@endora-commerce/mod-pwa 0.100.0

package/dist/backend/services/cross-module-context.d.ts

@@ -0,0 +1,90 @@
+import type { AssetsLibraryPort, OrderReadPort } from '@endora-commerce/contracts';
+import { type SalesChannelResolutionPort } from '@endora-commerce/platform/kernel';
+import type { PushEventTarget } from './push-event-subscriber.js';
+/**
+ * Everything `pwa` needs from outside itself that is not one of its own rows
+ * (`specs/110-instance-repository/` T118c).
+ *
+ * It replaces `PwaBridge`, which was the same set written as closures in both
+ * composition roots — so a composition had to know how an asset id becomes a
+ * URL, how a channel id becomes a code and what an order-status push says, and
+ * the two roots disagreed about two of the three. What is left is
+ * **module-private** and holds three published ports and no closure, so there
+ * is nothing for a root to build and nothing for the two of them to differ on.
+ *
+ * `backend/index.ts` supplies each one as a `lazyPort` proxy, which resolves per
+ * call — nothing here captures a registration, so a switched-off owner refuses
+ * at the call rather than through a gate frozen at composition time.
+ *
+ * The functions below are functions **of the ports** rather than of a
+ * `ModuleContext`, which is what lets the mapping be tested over stubs with no
+ * container composed (`cross-module-context.test.ts`).
+ */
+export interface PwaCrossModulePorts {
+    /**
+     * `assets_library`, for the icon pipeline: the source and rendition uploads,
+     * and the URL the storefront icon route redirects to.
+     */
+    readonly assets: AssetsLibraryPort;
+    /**
+     * The kernel's channel resolver — a platform name, not a module's, so it puts
+     * nothing in this module's manifest `dependencies` (Constitution XII).
+     */
+    readonly channels: SalesChannelResolutionPort;
+    /** `orders`, for the FR-024 order-status auto-trigger. */
+    readonly orders: OrderReadPort;
+}
+/**
+ * How a stored asset id becomes the URL the storefront icon route redirects to.
+ *
+ * **`getAsset`, not `resolveUrl`** (D-223): `assets_library` resolves the public
+ * origin itself and every URL it returns is absolute, so `resolveUrl` is
+ * published on no port and a consumer that wants a URL takes the detail that
+ * already carries one. Both roots used to call `resolveUrl` and one of them used
+ * to wrap it in an `absolutizePublicUrl` the other did not, so a push payload's
+ * icon URL depended on which root composed the platform.
+ */
+export declare function createAssetUrlResolver(assets: Pick<AssetsLibraryPort, 'getAsset'>): (assetId: string) => Promise<string | null>;
+/**
+ * The channel a settings read or write falls back to when the admin surface
+ * names none: the deployment's system default.
+ *
+ * `null` is still in the return type and is still unreachable through this
+ * implementation — D-48 says exactly one row holds the flag on a booted
+ * deployment. The seam admits it because {@link PwaCrossModulePorts} is not the
+ * only thing that could ever answer, and because the option it feeds
+ * (`resolveScopeChannelId`) means "read platform-wide" by it.
+ */
+export declare function createDefaultChannelIdResolver(channels: Pick<SalesChannelResolutionPort, 'getSystemDefault'>): () => Promise<string | null>;
+/**
+ * A channel id to its code, because a settings subset write is keyed by code.
+ *
+ * `getById` is the resolver's `em.findOne(SalesChannel, { id })` with a cache
+ * populate on the way out — the same read the composition roots wrote by hand,
+ * with the same absence of narrowing, so an inactive channel still answers its
+ * code and an unknown id still answers `null` (which the admin reset route
+ * turns into `PWA_CHANNEL_UNKNOWN`).
+ */
+export declare function createChannelCodeResolver(channels: Pick<SalesChannelResolutionPort, 'getById'>): (channelId: string) => Promise<string | null>;
+/**
+ * What an `order.status_changed.v1` event becomes, as a push (FR-024).
+ *
+ * `null` means "no push": an order the platform will not read, and an order
+ * placed by nobody — a guest checkout has no account to notify, and there is no
+ * device to deliver to.
+ *
+ * The sentence is English and stays English: it is composed for a reader whose
+ * language this module cannot resolve here — one event, potentially many
+ * subscribed devices — which is case 2 of
+ * `specs/094-translation-boundary/contracts/translation-boundary.md` § 2 and is
+ * `specs/093-backend-delivered-prose/`'s subject rather than this drain's. It
+ * moved from a composition root unchanged, deliberately: a repair here would be
+ * a repair nobody asked for, in a merge request nobody would look for it in.
+ */
+export declare function createOrderPushTargetResolver(orders: Pick<OrderReadPort, 'findById'>): (payload: {
+    orderId: string;
+    salesChannelId: string;
+    from: string;
+    to: string;
+}) => Promise<PushEventTarget | null>;
+//# sourceMappingURL=cross-module-context.d.ts.map

package/dist/backend/services/cross-module-context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cross-module-context.d.ts","sourceRoot":"","sources":["../../../src/backend/services/cross-module-context.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AACnF,OAAO,EAEL,KAAK,0BAA0B,EAChC,MAAM,kCAAkC,CAAC;AAC1C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAElE;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,WAAW,mBAAmB;IAClC;;;OAGG;IACH,QAAQ,CAAC,MAAM,EAAE,iBAAiB,CAAC;IACnC;;;OAGG;IACH,QAAQ,CAAC,QAAQ,EAAE,0BAA0B,CAAC;IAC9C,0DAA0D;IAC1D,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;CAChC;AAED;;;;;;;;;GASG;AACH,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,IAAI,CAAC,iBAAiB,EAAE,UAAU,CAAC,GAC1C,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAgB7C;AAED;;;;;;;;;GASG;AACH,wBAAgB,8BAA8B,CAC5C,QAAQ,EAAE,IAAI,CAAC,0BAA0B,EAAE,kBAAkB,CAAC,GAC7D,MAAM,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAE9B;AAED;;;;;;;;GAQG;AACH,wBAAgB,yBAAyB,CACvC,QAAQ,EAAE,IAAI,CAAC,0BAA0B,EAAE,SAAS,CAAC,GACpD,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAE/C;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,6BAA6B,CAC3C,MAAM,EAAE,IAAI,CAAC,aAAa,EAAE,UAAU,CAAC,GACtC,CAAC,OAAO,EAAE;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,MAAM,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;CACZ,KAAK,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,CAYpC"}

package/dist/backend/services/cross-module-context.js

@@ -0,0 +1,84 @@
+import { rethrowIfModuleDisabled, } from '@endora-commerce/platform/kernel';
+/**
+ * How a stored asset id becomes the URL the storefront icon route redirects to.
+ *
+ * **`getAsset`, not `resolveUrl`** (D-223): `assets_library` resolves the public
+ * origin itself and every URL it returns is absolute, so `resolveUrl` is
+ * published on no port and a consumer that wants a URL takes the detail that
+ * already carries one. Both roots used to call `resolveUrl` and one of them used
+ * to wrap it in an `absolutizePublicUrl` the other did not, so a push payload's
+ * icon URL depended on which root composed the platform.
+ */
+export function createAssetUrlResolver(assets) {
+    return async (assetId) => {
+        try {
+            return (await assets.getAsset(assetId)).url;
+        }
+        catch (err) {
+            // The narrow tolerance both composition roots already carried, kept
+            // deliberately: `getAsset` throws 404 for a row that is gone, and an icon
+            // rendition pointing at a deleted asset answers 404 on that one size
+            // rather than 500. `rethrowIfModuleDisabled` is what stops the tolerance
+            // from also absorbing the owner's refusal (composition checklist item 7)
+            // — unreachable while `assets_library` declares `nonDeactivatable`, and
+            // the line that keeps this fail-closed on the day that changes.
+            rethrowIfModuleDisabled(err);
+            return null;
+        }
+    };
+}
+/**
+ * The channel a settings read or write falls back to when the admin surface
+ * names none: the deployment's system default.
+ *
+ * `null` is still in the return type and is still unreachable through this
+ * implementation — D-48 says exactly one row holds the flag on a booted
+ * deployment. The seam admits it because {@link PwaCrossModulePorts} is not the
+ * only thing that could ever answer, and because the option it feeds
+ * (`resolveScopeChannelId`) means "read platform-wide" by it.
+ */
+export function createDefaultChannelIdResolver(channels) {
+    return async () => (await channels.getSystemDefault()).id;
+}
+/**
+ * A channel id to its code, because a settings subset write is keyed by code.
+ *
+ * `getById` is the resolver's `em.findOne(SalesChannel, { id })` with a cache
+ * populate on the way out — the same read the composition roots wrote by hand,
+ * with the same absence of narrowing, so an inactive channel still answers its
+ * code and an unknown id still answers `null` (which the admin reset route
+ * turns into `PWA_CHANNEL_UNKNOWN`).
+ */
+export function createChannelCodeResolver(channels) {
+    return async (channelId) => (await channels.getById(channelId))?.code ?? null;
+}
+/**
+ * What an `order.status_changed.v1` event becomes, as a push (FR-024).
+ *
+ * `null` means "no push": an order the platform will not read, and an order
+ * placed by nobody — a guest checkout has no account to notify, and there is no
+ * device to deliver to.
+ *
+ * The sentence is English and stays English: it is composed for a reader whose
+ * language this module cannot resolve here — one event, potentially many
+ * subscribed devices — which is case 2 of
+ * `specs/094-translation-boundary/contracts/translation-boundary.md` § 2 and is
+ * `specs/093-backend-delivered-prose/`'s subject rather than this drain's. It
+ * moved from a composition root unchanged, deliberately: a repair here would be
+ * a repair nobody asked for, in a merge request nobody would look for it in.
+ */
+export function createOrderPushTargetResolver(orders) {
+    return async (payload) => {
+        const order = await orders.findById(payload.orderId);
+        if (!order || !order.placedByCustomerAccountId)
+            return null;
+        return {
+            salesChannelId: payload.salesChannelId,
+            customerAccountId: order.placedByCustomerAccountId,
+            title: 'Order update',
+            body: `Order ${order.businessId} is now ${payload.to.replace(/_/g, ' ')}.`,
+            url: `/account/orders/${order.businessId}`,
+        };
+    };
+}
+//# sourceMappingURL=cross-module-context.js.map

package/dist/backend/services/cross-module-context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cross-module-context.js","sourceRoot":"","sources":["../../../src/backend/services/cross-module-context.ts"],"names":[],"mappings":"AACA,OAAO,EACL,uBAAuB,GAExB,MAAM,kCAAkC,CAAC;AAqC1C;;;;;;;;;GASG;AACH,MAAM,UAAU,sBAAsB,CACpC,MAA2C;IAE3C,OAAO,KAAK,EAAE,OAAO,EAAE,EAAE;QACvB,IAAI,CAAC;YACH,OAAO,CAAC,MAAM,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC;QAC9C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,oEAAoE;YACpE,0EAA0E;YAC1E,qEAAqE;YACrE,yEAAyE;YACzE,yEAAyE;YACzE,wEAAwE;YACxE,gEAAgE;YAChE,uBAAuB,CAAC,GAAG,CAAC,CAAC;YAC7B,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,8BAA8B,CAC5C,QAA8D;IAE9D,OAAO,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,QAAQ,CAAC,gBAAgB,EAAE,CAAC,CAAC,EAAE,CAAC;AAC5D,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,yBAAyB,CACvC,QAAqD;IAErD,OAAO,KAAK,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC,MAAM,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,EAAE,IAAI,IAAI,IAAI,CAAC;AAChF,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,6BAA6B,CAC3C,MAAuC;IAOvC,OAAO,KAAK,EAAE,OAAO,EAAE,EAAE;QACvB,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACrD,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,yBAAyB;YAAE,OAAO,IAAI,CAAC;QAC5D,OAAO;YACL,cAAc,EAAE,OAAO,CAAC,cAAc;YACtC,iBAAiB,EAAE,KAAK,CAAC,yBAAyB;YAClD,KAAK,EAAE,cAAc;YACrB,IAAI,EAAE,SAAS,KAAK,CAAC,UAAU,WAAW,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,GAAG;YAC1E,GAAG,EAAE,mBAAmB,KAAK,CAAC,UAAU,EAAE;SAC3C,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC"}

package/dist/backend/services/providers/web-push-provider.d.ts

@@ -0,0 +1,31 @@
+import { z } from 'zod';
+import { type PushPayload, type PushProvider, type PushSendResult, type PushSubscriptionRef } from '@endora-commerce/contracts';
+export interface WebPushSettingsPort {
+    get<T>(code: string, salesChannelId: string, schema: z.ZodType<T>): Promise<T>;
+}
+/**
+ * Default push provider (FR-019): standard Web-Push signed with VAPID via the
+ * `web-push` library. On Chrome/Edge the endpoints are transported by Google's
+ * free FCM, so this path is "FCM as backend" while keeping the storefront on
+ * standard browser APIs.
+ *
+ * Stateless and concurrency-safe: VAPID keys are resolved per call from the
+ * subscription's channel and passed via `sendNotification`'s `vapidDetails`
+ * option (never `setVapidDetails`, which is process-global).
+ *
+ * Status mapping (research §R1):
+ *   2xx        → ok
+ *   404 / 410  → gone (caller prunes the subscription, FR-022)
+ *   429 / 5xx  → retryable
+ *   other 4xx  → non-retryable failure
+ */
+export declare class WebPushProvider implements PushProvider {
+    private readonly settings;
+    private readonly subject;
+    readonly key = "web_push";
+    constructor(settings: WebPushSettingsPort, subject: string);
+    private resolveKeys;
+    isConfigured(salesChannelId: string): Promise<boolean>;
+    send(sub: PushSubscriptionRef, payload: PushPayload): Promise<PushSendResult>;
+}
+//# sourceMappingURL=web-push-provider.d.ts.map

package/dist/backend/services/providers/web-push-provider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"web-push-provider.d.ts","sourceRoot":"","sources":["../../../../src/backend/services/providers/web-push-provider.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAEL,KAAK,WAAW,EAChB,KAAK,YAAY,EACjB,KAAK,cAAc,EACnB,KAAK,mBAAmB,EACzB,MAAM,4BAA4B,CAAC;AAEpC,MAAM,WAAW,mBAAmB;IAClC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;CAChF;AAID;;;;;;;;;;;;;;;GAeG;AACH,qBAAa,eAAgB,YAAW,YAAY;IAIhD,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,OAAO;IAJ1B,QAAQ,CAAC,GAAG,cAAc;gBAGP,QAAQ,EAAE,mBAAmB,EAC7B,OAAO,EAAE,MAAM;YAGpB,WAAW;IAenB,YAAY,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAItD,IAAI,CAAC,GAAG,EAAE,mBAAmB,EAAE,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,cAAc,CAAC;CA+BpF"}

package/dist/backend/services/providers/web-push-provider.js

@@ -0,0 +1,72 @@
+import webpush from 'web-push';
+import { z } from 'zod';
+import { PWA_SETTING_CODES, } from '@endora-commerce/contracts';
+const StringSchema = z.string();
+/**
+ * Default push provider (FR-019): standard Web-Push signed with VAPID via the
+ * `web-push` library. On Chrome/Edge the endpoints are transported by Google's
+ * free FCM, so this path is "FCM as backend" while keeping the storefront on
+ * standard browser APIs.
+ *
+ * Stateless and concurrency-safe: VAPID keys are resolved per call from the
+ * subscription's channel and passed via `sendNotification`'s `vapidDetails`
+ * option (never `setVapidDetails`, which is process-global).
+ *
+ * Status mapping (research §R1):
+ *   2xx        → ok
+ *   404 / 410  → gone (caller prunes the subscription, FR-022)
+ *   429 / 5xx  → retryable
+ *   other 4xx  → non-retryable failure
+ */
+export class WebPushProvider {
+    settings;
+    subject;
+    key = 'web_push';
+    constructor(settings, subject) {
+        this.settings = settings;
+        this.subject = subject;
+    }
+    async resolveKeys(salesChannelId) {
+        try {
+            const [publicKey, privateKey] = await Promise.all([
+                this.settings.get(PWA_SETTING_CODES.VAPID_PUBLIC_KEY, salesChannelId, StringSchema),
+                this.settings.get(PWA_SETTING_CODES.VAPID_PRIVATE_KEY, salesChannelId, StringSchema),
+            ]);
+            if (!publicKey || !privateKey)
+                return null;
+            return { publicKey, privateKey };
+        }
+        catch {
+            return null;
+        }
+    }
+    async isConfigured(salesChannelId) {
+        return (await this.resolveKeys(salesChannelId)) !== null;
+    }
+    async send(sub, payload) {
+        const keys = await this.resolveKeys(sub.salesChannelId);
+        if (!keys) {
+            return { ok: false, gone: false, error: 'vapid_unconfigured', retryable: false };
+        }
+        const body = JSON.stringify({
+            title: payload.title,
+            body: payload.body,
+            icon: payload.iconUrl,
+            url: payload.url,
+            tag: payload.tag,
+        });
+        try {
+            await webpush.sendNotification({ endpoint: sub.endpoint, keys: { p256dh: sub.keys.p256dh, auth: sub.keys.auth } }, body, { vapidDetails: { subject: this.subject, publicKey: keys.publicKey, privateKey: keys.privateKey } });
+            return { ok: true };
+        }
+        catch (err) {
+            const statusCode = err.statusCode ?? 0;
+            if (statusCode === 404 || statusCode === 410) {
+                return { ok: false, gone: true };
+            }
+            const retryable = statusCode === 429 || (statusCode >= 500 && statusCode < 600) || statusCode === 0;
+            return { ok: false, gone: false, error: `web-push status ${statusCode}`, retryable };
+        }
+    }
+}
+//# sourceMappingURL=web-push-provider.js.map

package/dist/backend/services/providers/web-push-provider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"web-push-provider.js","sourceRoot":"","sources":["../../../../src/backend/services/providers/web-push-provider.ts"],"names":[],"mappings":"AAAA,OAAO,OAAO,MAAM,UAAU,CAAC;AAC/B,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,iBAAiB,GAKlB,MAAM,4BAA4B,CAAC;AAMpC,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC;AAEhC;;;;;;;;;;;;;;;GAeG;AACH,MAAM,OAAO,eAAe;IAIP;IACA;IAJV,GAAG,GAAG,UAAU,CAAC;IAE1B,YACmB,QAA6B,EAC7B,OAAe;QADf,aAAQ,GAAR,QAAQ,CAAqB;QAC7B,YAAO,GAAP,OAAO,CAAQ;IAC/B,CAAC;IAEI,KAAK,CAAC,WAAW,CACvB,cAAsB;QAEtB,IAAI,CAAC;YACH,MAAM,CAAC,SAAS,EAAE,UAAU,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;gBAChD,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,iBAAiB,CAAC,gBAAgB,EAAE,cAAc,EAAE,YAAY,CAAC;gBACnF,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,iBAAiB,CAAC,iBAAiB,EAAE,cAAc,EAAE,YAAY,CAAC;aACrF,CAAC,CAAC;YACH,IAAI,CAAC,SAAS,IAAI,CAAC,UAAU;gBAAE,OAAO,IAAI,CAAC;YAC3C,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC;QACnC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,cAAsB;QACvC,OAAO,CAAC,MAAM,IAAI,CAAC,WAAW,CAAC,cAAc,CAAC,CAAC,KAAK,IAAI,CAAC;IAC3D,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,GAAwB,EAAE,OAAoB;QACvD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QACxD,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,oBAAoB,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;QACnF,CAAC;QAED,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC;YAC1B,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,IAAI,EAAE,OAAO,CAAC,OAAO;YACrB,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,GAAG,EAAE,OAAO,CAAC,GAAG;SACjB,CAAC,CAAC;QAEH,IAAI,CAAC;YACH,MAAM,OAAO,CAAC,gBAAgB,CAC5B,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,EAClF,IAAI,EACJ,EAAE,YAAY,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,EAAE,CACpG,CAAC;YACF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;QACtB,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,MAAM,UAAU,GAAI,GAA+B,CAAC,UAAU,IAAI,CAAC,CAAC;YACpE,IAAI,UAAU,KAAK,GAAG,IAAI,UAAU,KAAK,GAAG,EAAE,CAAC;gBAC7C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;YACnC,CAAC;YACD,MAAM,SAAS,GACb,UAAU,KAAK,GAAG,IAAI,CAAC,UAAU,IAAI,GAAG,IAAI,UAAU,GAAG,GAAG,CAAC,IAAI,UAAU,KAAK,CAAC,CAAC;YACpF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,mBAAmB,UAAU,EAAE,EAAE,SAAS,EAAE,CAAC;QACvF,CAAC;IACH,CAAC;CACF"}

package/dist/backend/services/push-audience-evaluator.d.ts

@@ -0,0 +1,24 @@
+import type { PushAudienceRule } from '@endora-commerce/contracts';
+/**
+ * Pure push-audience rule evaluator (Rule Builder targeting).
+ *
+ * Walks the AST defined in `@endora-commerce/contracts/pwa#PushAudienceRule` and returns
+ * whether a single subscriber (resolved into the context below) is in the
+ * target audience. Mirrors the price-list `evaluateApplicationRule` shape but
+ * keeps a boolean result — push targeting has no priority chain.
+ *
+ * Semantics:
+ *   - `{ kind: 'all' }` and any criterion with an empty value list match
+ *     everyone (an empty criterion adds no constraint).
+ *   - Anonymous subscribers (`customerAccountId === null`) carry null
+ *     organization/customer-group/customer context, so only `salesChannel`
+ *     criteria (and `all`) can match them.
+ */
+export interface PushAudienceContext {
+    salesChannelId: string;
+    organizationId: string | null;
+    customerGroupId: string | null;
+    customerAccountId: string | null;
+}
+export declare function evaluatePushAudienceRule(rule: PushAudienceRule, ctx: PushAudienceContext): boolean;
+//# sourceMappingURL=push-audience-evaluator.d.ts.map

package/dist/backend/services/push-audience-evaluator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"push-audience-evaluator.d.ts","sourceRoot":"","sources":["../../../src/backend/services/push-audience-evaluator.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAA6B,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AAE9F;;;;;;;;;;;;;;GAcG;AACH,MAAM,WAAW,mBAAmB;IAClC,cAAc,EAAE,MAAM,CAAC;IACvB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;CAClC;AAED,wBAAgB,wBAAwB,CACtC,IAAI,EAAE,gBAAgB,EACtB,GAAG,EAAE,mBAAmB,GACvB,OAAO,CAcT"}

package/dist/backend/services/push-audience-evaluator.js

@@ -0,0 +1,29 @@
+export function evaluatePushAudienceRule(rule, ctx) {
+    if (rule.kind === 'all')
+        return true;
+    if (rule.kind === 'criterion') {
+        if (rule.values.length === 0)
+            return true;
+        return matchesCriterion(rule.type, rule.values, ctx);
+    }
+    // group node
+    if (rule.children.length === 0)
+        return true; // defensive — schema disallows
+    if (rule.op === 'AND') {
+        return rule.children.every((c) => evaluatePushAudienceRule(c, ctx));
+    }
+    return rule.children.some((c) => evaluatePushAudienceRule(c, ctx));
+}
+function matchesCriterion(type, values, ctx) {
+    switch (type) {
+        case 'salesChannel':
+            return values.includes(ctx.salesChannelId);
+        case 'organization':
+            return ctx.organizationId !== null && values.includes(ctx.organizationId);
+        case 'customerGroup':
+            return ctx.customerGroupId !== null && values.includes(ctx.customerGroupId);
+        case 'customer':
+            return ctx.customerAccountId !== null && values.includes(ctx.customerAccountId);
+    }
+}
+//# sourceMappingURL=push-audience-evaluator.js.map

package/dist/backend/services/push-audience-evaluator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"push-audience-evaluator.js","sourceRoot":"","sources":["../../../src/backend/services/push-audience-evaluator.ts"],"names":[],"mappings":"AAwBA,MAAM,UAAU,wBAAwB,CACtC,IAAsB,EACtB,GAAwB;IAExB,IAAI,IAAI,CAAC,IAAI,KAAK,KAAK;QAAE,OAAO,IAAI,CAAC;IAErC,IAAI,IAAI,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QAC9B,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAC1C,OAAO,gBAAgB,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACvD,CAAC;IAED,aAAa;IACb,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC,CAAC,+BAA+B;IAC5E,IAAI,IAAI,CAAC,EAAE,KAAK,KAAK,EAAE,CAAC;QACtB,OAAO,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,wBAAwB,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;IACtE,CAAC;IACD,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,wBAAwB,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;AACrE,CAAC;AAED,SAAS,gBAAgB,CACvB,IAA+B,EAC/B,MAAyB,EACzB,GAAwB;IAExB,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,cAAc;YACjB,OAAO,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QAC7C,KAAK,cAAc;YACjB,OAAO,GAAG,CAAC,cAAc,KAAK,IAAI,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QAC5E,KAAK,eAAe;YAClB,OAAO,GAAG,CAAC,eAAe,KAAK,IAAI,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;QAC9E,KAAK,UAAU;YACb,OAAO,GAAG,CAAC,iBAAiB,KAAK,IAAI,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;IACpF,CAAC;AACH,CAAC"}

package/dist/backend/services/push-delivery-queue.d.ts

@@ -0,0 +1,14 @@
+import { Queue, Worker, type Processor, type QueueOptions, type WorkerOptions } from 'bullmq';
+import type { Redis } from 'ioredis';
+/**
+ * BullMQ queue for push delivery fan-out (Principle X). One job per
+ * `push_message_deliveries` row; the unique (message_id, subscription_id)
+ * delivery row makes redelivery idempotent.
+ */
+export interface PushDeliveryJobData {
+    deliveryId: string;
+}
+export declare const PUSH_DELIVERY_QUEUE_NAME = "pwa.push.deliver";
+export declare function createPushDeliveryQueue(redis: Redis, overrides?: Partial<QueueOptions>): Queue<PushDeliveryJobData>;
+export declare function createPushDeliveryWorker(redis: Redis, processor: Processor<PushDeliveryJobData>, overrides?: Partial<WorkerOptions>): Worker<PushDeliveryJobData>;
+//# sourceMappingURL=push-delivery-queue.d.ts.map

package/dist/backend/services/push-delivery-queue.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"push-delivery-queue.d.ts","sourceRoot":"","sources":["../../../src/backend/services/push-delivery-queue.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,SAAS,EAAE,KAAK,YAAY,EAAE,KAAK,aAAa,EAAE,MAAM,QAAQ,CAAC;AAE9F,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,SAAS,CAAC;AAErC;;;;GAIG;AACH,MAAM,WAAW,mBAAmB;IAClC,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,eAAO,MAAM,wBAAwB,qBAAqB,CAAC;AAK3D,wBAAgB,uBAAuB,CACrC,KAAK,EAAE,KAAK,EACZ,SAAS,CAAC,EAAE,OAAO,CAAC,YAAY,CAAC,GAChC,KAAK,CAAC,mBAAmB,CAAC,CAY5B;AAED,wBAAgB,wBAAwB,CACtC,KAAK,EAAE,KAAK,EACZ,SAAS,EAAE,SAAS,CAAC,mBAAmB,CAAC,EACzC,SAAS,CAAC,EAAE,OAAO,CAAC,aAAa,CAAC,GACjC,MAAM,CAAC,mBAAmB,CAAC,CAc7B"}

package/dist/backend/services/push-delivery-queue.js

@@ -0,0 +1,30 @@
+import { Queue, Worker } from 'bullmq';
+import { enterSystemScope } from '@endora-commerce/platform/kernel';
+export const PUSH_DELIVERY_QUEUE_NAME = 'pwa.push.deliver';
+const DEFAULT_ATTEMPTS = 5;
+const DEFAULT_BACKOFF = { type: 'exponential', delay: 2_000 };
+export function createPushDeliveryQueue(redis, overrides) {
+    const options = {
+        connection: redis,
+        defaultJobOptions: {
+            attempts: DEFAULT_ATTEMPTS,
+            backoff: DEFAULT_BACKOFF,
+            removeOnComplete: { count: 1_000 },
+            removeOnFail: { count: 5_000 },
+        },
+        ...overrides,
+    };
+    return new Queue(PUSH_DELIVERY_QUEUE_NAME, options);
+}
+export function createPushDeliveryWorker(redis, processor, overrides) {
+    // Feature 072 (T033) — the scope moves here from inside the processor, so it
+    // sits at the entry point like every other queue in the tree; a processor
+    // called directly (a test, a future in-process caller) is no longer the only
+    // thing that decides whether a context exists.
+    return new Worker(PUSH_DELIVERY_QUEUE_NAME, (job) => enterSystemScope('pwa: push delivery', () => processor(job)), {
+        connection: redis,
+        concurrency: 8,
+        ...overrides,
+    });
+}
+//# sourceMappingURL=push-delivery-queue.js.map

package/dist/backend/services/push-delivery-queue.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"push-delivery-queue.js","sourceRoot":"","sources":["../../../src/backend/services/push-delivery-queue.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,EAAyD,MAAM,QAAQ,CAAC;AAC9F,OAAO,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AAYpE,MAAM,CAAC,MAAM,wBAAwB,GAAG,kBAAkB,CAAC;AAE3D,MAAM,gBAAgB,GAAG,CAAC,CAAC;AAC3B,MAAM,eAAe,GAAG,EAAE,IAAI,EAAE,aAAsB,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;AAEvE,MAAM,UAAU,uBAAuB,CACrC,KAAY,EACZ,SAAiC;IAEjC,MAAM,OAAO,GAAiB;QAC5B,UAAU,EAAE,KAAK;QACjB,iBAAiB,EAAE;YACjB,QAAQ,EAAE,gBAAgB;YAC1B,OAAO,EAAE,eAAe;YACxB,gBAAgB,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE;YAClC,YAAY,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE;SAC/B;QACD,GAAG,SAAS;KACb,CAAC;IACF,OAAO,IAAI,KAAK,CAAsB,wBAAwB,EAAE,OAAO,CAAC,CAAC;AAC3E,CAAC;AAED,MAAM,UAAU,wBAAwB,CACtC,KAAY,EACZ,SAAyC,EACzC,SAAkC;IAElC,6EAA6E;IAC7E,0EAA0E;IAC1E,6EAA6E;IAC7E,+CAA+C;IAC/C,OAAO,IAAI,MAAM,CACf,wBAAwB,EACxB,CAAC,GAAG,EAAE,EAAE,CAAC,gBAAgB,CAAC,oBAAoB,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,EACrE;QACE,UAAU,EAAE,KAAK;QACjB,WAAW,EAAE,CAAC;QACd,GAAG,SAAS;KACb,CACF,CAAC;AACJ,CAAC"}

package/dist/backend/services/push-event-subscriber.d.ts

@@ -0,0 +1,86 @@
+import { type PlatformLogger } from '@endora-commerce/platform/kernel';
+import type { PushMessageService } from './push-message-service.js';
+/**
+ * Where a skipped or failed auto-trigger push is written down.
+ *
+ * The structured-logger surface the kernel already defines, for the reason it
+ * exists: these two handlers run outside any request, so `request.log` does not
+ * exist and the line has to carry its own context. The alias is kept because it
+ * names this module's role for the field; the shape is the platform's.
+ */
+export type PushEventLogger = PlatformLogger;
+/**
+ * Target resolved for an auto-triggered push. Returning null (or no customer)
+ * means "no push" — anonymous orders / unsubscribed customers are skipped.
+ */
+export interface PushEventTarget {
+    salesChannelId: string;
+    customerAccountId: string;
+    title: string;
+    body: string;
+    url?: string;
+}
+export interface PushEventSubscriberDeps {
+    messageService: PushMessageService;
+    /** Resolve an order-status event into a push target (channel + customer + copy). */
+    resolveOrderTarget?: (payload: {
+        orderId: string;
+        salesChannelId: string;
+        from: string;
+        to: string;
+    }) => Promise<PushEventTarget | null>;
+    /** Resolve a quote-request event into a push target. */
+    resolveQuoteTarget?: (payload: {
+        quoteRequestId: string;
+        sourceEventId: string;
+    }) => Promise<PushEventTarget | null>;
+    /** Gate: is push enabled for this channel? */
+    isPushEnabled: (salesChannelId: string) => Promise<boolean>;
+    /**
+     * Read per line rather than captured, because the logger these handlers
+     * should be writing to does not exist yet when they are built: composition
+     * runs before `buildServer`, so `ctx.log` is whatever the root could offer
+     * that early, and the application's own logger only arrives when the module's
+     * routes are registered. `plugin.ts` moves the holder along; the handlers ask
+     * for it at the moment they have something to say.
+     */
+    log: () => PushEventLogger;
+}
+/**
+ * The two auto-trigger handlers (FR-024). One push message per event,
+ * idempotent on the event id; producer only — nothing is sent inline
+ * (Principle X), and every handler absorbs its own failure so a push problem
+ * never breaks the business transaction that announced itself.
+ *
+ * The subscriptions live in this module's `backend.ts` and go through
+ * `ctx.subscribe` (issue #107). They were two bare `eventBus.on` calls here, so
+ * a switched-off `pwa` still wrote a `push_messages` row and still delivered a
+ * notification to a customer's device — the most visible of the writes that
+ * survived their module.
+ *
+ * ## Why the `catch` stays, and what it is no longer allowed to hide
+ *
+ * `PushMessageService` reaches `customer_accounts` and `organizations` through
+ * gated ports (feature 075, Phase C), so a rule-targeted send can raise
+ * `ModuleDisabledError` here. `rethrowIfModuleDisabled` — the usual remedy —
+ * is the wrong one at this seam: an EventBus subscriber has no caller to answer.
+ * `EventBus.dispatch` isolates each handler in its own `try` and turns a throw
+ * into one `console.warn` line naming neither the module nor the trigger, so
+ * re-throwing would hand the presence answer to a place that discards it, and a
+ * probe before the work would make `pwa` name the two owners the port exists to
+ * hide.
+ *
+ * So the presence answer is **decided here, by name** — the third of the four
+ * shapes `check-port-catches` accepts — and it is decided into a different
+ * sentence from a failure. The outcome is the same for both (no push, the
+ * announcing transaction untouched, per FR-024); the record is not, because an
+ * operator's own switch doing what it says and a broken enqueue are not one
+ * event. That is the rule under Principle XVII item 3: where nothing can catch
+ * the throw, a genuine failure and a switched-off module must not share one
+ * silent no-op.
+ */
+export declare function createPushEventHandlers(deps: PushEventSubscriberDeps): {
+    onOrderStatusChanged: (payload: unknown) => Promise<void>;
+    onQuoteRequestUpdated: (payload: unknown) => Promise<void>;
+};
+//# sourceMappingURL=push-event-subscriber.d.ts.map

package/dist/backend/services/push-event-subscriber.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"push-event-subscriber.d.ts","sourceRoot":"","sources":["../../../src/backend/services/push-event-subscriber.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,cAAc,EACpB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAEpE;;;;;;;GAOG;AACH,MAAM,MAAM,eAAe,GAAG,cAAc,CAAC;AAE7C;;;GAGG;AACH,MAAM,WAAW,eAAe;IAC9B,cAAc,EAAE,MAAM,CAAC;IACvB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,uBAAuB;IACtC,cAAc,EAAE,kBAAkB,CAAC;IACnC,oFAAoF;IACpF,kBAAkB,CAAC,EAAE,CAAC,OAAO,EAAE;QAC7B,OAAO,EAAE,MAAM,CAAC;QAChB,cAAc,EAAE,MAAM,CAAC;QACvB,IAAI,EAAE,MAAM,CAAC;QACb,EAAE,EAAE,MAAM,CAAC;KACZ,KAAK,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,CAAC;IACtC,wDAAwD;IACxD,kBAAkB,CAAC,EAAE,CAAC,OAAO,EAAE;QAC7B,cAAc,EAAE,MAAM,CAAC;QACvB,aAAa,EAAE,MAAM,CAAC;KACvB,KAAK,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,CAAC;IACtC,8CAA8C;IAC9C,aAAa,EAAE,CAAC,cAAc,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAC5D;;;;;;;OAOG;IACH,GAAG,EAAE,MAAM,eAAe,CAAC;CAC5B;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,uBAAuB,GAAG;IACtE,oBAAoB,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1D,qBAAqB,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CAC5D,CAyFA"}

package/dist/backend/services/push-event-subscriber.js

@@ -0,0 +1,109 @@
+import { ModuleDisabledError, } from '@endora-commerce/platform/kernel';
+/**
+ * The two auto-trigger handlers (FR-024). One push message per event,
+ * idempotent on the event id; producer only — nothing is sent inline
+ * (Principle X), and every handler absorbs its own failure so a push problem
+ * never breaks the business transaction that announced itself.
+ *
+ * The subscriptions live in this module's `backend.ts` and go through
+ * `ctx.subscribe` (issue #107). They were two bare `eventBus.on` calls here, so
+ * a switched-off `pwa` still wrote a `push_messages` row and still delivered a
+ * notification to a customer's device — the most visible of the writes that
+ * survived their module.
+ *
+ * ## Why the `catch` stays, and what it is no longer allowed to hide
+ *
+ * `PushMessageService` reaches `customer_accounts` and `organizations` through
+ * gated ports (feature 075, Phase C), so a rule-targeted send can raise
+ * `ModuleDisabledError` here. `rethrowIfModuleDisabled` — the usual remedy —
+ * is the wrong one at this seam: an EventBus subscriber has no caller to answer.
+ * `EventBus.dispatch` isolates each handler in its own `try` and turns a throw
+ * into one `console.warn` line naming neither the module nor the trigger, so
+ * re-throwing would hand the presence answer to a place that discards it, and a
+ * probe before the work would make `pwa` name the two owners the port exists to
+ * hide.
+ *
+ * So the presence answer is **decided here, by name** — the third of the four
+ * shapes `check-port-catches` accepts — and it is decided into a different
+ * sentence from a failure. The outcome is the same for both (no push, the
+ * announcing transaction untouched, per FR-024); the record is not, because an
+ * operator's own switch doing what it says and a broken enqueue are not one
+ * event. That is the rule under Principle XVII item 3: where nothing can catch
+ * the throw, a genuine failure and a switched-off module must not share one
+ * silent no-op.
+ */
+export function createPushEventHandlers(deps) {
+    const { messageService } = deps;
+    return {
+        // order.status_changed.v1 (orders, feature 038)
+        async onOrderStatusChanged(raw) {
+            const payload = raw;
+            try {
+                if (!deps.resolveOrderTarget)
+                    return;
+                if (!(await deps.isPushEnabled(payload.salesChannelId)))
+                    return;
+                const target = await deps.resolveOrderTarget(payload);
+                if (!target)
+                    return;
+                await messageService.createAndEnqueue({
+                    salesChannelId: target.salesChannelId,
+                    title: target.title,
+                    body: target.body,
+                    ...(target.url ? { url: target.url } : {}),
+                    audience: { kind: 'customers', customerAccountIds: [target.customerAccountId] },
+                    trigger: 'order_status',
+                    sourceEventId: payload.eventId,
+                });
+            }
+            catch (err) {
+                // Decided at the site, not delegated: the identifier below is the whole
+                // of what tells an operator's switch from an incident, and a helper
+                // holding it would let a later edit lose the distinction silently.
+                if (err instanceof ModuleDisabledError) {
+                    deps.log().warn({ module: err.moduleId, trigger: 'order_status', eventId: payload.eventId }, 'pwa.push_skipped_module_disabled');
+                    return;
+                }
+                deps
+                    .log()
+                    .error({ err, trigger: 'order_status', eventId: payload.eventId }, 'pwa.push_enqueue_failed');
+            }
+        },
+        // quote-request update events (quote_requests, feature 008)
+        async onQuoteRequestUpdated(raw) {
+            const payload = raw;
+            try {
+                if (!deps.resolveQuoteTarget)
+                    return;
+                const target = await deps.resolveQuoteTarget({
+                    quoteRequestId: payload.quoteRequestId,
+                    sourceEventId: payload.eventId,
+                });
+                if (!target)
+                    return;
+                if (!(await deps.isPushEnabled(target.salesChannelId)))
+                    return;
+                await messageService.createAndEnqueue({
+                    salesChannelId: target.salesChannelId,
+                    title: target.title,
+                    body: target.body,
+                    ...(target.url ? { url: target.url } : {}),
+                    audience: { kind: 'customers', customerAccountIds: [target.customerAccountId] },
+                    trigger: 'quote_request',
+                    sourceEventId: payload.eventId,
+                });
+            }
+            catch (err) {
+                // See the order-status twin above — same decision, same two sentences.
+                if (err instanceof ModuleDisabledError) {
+                    deps.log().warn({ module: err.moduleId, trigger: 'quote_request', eventId: payload.eventId }, 'pwa.push_skipped_module_disabled');
+                    return;
+                }
+                deps
+                    .log()
+                    .error({ err, trigger: 'quote_request', eventId: payload.eventId }, 'pwa.push_enqueue_failed');
+            }
+        },
+    };
+}
+//# sourceMappingURL=push-event-subscriber.js.map

package/dist/backend/services/push-event-subscriber.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"push-event-subscriber.js","sourceRoot":"","sources":["../../../src/backend/services/push-event-subscriber.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,mBAAmB,GAEpB,MAAM,kCAAkC,CAAC;AAoD1C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,MAAM,UAAU,uBAAuB,CAAC,IAA6B;IAInE,MAAM,EAAE,cAAc,EAAE,GAAG,IAAI,CAAC;IAEhC,OAAO;QACL,gDAAgD;QAChD,KAAK,CAAC,oBAAoB,CAAC,GAAY;YACrC,MAAM,OAAO,GAAG,GAMf,CAAC;YACF,IAAI,CAAC;gBACH,IAAI,CAAC,IAAI,CAAC,kBAAkB;oBAAE,OAAO;gBACrC,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;oBAAE,OAAO;gBAChE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC;gBACtD,IAAI,CAAC,MAAM;oBAAE,OAAO;gBACpB,MAAM,cAAc,CAAC,gBAAgB,CAAC;oBACpC,cAAc,EAAE,MAAM,CAAC,cAAc;oBACrC,KAAK,EAAE,MAAM,CAAC,KAAK;oBACnB,IAAI,EAAE,MAAM,CAAC,IAAI;oBACjB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC1C,QAAQ,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,kBAAkB,EAAE,CAAC,MAAM,CAAC,iBAAiB,CAAC,EAAE;oBAC/E,OAAO,EAAE,cAAc;oBACvB,aAAa,EAAE,OAAO,CAAC,OAAO;iBAC/B,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,wEAAwE;gBACxE,oEAAoE;gBACpE,mEAAmE;gBACnE,IAAI,GAAG,YAAY,mBAAmB,EAAE,CAAC;oBACvC,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CACb,EAAE,MAAM,EAAE,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE,cAAc,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,EAC3E,kCAAkC,CACnC,CAAC;oBACF,OAAO;gBACT,CAAC;gBACD,IAAI;qBACD,GAAG,EAAE;qBACL,KAAK,CACJ,EAAE,GAAG,EAAE,OAAO,EAAE,cAAc,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,EAC1D,yBAAyB,CAC1B,CAAC;YACN,CAAC;QACH,CAAC;QAED,4DAA4D;QAC5D,KAAK,CAAC,qBAAqB,CAAC,GAAY;YACtC,MAAM,OAAO,GAAG,GAIf,CAAC;YACF,IAAI,CAAC;gBACH,IAAI,CAAC,IAAI,CAAC,kBAAkB;oBAAE,OAAO;gBACrC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC;oBAC3C,cAAc,EAAE,OAAO,CAAC,cAAc;oBACtC,aAAa,EAAE,OAAO,CAAC,OAAO;iBAC/B,CAAC,CAAC;gBACH,IAAI,CAAC,MAAM;oBAAE,OAAO;gBACpB,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;oBAAE,OAAO;gBAC/D,MAAM,cAAc,CAAC,gBAAgB,CAAC;oBACpC,cAAc,EAAE,MAAM,CAAC,cAAc;oBACrC,KAAK,EAAE,MAAM,CAAC,KAAK;oBACnB,IAAI,EAAE,MAAM,CAAC,IAAI;oBACjB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC1C,QAAQ,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,kBAAkB,EAAE,CAAC,MAAM,CAAC,iBAAiB,CAAC,EAAE;oBAC/E,OAAO,EAAE,eAAe;oBACxB,aAAa,EAAE,OAAO,CAAC,OAAO;iBAC/B,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,uEAAuE;gBACvE,IAAI,GAAG,YAAY,mBAAmB,EAAE,CAAC;oBACvC,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CACb,EAAE,MAAM,EAAE,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE,eAAe,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,EAC5E,kCAAkC,CACnC,CAAC;oBACF,OAAO;gBACT,CAAC;gBACD,IAAI;qBACD,GAAG,EAAE;qBACL,KAAK,CACJ,EAAE,GAAG,EAAE,OAAO,EAAE,eAAe,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,EAC3D,yBAAyB,CAC1B,CAAC;YACN,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC"}