@open-mercato/core 0.8.1-develop.7296.1.2111d779db → 0.8.1-develop.7441.1.b42958b98c

package/dist/modules/customers/api/people/[id]/emails/route.js

@@ -9,6 +9,7 @@ import {
   runCrudMutationGuardAfterSuccess
 } from "@open-mercato/shared/lib/crud/mutation-guard";
 import { resolveOrganizationScopeForRequest } from "@open-mercato/core/modules/directory/utils/organizationScope";
+import { resolveSingleOrganizationIdOrDeny } from "@open-mercato/core/modules/directory/utils/organizationScopeFilter";
 import { isOrganizationReadAccessAllowed } from "@open-mercato/core/modules/directory/utils/organizationScopeGuard";
 import { resolveAuthActorId } from "../../../../lib/interactionRequestContext.js";
 import { CustomerEntity } from "../../../../data/entities.js";
@@ -64,7 +65,7 @@ async function POST(req, context) {
       deletedAt: null
     },
     void 0,
-    { tenantId: auth.tenantId, organizationId: scope?.selectedId ?? auth.orgId ?? null }
+    { tenantId: auth.tenantId, organizationId: resolveSingleOrganizationIdOrDeny(scope, auth) ?? null }
   );
   if (!person) {
     return NextResponse.json({ error: "Person not found" }, { status: 404 });

package/dist/modules/customers/api/people/[id]/emails/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../../src/modules/customers/api/people/%5Bid%5D/emails/route.ts"],
-  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { readJsonSafe } from '@open-mercato/shared/lib/http/readJsonSafe'\nimport {\n  validateCrudMutationGuard,\n  runCrudMutationGuardAfterSuccess,\n} from '@open-mercato/shared/lib/crud/mutation-guard'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport { isOrganizationReadAccessAllowed } from '@open-mercato/core/modules/directory/utils/organizationScopeGuard'\nimport { resolveAuthActorId } from '../../../../lib/interactionRequestContext'\nimport { CustomerEntity } from '../../../../data/entities'\nimport type { SendAsUserService } from '@open-mercato/core/modules/communication_channels/lib/send-as-user'\n\nexport const metadata = {\n  path: '/customers/people/[id]/emails',\n  POST: {\n    requireAuth: true,\n    requireFeatures: ['customers.email.compose'],\n  },\n}\n\nconst composeSchema = z\n  .object({\n    userChannelId: z.string().uuid(),\n    to: z.array(z.string().email()).min(1).max(50),\n    cc: z.array(z.string().email()).max(50).optional(),\n    bcc: z.array(z.string().email()).max(50).optional(),\n    subject: z.string().min(1).max(500),\n    body: z.string().min(1).max(200_000),\n    bodyFormat: z.enum(['text', 'html']).default('html'),\n    visibility: z.enum(['private', 'shared']).default('private'),\n    inReplyTo: z.string().max(500).optional(),\n    references: z.array(z.string().max(500)).max(50).optional(),\n    parentMessageId: z.string().uuid().optional(),\n  })\n  .strict()\n\ntype RouteContext = {\n  params: Promise<{ id: string }> | { id: string }\n}\n\nexport async function POST(req: Request, context: RouteContext): Promise<Response> {\n  const { id: personId } = await context.params\n  if (!z.string().uuid().safeParse(personId).success) {\n    return NextResponse.json({ error: 'Invalid person id' }, { status: 400 })\n  }\n\n  const auth = await getAuthFromRequest(req)\n  if (!auth?.sub || !auth?.tenantId) {\n    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n  }\n\n  let body: z.infer<typeof composeSchema>\n  try {\n    body = composeSchema.parse(await readJsonSafe(req, null))\n  } catch (err) {\n    return NextResponse.json(\n      { error: err instanceof Error ? err.message : 'Invalid request body' },\n      { status: 422 },\n    )\n  }\n\n  const container = await createRequestContainer()\n  const userId = resolveAuthActorId(auth)\n  const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req })\n\n  const em = (container.resolve('em') as EntityManager).fork()\n\n  // 1. Verify the Person exists in the caller's tenant, then fail-closed on the\n  //    record's own organization \u2014 same pattern as the [id]/route.ts GET handler.\n  //    Loading by tenant + id (not a hand-rolled selected org) keeps this working\n  //    under the \"All organizations\" scope; the record's own org then becomes the\n  //    concrete org the guard and the outbound message are attributed to.\n  const person = await findOneWithDecryption(\n    em,\n    CustomerEntity,\n    {\n      id: personId,\n      kind: 'person',\n      tenantId: auth.tenantId,\n      deletedAt: null,\n    } as never,\n    undefined,\n    { tenantId: auth.tenantId as string, organizationId: scope?.selectedId ?? (auth as { orgId?: string | null }).orgId ?? null },\n  )\n  if (!person) {\n    return NextResponse.json({ error: 'Person not found' }, { status: 404 })\n  }\n  const organizationId = (person as { organizationId?: string | null }).organizationId ?? null\n  if (!isOrganizationReadAccessAllowed({ scope, auth, organizationId })) {\n    return NextResponse.json({ error: 'Person not found' }, { status: 404 })\n  }\n\n  const guardResult = await validateCrudMutationGuard(container, {\n    tenantId: auth.tenantId,\n    organizationId,\n    userId,\n    resourceKind: 'customers.person',\n    resourceId: personId,\n    operation: 'custom',\n    requestMethod: req.method,\n    requestHeaders: req.headers,\n  })\n  if (guardResult && !guardResult.ok) {\n    return NextResponse.json(guardResult.body, { status: guardResult.status })\n  }\n\n  // 2. Call the hub's send-as-user facade in-process (resolved via DI) so the\n  //    customers module makes no HTTP self-call. `crmVisibility` and `crmPersonId`\n  //    are injected as channelMetadata so the link-channel-message subscriber can\n  //    anchor the sent message back to this Person on the\n  //    `communication_channels.message.sent` event.\n  const sendAsUserService = container.resolve(\n    'communicationChannelsSendAsUser',\n  ) as SendAsUserService\n\n  const sendResult = await sendAsUserService(\n    container,\n    { userId: auth.sub as string, tenantId: auth.tenantId as string, organizationId, auth },\n    {\n      userChannelId: body.userChannelId,\n      to: body.to,\n      cc: body.cc,\n      bcc: body.bcc,\n      subject: body.subject,\n      body: body.bodyFormat === 'html' ? { html: body.body } : { plain: body.body },\n      inReplyTo: body.inReplyTo,\n      references: body.references,\n      parentMessageId: body.parentMessageId,\n      channelMetadata: {\n        crmVisibility: body.visibility,\n        crmPersonId: personId,\n      },\n    },\n  )\n\n  if (!sendResult.ok) {\n    return NextResponse.json({ error: sendResult.error }, { status: sendResult.status })\n  }\n\n  if (guardResult?.ok && guardResult.shouldRunAfterSuccess) {\n    await runCrudMutationGuardAfterSuccess(container, {\n      tenantId: auth.tenantId,\n      organizationId,\n      userId,\n      resourceKind: 'customers.person',\n      resourceId: personId,\n      operation: 'custom',\n      requestMethod: req.method,\n      requestHeaders: req.headers,\n      metadata: guardResult.metadata ?? null,\n    })\n  }\n\n  // Delivery is async (handled by the outbound queue worker), so this is the\n  // enqueue time \u2014 not the provider send time \u2014 and the provider's external\n  // message id is not known yet (the worker assigns it on successful delivery).\n  return NextResponse.json({\n    messageId: sendResult.messageId,\n    threadId: sendResult.threadId,\n    queuedAt: new Date().toISOString(),\n  })\n}\n\nexport const openApi = {\n  tags: ['Customers', 'Email'],\n  methods: {\n    POST: {\n      summary: 'Compose + send an email anchored to a Person',\n      tags: ['Customers', 'Email'],\n      responses: [\n        { status: 200, description: 'Email queued for send' },\n        { status: 400, description: 'Invalid person id' },\n        { status: 401, description: 'Unauthorized' },\n        { status: 403, description: 'Missing customers.email.compose feature or mutation guard rejection' },\n        { status: 404, description: 'Person or channel not found' },\n        { status: 409, description: 'Channel not connected' },\n        { status: 422, description: 'Invalid request body' },\n        { status: 500, description: 'Send failed' },\n      ],\n    },\n  },\n}\nexport default POST\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAElB,SAAS,0BAA0B;AACnC,SAAS,8BAA8B;AACvC,SAAS,6BAA6B;AACtC,SAAS,oBAAoB;AAC7B;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAS,0CAA0C;AACnD,SAAS,uCAAuC;AAChD,SAAS,0BAA0B;AACnC,SAAS,sBAAsB;AAGxB,MAAM,WAAW;AAAA,EACtB,MAAM;AAAA,EACN,MAAM;AAAA,IACJ,aAAa;AAAA,IACb,iBAAiB,CAAC,yBAAyB;AAAA,EAC7C;AACF;AAEA,MAAM,gBAAgB,EACnB,OAAO;AAAA,EACN,eAAe,EAAE,OAAO,EAAE,KAAK;AAAA,EAC/B,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE;AAAA,EAC7C,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,IAAI,EAAE,EAAE,SAAS;AAAA,EACjD,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,IAAI,EAAE,EAAE,SAAS;AAAA,EAClD,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EAClC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAO;AAAA,EACnC,YAAY,EAAE,KAAK,CAAC,QAAQ,MAAM,CAAC,EAAE,QAAQ,MAAM;AAAA,EACnD,YAAY,EAAE,KAAK,CAAC,WAAW,QAAQ,CAAC,EAAE,QAAQ,SAAS;AAAA,EAC3D,WAAW,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EACxC,YAAY,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,GAAG,CAAC,EAAE,IAAI,EAAE,EAAE,SAAS;AAAA,EAC1D,iBAAiB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAC9C,CAAC,EACA,OAAO;AAMV,eAAsB,KAAK,KAAc,SAA0C;AACjF,QAAM,EAAE,IAAI,SAAS,IAAI,MAAM,QAAQ;AACvC,MAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,QAAQ,EAAE,SAAS;AAClD,WAAO,aAAa,KAAK,EAAE,OAAO,oBAAoB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC1E;AAEA,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM,OAAO,CAAC,MAAM,UAAU;AACjC,WAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrE;AAEA,MAAI;AACJ,MAAI;AACF,WAAO,cAAc,MAAM,MAAM,aAAa,KAAK,IAAI,CAAC;AAAA,EAC1D,SAAS,KAAK;AACZ,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,eAAe,QAAQ,IAAI,UAAU,uBAAuB;AAAA,MACrE,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,SAAS,mBAAmB,IAAI;AACtC,QAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,SAAS,IAAI,CAAC;AAExF,QAAM,KAAM,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAO3D,QAAM,SAAS,MAAM;AAAA,IACnB;AAAA,IACA;AAAA,IACA;AAAA,MACE,IAAI;AAAA,MACJ,MAAM;AAAA,MACN,UAAU,KAAK;AAAA,MACf,WAAW;AAAA,IACb;AAAA,IACA;AAAA,IACA,EAAE,UAAU,KAAK,UAAoB,gBAAgB,OAAO,cAAe,KAAmC,SAAS,KAAK;AAAA,EAC9H;AACA,MAAI,CAAC,QAAQ;AACX,WAAO,aAAa,KAAK,EAAE,OAAO,mBAAmB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACzE;AACA,QAAM,iBAAkB,OAA8C,kBAAkB;AACxF,MAAI,CAAC,gCAAgC,EAAE,OAAO,MAAM,eAAe,CAAC,GAAG;AACrE,WAAO,aAAa,KAAK,EAAE,OAAO,mBAAmB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACzE;AAEA,QAAM,cAAc,MAAM,0BAA0B,WAAW;AAAA,IAC7D,UAAU,KAAK;AAAA,IACf;AAAA,IACA;AAAA,IACA,cAAc;AAAA,IACd,YAAY;AAAA,IACZ,WAAW;AAAA,IACX,eAAe,IAAI;AAAA,IACnB,gBAAgB,IAAI;AAAA,EACtB,CAAC;AACD,MAAI,eAAe,CAAC,YAAY,IAAI;AAClC,WAAO,aAAa,KAAK,YAAY,MAAM,EAAE,QAAQ,YAAY,OAAO,CAAC;AAAA,EAC3E;AAOA,QAAM,oBAAoB,UAAU;AAAA,IAClC;AAAA,EACF;AAEA,QAAM,aAAa,MAAM;AAAA,IACvB;AAAA,IACA,EAAE,QAAQ,KAAK,KAAe,UAAU,KAAK,UAAoB,gBAAgB,KAAK;AAAA,IACtF;AAAA,MACE,eAAe,KAAK;AAAA,MACpB,IAAI,KAAK;AAAA,MACT,IAAI,KAAK;AAAA,MACT,KAAK,KAAK;AAAA,MACV,SAAS,KAAK;AAAA,MACd,MAAM,KAAK,eAAe,SAAS,EAAE,MAAM,KAAK,KAAK,IAAI,EAAE,OAAO,KAAK,KAAK;AAAA,MAC5E,WAAW,KAAK;AAAA,MAChB,YAAY,KAAK;AAAA,MACjB,iBAAiB,KAAK;AAAA,MACtB,iBAAiB;AAAA,QACf,eAAe,KAAK;AAAA,QACpB,aAAa;AAAA,MACf;AAAA,IACF;AAAA,EACF;AAEA,MAAI,CAAC,WAAW,IAAI;AAClB,WAAO,aAAa,KAAK,EAAE,OAAO,WAAW,MAAM,GAAG,EAAE,QAAQ,WAAW,OAAO,CAAC;AAAA,EACrF;AAEA,MAAI,aAAa,MAAM,YAAY,uBAAuB;AACxD,UAAM,iCAAiC,WAAW;AAAA,MAChD,UAAU,KAAK;AAAA,MACf;AAAA,MACA;AAAA,MACA,cAAc;AAAA,MACd,YAAY;AAAA,MACZ,WAAW;AAAA,MACX,eAAe,IAAI;AAAA,MACnB,gBAAgB,IAAI;AAAA,MACpB,UAAU,YAAY,YAAY;AAAA,IACpC,CAAC;AAAA,EACH;AAKA,SAAO,aAAa,KAAK;AAAA,IACvB,WAAW,WAAW;AAAA,IACtB,UAAU,WAAW;AAAA,IACrB,WAAU,oBAAI,KAAK,GAAE,YAAY;AAAA,EACnC,CAAC;AACH;AAEO,MAAM,UAAU;AAAA,EACrB,MAAM,CAAC,aAAa,OAAO;AAAA,EAC3B,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,MAAM,CAAC,aAAa,OAAO;AAAA,MAC3B,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,wBAAwB;AAAA,QACpD,EAAE,QAAQ,KAAK,aAAa,oBAAoB;AAAA,QAChD,EAAE,QAAQ,KAAK,aAAa,eAAe;AAAA,QAC3C,EAAE,QAAQ,KAAK,aAAa,sEAAsE;AAAA,QAClG,EAAE,QAAQ,KAAK,aAAa,8BAA8B;AAAA,QAC1D,EAAE,QAAQ,KAAK,aAAa,wBAAwB;AAAA,QACpD,EAAE,QAAQ,KAAK,aAAa,uBAAuB;AAAA,QACnD,EAAE,QAAQ,KAAK,aAAa,cAAc;AAAA,MAC5C;AAAA,IACF;AAAA,EACF;AACF;AACA,IAAO,gBAAQ;",
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { readJsonSafe } from '@open-mercato/shared/lib/http/readJsonSafe'\nimport {\n  validateCrudMutationGuard,\n  runCrudMutationGuardAfterSuccess,\n} from '@open-mercato/shared/lib/crud/mutation-guard'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport { resolveSingleOrganizationIdOrDeny } from '@open-mercato/core/modules/directory/utils/organizationScopeFilter'\nimport { isOrganizationReadAccessAllowed } from '@open-mercato/core/modules/directory/utils/organizationScopeGuard'\nimport { resolveAuthActorId } from '../../../../lib/interactionRequestContext'\nimport { CustomerEntity } from '../../../../data/entities'\nimport type { SendAsUserService } from '@open-mercato/core/modules/communication_channels/lib/send-as-user'\n\nexport const metadata = {\n  path: '/customers/people/[id]/emails',\n  POST: {\n    requireAuth: true,\n    requireFeatures: ['customers.email.compose'],\n  },\n}\n\nconst composeSchema = z\n  .object({\n    userChannelId: z.string().uuid(),\n    to: z.array(z.string().email()).min(1).max(50),\n    cc: z.array(z.string().email()).max(50).optional(),\n    bcc: z.array(z.string().email()).max(50).optional(),\n    subject: z.string().min(1).max(500),\n    body: z.string().min(1).max(200_000),\n    bodyFormat: z.enum(['text', 'html']).default('html'),\n    visibility: z.enum(['private', 'shared']).default('private'),\n    inReplyTo: z.string().max(500).optional(),\n    references: z.array(z.string().max(500)).max(50).optional(),\n    parentMessageId: z.string().uuid().optional(),\n  })\n  .strict()\n\ntype RouteContext = {\n  params: Promise<{ id: string }> | { id: string }\n}\n\nexport async function POST(req: Request, context: RouteContext): Promise<Response> {\n  const { id: personId } = await context.params\n  if (!z.string().uuid().safeParse(personId).success) {\n    return NextResponse.json({ error: 'Invalid person id' }, { status: 400 })\n  }\n\n  const auth = await getAuthFromRequest(req)\n  if (!auth?.sub || !auth?.tenantId) {\n    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n  }\n\n  let body: z.infer<typeof composeSchema>\n  try {\n    body = composeSchema.parse(await readJsonSafe(req, null))\n  } catch (err) {\n    return NextResponse.json(\n      { error: err instanceof Error ? err.message : 'Invalid request body' },\n      { status: 422 },\n    )\n  }\n\n  const container = await createRequestContainer()\n  const userId = resolveAuthActorId(auth)\n  const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req })\n\n  const em = (container.resolve('em') as EntityManager).fork()\n\n  // 1. Verify the Person exists in the caller's tenant, then fail-closed on the\n  //    record's own organization \u2014 same pattern as the [id]/route.ts GET handler.\n  //    Loading by tenant + id (not a hand-rolled selected org) keeps this working\n  //    under the \"All organizations\" scope; the record's own org then becomes the\n  //    concrete org the guard and the outbound message are attributed to.\n  const person = await findOneWithDecryption(\n    em,\n    CustomerEntity,\n    {\n      id: personId,\n      kind: 'person',\n      tenantId: auth.tenantId,\n      deletedAt: null,\n    } as never,\n    undefined,\n    { tenantId: auth.tenantId as string, organizationId: resolveSingleOrganizationIdOrDeny(scope, auth) ?? null },\n  )\n  if (!person) {\n    return NextResponse.json({ error: 'Person not found' }, { status: 404 })\n  }\n  const organizationId = (person as { organizationId?: string | null }).organizationId ?? null\n  if (!isOrganizationReadAccessAllowed({ scope, auth, organizationId })) {\n    return NextResponse.json({ error: 'Person not found' }, { status: 404 })\n  }\n\n  const guardResult = await validateCrudMutationGuard(container, {\n    tenantId: auth.tenantId,\n    organizationId,\n    userId,\n    resourceKind: 'customers.person',\n    resourceId: personId,\n    operation: 'custom',\n    requestMethod: req.method,\n    requestHeaders: req.headers,\n  })\n  if (guardResult && !guardResult.ok) {\n    return NextResponse.json(guardResult.body, { status: guardResult.status })\n  }\n\n  // 2. Call the hub's send-as-user facade in-process (resolved via DI) so the\n  //    customers module makes no HTTP self-call. `crmVisibility` and `crmPersonId`\n  //    are injected as channelMetadata so the link-channel-message subscriber can\n  //    anchor the sent message back to this Person on the\n  //    `communication_channels.message.sent` event.\n  const sendAsUserService = container.resolve(\n    'communicationChannelsSendAsUser',\n  ) as SendAsUserService\n\n  const sendResult = await sendAsUserService(\n    container,\n    { userId: auth.sub as string, tenantId: auth.tenantId as string, organizationId, auth },\n    {\n      userChannelId: body.userChannelId,\n      to: body.to,\n      cc: body.cc,\n      bcc: body.bcc,\n      subject: body.subject,\n      body: body.bodyFormat === 'html' ? { html: body.body } : { plain: body.body },\n      inReplyTo: body.inReplyTo,\n      references: body.references,\n      parentMessageId: body.parentMessageId,\n      channelMetadata: {\n        crmVisibility: body.visibility,\n        crmPersonId: personId,\n      },\n    },\n  )\n\n  if (!sendResult.ok) {\n    return NextResponse.json({ error: sendResult.error }, { status: sendResult.status })\n  }\n\n  if (guardResult?.ok && guardResult.shouldRunAfterSuccess) {\n    await runCrudMutationGuardAfterSuccess(container, {\n      tenantId: auth.tenantId,\n      organizationId,\n      userId,\n      resourceKind: 'customers.person',\n      resourceId: personId,\n      operation: 'custom',\n      requestMethod: req.method,\n      requestHeaders: req.headers,\n      metadata: guardResult.metadata ?? null,\n    })\n  }\n\n  // Delivery is async (handled by the outbound queue worker), so this is the\n  // enqueue time \u2014 not the provider send time \u2014 and the provider's external\n  // message id is not known yet (the worker assigns it on successful delivery).\n  return NextResponse.json({\n    messageId: sendResult.messageId,\n    threadId: sendResult.threadId,\n    queuedAt: new Date().toISOString(),\n  })\n}\n\nexport const openApi = {\n  tags: ['Customers', 'Email'],\n  methods: {\n    POST: {\n      summary: 'Compose + send an email anchored to a Person',\n      tags: ['Customers', 'Email'],\n      responses: [\n        { status: 200, description: 'Email queued for send' },\n        { status: 400, description: 'Invalid person id' },\n        { status: 401, description: 'Unauthorized' },\n        { status: 403, description: 'Missing customers.email.compose feature or mutation guard rejection' },\n        { status: 404, description: 'Person or channel not found' },\n        { status: 409, description: 'Channel not connected' },\n        { status: 422, description: 'Invalid request body' },\n        { status: 500, description: 'Send failed' },\n      ],\n    },\n  },\n}\nexport default POST\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAElB,SAAS,0BAA0B;AACnC,SAAS,8BAA8B;AACvC,SAAS,6BAA6B;AACtC,SAAS,oBAAoB;AAC7B;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAS,0CAA0C;AACnD,SAAS,yCAAyC;AAClD,SAAS,uCAAuC;AAChD,SAAS,0BAA0B;AACnC,SAAS,sBAAsB;AAGxB,MAAM,WAAW;AAAA,EACtB,MAAM;AAAA,EACN,MAAM;AAAA,IACJ,aAAa;AAAA,IACb,iBAAiB,CAAC,yBAAyB;AAAA,EAC7C;AACF;AAEA,MAAM,gBAAgB,EACnB,OAAO;AAAA,EACN,eAAe,EAAE,OAAO,EAAE,KAAK;AAAA,EAC/B,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE;AAAA,EAC7C,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,IAAI,EAAE,EAAE,SAAS;AAAA,EACjD,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,IAAI,EAAE,EAAE,SAAS;AAAA,EAClD,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EAClC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAO;AAAA,EACnC,YAAY,EAAE,KAAK,CAAC,QAAQ,MAAM,CAAC,EAAE,QAAQ,MAAM;AAAA,EACnD,YAAY,EAAE,KAAK,CAAC,WAAW,QAAQ,CAAC,EAAE,QAAQ,SAAS;AAAA,EAC3D,WAAW,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EACxC,YAAY,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,GAAG,CAAC,EAAE,IAAI,EAAE,EAAE,SAAS;AAAA,EAC1D,iBAAiB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAC9C,CAAC,EACA,OAAO;AAMV,eAAsB,KAAK,KAAc,SAA0C;AACjF,QAAM,EAAE,IAAI,SAAS,IAAI,MAAM,QAAQ;AACvC,MAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,QAAQ,EAAE,SAAS;AAClD,WAAO,aAAa,KAAK,EAAE,OAAO,oBAAoB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC1E;AAEA,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM,OAAO,CAAC,MAAM,UAAU;AACjC,WAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrE;AAEA,MAAI;AACJ,MAAI;AACF,WAAO,cAAc,MAAM,MAAM,aAAa,KAAK,IAAI,CAAC;AAAA,EAC1D,SAAS,KAAK;AACZ,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,eAAe,QAAQ,IAAI,UAAU,uBAAuB;AAAA,MACrE,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,SAAS,mBAAmB,IAAI;AACtC,QAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,SAAS,IAAI,CAAC;AAExF,QAAM,KAAM,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAO3D,QAAM,SAAS,MAAM;AAAA,IACnB;AAAA,IACA;AAAA,IACA;AAAA,MACE,IAAI;AAAA,MACJ,MAAM;AAAA,MACN,UAAU,KAAK;AAAA,MACf,WAAW;AAAA,IACb;AAAA,IACA;AAAA,IACA,EAAE,UAAU,KAAK,UAAoB,gBAAgB,kCAAkC,OAAO,IAAI,KAAK,KAAK;AAAA,EAC9G;AACA,MAAI,CAAC,QAAQ;AACX,WAAO,aAAa,KAAK,EAAE,OAAO,mBAAmB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACzE;AACA,QAAM,iBAAkB,OAA8C,kBAAkB;AACxF,MAAI,CAAC,gCAAgC,EAAE,OAAO,MAAM,eAAe,CAAC,GAAG;AACrE,WAAO,aAAa,KAAK,EAAE,OAAO,mBAAmB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACzE;AAEA,QAAM,cAAc,MAAM,0BAA0B,WAAW;AAAA,IAC7D,UAAU,KAAK;AAAA,IACf;AAAA,IACA;AAAA,IACA,cAAc;AAAA,IACd,YAAY;AAAA,IACZ,WAAW;AAAA,IACX,eAAe,IAAI;AAAA,IACnB,gBAAgB,IAAI;AAAA,EACtB,CAAC;AACD,MAAI,eAAe,CAAC,YAAY,IAAI;AAClC,WAAO,aAAa,KAAK,YAAY,MAAM,EAAE,QAAQ,YAAY,OAAO,CAAC;AAAA,EAC3E;AAOA,QAAM,oBAAoB,UAAU;AAAA,IAClC;AAAA,EACF;AAEA,QAAM,aAAa,MAAM;AAAA,IACvB;AAAA,IACA,EAAE,QAAQ,KAAK,KAAe,UAAU,KAAK,UAAoB,gBAAgB,KAAK;AAAA,IACtF;AAAA,MACE,eAAe,KAAK;AAAA,MACpB,IAAI,KAAK;AAAA,MACT,IAAI,KAAK;AAAA,MACT,KAAK,KAAK;AAAA,MACV,SAAS,KAAK;AAAA,MACd,MAAM,KAAK,eAAe,SAAS,EAAE,MAAM,KAAK,KAAK,IAAI,EAAE,OAAO,KAAK,KAAK;AAAA,MAC5E,WAAW,KAAK;AAAA,MAChB,YAAY,KAAK;AAAA,MACjB,iBAAiB,KAAK;AAAA,MACtB,iBAAiB;AAAA,QACf,eAAe,KAAK;AAAA,QACpB,aAAa;AAAA,MACf;AAAA,IACF;AAAA,EACF;AAEA,MAAI,CAAC,WAAW,IAAI;AAClB,WAAO,aAAa,KAAK,EAAE,OAAO,WAAW,MAAM,GAAG,EAAE,QAAQ,WAAW,OAAO,CAAC;AAAA,EACrF;AAEA,MAAI,aAAa,MAAM,YAAY,uBAAuB;AACxD,UAAM,iCAAiC,WAAW;AAAA,MAChD,UAAU,KAAK;AAAA,MACf;AAAA,MACA;AAAA,MACA,cAAc;AAAA,MACd,YAAY;AAAA,MACZ,WAAW;AAAA,MACX,eAAe,IAAI;AAAA,MACnB,gBAAgB,IAAI;AAAA,MACpB,UAAU,YAAY,YAAY;AAAA,IACpC,CAAC;AAAA,EACH;AAKA,SAAO,aAAa,KAAK;AAAA,IACvB,WAAW,WAAW;AAAA,IACtB,UAAU,WAAW;AAAA,IACrB,WAAU,oBAAI,KAAK,GAAE,YAAY;AAAA,EACnC,CAAC;AACH;AAEO,MAAM,UAAU;AAAA,EACrB,MAAM,CAAC,aAAa,OAAO;AAAA,EAC3B,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,MAAM,CAAC,aAAa,OAAO;AAAA,MAC3B,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,wBAAwB;AAAA,QACpD,EAAE,QAAQ,KAAK,aAAa,oBAAoB;AAAA,QAChD,EAAE,QAAQ,KAAK,aAAa,eAAe;AAAA,QAC3C,EAAE,QAAQ,KAAK,aAAa,sEAAsE;AAAA,QAClG,EAAE,QAAQ,KAAK,aAAa,8BAA8B;AAAA,QAC1D,EAAE,QAAQ,KAAK,aAAa,wBAAwB;AAAA,QACpD,EAAE,QAAQ,KAAK,aAAa,uBAAuB;AAAA,QACnD,EAAE,QAAQ,KAAK,aAAa,cAAc;AAAA,MAC5C;AAAA,IACF;AAAA,EACF;AACF;AACA,IAAO,gBAAQ;",
   "names": []
 }

package/dist/modules/customers/api/people/[id]/route.js

@@ -3,6 +3,7 @@ import { z } from "zod";
 import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
 import { getAuthFromRequest } from "@open-mercato/shared/lib/auth/server";
 import { resolveOrganizationScopeForRequest } from "@open-mercato/core/modules/directory/utils/organizationScope";
+import { isExplicitlyEmptyOrganizationScope } from "@open-mercato/shared/lib/auth/organizationScope";
 import {
   CustomerEntity,
   CustomerPersonProfile,
@@ -35,9 +36,11 @@ import { denyCustomerDetailReadAsNotFound } from "../../../lib/detailReadAccess.
 import { loadPersonCompanyLinks, summarizePersonCompanies } from "../../../lib/personCompanies.js";
 import { normalizeCustomerDetailCustomFields } from "../../detailCustomFields.js";
 import { buildEmailVisibilityMikroFilter } from "../../../lib/visibilityFilter.js";
+import { listGrantsForViewerOnPerson, listSharedChannelIds } from "../../../lib/conversationShares.js";
 import { resolveCustomerDetailTenantScope } from "../../../lib/detailTenantScope.js";
 import { runWithCacheTenant } from "@open-mercato/cache";
-import { buildCollectionTags, canonicalizeResourceTag, isCrudCacheEnabled, resolveCrudCache } from "@open-mercato/shared/lib/crud/cache";
+import { isCrudCacheEnabled, resolveCrudCache } from "@open-mercato/shared/lib/crud/cache";
+import { buildPersonDetailCacheTags } from "../../../lib/personDetailCacheTags.js";
 import { createLogger } from "@open-mercato/shared/lib/logger";
 const logger = createLogger("customers");
 const metadata = {
@@ -47,15 +50,6 @@ const paramsSchema = z.object({
   id: z.string().uuid()
 });
 const PERSON_DETAIL_TTL_MS = 6e4;
-const PERSON_DETAIL_TAG_RESOURCES = [
-  "customers.person",
-  "customers.address",
-  "customers.tagAssignment",
-  "customers.labelAssignment",
-  "customers.personCompanyLink",
-  "customers.interaction",
-  "customers.activity"
-];
 function buildPersonDetailCacheKey(params) {
   const include = [...params.includeTokens].sort((a, b) => a.localeCompare(b)).join("|") || "none";
   const scoped = [...params.scopedOrganizationIds].sort((a, b) => a.localeCompare(b)).join("|") || "null";
@@ -71,14 +65,6 @@ function buildPersonDetailCacheKey(params) {
     `include=${include}`
   ].join(":");
 }
-function buildPersonDetailCacheTags(tenantId, organizationId) {
-  const tags = [];
-  for (const resource of PERSON_DETAIL_TAG_RESOURCES) {
-    const canonical = canonicalizeResourceTag(resource) ?? resource;
-    tags.push(...buildCollectionTags(canonical, tenantId, [organizationId]));
-  }
-  return tags;
-}
 function parseIncludeParams(request) {
   const url = new URL(request.url);
   const raw = url.searchParams.getAll("include");
@@ -424,6 +410,11 @@ async function GET(_req, ctx) {
       profileMeta = { reason: "person_tenant_mismatch" };
       return notFound("Person not found");
     }
+    if (isExplicitlyEmptyOrganizationScope(scope)) {
+      statusCode = 404;
+      profileMeta = { reason: "organization_scope_empty" };
+      return notFound("Person not found");
+    }
     const person = await findOneWithDecryption(
       em,
       CustomerEntity,
@@ -479,9 +470,19 @@ async function GET(_req, ctx) {
     profile = profileResult;
     profiler.mark("profile_loaded", { found: !!profile });
     companies = summarizePersonCompanies(profile, personCompanyLinks);
+    const emailShareScope = {
+      tenantId: person.tenantId ?? auth.tenantId ?? null,
+      organizationId: person.organizationId ?? auth.orgId ?? null
+    };
+    const [sharedConversations, sharedChannelIds] = await Promise.all([
+      listGrantsForViewerOnPerson(em, emailShareScope, viewerUserId, person.id),
+      listSharedChannelIds(em, emailShareScope, viewerUserId)
+    ]);
     const emailVisibilityFilter = buildEmailVisibilityMikroFilter({
       currentUserId: viewerUserId,
-      userFeatures: void 0
+      userFeatures: void 0,
+      sharedConversations,
+      sharedChannelIds
     });
     const personScope = { tenantId: person.tenantId ?? auth.tenantId ?? null, organizationId: person.organizationId ?? auth.orgId ?? null };
     const shouldLoadCanonicalInteractions = includeInteractions || includeActivities || includeTodos;