Initial commit: Add logistics and order_detail message types

- Add Logistics component with progress tracking
- Add OrderDetail component for order information
- Support data-driven steps and actions
- Add blue color scale to widget SCSS
- Fix node overflow and progress bar rendering issues
- Add English translations for dashboard components

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>

spec/controllers/webhooks/instagram_controller_spec.rb

@@ -0,0 +1,53 @@
+require 'rails_helper'
+
+RSpec.describe 'Webhooks::InstagramController', type: :request do
+  describe 'GET /webhooks/verify' do
+    it 'returns 401 when valid params are not present' do
+      get '/webhooks/instagram/verify'
+      expect(response).to have_http_status(:not_found)
+    end
+
+    it 'returns 401 when invalid params' do
+      with_modified_env IG_VERIFY_TOKEN: '123456' do
+        get '/webhooks/instagram/verify', params: { 'hub.challenge' => '123456', 'hub.mode' => 'subscribe', 'hub.verify_token' => 'invalid' }
+        expect(response).to have_http_status(:not_found)
+      end
+    end
+
+    it 'returns challenge when valid params' do
+      with_modified_env IG_VERIFY_TOKEN: '123456' do
+        get '/webhooks/instagram/verify', params: { 'hub.challenge' => '123456', 'hub.mode' => 'subscribe', 'hub.verify_token' => '123456' }
+        expect(response.body).to include '123456'
+      end
+    end
+  end
+
+  describe 'POST /webhooks/instagram' do
+    let!(:dm_params) { build(:instagram_message_create_event).with_indifferent_access }
+
+    it 'call the instagram events job with the params' do
+      allow(Webhooks::InstagramEventsJob).to receive(:perform_later)
+      expect(Webhooks::InstagramEventsJob).to receive(:perform_later)
+
+      instagram_params = dm_params.merge(object: 'instagram')
+      post '/webhooks/instagram', params: instagram_params
+      expect(response).to have_http_status(:success)
+    end
+
+    context 'when processing echo events' do
+      let!(:echo_params) { build(:instagram_story_mention_event_with_echo).with_indifferent_access }
+
+      it 'delays processing for echo events by 2 seconds' do
+        job_double = class_double(Webhooks::InstagramEventsJob)
+        allow(Webhooks::InstagramEventsJob).to receive(:set).with(wait: 2.seconds).and_return(job_double)
+        allow(job_double).to receive(:perform_later)
+
+        instagram_params = echo_params.merge(object: 'instagram')
+        post '/webhooks/instagram', params: instagram_params
+        expect(response).to have_http_status(:success)
+        expect(Webhooks::InstagramEventsJob).to have_received(:set).with(wait: 2.seconds)
+        expect(job_double).to have_received(:perform_later)
+      end
+    end
+  end
+end

spec/controllers/webhooks/line_controller_spec.rb

@@ -0,0 +1,12 @@
+require 'rails_helper'
+
+RSpec.describe 'Webhooks::LineController', type: :request do
+  describe 'POST /webhooks/line/{:line_channel_id}' do
+    it 'call the line events job with the params' do
+      allow(Webhooks::LineEventsJob).to receive(:perform_later)
+      expect(Webhooks::LineEventsJob).to receive(:perform_later)
+      post '/webhooks/line/line_channel_id', params: { content: 'hello' }
+      expect(response).to have_http_status(:success)
+    end
+  end
+end

spec/controllers/webhooks/sms_controller_spec.rb

@@ -0,0 +1,12 @@
+require 'rails_helper'
+
+RSpec.describe 'Webhooks::SmsController', type: :request do
+  describe 'POST /webhooks/sms/{:phone_number}' do
+    it 'call the sms events job with the params' do
+      allow(Webhooks::SmsEventsJob).to receive(:perform_later)
+      expect(Webhooks::SmsEventsJob).to receive(:perform_later)
+      post '/webhooks/sms/123221321', params: { content: 'hello' }
+      expect(response).to have_http_status(:success)
+    end
+  end
+end

spec/controllers/webhooks/telegram_controller_spec.rb

@@ -0,0 +1,12 @@
+require 'rails_helper'
+
+RSpec.describe 'Webhooks::TelegramController', type: :request do
+  describe 'POST /webhooks/telegram/{:bot_token}' do
+    it 'call the telegram events job with the params' do
+      allow(Webhooks::TelegramEventsJob).to receive(:perform_later)
+      expect(Webhooks::TelegramEventsJob).to receive(:perform_later)
+      post '/webhooks/telegram/random_bot_token', params: { content: 'hello' }
+      expect(response).to have_http_status(:success)
+    end
+  end
+end

spec/controllers/webhooks/tiktok_controller_spec.rb

@@ -0,0 +1,64 @@
+require 'rails_helper'
+
+RSpec.describe 'Webhooks::TiktokController', type: :request do
+  let(:client_secret) { 'test-tiktok-secret' }
+  let(:timestamp) { Time.current.to_i }
+  let(:event_payload) do
+    {
+      event: 'im_receive_msg',
+      user_openid: 'biz-123',
+      content: { conversation_id: 'tt-conv-1' }.to_json
+    }
+  end
+
+  def signature_for(body)
+    OpenSSL::HMAC.hexdigest('SHA256', client_secret, "#{timestamp}.#{body}")
+  end
+
+  before do
+    InstallationConfig.where(name: 'TIKTOK_APP_SECRET').delete_all
+    GlobalConfig.clear_cache
+  end
+
+  it 'enqueues the events job for valid signature' do
+    allow(Webhooks::TiktokEventsJob).to receive(:perform_later)
+
+    body = event_payload.to_json
+    with_modified_env TIKTOK_APP_SECRET: client_secret do
+      post '/webhooks/tiktok',
+           params: body,
+           headers: { 'CONTENT_TYPE' => 'application/json', 'Tiktok-Signature' => "t=#{timestamp},s=#{signature_for(body)}" }
+    end
+
+    expect(response).to have_http_status(:success)
+    expect(Webhooks::TiktokEventsJob).to have_received(:perform_later)
+  end
+
+  it 'delays processing by 2 seconds for echo events' do
+    job_double = class_double(Webhooks::TiktokEventsJob)
+    allow(Webhooks::TiktokEventsJob).to receive(:set).with(wait: 2.seconds).and_return(job_double)
+    allow(job_double).to receive(:perform_later)
+
+    body = event_payload.to_json
+    with_modified_env TIKTOK_APP_SECRET: client_secret do
+      post '/webhooks/tiktok?event=im_send_msg',
+           params: body,
+           headers: { 'CONTENT_TYPE' => 'application/json', 'Tiktok-Signature' => "t=#{timestamp},s=#{signature_for(body)}" }
+    end
+
+    expect(response).to have_http_status(:success)
+    expect(Webhooks::TiktokEventsJob).to have_received(:set).with(wait: 2.seconds)
+    expect(job_double).to have_received(:perform_later)
+  end
+
+  it 'returns unauthorized for invalid signature' do
+    body = event_payload.to_json
+    with_modified_env TIKTOK_APP_SECRET: client_secret do
+      post '/webhooks/tiktok',
+           params: body,
+           headers: { 'CONTENT_TYPE' => 'application/json', 'Tiktok-Signature' => "t=#{timestamp},s=#{'0' * 64}" }
+    end
+
+    expect(response).to have_http_status(:unauthorized)
+  end
+end

spec/controllers/webhooks/whatsapp_controller_spec.rb

@@ -0,0 +1,62 @@
+require 'rails_helper'
+
+RSpec.describe 'Webhooks::WhatsappController', type: :request do
+  let(:channel) { create(:channel_whatsapp, provider: 'whatsapp_cloud', sync_templates: false, validate_provider_config: false) }
+
+  describe 'GET /webhooks/verify' do
+    it 'returns 401 when valid params are not present' do
+      get "/webhooks/whatsapp/#{channel.phone_number}"
+      expect(response).to have_http_status(:unauthorized)
+    end
+
+    it 'returns 401 when invalid params' do
+      get "/webhooks/whatsapp/#{channel.phone_number}",
+          params: { 'hub.challenge' => '123456', 'hub.mode' => 'subscribe', 'hub.verify_token' => 'invalid' }
+      expect(response).to have_http_status(:unauthorized)
+    end
+
+    it 'returns challenge when valid params' do
+      get "/webhooks/whatsapp/#{channel.phone_number}",
+          params: { 'hub.challenge' => '123456', 'hub.mode' => 'subscribe', 'hub.verify_token' => channel.provider_config['webhook_verify_token'] }
+      expect(response.body).to include '123456'
+    end
+  end
+
+  describe 'POST /webhooks/whatsapp/{:phone_number}' do
+    it 'call the whatsapp events job with the params' do
+      allow(Webhooks::WhatsappEventsJob).to receive(:perform_later)
+      expect(Webhooks::WhatsappEventsJob).to receive(:perform_later)
+      post '/webhooks/whatsapp/123221321', params: { content: 'hello' }
+      expect(response).to have_http_status(:success)
+    end
+
+    context 'when phone number is in inactive list' do
+      before do
+        allow(GlobalConfig).to receive(:get_value).with('INACTIVE_WHATSAPP_NUMBERS').and_return('+1234567890,+9876543210')
+      end
+
+      it 'returns service unavailable for inactive phone number in URL params' do
+        allow(Rails.logger).to receive(:warn)
+        expect(Rails.logger).to receive(:warn).with('Rejected webhook for inactive WhatsApp number: +1234567890')
+
+        post '/webhooks/whatsapp/+1234567890', params: { content: 'hello' }
+        expect(response).to have_http_status(:unprocessable_entity)
+        expect(response.parsed_body['error']).to eq('Inactive WhatsApp number')
+      end
+    end
+
+    context 'when INACTIVE_WHATSAPP_NUMBERS config is not set' do
+      before do
+        allow(GlobalConfig).to receive(:get_value).with('INACTIVE_WHATSAPP_NUMBERS').and_return(nil)
+      end
+
+      it 'processes the webhook normally' do
+        allow(Webhooks::WhatsappEventsJob).to receive(:perform_later)
+        expect(Webhooks::WhatsappEventsJob).to receive(:perform_later)
+
+        post '/webhooks/whatsapp/+1234567890', params: { content: 'hello' }
+        expect(response).to have_http_status(:success)
+      end
+    end
+  end
+end