n    CommunicationChannel,\n    {\n      id,\n      tenantId: auth.tenantId as string,\n      ...channelOrgScopeWhere(organizationId),\n      deletedAt: null,\n    },\n    undefined,\n    dscope,\n  )\n  if (!channel) {\n    return NextResponse.json({ error: 'Channel not found' }, { status: 404 })\n  }\n  // Resolve credentials at the channel's OWN org, not the caller's selected org.\n  // Tenant-wide channels store `organization_id = NULL` and their credentials\n  // live at `organization_id = tenantId` (see connect-credential-channel.ts), so\n  // the read key must be `channel.organizationId ?? tenantId` \u2014 keying on the\n  // session org would resolve `{}` for a tenant-wide channel viewed from a\n  // non-null org.\n  const channelCredentialsOrg = channel.organizationId ?? (auth.tenantId as string)\n  // Load features via RBAC service so admin bypass (`communication_channels.admin`,\n  // wildcards, super-admin) is honoured. The `auth` object from\n  // `getAuthFromRequest` carries identity only \u2014 feature ACLs live in the RBAC\n  // service and must be loaded per request.\n  let userFeatures: string[] = []\n  try {\n    const rbac = container.resolve('rbacService') as RbacServiceLike\n    const acl = await rbac.loadAcl(auth.sub as string, {\n      tenantId: auth.tenantId as string,\n      organizationId,\n    })\n    userFeatures = acl?.isSuperAdmin ? ['*'] : Array.isArray(acl?.features) ? acl.features : []\n  } catch {\n    userFeatures = []\n  }\n  try {\n    assertCanManageChannel(\n      { userId: channel.userId },\n      auth.sub as string,\n      userFeatures,\n      'communication_channels.manage',\n    )\n  } catch (err) {\n    if (err instanceof ChannelAccessDeniedError) {\n      return NextResponse.json({ error: 'Channel not found' }, { status: 404 })\n    }\n    const status = (err as { statusCode?: number }).statusCode ?? 403\n    return NextResponse.json(\n      { error: err instanceof Error ? err.message : 'Access denied' },\n      { status },\n    )\n  }\n  if (!channel.isActive || channel.status !== 'connected') {\n    return NextResponse.json(\n      { error: `Channel is in status '${channel.status}' (not connected)` },\n      { status: 409 },\n    )\n  }\n\n  const guard = await validateRouteMutationGuard({\n    container,\n    req,\n    auth,\n    input: {\n      resourceKind: 'communication_channels.channel',\n      resourceId: channel.id,\n      operation: 'custom',\n      mutationPayload: body as unknown as Record<string, unknown>,\n    },\n  })\n  if ('response' in guard) return guard.response\n\n  const adapter = getChannelAdapter(channel.providerKey)\n  if (!adapter) {\n    return NextResponse.json(\n      { error: `No adapter registered for provider '${channel.providerKey}'` },\n      { status: 404 },\n    )\n  }\n\n  // Resolve credentials + optionally refresh.\n  let credentials: Record<string, unknown> = {}\n  let credentialsService: CredentialsServiceLike | null = null\n  try {\n    credentialsService = container.resolve('integrationCredentialsService') as CredentialsServiceLike\n  } catch {\n    credentialsService = null\n  }\n  if (channel.credentialsRef && credentialsService) {\n    credentials =\n      (await credentialsService\n        .resolve(`channel_${channel.providerKey}`, {\n          tenantId: auth.tenantId as string,\n          organizationId: channelCredentialsOrg,\n          userId: channel.userId ?? null,\n        })\n        .catch(() => null)) ?? {}\n  }\n  const credentialScope = {\n    tenantId: auth.tenantId as string,\n    organizationId: channelCredentialsOrg,\n    userId: channel.userId ?? null,\n  }\n  const refreshed = await refreshCredentialsIfNeeded(\n    {\n      adapter,\n      channelId: channel.id,\n      credentials,\n      scope: credentialScope,\n    },\n    { credentialsService },\n  )\n  credentials = refreshed.credentials\n\n  try {\n    const converted = await adapter.convertOutbound({\n      body: body.body ?? 'Test message from Open Mercato',\n      bodyFormat: 'text',\n    })\n    const result = await adapter.sendMessage({\n      content: converted.content,\n      credentials,\n      scope: {\n        tenantId: auth.tenantId as string,\n        organizationId: channelCredentialsOrg,\n      },\n      metadata: { to: body.to, subject: body.subject ?? 'Test send', testSend: true },\n    })\n    await guard.afterSuccess()\n    return NextResponse.json({\n      status: result.status,\n      externalMessageId: result.externalMessageId,\n      providerError: result.error ?? null,\n    })\n  } catch (err) {\n    const message = err instanceof Error ? err.message : 'send failed'\n    return NextResponse.json({ status: 'failed', error: message }, { status: 502 })\n  }\n}\n\nexport const openApi = {\n  tags: ['CommunicationChannels'],\n  methods: {\n    POST: {\n      summary: 'Diagnostic \u2014 send a test message through the channel without persisting',\n      tags: ['CommunicationChannels'],\n      responses: [\n        { status: 200, description: 'Test send result' },\n        { status: 400, description: 'Invalid channel id' },\n        { status: 401, description: 'Unauthorized' },\n        { status: 403, description: 'Not allowed to manage this channel' },\n        { status: 404, description: 'Channel or adapter not found' },\n        { status: 409, description: 'Channel not connected' },\n        { status: 422, description: 'Invalid request body' },\n        { status: 502, description: 'Provider error' },\n      ],\n    },\n  },\n}\nexport default POST\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAClB,SAAS,0BAA0B;AACnC,SAAS,8BAA8B;AACvC,SAAS,oBAAoB;AAE7B,SAAS,6BAA6B;AACtC,SAAS,4BAA4B;AACrC,SAAS,yBAAyB;AAClC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,kCAAkC;AAC3C,SAAS,kCAAkC;AASpC,MAAM,WAAW;AAAA,EACtB,MAAM;AAAA,EACN,MAAM;AAAA;AAAA;AAAA;AAAA,IAIJ,aAAa;AAAA,IACb,iBAAiB,CAAC,6CAA6C;AAAA,EACjE;AACF;AAEA,MAAM,aAAa,EAAE,OAAO;AAAA,EAC1B,IAAI,EAAE,OAAO,EAAE,MAAM;AAAA,EACrB,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EAC7C,MAAM,EAAE,OAAO,EAAE,IAAI,GAAM,EAAE,SAAS;AACxC,CAAC;AA0BD,eAAsB,KAAK,KAAc,SAA0C;AACjF,QAAM,EAAE,GAAG,IAAI,MAAM,QAAQ;AAC7B,MAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,SAAS;AAC5C,WAAO,aAAa,KAAK,EAAE,OAAO,qBAAqB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC3E;AAEA,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM,OAAO,CAAC,MAAM,UAAU;AACjC,WAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrE;AAEA,MAAI;AACJ,MAAI;AACF,WAAO,WAAW,MAAM,MAAM,aAAa,KAAK,IAAI,CAAC;AAAA,EACvD,SAAS,KAAK;AACZ,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,eAAe,QAAQ,IAAI,UAAU,uBAAuB;AAAA,MACrE,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,KAAM,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC3D,QAAM,iBAAkB,KAAmC,SAAS;AACpE,QAAM,SAAS,EAAE,UAAU,KAAK,UAAoB,eAAe;AACnE,QAAM,UAAU,MAAM;AAAA,IACpB;AAAA,IACA;AAAA,IACA;AAAA,MACE;AAAA,MACA,UAAU,KAAK;AAAA,MACf,GAAG,qBAAqB,cAAc;AAAA,MACtC,WAAW;AAAA,IACb;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACA,MAAI,CAAC,SAAS;AACZ,WAAO,aAAa,KAAK,EAAE,OAAO,oBAAoB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC1E;AAOA,QAAM,wBAAwB,QAAQ,kBAAmB,KAAK;AAK9D,MAAI,eAAyB,CAAC;AAC9B,MAAI;AACF,UAAM,OAAO,UAAU,QAAQ,aAAa;AAC5C,UAAM,MAAM,MAAM,KAAK,QAAQ,KAAK,KAAe;AAAA,MACjD,UAAU,KAAK;AAAA,MACf;AAAA,IACF,CAAC;AACD,mBAAe,KAAK,eAAe,CAAC,GAAG,IAAI,MAAM,QAAQ,KAAK,QAAQ,IAAI,IAAI,WAAW,CAAC;AAAA,EAC5F,QAAQ;AACN,mBAAe,CAAC;AAAA,EAClB;AACA,MAAI;AACF;AAAA,MACE,EAAE,QAAQ,QAAQ,OAAO;AAAA,MACzB,KAAK;AAAA,MACL;AAAA,MACA;AAAA,IACF;AAAA,EACF,SAAS,KAAK;AACZ,QAAI,eAAe,0BAA0B;AAC3C,aAAO,aAAa,KAAK,EAAE,OAAO,oBAAoB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC1E;AACA,UAAM,SAAU,IAAgC,cAAc;AAC9D,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,eAAe,QAAQ,IAAI,UAAU,gBAAgB;AAAA,MAC9D,EAAE,OAAO;AAAA,IACX;AAAA,EACF;AACA,MAAI,CAAC,QAAQ,YAAY,QAAQ,WAAW,aAAa;AACvD,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,yBAAyB,QAAQ,MAAM,oBAAoB;AAAA,MACpE,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AAEA,QAAM,QAAQ,MAAM,2BAA2B;AAAA,IAC7C;AAAA,IACA;AAAA,IACA;AAAA,IACA,OAAO;AAAA,MACL,cAAc;AAAA,MACd,YAAY,QAAQ;AAAA,MACpB,WAAW;AAAA,MACX,iBAAiB;AAAA,IACnB;AAAA,EACF,CAAC;AACD,MAAI,cAAc,MAAO,QAAO,MAAM;AAEtC,QAAM,UAAU,kBAAkB,QAAQ,WAAW;AACrD,MAAI,CAAC,SAAS;AACZ,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,uCAAuC,QAAQ,WAAW,IAAI;AAAA,MACvE,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AAGA,MAAI,cAAuC,CAAC;AAC5C,MAAI,qBAAoD;AACxD,MAAI;AACF,yBAAqB,UAAU,QAAQ,+BAA+B;AAAA,EACxE,QAAQ;AACN,yBAAqB;AAAA,EACvB;AACA,MAAI,QAAQ,kBAAkB,oBAAoB;AAChD,kBACG,MAAM,mBACJ,QAAQ,WAAW,QAAQ,WAAW,IAAI;AAAA,MACzC,UAAU,KAAK;AAAA,MACf,gBAAgB;AAAA,MAChB,QAAQ,QAAQ,UAAU;AAAA,IAC5B,CAAC,EACA,MAAM,MAAM,IAAI,KAAM,CAAC;AAAA,EAC9B;AACA,QAAM,kBAAkB;AAAA,IACtB,UAAU,KAAK;AAAA,IACf,gBAAgB;AAAA,IAChB,QAAQ,QAAQ,UAAU;AAAA,EAC5B;AACA,QAAM,YAAY,MAAM;AAAA,IACtB;AAAA,MACE;AAAA,MACA,WAAW,QAAQ;AAAA,MACnB;AAAA,MACA,OAAO;AAAA,IACT;AAAA,IACA,EAAE,mBAAmB;AAAA,EACvB;AACA,gBAAc,UAAU;AAExB,MAAI;AACF,UAAM,YAAY,MAAM,QAAQ,gBAAgB;AAAA,MAC9C,MAAM,KAAK,QAAQ;AAAA,MACnB,YAAY;AAAA,IACd,CAAC;AACD,UAAM,SAAS,MAAM,QAAQ,YAAY;AAAA,MACvC,SAAS,UAAU;AAAA,MACnB;AAAA,MACA,OAAO;AAAA,QACL,UAAU,KAAK;AAAA,QACf,gBAAgB;AAAA,MAClB;AAAA,MACA,UAAU,EAAE,IAAI,KAAK,IAAI,SAAS,KAAK,WAAW,aAAa,UAAU,KAAK;AAAA,IAChF,CAAC;AACD,UAAM,MAAM,aAAa;AACzB,WAAO,aAAa,KAAK;AAAA,MACvB,QAAQ,OAAO;AAAA,MACf,mBAAmB,OAAO;AAAA,MAC1B,eAAe,OAAO,SAAS;AAAA,IACjC,CAAC;AAAA,EACH,SAAS,KAAK;AACZ,UAAM,UAAU,eAAe,QAAQ,IAAI,UAAU;AACrD,WAAO,aAAa,KAAK,EAAE,QAAQ,UAAU,OAAO,QAAQ,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAChF;AACF;AAEO,MAAM,UAAU;AAAA,EACrB,MAAM,CAAC,uBAAuB;AAAA,EAC9B,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,MAAM,CAAC,uBAAuB;AAAA,MAC9B,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,mBAAmB;AAAA,QAC/C,EAAE,QAAQ,KAAK,aAAa,qBAAqB;AAAA,QACjD,EAAE,QAAQ,KAAK,aAAa,eAAe;AAAA,QAC3C,EAAE,QAAQ,KAAK,aAAa,qCAAqC;AAAA,QACjE,EAAE,QAAQ,KAAK,aAAa,+BAA+B;AAAA,QAC3D,EAAE,QAAQ,KAAK,aAAa,wBAAwB;AAAA,QACpD,EAAE,QAAQ,KAAK,aAAa,uBAAuB;AAAA,QACnD,EAAE,QAAQ,KAAK,aAAa,iBAAiB;AAAA,MAC/C;AAAA,IACF;AAAA,EACF;AACF;AACA,IAAO,gBAAQ;",
   "names": []
 }

package/dist/modules/communication_channels/api/post/channels/connect/credentials/route.js

@@ -36,6 +36,17 @@ async function POST(req) {
     );
   }
   const container = await createRequestContainer();
+  const adapterRegistry = container.resolve("channelAdapterRegistry");
+  const earlyAdapter = adapterRegistry.get(body.providerKey);
+  if (earlyAdapter && earlyAdapter.channelScope === "tenant") {
+    return NextResponse.json(
+      {
+        error: "This provider is connected tenant-wide by an administrator, not per-user.",
+        code: "provider_is_tenant_scoped"
+      },
+      { status: 403 }
+    );
+  }
   const guard = await validateRouteMutationGuard({
     container,
     req,
@@ -77,8 +88,24 @@ async function POST(req) {
   if (result.status === "no_adapter") {
     return NextResponse.json({ error: result.reason }, { status: 404 });
   }
+  if (result.status === "wrong_scope_for_route") {
+    return NextResponse.json(
+      {
+        error: "This provider is connected tenant-wide by an administrator, not per-user.",
+        code: "provider_is_tenant_scoped"
+      },
+      { status: 403 }
+    );
+  }
   if (result.status === "validation_failed") {
-    return NextResponse.json({ error: "Credential validation failed", fieldErrors: result.errors }, { status: 422 });
+    return NextResponse.json(
+      {
+        error: "Credential validation failed",
+        fieldErrors: result.errors,
+        ...result.errorCodes ? { fieldErrorCodes: result.errorCodes } : {}
+      },
+      { status: 422 }
+    );
   }
   if (result.status === "duplicate_mailbox") {
     return NextResponse.json(
@@ -107,6 +134,7 @@ const openApi = {
       responses: [
         { status: 201, description: "Channel connected" },
         { status: 401, description: "Unauthorized" },
+        { status: 403, description: "Provider is tenant-scoped \u2014 use the tenant connect route" },
         { status: 404, description: "Unknown provider" },
         { status: 409, description: "Mailbox already connected via another provider" },
         { status: 422, description: "Invalid body or credential validation failed" }

package/dist/modules/communication_channels/api/post/channels/connect/credentials/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../../../src/modules/communication_channels/api/post/channels/connect/credentials/route.ts"],
-  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport type { CommandBus } from '@open-mercato/shared/lib/commands'\nimport { readJsonSafe } from '@open-mercato/shared/lib/http/readJsonSafe'\nimport {\n  COMMUNICATION_CHANNELS_CONNECT_CREDENTIAL_CHANNEL_COMMAND_ID,\n  type ConnectCredentialChannelInput,\n  type ConnectCredentialChannelResult,\n} from '../../../../../commands/connect-credential-channel'\nimport { validateRouteMutationGuard } from '../../../../../lib/route-mutation-guard'\n\nexport const metadata = {\n  path: '/communication_channels/channels/connect/credentials',\n  POST: {\n    requireAuth: true,\n    requireFeatures: ['communication_channels.connect_user_channel'],\n  },\n}\n\nconst bodySchema = z.object({\n  providerKey: z.string().min(1).max(64),\n  displayName: z.string().min(1).max(255),\n  credentials: z.record(z.string(), z.unknown()),\n  pollIntervalSeconds: z.number().int().positive().max(86_400).optional(),\n})\n\nexport async function POST(req: Request): Promise<Response> {\n  const auth = await getAuthFromRequest(req)\n  if (!auth?.sub || !auth?.tenantId) {\n    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n  }\n\n  let body: z.infer<typeof bodySchema>\n  try {\n    const json = await readJsonSafe(req, null)\n    body = bodySchema.parse(json)\n  } catch (err) {\n    return NextResponse.json(\n      { error: err instanceof Error ? err.message : 'Invalid request body' },\n      { status: 422 },\n    )\n  }\n\n  const container = await createRequestContainer()\n  const guard = await validateRouteMutationGuard({\n    container,\n    req,\n    auth,\n    input: {\n      resourceKind: 'communication_channels.channel',\n      resourceId: `new:${body.providerKey}`,\n      operation: 'create',\n      mutationPayload: {\n        providerKey: body.providerKey,\n        displayName: body.displayName,\n        pollIntervalSeconds: body.pollIntervalSeconds,\n      },\n    },\n  })\n  if ('response' in guard) return guard.response\n\n  const commandBus = container.resolve('commandBus') as CommandBus\n\n  const input: ConnectCredentialChannelInput = {\n    providerKey: body.providerKey,\n    displayName: body.displayName,\n    credentials: body.credentials,\n    pollIntervalSeconds: body.pollIntervalSeconds,\n    userId: auth.sub as string,\n    scope: {\n      tenantId: auth.tenantId as string,\n      organizationId: (auth as { orgId?: string | null }).orgId ?? null,\n    },\n  }\n  const { result } = await commandBus.execute<\n    ConnectCredentialChannelInput,\n    ConnectCredentialChannelResult\n  >(COMMUNICATION_CHANNELS_CONNECT_CREDENTIAL_CHANNEL_COMMAND_ID, {\n    input,\n    ctx: {\n      container,\n      auth: auth as never,\n      organizationScope: null,\n      selectedOrganizationId: (auth as { orgId?: string | null }).orgId ?? null,\n      organizationIds: (auth as { orgId?: string | null }).orgId\n        ? [(auth as { orgId?: string | null }).orgId!]\n        : null,\n    },\n  })\n\n  if (result.status === 'no_adapter') {\n    return NextResponse.json({ error: result.reason }, { status: 404 })\n  }\n  if (result.status === 'validation_failed') {\n    return NextResponse.json({ error: 'Credential validation failed', fieldErrors: result.errors }, { status: 422 })\n  }\n  if (result.status === 'duplicate_mailbox') {\n    return NextResponse.json(\n      {\n        error: `This mailbox is already connected via \"${result.existingProviderKey}\". Disconnect it there before connecting it again with a different provider.`,\n        code: 'mailbox_already_connected',\n      },\n      { status: 409 },\n    )\n  }\n  await guard.afterSuccess()\n  return NextResponse.json(\n    {\n      channelId: result.channelId,\n      externalIdentifier: result.externalIdentifier,\n    },\n    { status: 201 },\n  )\n}\n\nexport const openApi = {\n  tags: ['CommunicationChannels'],\n  methods: {\n    POST: {\n      summary: 'Connect a credential-based per-user channel (IMAP/SMTP)',\n      tags: ['CommunicationChannels'],\n      responses: [\n        { status: 201, description: 'Channel connected' },\n        { status: 401, description: 'Unauthorized' },\n        { status: 404, description: 'Unknown provider' },\n        { status: 409, description: 'Mailbox already connected via another provider' },\n        { status: 422, description: 'Invalid body or credential validation failed' },\n      ],\n    },\n  },\n}\nexport default POST\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAClB,SAAS,0BAA0B;AACnC,SAAS,8BAA8B;AAEvC,SAAS,oBAAoB;AAC7B;AAAA,EACE;AAAA,OAGK;AACP,SAAS,kCAAkC;AAEpC,MAAM,WAAW;AAAA,EACtB,MAAM;AAAA,EACN,MAAM;AAAA,IACJ,aAAa;AAAA,IACb,iBAAiB,CAAC,6CAA6C;AAAA,EACjE;AACF;AAEA,MAAM,aAAa,EAAE,OAAO;AAAA,EAC1B,aAAa,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE;AAAA,EACrC,aAAa,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EACtC,aAAa,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC;AAAA,EAC7C,qBAAqB,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,KAAM,EAAE,SAAS;AACxE,CAAC;AAED,eAAsB,KAAK,KAAiC;AAC1D,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM,OAAO,CAAC,MAAM,UAAU;AACjC,WAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrE;AAEA,MAAI;AACJ,MAAI;AACF,UAAM,OAAO,MAAM,aAAa,KAAK,IAAI;AACzC,WAAO,WAAW,MAAM,IAAI;AAAA,EAC9B,SAAS,KAAK;AACZ,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,eAAe,QAAQ,IAAI,UAAU,uBAAuB;AAAA,MACrE,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,QAAQ,MAAM,2BAA2B;AAAA,IAC7C;AAAA,IACA;AAAA,IACA;AAAA,IACA,OAAO;AAAA,MACL,cAAc;AAAA,MACd,YAAY,OAAO,KAAK,WAAW;AAAA,MACnC,WAAW;AAAA,MACX,iBAAiB;AAAA,QACf,aAAa,KAAK;AAAA,QAClB,aAAa,KAAK;AAAA,QAClB,qBAAqB,KAAK;AAAA,MAC5B;AAAA,IACF;AAAA,EACF,CAAC;AACD,MAAI,cAAc,MAAO,QAAO,MAAM;AAEtC,QAAM,aAAa,UAAU,QAAQ,YAAY;AAEjD,QAAM,QAAuC;AAAA,IAC3C,aAAa,KAAK;AAAA,IAClB,aAAa,KAAK;AAAA,IAClB,aAAa,KAAK;AAAA,IAClB,qBAAqB,KAAK;AAAA,IAC1B,QAAQ,KAAK;AAAA,IACb,OAAO;AAAA,MACL,UAAU,KAAK;AAAA,MACf,gBAAiB,KAAmC,SAAS;AAAA,IAC/D;AAAA,EACF;AACA,QAAM,EAAE,OAAO,IAAI,MAAM,WAAW,QAGlC,8DAA8D;AAAA,IAC9D;AAAA,IACA,KAAK;AAAA,MACH;AAAA,MACA;AAAA,MACA,mBAAmB;AAAA,MACnB,wBAAyB,KAAmC,SAAS;AAAA,MACrE,iBAAkB,KAAmC,QACjD,CAAE,KAAmC,KAAM,IAC3C;AAAA,IACN;AAAA,EACF,CAAC;AAED,MAAI,OAAO,WAAW,cAAc;AAClC,WAAO,aAAa,KAAK,EAAE,OAAO,OAAO,OAAO,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACpE;AACA,MAAI,OAAO,WAAW,qBAAqB;AACzC,WAAO,aAAa,KAAK,EAAE,OAAO,gCAAgC,aAAa,OAAO,OAAO,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACjH;AACA,MAAI,OAAO,WAAW,qBAAqB;AACzC,WAAO,aAAa;AAAA,MAClB;AAAA,QACE,OAAO,0CAA0C,OAAO,mBAAmB;AAAA,QAC3E,MAAM;AAAA,MACR;AAAA,MACA,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACA,QAAM,MAAM,aAAa;AACzB,SAAO,aAAa;AAAA,IAClB;AAAA,MACE,WAAW,OAAO;AAAA,MAClB,oBAAoB,OAAO;AAAA,IAC7B;AAAA,IACA,EAAE,QAAQ,IAAI;AAAA,EAChB;AACF;AAEO,MAAM,UAAU;AAAA,EACrB,MAAM,CAAC,uBAAuB;AAAA,EAC9B,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,MAAM,CAAC,uBAAuB;AAAA,MAC9B,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,oBAAoB;AAAA,QAChD,EAAE,QAAQ,KAAK,aAAa,eAAe;AAAA,QAC3C,EAAE,QAAQ,KAAK,aAAa,mBAAmB;AAAA,QAC/C,EAAE,QAAQ,KAAK,aAAa,iDAAiD;AAAA,QAC7E,EAAE,QAAQ,KAAK,aAAa,+CAA+C;AAAA,MAC7E;AAAA,IACF;AAAA,EACF;AACF;AACA,IAAO,gBAAQ;",
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport type { CommandBus } from '@open-mercato/shared/lib/commands'\nimport { readJsonSafe } from '@open-mercato/shared/lib/http/readJsonSafe'\nimport {\n  COMMUNICATION_CHANNELS_CONNECT_CREDENTIAL_CHANNEL_COMMAND_ID,\n  type ConnectCredentialChannelInput,\n  type ConnectCredentialChannelResult,\n} from '../../../../../commands/connect-credential-channel'\nimport type { ChannelAdapterRegistry } from '../../../../../lib/registry'\nimport { validateRouteMutationGuard } from '../../../../../lib/route-mutation-guard'\n\nexport const metadata = {\n  path: '/communication_channels/channels/connect/credentials',\n  POST: {\n    requireAuth: true,\n    requireFeatures: ['communication_channels.connect_user_channel'],\n  },\n}\n\nconst bodySchema = z.object({\n  providerKey: z.string().min(1).max(64),\n  displayName: z.string().min(1).max(255),\n  credentials: z.record(z.string(), z.unknown()),\n  pollIntervalSeconds: z.number().int().positive().max(86_400).optional(),\n})\n\nexport async function POST(req: Request): Promise<Response> {\n  const auth = await getAuthFromRequest(req)\n  if (!auth?.sub || !auth?.tenantId) {\n    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n  }\n\n  let body: z.infer<typeof bodySchema>\n  try {\n    const json = await readJsonSafe(req, null)\n    body = bodySchema.parse(json)\n  } catch (err) {\n    return NextResponse.json(\n      { error: err instanceof Error ? err.message : 'Invalid request body' },\n      { status: 422 },\n    )\n  }\n\n  const container = await createRequestContainer()\n\n  // Tenant-scoped providers (push: FCM/APNs/Expo) must go through the admin-gated\n  // tenant route, not this per-user one (granted to manager/employee via\n  // `connect_user_channel`). Reject them here so a non-admin can't mint a\n  // privileged tenant-wide channel. The command enforces the same invariant\n  // (`wrong_scope_for_route`) as defense-in-depth.\n  const adapterRegistry = container.resolve('channelAdapterRegistry') as ChannelAdapterRegistry\n  const earlyAdapter = adapterRegistry.get(body.providerKey)\n  if (earlyAdapter && earlyAdapter.channelScope === 'tenant') {\n    return NextResponse.json(\n      {\n        error: 'This provider is connected tenant-wide by an administrator, not per-user.',\n        code: 'provider_is_tenant_scoped',\n      },\n      { status: 403 },\n    )\n  }\n\n  const guard = await validateRouteMutationGuard({\n    container,\n    req,\n    auth,\n    input: {\n      resourceKind: 'communication_channels.channel',\n      resourceId: `new:${body.providerKey}`,\n      operation: 'create',\n      mutationPayload: {\n        providerKey: body.providerKey,\n        displayName: body.displayName,\n        pollIntervalSeconds: body.pollIntervalSeconds,\n      },\n    },\n  })\n  if ('response' in guard) return guard.response\n\n  const commandBus = container.resolve('commandBus') as CommandBus\n\n  const input: ConnectCredentialChannelInput = {\n    providerKey: body.providerKey,\n    displayName: body.displayName,\n    credentials: body.credentials,\n    pollIntervalSeconds: body.pollIntervalSeconds,\n    userId: auth.sub as string,\n    scope: {\n      tenantId: auth.tenantId as string,\n      organizationId: (auth as { orgId?: string | null }).orgId ?? null,\n    },\n  }\n  const { result } = await commandBus.execute<\n    ConnectCredentialChannelInput,\n    ConnectCredentialChannelResult\n  >(COMMUNICATION_CHANNELS_CONNECT_CREDENTIAL_CHANNEL_COMMAND_ID, {\n    input,\n    ctx: {\n      container,\n      auth: auth as never,\n      organizationScope: null,\n      selectedOrganizationId: (auth as { orgId?: string | null }).orgId ?? null,\n      organizationIds: (auth as { orgId?: string | null }).orgId\n        ? [(auth as { orgId?: string | null }).orgId!]\n        : null,\n    },\n  })\n\n  if (result.status === 'no_adapter') {\n    return NextResponse.json({ error: result.reason }, { status: 404 })\n  }\n  if (result.status === 'wrong_scope_for_route') {\n    return NextResponse.json(\n      {\n        error: 'This provider is connected tenant-wide by an administrator, not per-user.',\n        code: 'provider_is_tenant_scoped',\n      },\n      { status: 403 },\n    )\n  }\n  if (result.status === 'validation_failed') {\n    return NextResponse.json(\n      {\n        error: 'Credential validation failed',\n        fieldErrors: result.errors,\n        ...(result.errorCodes ? { fieldErrorCodes: result.errorCodes } : {}),\n      },\n      { status: 422 },\n    )\n  }\n  if (result.status === 'duplicate_mailbox') {\n    return NextResponse.json(\n      {\n        error: `This mailbox is already connected via \"${result.existingProviderKey}\". Disconnect it there before connecting it again with a different provider.`,\n        code: 'mailbox_already_connected',\n      },\n      { status: 409 },\n    )\n  }\n  await guard.afterSuccess()\n  return NextResponse.json(\n    {\n      channelId: result.channelId,\n      externalIdentifier: result.externalIdentifier,\n    },\n    { status: 201 },\n  )\n}\n\nexport const openApi = {\n  tags: ['CommunicationChannels'],\n  methods: {\n    POST: {\n      summary: 'Connect a credential-based per-user channel (IMAP/SMTP)',\n      tags: ['CommunicationChannels'],\n      responses: [\n        { status: 201, description: 'Channel connected' },\n        { status: 401, description: 'Unauthorized' },\n        { status: 403, description: 'Provider is tenant-scoped \u2014 use the tenant connect route' },\n        { status: 404, description: 'Unknown provider' },\n        { status: 409, description: 'Mailbox already connected via another provider' },\n        { status: 422, description: 'Invalid body or credential validation failed' },\n      ],\n    },\n  },\n}\nexport default POST\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAClB,SAAS,0BAA0B;AACnC,SAAS,8BAA8B;AAEvC,SAAS,oBAAoB;AAC7B;AAAA,EACE;AAAA,OAGK;AAEP,SAAS,kCAAkC;AAEpC,MAAM,WAAW;AAAA,EACtB,MAAM;AAAA,EACN,MAAM;AAAA,IACJ,aAAa;AAAA,IACb,iBAAiB,CAAC,6CAA6C;AAAA,EACjE;AACF;AAEA,MAAM,aAAa,EAAE,OAAO;AAAA,EAC1B,aAAa,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE;AAAA,EACrC,aAAa,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EACtC,aAAa,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC;AAAA,EAC7C,qBAAqB,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,KAAM,EAAE,SAAS;AACxE,CAAC;AAED,eAAsB,KAAK,KAAiC;AAC1D,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM,OAAO,CAAC,MAAM,UAAU;AACjC,WAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrE;AAEA,MAAI;AACJ,MAAI;AACF,UAAM,OAAO,MAAM,aAAa,KAAK,IAAI;AACzC,WAAO,WAAW,MAAM,IAAI;AAAA,EAC9B,SAAS,KAAK;AACZ,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,eAAe,QAAQ,IAAI,UAAU,uBAAuB;AAAA,MACrE,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAO/C,QAAM,kBAAkB,UAAU,QAAQ,wBAAwB;AAClE,QAAM,eAAe,gBAAgB,IAAI,KAAK,WAAW;AACzD,MAAI,gBAAgB,aAAa,iBAAiB,UAAU;AAC1D,WAAO,aAAa;AAAA,MAClB;AAAA,QACE,OAAO;AAAA,QACP,MAAM;AAAA,MACR;AAAA,MACA,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AAEA,QAAM,QAAQ,MAAM,2BAA2B;AAAA,IAC7C;AAAA,IACA;AAAA,IACA;AAAA,IACA,OAAO;AAAA,MACL,cAAc;AAAA,MACd,YAAY,OAAO,KAAK,WAAW;AAAA,MACnC,WAAW;AAAA,MACX,iBAAiB;AAAA,QACf,aAAa,KAAK;AAAA,QAClB,aAAa,KAAK;AAAA,QAClB,qBAAqB,KAAK;AAAA,MAC5B;AAAA,IACF;AAAA,EACF,CAAC;AACD,MAAI,cAAc,MAAO,QAAO,MAAM;AAEtC,QAAM,aAAa,UAAU,QAAQ,YAAY;AAEjD,QAAM,QAAuC;AAAA,IAC3C,aAAa,KAAK;AAAA,IAClB,aAAa,KAAK;AAAA,IAClB,aAAa,KAAK;AAAA,IAClB,qBAAqB,KAAK;AAAA,IAC1B,QAAQ,KAAK;AAAA,IACb,OAAO;AAAA,MACL,UAAU,KAAK;AAAA,MACf,gBAAiB,KAAmC,SAAS;AAAA,IAC/D;AAAA,EACF;AACA,QAAM,EAAE,OAAO,IAAI,MAAM,WAAW,QAGlC,8DAA8D;AAAA,IAC9D;AAAA,IACA,KAAK;AAAA,MACH;AAAA,MACA;AAAA,MACA,mBAAmB;AAAA,MACnB,wBAAyB,KAAmC,SAAS;AAAA,MACrE,iBAAkB,KAAmC,QACjD,CAAE,KAAmC,KAAM,IAC3C;AAAA,IACN;AAAA,EACF,CAAC;AAED,MAAI,OAAO,WAAW,cAAc;AAClC,WAAO,aAAa,KAAK,EAAE,OAAO,OAAO,OAAO,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACpE;AACA,MAAI,OAAO,WAAW,yBAAyB;AAC7C,WAAO,aAAa;AAAA,MAClB;AAAA,QACE,OAAO;AAAA,QACP,MAAM;AAAA,MACR;AAAA,MACA,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACA,MAAI,OAAO,WAAW,qBAAqB;AACzC,WAAO,aAAa;AAAA,MAClB;AAAA,QACE,OAAO;AAAA,QACP,aAAa,OAAO;AAAA,QACpB,GAAI,OAAO,aAAa,EAAE,iBAAiB,OAAO,WAAW,IAAI,CAAC;AAAA,MACpE;AAAA,MACA,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACA,MAAI,OAAO,WAAW,qBAAqB;AACzC,WAAO,aAAa;AAAA,MAClB;AAAA,QACE,OAAO,0CAA0C,OAAO,mBAAmB;AAAA,QAC3E,MAAM;AAAA,MACR;AAAA,MACA,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACA,QAAM,MAAM,aAAa;AACzB,SAAO,aAAa;AAAA,IAClB;AAAA,MACE,WAAW,OAAO;AAAA,MAClB,oBAAoB,OAAO;AAAA,IAC7B;AAAA,IACA,EAAE,QAAQ,IAAI;AAAA,EAChB;AACF;AAEO,MAAM,UAAU;AAAA,EACrB,MAAM,CAAC,uBAAuB;AAAA,EAC9B,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,MAAM,CAAC,uBAAuB;AAAA,MAC9B,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,oBAAoB;AAAA,QAChD,EAAE,QAAQ,KAAK,aAAa,eAAe;AAAA,QAC3C,EAAE,QAAQ,KAAK,aAAa,gEAA2D;AAAA,QACvF,EAAE,QAAQ,KAAK,aAAa,mBAAmB;AAAA,QAC/C,EAAE,QAAQ,KAAK,aAAa,iDAAiD;AAAA,QAC7E,EAAE,QAAQ,KAAK,aAAa,+CAA+C;AAAA,MAC7E;AAAA,IACF;AAAA,EACF;AACF;AACA,IAAO,gBAAQ;",
   "names": []
 }