@endora-commerce/mod-newsletter 0.100.0

package/dist/manifest.js

@@ -0,0 +1,211 @@
+import { defineModuleManifest, defineModuleSettingsManifest } from '@endora-commerce/contracts';
+import { NEWSLETTER_SETTING_CODES } from '@endora-commerce/contracts';
+/**
+ * Newsletter module (feature 048). Owns the subscriber list, tags, custom
+ * fields, campaigns, linear automations, reusable email-safe blocks, the
+ * bulk-sending provider (SMTP / Amazon SES via nodemailer), and engagement
+ * tracking. Bulk delivery is independent of the transactional-email transport.
+ * The SMTP connection + credentials come from a reusable `email_adapter`
+ * credential configuration referenced by `newsletter.email_credentials`
+ * (feature 058); when unset, dispatch uses the console (dev) sink.
+ */
+export const newsletterSettingsManifest = defineModuleSettingsManifest({
+    moduleCode: 'newsletter',
+    groups: [{ code: 'newsletter', name: 'Newsletter' }],
+    settings: [
+        {
+            // Feature 073 — the operator's activation control. Platform-wide.
+            code: 'newsletter.enabled',
+            name: 'Newsletter enabled',
+            description: 'Switches the newsletter on or off: the storefront signup and confirmation links, the admin subscriber, campaign and automation screens, and bulk dispatch. Nothing is dropped — subscribers, their consent history, campaigns and stats stay in the database, and a campaign left mid-send resumes where it stopped.',
+            groupCode: 'newsletter',
+            valueType: 'boolean',
+            defaultValue: true,
+        },
+        {
+            code: NEWSLETTER_SETTING_CODES.OPT_IN_MODE,
+            name: 'Opt-in mode',
+            description: 'Single (immediate) or double (confirmation email) opt-in. Scopable per sales channel.',
+            groupCode: 'newsletter',
+            valueType: 'string',
+            enumOptions: ['single', 'double'],
+            defaultValue: 'double',
+        },
+        {
+            code: NEWSLETTER_SETTING_CODES.CONFIRM_TTL_HOURS,
+            name: 'Confirmation link TTL (hours)',
+            description: 'How long a double opt-in confirmation link stays valid before the pending subscriber expires.',
+            groupCode: 'newsletter',
+            valueType: 'number',
+            defaultValue: 168,
+        },
+        {
+            code: NEWSLETTER_SETTING_CODES.EMAIL_CREDENTIALS,
+            name: 'Email credentials',
+            description: 'Reference a reusable Email adapter credential configuration (Credentials screen) providing the SMTP host/port/security/username/password. Required to send real mail; when empty, newsletter dispatch uses the console (dev) sink.',
+            groupCode: 'newsletter',
+            valueType: 'credential_ref',
+            configurationType: 'email_adapter',
+            defaultValue: '',
+        },
+        {
+            code: NEWSLETTER_SETTING_CODES.SENDER_FROM_EMAIL,
+            name: 'Sender email',
+            description: 'Verified From address for newsletter mail.',
+            groupCode: 'newsletter',
+            valueType: 'string',
+            defaultValue: '',
+            hidden: true,
+        },
+        {
+            code: NEWSLETTER_SETTING_CODES.SENDER_FROM_NAME,
+            name: 'Sender name',
+            description: 'Display name shown in the From header.',
+            groupCode: 'newsletter',
+            valueType: 'string',
+            defaultValue: '',
+            hidden: true,
+        },
+        {
+            code: NEWSLETTER_SETTING_CODES.RATE_LIMIT_PER_SECOND,
+            name: 'Send rate limit (per second)',
+            description: 'Maximum messages dispatched per second (provider throttle).',
+            groupCode: 'newsletter',
+            valueType: 'number',
+            defaultValue: 14,
+            hidden: true,
+        },
+    ],
+});
+export const manifest = defineModuleManifest({
+    id: 'newsletter',
+    name: 'Newsletter',
+    description: 'Own-infrastructure newsletter: subscribers with tags + custom fields, campaigns, linear automations, email-safe templates and variables, engagement stats, and a configurable bulk-sending provider.',
+    version: '1.0.0',
+    // `cms` owns `cmsBlockSeedPort`, the seam this module's registration-consent
+    // block is kept in place through (feature 075 / D-87). Declared here rather
+    // than withheld as non-binding because the edge is binding in the direction
+    // that matters to an operator: the consent label the storefront renders on
+    // the registration form *is* that block, and a `newsletter` with no consent
+    // text to show is not a reduced newsletter but a form that cannot lawfully
+    // collect the consent.
+    dependencies: [
+        'audit_logs',
+        'auth',
+        'cms',
+        'credentials',
+        'customers',
+        'email',
+        'sales_channels',
+        'settings',
+    ],
+    settings: newsletterSettingsManifest,
+    activation: { settingCode: 'newsletter.enabled', default: true },
+    /**
+     * `ALREADY_SUBSCRIBED` — D-129's remaining sweep, MR 4
+     * (`specs/090-module-owned-error-codes/d129-sweep.md` §5.2, Appendix A;
+     * D-186 in `specs/080-f4-real-scope/rulings.md`). The first error code this
+     * module declares.
+     *
+     * It was `_i18n`'s until now, not because anybody judged it the platform's
+     * but because the deleted prefix chain had no rule for it and its last line
+     * was `return 'core'`. **D-121 T1 puts it here**: the noun is a subscription,
+     * and `NewsletterSubscriber` — with the double opt-in that decides when a
+     * second sign-up is a duplicate rather than a re-confirmation — is this
+     * module's own entity.
+     *
+     * **The attribution is the sweep's own word "weakly", and the reason to
+     * record it here is that the tree holds one counter-signal.** Nothing raises
+     * this code anywhere (class D). The only place it is named outside a
+     * declaration is a doc comment in `inventory`'s
+     * `availability-notification-service.ts`, which says the restock subscribe
+     * refuses `409 ALREADY_SUBSCRIBED` for an idempotent re-subscribe — and that
+     * method does not refuse at all: it returns the existing row
+     * (`if (existing) return existing;`). So the comment describes a refusal that
+     * does not exist, and the one competing claim on the noun is a claim nothing
+     * implements. If a back-in-stock subscription ever does start refusing, the
+     * question is open again and `REHOMED_ERROR_CODES` is where this decision is
+     * written down.
+     *
+     * **It arrives without a sentence, deliberately.** It carried a placeholder
+     * in `_i18n`'s bundle, the code rewritten twice —
+     * `"Already Subscribed."` and `"Błąd: already subscribed."` — which D-186 §2
+     * deletes rather than moves: in this module's own bundle it would read as
+     * this module's
+     * answer and every instrument would count the code as translated for good.
+     * `d129-sweep.md` §5.4 keeps writing real prose available and calls it the
+     * better outcome, and it is available whenever a raise site says what the
+     * refusal means. There is no raise site here, so a sentence could only be
+     * invented from the code's own name — the placeholder again in longer words,
+     * rendered for nobody. It is a `check-error-translations.ts`
+     * `UNTRANSLATED_ERROR_CODES` entry under `newsletter` instead, where the debt
+     * is findable and attached to whoever implements the refusal.
+     *
+     * No `tokens`, for the same reason and from the same direction: there is no
+     * raise site to put a `details.code` on the wire.
+     */
+    errorCodes: [{ code: 'ALREADY_SUBSCRIBED' }],
+    i18n: { bundlesDir: 'i18n' },
+    docs: { dir: 'docs' },
+    permissions: [
+        { code: 'newsletter:read', label: 'View newsletter' },
+        {
+            code: 'newsletter:write',
+            label: 'Manage newsletter subscribers, campaigns, automations, and provider',
+        },
+    ],
+    actions: [
+        {
+            id: 'open-newsletter',
+            labelKey: 'actions.openNewsletter.label',
+            descriptionKey: 'actions.openNewsletter.description',
+            icon: 'Inbox',
+            targetRoute: '/newsletter/subscribers',
+            requiredPermission: 'newsletter:read',
+            keywords: ['newsletter', 'campaign', 'subscribers', 'marketing', 'automation'],
+            weight: 230,
+        },
+        {
+            id: 'new-newsletter-campaign',
+            labelKey: 'actions.newCampaign.label',
+            descriptionKey: 'actions.newCampaign.description',
+            icon: 'Plus',
+            targetRoute: '/newsletter/campaigns/new',
+            requiredPermission: 'newsletter:write',
+            keywords: ['newsletter', 'campaign', 'new', 'create', 'send'],
+            weight: 231,
+        },
+        /**
+         * The two `AppShell.tsx` `PALETTE_ITEMS` rows feature 091's batch 11
+         * deletes, arriving as declarations (Principle XVI).
+         *
+         * Same destinations, same codes and the same keywords the hand-written
+         * rows carried, English and Polish alike — the palette an operator sees is
+         * unchanged. What changes is who answers for it: a hand-written row is a
+         * copy the server was never asked about, so it went on advertising these
+         * two screens after an operator switched `newsletter` off, and this module
+         * is one that really can be switched off.
+         */
+        {
+            id: 'open-newsletter-campaigns',
+            labelKey: 'actions.openCampaigns.label',
+            descriptionKey: 'actions.openCampaigns.description',
+            icon: 'Inbox',
+            targetRoute: '/newsletter/campaigns',
+            requiredPermission: 'newsletter:read',
+            keywords: ['newsletter', 'campaigns', 'email', 'marketing', 'kampanie'],
+            weight: 232,
+        },
+        {
+            id: 'open-newsletter-automations',
+            labelKey: 'actions.openAutomations.label',
+            descriptionKey: 'actions.openAutomations.description',
+            icon: 'Inbox',
+            targetRoute: '/newsletter/automations',
+            requiredPermission: 'newsletter:read',
+            keywords: ['newsletter', 'automations', 'workflow', 'automatyzacje'],
+            weight: 233,
+        },
+    ],
+});
+//# sourceMappingURL=manifest.js.map

package/dist/manifest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest.js","sourceRoot":"","sources":["../src/manifest.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,4BAA4B,EAAE,MAAM,4BAA4B,CAAC;AAChG,OAAO,EAAE,wBAAwB,EAAE,MAAM,4BAA4B,CAAC;AAEtE;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,4BAA4B,CAAC;IACrE,UAAU,EAAE,YAAY;IACxB,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;IACpD,QAAQ,EAAE;QACR;YACE,kEAAkE;YAClE,IAAI,EAAE,oBAAoB;YAC1B,IAAI,EAAE,oBAAoB;YAC1B,WAAW,EACT,sTAAsT;YACxT,SAAS,EAAE,YAAY;YACvB,SAAS,EAAE,SAAS;YACpB,YAAY,EAAE,IAAI;SACnB;QACD;YACE,IAAI,EAAE,wBAAwB,CAAC,WAAW;YAC1C,IAAI,EAAE,aAAa;YACnB,WAAW,EAAE,uFAAuF;YACpG,SAAS,EAAE,YAAY;YACvB,SAAS,EAAE,QAAQ;YACnB,WAAW,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC;YACjC,YAAY,EAAE,QAAQ;SACvB;QACD;YACE,IAAI,EAAE,wBAAwB,CAAC,iBAAiB;YAChD,IAAI,EAAE,+BAA+B;YACrC,WAAW,EAAE,+FAA+F;YAC5G,SAAS,EAAE,YAAY;YACvB,SAAS,EAAE,QAAQ;YACnB,YAAY,EAAE,GAAG;SAClB;QACD;YACE,IAAI,EAAE,wBAAwB,CAAC,iBAAiB;YAChD,IAAI,EAAE,mBAAmB;YACzB,WAAW,EACT,oOAAoO;YACtO,SAAS,EAAE,YAAY;YACvB,SAAS,EAAE,gBAAgB;YAC3B,iBAAiB,EAAE,eAAe;YAClC,YAAY,EAAE,EAAE;SACjB;QACD;YACE,IAAI,EAAE,wBAAwB,CAAC,iBAAiB;YAChD,IAAI,EAAE,cAAc;YACpB,WAAW,EAAE,4CAA4C;YACzD,SAAS,EAAE,YAAY;YACvB,SAAS,EAAE,QAAQ;YACnB,YAAY,EAAE,EAAE;YAChB,MAAM,EAAE,IAAI;SACb;QACD;YACE,IAAI,EAAE,wBAAwB,CAAC,gBAAgB;YAC/C,IAAI,EAAE,aAAa;YACnB,WAAW,EAAE,wCAAwC;YACrD,SAAS,EAAE,YAAY;YACvB,SAAS,EAAE,QAAQ;YACnB,YAAY,EAAE,EAAE;YAChB,MAAM,EAAE,IAAI;SACb;QACD;YACE,IAAI,EAAE,wBAAwB,CAAC,qBAAqB;YACpD,IAAI,EAAE,8BAA8B;YACpC,WAAW,EAAE,6DAA6D;YAC1E,SAAS,EAAE,YAAY;YACvB,SAAS,EAAE,QAAQ;YACnB,YAAY,EAAE,EAAE;YAChB,MAAM,EAAE,IAAI;SACb;KACF;CACF,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,QAAQ,GAAG,oBAAoB,CAAC;IAC3C,EAAE,EAAE,YAAY;IAChB,IAAI,EAAE,YAAY;IAClB,WAAW,EACT,sMAAsM;IACxM,OAAO,EAAE,OAAO;IAChB,6EAA6E;IAC7E,4EAA4E;IAC5E,4EAA4E;IAC5E,2EAA2E;IAC3E,4EAA4E;IAC5E,2EAA2E;IAC3E,uBAAuB;IACvB,YAAY,EAAE;QACZ,YAAY;QACZ,MAAM;QACN,KAAK;QACL,aAAa;QACb,WAAW;QACX,OAAO;QACP,gBAAgB;QAChB,UAAU;KACX;IACD,QAAQ,EAAE,0BAA0B;IACpC,UAAU,EAAE,EAAE,WAAW,EAAE,oBAAoB,EAAE,OAAO,EAAE,IAAI,EAAE;IAChE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA0CG;IACH,UAAU,EAAE,CAAC,EAAE,IAAI,EAAE,oBAAoB,EAAE,CAAC;IAC5C,IAAI,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE;IAC5B,IAAI,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE;IACrB,WAAW,EAAE;QACX,EAAE,IAAI,EAAE,iBAAiB,EAAE,KAAK,EAAE,iBAAiB,EAAE;QACrD;YACE,IAAI,EAAE,kBAAkB;YACxB,KAAK,EAAE,qEAAqE;SAC7E;KACF;IACD,OAAO,EAAE;QACP;YACE,EAAE,EAAE,iBAAiB;YACrB,QAAQ,EAAE,8BAA8B;YACxC,cAAc,EAAE,oCAAoC;YACpD,IAAI,EAAE,OAAO;YACb,WAAW,EAAE,yBAAyB;YACtC,kBAAkB,EAAE,iBAAiB;YACrC,QAAQ,EAAE,CAAC,YAAY,EAAE,UAAU,EAAE,aAAa,EAAE,WAAW,EAAE,YAAY,CAAC;YAC9E,MAAM,EAAE,GAAG;SACZ;QACD;YACE,EAAE,EAAE,yBAAyB;YAC7B,QAAQ,EAAE,2BAA2B;YACrC,cAAc,EAAE,iCAAiC;YACjD,IAAI,EAAE,MAAM;YACZ,WAAW,EAAE,2BAA2B;YACxC,kBAAkB,EAAE,kBAAkB;YACtC,QAAQ,EAAE,CAAC,YAAY,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC;YAC7D,MAAM,EAAE,GAAG;SACZ;QACD;;;;;;;;;;WAUG;QACH;YACE,EAAE,EAAE,2BAA2B;YAC/B,QAAQ,EAAE,6BAA6B;YACvC,cAAc,EAAE,mCAAmC;YACnD,IAAI,EAAE,OAAO;YACb,WAAW,EAAE,uBAAuB;YACpC,kBAAkB,EAAE,iBAAiB;YACrC,QAAQ,EAAE,CAAC,YAAY,EAAE,WAAW,EAAE,OAAO,EAAE,WAAW,EAAE,UAAU,CAAC;YACvE,MAAM,EAAE,GAAG;SACZ;QACD;YACE,EAAE,EAAE,6BAA6B;YACjC,QAAQ,EAAE,+BAA+B;YACzC,cAAc,EAAE,qCAAqC;YACrD,IAAI,EAAE,OAAO;YACb,WAAW,EAAE,yBAAyB;YACtC,kBAAkB,EAAE,iBAAiB;YACrC,QAAQ,EAAE,CAAC,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,eAAe,CAAC;YACpE,MAAM,EAAE,GAAG;SACZ;KACF;CACF,CAAC,CAAC"}

package/dist/migrations/20260629T200954_newsletter_init.d.ts

@@ -0,0 +1,6 @@
+import { Migration } from '@mikro-orm/migrations';
+export declare class Migration20260629T200954NewsletterInit extends Migration {
+    up(): Promise<void>;
+    down(): Promise<void>;
+}
+//# sourceMappingURL=20260629T200954_newsletter_init.d.ts.map

package/dist/migrations/20260629T200954_newsletter_init.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"20260629T200954_newsletter_init.d.ts","sourceRoot":"","sources":["../../src/migrations/20260629T200954_newsletter_init.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAuBlD,qBAAa,sCAAuC,SAAQ,SAAS;IACpD,EAAE,IAAI,OAAO,CAAC,IAAI,CAAC;IAiRnB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;CAerC"}

package/dist/migrations/20260629T200954_newsletter_init.js

@@ -0,0 +1,261 @@
+import { Migration } from '@mikro-orm/migrations';
+import { randomUUID } from 'crypto';
+import { defaultHeaderTree } from '@endora-commerce/email-components/defaults/default-header';
+import { defaultFooterTree, envelopeFromTree } from '@endora-commerce/email-components/defaults/default-footer';
+/**
+ * Feature 048 — Newsletter.
+ *
+ * Creates the full module schema: subscribers + tags + custom fields +
+ * suppressions, reusable email blocks (+ channel bridge), campaigns (+ group
+ * bridge), per-recipient send records (with the atomic-claim partial unique
+ * indexes that make dispatch idempotent under N≥2 workers — Principle X),
+ * engagement events, and automations (+ runs, with the `once` re-entry partial
+ * unique index). Seeds the system default header/footer blocks (FR-020/026).
+ */
+const DEFAULT_LANGUAGES = ['en-US', 'pl-PL'];
+const NEWSLETTER_DEFAULT_HEADER_CODE = 'newsletter_default_header';
+const NEWSLETTER_DEFAULT_FOOTER_CODE = 'newsletter_default_footer';
+function jsonbLiteral(value) {
+    return JSON.stringify(value).replace(/'/g, "''");
+}
+export class Migration20260629T200954NewsletterInit extends Migration {
+    async up() {
+        // --- Subscribers -------------------------------------------------------
+        this.addSql(`
+      create table "newsletter_subscribers" (
+        "id" uuid not null,
+        "email" varchar(320) not null,
+        "status" varchar(16) not null default 'pending',
+        "source" varchar(64) null,
+        "sales_channel_id" uuid null,
+        "customer_account_id" uuid null,
+        "custom_fields" jsonb not null default '{}',
+        "consent_at" timestamptz null,
+        "confirmed_at" timestamptz null,
+        "unsubscribed_at" timestamptz null,
+        "unsubscribe_reason" text null,
+        "deactivated_at" timestamptz null,
+        "version" int not null default 1,
+        "created_at" timestamptz not null,
+        "updated_at" timestamptz not null,
+        constraint "newsletter_subscribers_pkey" primary key ("id")
+      );
+    `);
+        this.addSql(`alter table "newsletter_subscribers" add constraint "newsletter_subscribers_email_unique" unique ("email");`);
+        this.addSql(`create index "newsletter_subscribers_status_idx" on "newsletter_subscribers" ("status");`);
+        this.addSql(`create index "newsletter_subscribers_channel_idx" on "newsletter_subscribers" ("sales_channel_id");`);
+        this.addSql(`create index "newsletter_subscribers_custom_fields_idx" on "newsletter_subscribers" using gin ("custom_fields");`);
+        // --- Tags + bridge -----------------------------------------------------
+        this.addSql(`
+      create table "newsletter_tags" (
+        "id" uuid not null,
+        "code" varchar(64) not null,
+        "name" varchar(160) not null,
+        "description" text null,
+        "created_at" timestamptz not null,
+        "updated_at" timestamptz not null,
+        constraint "newsletter_tags_pkey" primary key ("id")
+      );
+    `);
+        this.addSql(`alter table "newsletter_tags" add constraint "newsletter_tags_code_unique" unique ("code");`);
+        this.addSql(`
+      create table "newsletter_subscriber_tags" (
+        "subscriber_id" uuid not null,
+        "tag_id" uuid not null,
+        constraint "newsletter_subscriber_tags_pkey" primary key ("subscriber_id", "tag_id")
+      );
+    `);
+        this.addSql(`alter table "newsletter_subscriber_tags" add constraint "nst_subscriber_fk" ` +
+            `foreign key ("subscriber_id") references "newsletter_subscribers" ("id") on delete cascade;`);
+        this.addSql(`alter table "newsletter_subscriber_tags" add constraint "nst_tag_fk" ` +
+            `foreign key ("tag_id") references "newsletter_tags" ("id") on delete cascade;`);
+        this.addSql(`create index "nst_tag_idx" on "newsletter_subscriber_tags" ("tag_id");`);
+        // --- Custom fields -----------------------------------------------------
+        this.addSql(`
+      create table "newsletter_custom_fields" (
+        "id" uuid not null,
+        "key" varchar(64) not null,
+        "label" varchar(160) not null,
+        "type" varchar(16) not null,
+        "created_at" timestamptz not null,
+        "updated_at" timestamptz not null,
+        constraint "newsletter_custom_fields_pkey" primary key ("id")
+      );
+    `);
+        this.addSql(`alter table "newsletter_custom_fields" add constraint "newsletter_custom_fields_key_unique" unique ("key");`);
+        // --- Suppressions ------------------------------------------------------
+        this.addSql(`
+      create table "newsletter_suppressions" (
+        "id" uuid not null,
+        "email" varchar(320) not null,
+        "reason" varchar(16) not null,
+        "detail" text null,
+        "created_at" timestamptz not null,
+        constraint "newsletter_suppressions_pkey" primary key ("id")
+      );
+    `);
+        this.addSql(`alter table "newsletter_suppressions" add constraint "newsletter_suppressions_email_unique" unique ("email");`);
+        // --- Email blocks + bridge ---------------------------------------------
+        this.addSql(`
+      create table "newsletter_email_blocks" (
+        "id" uuid not null,
+        "code" varchar(180) not null,
+        "name" varchar(200) not null,
+        "description" text null,
+        "active" boolean not null default true,
+        "content" jsonb not null default '{}',
+        "is_system" boolean not null default false,
+        "version" int not null default 1,
+        "created_at" timestamptz not null,
+        "updated_at" timestamptz not null,
+        constraint "newsletter_email_blocks_pkey" primary key ("id")
+      );
+    `);
+        this.addSql(`create index "newsletter_email_blocks_code_idx" on "newsletter_email_blocks" ("code");`);
+        this.addSql(`
+      create table "newsletter_email_block_sales_channels" (
+        "block_id" uuid not null,
+        "sales_channel_id" uuid not null,
+        "code" varchar(180) not null,
+        constraint "newsletter_ebsc_pkey" primary key ("block_id", "sales_channel_id")
+      );
+    `);
+        this.addSql(`alter table "newsletter_email_block_sales_channels" add constraint "newsletter_ebsc_block_fk" ` +
+            `foreign key ("block_id") references "newsletter_email_blocks" ("id") on delete cascade;`);
+        this.addSql(`create unique index "newsletter_ebsc_channel_code_unique" on "newsletter_email_block_sales_channels" ("sales_channel_id", "code");`);
+        // --- Campaigns + group bridge ------------------------------------------
+        this.addSql(`
+      create table "newsletter_campaigns" (
+        "id" uuid not null,
+        "name" varchar(200) not null,
+        "subject" text not null,
+        "content" jsonb not null default '{}',
+        "sales_channel_id" uuid null,
+        "language" varchar(12) not null,
+        "target_type" varchar(16) not null default 'all',
+        "target_tag_ids" jsonb not null default '[]',
+        "tracking_enabled" boolean not null default true,
+        "status" varchar(16) not null default 'draft',
+        "scheduled_at" timestamptz null,
+        "dispatch_job_id" varchar(128) null,
+        "stats" jsonb not null default '{}',
+        "version" int not null default 1,
+        "created_at" timestamptz not null,
+        "updated_at" timestamptz not null,
+        constraint "newsletter_campaigns_pkey" primary key ("id")
+      );
+    `);
+        this.addSql(`create index "newsletter_campaigns_status_idx" on "newsletter_campaigns" ("status");`);
+        this.addSql(`
+      create table "newsletter_campaign_subscribers" (
+        "campaign_id" uuid not null,
+        "subscriber_id" uuid not null,
+        constraint "newsletter_campaign_subscribers_pkey" primary key ("campaign_id", "subscriber_id")
+      );
+    `);
+        this.addSql(`alter table "newsletter_campaign_subscribers" add constraint "ncs_campaign_fk" ` +
+            `foreign key ("campaign_id") references "newsletter_campaigns" ("id") on delete cascade;`);
+        this.addSql(`alter table "newsletter_campaign_subscribers" add constraint "ncs_subscriber_fk" ` +
+            `foreign key ("subscriber_id") references "newsletter_subscribers" ("id") on delete cascade;`);
+        // --- Automations + runs ------------------------------------------------
+        this.addSql(`
+      create table "newsletter_automations" (
+        "id" uuid not null,
+        "name" varchar(200) not null,
+        "status" varchar(16) not null default 'draft',
+        "trigger_type" varchar(16) not null default 'all',
+        "trigger_tag_ids" jsonb not null default '[]',
+        "sales_channel_id" uuid null,
+        "language" varchar(12) not null,
+        "reentry_policy" varchar(16) not null default 'once',
+        "steps" jsonb not null default '[]',
+        "version" int not null default 1,
+        "created_at" timestamptz not null,
+        "updated_at" timestamptz not null,
+        constraint "newsletter_automations_pkey" primary key ("id")
+      );
+    `);
+        this.addSql(`
+      create table "newsletter_automation_runs" (
+        "id" uuid not null,
+        "automation_id" uuid not null,
+        "subscriber_id" uuid not null,
+        "current_step" int not null default 0,
+        "status" varchar(16) not null default 'active',
+        "next_step_at" timestamptz null,
+        "next_step_job_id" varchar(128) null,
+        "created_at" timestamptz not null,
+        "updated_at" timestamptz not null,
+        constraint "newsletter_automation_runs_pkey" primary key ("id")
+      );
+    `);
+        this.addSql(`alter table "newsletter_automation_runs" add constraint "nar_automation_fk" ` +
+            `foreign key ("automation_id") references "newsletter_automations" ("id") on delete cascade;`);
+        this.addSql(`alter table "newsletter_automation_runs" add constraint "nar_subscriber_fk" ` +
+            `foreign key ("subscriber_id") references "newsletter_subscribers" ("id") on delete cascade;`);
+        this.addSql(`create index "nar_automation_idx" on "newsletter_automation_runs" ("automation_id");`);
+        this.addSql(`create unique index "nar_once_unique" on "newsletter_automation_runs" ("automation_id", "subscriber_id") where "status" <> 'cancelled';`);
+        // --- Send records (atomic claim) + engagement events -------------------
+        this.addSql(`
+      create table "newsletter_send_records" (
+        "id" uuid not null,
+        "campaign_id" uuid null,
+        "automation_run_id" uuid null,
+        "step_index" int null,
+        "subscriber_id" uuid not null,
+        "status" varchar(16) not null default 'queued',
+        "provider_message_id" varchar(255) null,
+        "error" text null,
+        "opened_at" timestamptz null,
+        "click_count" int not null default 0,
+        "sent_at" timestamptz null,
+        "created_at" timestamptz not null,
+        constraint "newsletter_send_records_pkey" primary key ("id")
+      );
+    `);
+        this.addSql(`alter table "newsletter_send_records" add constraint "nsr_subscriber_fk" ` +
+            `foreign key ("subscriber_id") references "newsletter_subscribers" ("id") on delete cascade;`);
+        this.addSql(`create index "nsr_subscriber_idx" on "newsletter_send_records" ("subscriber_id");`);
+        this.addSql(`create index "nsr_status_idx" on "newsletter_send_records" ("status");`);
+        this.addSql(`create unique index "nsr_campaign_claim_unique" on "newsletter_send_records" ("campaign_id", "subscriber_id") where "campaign_id" is not null;`);
+        this.addSql(`create unique index "nsr_automation_claim_unique" on "newsletter_send_records" ("automation_run_id", "step_index", "subscriber_id") where "automation_run_id" is not null;`);
+        this.addSql(`
+      create table "newsletter_engagement_events" (
+        "id" uuid not null,
+        "send_record_id" uuid not null,
+        "type" varchar(8) not null,
+        "link_id" varchar(64) null,
+        "url" text null,
+        "occurred_at" timestamptz not null,
+        constraint "newsletter_engagement_events_pkey" primary key ("id")
+      );
+    `);
+        this.addSql(`alter table "newsletter_engagement_events" add constraint "nee_send_record_fk" ` +
+            `foreign key ("send_record_id") references "newsletter_send_records" ("id") on delete cascade;`);
+        this.addSql(`create index "nee_send_record_idx" on "newsletter_engagement_events" ("send_record_id");`);
+        this.addSql(`create index "nee_type_idx" on "newsletter_engagement_events" ("type");`);
+        // --- Seed system default header + footer blocks (FR-020/026) -----------
+        const header = envelopeFromTree(defaultHeaderTree(), DEFAULT_LANGUAGES);
+        const footer = envelopeFromTree(defaultFooterTree(), DEFAULT_LANGUAGES);
+        this.addSql(`insert into "newsletter_email_blocks" ("id", "code", "name", "active", "content", "is_system", "version", "created_at", "updated_at") ` +
+            `values ('${randomUUID()}', '${NEWSLETTER_DEFAULT_HEADER_CODE}', 'Newsletter default header', true, '${jsonbLiteral(header)}'::jsonb, true, 1, now(), now());`);
+        this.addSql(`insert into "newsletter_email_blocks" ("id", "code", "name", "active", "content", "is_system", "version", "created_at", "updated_at") ` +
+            `values ('${randomUUID()}', '${NEWSLETTER_DEFAULT_FOOTER_CODE}', 'Newsletter default footer', true, '${jsonbLiteral(footer)}'::jsonb, true, 1, now(), now());`);
+    }
+    async down() {
+        this.addSql('drop table if exists "newsletter_engagement_events" cascade;');
+        this.addSql('drop table if exists "newsletter_send_records" cascade;');
+        this.addSql('drop table if exists "newsletter_automation_runs" cascade;');
+        this.addSql('drop table if exists "newsletter_automations" cascade;');
+        this.addSql('drop table if exists "newsletter_campaign_subscribers" cascade;');
+        this.addSql('drop table if exists "newsletter_campaigns" cascade;');
+        this.addSql('drop table if exists "newsletter_email_block_sales_channels" cascade;');
+        this.addSql('drop table if exists "newsletter_email_blocks" cascade;');
+        this.addSql('drop table if exists "newsletter_suppressions" cascade;');
+        this.addSql('drop table if exists "newsletter_custom_fields" cascade;');
+        this.addSql('drop table if exists "newsletter_subscriber_tags" cascade;');
+        this.addSql('drop table if exists "newsletter_tags" cascade;');
+        this.addSql('drop table if exists "newsletter_subscribers" cascade;');
+    }
+}
+//# sourceMappingURL=20260629T200954_newsletter_init.js.map

package/dist/migrations/20260629T200954_newsletter_init.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"20260629T200954_newsletter_init.js","sourceRoot":"","sources":["../../src/migrations/20260629T200954_newsletter_init.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AACpC,OAAO,EAAE,iBAAiB,EAAE,MAAM,2DAA2D,CAAC;AAC9F,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,2DAA2D,CAAC;AAEhH;;;;;;;;;GASG;AACH,MAAM,iBAAiB,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;AAC7C,MAAM,8BAA8B,GAAG,2BAA2B,CAAC;AACnE,MAAM,8BAA8B,GAAG,2BAA2B,CAAC;AAEnE,SAAS,YAAY,CAAC,KAAc;IAClC,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;AACnD,CAAC;AAED,MAAM,OAAO,sCAAuC,SAAQ,SAAS;IAC1D,KAAK,CAAC,EAAE;QACf,0EAA0E;QAC1E,IAAI,CAAC,MAAM,CAAC;;;;;;;;;;;;;;;;;;;KAmBX,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CACT,6GAA6G,CAC9G,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,0FAA0F,CAAC,CAAC;QACxG,IAAI,CAAC,MAAM,CACT,qGAAqG,CACtG,CAAC;QACF,IAAI,CAAC,MAAM,CACT,kHAAkH,CACnH,CAAC;QAEF,0EAA0E;QAC1E,IAAI,CAAC,MAAM,CAAC;;;;;;;;;;KAUX,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,6FAA6F,CAAC,CAAC;QAC3G,IAAI,CAAC,MAAM,CAAC;;;;;;KAMX,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CACT,8EAA8E;YAC5E,6FAA6F,CAChG,CAAC;QACF,IAAI,CAAC,MAAM,CACT,uEAAuE;YACrE,+EAA+E,CAClF,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,wEAAwE,CAAC,CAAC;QAEtF,0EAA0E;QAC1E,IAAI,CAAC,MAAM,CAAC;;;;;;;;;;KAUX,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CACT,6GAA6G,CAC9G,CAAC;QAEF,0EAA0E;QAC1E,IAAI,CAAC,MAAM,CAAC;;;;;;;;;KASX,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CACT,+GAA+G,CAChH,CAAC;QAEF,0EAA0E;QAC1E,IAAI,CAAC,MAAM,CAAC;;;;;;;;;;;;;;KAcX,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,wFAAwF,CAAC,CAAC;QACtG,IAAI,CAAC,MAAM,CAAC;;;;;;;KAOX,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CACT,gGAAgG;YAC9F,yFAAyF,CAC5F,CAAC;QACF,IAAI,CAAC,MAAM,CACT,oIAAoI,CACrI,CAAC;QAEF,0EAA0E;QAC1E,IAAI,CAAC,MAAM,CAAC;;;;;;;;;;;;;;;;;;;;KAoBX,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,sFAAsF,CAAC,CAAC;QACpG,IAAI,CAAC,MAAM,CAAC;;;;;;KAMX,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CACT,iFAAiF;YAC/E,yFAAyF,CAC5F,CAAC;QACF,IAAI,CAAC,MAAM,CACT,mFAAmF;YACjF,6FAA6F,CAChG,CAAC;QAEF,0EAA0E;QAC1E,IAAI,CAAC,MAAM,CAAC;;;;;;;;;;;;;;;;KAgBX,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC;;;;;;;;;;;;;KAaX,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CACT,8EAA8E;YAC5E,6FAA6F,CAChG,CAAC;QACF,IAAI,CAAC,MAAM,CACT,8EAA8E;YAC5E,6FAA6F,CAChG,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,sFAAsF,CAAC,CAAC;QACpG,IAAI,CAAC,MAAM,CACT,yIAAyI,CAC1I,CAAC;QAEF,0EAA0E;QAC1E,IAAI,CAAC,MAAM,CAAC;;;;;;;;;;;;;;;;KAgBX,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CACT,2EAA2E;YACzE,6FAA6F,CAChG,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,mFAAmF,CAAC,CAAC;QACjG,IAAI,CAAC,MAAM,CAAC,wEAAwE,CAAC,CAAC;QACtF,IAAI,CAAC,MAAM,CACT,gJAAgJ,CACjJ,CAAC;QACF,IAAI,CAAC,MAAM,CACT,4KAA4K,CAC7K,CAAC;QAEF,IAAI,CAAC,MAAM,CAAC;;;;;;;;;;KAUX,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CACT,iFAAiF;YAC/E,+FAA+F,CAClG,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,0FAA0F,CAAC,CAAC;QACxG,IAAI,CAAC,MAAM,CAAC,yEAAyE,CAAC,CAAC;QAEvF,0EAA0E;QAC1E,MAAM,MAAM,GAAG,gBAAgB,CAAC,iBAAiB,EAAE,EAAE,iBAAiB,CAAC,CAAC;QACxE,MAAM,MAAM,GAAG,gBAAgB,CAAC,iBAAiB,EAAE,EAAE,iBAAiB,CAAC,CAAC;QACxE,IAAI,CAAC,MAAM,CACT,wIAAwI;YACtI,YAAY,UAAU,EAAE,OAAO,8BAA8B,0CAA0C,YAAY,CAAC,MAAM,CAAC,mCAAmC,CACjK,CAAC;QACF,IAAI,CAAC,MAAM,CACT,wIAAwI;YACtI,YAAY,UAAU,EAAE,OAAO,8BAA8B,0CAA0C,YAAY,CAAC,MAAM,CAAC,mCAAmC,CACjK,CAAC;IACJ,CAAC;IAEQ,KAAK,CAAC,IAAI;QACjB,IAAI,CAAC,MAAM,CAAC,8DAA8D,CAAC,CAAC;QAC5E,IAAI,CAAC,MAAM,CAAC,yDAAyD,CAAC,CAAC;QACvE,IAAI,CAAC,MAAM,CAAC,4DAA4D,CAAC,CAAC;QAC1E,IAAI,CAAC,MAAM,CAAC,wDAAwD,CAAC,CAAC;QACtE,IAAI,CAAC,MAAM,CAAC,iEAAiE,CAAC,CAAC;QAC/E,IAAI,CAAC,MAAM,CAAC,sDAAsD,CAAC,CAAC;QACpE,IAAI,CAAC,MAAM,CAAC,uEAAuE,CAAC,CAAC;QACrF,IAAI,CAAC,MAAM,CAAC,yDAAyD,CAAC,CAAC;QACvE,IAAI,CAAC,MAAM,CAAC,yDAAyD,CAAC,CAAC;QACvE,IAAI,CAAC,MAAM,CAAC,0DAA0D,CAAC,CAAC;QACxE,IAAI,CAAC,MAAM,CAAC,4DAA4D,CAAC,CAAC;QAC1E,IAAI,CAAC,MAAM,CAAC,iDAAiD,CAAC,CAAC;QAC/D,IAAI,CAAC,MAAM,CAAC,wDAAwD,CAAC,CAAC;IACxE,CAAC;CACF"}

package/dist/migrations/20260830T212736_newsletter_organization_attribution.d.ts

@@ -0,0 +1,116 @@
+import { Migration } from '@mikro-orm/migrations';
+/**
+ * D-187 — `newsletter_subscribers` gains its organisation, and a row that names
+ * a customer account carries one.
+ *
+ * Feature 087 Group B, class 4 of 4 and the last of the five
+ * (`specs/087-tenant-scope-enforcement/`). `NewsletterSubscriber` is
+ * `@CustomerScoped`, and until this migration the `allowed-set` arm of
+ * `customerFilterCond` had no column to grant on: a sales representative
+ * assigned to the buyer's own organisation was shown **none** of their
+ * subscribers. The column is what turns that into an answer.
+ *
+ * ## The column and the read arrive together, on purpose
+ *
+ * `customerOrganizationColumn` asks the ORM's own metadata whether the filtered
+ * entity carries `organizationId`, **per query**, so the entity property in
+ * this same merge request is what switches the grant on — there is no third
+ * artefact, no flag and no staging. At the same instant the
+ * `ORGANIZATION_ATTRIBUTION_PENDING` disclosure retires itself: it is keyed on
+ * the column's *absence*.
+ *
+ * That pairing is why this migration is not "column and backfill". From the
+ * moment the grant is live, a row inserted without an organisation is invisible
+ * to the representative who serves that organisation, on a screen that has just
+ * stopped explaining itself — and MikroORM applies no filter to `INSERT`
+ * (`r1-spike.md` §4, measured), so the filter cannot refuse it. The `CHECK`
+ * below is the only refusal an `INSERT` has.
+ *
+ * ## An implication, not an equivalence
+ *
+ * `customer_account_id is null or organization_id is not null` is FR-010 and
+ * FR-011 together and nothing wider: an **owned** row has an organisation, an
+ * **ownerless** row need not. This table is ownerless by construction for the
+ * storefront's sign-up form — `POST /api/v1/newsletter/subscribe` passes no
+ * account at all, so every subscriber who has never signed in is such a row,
+ * and on this table they are the majority rather than the exception. Who they
+ * belong to is R-6's open question. The equivalence would answer it in the
+ * schema, which D-187 declines to do.
+ *
+ * The shape the implication leaves open — an **ownerless** row still carrying
+ * an organisation — is unreachable here, for `inventory`'s reason rather than
+ * `pwa`'s. `subscriber.service.ts` writes `customer_account_id` in exactly two
+ * places and both of them *acquire* an owner: the `em.create` on first
+ * subscribe, and the adoption line that fills in the account when a subscriber
+ * who signed up anonymously later signs in. Nothing in this module ever clears
+ * it (grep of `packages/modules/newsletter/src` for `customerAccountId`: two
+ * writes, both assignments of a non-null id, the rest reads). So there is no
+ * de-association direction for the constraint to be silent about.
+ *
+ * ## The e-mail address is not a derivation
+ *
+ * `newsletter_subscribers.email` is globally unique and `customer_accounts`
+ * has an `email` too, so the backfill below could have matched them and
+ * attributed far more rows. It deliberately does not. That match would claim
+ * rows the schema does not link, silently and irreversibly, for whoever
+ * happened to sign up with the address their employer later registered — it is
+ * R-6 answer (2) guessed rather than decided. The only derivation is
+ * `customer_account_id`.
+ *
+ * ## No foreign key
+ *
+ * Matching `Cart`, `Comparison`, `PushSubscription` and
+ * `AvailabilityNotification`, none of which carries one. D-187 withdraws
+ * `r1-spike.md` §8's `on delete set null` recommendation as contradicting
+ * FR-011: it produces a row that names an account and no organisation, which is
+ * precisely the state this migration makes unreachable, and under the
+ * constraint below it would abort an unrelated organisation delete with a
+ * message about a table the operator was not touching. If one is ever taken
+ * here it must be `restrict`, and it is not this migration's decision.
+ *
+ * ## Derive, then count, then refuse — never delete
+ *
+ * The derivation is the owning account's own organisation. **On this table the
+ * refusal is a real branch, not a formality**: like `push_subscriptions` and
+ * `availability_notifications`, and unlike `comparisons`,
+ * `newsletter_subscribers` has **no foreign key** on `customer_account_id` —
+ * `20260629T200954_newsletter_init.ts` declares it `uuid null` and constrains
+ * nothing — so a row naming an account that is gone is representable here.
+ *
+ * It is nevertheless empty today, and the reason is worth knowing rather than
+ * hoping: a customer account is never hard-deleted in this tree.
+ * `customer-account-lifecycle-ports.ts` soft-deletes, restores and
+ * **anonymises** — the last one rewrites the e-mail and the name and keeps the
+ * row — and every one of those still satisfies `organization_id NOT NULL`
+ * (D-178), so it still derives. Change any of that and the count below is the
+ * only thing that would notice. The anonymise path is worth a second look on
+ * *this* table in particular, because it rewrites the very column an e-mail
+ * match would have keyed on; deriving from `customer_account_id` is unaffected
+ * by it.
+ *
+ * It raises with the count and up to twenty ids and deletes nothing (D-184), in
+ * the shape `20260825T141659_customer_accounts_organization_required.ts`
+ * established and the three Group B migrations before this one repeated.
+ * Deleting would be particularly wrong here: a subscriber row is a consent
+ * record, and dropping one destroys the evidence that the address may be
+ * mailed at all.
+ *
+ * ## Nothing to declare in the manifest
+ *
+ * `newsletter` declares `customers` in its manifest `dependencies`, whose
+ * transitive closure reaches `customer_accounts` and `organizations`, so the
+ * table this reads is created before this runs. No foreign key is added, so
+ * `fk-dependency-drift` has nothing to say either, and a migration naming
+ * another module's table is outside `check:module-boundary`'s population by
+ * that check's own rule.
+ *
+ * The standing guard is
+ * `backend/test/integration/tenancy/customer-scoped-organization-completeness.test.ts`,
+ * which derives its population from the ORM's metadata rather than from a list
+ * — so this class is covered by gaining the column, with no edit to that file.
+ */
+export declare class Migration20260830T212736NewsletterOrganizationAttribution extends Migration {
+    up(): Promise<void>;
+    down(): Promise<void>;
+}
+//# sourceMappingURL=20260830T212736_newsletter_organization_attribution.d.ts.map

package/dist/migrations/20260830T212736_newsletter_organization_attribution.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"20260830T212736_newsletter_organization_attribution.d.ts","sourceRoot":"","sources":["../../src/migrations/20260830T212736_newsletter_organization_attribution.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAElD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6GG;AACH,qBAAa,yDAA0D,SAAQ,SAAS;IACvE,EAAE,IAAI,OAAO,CAAC,IAAI,CAAC;IAoEnB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;CAarC"}