@endora-commerce/mod-admin-notifications 0.0.0-stage → 0.100.0

package/dist/backend/services/admin-notification-service.d.ts

@@ -0,0 +1,78 @@
+import type { EntityManager } from '@mikro-orm/postgresql';
+import { AdminNotification, type AdminNotificationAudience } from '../entities/admin-notification.entity.js';
+export interface RecordNotificationInput {
+    audience: AdminNotificationAudience;
+    targetAdminUserId?: string | null;
+    kind: string;
+    subjectType?: string | null;
+    subjectId?: string | null;
+    title: string;
+    body?: string | null;
+    linkPath?: string | null;
+}
+export interface ListNotificationsInput {
+    adminUserId: string;
+    unread?: boolean;
+    limit?: number;
+    /** Opaque cursor (currently the `created_at` ISO + id of the last row of the previous page). */
+    cursor?: string | null;
+}
+export interface ListedNotification {
+    id: string;
+    audience: AdminNotificationAudience;
+    kind: string;
+    subjectType: string | null;
+    subjectId: string | null;
+    title: string;
+    body: string | null;
+    linkPath: string | null;
+    createdAt: Date;
+    isRead: boolean;
+}
+export interface ListNotificationsResult {
+    items: ListedNotification[];
+    nextCursor: string | null;
+    unreadCount: number;
+}
+/**
+ * AdminNotificationService — owns the read + write paths for the admin
+ * bell feed.
+ *
+ * `record()` is invoked by domain modules (e.g. organizations registration
+ * notifier) to push entries. `listForAdmin()` is the bell's feed query and
+ * carries the per-admin `isRead` resolution for `audience='all_admins'`
+ * rows. Read marking is split between updating `read_at` (for
+ * `audience='admin_user'`) and inserting into `admin_notification_reads`
+ * (for `audience='all_admins'`).
+ *
+ * Bounded growth: `pruneStale()` archives entries older than
+ * `maxUnreadPerAudience` per `audience`. Default cap = 50. The pruner is
+ * intended to run on a schedule or on each new write; the first iteration
+ * runs it inline on every `record()` call which keeps the table small
+ * without a separate job.
+ */
+export declare class AdminNotificationService {
+    private readonly emFactory;
+    private readonly maxUnreadPerAudience;
+    constructor(emFactory: () => EntityManager, options?: {
+        maxUnreadPerAudience?: number;
+    });
+    record(input: RecordNotificationInput): Promise<AdminNotification>;
+    listForAdmin(input: ListNotificationsInput): Promise<ListNotificationsResult>;
+    markRead(notificationId: string, adminUserId: string): Promise<void>;
+    markAllRead(adminUserId: string): Promise<number>;
+    countUnreadForAdmin(adminUserId: string): Promise<number>;
+    /**
+     * Soft-archive entries beyond `maxUnreadPerAudience` for the given audience.
+     * Keeps the most-recent N alive; older ones get `archived_at = now()`.
+     */
+    private pruneStale;
+    private isVisibleToAdmin;
+    private serializeCursor;
+    private parseCursor;
+}
+export declare class NotificationNotFoundError extends Error {
+    readonly notificationId: string;
+    constructor(notificationId: string);
+}
+//# sourceMappingURL=admin-notification-service.d.ts.map

package/dist/backend/services/admin-notification-service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin-notification-service.d.ts","sourceRoot":"","sources":["../../../src/backend/services/admin-notification-service.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,EAAE,iBAAiB,EAAE,KAAK,yBAAyB,EAAE,MAAM,0CAA0C,CAAC;AAG7G,MAAM,WAAW,uBAAuB;IACtC,QAAQ,EAAE,yBAAyB,CAAC;IACpC,iBAAiB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED,MAAM,WAAW,sBAAsB;IACrC,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,gGAAgG;IAChG,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACxB;AAED,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,yBAAyB,CAAC;IACpC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,SAAS,EAAE,IAAI,CAAC;IAChB,MAAM,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,WAAW,uBAAuB;IACtC,KAAK,EAAE,kBAAkB,EAAE,CAAC;IAC5B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,WAAW,EAAE,MAAM,CAAC;CACrB;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,qBAAa,wBAAwB;IAIjC,OAAO,CAAC,QAAQ,CAAC,SAAS;IAH5B,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAS;gBAG3B,SAAS,EAAE,MAAM,aAAa,EAC/C,OAAO,CAAC,EAAE;QAAE,oBAAoB,CAAC,EAAE,MAAM,CAAA;KAAE;IAKvC,MAAM,CAAC,KAAK,EAAE,uBAAuB,GAAG,OAAO,CAAC,iBAAiB,CAAC;IA6BlE,YAAY,CAAC,KAAK,EAAE,sBAAsB,GAAG,OAAO,CAAC,uBAAuB,CAAC;IAgG7E,QAAQ,CAAC,cAAc,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IA8BpE,WAAW,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IA0CjD,mBAAmB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAwB/D;;;OAGG;YACW,UAAU;IA8CxB,OAAO,CAAC,gBAAgB;IAKxB,OAAO,CAAC,eAAe;IAIvB,OAAO,CAAC,WAAW;CAUpB;AAiBD,qBAAa,yBAA0B,SAAQ,KAAK;aACtB,cAAc,EAAE,MAAM;gBAAtB,cAAc,EAAE,MAAM;CAInD"}

package/dist/backend/services/admin-notification-service.js

@@ -0,0 +1,284 @@
+import { AdminNotification } from '../entities/admin-notification.entity.js';
+import { AdminNotificationRead } from '../entities/admin-notification-read.entity.js';
+/**
+ * AdminNotificationService — owns the read + write paths for the admin
+ * bell feed.
+ *
+ * `record()` is invoked by domain modules (e.g. organizations registration
+ * notifier) to push entries. `listForAdmin()` is the bell's feed query and
+ * carries the per-admin `isRead` resolution for `audience='all_admins'`
+ * rows. Read marking is split between updating `read_at` (for
+ * `audience='admin_user'`) and inserting into `admin_notification_reads`
+ * (for `audience='all_admins'`).
+ *
+ * Bounded growth: `pruneStale()` archives entries older than
+ * `maxUnreadPerAudience` per `audience`. Default cap = 50. The pruner is
+ * intended to run on a schedule or on each new write; the first iteration
+ * runs it inline on every `record()` call which keeps the table small
+ * without a separate job.
+ */
+export class AdminNotificationService {
+    emFactory;
+    maxUnreadPerAudience;
+    constructor(emFactory, options) {
+        this.emFactory = emFactory;
+        this.maxUnreadPerAudience = options?.maxUnreadPerAudience ?? 50;
+    }
+    async record(input) {
+        // command-coverage-ignore: admin notification bookkeeping — system-generated
+        // alert record / read-state, not an audited domain-state mutation.
+        if (input.audience === 'admin_user' && !input.targetAdminUserId) {
+            throw new Error('AdminNotificationService.record: targetAdminUserId is required when audience="admin_user".');
+        }
+        if (input.audience === 'all_admins' && input.targetAdminUserId) {
+            throw new Error('AdminNotificationService.record: targetAdminUserId must be null when audience="all_admins".');
+        }
+        const em = this.emFactory();
+        const entry = em.create(AdminNotification, {
+            audience: input.audience,
+            targetAdminUserId: input.targetAdminUserId ?? null,
+            kind: input.kind,
+            subjectType: input.subjectType ?? null,
+            subjectId: input.subjectId ?? null,
+            title: input.title,
+            body: input.body ?? null,
+            linkPath: input.linkPath ?? null,
+        });
+        await em.persistAndFlush(entry);
+        await this.pruneStale(input.audience, input.targetAdminUserId ?? null);
+        return entry;
+    }
+    async listForAdmin(input) {
+        const limit = Math.min(Math.max(input.limit ?? 25, 1), 100);
+        const em = this.emFactory();
+        const cursor = input.cursor ? this.parseCursor(input.cursor) : null;
+        const whereParts = [];
+        // knex `raw` uses positional `?` placeholders (converted to $1..$n for pg
+        // in textual order). The SELECT's isRead `?` is textually first, so its
+        // binding is prepended when the final params array is assembled below.
+        const whereParams = [];
+        // Visible to this admin: their personal rows OR broadcasts.
+        whereParts.push(`(n."audience" = 'all_admins' or (n."audience" = 'admin_user' and n."target_admin_user_id" = ?))`);
+        whereParams.push(input.adminUserId);
+        whereParts.push(`n."archived_at" is null`);
+        if (input.unread === true) {
+            whereParts.push(`(
+          (n."audience" = 'admin_user' and n."read_at" is null)
+          or (n."audience" = 'all_admins'
+              and not exists (
+                select 1 from "admin_notification_reads" r
+                where r."notification_id" = n."id" and r."admin_user_id" = ?
+              ))
+        )`);
+            whereParams.push(input.adminUserId);
+        }
+        if (cursor) {
+            whereParts.push(`(n."created_at", n."id") < (?, ?)`);
+            whereParams.push(cursor.createdAt.toISOString());
+            whereParams.push(cursor.id);
+        }
+        const sql = `
+      select
+        n."id",
+        n."audience",
+        n."target_admin_user_id" as "targetAdminUserId",
+        n."kind",
+        n."subject_type" as "subjectType",
+        n."subject_id" as "subjectId",
+        n."title",
+        n."body",
+        n."link_path" as "linkPath",
+        n."created_at" as "createdAt",
+        n."read_at" as "readAt",
+        case
+          when n."audience" = 'admin_user' then n."read_at" is not null
+          else exists (
+            select 1 from "admin_notification_reads" r
+            where r."notification_id" = n."id" and r."admin_user_id" = ?
+          )
+        end as "isRead"
+      from "admin_notifications" n
+      where ${whereParts.join(' and ')}
+      order by n."created_at" desc, n."id" desc
+      limit ${limit + 1};
+    `;
+        // The isRead CASE placeholder appears in the SELECT (textually before the
+        // WHERE), so its binding (adminUserId) comes first.
+        const params = [input.adminUserId, ...whereParams];
+        const knex = em.getConnection().getKnex();
+        const rows = (await knex.raw(sql, params)).rows;
+        const hasMore = rows.length > limit;
+        const visibleRows = hasMore ? rows.slice(0, limit) : rows;
+        const items = visibleRows.map((row) => ({
+            id: row.id,
+            audience: row.audience,
+            kind: row.kind,
+            subjectType: row.subjectType ?? null,
+            subjectId: row.subjectId ?? null,
+            title: row.title,
+            body: row.body ?? null,
+            linkPath: row.linkPath ?? null,
+            createdAt: new Date(row.createdAt),
+            isRead: row.isRead,
+        }));
+        const nextCursor = hasMore
+            ? this.serializeCursor({ createdAt: new Date(visibleRows[visibleRows.length - 1].createdAt), id: visibleRows[visibleRows.length - 1].id })
+            : null;
+        const unreadCount = await this.countUnreadForAdmin(input.adminUserId);
+        return { items, nextCursor, unreadCount };
+    }
+    async markRead(notificationId, adminUserId) {
+        // command-coverage-ignore: admin notification bookkeeping — system-generated
+        // alert record / read-state, not an audited domain-state mutation.
+        const em = this.emFactory();
+        const entry = await em.findOne(AdminNotification, { id: notificationId });
+        if (!entry) {
+            throw new NotificationNotFoundError(notificationId);
+        }
+        if (!this.isVisibleToAdmin(entry, adminUserId)) {
+            throw new NotificationNotFoundError(notificationId);
+        }
+        if (entry.audience === 'admin_user') {
+            if (entry.readAt)
+                return;
+            entry.readAt = new Date();
+            await em.persistAndFlush(entry);
+            return;
+        }
+        // Broadcast — record the per-admin read cursor (idempotent).
+        const existing = await em.findOne(AdminNotificationRead, {
+            notificationId,
+            adminUserId,
+        });
+        if (existing)
+            return;
+        const cursor = em.create(AdminNotificationRead, {
+            notificationId,
+            adminUserId,
+        });
+        await em.persistAndFlush(cursor);
+    }
+    async markAllRead(adminUserId) {
+        const em = this.emFactory();
+        const knex = em.getConnection().getKnex();
+        let count = 0;
+        // Personal rows.
+        const personalUpdate = (await knex.raw(`
+      update "admin_notifications"
+      set "read_at" = now()
+      where "audience" = 'admin_user'
+        and "target_admin_user_id" = ?
+        and "read_at" is null
+        and "archived_at" is null
+      returning "id";
+    `, [adminUserId]));
+        count += personalUpdate.rows.length;
+        // Broadcasts — insert per-admin read cursors for every visible unread broadcast.
+        const broadcastInsert = (await knex.raw(`
+      insert into "admin_notification_reads" ("notification_id", "admin_user_id", "read_at")
+      select n."id", ?, now()
+        from "admin_notifications" n
+        where n."audience" = 'all_admins'
+          and n."archived_at" is null
+          and not exists (
+            select 1 from "admin_notification_reads" r
+            where r."notification_id" = n."id" and r."admin_user_id" = ?
+          )
+      on conflict do nothing
+      returning "notification_id";
+    `, [adminUserId, adminUserId]));
+        count += broadcastInsert.rows.length;
+        return count;
+    }
+    async countUnreadForAdmin(adminUserId) {
+        const em = this.emFactory();
+        const knex = em.getConnection().getKnex();
+        const sql = `
+      select count(*)::int as "count"
+        from "admin_notifications" n
+       where n."archived_at" is null
+         and (
+           (n."audience" = 'admin_user'
+             and n."target_admin_user_id" = ?
+             and n."read_at" is null)
+           or (n."audience" = 'all_admins'
+             and not exists (
+               select 1 from "admin_notification_reads" r
+               where r."notification_id" = n."id" and r."admin_user_id" = ?
+             ))
+         );
+    `;
+        const result = (await knex.raw(sql, [adminUserId, adminUserId]));
+        return result.rows[0]?.count ?? 0;
+    }
+    /**
+     * Soft-archive entries beyond `maxUnreadPerAudience` for the given audience.
+     * Keeps the most-recent N alive; older ones get `archived_at = now()`.
+     */
+    async pruneStale(audience, targetAdminUserId) {
+        const em = this.emFactory();
+        const knex = em.getConnection().getKnex();
+        if (audience === 'all_admins') {
+            await knex.raw(`
+        with ranked as (
+          select "id",
+                 row_number() over (order by "created_at" desc, "id" desc) as "rn"
+            from "admin_notifications"
+           where "audience" = 'all_admins'
+             and "archived_at" is null
+        )
+        update "admin_notifications" n
+           set "archived_at" = now()
+          from ranked
+         where n."id" = ranked."id"
+           and ranked."rn" > ?;
+      `, [this.maxUnreadPerAudience]);
+        }
+        else if (targetAdminUserId) {
+            await knex.raw(`
+        with ranked as (
+          select "id",
+                 row_number() over (order by "created_at" desc, "id" desc) as "rn"
+            from "admin_notifications"
+           where "audience" = 'admin_user'
+             and "target_admin_user_id" = ?
+             and "archived_at" is null
+        )
+        update "admin_notifications" n
+           set "archived_at" = now()
+          from ranked
+         where n."id" = ranked."id"
+           and ranked."rn" > ?;
+      `, [targetAdminUserId, this.maxUnreadPerAudience]);
+        }
+    }
+    isVisibleToAdmin(entry, adminUserId) {
+        if (entry.audience === 'all_admins')
+            return true;
+        return entry.targetAdminUserId === adminUserId;
+    }
+    serializeCursor(input) {
+        return Buffer.from(`${input.createdAt.toISOString()}|${input.id}`).toString('base64url');
+    }
+    parseCursor(raw) {
+        try {
+            const decoded = Buffer.from(raw, 'base64url').toString('utf-8');
+            const [iso, id] = decoded.split('|');
+            if (!iso || !id)
+                return null;
+            return { createdAt: new Date(iso), id };
+        }
+        catch {
+            return null;
+        }
+    }
+}
+export class NotificationNotFoundError extends Error {
+    notificationId;
+    constructor(notificationId) {
+        super(`Admin notification ${notificationId} not found or not visible.`);
+        this.notificationId = notificationId;
+        this.name = 'NotificationNotFoundError';
+    }
+}
+//# sourceMappingURL=admin-notification-service.js.map

package/dist/backend/services/admin-notification-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin-notification-service.js","sourceRoot":"","sources":["../../../src/backend/services/admin-notification-service.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,iBAAiB,EAAkC,MAAM,0CAA0C,CAAC;AAC7G,OAAO,EAAE,qBAAqB,EAAE,MAAM,+CAA+C,CAAC;AAwCtF;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,OAAO,wBAAwB;IAIhB;IAHF,oBAAoB,CAAS;IAE9C,YACmB,SAA8B,EAC/C,OAA2C;QAD1B,cAAS,GAAT,SAAS,CAAqB;QAG/C,IAAI,CAAC,oBAAoB,GAAG,OAAO,EAAE,oBAAoB,IAAI,EAAE,CAAC;IAClE,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,KAA8B;QACzC,6EAA6E;QAC7E,mEAAmE;QACnE,IAAI,KAAK,CAAC,QAAQ,KAAK,YAAY,IAAI,CAAC,KAAK,CAAC,iBAAiB,EAAE,CAAC;YAChE,MAAM,IAAI,KAAK,CACb,4FAA4F,CAC7F,CAAC;QACJ,CAAC;QACD,IAAI,KAAK,CAAC,QAAQ,KAAK,YAAY,IAAI,KAAK,CAAC,iBAAiB,EAAE,CAAC;YAC/D,MAAM,IAAI,KAAK,CACb,6FAA6F,CAC9F,CAAC;QACJ,CAAC;QACD,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAC5B,MAAM,KAAK,GAAG,EAAE,CAAC,MAAM,CAAC,iBAAiB,EAAE;YACzC,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,iBAAiB,EAAE,KAAK,CAAC,iBAAiB,IAAI,IAAI;YAClD,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,WAAW,EAAE,KAAK,CAAC,WAAW,IAAI,IAAI;YACtC,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,IAAI;YAClC,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,IAAI;YACxB,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,IAAI;SACjC,CAAC,CAAC;QACH,MAAM,EAAE,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;QAChC,MAAM,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,iBAAiB,IAAI,IAAI,CAAC,CAAC;QACvE,OAAO,KAAK,CAAC;IACf,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,KAA6B;QAC9C,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QAC5D,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAE5B,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACpE,MAAM,UAAU,GAAa,EAAE,CAAC;QAChC,0EAA0E;QAC1E,wEAAwE;QACxE,uEAAuE;QACvE,MAAM,WAAW,GAAyC,EAAE,CAAC;QAE7D,4DAA4D;QAC5D,UAAU,CAAC,IAAI,CACb,iGAAiG,CAClG,CAAC;QACF,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAEpC,UAAU,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;QAE3C,IAAI,KAAK,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;YAC1B,UAAU,CAAC,IAAI,CACb;;;;;;;UAOE,CACH,CAAC;YACF,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QACtC,CAAC;QAED,IAAI,MAAM,EAAE,CAAC;YACX,UAAU,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC;YACrD,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC,CAAC;YACjD,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC9B,CAAC;QAED,MAAM,GAAG,GAAG;;;;;;;;;;;;;;;;;;;;;cAqBF,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC;;cAExB,KAAK,GAAG,CAAC;KAClB,CAAC;QAEF,0EAA0E;QAC1E,oDAAoD;QACpD,MAAM,MAAM,GAAG,CAAC,KAAK,CAAC,WAAW,EAAE,GAAG,WAAW,CAAC,CAAC;QACnD,MAAM,IAAI,GAAG,EAAE,CAAC,aAAa,EAAE,CAAC,OAAO,EAAE,CAAC;QAC1C,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,IAA4B,CAAC;QAExE,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;QACpC,MAAM,WAAW,GAAG,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAE1D,MAAM,KAAK,GAAyB,WAAW,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YAC5D,EAAE,EAAE,GAAG,CAAC,EAAE;YACV,QAAQ,EAAE,GAAG,CAAC,QAAqC;YACnD,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,WAAW,EAAE,GAAG,CAAC,WAAW,IAAI,IAAI;YACpC,SAAS,EAAE,GAAG,CAAC,SAAS,IAAI,IAAI;YAChC,KAAK,EAAE,GAAG,CAAC,KAAK;YAChB,IAAI,EAAE,GAAG,CAAC,IAAI,IAAI,IAAI;YACtB,QAAQ,EAAE,GAAG,CAAC,QAAQ,IAAI,IAAI;YAC9B,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC;YAClC,MAAM,EAAE,GAAG,CAAC,MAAM;SACnB,CAAC,CAAC,CAAC;QAEJ,MAAM,UAAU,GAAG,OAAO;YACxB,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,EAAE,SAAS,EAAE,IAAI,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,WAAW,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC,EAAE,EAAE,CAAC;YAC5I,CAAC,CAAC,IAAI,CAAC;QAET,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAEtE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,CAAC;IAC5C,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,cAAsB,EAAE,WAAmB;QACxD,6EAA6E;QAC7E,mEAAmE;QACnE,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAC5B,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,iBAAiB,EAAE,EAAE,EAAE,EAAE,cAAc,EAAE,CAAC,CAAC;QAC1E,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,yBAAyB,CAAC,cAAc,CAAC,CAAC;QACtD,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,WAAW,CAAC,EAAE,CAAC;YAC/C,MAAM,IAAI,yBAAyB,CAAC,cAAc,CAAC,CAAC;QACtD,CAAC;QACD,IAAI,KAAK,CAAC,QAAQ,KAAK,YAAY,EAAE,CAAC;YACpC,IAAI,KAAK,CAAC,MAAM;gBAAE,OAAO;YACzB,KAAK,CAAC,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YAC1B,MAAM,EAAE,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;YAChC,OAAO;QACT,CAAC;QACD,6DAA6D;QAC7D,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,qBAAqB,EAAE;YACvD,cAAc;YACd,WAAW;SACZ,CAAC,CAAC;QACH,IAAI,QAAQ;YAAE,OAAO;QACrB,MAAM,MAAM,GAAG,EAAE,CAAC,MAAM,CAAC,qBAAqB,EAAE;YAC9C,cAAc;YACd,WAAW;SACZ,CAAC,CAAC;QACH,MAAM,EAAE,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;IACnC,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,WAAmB;QACnC,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,EAAE,CAAC,aAAa,EAAE,CAAC,OAAO,EAAE,CAAC;QAC1C,IAAI,KAAK,GAAG,CAAC,CAAC;QAEd,iBAAiB;QACjB,MAAM,cAAc,GAAG,CAAC,MAAM,IAAI,CAAC,GAAG,CACpC;;;;;;;;KAQD,EACC,CAAC,WAAW,CAAC,CACd,CAAoC,CAAC;QACtC,KAAK,IAAI,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC;QAEpC,iFAAiF;QACjF,MAAM,eAAe,GAAG,CAAC,MAAM,IAAI,CAAC,GAAG,CACrC;;;;;;;;;;;;KAYD,EACC,CAAC,WAAW,EAAE,WAAW,CAAC,CAC3B,CAAiD,CAAC;QACnD,KAAK,IAAI,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC;QAErC,OAAO,KAAK,CAAC;IACf,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,WAAmB;QAC3C,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,EAAE,CAAC,aAAa,EAAE,CAAC,OAAO,EAAE,CAAC;QAC1C,MAAM,GAAG,GAAG;;;;;;;;;;;;;;KAcX,CAAC;QACF,MAAM,MAAM,GAAG,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC,CAE9D,CAAC;QACF,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,CAAC,CAAC;IACpC,CAAC;IAED;;;OAGG;IACK,KAAK,CAAC,UAAU,CACtB,QAAmC,EACnC,iBAAgC;QAEhC,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,EAAE,CAAC,aAAa,EAAE,CAAC,OAAO,EAAE,CAAC;QAC1C,IAAI,QAAQ,KAAK,YAAY,EAAE,CAAC;YAC9B,MAAM,IAAI,CAAC,GAAG,CACZ;;;;;;;;;;;;;OAaD,EACC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAC5B,CAAC;QACJ,CAAC;aAAM,IAAI,iBAAiB,EAAE,CAAC;YAC7B,MAAM,IAAI,CAAC,GAAG,CACZ;;;;;;;;;;;;;;OAcD,EACC,CAAC,iBAAiB,EAAE,IAAI,CAAC,oBAAoB,CAAC,CAC/C,CAAC;QACJ,CAAC;IACH,CAAC;IAEO,gBAAgB,CAAC,KAAwB,EAAE,WAAmB;QACpE,IAAI,KAAK,CAAC,QAAQ,KAAK,YAAY;YAAE,OAAO,IAAI,CAAC;QACjD,OAAO,KAAK,CAAC,iBAAiB,KAAK,WAAW,CAAC;IACjD,CAAC;IAEO,eAAe,CAAC,KAAsC;QAC5D,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,SAAS,CAAC,WAAW,EAAE,IAAI,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAC3F,CAAC;IAEO,WAAW,CAAC,GAAW;QAC7B,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YAChE,MAAM,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACrC,IAAI,CAAC,GAAG,IAAI,CAAC,EAAE;gBAAE,OAAO,IAAI,CAAC;YAC7B,OAAO,EAAE,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC;QAC1C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;CACF;AAiBD,MAAM,OAAO,yBAA0B,SAAQ,KAAK;IACtB;IAA5B,YAA4B,cAAsB;QAChD,KAAK,CAAC,sBAAsB,cAAc,4BAA4B,CAAC,CAAC;QAD9C,mBAAc,GAAd,cAAc,CAAQ;QAEhD,IAAI,CAAC,IAAI,GAAG,2BAA2B,CAAC;IAC1C,CAAC;CACF"}

package/dist/manifest.d.ts

@@ -0,0 +1,171 @@
+/**
+ * Admin notifications — minimal "bell" surface.
+ *
+ * Introduced by feature 026 (Organizations) to deliver in-app
+ * notifications to admins when a new Organization registers. The
+ * module is intentionally generic so future features (low-stock
+ * alerts, RFQ awaiting reply, etc.) can write into the same feed.
+ *
+ * The schema is owned by migration 048_admin_notifications_init.ts.
+ */
+export declare const manifest: {
+    id: string;
+    name: string;
+    version: string;
+    dependencies: string[];
+    description?: string | undefined;
+    acknowledgedDependencies?: {
+        moduleId: string;
+        port: string;
+        reason: string;
+    }[] | undefined;
+    nonBindingDependencies?: {
+        moduleId: string;
+        name: string;
+        kind: "contributes-to" | "degrades-without" | "refuses-without";
+        reason: string;
+        whenAbsent?: string | undefined;
+    }[] | undefined;
+    activation?: {
+        settingCode: string;
+        default: boolean;
+    } | {
+        nonDeactivatable: true;
+        reason: string;
+    } | undefined;
+    settings?: {
+        moduleCode: string;
+        groups: {
+            code: string;
+            name: string;
+            salesChannelCodes?: string[] | undefined;
+            isSystemProtected?: boolean | undefined;
+        }[];
+        settings: {
+            code: string;
+            name: string;
+            valueType: "string" | "number" | "boolean" | "json" | "string_list" | "secret" | "credential_ref";
+            defaultValue: unknown;
+            description?: string | undefined;
+            groupCode?: string | undefined;
+            previousDefaultValues?: unknown[] | undefined;
+            salesChannelCodes?: string[] | undefined;
+            enumOptions?: string[] | undefined;
+            configurationType?: string | undefined;
+            hidden?: boolean | undefined;
+        }[];
+    } | undefined;
+    i18n?: {
+        bundlesDir: string;
+    } | undefined;
+    docs?: false | {
+        dir: string;
+    } | undefined;
+    demo?: false | {
+        summary: string;
+        seed: (context: import("@endora-commerce/contracts").ModuleDemoContext<never>) => Promise<import("@endora-commerce/contracts").DemoSeedResult>;
+        reset: (context: import("@endora-commerce/contracts").ModuleDemoContext<never>) => Promise<import("@endora-commerce/contracts").DemoResetResult>;
+        after?: readonly string[] | undefined;
+        package?: string | undefined;
+    } | undefined;
+    actions?: {
+        id: string;
+        labelKey: string;
+        icon: "Plus" | "Sparkles" | "Settings" | "Search" | "Boxes" | "Layers" | "Menu" | "PlusCircle" | "PlusSquare" | "FilePlus" | "FolderPlus" | "Upload" | "FileUp" | "CloudUpload" | "Download" | "FileDown" | "FileText" | "BookOpen" | "Rss" | "Package" | "Tag" | "ShoppingCart" | "Receipt" | "CreditCard" | "Users" | "UserPlus" | "Inbox" | "ListChecks" | "ClipboardList" | "Image" | "Video" | "LayoutDashboard" | "PanelLeft" | "KeyRound" | "ShieldCheck" | "Edit" | "Archive" | "Box" | "Truck" | "CircleDollarSign" | "Activity" | "LineChart" | "Smartphone" | "Webhook" | "Scale" | "PlugZap" | "PercentDiamond" | "Newspaper" | "Languages" | "Eraser" | "Warehouse" | "TrendingDown" | "Bell" | "PackageOpen" | "Building2" | "Store" | "ClipboardCheck";
+        targetRoute: string;
+        keywords: string[];
+        weight: number;
+        descriptionKey?: string | undefined;
+        requiredPermission?: string | undefined;
+    }[] | undefined;
+    permissions?: {
+        code: string;
+        label: string;
+        module?: string | undefined;
+        description?: string | undefined;
+        requires?: string[] | undefined;
+    }[] | undefined;
+    transactionalEmails?: {
+        code: string;
+        name: string;
+        variables: {
+            key: string;
+            label: string;
+            sampleValue?: string | undefined;
+            description?: string | undefined;
+        }[];
+        description?: string | undefined;
+        group?: string | undefined;
+    }[] | undefined;
+    capabilities?: string[] | undefined;
+    exclusiveCapabilities?: {
+        key: string;
+        errorCode: string;
+    }[] | undefined;
+    errorCodes?: {
+        code: string;
+        tokens?: string[] | undefined;
+    }[] | undefined;
+    blocks?: {
+        name: string;
+        labelKey: string;
+        category: string;
+        contexts: ("invoice" | "email" | "cms" | "newsletter")[];
+        fields: Record<string, {
+            type: "number" | "object" | "array" | "text" | "textarea" | "select" | "radio" | "external" | "uuid" | "richtext";
+            label?: string | undefined;
+            required?: boolean | undefined;
+            options?: {
+                label: string;
+                value: string | number;
+            }[] | undefined;
+            refKind?: string | undefined;
+        }>;
+        descriptionKey?: string | undefined;
+        defaultProps?: Record<string, unknown> | undefined;
+        responsiveFields?: string[] | undefined;
+        previewIcon?: string | undefined;
+        weight?: number | undefined;
+    }[] | undefined;
+    blockCategories?: {
+        key: string;
+        titleKey: string;
+        contexts: ("invoice" | "email" | "cms" | "newsletter")[];
+        weight?: number | undefined;
+        visible?: boolean | undefined;
+    }[] | undefined;
+    env?: {
+        name: string;
+        describes: {
+            en: string;
+            pl: string;
+        };
+        requirement: {
+            kind: "required";
+        } | {
+            kind: "requiredWhen";
+            input: string;
+            equals: string;
+        } | {
+            kind: "optional";
+            without: {
+                en: string;
+                pl: string;
+            };
+        };
+        secret: boolean;
+        generable: boolean;
+        owner: {
+            kind: "platform";
+        } | {
+            kind: "application";
+            application: "admin" | "backend" | "storefront";
+        } | {
+            kind: "module";
+            moduleId: string;
+        };
+        consumers: ("admin" | "backend" | "storefront")[];
+        addressOf: "admin" | "backend" | "storefront" | null;
+    }[] | undefined;
+};
+//# sourceMappingURL=manifest.d.ts.map

package/dist/manifest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest.d.ts","sourceRoot":"","sources":["../src/manifest.ts"],"names":[],"mappings":"AAEA;;;;;;;;;GASG;AACH,eAAO,MAAM,QAAQ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAmCnB,CAAC"}

package/dist/manifest.js

@@ -0,0 +1,46 @@
+import { defineModuleManifest } from '@endora-commerce/contracts';
+/**
+ * Admin notifications — minimal "bell" surface.
+ *
+ * Introduced by feature 026 (Organizations) to deliver in-app
+ * notifications to admins when a new Organization registers. The
+ * module is intentionally generic so future features (low-stock
+ * alerts, RFQ awaiting reply, etc.) can write into the same feed.
+ *
+ * The schema is owned by migration 048_admin_notifications_init.ts.
+ */
+export const manifest = defineModuleManifest({
+    id: 'admin_notifications',
+    name: 'Admin Notifications',
+    description: 'In-app notification feed surfaced in the admin top-nav bell. Generic so any module can write entries.',
+    version: '1.0.0',
+    // `auth` added with the conversion: the admin routes are gated by
+    // `requireAdmin`, which `auth` owns.
+    dependencies: ['admin_users', 'auth'],
+    settings: {
+        moduleCode: 'admin_notifications',
+        groups: [{ code: 'admin_notifications', name: 'Admin notifications' }],
+        settings: [
+            {
+                // Feature 073 — the operator's activation control. Platform-wide.
+                code: 'admin_notifications.enabled',
+                name: 'Admin notifications enabled',
+                description: 'Switches the admin notification centre on or off. While off nothing is recorded and the notification screens and their API are gone. Nothing is deleted — entries already recorded are preserved and reappear when you switch it back on.',
+                groupCode: 'admin_notifications',
+                valueType: 'boolean',
+                defaultValue: true,
+            },
+        ],
+    },
+    activation: { settingCode: 'admin_notifications.enabled', default: true },
+    // Feature 026 checklist — `routes.admin.ts` has gated the bell on this code
+    // since 026 while no manifest declared it, so only a role holding `'*'` could
+    // open the notification feed. The code keeps its historical spelling for the
+    // same reason `audit_log:read` and `integrations:manage` keep theirs: it is
+    // the string the route checks, and `module` is what puts the row under the
+    // right heading on the role matrix.
+    permissions: [
+        { code: 'admin:read', module: 'admin_notifications', label: 'View admin notifications' },
+    ],
+});
+//# sourceMappingURL=manifest.js.map

package/dist/manifest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest.js","sourceRoot":"","sources":["../src/manifest.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAElE;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAG,oBAAoB,CAAC;IAC3C,EAAE,EAAE,qBAAqB;IACzB,IAAI,EAAE,qBAAqB;IAC3B,WAAW,EACT,uGAAuG;IACzG,OAAO,EAAE,OAAO;IAChB,kEAAkE;IAClE,qCAAqC;IACrC,YAAY,EAAE,CAAC,aAAa,EAAE,MAAM,CAAC;IACrC,QAAQ,EAAE;QACR,UAAU,EAAE,qBAAqB;QACjC,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,qBAAqB,EAAE,IAAI,EAAE,qBAAqB,EAAE,CAAC;QACtE,QAAQ,EAAE;YACR;gBACE,kEAAkE;gBAClE,IAAI,EAAE,6BAA6B;gBACnC,IAAI,EAAE,6BAA6B;gBACnC,WAAW,EACT,2OAA2O;gBAC7O,SAAS,EAAE,qBAAqB;gBAChC,SAAS,EAAE,SAAS;gBACpB,YAAY,EAAE,IAAI;aACnB;SACF;KACF;IACD,UAAU,EAAE,EAAE,WAAW,EAAE,6BAA6B,EAAE,OAAO,EAAE,IAAI,EAAE;IACzE,4EAA4E;IAC5E,8EAA8E;IAC9E,6EAA6E;IAC7E,4EAA4E;IAC5E,2EAA2E;IAC3E,oCAAoC;IACpC,WAAW,EAAE;QACX,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,qBAAqB,EAAE,KAAK,EAAE,0BAA0B,EAAE;KACzF;CACF,CAAC,CAAC"}

package/dist/migrations/20260611T140350_admin_notifications_init.d.ts

@@ -0,0 +1,19 @@
+import { Migration } from '@mikro-orm/migrations';
+/**
+ * Admin notifications — minimal "bell" surface introduced by feature 026.
+ *
+ * One row per notification. `audience='all_admins'` rows are visible to
+ * every admin (the read state is tracked per-admin in a future iteration
+ * via `admin_notification_reads`; for the first iteration we keep `read_at`
+ * on the row itself for `audience='admin_user'` rows only, and rely on the
+ * `mark-all-read` endpoint stamping a per-admin "last seen" cursor —
+ * implemented in code, not in this schema).
+ *
+ * Unread cap is enforced by application code (`pruneStale()`), not by the
+ * schema.
+ */
+export declare class Migration20260611T140350AdminNotificationsInit extends Migration {
+    up(): Promise<void>;
+    down(): Promise<void>;
+}
+//# sourceMappingURL=20260611T140350_admin_notifications_init.d.ts.map

package/dist/migrations/20260611T140350_admin_notifications_init.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"20260611T140350_admin_notifications_init.d.ts","sourceRoot":"","sources":["../../src/migrations/20260611T140350_admin_notifications_init.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAElD;;;;;;;;;;;;GAYG;AACH,qBAAa,8CAA+C,SAAQ,SAAS;IAC5D,EAAE,IAAI,OAAO,CAAC,IAAI,CAAC;IAgEnB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;CAMrC"}