@endora-commerce/mod-newsletter 0.100.0

package/dist/backend/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/backend/index.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,SAAS,CAAC;AAGrC,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kCAAkC,CAAC;AAClE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,kCAAkC,CAAC;AACjE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kCAAkC,CAAC;AAEtE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAC;AAC5E,OAAO,EAAE,gBAAgB,EAAE,KAAK,uBAAuB,EAAE,MAAM,aAAa,CAAC;AAE7E,OAAO,EAAE,uBAAuB,EAAE,MAAM,gDAAgD,CAAC;AACzF,OAAO,EAAE,oBAAoB,EAAE,MAAM,4CAA4C,CAAC;AAClF,OAAO,EAAE,4BAA4B,EAAE,MAAM,qDAAqD,CAAC;AACnG,OAAO,EAAE,kBAAkB,EAAE,MAAM,0CAA0C,CAAC;AAC9E,OAAO,EAAE,qBAAqB,EAAE,MAAM,8CAA8C,CAAC;AACrF,OAAO,EAAE,gCAAgC,EAAE,MAAM,2DAA2D,CAAC;AAC7G,OAAO,EAAE,oBAAoB,EAAE,MAAM,6CAA6C,CAAC;AACnF,OAAO,EAAE,yBAAyB,EAAE,MAAM,kDAAkD,CAAC;AAC7F,OAAO,EAAE,oBAAoB,EAAE,MAAM,6CAA6C,CAAC;AACnF,OAAO,EAAE,uBAAuB,EAAE,MAAM,gDAAgD,CAAC;AACzF,OAAO,EAAE,oBAAoB,EAAE,MAAM,4CAA4C,CAAC;AAClF,OAAO,EAAE,qBAAqB,EAAE,MAAM,6CAA6C,CAAC;AACpF,OAAO,EAAE,aAAa,EAAE,MAAM,qCAAqC,CAAC;AAEpE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkDG;AAEH,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,SAAS,EAAE,MAAM,aAAa,CAAC;IACxC,QAAQ,CAAC,eAAe,EAAE,SAAS,CAAC;IACpC,QAAQ,CAAC,YAAY,EAAE,mBAAmB,CAAC;IAC3C,QAAQ,CAAC,eAAe,EAAE,WAAW,CAAC,uBAAuB,CAAC,iBAAiB,CAAC,CAAC,CAAC;IAClF,QAAQ,CAAC,gBAAgB,EAAE,WAAW,CAAC,uBAAuB,CAAC,UAAU,CAAC,CAAC,CAAC;IAC5E,QAAQ,CAAC,oBAAoB,EAAE,WAAW,CAAC,uBAAuB,CAAC,eAAe,CAAC,CAAC,CAAC;IACrF,QAAQ,CAAC,uBAAuB,EAAE,WAAW,CAAC,uBAAuB,CAAC,qBAAqB,CAAC,CAAC,CAAC;IAC9F,QAAQ,CAAC,kBAAkB,EAAE,WAAW,CAAC,uBAAuB,CAAC,aAAa,CAAC,CAAC,CAAC;IACjF,0FAA0F;IAC1F,QAAQ,CAAC,gBAAgB,EAAE,KAAK,GAAG,SAAS,CAAC;IAC7C;;;;;;OAMG;IACH,QAAQ,CAAC,qBAAqB,EAAE,MAAM,CAAC;IACvC,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC,uBAAuB,CAAC,QAAQ,CAAC,CAAC,CAAC;IACrE,QAAQ,CAAC,yBAAyB,EAAE,WAAW,CAC7C,uBAAuB,CAAC,0BAA0B,CAAC,CACpD,CAAC;IACF,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5B,QAAQ,CAAC,0BAA0B,EAAE;QACnC,gBAAgB,IAAI,OAAO,CAAC;YAAE,EAAE,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;KAC7C,CAAC;IACF,QAAQ,CAAC,sBAAsB,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAA;KAAE,CAAC;IACpF,yFAAyF;IACzF,QAAQ,CAAC,uBAAuB,EAAE,uBAAuB,CAAC,sBAAsB,CAAC,CAAC;IAClF,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC,OAAO,gBAAgB,CAAC,CAAC;CAC1D;AAED,wBAAgB,cAAc,CAAC,GAAG,EAAE,aAAa,GAAG,IAAI,CA6HvD;AAED;;;;;;;;;;GAUG;AACH,eAAO,MAAM,QAAQ,iaAcpB,CAAC"}

package/dist/backend/index.js

@@ -0,0 +1,139 @@
+import { randomUUID } from 'node:crypto';
+import { lazyPort, resolvePublicApiBaseUrl } from '@endora-commerce/platform/kernel';
+import { newsletterModule } from './plugin.js';
+import { ensureNewsletterConsentBlock } from './services/consent-block-seeder.js';
+import { NewsletterAutomationRun } from './entities/newsletter-automation-run.entity.js';
+import { NewsletterAutomation } from './entities/newsletter-automation.entity.js';
+import { NewsletterCampaignSubscriber } from './entities/newsletter-campaign-subscriber.entity.js';
+import { NewsletterCampaign } from './entities/newsletter-campaign.entity.js';
+import { NewsletterCustomField } from './entities/newsletter-custom-field.entity.js';
+import { NewsletterEmailBlockSalesChannel } from './entities/newsletter-email-block-sales-channel.entity.js';
+import { NewsletterEmailBlock } from './entities/newsletter-email-block.entity.js';
+import { NewsletterEngagementEvent } from './entities/newsletter-engagement-event.entity.js';
+import { NewsletterSendRecord } from './entities/newsletter-send-record.entity.js';
+import { NewsletterSubscriberTag } from './entities/newsletter-subscriber-tag.entity.js';
+import { NewsletterSubscriber } from './entities/newsletter-subscriber.entity.js';
+import { NewsletterSuppression } from './entities/newsletter-suppression.entity.js';
+import { NewsletterTag } from './entities/newsletter-tag.entity.js';
+export function registerModule(ctx) {
+    ctx.di.register({
+        // Contribution point, absent by default: no branding source, neutral email.
+        newsletterEmailBranding: ctx
+            .asFunction(() => undefined)
+            .singleton(),
+        newsletter: ctx
+            .asFunction(({ emFactory, auditLogService, moduleQueueRedis, newsletterTokenSecret, storefrontBaseUrl, eventBus, }) => {
+            const cradle = () => ctx.cradle();
+            return newsletterModule({
+                emFactory,
+                auditLog: auditLogService,
+                settings: lazyPort(ctx, 'settingsReadPort'),
+                settingsWrite: lazyPort(ctx, 'settingsAdminService'),
+                credentials: lazyPort(ctx, 'credentialsService'),
+                // Feature 087 Group B / D-187 — the organisation an owned subscriber
+                // carries. A new edge for this module, and it needs no manifest
+                // change: `check:port-dependencies` uses the transitive closure of
+                // `dependencies`, and `customers` (declared) reaches
+                // `customer_accounts`. No deactivation-consequence entry either —
+                // `customer_accounts` declares `nonDeactivatable`, so it has no
+                // absent state for a consequence to describe.
+                customerAccounts: lazyPort(ctx, 'customerAccountReadPort'),
+                requireAdmin: (permission) => async (req, reply) => ctx.cradle().requireAdmin(permission)(req, reply),
+                requireCustomer: (req, reply) => ctx.cradle().requireCustomer(req, reply),
+                resolveAuditContext: (req) => ctx.cradle().adminAuditActorResolver(req),
+                // The nine former `newsletterBridge` members, each read where it
+                // belongs. A composition that wants a different answer contributes
+                // over the name it disagrees with; the harness pins the secret and
+                // the two origins, and gets a capturing mailer through `emailMailer`.
+                tokenSecret: newsletterTokenSecret,
+                publicBaseUrl: resolvePublicApiBaseUrl(),
+                storefrontBaseUrl,
+                // `lazyPort`, not `cradle().emailMailer`: this factory body runs once,
+                // and a cradle read written into it resolves the name there — the
+                // captured-registration shape `check:port-dependencies` refuses.
+                mailer: lazyPort(ctx, 'emailMailer'),
+                // An accessor, so nothing is awaited while this factory runs. The
+                // opt-in policy is the only reader and it asks per subscribe.
+                resolveDefaultChannelId: async () => (await cradle().salesChannelResolutionPort.getSystemDefault()).id,
+                resolveChannelIdByCode: (code) => cradle().salesChannelCodeIdPort.idByCode(code),
+                resolveCustomerAccountId: (req) => cradle().customerAccountIdResolver(req),
+                loadCustomerEmail: async (customerAccountId) => (await lazyPort(ctx, 'customerAccountReadPort').findById(customerAccountId))?.email ?? null,
+                emitEvent: (name, payload) => eventBus.emit(name, {
+                    eventId: randomUUID(),
+                    occurredAt: new Date().toISOString(),
+                    ...payload,
+                }),
+                // Queue-backed dispatch when the composition has Redis; the module
+                // falls back to inline sending when it does not (Principle X).
+                ...(moduleQueueRedis === undefined ? {} : { redis: moduleQueueRedis }),
+                runWorkers: process.env['BACKEND_ROLE'] !== 'api',
+                // The lifecycle gate, threaded in rather than imported. The module
+                // builds its consumers inside the attach function — two need
+                // `app.log`, one an awaited settings read — so it has no
+                // `ModuleContext` where the workers exist; it called
+                // `defineModuleWorker('newsletter', …)` for itself until T051, which
+                // `contracts/host-package.md` §1.4c classifies **A**. Same gate,
+                // through the seam a composed module is meant to use.
+                registerWorker: (worker, workerOptions) => {
+                    ctx.worker(worker, workerOptions);
+                },
+                // Read per call, so a root may contribute branding at any point in
+                // its own ordering.
+                resolveEmailBranding: async (salesChannelId) => {
+                    const resolve = ctx.cradle().newsletterEmailBranding;
+                    return resolve === undefined
+                        ? { logoUrl: '', accentColor: '#1f2937' }
+                        : resolve(salesChannelId);
+                },
+            });
+        })
+            .singleton(),
+    });
+    ctx.routes(async (app) => {
+        // Seed the predefined consent CMS block (idempotent; runs after channels
+        // exist). It sat inside `plugin.ts`'s route registrar until feature 075,
+        // where it wrote `cms`' two tables in raw SQL under a `try/catch` that
+        // downgraded every failure to a warning so a CMS-less platform could still
+        // boot (D-87). `cms` owns the write now, behind `cmsBlockSeedPort`, and the
+        // seeder decides that module's presence before it calls — so the absence is
+        // an answer logged here rather than an exception a `catch` has to be
+        // trusted to tell apart from a real one. The call moves up to `backend.ts`
+        // with the port, because a `ModuleContext` is what resolves one; relative
+        // order is unchanged, since the plugin's own registrar runs below.
+        //
+        // `lazyPort` built in a `ctx.routes` body resolves nothing: it defers to
+        // the method call, which happens only after the presence decision.
+        const seeded = await ensureNewsletterConsentBlock(lazyPort(ctx, 'cmsBlockSeedPort'));
+        if (seeded === 'cms-absent') {
+            app.log.info('[newsletter] consent CMS block seed skipped — cms is not present');
+        }
+        await ctx.cradle().newsletter(app);
+    });
+}
+/**
+ * The module's persisted entity classes, on the `./backend` subpath, as one
+ * array and **no named class export** (D-168).
+ *
+ * This is the shape the platform reads when the package is *installed*: the
+ * boot-time loader (`src/packages/package-runtime.ts`, `exported['entities']`)
+ * and the static declaration reader (`scripts/lib/package-declarations.ts`),
+ * which is the third source of `check:module-boundary`'s `table→owner` map and
+ * the package pass of `check-entity-tenant-classification`. A missing array is
+ * answered with `[]` — zero entities registered, no error anywhere.
+ */
+export const entities = [
+    NewsletterAutomationRun,
+    NewsletterAutomation,
+    NewsletterCampaignSubscriber,
+    NewsletterCampaign,
+    NewsletterCustomField,
+    NewsletterEmailBlockSalesChannel,
+    NewsletterEmailBlock,
+    NewsletterEngagementEvent,
+    NewsletterSendRecord,
+    NewsletterSubscriberTag,
+    NewsletterSubscriber,
+    NewsletterSuppression,
+    NewsletterTag,
+];
+//# sourceMappingURL=index.js.map

package/dist/backend/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/backend/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAQzC,OAAO,EAAE,QAAQ,EAAE,uBAAuB,EAAE,MAAM,kCAAkC,CAAC;AAErF,OAAO,EAAE,gBAAgB,EAAgC,MAAM,aAAa,CAAC;AAC7E,OAAO,EAAE,4BAA4B,EAAE,MAAM,oCAAoC,CAAC;AAClF,OAAO,EAAE,uBAAuB,EAAE,MAAM,gDAAgD,CAAC;AACzF,OAAO,EAAE,oBAAoB,EAAE,MAAM,4CAA4C,CAAC;AAClF,OAAO,EAAE,4BAA4B,EAAE,MAAM,qDAAqD,CAAC;AACnG,OAAO,EAAE,kBAAkB,EAAE,MAAM,0CAA0C,CAAC;AAC9E,OAAO,EAAE,qBAAqB,EAAE,MAAM,8CAA8C,CAAC;AACrF,OAAO,EAAE,gCAAgC,EAAE,MAAM,2DAA2D,CAAC;AAC7G,OAAO,EAAE,oBAAoB,EAAE,MAAM,6CAA6C,CAAC;AACnF,OAAO,EAAE,yBAAyB,EAAE,MAAM,kDAAkD,CAAC;AAC7F,OAAO,EAAE,oBAAoB,EAAE,MAAM,6CAA6C,CAAC;AACnF,OAAO,EAAE,uBAAuB,EAAE,MAAM,gDAAgD,CAAC;AACzF,OAAO,EAAE,oBAAoB,EAAE,MAAM,4CAA4C,CAAC;AAClF,OAAO,EAAE,qBAAqB,EAAE,MAAM,6CAA6C,CAAC;AACpF,OAAO,EAAE,aAAa,EAAE,MAAM,qCAAqC,CAAC;AAwFpE,MAAM,UAAU,cAAc,CAAC,GAAkB;IAC/C,GAAG,CAAC,EAAE,CAAC,QAAQ,CAAC;QACd,4EAA4E;QAC5E,uBAAuB,EAAE,GAAG;aACzB,UAAU,CAAC,GAAgD,EAAE,CAAC,SAAS,CAAC;aACxE,SAAS,EAAE;QAEd,UAAU,EAAE,GAAG;aACZ,UAAU,CACT,CAAC,EACC,SAAS,EACT,eAAe,EACf,gBAAgB,EAChB,qBAAqB,EACrB,iBAAiB,EACjB,QAAQ,GACS,EAAE,EAAE;YACvB,MAAM,MAAM,GAAG,GAAqB,EAAE,CAAC,GAAG,CAAC,MAAM,EAAoB,CAAC;YACtE,OAAO,gBAAgB,CAAC;gBACtB,SAAS;gBACT,QAAQ,EAAE,eAAe;gBACzB,QAAQ,EAAE,QAAQ,CAChB,GAAG,EACH,kBAAkB,CACnB;gBACD,aAAa,EAAE,QAAQ,CACrB,GAAG,EACH,sBAAsB,CACvB;gBACD,WAAW,EAAE,QAAQ,CACnB,GAAG,EACH,oBAAoB,CACrB;gBACD,qEAAqE;gBACrE,gEAAgE;gBAChE,mEAAmE;gBACnE,qDAAqD;gBACrD,kEAAkE;gBAClE,gEAAgE;gBAChE,8CAA8C;gBAC9C,gBAAgB,EAAE,QAAQ,CAA0B,GAAG,EAAE,yBAAyB,CAAC;gBACnF,YAAY,EAAE,CAAC,UAAU,EAAE,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,CACjD,GAAG,CAAC,MAAM,EAAoB,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC;gBACrE,eAAe,EAAE,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAC9B,GAAG,CAAC,MAAM,EAAoB,CAAC,eAAe,CAAC,GAAG,EAAE,KAAK,CAAC;gBAC5D,mBAAmB,EAAE,CAAC,GAAmB,EAAE,EAAE,CAC3C,GAAG,CAAC,MAAM,EAAoB,CAAC,uBAAuB,CAAC,GAAG,CAAC;gBAC7D,iEAAiE;gBACjE,mEAAmE;gBACnE,mEAAmE;gBACnE,sEAAsE;gBACtE,WAAW,EAAE,qBAAqB;gBAClC,aAAa,EAAE,uBAAuB,EAAE;gBACxC,iBAAiB;gBACjB,uEAAuE;gBACvE,kEAAkE;gBAClE,iEAAiE;gBACjE,MAAM,EAAE,QAAQ,CAAiD,GAAG,EAAE,aAAa,CAAC;gBACpF,kEAAkE;gBAClE,8DAA8D;gBAC9D,uBAAuB,EAAE,KAAK,IAAI,EAAE,CAClC,CAAC,MAAM,MAAM,EAAE,CAAC,0BAA0B,CAAC,gBAAgB,EAAE,CAAC,CAAC,EAAE;gBACnE,sBAAsB,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,sBAAsB,CAAC,QAAQ,CAAC,IAAI,CAAC;gBAChF,wBAAwB,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,yBAAyB,CAAC,GAAG,CAAC;gBAC1E,iBAAiB,EAAE,KAAK,EAAE,iBAAiB,EAAE,EAAE,CAC7C,CAAC,MAAM,QAAQ,CAA0B,GAAG,EAAE,yBAAyB,CAAC,CAAC,QAAQ,CAC/E,iBAAiB,CAClB,CAAC,EAAE,KAAK,IAAI,IAAI;gBACnB,SAAS,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,CAC3B,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE;oBAClB,OAAO,EAAE,UAAU,EAAE;oBACrB,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;oBACpC,GAAG,OAAO;iBACX,CAAC;gBACJ,mEAAmE;gBACnE,+DAA+D;gBAC/D,GAAG,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC;gBACtE,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,KAAK,KAAK;gBACjD,mEAAmE;gBACnE,6DAA6D;gBAC7D,yDAAyD;gBACzD,qDAAqD;gBACrD,qEAAqE;gBACrE,iEAAiE;gBACjE,sDAAsD;gBACtD,cAAc,EAAE,CAAC,MAAM,EAAE,aAAa,EAAE,EAAE;oBACxC,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;gBACpC,CAAC;gBACD,mEAAmE;gBACnE,oBAAoB;gBACpB,oBAAoB,EAAE,KAAK,EAAE,cAA6B,EAAE,EAAE;oBAC5D,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,EAAoB,CAAC,uBAAuB,CAAC;oBACvE,OAAO,OAAO,KAAK,SAAS;wBAC1B,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,WAAW,EAAE,SAAS,EAAE;wBACzC,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;gBAC9B,CAAC;aACF,CAAC,CAAC;QACH,CAAC,CACF;aACA,SAAS,EAAE;KACf,CAAC,CAAC;IAEH,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;QACvB,yEAAyE;QACzE,yEAAyE;QACzE,uEAAuE;QACvE,2EAA2E;QAC3E,4EAA4E;QAC5E,4EAA4E;QAC5E,qEAAqE;QACrE,2EAA2E;QAC3E,0EAA0E;QAC1E,mEAAmE;QACnE,EAAE;QACF,yEAAyE;QACzE,mEAAmE;QACnE,MAAM,MAAM,GAAG,MAAM,4BAA4B,CAC/C,QAAQ,CAAmB,GAAG,EAAE,kBAAkB,CAAC,CACpD,CAAC;QACF,IAAI,MAAM,KAAK,YAAY,EAAE,CAAC;YAC5B,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,kEAAkE,CAAC,CAAC;QACnF,CAAC;QAED,MAAM,GAAG,CAAC,MAAM,EAAoB,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAG;IACtB,uBAAuB;IACvB,oBAAoB;IACpB,4BAA4B;IAC5B,kBAAkB;IAClB,qBAAqB;IACrB,gCAAgC;IAChC,oBAAoB;IACpB,yBAAyB;IACzB,oBAAoB;IACpB,uBAAuB;IACvB,oBAAoB;IACpB,qBAAqB;IACrB,aAAa;CACd,CAAC"}

package/dist/backend/plugin.d.ts

@@ -0,0 +1,114 @@
+import type { Worker } from 'bullmq';
+import type { EntityManager } from '@mikro-orm/postgresql';
+import type { Redis } from 'ioredis';
+import { type CustomerAccountReadPort, type EmailMailerPort } from '@endora-commerce/contracts';
+import type { PlatformLogger } from '@endora-commerce/platform/kernel';
+import type { SettingsReadPort } from '@endora-commerce/platform/kernel';
+import type { AuditPort } from '@endora-commerce/platform/kernel';
+import type { FastifyInstance, FastifyReply, FastifyRequest } from 'fastify';
+import { type SettingsWriter } from './services/provider-admin.service.js';
+import type { AdminAuditContext } from './services/provider-admin.types.js';
+import { type CredentialResolvePort } from './services/provider/provider-registry.js';
+/**
+ * The attach function this module hands its composition root.
+ *
+ * Typed on `fastify`'s own `FastifyInstance` rather than on the platform's
+ * `ModulePlugin`, which `contracts/host-package.md` §1.4g classifies **A**: the
+ * host does not publish it, so a packaged module cannot name it. The
+ * already-packaged `quote_requests` types its attach function the same way.
+ */
+type ModuleAttach = (app: FastifyInstance) => Promise<void>;
+export interface NewsletterModuleOptions {
+    emFactory: () => EntityManager;
+    settings: SettingsReadPort;
+    tokenSecret: string;
+    /**
+     * The channel a subscriber with no origin channel belongs to — the
+     * deployment's system-default one, or `null` when it has none. Only the
+     * opt-in policy uses it: mode and confirmation TTL are per-storefront
+     * settings, so "the system-default channel's value" is the right answer for a
+     * subscriber with no channel and the platform-wide value is not. The provider
+     * configuration, which *is* platform-wide, reads `null` directly and no
+     * longer takes this at all (feature 072, D-41).
+     *
+     * An **accessor** since `specs/117-instance-bring-up/` Phase 6: it was an
+     * awaited value, which is the one member of the old `newsletterBridge` that
+     * only a composition root could produce. Both readers are already `async`.
+     */
+    resolveDefaultChannelId: () => Promise<string | null>;
+    resolveChannelIdByCode: (code: string) => Promise<string | null>;
+    publicBaseUrl: string;
+    storefrontBaseUrl: string;
+    requireAdmin: (permission?: string) => (req: FastifyRequest, reply: FastifyReply) => Promise<void>;
+    /** Settings admin write surface (provider config + secret). */
+    settingsWrite: SettingsWriter;
+    /** Resolve the admin audit context from a request (for secret writes). */
+    resolveAuditContext: (req: FastifyRequest) => AdminAuditContext;
+    /** Customer session guard (self routes). */
+    requireCustomer: (req: FastifyRequest, reply: FastifyReply) => Promise<void>;
+    /** Resolve the signed-in customer's account id (org-less). */
+    resolveCustomerAccountId: (req: FastifyRequest) => string;
+    /** Resolve a customer account's email (cross-module lookup). */
+    loadCustomerEmail: (customerAccountId: string) => Promise<string | null>;
+    /**
+     * `customerAccountReadPort`, owned by `customer_accounts` — the organisation
+     * a subscriber's account belongs to (feature 087 Group B, D-187).
+     *
+     * Required, like the two settings ports above it and unlike `mailer`:
+     * `newsletter_subscribers_organization_attribution_chk` refuses an owned row
+     * with no organisation, so a composition that cannot answer this question
+     * cannot write the table at all. Typed as the published contract rather than
+     * by naming `customer_accounts`' own service class (Principle I).
+     */
+    customerAccounts: CustomerAccountReadPort;
+    /**
+     * `emailMailer`, owned by `email` — the container's registration, contributed
+     * here by a root. Typed as the published contract (feature 075, Phase C)
+     * rather than by naming `email`'s own `Mailer` alias: this module described
+     * the transport it needs by reaching into the module that owns it, which is
+     * the compile-time coupling Principle I forbids even when nothing is called.
+     */
+    mailer?: EmailMailerPort;
+    auditLog: AuditPort;
+    /** Optional observability emitter (wraps the in-process EventBus). */
+    emitEvent?: (name: string, payload: Record<string, unknown>) => void;
+    /** Redis connection — when present, dispatch is queue-backed (Principle X). */
+    redis?: Redis;
+    /** Whether this process runs queue consumers (BACKEND_ROLE != api). */
+    runWorkers?: boolean;
+    /**
+     * The lifecycle gate for a constructed BullMQ worker — `ctx.worker`, threaded
+     * in by `backend.ts`.
+     *
+     * This module builds its three consumers inside the attach function, because
+     * two of them need `app.log` and one needs an awaited settings read, so it
+     * has no `ModuleContext` in scope where the workers exist. It used to call
+     * `defineModuleWorker('newsletter', …)` directly, which
+     * `contracts/host-package.md` §1.4c classifies **A**: publishing that wrapper
+     * would re-open by bare specifier the seam `check:subscribe-seam` closed by
+     * relative path. Taking the seam as an argument is the same gate reached the
+     * sanctioned way.
+     */
+    registerWorker: (worker: Worker, options?: {
+        logger?: PlatformLogger;
+    }) => void;
+    /**
+     * Feature 058 — resolves the `newsletter.email_credentials` reference into a
+     * usable SMTP transport. Injected as a narrow port (Principle I); when absent
+     * the registry uses the legacy `newsletter.smtp.*` settings.
+     */
+    credentials?: CredentialResolvePort;
+    /** Resolve transactional email branding (logo + accent) for a sales channel. */
+    resolveEmailBranding?: (salesChannelId: string | null) => Promise<{
+        logoUrl: string;
+        accentColor: string;
+    }>;
+}
+/**
+ * Composition root for the newsletter module (feature 048). Builds the service
+ * graph, the (optional) BullMQ dispatch queues + workers, and registers the
+ * storefront + admin routes, all gated on the module's enabled state.
+ */
+export declare function newsletterModule(options: NewsletterModuleOptions): ModuleAttach;
+export {};
+//# sourceMappingURL=plugin.d.ts.map

package/dist/backend/plugin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin.d.ts","sourceRoot":"","sources":["../../src/backend/plugin.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AACrC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAEL,KAAK,uBAAuB,EAC5B,KAAK,eAAe,EACrB,MAAM,4BAA4B,CAAC;AACpC,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,kCAAkC,CAAC;AACvE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AACzE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kCAAkC,CAAC;AAClE,OAAO,KAAK,EAAE,eAAe,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAe7E,OAAO,EAAkC,KAAK,cAAc,EAAE,MAAM,sCAAsC,CAAC;AAC3G,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,oCAAoC,CAAC;AAC5E,OAAO,EAEL,KAAK,qBAAqB,EAC3B,MAAM,0CAA0C,CAAC;AAclD;;;;;;;GAOG;AACH,KAAK,YAAY,GAAG,CAAC,GAAG,EAAE,eAAe,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;AAE5D,MAAM,WAAW,uBAAuB;IACtC,SAAS,EAAE,MAAM,aAAa,CAAC;IAC/B,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,WAAW,EAAE,MAAM,CAAC;IACpB;;;;;;;;;;;;OAYG;IACH,uBAAuB,EAAE,MAAM,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IACtD,sBAAsB,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IACjE,aAAa,EAAE,MAAM,CAAC;IACtB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,YAAY,EAAE,CAAC,UAAU,CAAC,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,cAAc,EAAE,KAAK,EAAE,YAAY,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACnG,+DAA+D;IAC/D,aAAa,EAAE,cAAc,CAAC;IAC9B,0EAA0E;IAC1E,mBAAmB,EAAE,CAAC,GAAG,EAAE,cAAc,KAAK,iBAAiB,CAAC;IAChE,4CAA4C;IAC5C,eAAe,EAAE,CAAC,GAAG,EAAE,cAAc,EAAE,KAAK,EAAE,YAAY,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7E,8DAA8D;IAC9D,wBAAwB,EAAE,CAAC,GAAG,EAAE,cAAc,KAAK,MAAM,CAAC;IAC1D,gEAAgE;IAChE,iBAAiB,EAAE,CAAC,iBAAiB,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IACzE;;;;;;;;;OASG;IACH,gBAAgB,EAAE,uBAAuB,CAAC;IAC1C;;;;;;OAMG;IACH,MAAM,CAAC,EAAE,eAAe,CAAC;IACzB,QAAQ,EAAE,SAAS,CAAC;IACpB,sEAAsE;IACtE,SAAS,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;IACrE,+EAA+E;IAC/E,KAAK,CAAC,EAAE,KAAK,CAAC;IACd,uEAAuE;IACvE,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB;;;;;;;;;;;;OAYG;IACH,cAAc,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,cAAc,CAAA;KAAE,KAAK,IAAI,CAAC;IAChF;;;;OAIG;IACH,WAAW,CAAC,EAAE,qBAAqB,CAAC;IACpC,gFAAgF;IAChF,oBAAoB,CAAC,EAAE,CACrB,cAAc,EAAE,MAAM,GAAG,IAAI,KAC1B,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACxD;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,uBAAuB,GAAG,YAAY,CAqL/E"}

package/dist/backend/plugin.js

@@ -0,0 +1,171 @@
+import { z } from 'zod';
+import { NEWSLETTER_SETTING_CODES, } from '@endora-commerce/contracts';
+import { NewsletterTokenHelper } from './services/token.helper.js';
+import { NewsletterOptInService } from './services/opt-in.service.js';
+import { NewsletterSubscriberService } from './services/subscriber.service.js';
+import { NewsletterContentService } from './services/content.service.js';
+import { NewsletterAudienceResolver } from './services/audience-resolver.js';
+import { NewsletterCampaignDispatchService } from './services/campaign-dispatch.service.js';
+import { NewsletterCampaignService } from './services/campaign.service.js';
+import { NewsletterSubscriberAdminService } from './services/subscriber-admin.service.js';
+import { NewsletterTagService } from './services/tag.service.js';
+import { NewsletterCustomFieldService } from './services/custom-field.service.js';
+import { NewsletterAutomationService } from './services/automation.service.js';
+import { NewsletterTrackingService } from './services/tracking.service.js';
+import { NewsletterStatsService } from './services/stats.service.js';
+import { NewsletterEmailBlockService } from './services/email-block.service.js';
+import { NewsletterProviderAdminService } from './services/provider-admin.service.js';
+import { NewsletterProviderRegistry, } from './services/provider/provider-registry.js';
+import { createCampaignPlanQueue, createSendQueue, createAutomationStepQueue, createCampaignPlanWorker, createSendWorker, createAutomationStepWorker, } from './services/queues/newsletter-queues.js';
+import { NewsletterSelfService } from './services/self.service.js';
+import { registerNewsletterStorefrontRoutes } from './routes.storefront.js';
+import { registerNewsletterAdminRoutes } from './routes.admin.js';
+import { registerNewsletterSelfRoutes } from './routes.self.js';
+/**
+ * Composition root for the newsletter module (feature 048). Builds the service
+ * graph, the (optional) BullMQ dispatch queues + workers, and registers the
+ * storefront + admin routes, all gated on the module's enabled state.
+ */
+export function newsletterModule(options) {
+    const tokens = new NewsletterTokenHelper(options.tokenSecret);
+    const optIn = new NewsletterOptInService(options.settings, tokens);
+    const content = new NewsletterContentService();
+    const audience = new NewsletterAudienceResolver(options.emFactory);
+    const providers = new NewsletterProviderRegistry(options.settings, options.credentials);
+    const links = {
+        confirm: (t) => `${options.publicBaseUrl}/api/v1/newsletter/confirm?token=${encodeURIComponent(t)}`,
+        unsubscribe: (t) => `${options.publicBaseUrl}/api/v1/newsletter/unsubscribe?token=${encodeURIComponent(t)}`,
+    };
+    const subscribers = new NewsletterSubscriberService({
+        emFactory: options.emFactory,
+        optIn,
+        resolveDefaultChannelId: options.resolveDefaultChannelId,
+        links,
+        customerAccounts: options.customerAccounts,
+        ...(options.mailer ? { mailer: options.mailer } : {}),
+        ...(options.auditLog ? { auditLog: options.auditLog } : {}),
+        ...(options.emitEvent ? { emitEvent: options.emitEvent } : {}),
+    });
+    const subscriberAdmin = new NewsletterSubscriberAdminService(options.emFactory, options.auditLog);
+    const tags = new NewsletterTagService(options.emFactory, options.auditLog);
+    const customFields = new NewsletterCustomFieldService(options.emFactory, options.auditLog);
+    const tracking = new NewsletterTrackingService(options.emFactory);
+    const stats = new NewsletterStatsService(options.emFactory);
+    const blocks = new NewsletterEmailBlockService(options.emFactory, options.auditLog);
+    const providerAdmin = new NewsletterProviderAdminService(options.settings, options.settingsWrite, providers);
+    const self = new NewsletterSelfService(options.emFactory, subscribers);
+    const dispatch = new NewsletterCampaignDispatchService({
+        emFactory: options.emFactory,
+        audience,
+        content,
+        optIn,
+        links,
+        resolveProvider: () => providers.resolveProvider(),
+        resolveSender: () => providers.resolveSender(),
+        ...(options.resolveEmailBranding
+            ? { resolveEmailBranding: options.resolveEmailBranding }
+            : {}),
+    });
+    // Producer-side queues (needed by the API to enqueue, regardless of worker role).
+    const planQueue = options.redis ? createCampaignPlanQueue(options.redis) : undefined;
+    const sendQueue = options.redis ? createSendQueue(options.redis) : undefined;
+    const automationStepQueue = options.redis ? createAutomationStepQueue(options.redis) : undefined;
+    const automations = new NewsletterAutomationService({
+        emFactory: options.emFactory,
+        content,
+        optIn,
+        links,
+        resolveProvider: () => providers.resolveProvider(),
+        resolveSender: () => providers.resolveSender(),
+        enqueueStep: async (runId, stepIndex, delayMs) => {
+            if (automationStepQueue) {
+                await automationStepQueue.add('step', { runId, stepIndex }, delayMs ? { delay: delayMs } : {});
+            }
+        },
+        ...(options.auditLog ? { auditLog: options.auditLog } : {}),
+        ...(options.resolveEmailBranding
+            ? { resolveEmailBranding: options.resolveEmailBranding }
+            : {}),
+    });
+    const campaigns = new NewsletterCampaignService({
+        emFactory: options.emFactory,
+        dispatch,
+        content,
+        isProviderConfigured: () => providers.isConfigured(),
+        ...(options.auditLog ? { auditLog: options.auditLog } : {}),
+        ...(options.resolveEmailBranding
+            ? { resolveEmailBranding: options.resolveEmailBranding }
+            : {}),
+        ...(planQueue
+            ? {
+                enqueuePlan: async (campaignId, delayMs) => {
+                    const job = await planQueue.add('plan', { campaignId }, delayMs ? { delay: delayMs } : {});
+                    return job.id;
+                },
+            }
+            : {}),
+    });
+    return async (app) => {
+        // Queue consumers (Principle X): separable, pause on disable.
+        if (options.runWorkers && options.redis && planQueue && sendQueue) {
+            let rate = 14;
+            try {
+                // Platform-wide: one send-rate cap for the deployment's one SMTP
+                // transport (feature 072, D-41).
+                rate = await options.settings.get(NEWSLETTER_SETTING_CODES.RATE_LIMIT_PER_SECOND, null, z.number());
+            }
+            catch {
+                // default
+            }
+            options.registerWorker(createCampaignPlanWorker(options.redis, async (job) => {
+                const recordIds = await dispatch.planCampaign(job.data.campaignId);
+                for (const recordId of recordIds)
+                    await sendQueue.add('send', { recordId });
+            }), { logger: app.log });
+            options.registerWorker(createSendWorker(options.redis, async (job) => {
+                await dispatch.sendRecord(job.data.recordId);
+            }, rate), { logger: app.log });
+            if (automationStepQueue) {
+                options.registerWorker(createAutomationStepWorker(options.redis, async (job) => {
+                    await automations.processStep(job.data.runId, job.data.stepIndex);
+                }), { logger: app.log });
+            }
+        }
+        // Encapsulated, not gated. `backend.ts` registers this through `ctx.routes`,
+        // which already applies `defineModuleRoutes('newsletter', …)` — gating here
+        // too would add a second, identical `onRequest` check to every route the
+        // module owns (feature 072). The `register` call stays: it is what keeps
+        // this module's hooks and decorators out of the rest of the app.
+        await app.register(async (scoped) => {
+            await registerNewsletterStorefrontRoutes(scoped, {
+                subscribers,
+                optIn,
+                tokens,
+                tracking,
+                resolveChannelIdByCode: options.resolveChannelIdByCode,
+                resolveDefaultChannelId: options.resolveDefaultChannelId,
+                storefrontBaseUrl: options.storefrontBaseUrl,
+            });
+            await registerNewsletterAdminRoutes(scoped, {
+                campaigns,
+                subscribers,
+                subscriberAdmin,
+                tags,
+                customFields,
+                automations,
+                stats,
+                providerAdmin,
+                blocks,
+                resolveAuditContext: options.resolveAuditContext,
+                requireAdmin: options.requireAdmin,
+            });
+            await registerNewsletterSelfRoutes(scoped, {
+                self,
+                requireCustomer: options.requireCustomer,
+                resolveCustomerAccountId: options.resolveCustomerAccountId,
+                loadCustomerEmail: options.loadCustomerEmail,
+            });
+        });
+    };
+}
+//# sourceMappingURL=plugin.js.map

package/dist/backend/plugin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin.js","sourceRoot":"","sources":["../../src/backend/plugin.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,OAAO,EACL,wBAAwB,GAGzB,MAAM,4BAA4B,CAAC;AAKpC,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AACnE,OAAO,EAAE,sBAAsB,EAAE,MAAM,8BAA8B,CAAC;AACtE,OAAO,EAAE,2BAA2B,EAA8B,MAAM,kCAAkC,CAAC;AAC3G,OAAO,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAC;AACzE,OAAO,EAAE,0BAA0B,EAAE,MAAM,iCAAiC,CAAC;AAC7E,OAAO,EAAE,iCAAiC,EAAE,MAAM,yCAAyC,CAAC;AAC5F,OAAO,EAAE,yBAAyB,EAAE,MAAM,gCAAgC,CAAC;AAC3E,OAAO,EAAE,gCAAgC,EAAE,MAAM,wCAAwC,CAAC;AAC1F,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,EAAE,4BAA4B,EAAE,MAAM,oCAAoC,CAAC;AAClF,OAAO,EAAE,2BAA2B,EAAE,MAAM,kCAAkC,CAAC;AAC/E,OAAO,EAAE,yBAAyB,EAAE,MAAM,gCAAgC,CAAC;AAC3E,OAAO,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AACrE,OAAO,EAAE,2BAA2B,EAAE,MAAM,mCAAmC,CAAC;AAChF,OAAO,EAAE,8BAA8B,EAAuB,MAAM,sCAAsC,CAAC;AAE3G,OAAO,EACL,0BAA0B,GAE3B,MAAM,0CAA0C,CAAC;AAClD,OAAO,EACL,uBAAuB,EACvB,eAAe,EACf,yBAAyB,EACzB,wBAAwB,EACxB,gBAAgB,EAChB,0BAA0B,GAC3B,MAAM,wCAAwC,CAAC;AAChD,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AACnE,OAAO,EAAE,kCAAkC,EAAE,MAAM,wBAAwB,CAAC;AAC5E,OAAO,EAAE,6BAA6B,EAAE,MAAM,mBAAmB,CAAC;AAClE,OAAO,EAAE,4BAA4B,EAAE,MAAM,kBAAkB,CAAC;AAgGhE;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAAgC;IAC/D,MAAM,MAAM,GAAG,IAAI,qBAAqB,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IAC9D,MAAM,KAAK,GAAG,IAAI,sBAAsB,CAAC,OAAO,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACnE,MAAM,OAAO,GAAG,IAAI,wBAAwB,EAAE,CAAC;IAC/C,MAAM,QAAQ,GAAG,IAAI,0BAA0B,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACnE,MAAM,SAAS,GAAG,IAAI,0BAA0B,CAC9C,OAAO,CAAC,QAAQ,EAChB,OAAO,CAAC,WAAW,CACpB,CAAC;IAEF,MAAM,KAAK,GAA0B;QACnC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,OAAO,CAAC,aAAa,oCAAoC,kBAAkB,CAAC,CAAC,CAAC,EAAE;QACnG,WAAW,EAAE,CAAC,CAAC,EAAE,EAAE,CACjB,GAAG,OAAO,CAAC,aAAa,wCAAwC,kBAAkB,CAAC,CAAC,CAAC,EAAE;KAC1F,CAAC;IAEF,MAAM,WAAW,GAAG,IAAI,2BAA2B,CAAC;QAClD,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,KAAK;QACL,uBAAuB,EAAE,OAAO,CAAC,uBAAuB;QACxD,KAAK;QACL,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;QAC1C,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrD,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3D,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC/D,CAAC,CAAC;IAEH,MAAM,eAAe,GAAG,IAAI,gCAAgC,CAC1D,OAAO,CAAC,SAAS,EACjB,OAAO,CAAC,QAAQ,CACjB,CAAC;IACF,MAAM,IAAI,GAAG,IAAI,oBAAoB,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC3E,MAAM,YAAY,GAAG,IAAI,4BAA4B,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC3F,MAAM,QAAQ,GAAG,IAAI,yBAAyB,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAClE,MAAM,KAAK,GAAG,IAAI,sBAAsB,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAC5D,MAAM,MAAM,GAAG,IAAI,2BAA2B,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;IACpF,MAAM,aAAa,GAAG,IAAI,8BAA8B,CACtD,OAAO,CAAC,QAAQ,EAChB,OAAO,CAAC,aAAa,EACrB,SAAS,CACV,CAAC;IACF,MAAM,IAAI,GAAG,IAAI,qBAAqB,CAAC,OAAO,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IAEvE,MAAM,QAAQ,GAAG,IAAI,iCAAiC,CAAC;QACrD,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,QAAQ;QACR,OAAO;QACP,KAAK;QACL,KAAK;QACL,eAAe,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,eAAe,EAAE;QAClD,aAAa,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,aAAa,EAAE;QAC9C,GAAG,CAAC,OAAO,CAAC,oBAAoB;YAC9B,CAAC,CAAC,EAAE,oBAAoB,EAAE,OAAO,CAAC,oBAAoB,EAAE;YACxD,CAAC,CAAC,EAAE,CAAC;KACR,CAAC,CAAC;IAEH,kFAAkF;IAClF,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,uBAAuB,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACrF,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,eAAe,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC7E,MAAM,mBAAmB,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,yBAAyB,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAEjG,MAAM,WAAW,GAAG,IAAI,2BAA2B,CAAC;QAClD,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,OAAO;QACP,KAAK;QACL,KAAK;QACL,eAAe,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,eAAe,EAAE;QAClD,aAAa,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,aAAa,EAAE;QAC9C,WAAW,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE;YAC/C,IAAI,mBAAmB,EAAE,CAAC;gBACxB,MAAM,mBAAmB,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACjG,CAAC;QACH,CAAC;QACD,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3D,GAAG,CAAC,OAAO,CAAC,oBAAoB;YAC9B,CAAC,CAAC,EAAE,oBAAoB,EAAE,OAAO,CAAC,oBAAoB,EAAE;YACxD,CAAC,CAAC,EAAE,CAAC;KACR,CAAC,CAAC;IAEH,MAAM,SAAS,GAAG,IAAI,yBAAyB,CAAC;QAC9C,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,QAAQ;QACR,OAAO;QACP,oBAAoB,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,YAAY,EAAE;QACpD,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3D,GAAG,CAAC,OAAO,CAAC,oBAAoB;YAC9B,CAAC,CAAC,EAAE,oBAAoB,EAAE,OAAO,CAAC,oBAAoB,EAAE;YACxD,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,SAAS;YACX,CAAC,CAAC;gBACE,WAAW,EAAE,KAAK,EAAE,UAAkB,EAAE,OAAgB,EAAE,EAAE;oBAC1D,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,GAAG,CAC7B,MAAM,EACN,EAAE,UAAU,EAAE,EACd,OAAO,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAClC,CAAC;oBACF,OAAO,GAAG,CAAC,EAAE,CAAC;gBAChB,CAAC;aACF;YACH,CAAC,CAAC,EAAE,CAAC;KACR,CAAC,CAAC;IAEH,OAAO,KAAK,EAAE,GAAG,EAAE,EAAE;QAEnB,8DAA8D;QAC9D,IAAI,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC,KAAK,IAAI,SAAS,IAAI,SAAS,EAAE,CAAC;YAClE,IAAI,IAAI,GAAG,EAAE,CAAC;YACd,IAAI,CAAC;gBACH,iEAAiE;gBACjE,iCAAiC;gBACjC,IAAI,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,GAAG,CAC/B,wBAAwB,CAAC,qBAAqB,EAC9C,IAAI,EACJ,CAAC,CAAC,MAAM,EAAE,CACX,CAAC;YACJ,CAAC;YAAC,MAAM,CAAC;gBACP,UAAU;YACZ,CAAC;YACD,OAAO,CAAC,cAAc,CACpB,wBAAwB,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;gBACpD,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;gBACnE,KAAK,MAAM,QAAQ,IAAI,SAAS;oBAAE,MAAM,SAAS,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;YAC9E,CAAC,CAAC,EACF,EAAE,MAAM,EAAE,GAAG,CAAC,GAAG,EAAE,CACpB,CAAC;YACF,OAAO,CAAC,cAAc,CACpB,gBAAgB,CACd,OAAO,CAAC,KAAK,EACb,KAAK,EAAE,GAAG,EAAE,EAAE;gBACZ,MAAM,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC/C,CAAC,EACD,IAAI,CACL,EACD,EAAE,MAAM,EAAE,GAAG,CAAC,GAAG,EAAE,CACpB,CAAC;YACF,IAAI,mBAAmB,EAAE,CAAC;gBACxB,OAAO,CAAC,cAAc,CACpB,0BAA0B,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;oBACtD,MAAM,WAAW,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBACpE,CAAC,CAAC,EACF,EAAE,MAAM,EAAE,GAAG,CAAC,GAAG,EAAE,CACpB,CAAC;YACJ,CAAC;QACH,CAAC;QAED,6EAA6E;QAC7E,4EAA4E;QAC5E,yEAAyE;QACzE,yEAAyE;QACzE,iEAAiE;QACjE,MAAM,GAAG,CAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE;YAClC,MAAM,kCAAkC,CAAC,MAAM,EAAE;gBAC/C,WAAW;gBACX,KAAK;gBACL,MAAM;gBACN,QAAQ;gBACR,sBAAsB,EAAE,OAAO,CAAC,sBAAsB;gBACtD,uBAAuB,EAAE,OAAO,CAAC,uBAAuB;gBACxD,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;aAC7C,CAAC,CAAC;YACH,MAAM,6BAA6B,CAAC,MAAM,EAAE;gBAC1C,SAAS;gBACT,WAAW;gBACX,eAAe;gBACf,IAAI;gBACJ,YAAY;gBACZ,WAAW;gBACX,KAAK;gBACL,aAAa;gBACb,MAAM;gBACN,mBAAmB,EAAE,OAAO,CAAC,mBAAmB;gBAChD,YAAY,EAAE,OAAO,CAAC,YAAY;aACnC,CAAC,CAAC;YACH,MAAM,4BAA4B,CAAC,MAAM,EAAE;gBACzC,IAAI;gBACJ,eAAe,EAAE,OAAO,CAAC,eAAe;gBACxC,wBAAwB,EAAE,OAAO,CAAC,wBAAwB;gBAC1D,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;aAC7C,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC,CAAC;AACJ,CAAC"}

package/dist/backend/routes.admin.d.ts

@@ -0,0 +1,27 @@
+import type { FastifyInstance, FastifyReply, FastifyRequest } from 'fastify';
+import type { NewsletterCampaignService } from './services/campaign.service.js';
+import type { NewsletterSubscriberService } from './services/subscriber.service.js';
+import type { NewsletterSubscriberAdminService } from './services/subscriber-admin.service.js';
+import type { NewsletterTagService } from './services/tag.service.js';
+import type { NewsletterCustomFieldService } from './services/custom-field.service.js';
+import type { NewsletterAutomationService } from './services/automation.service.js';
+import type { NewsletterStatsService } from './services/stats.service.js';
+import type { NewsletterProviderAdminService } from './services/provider-admin.service.js';
+import type { AdminAuditContext } from './services/provider-admin.types.js';
+import type { NewsletterEmailBlockService } from './services/email-block.service.js';
+export interface NewsletterAdminDeps {
+    campaigns: NewsletterCampaignService;
+    subscribers: NewsletterSubscriberService;
+    subscriberAdmin: NewsletterSubscriberAdminService;
+    tags: NewsletterTagService;
+    customFields: NewsletterCustomFieldService;
+    automations: NewsletterAutomationService;
+    stats: NewsletterStatsService;
+    providerAdmin: NewsletterProviderAdminService;
+    blocks: NewsletterEmailBlockService;
+    resolveAuditContext: (req: FastifyRequest) => AdminAuditContext;
+    requireAdmin: (permission?: string) => (req: FastifyRequest, reply: FastifyReply) => Promise<void>;
+}
+/** Admin newsletter routes (feature 048). All under /api/v1/admin/newsletter. */
+export declare function registerNewsletterAdminRoutes(app: FastifyInstance, deps: NewsletterAdminDeps): Promise<void>;
+//# sourceMappingURL=routes.admin.d.ts.map

package/dist/backend/routes.admin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.admin.d.ts","sourceRoot":"","sources":["../../src/backend/routes.admin.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAsB7E,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,gCAAgC,CAAC;AAChF,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,kCAAkC,CAAC;AACpF,OAAO,KAAK,EAAE,gCAAgC,EAAE,MAAM,wCAAwC,CAAC;AAC/F,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AACtE,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,oCAAoC,CAAC;AACvF,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,kCAAkC,CAAC;AACpF,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AAC1E,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,sCAAsC,CAAC;AAC3F,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,oCAAoC,CAAC;AAC5E,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,mCAAmC,CAAC;AAErF,MAAM,WAAW,mBAAmB;IAClC,SAAS,EAAE,yBAAyB,CAAC;IACrC,WAAW,EAAE,2BAA2B,CAAC;IACzC,eAAe,EAAE,gCAAgC,CAAC;IAClD,IAAI,EAAE,oBAAoB,CAAC;IAC3B,YAAY,EAAE,4BAA4B,CAAC;IAC3C,WAAW,EAAE,2BAA2B,CAAC;IACzC,KAAK,EAAE,sBAAsB,CAAC;IAC9B,aAAa,EAAE,8BAA8B,CAAC;IAC9C,MAAM,EAAE,2BAA2B,CAAC;IACpC,mBAAmB,EAAE,CAAC,GAAG,EAAE,cAAc,KAAK,iBAAiB,CAAC;IAChE,YAAY,EAAE,CAAC,UAAU,CAAC,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,cAAc,EAAE,KAAK,EAAE,YAAY,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACpG;AAKD,iFAAiF;AACjF,wBAAsB,6BAA6B,CACjD,GAAG,EAAE,eAAe,EACpB,IAAI,EAAE,mBAAmB,GACxB,OAAO,CAAC,IAAI,CAAC,CAoKf"}

package/dist/backend/routes.admin.js

@@ -0,0 +1,118 @@
+import { createCampaignRequestSchema, updateCampaignRequestSchema, setCampaignGroupRequestSchema, sendCampaignRequestSchema, previewCampaignRequestSchema, createSubscriberRequestSchema, subscriberListQuerySchema, unsubscribeSubscriberRequestSchema, createNewsletterTagRequestSchema, updateNewsletterTagRequestSchema, createNewsletterCustomFieldRequestSchema, updateNewsletterCustomFieldRequestSchema, createAutomationRequestSchema, updateAutomationRequestSchema, automationActionRequestSchema, putProviderRequestSchema, createNewsletterEmailBlockRequestSchema, updateNewsletterEmailBlockRequestSchema, } from '@endora-commerce/contracts';
+import { z } from 'zod';
+const READ = 'newsletter:read';
+const WRITE = 'newsletter:write';
+/** Admin newsletter routes (feature 048). All under /api/v1/admin/newsletter. */
+export async function registerNewsletterAdminRoutes(app, deps) {
+    const base = '/api/v1/admin/newsletter';
+    const read = { preHandler: deps.requireAdmin(READ) };
+    const write = { preHandler: deps.requireAdmin(WRITE) };
+    const idOf = (req) => req.params.id;
+    // --- Campaigns ---------------------------------------------------------
+    app.get(`${base}/campaigns`, read, async (_req, reply) => reply.send({ data: await deps.campaigns.list() }));
+    app.get(`${base}/campaigns/:id`, read, async (req, reply) => reply.send({ data: await deps.campaigns.get(idOf(req)) }));
+    app.post(`${base}/campaigns`, write, async (req, reply) => reply.status(201).send({ data: await deps.campaigns.create(createCampaignRequestSchema.parse(req.body)) }));
+    app.put(`${base}/campaigns/:id`, write, async (req, reply) => reply.send({ data: await deps.campaigns.update(idOf(req), updateCampaignRequestSchema.parse(req.body)) }));
+    app.put(`${base}/campaigns/:id/group`, write, async (req, reply) => reply.send({
+        data: await deps.campaigns.setGroup(idOf(req), setCampaignGroupRequestSchema.parse(req.body).subscriberIds),
+    }));
+    app.post(`${base}/campaigns/:id/preview`, read, async (req, reply) => {
+        const body = previewCampaignRequestSchema.parse(req.body ?? {});
+        return reply.send({ data: await deps.campaigns.preview(idOf(req), body.subscriberId) });
+    });
+    app.post(`${base}/campaigns/:id/send`, write, async (req, reply) => {
+        const body = sendCampaignRequestSchema.parse(req.body);
+        const scheduledAt = body.scheduledAt ? new Date(body.scheduledAt) : undefined;
+        return reply.send({ data: await deps.campaigns.send(idOf(req), body.expectedVersion, scheduledAt) });
+    });
+    app.post(`${base}/campaigns/:id/cancel`, write, async (req, reply) => {
+        const body = sendCampaignRequestSchema.pick({ expectedVersion: true }).parse(req.body);
+        return reply.send({ data: await deps.campaigns.cancel(idOf(req), body.expectedVersion) });
+    });
+    app.get(`${base}/campaigns/:id/stats`, read, async (req, reply) => reply.send({ data: await deps.stats.campaignStats(idOf(req)) }));
+    // --- Subscribers -------------------------------------------------------
+    app.get(`${base}/subscribers`, read, async (req, reply) => {
+        const query = subscriberListQuerySchema.parse(req.query);
+        return reply.send({ data: await deps.subscriberAdmin.list(query) });
+    });
+    app.get(`${base}/subscribers/export`, { ...read, config: { streamingResponse: true } }, async (req, reply) => {
+        const query = subscriberListQuerySchema.partial().parse(req.query);
+        const csv = await deps.subscriberAdmin.exportCsv(query);
+        reply.header('content-type', 'text/csv; charset=utf-8');
+        reply.header('content-disposition', 'attachment; filename="newsletter-subscribers.csv"');
+        return reply.send(csv);
+    });
+    app.get(`${base}/subscribers/:id`, read, async (req, reply) => reply.send({ data: await deps.subscriberAdmin.getDetail(idOf(req)) }));
+    app.post(`${base}/subscribers`, write, async (req, reply) => {
+        const body = createSubscriberRequestSchema.parse(req.body);
+        const result = await deps.subscribers.subscribe({
+            email: body.email,
+            salesChannelId: body.salesChannelId ?? null,
+            source: body.source ?? 'api',
+            ...(body.tags ? { tags: body.tags } : {}),
+            ...(body.customFields ? { customFields: body.customFields } : {}),
+        });
+        return reply.status(201).send({ data: result });
+    });
+    app.post(`${base}/subscribers/:id/unsubscribe`, write, async (req, reply) => {
+        const body = unsubscribeSubscriberRequestSchema.parse(req.body);
+        await deps.subscribers.unsubscribe(idOf(req), body.reason);
+        return reply.send({ data: await deps.subscriberAdmin.getDetail(idOf(req)) });
+    });
+    app.post(`${base}/subscribers/:id/deactivate`, write, async (req, reply) => {
+        const body = z.object({ expectedVersion: z.number().int() }).parse(req.body);
+        return reply.send({ data: await deps.subscriberAdmin.deactivate(idOf(req), body.expectedVersion) });
+    });
+    app.delete(`${base}/subscribers/:id`, write, async (req, reply) => {
+        await deps.subscriberAdmin.remove(idOf(req));
+        return reply.status(204).send();
+    });
+    // --- Tags --------------------------------------------------------------
+    app.get(`${base}/tags`, read, async (_req, reply) => reply.send({ data: { items: await deps.tags.list() } }));
+    app.post(`${base}/tags`, write, async (req, reply) => reply.status(201).send({ data: await deps.tags.create(createNewsletterTagRequestSchema.parse(req.body)) }));
+    app.patch(`${base}/tags/:id`, write, async (req, reply) => reply.send({ data: await deps.tags.update(idOf(req), updateNewsletterTagRequestSchema.parse(req.body)) }));
+    app.delete(`${base}/tags/:id`, write, async (req, reply) => {
+        await deps.tags.remove(idOf(req));
+        return reply.status(204).send();
+    });
+    // --- Custom fields -----------------------------------------------------
+    app.get(`${base}/custom-fields`, read, async (_req, reply) => reply.send({ data: { items: await deps.customFields.list() } }));
+    app.post(`${base}/custom-fields`, write, async (req, reply) => reply
+        .status(201)
+        .send({ data: await deps.customFields.create(createNewsletterCustomFieldRequestSchema.parse(req.body)) }));
+    app.patch(`${base}/custom-fields/:id`, write, async (req, reply) => reply.send({
+        data: await deps.customFields.update(idOf(req), updateNewsletterCustomFieldRequestSchema.parse(req.body)),
+    }));
+    app.delete(`${base}/custom-fields/:id`, write, async (req, reply) => {
+        await deps.customFields.remove(idOf(req));
+        return reply.status(204).send();
+    });
+    // --- Automations -------------------------------------------------------
+    app.get(`${base}/automations`, read, async (_req, reply) => reply.send({ data: await deps.automations.list() }));
+    app.get(`${base}/automations/:id`, read, async (req, reply) => reply.send({ data: await deps.automations.get(idOf(req)) }));
+    app.post(`${base}/automations`, write, async (req, reply) => reply.status(201).send({ data: await deps.automations.create(createAutomationRequestSchema.parse(req.body)) }));
+    app.put(`${base}/automations/:id`, write, async (req, reply) => reply.send({ data: await deps.automations.update(idOf(req), updateAutomationRequestSchema.parse(req.body)) }));
+    app.post(`${base}/automations/:id/activate`, write, async (req, reply) => reply.send({
+        data: await deps.automations.activate(idOf(req), automationActionRequestSchema.parse(req.body).expectedVersion),
+    }));
+    app.post(`${base}/automations/:id/pause`, write, async (req, reply) => reply.send({
+        data: await deps.automations.pause(idOf(req), automationActionRequestSchema.parse(req.body).expectedVersion),
+    }));
+    // --- Sending provider --------------------------------------------------
+    app.get(`${base}/provider`, read, async (_req, reply) => reply.send({ data: await deps.providerAdmin.getConfig() }));
+    app.put(`${base}/provider`, write, async (req, reply) => {
+        const body = putProviderRequestSchema.parse(req.body);
+        return reply.send({ data: await deps.providerAdmin.putConfig(body, deps.resolveAuditContext(req)) });
+    });
+    app.post(`${base}/provider/test`, write, async (_req, reply) => reply.send({ data: await deps.providerAdmin.test() }));
+    // --- Reusable email blocks ---------------------------------------------
+    app.get(`${base}/blocks`, read, async (_req, reply) => reply.send({ data: { items: await deps.blocks.list() } }));
+    app.get(`${base}/blocks/:id`, read, async (req, reply) => reply.send({ data: await deps.blocks.get(idOf(req)) }));
+    app.post(`${base}/blocks`, write, async (req, reply) => reply.status(201).send({ data: await deps.blocks.create(createNewsletterEmailBlockRequestSchema.parse(req.body)) }));
+    app.put(`${base}/blocks/:id`, write, async (req, reply) => reply.send({ data: await deps.blocks.update(idOf(req), updateNewsletterEmailBlockRequestSchema.parse(req.body)) }));
+    app.delete(`${base}/blocks/:id`, write, async (req, reply) => {
+        await deps.blocks.remove(idOf(req));
+        return reply.status(204).send();
+    });
+}
+//# sourceMappingURL=routes.admin.js.map