lambda-erp 1.2.0__py3-none-any.whl → 1.2.2__py3-none-any.whl

api/chat.py

@@ -3739,7 +3739,8 @@ async def run_thinking_loop(
                 success = False
             else:
                 try:
-                    result = await asyncio.to_thread(handler, fn_args)
+                    from api.write_context import run_as_actor
+                    result = await asyncio.to_thread(run_as_actor, principal_ref[0], handler, fn_args)
                     success = not (isinstance(result, dict) and ("error" in result or result.get("ok") is False or result.get("failed", 0)))
                 except Exception as e:
                     result = {"error": str(e)}

api/mentions.py

@@ -1,11 +1,13 @@
-"""Personal mentions with explicit recipients, atomic delivery and plugin sources.
+"""Personal mentions resolved from visible note text, with atomic delivery.
 
-No email/push delivery, inferred recipients, or caller-selectable inbox owner.
+No email/push delivery, hidden recipients, or caller-selectable inbox owner.
 Plugins own record access and note storage; this module owns notifications.
 """
 import hashlib
 import json
+import re
 import uuid
+from contextvars import ContextVar
 
 from fastapi import HTTPException
 from pydantic import BaseModel, ConfigDict, Field
@@ -17,6 +19,50 @@ from lambda_erp.utils import now
 
 SOURCES = {}
 REAL_ROLES = {"viewer", "manager", "admin"}
+_WRITING_MENTION_NOTE = ContextVar("writing_mention_note", default=False)
+_MENTION_START = re.compile(r"(?<![\w@./+\-])@(?=\S)")
+
+
+def writing_mention_note():
+    """Dedicated note action will deliver after its source has saved the note."""
+    return _WRITING_MENTION_NOTE.get()
+
+
+def _mention_users():
+    return get_db().sql('SELECT name, full_name, email, role, enabled FROM "User" '
+                        "WHERE enabled = 1 AND role IN ('viewer','manager','admin')")
+
+
+def _aliases(users):
+    aliases = {}
+    for user in users:
+        for value in (user.get("full_name"), user.get("email")):
+            if value and value.strip():
+                aliases.setdefault(value.strip().lower(), {})[user["name"]] = user
+    return aliases
+
+
+def resolve_note_mentions(body):
+    """Resolve visible @Full Name / @email tokens, never hidden recipient IDs."""
+    aliases = _aliases(_mention_users())
+    patterns = [(re.compile(re.escape(alias) + r"(?![\w@\-])", re.IGNORECASE), users)
+                for alias, users in sorted(aliases.items(), key=lambda item: len(item[0]), reverse=True)]
+    recipients, end = {}, 0
+    for marker in _MENTION_START.finditer(body):
+        if marker.start() < end:
+            continue  # The second @ inside an explicit @email address.
+        for pattern, users in patterns:
+            match = pattern.match(body, marker.end())
+            if match:
+                if len(users) != 1:
+                    raise ValueError("An @mention matches multiple colleagues. Use the person's @email or select them from the suggestions. No note was saved.")
+                recipients.update(users)
+                end = match.end()
+                break
+        # Unknown handles are ordinary text, just like unmarked emails.
+    if len(recipients) > 20:
+        raise ValueError("A note can mention at most 20 colleagues. No note was saved.")
+    return recipients
 
 
 def register_mention_source(doctype, *, label, can_access, create_note, resolve_note, resolve_notes=None):
@@ -45,7 +91,6 @@ class Note(Input):
     doctype: str = Field(min_length=1, max_length=100)
     record_id: str = Field(min_length=1, max_length=200)
     body: str = Field(min_length=1, max_length=8000)
-    mention_user_ids: list[str] = Field(default_factory=list, max_length=20)
     request_id: str = Field(min_length=8, max_length=100)
 
 
@@ -61,6 +106,8 @@ class State(Input):
 
 
 def _actor(user):
+    if (user or {}).get('_shared_connection'):
+        raise PermissionError("Mentions require a personal ERP connection. The shared team key identifies its owner, not the current user.")
     from api.auth import refresh_auth_principal
     actor = refresh_auth_principal(user)
     if not actor or actor.get("role") not in REAL_ROLES:
@@ -88,6 +135,11 @@ def search_mention_users(args, user):
         "AND role IN ('viewer','manager','admin') "
         "AND (LOWER(COALESCE(full_name,'')) LIKE ? ESCAPE '!' OR LOWER(email) LIKE ? ESCAPE '!') "
         'ORDER BY full_name, name LIMIT 20', [f"%{q}%", f"%{q}%"])
+    aliases = _aliases(_mention_users())
+    for row in rows:
+        full_name = (row.get("full_name") or "").strip()
+        token = full_name if full_name and len(aliases.get(full_name.lower(), {})) == 1 else row["email"]
+        row["mention_text"] = "@" + token
     return {"users": rows, "acting_user": _identity(actor),
             "sources": [{"doctype": key, "label": value["label"]} for key, value in SOURCES.items()]}
 
@@ -100,8 +152,7 @@ def add_record_note(args, user):
         raise ValueError("Note body must not be blank.")
     source, db = _source(data.doctype), get_db()
     actor_id = _identity(actor)["user_id"]
-    recipients = sorted(set(data.mention_user_ids))
-    payload = {**data.model_dump(exclude={"request_id"}), "mention_user_ids": recipients}
+    payload = data.model_dump(exclude={"request_id"})
     digest = hashlib.sha256(json.dumps(payload, sort_keys=True).encode()).hexdigest()
     request_pk = uuid.uuid4().hex
     with db.atomic():
@@ -121,22 +172,13 @@ def add_record_note(args, user):
             notified_count = db.sql('SELECT COUNT(*) AS n FROM "Mention Notification" WHERE doctype = ? AND note_id = ?',
                                     [data.doctype, note_id])[0]["n"]
         else:
-            targets = []
-            for recipient_id in recipients:
-                recipient = db.get_value("User", recipient_id, ["name", "full_name", "email", "role", "enabled"])
-                if (not recipient or not recipient.get("enabled") or recipient.get("role") not in REAL_ROLES
-                        or not source["can_access"](data.record_id, dict(recipient))):
-                    raise ValueError("A mentioned colleague cannot access this record. No note was saved.")
-                if recipient_id != actor_id:
-                    targets.append(recipient_id)
-            note_id = source["create_note"](data.record_id, data.body.strip(), actor)
+            token = _WRITING_MENTION_NOTE.set(True)
+            try:
+                note_id = source["create_note"](data.record_id, data.body.strip(), actor)
+            finally:
+                _WRITING_MENTION_NOTE.reset(token)
             db.sql('UPDATE "Mention Request" SET note_id = ? WHERE id = ?', [note_id, request_pk])
-            for recipient_id in targets:
-                db.insert("Mention Notification", {
-                    "id": uuid.uuid4().hex, "recipient_id": recipient_id, "actor_id": actor_id,
-                    "doctype": data.doctype, "note_id": note_id, "created_at": now(),
-                })
-            notified_count = len(targets)
+            notified_count = sync_note_mentions(data.doctype, data.record_id, note_id, data.body, actor)
         note = source["resolve_note"](note_id, actor)
         if not note:
             raise HTTPException(404, "Note is no longer available")
@@ -144,6 +186,40 @@ def add_record_note(args, user):
             "notified_count": notified_count, "replayed": repeated, "acting_user": _identity(actor)}
 
 
+def sync_note_mentions(doctype, record_id, note_id, body, user):
+    """Shared delivery for dedicated actions and generic document save hooks.
+
+    Call inside the note's save transaction. Existing recipients keep their
+    read/done state; new recipients receive one notification; removing a
+    visible mention removes its notification. No caller-selected recipient IDs.
+    """
+    db, source = get_db(), _source(doctype)
+    recipients = resolve_note_mentions(body)
+    with db.atomic():
+        existing = db.sql('SELECT recipient_id FROM "Mention Notification" WHERE doctype = ? AND note_id = ?',
+                          [doctype, note_id])
+        if not recipients and not existing:
+            return 0  # Ordinary text needs no personal notification identity.
+        actor = _actor(user)
+        if actor['role'] not in {'manager', 'admin'}:
+            raise PermissionError('Manager access is required to write mention notes.')
+        if not source['can_access'](record_id, actor):
+            raise HTTPException(404, 'Record is unavailable')
+        for recipient in recipients.values():
+            if not source['can_access'](record_id, recipient):
+                raise ValueError('A mentioned colleague cannot access this record. No note was saved.')
+        previous = {row['recipient_id'] for row in existing}
+        for recipient_id in previous - recipients.keys():
+            db.sql('DELETE FROM "Mention Notification" WHERE doctype = ? AND note_id = ? AND recipient_id = ?',
+                   [doctype, note_id, recipient_id])
+        for recipient_id in recipients.keys() - previous:
+            db.insert('Mention Notification', {
+                'id': uuid.uuid4().hex, 'recipient_id': recipient_id, 'actor_id': _identity(actor)['user_id'],
+                'doctype': doctype, 'note_id': note_id, 'created_at': now(),
+            })
+    return len(recipients)
+
+
 def _visible(row, actor, notes=None, authors=None):
     source = SOURCES.get(row["doctype"])
     note = (notes.get((row["doctype"], row["note_id"])) if notes is not None else
@@ -223,9 +299,9 @@ def initialize_mentions():
         db.sql('CREATE INDEX IF NOT EXISTS mention_inbox ON "Mention Notification" (recipient_id, created_at)')
     for name, handler, schema, role, description in (
         ("search_mention_users", search_mention_users, Search, "viewer",
-         "Find enabled ERP colleagues for explicit @mentions by name/email. Returns canonical user IDs, acting_user and supported record types. Do not guess a person when ambiguous."),
+         "Find enabled ERP colleagues for visible @mentions by name/email. Returns mention_text: insert that exact text in the note body to tag the person. Also returns canonical user IDs, acting_user and supported record types. Do not guess a person when ambiguous."),
         ("add_record_note", add_record_note, Note, "manager",
-         "Save an internal note on a supported record and notify explicitly selected colleagues. Resolve mention_user_ids using search_mention_users. Use a new request_id (UUID) per intended note; reuse it unchanged on retries. No email is sent. Authorship is the authenticated ERP account. Self-mentions do not notify."),
+         "Save an internal note and notify people visibly @mentioned in its body, including yourself. First use search_mention_users, then include each recipient's exact mention_text in body, e.g. 'salü vom johnny @Jon Torus'. Recipients are determined only from body; there is no recipient-ID argument. Unknown @handles and ordinary emails remain text. Ambiguous names require @email. Generic CRM note writes use the same mention processing. Use a new request_id (UUID) per intended note; reuse it unchanged on retries. No email is sent. Authorship is the authenticated ERP account."),
         ("list_my_mentions", list_my_mentions, Inbox, "viewer",
          "List the authenticated ERP user's mentions, with record/note links. open means not done; unread is separate. Use this for 'my mentions', never guess or pass another user. Returns acting_user, unread_count and pagination."),
         ("set_mention_state", set_mention_state, State, "viewer",

api/routers/documents.py

@@ -264,12 +264,14 @@ def get_doc(doctype_slug: str, name: str, _user: dict = _viewer):
 
 @router.post("/{doctype_slug}")
 def create_doc(doctype_slug: str, data: dict, _user: dict = _manager):
-    return create_document(doctype_slug, data)
+    from api.write_context import run_as_actor
+    return run_as_actor(_user, create_document, doctype_slug, data)
 
 
 @router.put("/{doctype_slug}/{name}")
 def update_doc(doctype_slug: str, name: str, data: dict, _user: dict = _manager):
-    return update_document(doctype_slug, name, data)
+    from api.write_context import run_as_actor
+    return run_as_actor(_user, update_document, doctype_slug, name, data)
 
 
 @router.post("/{doctype_slug}/{name}/submit")

api/routers/masters.py

@@ -720,12 +720,14 @@ def get_master(master_type: str, name: str, _user: dict = _viewer):
 
 @router.post("/{master_type}")
 def create_master(master_type: str, data: dict, _user: dict = _manager):
-    return create_master_record(master_type, data)
+    from api.write_context import run_as_actor
+    return run_as_actor(_user, create_master_record, master_type, data)
 
 
 @router.put("/{master_type}/{name}")
 def update_master(master_type: str, name: str, data: dict, _user: dict = _manager):
-    return update_master_record(master_type, name, data)
+    from api.write_context import run_as_actor
+    return run_as_actor(_user, update_master_record, master_type, name, data)
 
 
 def delete_master_record(master_type: str, name: str) -> dict:

api/routers/mcp.py

@@ -139,7 +139,8 @@ def _call(name: str, args: dict, user: dict):
     handler = handlers.get(name)
     if handler is None:
         raise KeyError(name)
-    return handler(args or {})
+    from api.write_context import run_as_actor
+    return run_as_actor(user, handler, args or {})
 
 
 def _rpc_error(mid, code: int, message: str) -> dict:
@@ -206,6 +207,10 @@ async def mcp_endpoint(request: Request):
     # MCP version. Otherwise a newer connector gets 400 instead of the 401
     # challenge that tells it how to sign in.
     user = _require_caller(request)
+    if request.headers.get('x-erp-connection-scope') == 'shared':
+        # A gateway can restrict its shared credential; this never grants
+        # permissions or changes who the credential belongs to.
+        user = {**user, '_shared_connection': True}
     try:
         body = await request.json()
     except Exception:

api/services.py

@@ -358,9 +358,11 @@ def run_registered_action(name: str, args: dict | None, user_info: dict | None =
         raise PermissionError(
             f"Action '{name}' requires {meta['minimum_role']} access."
         )
-    if meta.get("pass_user"):
-        return meta["handler"](args or {}, user_info)
-    return meta["handler"](args or {})
+    from api.write_context import write_actor
+    with write_actor(user_info):
+        if meta.get("pass_user"):
+            return meta["handler"](args or {}, user_info)
+        return meta["handler"](args or {})
 
 
 def registered_action_handlers(user_info: dict | None = None) -> dict:

api/write_context.py

@@ -0,0 +1,27 @@
+"""Authenticated write identity propagated to document lifecycle hooks.
+
+Set only at server dispatch boundaries, never from document/model arguments.
+ContextVar isolates concurrent requests and is copied by asyncio.to_thread.
+"""
+from contextlib import contextmanager
+from contextvars import ContextVar
+
+_ACTOR = ContextVar("document_write_actor", default=None)
+
+
+def current_write_actor():
+    return _ACTOR.get()
+
+
+@contextmanager
+def write_actor(user):
+    token = _ACTOR.set(user)
+    try:
+        yield
+    finally:
+        _ACTOR.reset(token)
+
+
+def run_as_actor(user, handler, *args):
+    with write_actor(user):
+        return handler(*args)

{lambda_erp-1.2.0.dist-info → lambda_erp-1.2.2.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: lambda-erp
-Version: 1.2.0
+Version: 1.2.2
 Summary: Core ERP logic - accounting, sales, purchasing, inventory
 Author: TORUS INVESTMENTS AG
 License-Expression: Apache-2.0

{lambda_erp-1.2.0.dist-info → lambda_erp-1.2.2.dist-info}/RECORD

@@ -2,7 +2,7 @@ api/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 api/attachments.py,sha256=v5WAGUafYqA4tHWkPHHnP5pYxsJx9wDf6Mn1fTyUmYc,20496
 api/auth.py,sha256=xkyMjAFO1RpiwevPzjEw194x5M06F54LLLBx93RsV5Q,43203
 api/bootstrap.py,sha256=9r6Bz93Puhz06d8C5LsbYk2NUt2Gr6Nz85FJxOWriCc,21308
-api/chat.py,sha256=O_-kIF926Mt5AmamzlzO5RnDFxTFAp7oSjSApz1Cnyw,240993
+api/chat.py,sha256=-FLrT5znrDJs1YrUB6gsmEbg9dQEI3bvQ2Em7qHKNTI,241088
 api/chat_links.py,sha256=eHuGxuMvWh42-UC3i97GVxV04NemXGMQDUhfoKiLO-A,2344
 api/demo_limits.py,sha256=b5PSNWgPIRuIVsAcJZyGLCivUv4RorEzJlZXf5LNwh0,14191
 api/deps.py,sha256=HaFNz0q0NlX49kNMs1xMe0rrO6Slqpt8-TlPOATirT4,140
@@ -11,7 +11,7 @@ api/errors.py,sha256=kEC6BUU4koPlyGoCDobAA8sHRoMqw50Xtc2105ZFKF4,5376
 api/list_values.py,sha256=mGe74gJ4fHPa5X2djJNTsRE8txa0hG40GAxMfTumU_w,963
 api/main.py,sha256=1rwZsXJRxIooFECRTZd-UwRUAGMp6SPL_sxLOCDploo,10803
 api/mcp_oauth.py,sha256=MjmScAvihkvEXdmM3QJP0FLqqXq-pQ1zmWa67LiArDM,21392
-api/mentions.py,sha256=lQa2E77cKQtRZMA7H5WMx78jI55JQJVkFKYJaCIO018,12910
+api/mentions.py,sha256=3A4hJ8mUD9IVisz21x6XtsHeR0tHqMyIbLPRn3mb9Ps,16712
 api/oauth.py,sha256=nRJGGweUGvD_yN7KBSuO7dhL7ynSnCjiPCQdvaWDgnY,22493
 api/pdf.py,sha256=HnJzRYVx6D43ULvYCb2ehwqrGVvaqbzT1vsNg1Gxg7M,19228
 api/pdf_contract.py,sha256=cEUntXz951OaXTvGdhYnL58LbR_efowGGHhNEBP7y5Q,16118
@@ -19,9 +19,10 @@ api/pdf_exports.py,sha256=bFdfJVInkCH3BV8e9PpBLF9sOX2OkcFnNO0emuVnrps,3199
 api/pdf_profiles.py,sha256=gqMRM-T6nzQnJ0DTxUf9MBFtpJws07MpNUQHHgI3Y7c,9206
 api/providers.py,sha256=ZwuDtukTpHh553wln-AEvRKQ5kE4296rj5_Kgh84O30,6525
 api/remarks_md.py,sha256=8MZ5oO3TNLDbjdMF2PjdFW13LdAffogOxT2nT0eYrVY,3754
-api/services.py,sha256=-1SMUBPxTrRUAiOGIpQ3fZDZ4dDmWwEfTSrpslibOFE,61202
+api/services.py,sha256=tXgkxV-U-KymK9xDo5Q6ILZg-roD9c8Uhmi6Uq4qPMI,61293
 api/time_filters.py,sha256=nAlyyZD7i3UOMq8kJdLGo2-jKYl84IZ8ad-oYBTjg1c,4882
 api/tool_permissions.py,sha256=CgVUUFLuJxEjQ44EWhzpIDNpzIY_tjSrgb5o5SBXU2Y,2216
+api/write_context.py,sha256=RsrpMTa7k78_wWPGGE2KwLmIOdt_hF54kji5HdjGNI0,649
 api/routers/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 api/routers/accounting.py,sha256=XRs5yGWMxSHN7cw2roslpYYrpK2rtzDgqwRdvMwe6VU,2529
 api/routers/actions.py,sha256=Pp3p88_coREd5KWkp_73IM_8ufVS_Kj6BRMRcEr5jY8,825
@@ -31,9 +32,9 @@ api/routers/availability.py,sha256=6iyVtIksPI3aC1tFFNAo4bwQ3iTiv3ebRmfhJzJrKPY,6
 api/routers/bank_reconciliation.py,sha256=USv3-WEsgmXvpXALkwVvE9E536hYQ8Wdlr3c1znyBiQ,3717
 api/routers/bank_statements.py,sha256=8d6ur-ZS7BCFv8mgdUJ7Il7qKjOxCj4rWdQgS1K4qIA,4518
 api/routers/chat_api.py,sha256=4XAtp3wszIkVB5n9IrPLscK3vNT4QHx5FRYk8JyJK3s,7084
-api/routers/documents.py,sha256=DG8fRnr5e-54xpmI1wp8i9CH1lJbSEHkg832HkMMnmk,11600
-api/routers/masters.py,sha256=rsXNEnBwwnLqUPSynH8DEv1HB2v-ZTh7nqxb_Ve9a8I,38907
-api/routers/mcp.py,sha256=x28NFgnNIXFPC7x_Im3eWRykafl1vjM4X93WGGufqRs,10625
+api/routers/documents.py,sha256=Ww3bL-BN0uIYPRg6UO-Gq3YjtC-nX2DUYNKOqkZOn0Q,11736
+api/routers/masters.py,sha256=hg8eO_TsN57ULrM20xTbf_P7sGQpAyRhGnIi9ZgoKRQ,39043
+api/routers/mcp.py,sha256=6MP7TYw-Its0f7uNfsa4CbgFoQUqongB0vsxwPGj2iM,10948
 api/routers/proposals.py,sha256=KtIITJ-GHa3GSMzSDE205nnFNvMwt0KUVAxU1M8-uyU,4520
 api/routers/reports.py,sha256=6GLlUJQfstS2p_7F5Il_XYwmZIifSHqaVjFdxTQM1OU,29738
 api/routers/setup.py,sha256=4qVLO0TExVCTGORDI4dNMUyxauvhLRbUS1VydnSubNw,16206
@@ -103,7 +104,7 @@ lambda_erp/stock/delivery_note.py,sha256=Z3s57gVA7oSIpLauSd3DIWu-1y3tmvEE-zsopTv
 lambda_erp/stock/purchase_receipt.py,sha256=E42oHRO4MAowQniLumbOjYY38vVfHbHchkxCWyM3KDg,11463
 lambda_erp/stock/stock_entry.py,sha256=Itbt9a1u8b1s1OItKwVYMJDLjbNze2-UI2raIemCuts,12493
 lambda_erp/stock/stock_ledger.py,sha256=AFybuScWwfaTvsqOSAon3gwsjIza7skXvrvyQowL7b0,13265
-lambda_erp-1.2.0.dist-info/METADATA,sha256=2QjarnyxgDGIKrIvfWnIeTiElZDK8hcGrpJe2Um2FAw,31852
-lambda_erp-1.2.0.dist-info/WHEEL,sha256=W3fkpkm7-wf9vBI5Z-7s0eWkeM-spu78I8Neb98DeEg,87
-lambda_erp-1.2.0.dist-info/licenses/LICENSE,sha256=8H08P22jiM0mJ97SgnpYchU0NeaPunGxZc3IqEaLgtc,11394
-lambda_erp-1.2.0.dist-info/RECORD,,
+lambda_erp-1.2.2.dist-info/METADATA,sha256=P5e1cb8A_f9b5tY9YjS2mDJMV9Ph5Qft5LZCoyK35Aw,31852
+lambda_erp-1.2.2.dist-info/WHEEL,sha256=W3fkpkm7-wf9vBI5Z-7s0eWkeM-spu78I8Neb98DeEg,87
+lambda_erp-1.2.2.dist-info/licenses/LICENSE,sha256=8H08P22jiM0mJ97SgnpYchU0NeaPunGxZc3IqEaLgtc,11394
+lambda_erp-1.2.2.dist-info/RECORD,,