@12-apps/notifications 4.7.1 → 4.8.0

package/dist/index.js

@@ -9,11 +9,11 @@ import {
   mergeChoices,
   mergeStoredRow,
   normalizePhoneE164
-} from "./chunk-HHMRCMQU.js";
+} from "./chunk-GGAZOLNN.js";
 import {
   NOTIFICATION_CHANNELS,
   taxonomyOf
-} from "./chunk-XE7HZVMH.js";
+} from "./chunk-BGI4BQ66.js";
 import {
   messagesOf
 } from "./chunk-M2TVBVH2.js";

package/dist/{jobs-BDZ7aGHV.d.ts → jobs-CcsSA0YR.d.ts}

@@ -1,5 +1,5 @@
 import { WireJobBlueprint } from '@12-apps/wiring';
-import { A as ApiNotifications } from './create-api-notifications-B3u6Kx3x.js';
+import { A as ApiNotifications } from './create-api-notifications-WaexrZnn.js';
 
 /**
  * The two background jobs getting a message out actually needs.

package/dist/manifest/server.d.ts

@@ -1,11 +1,11 @@
 import * as _12_apps_wiring from '@12-apps/wiring';
 import { WireRequest } from '@12-apps/wiring';
-import { N as NotificationsServerConfig, A as ApiNotifications, b as NotificationsRoute } from '../create-api-notifications-B3u6Kx3x.js';
-import { N as NotificationsJobDeps } from '../jobs-BDZ7aGHV.js';
-import '../generators-B9xt3sRh.js';
-import '../types-CXLAG3UU.js';
-import '../wire-6dzyfDE7.js';
-import '../web-push-Cs14Wp9u.js';
+import { N as NotificationsServerConfig, A as ApiNotifications, b as NotificationsRoute } from '../create-api-notifications-WaexrZnn.js';
+import { N as NotificationsJobDeps } from '../jobs-CcsSA0YR.js';
+import '../generators-CH5m8Ucj.js';
+import '../types-CYJN1xCM.js';
+import '../wire-CmRrB3_s.js';
+import '../web-push-iER5StBm.js';
 
 /** One `NotificationsRoute` as the wiring contract reads it. */
 declare function asWireRoute(route: NotificationsRoute): {

package/dist/manifest/server.js

@@ -1,11 +1,11 @@
 import {
   NOTIFICATIONS_JOBS
-} from "../chunk-CUZW62JS.js";
+} from "../chunk-KU4FVOFA.js";
 import {
   createApiNotifications
-} from "../chunk-WHBMPHQE.js";
-import "../chunk-HHMRCMQU.js";
-import "../chunk-XE7HZVMH.js";
+} from "../chunk-7234ROOP.js";
+import "../chunk-GGAZOLNN.js";
+import "../chunk-BGI4BQ66.js";
 import "../chunk-M2TVBVH2.js";
 import {
   __name

package/dist/manifest/web.d.ts

@@ -1,7 +1,7 @@
-import { c as createWebNotifications } from '../create-web-notifications-BHCzaU2y.js';
+import { c as createWebNotifications } from '../create-web-notifications-DrgqtU4Q.js';
 import 'react';
-import '../wire-6dzyfDE7.js';
-import '../types-CXLAG3UU.js';
+import '../wire-CmRrB3_s.js';
+import '../types-CYJN1xCM.js';
 
 /**
  * `@12-apps/notifications/manifest/web` — the web capabilities.

package/dist/manifest/web.js

@@ -1,6 +1,6 @@
 import {
   createWebNotifications
-} from "../chunk-MMLV4EZT.js";
+} from "../chunk-M5XTROYM.js";
 import "../chunk-BW723CX2.js";
 import "../chunk-M2TVBVH2.js";
 import "../chunk-7QVYU63E.js";

package/dist/{preferences-screen-IOW6Y2H2.js → preferences-screen-V3ZBWP7A.js}

@@ -4,7 +4,7 @@ import {
 } from "./chunk-CQZMTFPY.js";
 import {
   NOTIFICATION_CHANNELS
-} from "./chunk-XE7HZVMH.js";
+} from "./chunk-BGI4BQ66.js";
 import {
   __name
 } from "./chunk-7QVYU63E.js";
@@ -291,4 +291,4 @@ __name(PreferencesScreen, "PreferencesScreen");
 export {
   PreferencesScreen
 };
-//# sourceMappingURL=preferences-screen-IOW6Y2H2.js.map
+//# sourceMappingURL=preferences-screen-V3ZBWP7A.js.map

package/dist/react/index.d.ts

@@ -1,8 +1,8 @@
-import { N as NotificationsApiClient } from '../create-web-notifications-BHCzaU2y.js';
-export { B as BADGE_POLL_MS, a as BADGE_RECONCILE_MS, b as BellButtonProps, I as InboxListStatus, d as InboxState, e as InboxStore, f as NotificationsHttpError, g as NotificationsPanelProps, h as NotificationsResult, i as NotificationsSignalHook, j as NotificationsSubscribe, k as NotificationsTransport, l as NotificationsWebConfig, P as PAGE_SIZE, m as PreferencesPayload, n as PreferencesScreenProps, o as PushRegistrationPayload, W as WebNotifications, p as WebPushPlatformHint, q as WebPushSetupConfig, r as createInboxStore, s as createNotificationsApiClient, c as createWebNotifications, t as httpNotificationsTransport, u as useInboxList, v as useInboxState, w as useUnreadCount } from '../create-web-notifications-BHCzaU2y.js';
+import { N as NotificationsApiClient } from '../create-web-notifications-DrgqtU4Q.js';
+export { B as BADGE_POLL_MS, a as BADGE_RECONCILE_MS, b as BellButtonProps, I as InboxListStatus, d as InboxState, e as InboxStore, f as NotificationsHttpError, g as NotificationsPanelProps, h as NotificationsResult, i as NotificationsSignalHook, j as NotificationsSubscribe, k as NotificationsTransport, l as NotificationsWebConfig, P as PAGE_SIZE, m as PreferencesPayload, n as PreferencesScreenProps, o as PushRegistrationPayload, W as WebNotifications, p as WebPushPlatformHint, q as WebPushSetupConfig, r as createInboxStore, s as createNotificationsApiClient, c as createWebNotifications, t as httpNotificationsTransport, u as useInboxList, v as useInboxState, w as useUnreadCount } from '../create-web-notifications-DrgqtU4Q.js';
 import { JSX } from 'react';
-import { N as NotificationMessages } from '../wire-6dzyfDE7.js';
-import '../types-CXLAG3UU.js';
+import { N as NotificationMessages } from '../wire-CmRrB3_s.js';
+import '../types-CYJN1xCM.js';
 
 /** Inline SVG bell (no icon-library dependency in this package). */
 

package/dist/react/index.js

@@ -12,7 +12,7 @@ import {
   createNotificationsApiClient,
   createWebNotifications,
   httpNotificationsTransport
-} from "../chunk-MMLV4EZT.js";
+} from "../chunk-M5XTROYM.js";
 import {
   BADGE_POLL_MS,
   BADGE_RECONCILE_MS,

package/dist/server/index.d.ts

@@ -1,11 +1,11 @@
-import { A as ApiNotifications } from '../create-api-notifications-B3u6Kx3x.js';
-export { C as CommittedNotification, E as EMAIL_DRIVERS, c as EmailDriver, d as EmailDriverDeclaration, e as EmailMessage, f as ExtraDrivers, L as ListNotificationsInput, g as NotificationAudienceDirectory, h as NotificationChannelPolicy, i as NotificationCommittedListener, j as NotificationContactDirectory, k as NotificationCreateData, l as NotificationDelegate, m as NotificationDeliveryDelegate, n as NotificationDeliveryRow, o as NotificationDeliveryWhere, p as NotificationDispatchScheduler, q as NotificationInboxStore, r as NotificationPageAfter, s as NotificationPreferenceDelegate, t as NotificationPreferenceRow, u as NotificationPreferenceStore, v as NotificationRouter, w as NotificationWhere, a as NotificationsActor, x as NotificationsApiError, y as NotificationsDb, z as NotificationsDbClient, B as NotificationsDbProvider, D as NotificationsRequest, F as NotificationsResponse, b as NotificationsRoute, N as NotificationsServerConfig, G as NotifyByPermission, H as NotifyOptions, I as NotifyResult, P as PermissionNotificationResult, J as PermissionNotificationSkip, K as PushSubscriptionDelegate, M as PushSubscriptionInput, O as PushSubscriptionRow, Q as PushSubscriptionStore, S as SMS_DRIVERS, R as SmsDriver, T as SmsDriverDeclaration, U as SmsMessage, V as TransportDeclaration, W as TransportRegistry, X as WHATSAPP_DRIVERS, Y as WhatsAppDriver, Z as WhatsAppDriverDeclaration, _ as WhatsAppMessage, $ as createApiNotifications, a0 as createTransportRegistry, a1 as emailTransport, a2 as foldApiError, a3 as formatEmail, a4 as formatSms, a5 as formatWhatsApp, a6 as ok, a7 as smsTransport, a8 as whatsAppTransport } from '../create-api-notifications-B3u6Kx3x.js';
-export { D as DriverDeclarationBase, F as FetchImpl, N as NotificationProviderError, W as WEB_PUSH_DRIVERS, a as WebPushDriverDeclaration, b as WebPushMessage, c as WebPushSender, d as WebPushSubscription, e as WebPushSubscriptionSource, f as absoluteLink, g as formatWebPush, w as webPushTransport } from '../web-push-Cs14Wp9u.js';
+import { A as ApiNotifications } from '../create-api-notifications-WaexrZnn.js';
+export { C as CommittedNotification, E as EMAIL_DRIVERS, c as EmailDriver, d as EmailDriverDeclaration, e as EmailMessage, f as ExtraDrivers, L as ListNotificationsInput, g as NotificationAudienceDirectory, h as NotificationChannelPolicy, i as NotificationCommittedListener, j as NotificationContactDirectory, k as NotificationCreateData, l as NotificationDelegate, m as NotificationDeliveryDelegate, n as NotificationDeliveryRow, o as NotificationDeliveryWhere, p as NotificationDispatchScheduler, q as NotificationInboxStore, r as NotificationPageAfter, s as NotificationPreferenceDelegate, t as NotificationPreferenceRow, u as NotificationPreferenceStore, v as NotificationRouter, w as NotificationWhere, a as NotificationsActor, x as NotificationsApiError, y as NotificationsDb, z as NotificationsDbClient, B as NotificationsDbProvider, D as NotificationsRequest, F as NotificationsResponse, b as NotificationsRoute, N as NotificationsServerConfig, G as NotifyByPermission, H as NotifyOptions, I as NotifyResult, P as PermissionNotificationResult, J as PermissionNotificationSkip, K as PushSubscriptionDelegate, M as PushSubscriptionInput, O as PushSubscriptionRow, Q as PushSubscriptionStore, S as SMS_DRIVERS, R as SmsDriver, T as SmsDriverDeclaration, U as SmsMessage, V as TransportDeclaration, W as TransportRegistry, X as WHATSAPP_DRIVERS, Y as WhatsAppDriver, Z as WhatsAppDriverDeclaration, _ as WhatsAppMessage, $ as createApiNotifications, a0 as createTransportRegistry, a1 as emailTransport, a2 as foldApiError, a3 as formatEmail, a4 as formatSms, a5 as formatWhatsApp, a6 as ok, a7 as smsTransport, a8 as whatsAppTransport } from '../create-api-notifications-WaexrZnn.js';
+export { D as DriverDeclarationBase, F as FetchImpl, N as NotificationProviderError, W as WEB_PUSH_DRIVERS, a as WebPushDriverDeclaration, b as WebPushMessage, c as WebPushSender, d as WebPushSubscription, e as WebPushSubscriptionSource, f as absoluteLink, g as formatWebPush, w as webPushTransport } from '../web-push-iER5StBm.js';
 import { NotifyPort } from '@12-apps/wiring/ports';
-export { a as NOTIFICATIONS_DRAIN_CRON, b as NOTIFICATIONS_DRAIN_LEASE_MS, c as NOTIFICATIONS_JOBS, d as NOTIFICATIONS_SWEEP_QUEUE, N as NotificationsJobDeps } from '../jobs-BDZ7aGHV.js';
-import '../generators-B9xt3sRh.js';
-import '../types-CXLAG3UU.js';
-import '../wire-6dzyfDE7.js';
+export { a as NOTIFICATIONS_DRAIN_CRON, b as NOTIFICATIONS_DRAIN_LEASE_MS, c as NOTIFICATIONS_JOBS, d as NOTIFICATIONS_SWEEP_QUEUE, N as NotificationsJobDeps } from '../jobs-CcsSA0YR.js';
+import '../generators-CH5m8Ucj.js';
+import '../types-CYJN1xCM.js';
+import '../wire-CmRrB3_s.js';
 import '@12-apps/wiring';
 
 /**

package/dist/server/index.js

@@ -4,7 +4,7 @@ import {
   NOTIFICATIONS_JOBS,
   NOTIFICATIONS_SWEEP_QUEUE,
   wireNotifyPort
-} from "../chunk-CUZW62JS.js";
+} from "../chunk-KU4FVOFA.js";
 import {
   EMAIL_DRIVERS,
   NotificationProviderError,
@@ -25,9 +25,9 @@ import {
   smsTransport,
   webPushTransport,
   whatsAppTransport
-} from "../chunk-WHBMPHQE.js";
-import "../chunk-HHMRCMQU.js";
-import "../chunk-XE7HZVMH.js";
+} from "../chunk-7234ROOP.js";
+import "../chunk-GGAZOLNN.js";
+import "../chunk-BGI4BQ66.js";
 import "../chunk-M2TVBVH2.js";
 import "../chunk-7QVYU63E.js";
 export {

package/dist/{types-CXLAG3UU.d.ts → types-CYJN1xCM.d.ts}

@@ -84,12 +84,44 @@ interface NotificationEvent<TPayload = unknown> {
  * generator never touches existing generators, the router, or any transport
  * (open/closed).
  */
+/**
+ * Who the content is being rendered FOR — the reader, at the moment the
+ * generator is asked.
+ *
+ * A notification is stored as rendered TEXT: title and body are columns, so
+ * the language is chosen once, when the row is written, and never again. That
+ * makes this the only honest place to ask. A generator is registered at BOOT —
+ * a host that resolved its words there would pin every future reader to
+ * whichever language the process happened to start in, invisibly, because a
+ * single-locale host cannot tell the difference.
+ *
+ * The tag is the RECIPIENT's, never the request's. The person who triggers a
+ * notification is routinely not the person who reads it: an invite is sent
+ * because an administrator acted and is read by the invitee. Reading
+ * `Accept-Language` here would be a bug that only ever surfaces as somebody
+ * being told things in a language they do not speak.
+ *
+ * Absent means "nobody said" — a host with one audience, or one that stores no
+ * per-user language, populates nothing and every generator answers with its
+ * own default exactly as it did before this existed.
+ */
+interface NotificationGenerateContext {
+    readonly locale?: string | null;
+}
 interface NotificationGenerator<TPayload = unknown> {
     /** The event key, dot-namespaced ("order.paid"). One generator per type. */
     type: string;
     /** The preference category the router gates this type's fan-out on. */
     category: NotificationCategory;
-    generate: (payload: TPayload) => NotificationContent;
+    /**
+     * Render this event's content for ONE recipient.
+     *
+     * `context` is OPTIONAL, and that is what keeps every generator written
+     * before it working: a one-parameter `generate` is assignable to this
+     * signature unchanged. A host that passes nothing is stating a fact — it has
+     * no language for this reader — rather than asserting a default.
+     */
+    generate: (payload: TPayload, context?: NotificationGenerateContext) => NotificationContent;
 }
 /**
  * The recipient as a transport sees them: resolved destinations only. Built by
@@ -100,6 +132,11 @@ interface NotificationGenerator<TPayload = unknown> {
 interface TransportRecipient {
     userId: string;
     email: string | null;
+    /**
+     * The recipient's own language, when the host's contact directory states
+     * one. Absent means "nobody said" — see {@link NotificationGenerateContext}.
+     */
+    locale?: string | null;
     /** Phone as the host stores it (transports normalize per provider rules). */
     phone: string | null;
     /** How many active browser push subscriptions the user holds. */
@@ -152,4 +189,4 @@ interface NotificationLogger {
     error(message: string, ...meta: unknown[]): void;
 }
 
-export { type DeliveryStatus as D, NOTIFICATION_CHANNELS as N, type TransportRecipient as T, type NotificationCategory as a, type NotificationChannel as b, type NotificationContent as c, type NotificationEvent as d, type NotificationGenerator as e, type NotificationLogger as f, type NotificationRecipient as g, type NotificationTaxonomy as h, type NotificationTransport as i, taxonomyOf as t };
+export { type DeliveryStatus as D, NOTIFICATION_CHANNELS as N, type TransportRecipient as T, type NotificationCategory as a, type NotificationChannel as b, type NotificationContent as c, type NotificationEvent as d, type NotificationGenerateContext as e, type NotificationGenerator as f, type NotificationLogger as g, type NotificationRecipient as h, type NotificationTaxonomy as i, type NotificationTransport as j, taxonomyOf as t };

package/dist/web-push/index.d.ts

@@ -1,5 +1,5 @@
-import { c as WebPushSender } from '../web-push-Cs14Wp9u.js';
-import '../types-CXLAG3UU.js';
+import { c as WebPushSender } from '../web-push-iER5StBm.js';
+import '../types-CYJN1xCM.js';
 
 /**
  * `@12-apps/notifications/web-push` — the VAPID sender, behind its own subpath.

package/dist/{web-push-Cs14Wp9u.d.ts → web-push-iER5StBm.d.ts}

@@ -1,4 +1,4 @@
-import { f as NotificationLogger, c as NotificationContent, i as NotificationTransport } from './types-CXLAG3UU.js';
+import { g as NotificationLogger, c as NotificationContent, j as NotificationTransport } from './types-CYJN1xCM.js';
 
 /**
  * The DRIVER port — the reason a host adds a vendor with a config entry and no

package/dist/{wire-6dzyfDE7.d.ts → wire-CmRrB3_s.d.ts}

@@ -1,4 +1,4 @@
-import { a as NotificationCategory, b as NotificationChannel } from './types-CXLAG3UU.js';
+import { a as NotificationCategory, b as NotificationChannel } from './types-CYJN1xCM.js';
 
 /**
  * Every sentence this package can say to a USER, stated by the HOST.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@12-apps/notifications",
-  "version": "4.7.1",
+  "version": "4.8.0",
   "type": "module",
   "sideEffects": false,
   "description": "Plug-and-play notification system (12-15): an always-on in-app inbox, per-user × per-category channel preferences, and email / SMS / WhatsApp / web-push transports behind vendor DRIVERS so a second provider is a config entry. Framework-free core (.), host-mounted backend surface (./server: inbox / preferences / push-subscription endpoints, the channel router with delivery records + retry sweep, the permission fan-out, duck-typed Prisma seam), Hono adapter (./hono), React surface (./react: bell + badge, inbox drawer, preferences screen), VAPID sender (./web-push) and the package-owned Prisma partial + migrations. Standardized adoption contract in ADOPTING.md.",
@@ -80,7 +80,7 @@
   "devDependencies": {
     "@12-apps/eslint-config": "^1.22.0",
     "@12-apps/typescript-config": "^1.21.0",
-    "@12-apps/wiring": "^1.14.0",
+    "@12-apps/wiring": "^1.16.0",
     "@testing-library/react": "^16.1.0",
     "@types/react": "19.2.2",
     "@types/react-dom": "19.2.2",

package/src/index.ts

@@ -28,6 +28,7 @@ export {
   type NotificationChannel,
   type NotificationContent,
   type NotificationEvent,
+  type NotificationGenerateContext,
   type NotificationGenerator,
   type NotificationLogger,
   type NotificationRecipient,

package/src/server/db.ts

@@ -246,7 +246,18 @@ export type NotificationsDbProvider = () => Promise<NotificationsDb>;
  * Returning `null` for a user id means "no such recipient", which `notify`
  * treats as a caller bug and throws on — a notification addressed to nobody is
  * never silently dropped.
+ *
+ * `locale` is the recipient's own language, and it is here rather than on the
+ * event because it is a fact about the PERSON, not about what happened
+ * The host owns it for the same reason it owns the address: this
+ * package has no user table to read it from. Absent — the field omitted, or
+ * `null` for a host that stores no language yet — means "nobody said", and
+ * every generator answers with its default exactly as before.
  */
 export interface NotificationContactDirectory {
-  getContact(userId: string): Promise<{ email: string | null; phone: string | null } | null>;
+  getContact(userId: string): Promise<{
+    email: string | null;
+    phone: string | null;
+    locale?: string | null;
+  } | null>;
 }

package/src/server/dispatch.ts

@@ -99,6 +99,10 @@ export async function loadRecipient(
     userId,
     email: contact.email,
     phone: contact.phone,
+    // Carried through UNRESOLVED and only where the host supplied one: the
+    // absent case has to stay distinguishable from a stated language, because
+    // that is what lets a generator apply its own default in one place.
+    ...(contact.locale === undefined ? {} : { locale: contact.locale }),
     pushSubscriptionCount: await deps.pushSubscriptions.count(userId),
   };
 }

package/src/server/router.ts

@@ -235,11 +235,27 @@ export function createNotificationRouter(deps: NotificationRouterDeps): Notifica
 
     async notify(event, options = {}) {
       const generator = deps.generators.resolve(event.type);
-      const content = generator.generate(event.payload as never);
 
+      /*
+        The recipient is loaded BEFORE the content is rendered, and the order is
+        the whole of the fix.
+
+        `notify` is already per-person — `event.recipient.userId` is one user,
+        and a permission fan-out resolves its audience and calls this once each
+        — so the reader was knowable here all along. Rendering first simply
+        threw that away: the row was written in whatever language the generator
+        had been bound to at boot, for everyone.
+
+        Loading first also means a notification addressed to nobody now throws
+        before any content is built, which is the cheaper order anyway.
+      */
       const recipient = await loadRecipient(deps, event.recipient.userId);
       if (!recipient) throw new UnknownNotificationRecipientError(event.recipient.userId);
 
+      // Forwarded exactly as the directory stated it, `undefined` included: the
+      // generator owns the fallback, in one place a reader can find.
+      const content = generator.generate(event.payload as never, { locale: recipient.locale });
+
       const channels = await resolveChannels(deps, event, generator.category, recipient);
       const notification = await commit(deps, event, generator.category, content, channels);
 

package/src/types.ts

@@ -91,12 +91,45 @@ export interface NotificationEvent<TPayload = unknown> {
  * generator never touches existing generators, the router, or any transport
  * (open/closed).
  */
+/**
+ * Who the content is being rendered FOR — the reader, at the moment the
+ * generator is asked.
+ *
+ * A notification is stored as rendered TEXT: title and body are columns, so
+ * the language is chosen once, when the row is written, and never again. That
+ * makes this the only honest place to ask. A generator is registered at BOOT —
+ * a host that resolved its words there would pin every future reader to
+ * whichever language the process happened to start in, invisibly, because a
+ * single-locale host cannot tell the difference.
+ *
+ * The tag is the RECIPIENT's, never the request's. The person who triggers a
+ * notification is routinely not the person who reads it: an invite is sent
+ * because an administrator acted and is read by the invitee. Reading
+ * `Accept-Language` here would be a bug that only ever surfaces as somebody
+ * being told things in a language they do not speak.
+ *
+ * Absent means "nobody said" — a host with one audience, or one that stores no
+ * per-user language, populates nothing and every generator answers with its
+ * own default exactly as it did before this existed.
+ */
+export interface NotificationGenerateContext {
+  readonly locale?: string | null;
+}
+
 export interface NotificationGenerator<TPayload = unknown> {
   /** The event key, dot-namespaced ("order.paid"). One generator per type. */
   type: string;
   /** The preference category the router gates this type's fan-out on. */
   category: NotificationCategory;
-  generate: (payload: TPayload) => NotificationContent;
+  /**
+   * Render this event's content for ONE recipient.
+   *
+   * `context` is OPTIONAL, and that is what keeps every generator written
+   * before it working: a one-parameter `generate` is assignable to this
+   * signature unchanged. A host that passes nothing is stating a fact — it has
+   * no language for this reader — rather than asserting a default.
+   */
+  generate: (payload: TPayload, context?: NotificationGenerateContext) => NotificationContent;
 }
 
 /**
@@ -108,6 +141,11 @@ export interface NotificationGenerator<TPayload = unknown> {
 export interface TransportRecipient {
   userId: string;
   email: string | null;
+  /**
+   * The recipient's own language, when the host's contact directory states
+   * one. Absent means "nobody said" — see {@link NotificationGenerateContext}.
+   */
+  locale?: string | null;
   /** Phone as the host stores it (transports normalize per provider rules). */
   phone: string | null;
   /** How many active browser push subscriptions the user holds. */