@open-mercato/core 0.7.0 → 0.7.1-develop.7102.1.b41f7e3e51

package/dist/modules/communication_channels/api/post/channels/[id]/test-send/route.js

@@ -12,6 +12,10 @@ import {
   channelOrgScopeWhere
 } from "../../../../../lib/access-control.js";
 import { refreshCredentialsIfNeeded } from "../../../../../lib/credential-refresh.js";
+import {
+  MAX_OUTBOUND_RECIPIENT_LENGTH,
+  validateOutboundRecipient
+} from "../../../../../lib/outbound-recipient.js";
 import { validateRouteMutationGuard } from "../../../../../lib/route-mutation-guard.js";
 const metadata = {
   path: "/communication_channels/channels/[id]/test-send",
@@ -24,7 +28,7 @@ const metadata = {
   }
 };
 const bodySchema = z.object({
-  to: z.string().email(),
+  to: z.string().min(1).max(MAX_OUTBOUND_RECIPIENT_LENGTH).regex(/^[^\r\n]*$/),
   subject: z.string().min(1).max(500).optional(),
   body: z.string().max(5e4).optional()
 });
@@ -119,6 +123,10 @@ async function POST(req, context) {
       { status: 404 }
     );
   }
+  const recipientCheck = validateOutboundRecipient(body.to, adapter.capabilities);
+  if (!recipientCheck.ok) {
+    return NextResponse.json({ error: recipientCheck.error }, { status: 422 });
+  }
   let credentials = {};
   let credentialsService = null;
   try {

package/dist/modules/communication_channels/api/post/channels/[id]/test-send/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../../../src/modules/communication_channels/api/post/channels/%5Bid%5D/test-send/route.ts"],
-  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { readJsonSafe } from '@open-mercato/shared/lib/http/readJsonSafe'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { CommunicationChannel } from '../../../../../data/entities'\nimport { getChannelAdapter } from '../../../../../lib/adapter-registry-singleton'\nimport {\n  ChannelAccessDeniedError,\n  assertCanManageChannel,\n  channelOrgScopeWhere,\n} from '../../../../../lib/access-control'\nimport { refreshCredentialsIfNeeded } from '../../../../../lib/credential-refresh'\nimport { validateRouteMutationGuard } from '../../../../../lib/route-mutation-guard'\n\ntype RbacServiceLike = {\n  loadAcl: (\n    userId: string,\n    scope: { tenantId: string | null; organizationId: string | null },\n  ) => Promise<{ isSuperAdmin: boolean; features: string[]; organizations: string[] | null }>\n}\n\nexport const metadata = {\n  path: '/communication_channels/channels/[id]/test-send',\n  POST: {\n    // Owner self-service: a user may send a test from their OWN mailbox (gated\n    // by `connect_user_channel`). Test-sending from a shared/tenant-wide channel\n    // still requires `manage` \u2014 enforced per channel type by `assertCanManageChannel`.\n    requireAuth: true,\n    requireFeatures: ['communication_channels.connect_user_channel'],\n  },\n}\n\nconst bodySchema = z.object({\n  to: z.string().email(),\n  subject: z.string().min(1).max(500).optional(),\n  body: z.string().max(50_000).optional(),\n})\n\ntype RouteContext = {\n  params: Promise<{ id: string }> | { id: string }\n}\n\ntype CredentialsServiceLike = {\n  resolve: (\n    integrationId: string,\n    scope: { organizationId: string; tenantId: string; userId?: string | null },\n  ) => Promise<Record<string, unknown> | null>\n  save?: (\n    integrationId: string,\n    credentials: Record<string, unknown>,\n    scope: { organizationId: string; tenantId: string; userId?: string | null },\n  ) => Promise<void>\n}\n\n/**\n * Admin diagnostic \u2014 send a test message via the adapter without creating a\n * platform `Message`. Useful for verifying credentials + outbound connectivity\n * after a channel is configured.\n *\n * The result is NOT persisted to `ExternalMessage` / `MessageChannelLink` \u2014 it\n * is a one-shot probe.\n */\nexport async function POST(req: Request, context: RouteContext): Promise<Response> {\n  const { id } = await context.params\n  if (!z.string().uuid().safeParse(id).success) {\n    return NextResponse.json({ error: 'Invalid channel id' }, { status: 400 })\n  }\n\n  const auth = await getAuthFromRequest(req)\n  if (!auth?.sub || !auth?.tenantId) {\n    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n  }\n\n  let body: z.infer<typeof bodySchema>\n  try {\n    body = bodySchema.parse(await readJsonSafe(req, null))\n  } catch (err) {\n    return NextResponse.json(\n      { error: err instanceof Error ? err.message : 'Invalid request body' },\n      { status: 422 },\n    )\n  }\n\n  const container = await createRequestContainer()\n  const em = (container.resolve('em') as EntityManager).fork()\n  const organizationId = (auth as { orgId?: string | null }).orgId ?? null\n  const dscope = { tenantId: auth.tenantId as string, organizationId }\n  const channel = await findOneWithDecryption(\n    em,\n    CommunicationChannel,\n    {\n      id,\n      tenantId: auth.tenantId as string,\n      ...channelOrgScopeWhere(organizationId),\n      deletedAt: null,\n    },\n    undefined,\n    dscope,\n  )\n  if (!channel) {\n    return NextResponse.json({ error: 'Channel not found' }, { status: 404 })\n  }\n  // Resolve credentials at the channel's OWN org, not the caller's selected org.\n  // Tenant-wide channels store `organization_id = NULL` and their credentials\n  // live at `organization_id = tenantId` (see connect-credential-channel.ts), so\n  // the read key must be `channel.organizationId ?? tenantId` \u2014 keying on the\n  // session org would resolve `{}` for a tenant-wide channel viewed from a\n  // non-null org.\n  const channelCredentialsOrg = channel.organizationId ?? (auth.tenantId as string)\n  // Load features via RBAC service so admin bypass (`communication_channels.admin`,\n  // wildcards, super-admin) is honoured. The `auth` object from\n  // `getAuthFromRequest` carries identity only \u2014 feature ACLs live in the RBAC\n  // service and must be loaded per request.\n  let userFeatures: string[] = []\n  try {\n    const rbac = container.resolve('rbacService') as RbacServiceLike\n    const acl = await rbac.loadAcl(auth.sub as string, {\n      tenantId: auth.tenantId as string,\n      organizationId,\n    })\n    userFeatures = acl?.isSuperAdmin ? ['*'] : Array.isArray(acl?.features) ? acl.features : []\n  } catch {\n    userFeatures = []\n  }\n  try {\n    assertCanManageChannel(\n      { userId: channel.userId },\n      auth.sub as string,\n      userFeatures,\n      'communication_channels.manage',\n    )\n  } catch (err) {\n    if (err instanceof ChannelAccessDeniedError) {\n      return NextResponse.json({ error: 'Channel not found' }, { status: 404 })\n    }\n    const status = (err as { statusCode?: number }).statusCode ?? 403\n    return NextResponse.json(\n      { error: err instanceof Error ? err.message : 'Access denied' },\n      { status },\n    )\n  }\n  if (!channel.isActive || channel.status !== 'connected') {\n    return NextResponse.json(\n      { error: `Channel is in status '${channel.status}' (not connected)` },\n      { status: 409 },\n    )\n  }\n\n  const guard = await validateRouteMutationGuard({\n    container,\n    req,\n    auth,\n    input: {\n      resourceKind: 'communication_channels.channel',\n      resourceId: channel.id,\n      operation: 'custom',\n      mutationPayload: body as unknown as Record<string, unknown>,\n    },\n  })\n  if ('response' in guard) return guard.response\n\n  const adapter = getChannelAdapter(channel.providerKey)\n  if (!adapter) {\n    return NextResponse.json(\n      { error: `No adapter registered for provider '${channel.providerKey}'` },\n      { status: 404 },\n    )\n  }\n\n  // Resolve credentials + optionally refresh.\n  let credentials: Record<string, unknown> = {}\n  let credentialsService: CredentialsServiceLike | null = null\n  try {\n    credentialsService = container.resolve('integrationCredentialsService') as CredentialsServiceLike\n  } catch {\n    credentialsService = null\n  }\n  if (channel.credentialsRef && credentialsService) {\n    credentials =\n      (await credentialsService\n        .resolve(`channel_${channel.providerKey}`, {\n          tenantId: auth.tenantId as string,\n          organizationId: channelCredentialsOrg,\n          userId: channel.userId ?? null,\n        })\n        .catch(() => null)) ?? {}\n  }\n  const credentialScope = {\n    tenantId: auth.tenantId as string,\n    organizationId: channelCredentialsOrg,\n    userId: channel.userId ?? null,\n  }\n  const refreshed = await refreshCredentialsIfNeeded(\n    {\n      adapter,\n      channelId: channel.id,\n      credentials,\n      scope: credentialScope,\n    },\n    { credentialsService },\n  )\n  credentials = refreshed.credentials\n\n  try {\n    const converted = await adapter.convertOutbound({\n      body: body.body ?? 'Test message from Open Mercato',\n      bodyFormat: 'text',\n    })\n    const result = await adapter.sendMessage({\n      content: converted.content,\n      credentials,\n      scope: {\n        tenantId: auth.tenantId as string,\n        organizationId: channelCredentialsOrg,\n      },\n      metadata: { to: body.to, subject: body.subject ?? 'Test send', testSend: true },\n    })\n    await guard.afterSuccess()\n    return NextResponse.json({\n      status: result.status,\n      externalMessageId: result.externalMessageId,\n      providerError: result.error ?? null,\n    })\n  } catch (err) {\n    const message = err instanceof Error ? err.message : 'send failed'\n    return NextResponse.json({ status: 'failed', error: message }, { status: 502 })\n  }\n}\n\nexport const openApi = {\n  tags: ['CommunicationChannels'],\n  methods: {\n    POST: {\n      summary: 'Diagnostic \u2014 send a test message through the channel without persisting',\n      tags: ['CommunicationChannels'],\n      responses: [\n        { status: 200, description: 'Test send result' },\n        { status: 400, description: 'Invalid channel id' },\n        { status: 401, description: 'Unauthorized' },\n        { status: 403, description: 'Not allowed to manage this channel' },\n        { status: 404, description: 'Channel or adapter not found' },\n        { status: 409, description: 'Channel not connected' },\n        { status: 422, description: 'Invalid request body' },\n        { status: 502, description: 'Provider error' },\n      ],\n    },\n  },\n}\nexport default POST\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAClB,SAAS,0BAA0B;AACnC,SAAS,8BAA8B;AACvC,SAAS,oBAAoB;AAE7B,SAAS,6BAA6B;AACtC,SAAS,4BAA4B;AACrC,SAAS,yBAAyB;AAClC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,kCAAkC;AAC3C,SAAS,kCAAkC;AASpC,MAAM,WAAW;AAAA,EACtB,MAAM;AAAA,EACN,MAAM;AAAA;AAAA;AAAA;AAAA,IAIJ,aAAa;AAAA,IACb,iBAAiB,CAAC,6CAA6C;AAAA,EACjE;AACF;AAEA,MAAM,aAAa,EAAE,OAAO;AAAA,EAC1B,IAAI,EAAE,OAAO,EAAE,MAAM;AAAA,EACrB,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EAC7C,MAAM,EAAE,OAAO,EAAE,IAAI,GAAM,EAAE,SAAS;AACxC,CAAC;AA0BD,eAAsB,KAAK,KAAc,SAA0C;AACjF,QAAM,EAAE,GAAG,IAAI,MAAM,QAAQ;AAC7B,MAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,SAAS;AAC5C,WAAO,aAAa,KAAK,EAAE,OAAO,qBAAqB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC3E;AAEA,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM,OAAO,CAAC,MAAM,UAAU;AACjC,WAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrE;AAEA,MAAI;AACJ,MAAI;AACF,WAAO,WAAW,MAAM,MAAM,aAAa,KAAK,IAAI,CAAC;AAAA,EACvD,SAAS,KAAK;AACZ,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,eAAe,QAAQ,IAAI,UAAU,uBAAuB;AAAA,MACrE,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,KAAM,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC3D,QAAM,iBAAkB,KAAmC,SAAS;AACpE,QAAM,SAAS,EAAE,UAAU,KAAK,UAAoB,eAAe;AACnE,QAAM,UAAU,MAAM;AAAA,IACpB;AAAA,IACA;AAAA,IACA;AAAA,MACE;AAAA,MACA,UAAU,KAAK;AAAA,MACf,GAAG,qBAAqB,cAAc;AAAA,MACtC,WAAW;AAAA,IACb;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACA,MAAI,CAAC,SAAS;AACZ,WAAO,aAAa,KAAK,EAAE,OAAO,oBAAoB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC1E;AAOA,QAAM,wBAAwB,QAAQ,kBAAmB,KAAK;AAK9D,MAAI,eAAyB,CAAC;AAC9B,MAAI;AACF,UAAM,OAAO,UAAU,QAAQ,aAAa;AAC5C,UAAM,MAAM,MAAM,KAAK,QAAQ,KAAK,KAAe;AAAA,MACjD,UAAU,KAAK;AAAA,MACf;AAAA,IACF,CAAC;AACD,mBAAe,KAAK,eAAe,CAAC,GAAG,IAAI,MAAM,QAAQ,KAAK,QAAQ,IAAI,IAAI,WAAW,CAAC;AAAA,EAC5F,QAAQ;AACN,mBAAe,CAAC;AAAA,EAClB;AACA,MAAI;AACF;AAAA,MACE,EAAE,QAAQ,QAAQ,OAAO;AAAA,MACzB,KAAK;AAAA,MACL;AAAA,MACA;AAAA,IACF;AAAA,EACF,SAAS,KAAK;AACZ,QAAI,eAAe,0BAA0B;AAC3C,aAAO,aAAa,KAAK,EAAE,OAAO,oBAAoB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC1E;AACA,UAAM,SAAU,IAAgC,cAAc;AAC9D,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,eAAe,QAAQ,IAAI,UAAU,gBAAgB;AAAA,MAC9D,EAAE,OAAO;AAAA,IACX;AAAA,EACF;AACA,MAAI,CAAC,QAAQ,YAAY,QAAQ,WAAW,aAAa;AACvD,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,yBAAyB,QAAQ,MAAM,oBAAoB;AAAA,MACpE,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AAEA,QAAM,QAAQ,MAAM,2BAA2B;AAAA,IAC7C;AAAA,IACA;AAAA,IACA;AAAA,IACA,OAAO;AAAA,MACL,cAAc;AAAA,MACd,YAAY,QAAQ;AAAA,MACpB,WAAW;AAAA,MACX,iBAAiB;AAAA,IACnB;AAAA,EACF,CAAC;AACD,MAAI,cAAc,MAAO,QAAO,MAAM;AAEtC,QAAM,UAAU,kBAAkB,QAAQ,WAAW;AACrD,MAAI,CAAC,SAAS;AACZ,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,uCAAuC,QAAQ,WAAW,IAAI;AAAA,MACvE,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AAGA,MAAI,cAAuC,CAAC;AAC5C,MAAI,qBAAoD;AACxD,MAAI;AACF,yBAAqB,UAAU,QAAQ,+BAA+B;AAAA,EACxE,QAAQ;AACN,yBAAqB;AAAA,EACvB;AACA,MAAI,QAAQ,kBAAkB,oBAAoB;AAChD,kBACG,MAAM,mBACJ,QAAQ,WAAW,QAAQ,WAAW,IAAI;AAAA,MACzC,UAAU,KAAK;AAAA,MACf,gBAAgB;AAAA,MAChB,QAAQ,QAAQ,UAAU;AAAA,IAC5B,CAAC,EACA,MAAM,MAAM,IAAI,KAAM,CAAC;AAAA,EAC9B;AACA,QAAM,kBAAkB;AAAA,IACtB,UAAU,KAAK;AAAA,IACf,gBAAgB;AAAA,IAChB,QAAQ,QAAQ,UAAU;AAAA,EAC5B;AACA,QAAM,YAAY,MAAM;AAAA,IACtB;AAAA,MACE;AAAA,MACA,WAAW,QAAQ;AAAA,MACnB;AAAA,MACA,OAAO;AAAA,IACT;AAAA,IACA,EAAE,mBAAmB;AAAA,EACvB;AACA,gBAAc,UAAU;AAExB,MAAI;AACF,UAAM,YAAY,MAAM,QAAQ,gBAAgB;AAAA,MAC9C,MAAM,KAAK,QAAQ;AAAA,MACnB,YAAY;AAAA,IACd,CAAC;AACD,UAAM,SAAS,MAAM,QAAQ,YAAY;AAAA,MACvC,SAAS,UAAU;AAAA,MACnB;AAAA,MACA,OAAO;AAAA,QACL,UAAU,KAAK;AAAA,QACf,gBAAgB;AAAA,MAClB;AAAA,MACA,UAAU,EAAE,IAAI,KAAK,IAAI,SAAS,KAAK,WAAW,aAAa,UAAU,KAAK;AAAA,IAChF,CAAC;AACD,UAAM,MAAM,aAAa;AACzB,WAAO,aAAa,KAAK;AAAA,MACvB,QAAQ,OAAO;AAAA,MACf,mBAAmB,OAAO;AAAA,MAC1B,eAAe,OAAO,SAAS;AAAA,IACjC,CAAC;AAAA,EACH,SAAS,KAAK;AACZ,UAAM,UAAU,eAAe,QAAQ,IAAI,UAAU;AACrD,WAAO,aAAa,KAAK,EAAE,QAAQ,UAAU,OAAO,QAAQ,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAChF;AACF;AAEO,MAAM,UAAU;AAAA,EACrB,MAAM,CAAC,uBAAuB;AAAA,EAC9B,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,MAAM,CAAC,uBAAuB;AAAA,MAC9B,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,mBAAmB;AAAA,QAC/C,EAAE,QAAQ,KAAK,aAAa,qBAAqB;AAAA,QACjD,EAAE,QAAQ,KAAK,aAAa,eAAe;AAAA,QAC3C,EAAE,QAAQ,KAAK,aAAa,qCAAqC;AAAA,QACjE,EAAE,QAAQ,KAAK,aAAa,+BAA+B;AAAA,QAC3D,EAAE,QAAQ,KAAK,aAAa,wBAAwB;AAAA,QACpD,EAAE,QAAQ,KAAK,aAAa,uBAAuB;AAAA,QACnD,EAAE,QAAQ,KAAK,aAAa,iBAAiB;AAAA,MAC/C;AAAA,IACF;AAAA,EACF;AACF;AACA,IAAO,gBAAQ;",
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { readJsonSafe } from '@open-mercato/shared/lib/http/readJsonSafe'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { CommunicationChannel } from '../../../../../data/entities'\nimport { getChannelAdapter } from '../../../../../lib/adapter-registry-singleton'\nimport {\n  ChannelAccessDeniedError,\n  assertCanManageChannel,\n  channelOrgScopeWhere,\n} from '../../../../../lib/access-control'\nimport { refreshCredentialsIfNeeded } from '../../../../../lib/credential-refresh'\nimport {\n  MAX_OUTBOUND_RECIPIENT_LENGTH,\n  validateOutboundRecipient,\n} from '../../../../../lib/outbound-recipient'\nimport { validateRouteMutationGuard } from '../../../../../lib/route-mutation-guard'\n\ntype RbacServiceLike = {\n  loadAcl: (\n    userId: string,\n    scope: { tenantId: string | null; organizationId: string | null },\n  ) => Promise<{ isSuperAdmin: boolean; features: string[]; organizations: string[] | null }>\n}\n\nexport const metadata = {\n  path: '/communication_channels/channels/[id]/test-send',\n  POST: {\n    // Owner self-service: a user may send a test from their OWN mailbox (gated\n    // by `connect_user_channel`). Test-sending from a shared/tenant-wide channel\n    // still requires `manage` \u2014 enforced per channel type by `assertCanManageChannel`.\n    requireAuth: true,\n    requireFeatures: ['communication_channels.connect_user_channel'],\n  },\n}\n\n// `to` is deliberately NOT typed as an email here. The recipient shape depends\n// on the provider (an email address for Gmail/IMAP, a channel snowflake for\n// Discord), and the adapter is only known once the channel is loaded \u2014 so the\n// schema accepts any non-empty single-line string and `validateOutboundRecipient`\n// applies the provider-appropriate rules below, defaulting to email. The CR/LF\n// rejection stays at the schema level so a header-injection attempt is refused\n// before the request reaches the channel lookup or the mutation guard.\nconst bodySchema = z.object({\n  to: z.string().min(1).max(MAX_OUTBOUND_RECIPIENT_LENGTH).regex(/^[^\\r\\n]*$/),\n  subject: z.string().min(1).max(500).optional(),\n  body: z.string().max(50_000).optional(),\n})\n\ntype RouteContext = {\n  params: Promise<{ id: string }> | { id: string }\n}\n\ntype CredentialsServiceLike = {\n  resolve: (\n    integrationId: string,\n    scope: { organizationId: string; tenantId: string; userId?: string | null },\n  ) => Promise<Record<string, unknown> | null>\n  save?: (\n    integrationId: string,\n    credentials: Record<string, unknown>,\n    scope: { organizationId: string; tenantId: string; userId?: string | null },\n  ) => Promise<void>\n}\n\n/**\n * Admin diagnostic \u2014 send a test message via the adapter without creating a\n * platform `Message`. Useful for verifying credentials + outbound connectivity\n * after a channel is configured.\n *\n * The result is NOT persisted to `ExternalMessage` / `MessageChannelLink` \u2014 it\n * is a one-shot probe.\n */\nexport async function POST(req: Request, context: RouteContext): Promise<Response> {\n  const { id } = await context.params\n  if (!z.string().uuid().safeParse(id).success) {\n    return NextResponse.json({ error: 'Invalid channel id' }, { status: 400 })\n  }\n\n  const auth = await getAuthFromRequest(req)\n  if (!auth?.sub || !auth?.tenantId) {\n    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n  }\n\n  let body: z.infer<typeof bodySchema>\n  try {\n    body = bodySchema.parse(await readJsonSafe(req, null))\n  } catch (err) {\n    return NextResponse.json(\n      { error: err instanceof Error ? err.message : 'Invalid request body' },\n      { status: 422 },\n    )\n  }\n\n  const container = await createRequestContainer()\n  const em = (container.resolve('em') as EntityManager).fork()\n  const organizationId = (auth as { orgId?: string | null }).orgId ?? null\n  const dscope = { tenantId: auth.tenantId as string, organizationId }\n  const channel = await findOneWithDecryption(\n    em,\n    CommunicationChannel,\n    {\n      id,\n      tenantId: auth.tenantId as string,\n      ...channelOrgScopeWhere(organizationId),\n      deletedAt: null,\n    },\n    undefined,\n    dscope,\n  )\n  if (!channel) {\n    return NextResponse.json({ error: 'Channel not found' }, { status: 404 })\n  }\n  // Resolve credentials at the channel's OWN org, not the caller's selected org.\n  // Tenant-wide channels store `organization_id = NULL` and their credentials\n  // live at `organization_id = tenantId` (see connect-credential-channel.ts), so\n  // the read key must be `channel.organizationId ?? tenantId` \u2014 keying on the\n  // session org would resolve `{}` for a tenant-wide channel viewed from a\n  // non-null org.\n  const channelCredentialsOrg = channel.organizationId ?? (auth.tenantId as string)\n  // Load features via RBAC service so admin bypass (`communication_channels.admin`,\n  // wildcards, super-admin) is honoured. The `auth` object from\n  // `getAuthFromRequest` carries identity only \u2014 feature ACLs live in the RBAC\n  // service and must be loaded per request.\n  let userFeatures: string[] = []\n  try {\n    const rbac = container.resolve('rbacService') as RbacServiceLike\n    const acl = await rbac.loadAcl(auth.sub as string, {\n      tenantId: auth.tenantId as string,\n      organizationId,\n    })\n    userFeatures = acl?.isSuperAdmin ? ['*'] : Array.isArray(acl?.features) ? acl.features : []\n  } catch {\n    userFeatures = []\n  }\n  try {\n    assertCanManageChannel(\n      { userId: channel.userId },\n      auth.sub as string,\n      userFeatures,\n      'communication_channels.manage',\n    )\n  } catch (err) {\n    if (err instanceof ChannelAccessDeniedError) {\n      return NextResponse.json({ error: 'Channel not found' }, { status: 404 })\n    }\n    const status = (err as { statusCode?: number }).statusCode ?? 403\n    return NextResponse.json(\n      { error: err instanceof Error ? err.message : 'Access denied' },\n      { status },\n    )\n  }\n  if (!channel.isActive || channel.status !== 'connected') {\n    return NextResponse.json(\n      { error: `Channel is in status '${channel.status}' (not connected)` },\n      { status: 409 },\n    )\n  }\n\n  const guard = await validateRouteMutationGuard({\n    container,\n    req,\n    auth,\n    input: {\n      resourceKind: 'communication_channels.channel',\n      resourceId: channel.id,\n      operation: 'custom',\n      mutationPayload: body as unknown as Record<string, unknown>,\n    },\n  })\n  if ('response' in guard) return guard.response\n\n  const adapter = getChannelAdapter(channel.providerKey)\n  if (!adapter) {\n    return NextResponse.json(\n      { error: `No adapter registered for provider '${channel.providerKey}'` },\n      { status: 404 },\n    )\n  }\n\n  const recipientCheck = validateOutboundRecipient(body.to, adapter.capabilities)\n  if (!recipientCheck.ok) {\n    return NextResponse.json({ error: recipientCheck.error }, { status: 422 })\n  }\n\n  // Resolve credentials + optionally refresh.\n  let credentials: Record<string, unknown> = {}\n  let credentialsService: CredentialsServiceLike | null = null\n  try {\n    credentialsService = container.resolve('integrationCredentialsService') as CredentialsServiceLike\n  } catch {\n    credentialsService = null\n  }\n  if (channel.credentialsRef && credentialsService) {\n    credentials =\n      (await credentialsService\n        .resolve(`channel_${channel.providerKey}`, {\n          tenantId: auth.tenantId as string,\n          organizationId: channelCredentialsOrg,\n          userId: channel.userId ?? null,\n        })\n        .catch(() => null)) ?? {}\n  }\n  const credentialScope = {\n    tenantId: auth.tenantId as string,\n    organizationId: channelCredentialsOrg,\n    userId: channel.userId ?? null,\n  }\n  const refreshed = await refreshCredentialsIfNeeded(\n    {\n      adapter,\n      channelId: channel.id,\n      credentials,\n      scope: credentialScope,\n    },\n    { credentialsService },\n  )\n  credentials = refreshed.credentials\n\n  try {\n    const converted = await adapter.convertOutbound({\n      body: body.body ?? 'Test message from Open Mercato',\n      bodyFormat: 'text',\n    })\n    const result = await adapter.sendMessage({\n      content: converted.content,\n      credentials,\n      scope: {\n        tenantId: auth.tenantId as string,\n        organizationId: channelCredentialsOrg,\n      },\n      metadata: { to: body.to, subject: body.subject ?? 'Test send', testSend: true },\n    })\n    await guard.afterSuccess()\n    return NextResponse.json({\n      status: result.status,\n      externalMessageId: result.externalMessageId,\n      providerError: result.error ?? null,\n    })\n  } catch (err) {\n    const message = err instanceof Error ? err.message : 'send failed'\n    return NextResponse.json({ status: 'failed', error: message }, { status: 502 })\n  }\n}\n\nexport const openApi = {\n  tags: ['CommunicationChannels'],\n  methods: {\n    POST: {\n      summary: 'Diagnostic \u2014 send a test message through the channel without persisting',\n      tags: ['CommunicationChannels'],\n      responses: [\n        { status: 200, description: 'Test send result' },\n        { status: 400, description: 'Invalid channel id' },\n        { status: 401, description: 'Unauthorized' },\n        { status: 403, description: 'Not allowed to manage this channel' },\n        { status: 404, description: 'Channel or adapter not found' },\n        { status: 409, description: 'Channel not connected' },\n        { status: 422, description: 'Invalid request body' },\n        { status: 502, description: 'Provider error' },\n      ],\n    },\n  },\n}\nexport default POST\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAClB,SAAS,0BAA0B;AACnC,SAAS,8BAA8B;AACvC,SAAS,oBAAoB;AAE7B,SAAS,6BAA6B;AACtC,SAAS,4BAA4B;AACrC,SAAS,yBAAyB;AAClC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,kCAAkC;AAC3C;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAS,kCAAkC;AASpC,MAAM,WAAW;AAAA,EACtB,MAAM;AAAA,EACN,MAAM;AAAA;AAAA;AAAA;AAAA,IAIJ,aAAa;AAAA,IACb,iBAAiB,CAAC,6CAA6C;AAAA,EACjE;AACF;AASA,MAAM,aAAa,EAAE,OAAO;AAAA,EAC1B,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,6BAA6B,EAAE,MAAM,YAAY;AAAA,EAC3E,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EAC7C,MAAM,EAAE,OAAO,EAAE,IAAI,GAAM,EAAE,SAAS;AACxC,CAAC;AA0BD,eAAsB,KAAK,KAAc,SAA0C;AACjF,QAAM,EAAE,GAAG,IAAI,MAAM,QAAQ;AAC7B,MAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,SAAS;AAC5C,WAAO,aAAa,KAAK,EAAE,OAAO,qBAAqB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC3E;AAEA,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM,OAAO,CAAC,MAAM,UAAU;AACjC,WAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrE;AAEA,MAAI;AACJ,MAAI;AACF,WAAO,WAAW,MAAM,MAAM,aAAa,KAAK,IAAI,CAAC;AAAA,EACvD,SAAS,KAAK;AACZ,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,eAAe,QAAQ,IAAI,UAAU,uBAAuB;AAAA,MACrE,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,KAAM,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC3D,QAAM,iBAAkB,KAAmC,SAAS;AACpE,QAAM,SAAS,EAAE,UAAU,KAAK,UAAoB,eAAe;AACnE,QAAM,UAAU,MAAM;AAAA,IACpB;AAAA,IACA;AAAA,IACA;AAAA,MACE;AAAA,MACA,UAAU,KAAK;AAAA,MACf,GAAG,qBAAqB,cAAc;AAAA,MACtC,WAAW;AAAA,IACb;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACA,MAAI,CAAC,SAAS;AACZ,WAAO,aAAa,KAAK,EAAE,OAAO,oBAAoB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC1E;AAOA,QAAM,wBAAwB,QAAQ,kBAAmB,KAAK;AAK9D,MAAI,eAAyB,CAAC;AAC9B,MAAI;AACF,UAAM,OAAO,UAAU,QAAQ,aAAa;AAC5C,UAAM,MAAM,MAAM,KAAK,QAAQ,KAAK,KAAe;AAAA,MACjD,UAAU,KAAK;AAAA,MACf;AAAA,IACF,CAAC;AACD,mBAAe,KAAK,eAAe,CAAC,GAAG,IAAI,MAAM,QAAQ,KAAK,QAAQ,IAAI,IAAI,WAAW,CAAC;AAAA,EAC5F,QAAQ;AACN,mBAAe,CAAC;AAAA,EAClB;AACA,MAAI;AACF;AAAA,MACE,EAAE,QAAQ,QAAQ,OAAO;AAAA,MACzB,KAAK;AAAA,MACL;AAAA,MACA;AAAA,IACF;AAAA,EACF,SAAS,KAAK;AACZ,QAAI,eAAe,0BAA0B;AAC3C,aAAO,aAAa,KAAK,EAAE,OAAO,oBAAoB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC1E;AACA,UAAM,SAAU,IAAgC,cAAc;AAC9D,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,eAAe,QAAQ,IAAI,UAAU,gBAAgB;AAAA,MAC9D,EAAE,OAAO;AAAA,IACX;AAAA,EACF;AACA,MAAI,CAAC,QAAQ,YAAY,QAAQ,WAAW,aAAa;AACvD,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,yBAAyB,QAAQ,MAAM,oBAAoB;AAAA,MACpE,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AAEA,QAAM,QAAQ,MAAM,2BAA2B;AAAA,IAC7C;AAAA,IACA;AAAA,IACA;AAAA,IACA,OAAO;AAAA,MACL,cAAc;AAAA,MACd,YAAY,QAAQ;AAAA,MACpB,WAAW;AAAA,MACX,iBAAiB;AAAA,IACnB;AAAA,EACF,CAAC;AACD,MAAI,cAAc,MAAO,QAAO,MAAM;AAEtC,QAAM,UAAU,kBAAkB,QAAQ,WAAW;AACrD,MAAI,CAAC,SAAS;AACZ,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,uCAAuC,QAAQ,WAAW,IAAI;AAAA,MACvE,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AAEA,QAAM,iBAAiB,0BAA0B,KAAK,IAAI,QAAQ,YAAY;AAC9E,MAAI,CAAC,eAAe,IAAI;AACtB,WAAO,aAAa,KAAK,EAAE,OAAO,eAAe,MAAM,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC3E;AAGA,MAAI,cAAuC,CAAC;AAC5C,MAAI,qBAAoD;AACxD,MAAI;AACF,yBAAqB,UAAU,QAAQ,+BAA+B;AAAA,EACxE,QAAQ;AACN,yBAAqB;AAAA,EACvB;AACA,MAAI,QAAQ,kBAAkB,oBAAoB;AAChD,kBACG,MAAM,mBACJ,QAAQ,WAAW,QAAQ,WAAW,IAAI;AAAA,MACzC,UAAU,KAAK;AAAA,MACf,gBAAgB;AAAA,MAChB,QAAQ,QAAQ,UAAU;AAAA,IAC5B,CAAC,EACA,MAAM,MAAM,IAAI,KAAM,CAAC;AAAA,EAC9B;AACA,QAAM,kBAAkB;AAAA,IACtB,UAAU,KAAK;AAAA,IACf,gBAAgB;AAAA,IAChB,QAAQ,QAAQ,UAAU;AAAA,EAC5B;AACA,QAAM,YAAY,MAAM;AAAA,IACtB;AAAA,MACE;AAAA,MACA,WAAW,QAAQ;AAAA,MACnB;AAAA,MACA,OAAO;AAAA,IACT;AAAA,IACA,EAAE,mBAAmB;AAAA,EACvB;AACA,gBAAc,UAAU;AAExB,MAAI;AACF,UAAM,YAAY,MAAM,QAAQ,gBAAgB;AAAA,MAC9C,MAAM,KAAK,QAAQ;AAAA,MACnB,YAAY;AAAA,IACd,CAAC;AACD,UAAM,SAAS,MAAM,QAAQ,YAAY;AAAA,MACvC,SAAS,UAAU;AAAA,MACnB;AAAA,MACA,OAAO;AAAA,QACL,UAAU,KAAK;AAAA,QACf,gBAAgB;AAAA,MAClB;AAAA,MACA,UAAU,EAAE,IAAI,KAAK,IAAI,SAAS,KAAK,WAAW,aAAa,UAAU,KAAK;AAAA,IAChF,CAAC;AACD,UAAM,MAAM,aAAa;AACzB,WAAO,aAAa,KAAK;AAAA,MACvB,QAAQ,OAAO;AAAA,MACf,mBAAmB,OAAO;AAAA,MAC1B,eAAe,OAAO,SAAS;AAAA,IACjC,CAAC;AAAA,EACH,SAAS,KAAK;AACZ,UAAM,UAAU,eAAe,QAAQ,IAAI,UAAU;AACrD,WAAO,aAAa,KAAK,EAAE,QAAQ,UAAU,OAAO,QAAQ,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAChF;AACF;AAEO,MAAM,UAAU;AAAA,EACrB,MAAM,CAAC,uBAAuB;AAAA,EAC9B,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,MAAM,CAAC,uBAAuB;AAAA,MAC9B,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,mBAAmB;AAAA,QAC/C,EAAE,QAAQ,KAAK,aAAa,qBAAqB;AAAA,QACjD,EAAE,QAAQ,KAAK,aAAa,eAAe;AAAA,QAC3C,EAAE,QAAQ,KAAK,aAAa,qCAAqC;AAAA,QACjE,EAAE,QAAQ,KAAK,aAAa,+BAA+B;AAAA,QAC3D,EAAE,QAAQ,KAAK,aAAa,wBAAwB;AAAA,QACpD,EAAE,QAAQ,KAAK,aAAa,uBAAuB;AAAA,QACnD,EAAE,QAAQ,KAAK,aAAa,iBAAiB;AAAA,MAC/C;AAAA,IACF;AAAA,EACF;AACF;AACA,IAAO,gBAAQ;",
   "names": []
 }

package/dist/modules/communication_channels/api/post/test-seed/route.js

@@ -16,10 +16,14 @@ import {
 } from "../../../commands/connect-credential-channel.js";
 import { emitCommunicationChannelsEvent } from "../../../events.js";
 import {
+  TEST_SEED_CHAT_PROVIDER_KEY,
   TEST_SEED_PROVIDER_KEY,
   ensureTestSeedAdapterRegistered,
   isTestChannelSeedingEnabled
 } from "../../../lib/test-seed.js";
+import {
+  COMMUNICATION_CHANNELS_INGEST_INBOUND_COMMAND_ID
+} from "../../../commands/ingest-inbound-message.js";
 const metadata = {
   path: "/communication_channels/test-seed",
   POST: {
@@ -36,7 +40,24 @@ const addressFieldSchema = z.union([
 const connectChannelSchema = z.object({
   action: z.literal("connect-channel"),
   displayName: z.string().min(1).max(255).optional(),
-  externalIdentifier: z.string().min(1).max(255).optional()
+  externalIdentifier: z.string().min(1).max(255).optional(),
+  /**
+   * Which stub provider to connect. `email` (default) keeps the historical
+   * email-shaped channel; `chat` connects a channel whose senders have no
+   * address, so a test can exercise the hub's non-email identity contract
+   * without inventing one (#4975).
+   */
+  providerFlavor: z.enum(["email", "chat"]).optional()
+});
+const ingestInboundSchema = z.object({
+  action: z.literal("ingest-inbound"),
+  channelId: z.string().uuid(),
+  /** Opaque sender handle — a Discord snowflake, a Slack member id, etc. */
+  senderIdentifier: z.string().min(1).max(255),
+  senderDisplayName: z.string().max(255).optional(),
+  body: z.string().max(5e4).optional(),
+  externalMessageId: z.string().min(1).max(255),
+  externalConversationId: z.string().min(1).max(255)
 });
 const emitInboundSchema = z.object({
   action: z.literal("emit-inbound"),
@@ -70,7 +91,11 @@ const emitInboundSchema = z.object({
    */
   createThreadMapping: z.boolean().optional()
 });
-const bodySchema = z.discriminatedUnion("action", [connectChannelSchema, emitInboundSchema]);
+const bodySchema = z.discriminatedUnion("action", [
+  connectChannelSchema,
+  ingestInboundSchema,
+  emitInboundSchema
+]);
 async function POST(req) {
   if (!isTestChannelSeedingEnabled()) {
     return NextResponse.json({ error: "Not found" }, { status: 404 });
@@ -96,13 +121,15 @@ async function POST(req) {
   if (body.action === "connect-channel") {
     const stamp = Date.now();
     const commandBus = container.resolve("commandBus");
+    const isChatFlavor = body.providerFlavor === "chat";
+    const credentials = isChatFlavor ? { handle: body.externalIdentifier ?? `test-seed-chat-${stamp}` } : {
+      username: body.externalIdentifier ?? `test-seed-${stamp}@test-seed.local`,
+      fromAddress: body.externalIdentifier ?? `test-seed-${stamp}@test-seed.local`
+    };
     const input = {
-      providerKey: TEST_SEED_PROVIDER_KEY,
-      displayName: body.displayName ?? `Test Seed Channel ${stamp}`,
-      credentials: {
-        username: body.externalIdentifier ?? `test-seed-${stamp}@test-seed.local`,
-        fromAddress: body.externalIdentifier ?? `test-seed-${stamp}@test-seed.local`
-      },
+      providerKey: isChatFlavor ? TEST_SEED_CHAT_PROVIDER_KEY : TEST_SEED_PROVIDER_KEY,
+      displayName: body.displayName ?? `Test Seed ${isChatFlavor ? "Chat " : ""}Channel ${stamp}`,
+      credentials,
       userId,
       scope: { tenantId, organizationId }
     };
@@ -128,7 +155,7 @@ async function POST(req) {
     );
   }
   const em = container.resolve("em").fork();
-  const providerKey = body.providerKey ?? TEST_SEED_PROVIDER_KEY;
+  const providerKey = body.action === "emit-inbound" ? body.providerKey ?? TEST_SEED_PROVIDER_KEY : TEST_SEED_PROVIDER_KEY;
   const ownedChannel = await findOneWithDecryption(
     em,
     CommunicationChannel,
@@ -169,6 +196,64 @@ async function POST(req) {
       { status }
     );
   }
+  if (body.action === "ingest-inbound") {
+    const channelProviderKey = ownedChannel.providerKey;
+    if (channelProviderKey !== TEST_SEED_CHAT_PROVIDER_KEY) {
+      return NextResponse.json(
+        {
+          error: `ingest-inbound requires a channel connected with providerFlavor: "chat"; channel ${body.channelId} is '${channelProviderKey}'`
+        },
+        { status: 422 }
+      );
+    }
+    const commandBus = container.resolve("commandBus");
+    const adapterRegistry = container.resolve("channelAdapterRegistry");
+    const adapter = adapterRegistry.get(channelProviderKey);
+    if (!adapter) {
+      return NextResponse.json(
+        { error: "[internal] test-seed chat adapter is not registered" },
+        { status: 500 }
+      );
+    }
+    const normalized = await adapter.normalizeInbound({
+      raw: {
+        externalMessageId: body.externalMessageId,
+        externalConversationId: body.externalConversationId,
+        senderIdentifier: body.senderIdentifier,
+        senderDisplayName: body.senderDisplayName,
+        body: body.body ?? ""
+      },
+      eventType: "message",
+      metadata: {}
+    });
+    const ingestInput = {
+      channelId: body.channelId,
+      providerKey: channelProviderKey,
+      channelType: ownedChannel.channelType,
+      scope: { tenantId, organizationId },
+      message: normalized
+    };
+    const { result } = await commandBus.execute(COMMUNICATION_CHANNELS_INGEST_INBOUND_COMMAND_ID, {
+      input: ingestInput,
+      ctx: {
+        container,
+        auth,
+        organizationScope: null,
+        selectedOrganizationId: organizationId,
+        organizationIds: organizationId ? [organizationId] : null
+      }
+    });
+    return NextResponse.json(
+      {
+        status: result.status,
+        messageId: result.messageId ?? null,
+        conversationId: result.externalConversationId ?? null,
+        channelLinkId: result.channelLinkId ?? null,
+        channelType: ownedChannel.channelType
+      },
+      { status: 201 }
+    );
+  }
   const conversation = em.create(ExternalConversation, {
     channelId: body.channelId,
     externalConversationId: `inbound-seed:${Date.now()}:${Math.random().toString(16).slice(2, 8)}`,
@@ -263,7 +348,7 @@ const openApi = {
   tags: ["CommunicationChannels"],
   methods: {
     POST: {
-      summary: "Test-only: seed a connected channel or emit an inbound message (env-gated)",
+      summary: "Test-only: seed a connected channel, ingest a real inbound message, or emit a seeded inbound link (env-gated)",
       tags: ["CommunicationChannels"],
       responses: [
         { status: 201, description: "Channel seeded / inbound message emitted" },

package/dist/modules/communication_channels/api/post/test-seed/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../src/modules/communication_channels/api/post/test-seed/route.ts"],
-  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport type { CommandBus } from '@open-mercato/shared/lib/commands'\nimport { readJsonSafe } from '@open-mercato/shared/lib/http/readJsonSafe'\nimport { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport {\n  ChannelThreadMapping,\n  CommunicationChannel,\n  ExternalConversation,\n  MessageChannelLink,\n} from '../../../data/entities'\nimport { ChannelAccessDeniedError, assertCanManageChannel } from '../../../lib/access-control'\nimport {\n  COMMUNICATION_CHANNELS_CONNECT_CREDENTIAL_CHANNEL_COMMAND_ID,\n  type ConnectCredentialChannelInput,\n  type ConnectCredentialChannelResult,\n} from '../../../commands/connect-credential-channel'\nimport { emitCommunicationChannelsEvent } from '../../../events'\nimport {\n  TEST_SEED_PROVIDER_KEY,\n  ensureTestSeedAdapterRegistered,\n  isTestChannelSeedingEnabled,\n} from '../../../lib/test-seed'\n\n/**\n * TEST-ONLY channel seeding endpoint.\n *\n * Gated by `OM_ENABLE_TEST_CHANNEL_SEEDING` \u2014 when the flag is unset (the\n * production default) every request returns 404, so this route is invisible and\n * inert in production. See `lib/test-seed.ts` for the full rationale.\n *\n * Two actions, both scoped to the caller's tenant/org:\n *   - `connect-channel`: connect a network-free `__test_seed__` channel owned by\n *     the caller (delegates to the real connect-credential command so the channel\n *     persists credentials + lands in `status='connected'`). Enables the outbound\n *     compose \u2192 deliver \u2192 `.sent` chain to complete in CI.\n *   - `emit-inbound`: insert an inbound `MessageChannelLink` (+ a `messages.message`\n *     row for threading) and emit `communication_channels.message.received` so the\n *     customers link-channel-message subscriber runs against real Postgres. Enables\n *     the inbound auto-link tests (TC-CRM-EMAIL-002..005).\n */\ntype RbacServiceLike = {\n  loadAcl: (\n    userId: string,\n    scope: { tenantId: string | null; organizationId: string | null },\n  ) => Promise<{ isSuperAdmin: boolean; features: string[]; organizations: string[] | null }>\n}\n\nexport const metadata = {\n  path: '/communication_channels/test-seed',\n  POST: {\n    requireAuth: true,\n    requireFeatures: ['communication_channels.connect_user_channel'],\n  },\n}\n\nconst addressObjectSchema = z.object({ address: z.string(), name: z.string().optional() })\nconst addressFieldSchema = z.union([\n  z.string(),\n  addressObjectSchema,\n  z.array(z.union([z.string(), addressObjectSchema])),\n])\n\nconst connectChannelSchema = z.object({\n  action: z.literal('connect-channel'),\n  displayName: z.string().min(1).max(255).optional(),\n  externalIdentifier: z.string().min(1).max(255).optional(),\n})\n\nconst emitInboundSchema = z.object({\n  action: z.literal('emit-inbound'),\n  /** Channel that owns the inbound message; controls authorUserId + default visibility. */\n  channelId: z.string().uuid(),\n  /** Provider key persisted on the link (defaults to the stub provider). */\n  providerKey: z.string().min(1).max(64).optional(),\n  /** Normalized inbound addresses (stored under channelPayload). */\n  from: addressFieldSchema.optional(),\n  to: addressFieldSchema.optional(),\n  cc: addressFieldSchema.optional(),\n  subject: z.string().max(500).optional(),\n  bodyText: z.string().max(200_000).optional(),\n  /** RFC2822 Message-ID of this inbound message (for In-Reply-To matching). */\n  messageId: z.string().max(500).optional(),\n  /** RFC2822 In-Reply-To header (threading-inheritance fallback). */\n  inReplyTo: z.string().max(500).optional(),\n  references: z.array(z.string().max(500)).max(50).optional(),\n  /**\n   * Open Mercato `messages.message` thread id this inbound message belongs to.\n   * When set, a `messages.message` row is created with this `threadId` so the\n   * hub-thread inheritance join can resolve a Person from a sibling message.\n   */\n  messageThreadId: z.string().uuid().optional(),\n  /**\n   * Test-only: also create a `ChannelThreadMapping` for the seeded thread. The\n   * reaction (`/messages/[id]/reactions`) and thread-assign\n   * (`/threads/[id]/assign`) routes resolve the owning channel through this\n   * mapping and return 409/404 without it. Opt-in so the existing CRM-link\n   * seeds (which don't need a mapping) keep their current mapping-free shape.\n   */\n  createThreadMapping: z.boolean().optional(),\n})\n\nconst bodySchema = z.discriminatedUnion('action', [connectChannelSchema, emitInboundSchema])\n\nexport async function POST(req: Request): Promise<Response> {\n  // Fail-closed: invisible in production. Mirrors an unknown route (404) rather\n  // than 403 so the surface leaks nothing when the flag is off.\n  if (!isTestChannelSeedingEnabled()) {\n    return NextResponse.json({ error: 'Not found' }, { status: 404 })\n  }\n\n  const auth = await getAuthFromRequest(req)\n  if (!auth?.sub || !auth?.tenantId) {\n    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n  }\n\n  let body: z.infer<typeof bodySchema>\n  try {\n    body = bodySchema.parse(await readJsonSafe(req, null))\n  } catch (err) {\n    return NextResponse.json(\n      { error: err instanceof Error ? err.message : 'Invalid request body' },\n      { status: 422 },\n    )\n  }\n\n  const container = await createRequestContainer()\n  // Defensive: make sure the stub adapter is registered for this process even if\n  // a worker-only node skipped module di registration.\n  ensureTestSeedAdapterRegistered()\n\n  const tenantId = auth.tenantId as string\n  const organizationId = (auth as { orgId?: string | null }).orgId ?? null\n  const userId = auth.sub as string\n\n  if (body.action === 'connect-channel') {\n    const stamp = Date.now()\n    const commandBus = container.resolve('commandBus') as CommandBus\n    const input: ConnectCredentialChannelInput = {\n      providerKey: TEST_SEED_PROVIDER_KEY,\n      displayName: body.displayName ?? `Test Seed Channel ${stamp}`,\n      credentials: {\n        username: body.externalIdentifier ?? `test-seed-${stamp}@test-seed.local`,\n        fromAddress: body.externalIdentifier ?? `test-seed-${stamp}@test-seed.local`,\n      },\n      userId,\n      scope: { tenantId, organizationId },\n    }\n    const { result } = await commandBus.execute<\n      ConnectCredentialChannelInput,\n      ConnectCredentialChannelResult\n    >(COMMUNICATION_CHANNELS_CONNECT_CREDENTIAL_CHANNEL_COMMAND_ID, {\n      input,\n      ctx: {\n        container,\n        auth: auth as never,\n        organizationScope: null,\n        selectedOrganizationId: organizationId,\n        organizationIds: organizationId ? [organizationId] : null,\n      },\n    })\n    if (result.status !== 'connected') {\n      return NextResponse.json(\n        { error: '[internal] test-seed connect failed', detail: result },\n        { status: 500 },\n      )\n    }\n    return NextResponse.json(\n      { channelId: result.channelId, externalIdentifier: result.externalIdentifier },\n      { status: 201 },\n    )\n  }\n\n  // action === 'emit-inbound'\n  const em = (container.resolve('em') as EntityManager).fork()\n  const providerKey = body.providerKey ?? TEST_SEED_PROVIDER_KEY\n\n  // `channelId` is caller-supplied, so confirm it names a channel this tenant/org\n  // actually owns before seeding rows that reference it. Mirrors the ownership\n  // lookup every other per-channel route performs (see channels/[id]/test-send).\n  const ownedChannel = await findOneWithDecryption(\n    em,\n    CommunicationChannel,\n    {\n      id: body.channelId,\n      tenantId,\n      organizationId,\n      deletedAt: null,\n    },\n    undefined,\n    { tenantId, organizationId },\n  )\n  if (!ownedChannel) {\n    return NextResponse.json({ error: 'Channel not found' }, { status: 404 })\n  }\n\n  // Tenant/org scope alone does not authorize: `connect_user_channel` is granted\n  // broadly, so a same-tenant caller could otherwise seed against a colleague's\n  // personal mailbox. Enforce the module's owner-only contract \u2014 personal\n  // channels are owner-restricted, shared channels need `manage`.\n  let userFeatures: string[] = []\n  try {\n    const rbac = container.resolve('rbacService') as RbacServiceLike\n    const acl = await rbac.loadAcl(userId, { tenantId, organizationId })\n    userFeatures = acl?.isSuperAdmin ? ['*'] : Array.isArray(acl?.features) ? acl.features : []\n  } catch {\n    userFeatures = []\n  }\n  try {\n    assertCanManageChannel(\n      { userId: ownedChannel.userId },\n      userId,\n      userFeatures,\n      'communication_channels.manage',\n    )\n  } catch (err) {\n    if (err instanceof ChannelAccessDeniedError) {\n      return NextResponse.json({ error: 'Channel not found' }, { status: 404 })\n    }\n    const status = (err as { statusCode?: number }).statusCode ?? 403\n    return NextResponse.json(\n      { error: err instanceof Error ? err.message : 'Access denied' },\n      { status },\n    )\n  }\n\n  // A MessageChannelLink requires a non-null external_conversation_id (FK) and\n  // message_id. Create a synthetic conversation + (optionally threaded) message\n  // so the link is shaped like a real inbound row the subscriber can consume.\n  const conversation = em.create(ExternalConversation, {\n    channelId: body.channelId,\n    externalConversationId: `inbound-seed:${Date.now()}:${Math.random().toString(16).slice(2, 8)}`,\n    subject: body.subject ?? null,\n    tenantId,\n    organizationId,\n    lastMessageAt: new Date(),\n  })\n  em.persist(conversation)\n  await em.flush()\n\n  // Insert the platform `messages.message` row via raw SQL rather than importing\n  // the messages module's entity class (cross-module ORM coupling rule). Only\n  // `thread_id` matters for the hub-thread inheritance join (TC-CRM-EMAIL-005);\n  // the rest satisfy NOT NULL constraints.\n  const messageRows = (await em.getConnection().execute(\n    `INSERT INTO messages\n       (type, thread_id, sender_user_id, subject, body, body_format, priority, status,\n        is_draft, sent_at, visibility, source_entity_type, source_entity_id,\n        tenant_id, organization_id, created_at, updated_at)\n     VALUES\n       (?, ?, ?, ?, ?, 'text', 'normal', 'sent',\n        false, now(), 'public', 'communication_channels.test_seed_inbound', ?,\n        ?, ?, now(), now())\n     RETURNING id`,\n    [\n      `channel.${providerKey}`,\n      body.messageThreadId ?? null,\n      userId,\n      body.subject ?? '(no subject)',\n      body.bodyText ?? '',\n      body.channelId,\n      tenantId,\n      organizationId,\n    ],\n  )) as Array<{ id: string }>\n  const messageId = messageRows[0]?.id\n  if (!messageId) {\n    return NextResponse.json({ error: '[internal] failed to seed message row' }, { status: 500 })\n  }\n\n  const link = em.create(MessageChannelLink, {\n    messageId,\n    externalConversationId: conversation.id,\n    providerKey,\n    channelType: 'email',\n    direction: 'inbound',\n    deliveryStatus: 'delivered',\n    channelPayload: {\n      ...(body.from !== undefined ? { from: body.from } : {}),\n      ...(body.to !== undefined ? { to: body.to } : {}),\n      ...(body.cc !== undefined ? { cc: body.cc } : {}),\n      ...(body.subject !== undefined ? { subject: body.subject } : {}),\n      ...(body.bodyText !== undefined ? { text: body.bodyText } : {}),\n      ...(body.inReplyTo !== undefined ? { inReplyTo: body.inReplyTo } : {}),\n      ...(body.references !== undefined ? { references: body.references } : {}),\n    },\n    channelContentType: 'text/plain',\n    channelMetadata: {\n      ...(body.messageId !== undefined ? { messageId: body.messageId } : {}),\n    },\n    tenantId,\n    organizationId,\n  })\n  em.persist(link)\n  await em.flush()\n\n  // Optionally mirror `ingest-inbound-message`: a real inbound message always\n  // lands a ChannelThreadMapping that the reaction + thread-assign routes use to\n  // resolve the owning channel. Seeded inbound messages skip it by default; opt\n  // in for tests that exercise those routes. Keyed by `messageThreadId ?? messageId`\n  // to match how those commands resolve the mapping (`message.threadId ?? message.id`).\n  if (body.createThreadMapping) {\n    const mapping = em.create(ChannelThreadMapping, {\n      externalConversationId: conversation.id,\n      messageThreadId: body.messageThreadId ?? messageId,\n      channelId: body.channelId,\n      providerKey,\n      externalThreadRef: conversation.externalConversationId,\n      tenantId,\n      organizationId,\n    })\n    em.persist(mapping)\n    await em.flush()\n  }\n\n  // Emit the hub event through the real event bus so the persistent customers\n  // link-channel-message-received subscriber is enqueued to the `events` queue.\n  await emitCommunicationChannelsEvent(\n    'communication_channels.message.received',\n    {\n      channelLinkId: link.id,\n      channelId: body.channelId,\n      providerKey,\n      direction: 'inbound',\n      tenantId,\n      organizationId,\n    },\n    { persistent: true },\n  )\n\n  return NextResponse.json(\n    { channelLinkId: link.id, messageId, conversationId: conversation.id },\n    { status: 201 },\n  )\n}\n\nexport const openApi = {\n  tags: ['CommunicationChannels'],\n  methods: {\n    POST: {\n      summary: 'Test-only: seed a connected channel or emit an inbound message (env-gated)',\n      tags: ['CommunicationChannels'],\n      responses: [\n        { status: 201, description: 'Channel seeded / inbound message emitted' },\n        { status: 401, description: 'Unauthorized' },\n        {\n          status: 404,\n          description:\n            'Test channel seeding disabled (production default), or the requested channel does not belong to the caller',\n        },\n        { status: 422, description: 'Invalid request body' },\n        { status: 500, description: 'Seed failed' },\n      ],\n    },\n  },\n}\n\nexport default POST\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAElB,SAAS,0BAA0B;AACnC,SAAS,8BAA8B;AAEvC,SAAS,oBAAoB;AAC7B,SAAS,6BAA6B;AACtC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,0BAA0B,8BAA8B;AACjE;AAAA,EACE;AAAA,OAGK;AACP,SAAS,sCAAsC;AAC/C;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AA0BA,MAAM,WAAW;AAAA,EACtB,MAAM;AAAA,EACN,MAAM;AAAA,IACJ,aAAa;AAAA,IACb,iBAAiB,CAAC,6CAA6C;AAAA,EACjE;AACF;AAEA,MAAM,sBAAsB,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,GAAG,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;AACzF,MAAM,qBAAqB,EAAE,MAAM;AAAA,EACjC,EAAE,OAAO;AAAA,EACT;AAAA,EACA,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,OAAO,GAAG,mBAAmB,CAAC,CAAC;AACpD,CAAC;AAED,MAAM,uBAAuB,EAAE,OAAO;AAAA,EACpC,QAAQ,EAAE,QAAQ,iBAAiB;AAAA,EACnC,aAAa,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EACjD,oBAAoB,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,SAAS;AAC1D,CAAC;AAED,MAAM,oBAAoB,EAAE,OAAO;AAAA,EACjC,QAAQ,EAAE,QAAQ,cAAc;AAAA;AAAA,EAEhC,WAAW,EAAE,OAAO,EAAE,KAAK;AAAA;AAAA,EAE3B,aAAa,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,SAAS;AAAA;AAAA,EAEhD,MAAM,mBAAmB,SAAS;AAAA,EAClC,IAAI,mBAAmB,SAAS;AAAA,EAChC,IAAI,mBAAmB,SAAS;AAAA,EAChC,SAAS,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EACtC,UAAU,EAAE,OAAO,EAAE,IAAI,GAAO,EAAE,SAAS;AAAA;AAAA,EAE3C,WAAW,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA;AAAA,EAExC,WAAW,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EACxC,YAAY,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,GAAG,CAAC,EAAE,IAAI,EAAE,EAAE,SAAS;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAM1D,iBAAiB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQ5C,qBAAqB,EAAE,QAAQ,EAAE,SAAS;AAC5C,CAAC;AAED,MAAM,aAAa,EAAE,mBAAmB,UAAU,CAAC,sBAAsB,iBAAiB,CAAC;AAE3F,eAAsB,KAAK,KAAiC;AAG1D,MAAI,CAAC,4BAA4B,GAAG;AAClC,WAAO,aAAa,KAAK,EAAE,OAAO,YAAY,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAClE;AAEA,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM,OAAO,CAAC,MAAM,UAAU;AACjC,WAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrE;AAEA,MAAI;AACJ,MAAI;AACF,WAAO,WAAW,MAAM,MAAM,aAAa,KAAK,IAAI,CAAC;AAAA,EACvD,SAAS,KAAK;AACZ,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,eAAe,QAAQ,IAAI,UAAU,uBAAuB;AAAA,MACrE,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAG/C,kCAAgC;AAEhC,QAAM,WAAW,KAAK;AACtB,QAAM,iBAAkB,KAAmC,SAAS;AACpE,QAAM,SAAS,KAAK;AAEpB,MAAI,KAAK,WAAW,mBAAmB;AACrC,UAAM,QAAQ,KAAK,IAAI;AACvB,UAAM,aAAa,UAAU,QAAQ,YAAY;AACjD,UAAM,QAAuC;AAAA,MAC3C,aAAa;AAAA,MACb,aAAa,KAAK,eAAe,qBAAqB,KAAK;AAAA,MAC3D,aAAa;AAAA,QACX,UAAU,KAAK,sBAAsB,aAAa,KAAK;AAAA,QACvD,aAAa,KAAK,sBAAsB,aAAa,KAAK;AAAA,MAC5D;AAAA,MACA;AAAA,MACA,OAAO,EAAE,UAAU,eAAe;AAAA,IACpC;AACA,UAAM,EAAE,OAAO,IAAI,MAAM,WAAW,QAGlC,8DAA8D;AAAA,MAC9D;AAAA,MACA,KAAK;AAAA,QACH;AAAA,QACA;AAAA,QACA,mBAAmB;AAAA,QACnB,wBAAwB;AAAA,QACxB,iBAAiB,iBAAiB,CAAC,cAAc,IAAI;AAAA,MACvD;AAAA,IACF,CAAC;AACD,QAAI,OAAO,WAAW,aAAa;AACjC,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,uCAAuC,QAAQ,OAAO;AAAA,QAC/D,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AACA,WAAO,aAAa;AAAA,MAClB,EAAE,WAAW,OAAO,WAAW,oBAAoB,OAAO,mBAAmB;AAAA,MAC7E,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AAGA,QAAM,KAAM,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC3D,QAAM,cAAc,KAAK,eAAe;AAKxC,QAAM,eAAe,MAAM;AAAA,IACzB;AAAA,IACA;AAAA,IACA;AAAA,MACE,IAAI,KAAK;AAAA,MACT;AAAA,MACA;AAAA,MACA,WAAW;AAAA,IACb;AAAA,IACA;AAAA,IACA,EAAE,UAAU,eAAe;AAAA,EAC7B;AACA,MAAI,CAAC,cAAc;AACjB,WAAO,aAAa,KAAK,EAAE,OAAO,oBAAoB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC1E;AAMA,MAAI,eAAyB,CAAC;AAC9B,MAAI;AACF,UAAM,OAAO,UAAU,QAAQ,aAAa;AAC5C,UAAM,MAAM,MAAM,KAAK,QAAQ,QAAQ,EAAE,UAAU,eAAe,CAAC;AACnE,mBAAe,KAAK,eAAe,CAAC,GAAG,IAAI,MAAM,QAAQ,KAAK,QAAQ,IAAI,IAAI,WAAW,CAAC;AAAA,EAC5F,QAAQ;AACN,mBAAe,CAAC;AAAA,EAClB;AACA,MAAI;AACF;AAAA,MACE,EAAE,QAAQ,aAAa,OAAO;AAAA,MAC9B;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF,SAAS,KAAK;AACZ,QAAI,eAAe,0BAA0B;AAC3C,aAAO,aAAa,KAAK,EAAE,OAAO,oBAAoB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC1E;AACA,UAAM,SAAU,IAAgC,cAAc;AAC9D,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,eAAe,QAAQ,IAAI,UAAU,gBAAgB;AAAA,MAC9D,EAAE,OAAO;AAAA,IACX;AAAA,EACF;AAKA,QAAM,eAAe,GAAG,OAAO,sBAAsB;AAAA,IACnD,WAAW,KAAK;AAAA,IAChB,wBAAwB,gBAAgB,KAAK,IAAI,CAAC,IAAI,KAAK,OAAO,EAAE,SAAS,EAAE,EAAE,MAAM,GAAG,CAAC,CAAC;AAAA,IAC5F,SAAS,KAAK,WAAW;AAAA,IACzB;AAAA,IACA;AAAA,IACA,eAAe,oBAAI,KAAK;AAAA,EAC1B,CAAC;AACD,KAAG,QAAQ,YAAY;AACvB,QAAM,GAAG,MAAM;AAMf,QAAM,cAAe,MAAM,GAAG,cAAc,EAAE;AAAA,IAC5C;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IASA;AAAA,MACE,WAAW,WAAW;AAAA,MACtB,KAAK,mBAAmB;AAAA,MACxB;AAAA,MACA,KAAK,WAAW;AAAA,MAChB,KAAK,YAAY;AAAA,MACjB,KAAK;AAAA,MACL;AAAA,MACA;AAAA,IACF;AAAA,EACF;AACA,QAAM,YAAY,YAAY,CAAC,GAAG;AAClC,MAAI,CAAC,WAAW;AACd,WAAO,aAAa,KAAK,EAAE,OAAO,wCAAwC,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC9F;AAEA,QAAM,OAAO,GAAG,OAAO,oBAAoB;AAAA,IACzC;AAAA,IACA,wBAAwB,aAAa;AAAA,IACrC;AAAA,IACA,aAAa;AAAA,IACb,WAAW;AAAA,IACX,gBAAgB;AAAA,IAChB,gBAAgB;AAAA,MACd,GAAI,KAAK,SAAS,SAAY,EAAE,MAAM,KAAK,KAAK,IAAI,CAAC;AAAA,MACrD,GAAI,KAAK,OAAO,SAAY,EAAE,IAAI,KAAK,GAAG,IAAI,CAAC;AAAA,MAC/C,GAAI,KAAK,OAAO,SAAY,EAAE,IAAI,KAAK,GAAG,IAAI,CAAC;AAAA,MAC/C,GAAI,KAAK,YAAY,SAAY,EAAE,SAAS,KAAK,QAAQ,IAAI,CAAC;AAAA,MAC9D,GAAI,KAAK,aAAa,SAAY,EAAE,MAAM,KAAK,SAAS,IAAI,CAAC;AAAA,MAC7D,GAAI,KAAK,cAAc,SAAY,EAAE,WAAW,KAAK,UAAU,IAAI,CAAC;AAAA,MACpE,GAAI,KAAK,eAAe,SAAY,EAAE,YAAY,KAAK,WAAW,IAAI,CAAC;AAAA,IACzE;AAAA,IACA,oBAAoB;AAAA,IACpB,iBAAiB;AAAA,MACf,GAAI,KAAK,cAAc,SAAY,EAAE,WAAW,KAAK,UAAU,IAAI,CAAC;AAAA,IACtE;AAAA,IACA;AAAA,IACA;AAAA,EACF,CAAC;AACD,KAAG,QAAQ,IAAI;AACf,QAAM,GAAG,MAAM;AAOf,MAAI,KAAK,qBAAqB;AAC5B,UAAM,UAAU,GAAG,OAAO,sBAAsB;AAAA,MAC9C,wBAAwB,aAAa;AAAA,MACrC,iBAAiB,KAAK,mBAAmB;AAAA,MACzC,WAAW,KAAK;AAAA,MAChB;AAAA,MACA,mBAAmB,aAAa;AAAA,MAChC;AAAA,MACA;AAAA,IACF,CAAC;AACD,OAAG,QAAQ,OAAO;AAClB,UAAM,GAAG,MAAM;AAAA,EACjB;AAIA,QAAM;AAAA,IACJ;AAAA,IACA;AAAA,MACE,eAAe,KAAK;AAAA,MACpB,WAAW,KAAK;AAAA,MAChB;AAAA,MACA,WAAW;AAAA,MACX;AAAA,MACA;AAAA,IACF;AAAA,IACA,EAAE,YAAY,KAAK;AAAA,EACrB;AAEA,SAAO,aAAa;AAAA,IAClB,EAAE,eAAe,KAAK,IAAI,WAAW,gBAAgB,aAAa,GAAG;AAAA,IACrE,EAAE,QAAQ,IAAI;AAAA,EAChB;AACF;AAEO,MAAM,UAAU;AAAA,EACrB,MAAM,CAAC,uBAAuB;AAAA,EAC9B,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,MAAM,CAAC,uBAAuB;AAAA,MAC9B,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,2CAA2C;AAAA,QACvE,EAAE,QAAQ,KAAK,aAAa,eAAe;AAAA,QAC3C;AAAA,UACE,QAAQ;AAAA,UACR,aACE;AAAA,QACJ;AAAA,QACA,EAAE,QAAQ,KAAK,aAAa,uBAAuB;AAAA,QACnD,EAAE,QAAQ,KAAK,aAAa,cAAc;AAAA,MAC5C;AAAA,IACF;AAAA,EACF;AACF;AAEA,IAAO,gBAAQ;",
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport type { CommandBus } from '@open-mercato/shared/lib/commands'\nimport { readJsonSafe } from '@open-mercato/shared/lib/http/readJsonSafe'\nimport { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport {\n  ChannelThreadMapping,\n  CommunicationChannel,\n  ExternalConversation,\n  MessageChannelLink,\n} from '../../../data/entities'\nimport { ChannelAccessDeniedError, assertCanManageChannel } from '../../../lib/access-control'\nimport {\n  COMMUNICATION_CHANNELS_CONNECT_CREDENTIAL_CHANNEL_COMMAND_ID,\n  type ConnectCredentialChannelInput,\n  type ConnectCredentialChannelResult,\n} from '../../../commands/connect-credential-channel'\nimport { emitCommunicationChannelsEvent } from '../../../events'\nimport {\n  TEST_SEED_CHAT_PROVIDER_KEY,\n  TEST_SEED_PROVIDER_KEY,\n  ensureTestSeedAdapterRegistered,\n  isTestChannelSeedingEnabled,\n} from '../../../lib/test-seed'\nimport {\n  COMMUNICATION_CHANNELS_INGEST_INBOUND_COMMAND_ID,\n  type IngestInboundMessageInput,\n  type IngestInboundMessageResult,\n} from '../../../commands/ingest-inbound-message'\n\n/**\n * TEST-ONLY channel seeding endpoint.\n *\n * Gated by `OM_ENABLE_TEST_CHANNEL_SEEDING` \u2014 when the flag is unset (the\n * production default) every request returns 404, so this route is invisible and\n * inert in production. See `lib/test-seed.ts` for the full rationale.\n *\n * Three actions, all scoped to the caller's tenant/org:\n *   - `connect-channel`: connect a network-free stub channel owned by the caller\n *     (delegates to the real connect-credential command so the channel persists\n *     credentials + lands in `status='connected'`). Enables the outbound\n *     compose \u2192 deliver \u2192 `.sent` chain to complete in CI. `providerFlavor: 'chat'`\n *     connects the non-email stub instead, for tests about sender identity.\n *   - `ingest-inbound`: run the REAL `ingest_inbound_message` command over an\n *     adapter-normalized chat frame, so the platform compose path \u2014 and every\n *     validation rule on it \u2014 actually executes. Use this for anything that\n *     claims inbound works.\n *   - `emit-inbound`: insert an inbound `MessageChannelLink` (+ a `messages.message`\n *     row for threading) and emit `communication_channels.message.received` so the\n *     customers link-channel-message subscriber runs against real Postgres. Enables\n *     the inbound auto-link tests (TC-CRM-EMAIL-002..005). NOTE: this action\n *     deliberately bypasses `messages.messages.compose` \u2014 it can never prove that\n *     the hub accepts a message, only that downstream subscribers fire.\n */\ntype RbacServiceLike = {\n  loadAcl: (\n    userId: string,\n    scope: { tenantId: string | null; organizationId: string | null },\n  ) => Promise<{ isSuperAdmin: boolean; features: string[]; organizations: string[] | null }>\n}\n\nexport const metadata = {\n  path: '/communication_channels/test-seed',\n  POST: {\n    requireAuth: true,\n    requireFeatures: ['communication_channels.connect_user_channel'],\n  },\n}\n\nconst addressObjectSchema = z.object({ address: z.string(), name: z.string().optional() })\nconst addressFieldSchema = z.union([\n  z.string(),\n  addressObjectSchema,\n  z.array(z.union([z.string(), addressObjectSchema])),\n])\n\nconst connectChannelSchema = z.object({\n  action: z.literal('connect-channel'),\n  displayName: z.string().min(1).max(255).optional(),\n  externalIdentifier: z.string().min(1).max(255).optional(),\n  /**\n   * Which stub provider to connect. `email` (default) keeps the historical\n   * email-shaped channel; `chat` connects a channel whose senders have no\n   * address, so a test can exercise the hub's non-email identity contract\n   * without inventing one (#4975).\n   */\n  providerFlavor: z.enum(['email', 'chat']).optional(),\n})\n\n/**\n * Drive the REAL `ingest_inbound_message` command with a chat-shaped frame.\n *\n * `emit-inbound` below deliberately bypasses the platform compose path (it\n * inserts the `messages` row with raw SQL) because it only ever needed a\n * landing zone for the CRM-link subscribers. That bypass is why an inbound test\n * could pass while `composeMessageSchema` rejected every real message (#4975).\n * This action takes the opposite approach: it hands the frame to the adapter and\n * the ingest command and asserts nothing on the way, so whatever the hub's\n * contract really is, the test feels it.\n */\nconst ingestInboundSchema = z.object({\n  action: z.literal('ingest-inbound'),\n  channelId: z.string().uuid(),\n  /** Opaque sender handle \u2014 a Discord snowflake, a Slack member id, etc. */\n  senderIdentifier: z.string().min(1).max(255),\n  senderDisplayName: z.string().max(255).optional(),\n  body: z.string().max(50_000).optional(),\n  externalMessageId: z.string().min(1).max(255),\n  externalConversationId: z.string().min(1).max(255),\n})\n\nconst emitInboundSchema = z.object({\n  action: z.literal('emit-inbound'),\n  /** Channel that owns the inbound message; controls authorUserId + default visibility. */\n  channelId: z.string().uuid(),\n  /** Provider key persisted on the link (defaults to the stub provider). */\n  providerKey: z.string().min(1).max(64).optional(),\n  /** Normalized inbound addresses (stored under channelPayload). */\n  from: addressFieldSchema.optional(),\n  to: addressFieldSchema.optional(),\n  cc: addressFieldSchema.optional(),\n  subject: z.string().max(500).optional(),\n  bodyText: z.string().max(200_000).optional(),\n  /** RFC2822 Message-ID of this inbound message (for In-Reply-To matching). */\n  messageId: z.string().max(500).optional(),\n  /** RFC2822 In-Reply-To header (threading-inheritance fallback). */\n  inReplyTo: z.string().max(500).optional(),\n  references: z.array(z.string().max(500)).max(50).optional(),\n  /**\n   * Open Mercato `messages.message` thread id this inbound message belongs to.\n   * When set, a `messages.message` row is created with this `threadId` so the\n   * hub-thread inheritance join can resolve a Person from a sibling message.\n   */\n  messageThreadId: z.string().uuid().optional(),\n  /**\n   * Test-only: also create a `ChannelThreadMapping` for the seeded thread. The\n   * reaction (`/messages/[id]/reactions`) and thread-assign\n   * (`/threads/[id]/assign`) routes resolve the owning channel through this\n   * mapping and return 409/404 without it. Opt-in so the existing CRM-link\n   * seeds (which don't need a mapping) keep their current mapping-free shape.\n   */\n  createThreadMapping: z.boolean().optional(),\n})\n\nconst bodySchema = z.discriminatedUnion('action', [\n  connectChannelSchema,\n  ingestInboundSchema,\n  emitInboundSchema,\n])\n\nexport async function POST(req: Request): Promise<Response> {\n  // Fail-closed: invisible in production. Mirrors an unknown route (404) rather\n  // than 403 so the surface leaks nothing when the flag is off.\n  if (!isTestChannelSeedingEnabled()) {\n    return NextResponse.json({ error: 'Not found' }, { status: 404 })\n  }\n\n  const auth = await getAuthFromRequest(req)\n  if (!auth?.sub || !auth?.tenantId) {\n    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n  }\n\n  let body: z.infer<typeof bodySchema>\n  try {\n    body = bodySchema.parse(await readJsonSafe(req, null))\n  } catch (err) {\n    return NextResponse.json(\n      { error: err instanceof Error ? err.message : 'Invalid request body' },\n      { status: 422 },\n    )\n  }\n\n  const container = await createRequestContainer()\n  // Defensive: make sure the stub adapter is registered for this process even if\n  // a worker-only node skipped module di registration.\n  ensureTestSeedAdapterRegistered()\n\n  const tenantId = auth.tenantId as string\n  const organizationId = (auth as { orgId?: string | null }).orgId ?? null\n  const userId = auth.sub as string\n\n  if (body.action === 'connect-channel') {\n    const stamp = Date.now()\n    const commandBus = container.resolve('commandBus') as CommandBus\n    const isChatFlavor = body.providerFlavor === 'chat'\n    // A chat channel is deliberately connected WITHOUT an email-ish credential\n    // key, so `connect-credential-channel` derives no `externalIdentifier` and\n    // the row is shaped exactly like a real Discord channel (identifier NULL \u2014\n    // the condition #4977 describes). Inventing one here would recreate the\n    // fixture dishonesty that hid #4975.\n    const credentials = isChatFlavor\n      ? { handle: body.externalIdentifier ?? `test-seed-chat-${stamp}` }\n      : {\n          username: body.externalIdentifier ?? `test-seed-${stamp}@test-seed.local`,\n          fromAddress: body.externalIdentifier ?? `test-seed-${stamp}@test-seed.local`,\n        }\n    const input: ConnectCredentialChannelInput = {\n      providerKey: isChatFlavor ? TEST_SEED_CHAT_PROVIDER_KEY : TEST_SEED_PROVIDER_KEY,\n      displayName:\n        body.displayName ?? `Test Seed ${isChatFlavor ? 'Chat ' : ''}Channel ${stamp}`,\n      credentials,\n      userId,\n      scope: { tenantId, organizationId },\n    }\n    const { result } = await commandBus.execute<\n      ConnectCredentialChannelInput,\n      ConnectCredentialChannelResult\n    >(COMMUNICATION_CHANNELS_CONNECT_CREDENTIAL_CHANNEL_COMMAND_ID, {\n      input,\n      ctx: {\n        container,\n        auth: auth as never,\n        organizationScope: null,\n        selectedOrganizationId: organizationId,\n        organizationIds: organizationId ? [organizationId] : null,\n      },\n    })\n    if (result.status !== 'connected') {\n      return NextResponse.json(\n        { error: '[internal] test-seed connect failed', detail: result },\n        { status: 500 },\n      )\n    }\n    return NextResponse.json(\n      { channelId: result.channelId, externalIdentifier: result.externalIdentifier },\n      { status: 201 },\n    )\n  }\n\n  // action === 'ingest-inbound' | 'emit-inbound' \u2014 both address an existing channel.\n  const em = (container.resolve('em') as EntityManager).fork()\n  // Only the `emit-inbound` branch stamps a caller-chosen provider key onto the\n  // rows it seeds; `ingest-inbound` takes the channel's own (see below).\n  const providerKey =\n    body.action === 'emit-inbound' ? body.providerKey ?? TEST_SEED_PROVIDER_KEY : TEST_SEED_PROVIDER_KEY\n\n  // `channelId` is caller-supplied, so confirm it names a channel this tenant/org\n  // actually owns before seeding rows that reference it. Mirrors the ownership\n  // lookup every other per-channel route performs (see channels/[id]/test-send).\n  const ownedChannel = await findOneWithDecryption(\n    em,\n    CommunicationChannel,\n    {\n      id: body.channelId,\n      tenantId,\n      organizationId,\n      deletedAt: null,\n    },\n    undefined,\n    { tenantId, organizationId },\n  )\n  if (!ownedChannel) {\n    return NextResponse.json({ error: 'Channel not found' }, { status: 404 })\n  }\n\n  // Tenant/org scope alone does not authorize: `connect_user_channel` is granted\n  // broadly, so a same-tenant caller could otherwise seed against a colleague's\n  // personal mailbox. Enforce the module's owner-only contract \u2014 personal\n  // channels are owner-restricted, shared channels need `manage`.\n  let userFeatures: string[] = []\n  try {\n    const rbac = container.resolve('rbacService') as RbacServiceLike\n    const acl = await rbac.loadAcl(userId, { tenantId, organizationId })\n    userFeatures = acl?.isSuperAdmin ? ['*'] : Array.isArray(acl?.features) ? acl.features : []\n  } catch {\n    userFeatures = []\n  }\n  try {\n    assertCanManageChannel(\n      { userId: ownedChannel.userId },\n      userId,\n      userFeatures,\n      'communication_channels.manage',\n    )\n  } catch (err) {\n    if (err instanceof ChannelAccessDeniedError) {\n      return NextResponse.json({ error: 'Channel not found' }, { status: 404 })\n    }\n    const status = (err as { statusCode?: number }).statusCode ?? 403\n    return NextResponse.json(\n      { error: err instanceof Error ? err.message : 'Access denied' },\n      { status },\n    )\n  }\n\n  if (body.action === 'ingest-inbound') {\n    // Everything below this point is the real path: the adapter normalizes the\n    // frame and `ingest_inbound_message` composes the platform message through\n    // `messages.messages.compose`. Nothing is short-circuited, so a hub contract\n    // the provider cannot satisfy surfaces here as a failure instead of hiding\n    // behind seeded rows (#4975).\n    // The channel's own provider key, never a hardcoded one: ingest does not\n    // check that `providerKey` matches the channel it names, so passing a\n    // different one would silently stamp the wrong provider onto the link.\n    const channelProviderKey = ownedChannel.providerKey\n    if (channelProviderKey !== TEST_SEED_CHAT_PROVIDER_KEY) {\n      return NextResponse.json(\n        {\n          error:\n            'ingest-inbound requires a channel connected with providerFlavor: \"chat\"; ' +\n            `channel ${body.channelId} is '${channelProviderKey}'`,\n        },\n        { status: 422 },\n      )\n    }\n\n    const commandBus = container.resolve('commandBus') as CommandBus\n    const adapterRegistry = container.resolve('channelAdapterRegistry') as {\n      get: (key: string) => { normalizeInbound: (raw: unknown) => Promise<unknown> } | undefined\n    }\n    const adapter = adapterRegistry.get(channelProviderKey)\n    if (!adapter) {\n      return NextResponse.json(\n        { error: '[internal] test-seed chat adapter is not registered' },\n        { status: 500 },\n      )\n    }\n\n    const normalized = await adapter.normalizeInbound({\n      raw: {\n        externalMessageId: body.externalMessageId,\n        externalConversationId: body.externalConversationId,\n        senderIdentifier: body.senderIdentifier,\n        senderDisplayName: body.senderDisplayName,\n        body: body.body ?? '',\n      },\n      eventType: 'message',\n      metadata: {},\n    })\n\n    const ingestInput = {\n      channelId: body.channelId,\n      providerKey: channelProviderKey,\n      channelType: ownedChannel.channelType,\n      scope: { tenantId, organizationId },\n      message: normalized,\n    } as IngestInboundMessageInput\n\n    const { result } = await commandBus.execute<\n      IngestInboundMessageInput,\n      IngestInboundMessageResult\n    >(COMMUNICATION_CHANNELS_INGEST_INBOUND_COMMAND_ID, {\n      input: ingestInput,\n      ctx: {\n        container,\n        auth: auth as never,\n        organizationScope: null,\n        selectedOrganizationId: organizationId,\n        organizationIds: organizationId ? [organizationId] : null,\n      },\n    })\n\n    return NextResponse.json(\n      {\n        status: result.status,\n        messageId: result.messageId ?? null,\n        conversationId: result.externalConversationId ?? null,\n        channelLinkId: result.channelLinkId ?? null,\n        channelType: ownedChannel.channelType,\n      },\n      { status: 201 },\n    )\n  }\n\n  // A MessageChannelLink requires a non-null external_conversation_id (FK) and\n  // message_id. Create a synthetic conversation + (optionally threaded) message\n  // so the link is shaped like a real inbound row the subscriber can consume.\n  const conversation = em.create(ExternalConversation, {\n    channelId: body.channelId,\n    externalConversationId: `inbound-seed:${Date.now()}:${Math.random().toString(16).slice(2, 8)}`,\n    subject: body.subject ?? null,\n    tenantId,\n    organizationId,\n    lastMessageAt: new Date(),\n  })\n  em.persist(conversation)\n  await em.flush()\n\n  // Insert the platform `messages.message` row via raw SQL rather than importing\n  // the messages module's entity class (cross-module ORM coupling rule). Only\n  // `thread_id` matters for the hub-thread inheritance join (TC-CRM-EMAIL-005);\n  // the rest satisfy NOT NULL constraints.\n  const messageRows = (await em.getConnection().execute(\n    `INSERT INTO messages\n       (type, thread_id, sender_user_id, subject, body, body_format, priority, status,\n        is_draft, sent_at, visibility, source_entity_type, source_entity_id,\n        tenant_id, organization_id, created_at, updated_at)\n     VALUES\n       (?, ?, ?, ?, ?, 'text', 'normal', 'sent',\n        false, now(), 'public', 'communication_channels.test_seed_inbound', ?,\n        ?, ?, now(), now())\n     RETURNING id`,\n    [\n      `channel.${providerKey}`,\n      body.messageThreadId ?? null,\n      userId,\n      body.subject ?? '(no subject)',\n      body.bodyText ?? '',\n      body.channelId,\n      tenantId,\n      organizationId,\n    ],\n  )) as Array<{ id: string }>\n  const messageId = messageRows[0]?.id\n  if (!messageId) {\n    return NextResponse.json({ error: '[internal] failed to seed message row' }, { status: 500 })\n  }\n\n  const link = em.create(MessageChannelLink, {\n    messageId,\n    externalConversationId: conversation.id,\n    providerKey,\n    channelType: 'email',\n    direction: 'inbound',\n    deliveryStatus: 'delivered',\n    channelPayload: {\n      ...(body.from !== undefined ? { from: body.from } : {}),\n      ...(body.to !== undefined ? { to: body.to } : {}),\n      ...(body.cc !== undefined ? { cc: body.cc } : {}),\n      ...(body.subject !== undefined ? { subject: body.subject } : {}),\n      ...(body.bodyText !== undefined ? { text: body.bodyText } : {}),\n      ...(body.inReplyTo !== undefined ? { inReplyTo: body.inReplyTo } : {}),\n      ...(body.references !== undefined ? { references: body.references } : {}),\n    },\n    channelContentType: 'text/plain',\n    channelMetadata: {\n      ...(body.messageId !== undefined ? { messageId: body.messageId } : {}),\n    },\n    tenantId,\n    organizationId,\n  })\n  em.persist(link)\n  await em.flush()\n\n  // Optionally mirror `ingest-inbound-message`: a real inbound message always\n  // lands a ChannelThreadMapping that the reaction + thread-assign routes use to\n  // resolve the owning channel. Seeded inbound messages skip it by default; opt\n  // in for tests that exercise those routes. Keyed by `messageThreadId ?? messageId`\n  // to match how those commands resolve the mapping (`message.threadId ?? message.id`).\n  if (body.createThreadMapping) {\n    const mapping = em.create(ChannelThreadMapping, {\n      externalConversationId: conversation.id,\n      messageThreadId: body.messageThreadId ?? messageId,\n      channelId: body.channelId,\n      providerKey,\n      externalThreadRef: conversation.externalConversationId,\n      tenantId,\n      organizationId,\n    })\n    em.persist(mapping)\n    await em.flush()\n  }\n\n  // Emit the hub event through the real event bus so the persistent customers\n  // link-channel-message-received subscriber is enqueued to the `events` queue.\n  await emitCommunicationChannelsEvent(\n    'communication_channels.message.received',\n    {\n      channelLinkId: link.id,\n      channelId: body.channelId,\n      providerKey,\n      direction: 'inbound',\n      tenantId,\n      organizationId,\n    },\n    { persistent: true },\n  )\n\n  return NextResponse.json(\n    { channelLinkId: link.id, messageId, conversationId: conversation.id },\n    { status: 201 },\n  )\n}\n\nexport const openApi = {\n  tags: ['CommunicationChannels'],\n  methods: {\n    POST: {\n      summary:\n        'Test-only: seed a connected channel, ingest a real inbound message, or emit a seeded inbound link (env-gated)',\n      tags: ['CommunicationChannels'],\n      responses: [\n        { status: 201, description: 'Channel seeded / inbound message emitted' },\n        { status: 401, description: 'Unauthorized' },\n        {\n          status: 404,\n          description:\n            'Test channel seeding disabled (production default), or the requested channel does not belong to the caller',\n        },\n        { status: 422, description: 'Invalid request body' },\n        { status: 500, description: 'Seed failed' },\n      ],\n    },\n  },\n}\n\nexport default POST\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAElB,SAAS,0BAA0B;AACnC,SAAS,8BAA8B;AAEvC,SAAS,oBAAoB;AAC7B,SAAS,6BAA6B;AACtC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,0BAA0B,8BAA8B;AACjE;AAAA,EACE;AAAA,OAGK;AACP,SAAS,sCAAsC;AAC/C;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,OAGK;AAiCA,MAAM,WAAW;AAAA,EACtB,MAAM;AAAA,EACN,MAAM;AAAA,IACJ,aAAa;AAAA,IACb,iBAAiB,CAAC,6CAA6C;AAAA,EACjE;AACF;AAEA,MAAM,sBAAsB,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,GAAG,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;AACzF,MAAM,qBAAqB,EAAE,MAAM;AAAA,EACjC,EAAE,OAAO;AAAA,EACT;AAAA,EACA,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,OAAO,GAAG,mBAAmB,CAAC,CAAC;AACpD,CAAC;AAED,MAAM,uBAAuB,EAAE,OAAO;AAAA,EACpC,QAAQ,EAAE,QAAQ,iBAAiB;AAAA,EACnC,aAAa,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EACjD,oBAAoB,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOxD,gBAAgB,EAAE,KAAK,CAAC,SAAS,MAAM,CAAC,EAAE,SAAS;AACrD,CAAC;AAaD,MAAM,sBAAsB,EAAE,OAAO;AAAA,EACnC,QAAQ,EAAE,QAAQ,gBAAgB;AAAA,EAClC,WAAW,EAAE,OAAO,EAAE,KAAK;AAAA;AAAA,EAE3B,kBAAkB,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EAC3C,mBAAmB,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EAChD,MAAM,EAAE,OAAO,EAAE,IAAI,GAAM,EAAE,SAAS;AAAA,EACtC,mBAAmB,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EAC5C,wBAAwB,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AACnD,CAAC;AAED,MAAM,oBAAoB,EAAE,OAAO;AAAA,EACjC,QAAQ,EAAE,QAAQ,cAAc;AAAA;AAAA,EAEhC,WAAW,EAAE,OAAO,EAAE,KAAK;AAAA;AAAA,EAE3B,aAAa,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,SAAS;AAAA;AAAA,EAEhD,MAAM,mBAAmB,SAAS;AAAA,EAClC,IAAI,mBAAmB,SAAS;AAAA,EAChC,IAAI,mBAAmB,SAAS;AAAA,EAChC,SAAS,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EACtC,UAAU,EAAE,OAAO,EAAE,IAAI,GAAO,EAAE,SAAS;AAAA;AAAA,EAE3C,WAAW,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA;AAAA,EAExC,WAAW,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EACxC,YAAY,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,GAAG,CAAC,EAAE,IAAI,EAAE,EAAE,SAAS;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAM1D,iBAAiB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQ5C,qBAAqB,EAAE,QAAQ,EAAE,SAAS;AAC5C,CAAC;AAED,MAAM,aAAa,EAAE,mBAAmB,UAAU;AAAA,EAChD;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAED,eAAsB,KAAK,KAAiC;AAG1D,MAAI,CAAC,4BAA4B,GAAG;AAClC,WAAO,aAAa,KAAK,EAAE,OAAO,YAAY,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAClE;AAEA,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM,OAAO,CAAC,MAAM,UAAU;AACjC,WAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrE;AAEA,MAAI;AACJ,MAAI;AACF,WAAO,WAAW,MAAM,MAAM,aAAa,KAAK,IAAI,CAAC;AAAA,EACvD,SAAS,KAAK;AACZ,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,eAAe,QAAQ,IAAI,UAAU,uBAAuB;AAAA,MACrE,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAG/C,kCAAgC;AAEhC,QAAM,WAAW,KAAK;AACtB,QAAM,iBAAkB,KAAmC,SAAS;AACpE,QAAM,SAAS,KAAK;AAEpB,MAAI,KAAK,WAAW,mBAAmB;AACrC,UAAM,QAAQ,KAAK,IAAI;AACvB,UAAM,aAAa,UAAU,QAAQ,YAAY;AACjD,UAAM,eAAe,KAAK,mBAAmB;AAM7C,UAAM,cAAc,eAChB,EAAE,QAAQ,KAAK,sBAAsB,kBAAkB,KAAK,GAAG,IAC/D;AAAA,MACE,UAAU,KAAK,sBAAsB,aAAa,KAAK;AAAA,MACvD,aAAa,KAAK,sBAAsB,aAAa,KAAK;AAAA,IAC5D;AACJ,UAAM,QAAuC;AAAA,MAC3C,aAAa,eAAe,8BAA8B;AAAA,MAC1D,aACE,KAAK,eAAe,aAAa,eAAe,UAAU,EAAE,WAAW,KAAK;AAAA,MAC9E;AAAA,MACA;AAAA,MACA,OAAO,EAAE,UAAU,eAAe;AAAA,IACpC;AACA,UAAM,EAAE,OAAO,IAAI,MAAM,WAAW,QAGlC,8DAA8D;AAAA,MAC9D;AAAA,MACA,KAAK;AAAA,QACH;AAAA,QACA;AAAA,QACA,mBAAmB;AAAA,QACnB,wBAAwB;AAAA,QACxB,iBAAiB,iBAAiB,CAAC,cAAc,IAAI;AAAA,MACvD;AAAA,IACF,CAAC;AACD,QAAI,OAAO,WAAW,aAAa;AACjC,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,uCAAuC,QAAQ,OAAO;AAAA,QAC/D,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AACA,WAAO,aAAa;AAAA,MAClB,EAAE,WAAW,OAAO,WAAW,oBAAoB,OAAO,mBAAmB;AAAA,MAC7E,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AAGA,QAAM,KAAM,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAG3D,QAAM,cACJ,KAAK,WAAW,iBAAiB,KAAK,eAAe,yBAAyB;AAKhF,QAAM,eAAe,MAAM;AAAA,IACzB;AAAA,IACA;AAAA,IACA;AAAA,MACE,IAAI,KAAK;AAAA,MACT;AAAA,MACA;AAAA,MACA,WAAW;AAAA,IACb;AAAA,IACA;AAAA,IACA,EAAE,UAAU,eAAe;AAAA,EAC7B;AACA,MAAI,CAAC,cAAc;AACjB,WAAO,aAAa,KAAK,EAAE,OAAO,oBAAoB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC1E;AAMA,MAAI,eAAyB,CAAC;AAC9B,MAAI;AACF,UAAM,OAAO,UAAU,QAAQ,aAAa;AAC5C,UAAM,MAAM,MAAM,KAAK,QAAQ,QAAQ,EAAE,UAAU,eAAe,CAAC;AACnE,mBAAe,KAAK,eAAe,CAAC,GAAG,IAAI,MAAM,QAAQ,KAAK,QAAQ,IAAI,IAAI,WAAW,CAAC;AAAA,EAC5F,QAAQ;AACN,mBAAe,CAAC;AAAA,EAClB;AACA,MAAI;AACF;AAAA,MACE,EAAE,QAAQ,aAAa,OAAO;AAAA,MAC9B;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF,SAAS,KAAK;AACZ,QAAI,eAAe,0BAA0B;AAC3C,aAAO,aAAa,KAAK,EAAE,OAAO,oBAAoB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC1E;AACA,UAAM,SAAU,IAAgC,cAAc;AAC9D,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,eAAe,QAAQ,IAAI,UAAU,gBAAgB;AAAA,MAC9D,EAAE,OAAO;AAAA,IACX;AAAA,EACF;AAEA,MAAI,KAAK,WAAW,kBAAkB;AASpC,UAAM,qBAAqB,aAAa;AACxC,QAAI,uBAAuB,6BAA6B;AACtD,aAAO,aAAa;AAAA,QAClB;AAAA,UACE,OACE,oFACW,KAAK,SAAS,QAAQ,kBAAkB;AAAA,QACvD;AAAA,QACA,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAEA,UAAM,aAAa,UAAU,QAAQ,YAAY;AACjD,UAAM,kBAAkB,UAAU,QAAQ,wBAAwB;AAGlE,UAAM,UAAU,gBAAgB,IAAI,kBAAkB;AACtD,QAAI,CAAC,SAAS;AACZ,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,sDAAsD;AAAA,QAC/D,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAEA,UAAM,aAAa,MAAM,QAAQ,iBAAiB;AAAA,MAChD,KAAK;AAAA,QACH,mBAAmB,KAAK;AAAA,QACxB,wBAAwB,KAAK;AAAA,QAC7B,kBAAkB,KAAK;AAAA,QACvB,mBAAmB,KAAK;AAAA,QACxB,MAAM,KAAK,QAAQ;AAAA,MACrB;AAAA,MACA,WAAW;AAAA,MACX,UAAU,CAAC;AAAA,IACb,CAAC;AAED,UAAM,cAAc;AAAA,MAClB,WAAW,KAAK;AAAA,MAChB,aAAa;AAAA,MACb,aAAa,aAAa;AAAA,MAC1B,OAAO,EAAE,UAAU,eAAe;AAAA,MAClC,SAAS;AAAA,IACX;AAEA,UAAM,EAAE,OAAO,IAAI,MAAM,WAAW,QAGlC,kDAAkD;AAAA,MAClD,OAAO;AAAA,MACP,KAAK;AAAA,QACH;AAAA,QACA;AAAA,QACA,mBAAmB;AAAA,QACnB,wBAAwB;AAAA,QACxB,iBAAiB,iBAAiB,CAAC,cAAc,IAAI;AAAA,MACvD;AAAA,IACF,CAAC;AAED,WAAO,aAAa;AAAA,MAClB;AAAA,QACE,QAAQ,OAAO;AAAA,QACf,WAAW,OAAO,aAAa;AAAA,QAC/B,gBAAgB,OAAO,0BAA0B;AAAA,QACjD,eAAe,OAAO,iBAAiB;AAAA,QACvC,aAAa,aAAa;AAAA,MAC5B;AAAA,MACA,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AAKA,QAAM,eAAe,GAAG,OAAO,sBAAsB;AAAA,IACnD,WAAW,KAAK;AAAA,IAChB,wBAAwB,gBAAgB,KAAK,IAAI,CAAC,IAAI,KAAK,OAAO,EAAE,SAAS,EAAE,EAAE,MAAM,GAAG,CAAC,CAAC;AAAA,IAC5F,SAAS,KAAK,WAAW;AAAA,IACzB;AAAA,IACA;AAAA,IACA,eAAe,oBAAI,KAAK;AAAA,EAC1B,CAAC;AACD,KAAG,QAAQ,YAAY;AACvB,QAAM,GAAG,MAAM;AAMf,QAAM,cAAe,MAAM,GAAG,cAAc,EAAE;AAAA,IAC5C;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IASA;AAAA,MACE,WAAW,WAAW;AAAA,MACtB,KAAK,mBAAmB;AAAA,MACxB;AAAA,MACA,KAAK,WAAW;AAAA,MAChB,KAAK,YAAY;AAAA,MACjB,KAAK;AAAA,MACL;AAAA,MACA;AAAA,IACF;AAAA,EACF;AACA,QAAM,YAAY,YAAY,CAAC,GAAG;AAClC,MAAI,CAAC,WAAW;AACd,WAAO,aAAa,KAAK,EAAE,OAAO,wCAAwC,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC9F;AAEA,QAAM,OAAO,GAAG,OAAO,oBAAoB;AAAA,IACzC;AAAA,IACA,wBAAwB,aAAa;AAAA,IACrC;AAAA,IACA,aAAa;AAAA,IACb,WAAW;AAAA,IACX,gBAAgB;AAAA,IAChB,gBAAgB;AAAA,MACd,GAAI,KAAK,SAAS,SAAY,EAAE,MAAM,KAAK,KAAK,IAAI,CAAC;AAAA,MACrD,GAAI,KAAK,OAAO,SAAY,EAAE,IAAI,KAAK,GAAG,IAAI,CAAC;AAAA,MAC/C,GAAI,KAAK,OAAO,SAAY,EAAE,IAAI,KAAK,GAAG,IAAI,CAAC;AAAA,MAC/C,GAAI,KAAK,YAAY,SAAY,EAAE,SAAS,KAAK,QAAQ,IAAI,CAAC;AAAA,MAC9D,GAAI,KAAK,aAAa,SAAY,EAAE,MAAM,KAAK,SAAS,IAAI,CAAC;AAAA,MAC7D,GAAI,KAAK,cAAc,SAAY,EAAE,WAAW,KAAK,UAAU,IAAI,CAAC;AAAA,MACpE,GAAI,KAAK,eAAe,SAAY,EAAE,YAAY,KAAK,WAAW,IAAI,CAAC;AAAA,IACzE;AAAA,IACA,oBAAoB;AAAA,IACpB,iBAAiB;AAAA,MACf,GAAI,KAAK,cAAc,SAAY,EAAE,WAAW,KAAK,UAAU,IAAI,CAAC;AAAA,IACtE;AAAA,IACA;AAAA,IACA;AAAA,EACF,CAAC;AACD,KAAG,QAAQ,IAAI;AACf,QAAM,GAAG,MAAM;AAOf,MAAI,KAAK,qBAAqB;AAC5B,UAAM,UAAU,GAAG,OAAO,sBAAsB;AAAA,MAC9C,wBAAwB,aAAa;AAAA,MACrC,iBAAiB,KAAK,mBAAmB;AAAA,MACzC,WAAW,KAAK;AAAA,MAChB;AAAA,MACA,mBAAmB,aAAa;AAAA,MAChC;AAAA,MACA;AAAA,IACF,CAAC;AACD,OAAG,QAAQ,OAAO;AAClB,UAAM,GAAG,MAAM;AAAA,EACjB;AAIA,QAAM;AAAA,IACJ;AAAA,IACA;AAAA,MACE,eAAe,KAAK;AAAA,MACpB,WAAW,KAAK;AAAA,MAChB;AAAA,MACA,WAAW;AAAA,MACX;AAAA,MACA;AAAA,IACF;AAAA,IACA,EAAE,YAAY,KAAK;AAAA,EACrB;AAEA,SAAO,aAAa;AAAA,IAClB,EAAE,eAAe,KAAK,IAAI,WAAW,gBAAgB,aAAa,GAAG;AAAA,IACrE,EAAE,QAAQ,IAAI;AAAA,EAChB;AACF;AAEO,MAAM,UAAU;AAAA,EACrB,MAAM,CAAC,uBAAuB;AAAA,EAC9B,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SACE;AAAA,MACF,MAAM,CAAC,uBAAuB;AAAA,MAC9B,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,2CAA2C;AAAA,QACvE,EAAE,QAAQ,KAAK,aAAa,eAAe;AAAA,QAC3C;AAAA,UACE,QAAQ;AAAA,UACR,aACE;AAAA,QACJ;AAAA,QACA,EAAE,QAAQ,KAAK,aAAa,uBAAuB;AAAA,QACnD,EAAE,QAAQ,KAAK,aAAa,cAAc;AAAA,MAC5C;AAAA,IACF;AAAA,EACF;AACF;AAEA,IAAO,gBAAQ;",
   "names": []
 }

package/dist/modules/communication_channels/backend/communication_channels/channels/page.js

@@ -12,6 +12,7 @@ function ChannelsListPage() {
   const [rows, setRows] = React.useState([]);
   const [total, setTotal] = React.useState(0);
   const [totalPages, setTotalPages] = React.useState(1);
+  const [totalIsCapped, setTotalIsCapped] = React.useState(false);
   const [page, setPage] = React.useState(1);
   const [isLoading, setIsLoading] = React.useState(true);
   const [errorMessage, setErrorMessage] = React.useState(null);
@@ -49,6 +50,7 @@ function ChannelsListPage() {
         setRows(Array.isArray(data.items) ? data.items : []);
         setTotal(typeof data.total === "number" ? data.total : 0);
         setTotalPages(typeof data.totalPages === "number" ? data.totalPages : 1);
+        setTotalIsCapped(data.totalIsCapped === true);
       }
       setIsLoading(false);
     }
@@ -104,6 +106,7 @@ function ChannelsListPage() {
         pageSize,
         total,
         totalPages,
+        totalIsCapped,
         onPageChange: setPage
       }
     }

package/dist/modules/communication_channels/backend/communication_channels/channels/page.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../src/modules/communication_channels/backend/communication_channels/channels/page.tsx"],
-  "sourcesContent": ["'use client'\n\nimport * as React from 'react'\nimport { extensionPoints } from '@open-mercato/core/modules/communication_channels/extension-points'\nimport type { LegacyColumnDef as ColumnDef } from '@tanstack/react-table/legacy'\nimport { Page, PageBody } from '@open-mercato/ui/backend/Page'\nimport { DataTable } from '@open-mercato/ui/backend/DataTable'\nimport { Tag } from '@open-mercato/ui/primitives/tag'\nimport { apiCall } from '@open-mercato/ui/backend/utils/apiCall'\nimport { useT } from '@open-mercato/shared/lib/i18n/context'\n\ntype ChannelRow = {\n  id: string\n  providerKey: string\n  channelType: string\n  displayName: string\n  externalIdentifier: string | null\n  isActive: boolean\n  capabilities: Record<string, unknown> | null\n  createdAt: string | null\n}\n\ntype ChannelListResponse = {\n  items?: ChannelRow[]\n  total?: number\n  totalPages?: number\n}\n\nexport default function ChannelsListPage() {\n  const t = useT()\n  const [rows, setRows] = React.useState<ChannelRow[]>([])\n  const [total, setTotal] = React.useState(0)\n  const [totalPages, setTotalPages] = React.useState(1)\n  const [page, setPage] = React.useState(1)\n  const [isLoading, setIsLoading] = React.useState(true)\n  const [errorMessage, setErrorMessage] = React.useState<string | null>(null)\n  // Bumped by injected connect widgets (FCM/APNs/Expo) so a freshly connected\n  // tenant-wide channel appears without a manual page reload.\n  const [reloadToken, setReloadToken] = React.useState(0)\n  const pageSize = 50\n\n  const reload = React.useCallback(() => setReloadToken((token) => token + 1), [])\n  const injectionContext = React.useMemo(\n    () => ({ tableId: extensionPoints.hosts.channelsTable.tableId, reload }),\n    [reload],\n  )\n\n  React.useEffect(() => {\n    let cancelled = false\n    async function load() {\n      setIsLoading(true)\n      setErrorMessage(null)\n      const response = await apiCall<ChannelListResponse>(\n        `/api/communication_channels/channels?page=${page}&pageSize=${pageSize}`,\n      ).catch((err: unknown) => {\n        return {\n          ok: false,\n          result: { error: err instanceof Error ? err.message : 'Failed to load channels' },\n        }\n      })\n      if (cancelled) return\n      if (!response.ok) {\n        const errBody = response.result as { error?: string } | undefined\n        setErrorMessage(\n          errBody?.error ?? t('communication_channels.errors.loadList', 'Failed to load channels'),\n        )\n        setRows([])\n        setTotal(0)\n        setTotalPages(1)\n      } else {\n        const data = (response.result ?? {}) as ChannelListResponse\n        setRows(Array.isArray(data.items) ? data.items : [])\n        setTotal(typeof data.total === 'number' ? data.total : 0)\n        setTotalPages(typeof data.totalPages === 'number' ? data.totalPages : 1)\n      }\n      setIsLoading(false)\n    }\n    void load()\n    return () => {\n      cancelled = true\n    }\n  }, [page, reloadToken, t])\n\n  const columns = React.useMemo<ColumnDef<ChannelRow>[]>(\n    () => [\n      {\n        header: t('communication_channels.columns.displayName', 'Channel'),\n        accessorKey: 'displayName',\n      },\n      {\n        header: t('communication_channels.columns.provider', 'Provider'),\n        accessorKey: 'providerKey',\n      },\n      {\n        header: t('communication_channels.columns.type', 'Type'),\n        accessorKey: 'channelType',\n      },\n      {\n        header: t('communication_channels.columns.identifier', 'External ID'),\n        accessorKey: 'externalIdentifier',\n        cell: ({ row }) => row.original.externalIdentifier ?? '\u2014',\n        meta: { truncate: true, maxWidth: 240 },\n      },\n      {\n        header: t('communication_channels.columns.status', 'Status'),\n        accessorKey: 'isActive',\n        cell: ({ row }) =>\n          row.original.isActive ? (\n            <Tag variant=\"success\" dot>\n              {t('communication_channels.status.active', 'Active')}\n            </Tag>\n          ) : (\n            <Tag variant=\"neutral\">\n              {t('communication_channels.status.inactive', 'Inactive')}\n            </Tag>\n          ),\n      },\n    ],\n    [t],\n  )\n\n  return (\n    <Page>\n      <PageBody>\n        <DataTable<ChannelRow>\n          title={t('communication_channels.nav.title', 'Communication Channels')}\n          extensionTableId={extensionPoints.hosts.channelsTable.tableId}\n          injectionContext={injectionContext}\n          columns={columns}\n          data={rows}\n          isLoading={isLoading}\n          error={errorMessage}\n          emptyState={t(\n            'communication_channels.emptyState',\n            'No shared channels yet. This page lists shared, tenant-wide channels. Your personal email mailbox is private \u2014 connect and manage it under Profile \u2192 Communication Channels.',\n          )}\n          pagination={{\n            page,\n            pageSize,\n            total,\n            totalPages,\n            onPageChange: setPage,\n          }}\n        />\n      </PageBody>\n    </Page>\n  )\n}\n"],
-  "mappings": ";AA4GY;AA1GZ,YAAY,WAAW;AACvB,SAAS,uBAAuB;AAEhC,SAAS,MAAM,gBAAgB;AAC/B,SAAS,iBAAiB;AAC1B,SAAS,WAAW;AACpB,SAAS,eAAe;AACxB,SAAS,YAAY;AAmBN,SAAR,mBAAoC;AACzC,QAAM,IAAI,KAAK;AACf,QAAM,CAAC,MAAM,OAAO,IAAI,MAAM,SAAuB,CAAC,CAAC;AACvD,QAAM,CAAC,OAAO,QAAQ,IAAI,MAAM,SAAS,CAAC;AAC1C,QAAM,CAAC,YAAY,aAAa,IAAI,MAAM,SAAS,CAAC;AACpD,QAAM,CAAC,MAAM,OAAO,IAAI,MAAM,SAAS,CAAC;AACxC,QAAM,CAAC,WAAW,YAAY,IAAI,MAAM,SAAS,IAAI;AACrD,QAAM,CAAC,cAAc,eAAe,IAAI,MAAM,SAAwB,IAAI;AAG1E,QAAM,CAAC,aAAa,cAAc,IAAI,MAAM,SAAS,CAAC;AACtD,QAAM,WAAW;AAEjB,QAAM,SAAS,MAAM,YAAY,MAAM,eAAe,CAAC,UAAU,QAAQ,CAAC,GAAG,CAAC,CAAC;AAC/E,QAAM,mBAAmB,MAAM;AAAA,IAC7B,OAAO,EAAE,SAAS,gBAAgB,MAAM,cAAc,SAAS,OAAO;AAAA,IACtE,CAAC,MAAM;AAAA,EACT;AAEA,QAAM,UAAU,MAAM;AACpB,QAAI,YAAY;AAChB,mBAAe,OAAO;AACpB,mBAAa,IAAI;AACjB,sBAAgB,IAAI;AACpB,YAAM,WAAW,MAAM;AAAA,QACrB,6CAA6C,IAAI,aAAa,QAAQ;AAAA,MACxE,EAAE,MAAM,CAAC,QAAiB;AACxB,eAAO;AAAA,UACL,IAAI;AAAA,UACJ,QAAQ,EAAE,OAAO,eAAe,QAAQ,IAAI,UAAU,0BAA0B;AAAA,QAClF;AAAA,MACF,CAAC;AACD,UAAI,UAAW;AACf,UAAI,CAAC,SAAS,IAAI;AAChB,cAAM,UAAU,SAAS;AACzB;AAAA,UACE,SAAS,SAAS,EAAE,0CAA0C,yBAAyB;AAAA,QACzF;AACA,gBAAQ,CAAC,CAAC;AACV,iBAAS,CAAC;AACV,sBAAc,CAAC;AAAA,MACjB,OAAO;AACL,cAAM,OAAQ,SAAS,UAAU,CAAC;AAClC,gBAAQ,MAAM,QAAQ,KAAK,KAAK,IAAI,KAAK,QAAQ,CAAC,CAAC;AACnD,iBAAS,OAAO,KAAK,UAAU,WAAW,KAAK,QAAQ,CAAC;AACxD,sBAAc,OAAO,KAAK,eAAe,WAAW,KAAK,aAAa,CAAC;AAAA,MACzE;AACA,mBAAa,KAAK;AAAA,IACpB;AACA,SAAK,KAAK;AACV,WAAO,MAAM;AACX,kBAAY;AAAA,IACd;AAAA,EACF,GAAG,CAAC,MAAM,aAAa,CAAC,CAAC;AAEzB,QAAM,UAAU,MAAM;AAAA,IACpB,MAAM;AAAA,MACJ;AAAA,QACE,QAAQ,EAAE,8CAA8C,SAAS;AAAA,QACjE,aAAa;AAAA,MACf;AAAA,MACA;AAAA,QACE,QAAQ,EAAE,2CAA2C,UAAU;AAAA,QAC/D,aAAa;AAAA,MACf;AAAA,MACA;AAAA,QACE,QAAQ,EAAE,uCAAuC,MAAM;AAAA,QACvD,aAAa;AAAA,MACf;AAAA,MACA;AAAA,QACE,QAAQ,EAAE,6CAA6C,aAAa;AAAA,QACpE,aAAa;AAAA,QACb,MAAM,CAAC,EAAE,IAAI,MAAM,IAAI,SAAS,sBAAsB;AAAA,QACtD,MAAM,EAAE,UAAU,MAAM,UAAU,IAAI;AAAA,MACxC;AAAA,MACA;AAAA,QACE,QAAQ,EAAE,yCAAyC,QAAQ;AAAA,QAC3D,aAAa;AAAA,QACb,MAAM,CAAC,EAAE,IAAI,MACX,IAAI,SAAS,WACX,oBAAC,OAAI,SAAQ,WAAU,KAAG,MACvB,YAAE,wCAAwC,QAAQ,GACrD,IAEA,oBAAC,OAAI,SAAQ,WACV,YAAE,0CAA0C,UAAU,GACzD;AAAA,MAEN;AAAA,IACF;AAAA,IACA,CAAC,CAAC;AAAA,EACJ;AAEA,SACE,oBAAC,QACC,8BAAC,YACC;AAAA,IAAC;AAAA;AAAA,MACC,OAAO,EAAE,oCAAoC,wBAAwB;AAAA,MACrE,kBAAkB,gBAAgB,MAAM,cAAc;AAAA,MACtD;AAAA,MACA;AAAA,MACA,MAAM;AAAA,MACN;AAAA,MACA,OAAO;AAAA,MACP,YAAY;AAAA,QACV;AAAA,QACA;AAAA,MACF;AAAA,MACA,YAAY;AAAA,QACV;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA,cAAc;AAAA,MAChB;AAAA;AAAA,EACF,GACF,GACF;AAEJ;",
+  "sourcesContent": ["'use client'\n\nimport * as React from 'react'\nimport { extensionPoints } from '@open-mercato/core/modules/communication_channels/extension-points'\nimport type { LegacyColumnDef as ColumnDef } from '@tanstack/react-table/legacy'\nimport { Page, PageBody } from '@open-mercato/ui/backend/Page'\nimport { DataTable } from '@open-mercato/ui/backend/DataTable'\nimport { Tag } from '@open-mercato/ui/primitives/tag'\nimport { apiCall } from '@open-mercato/ui/backend/utils/apiCall'\nimport { useT } from '@open-mercato/shared/lib/i18n/context'\n\ntype ChannelRow = {\n  id: string\n  providerKey: string\n  channelType: string\n  displayName: string\n  externalIdentifier: string | null\n  isActive: boolean\n  capabilities: Record<string, unknown> | null\n  createdAt: string | null\n}\n\ntype ChannelListResponse = {\n  items?: ChannelRow[]\n  total?: number\n  totalPages?: number\n  totalIsCapped?: boolean\n}\n\nexport default function ChannelsListPage() {\n  const t = useT()\n  const [rows, setRows] = React.useState<ChannelRow[]>([])\n  const [total, setTotal] = React.useState(0)\n  const [totalPages, setTotalPages] = React.useState(1)\n  const [totalIsCapped, setTotalIsCapped] = React.useState(false)\n  const [page, setPage] = React.useState(1)\n  const [isLoading, setIsLoading] = React.useState(true)\n  const [errorMessage, setErrorMessage] = React.useState<string | null>(null)\n  // Bumped by injected connect widgets (FCM/APNs/Expo) so a freshly connected\n  // tenant-wide channel appears without a manual page reload.\n  const [reloadToken, setReloadToken] = React.useState(0)\n  const pageSize = 50\n\n  const reload = React.useCallback(() => setReloadToken((token) => token + 1), [])\n  const injectionContext = React.useMemo(\n    () => ({ tableId: extensionPoints.hosts.channelsTable.tableId, reload }),\n    [reload],\n  )\n\n  React.useEffect(() => {\n    let cancelled = false\n    async function load() {\n      setIsLoading(true)\n      setErrorMessage(null)\n      const response = await apiCall<ChannelListResponse>(\n        `/api/communication_channels/channels?page=${page}&pageSize=${pageSize}`,\n      ).catch((err: unknown) => {\n        return {\n          ok: false,\n          result: { error: err instanceof Error ? err.message : 'Failed to load channels' },\n        }\n      })\n      if (cancelled) return\n      if (!response.ok) {\n        const errBody = response.result as { error?: string } | undefined\n        setErrorMessage(\n          errBody?.error ?? t('communication_channels.errors.loadList', 'Failed to load channels'),\n        )\n        setRows([])\n        setTotal(0)\n        setTotalPages(1)\n      } else {\n        const data = (response.result ?? {}) as ChannelListResponse\n        setRows(Array.isArray(data.items) ? data.items : [])\n        setTotal(typeof data.total === 'number' ? data.total : 0)\n        setTotalPages(typeof data.totalPages === 'number' ? data.totalPages : 1)\n        setTotalIsCapped(data.totalIsCapped === true)\n      }\n      setIsLoading(false)\n    }\n    void load()\n    return () => {\n      cancelled = true\n    }\n  }, [page, reloadToken, t])\n\n  const columns = React.useMemo<ColumnDef<ChannelRow>[]>(\n    () => [\n      {\n        header: t('communication_channels.columns.displayName', 'Channel'),\n        accessorKey: 'displayName',\n      },\n      {\n        header: t('communication_channels.columns.provider', 'Provider'),\n        accessorKey: 'providerKey',\n      },\n      {\n        header: t('communication_channels.columns.type', 'Type'),\n        accessorKey: 'channelType',\n      },\n      {\n        header: t('communication_channels.columns.identifier', 'External ID'),\n        accessorKey: 'externalIdentifier',\n        cell: ({ row }) => row.original.externalIdentifier ?? '\u2014',\n        meta: { truncate: true, maxWidth: 240 },\n      },\n      {\n        header: t('communication_channels.columns.status', 'Status'),\n        accessorKey: 'isActive',\n        cell: ({ row }) =>\n          row.original.isActive ? (\n            <Tag variant=\"success\" dot>\n              {t('communication_channels.status.active', 'Active')}\n            </Tag>\n          ) : (\n            <Tag variant=\"neutral\">\n              {t('communication_channels.status.inactive', 'Inactive')}\n            </Tag>\n          ),\n      },\n    ],\n    [t],\n  )\n\n  return (\n    <Page>\n      <PageBody>\n        <DataTable<ChannelRow>\n          title={t('communication_channels.nav.title', 'Communication Channels')}\n          extensionTableId={extensionPoints.hosts.channelsTable.tableId}\n          injectionContext={injectionContext}\n          columns={columns}\n          data={rows}\n          isLoading={isLoading}\n          error={errorMessage}\n          emptyState={t(\n            'communication_channels.emptyState',\n            'No shared channels yet. This page lists shared, tenant-wide channels. Your personal email mailbox is private \u2014 connect and manage it under Profile \u2192 Communication Channels.',\n          )}\n          pagination={{\n            page,\n            pageSize,\n            total,\n            totalPages,\n            totalIsCapped,\n            onPageChange: setPage,\n          }}\n        />\n      </PageBody>\n    </Page>\n  )\n}\n"],
+  "mappings": ";AA+GY;AA7GZ,YAAY,WAAW;AACvB,SAAS,uBAAuB;AAEhC,SAAS,MAAM,gBAAgB;AAC/B,SAAS,iBAAiB;AAC1B,SAAS,WAAW;AACpB,SAAS,eAAe;AACxB,SAAS,YAAY;AAoBN,SAAR,mBAAoC;AACzC,QAAM,IAAI,KAAK;AACf,QAAM,CAAC,MAAM,OAAO,IAAI,MAAM,SAAuB,CAAC,CAAC;AACvD,QAAM,CAAC,OAAO,QAAQ,IAAI,MAAM,SAAS,CAAC;AAC1C,QAAM,CAAC,YAAY,aAAa,IAAI,MAAM,SAAS,CAAC;AACpD,QAAM,CAAC,eAAe,gBAAgB,IAAI,MAAM,SAAS,KAAK;AAC9D,QAAM,CAAC,MAAM,OAAO,IAAI,MAAM,SAAS,CAAC;AACxC,QAAM,CAAC,WAAW,YAAY,IAAI,MAAM,SAAS,IAAI;AACrD,QAAM,CAAC,cAAc,eAAe,IAAI,MAAM,SAAwB,IAAI;AAG1E,QAAM,CAAC,aAAa,cAAc,IAAI,MAAM,SAAS,CAAC;AACtD,QAAM,WAAW;AAEjB,QAAM,SAAS,MAAM,YAAY,MAAM,eAAe,CAAC,UAAU,QAAQ,CAAC,GAAG,CAAC,CAAC;AAC/E,QAAM,mBAAmB,MAAM;AAAA,IAC7B,OAAO,EAAE,SAAS,gBAAgB,MAAM,cAAc,SAAS,OAAO;AAAA,IACtE,CAAC,MAAM;AAAA,EACT;AAEA,QAAM,UAAU,MAAM;AACpB,QAAI,YAAY;AAChB,mBAAe,OAAO;AACpB,mBAAa,IAAI;AACjB,sBAAgB,IAAI;AACpB,YAAM,WAAW,MAAM;AAAA,QACrB,6CAA6C,IAAI,aAAa,QAAQ;AAAA,MACxE,EAAE,MAAM,CAAC,QAAiB;AACxB,eAAO;AAAA,UACL,IAAI;AAAA,UACJ,QAAQ,EAAE,OAAO,eAAe,QAAQ,IAAI,UAAU,0BAA0B;AAAA,QAClF;AAAA,MACF,CAAC;AACD,UAAI,UAAW;AACf,UAAI,CAAC,SAAS,IAAI;AAChB,cAAM,UAAU,SAAS;AACzB;AAAA,UACE,SAAS,SAAS,EAAE,0CAA0C,yBAAyB;AAAA,QACzF;AACA,gBAAQ,CAAC,CAAC;AACV,iBAAS,CAAC;AACV,sBAAc,CAAC;AAAA,MACjB,OAAO;AACL,cAAM,OAAQ,SAAS,UAAU,CAAC;AAClC,gBAAQ,MAAM,QAAQ,KAAK,KAAK,IAAI,KAAK,QAAQ,CAAC,CAAC;AACnD,iBAAS,OAAO,KAAK,UAAU,WAAW,KAAK,QAAQ,CAAC;AACxD,sBAAc,OAAO,KAAK,eAAe,WAAW,KAAK,aAAa,CAAC;AACvE,yBAAiB,KAAK,kBAAkB,IAAI;AAAA,MAC9C;AACA,mBAAa,KAAK;AAAA,IACpB;AACA,SAAK,KAAK;AACV,WAAO,MAAM;AACX,kBAAY;AAAA,IACd;AAAA,EACF,GAAG,CAAC,MAAM,aAAa,CAAC,CAAC;AAEzB,QAAM,UAAU,MAAM;AAAA,IACpB,MAAM;AAAA,MACJ;AAAA,QACE,QAAQ,EAAE,8CAA8C,SAAS;AAAA,QACjE,aAAa;AAAA,MACf;AAAA,MACA;AAAA,QACE,QAAQ,EAAE,2CAA2C,UAAU;AAAA,QAC/D,aAAa;AAAA,MACf;AAAA,MACA;AAAA,QACE,QAAQ,EAAE,uCAAuC,MAAM;AAAA,QACvD,aAAa;AAAA,MACf;AAAA,MACA;AAAA,QACE,QAAQ,EAAE,6CAA6C,aAAa;AAAA,QACpE,aAAa;AAAA,QACb,MAAM,CAAC,EAAE,IAAI,MAAM,IAAI,SAAS,sBAAsB;AAAA,QACtD,MAAM,EAAE,UAAU,MAAM,UAAU,IAAI;AAAA,MACxC;AAAA,MACA;AAAA,QACE,QAAQ,EAAE,yCAAyC,QAAQ;AAAA,QAC3D,aAAa;AAAA,QACb,MAAM,CAAC,EAAE,IAAI,MACX,IAAI,SAAS,WACX,oBAAC,OAAI,SAAQ,WAAU,KAAG,MACvB,YAAE,wCAAwC,QAAQ,GACrD,IAEA,oBAAC,OAAI,SAAQ,WACV,YAAE,0CAA0C,UAAU,GACzD;AAAA,MAEN;AAAA,IACF;AAAA,IACA,CAAC,CAAC;AAAA,EACJ;AAEA,SACE,oBAAC,QACC,8BAAC,YACC;AAAA,IAAC;AAAA;AAAA,MACC,OAAO,EAAE,oCAAoC,wBAAwB;AAAA,MACrE,kBAAkB,gBAAgB,MAAM,cAAc;AAAA,MACtD;AAAA,MACA;AAAA,MACA,MAAM;AAAA,MACN;AAAA,MACA,OAAO;AAAA,MACP,YAAY;AAAA,QACV;AAAA,QACA;AAAA,MACF;AAAA,MACA,YAAY;AAAA,QACV;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA,cAAc;AAAA,MAChB;AAAA;AAAA,EACF,GACF,GACF;AAEJ;",
   "names": []
 }

package/dist/modules/communication_channels/commands/ingest-inbound-message.js

@@ -2,6 +2,7 @@ import { randomUUID } from "node:crypto";
 import { z } from "zod";
 import { registerCommand } from "@open-mercato/shared/lib/commands";
 import { findOneWithDecryption } from "@open-mercato/shared/lib/encryption/find";
+import { htmlToPlainText } from "@open-mercato/shared/lib/html/htmlToPlainText";
 import { emitCommunicationChannelsEvent } from "../events.js";
 import { resolveContact } from "../lib/contact-resolver.js";
 import { matchThread } from "../lib/thread-matcher.js";
@@ -216,8 +217,15 @@ const ingestInboundMessageCommand = {
       await em.flush();
     }
     const MAX_COMPOSE_BODY = 5e4;
+    const MAX_HTML_PARSE_INPUT = 512 * 1024;
     const TRUNCATE_MARKER = "\n\n[\u2026message truncated by Open Mercato \u2014 full body preserved in ExternalMessage.rawPayload]";
-    const rawBody = m.body ?? "";
+    const sourceBody = m.body ?? "";
+    const plainAlternative = typeof m.channelPayload?.text === "string" ? m.channelPayload.text.trim() : "";
+    const convertHtmlBody = () => {
+      const converted = htmlToPlainText(sourceBody.slice(0, MAX_HTML_PARSE_INPUT));
+      return sourceBody.length > MAX_HTML_PARSE_INPUT ? converted + TRUNCATE_MARKER : converted;
+    };
+    const rawBody = m.bodyFormat === "html" ? plainAlternative || convertHtmlBody() : sourceBody;
     const truncatedBody = rawBody.length > MAX_COMPOSE_BODY ? rawBody.slice(0, MAX_COMPOSE_BODY - TRUNCATE_MARKER.length) + TRUNCATE_MARKER : rawBody;
     const safeSubject = (m.subject ?? "").trim() || "(no subject)";
     const composeInput = {
@@ -227,6 +235,11 @@ const ingestInboundMessageCommand = {
       sourceEntityId: conversation.id,
       externalEmail: contactHint?.email ?? void 0,
       externalName: contactHint?.displayName ?? m.senderDisplayName,
+      // #4975: tells the hub which identity contract applies to this sender.
+      // Email-typed channels keep the mandatory `externalEmail`; providers whose
+      // senders have no address (Discord, Slack, SMS…) are validated without it.
+      // The messages validator fails closed on any type it does not recognize.
+      sourceChannelType: input.channelType,
       recipients: mapping?.assignedUserId ? [{ userId: mapping.assignedUserId, type: "to" }] : [],
       subject: safeSubject,
       body: truncatedBody,