@endora-commerce/mod-pwa 0.100.0

package/dist/backend/services/push-message-service.d.ts

@@ -0,0 +1,58 @@
+import type { EntityManager } from '@mikro-orm/postgresql';
+import type { Queue } from 'bullmq';
+import type { CustomerAccountReadPort, OrganizationDetailsPort, PushAudience, PushTrigger } from '@endora-commerce/contracts';
+import type { PushDeliveryJobData } from './push-delivery-queue.js';
+export interface CreateMessageInput {
+    salesChannelId: string;
+    title: string;
+    body: string;
+    url?: string | null;
+    iconUrl?: string | null;
+    audience: PushAudience;
+    trigger: PushTrigger;
+    sourceEventId?: string | null;
+    createdByAdminUserId?: string | null;
+}
+export interface CreateMessageResult {
+    messageId: string;
+    queuedDeliveries: number;
+}
+/**
+ * Push message lifecycle (US4). Creates a message, expands the audience into
+ * delivery rows, and enqueues one BullMQ job per delivery (producer-only — it
+ * never sends inline, Principle X). Event-triggered messages are idempotent on
+ * `(trigger, source_event_id)` via the partial unique index.
+ */
+export declare class PushMessageService {
+    private readonly emFactory;
+    private readonly queue;
+    /**
+     * The two rows rule targeting needs, asked of the modules that own them
+     * (feature 075, Phase C). Both are gated: with `customer_accounts` or
+     * `organizations` switched off the send refuses rather than pushing to an
+     * audience it could not resolve.
+     */
+    private readonly customerAccounts;
+    private readonly organizations;
+    constructor(emFactory: () => EntityManager, queue: Queue<PushDeliveryJobData>, 
+    /**
+     * The two rows rule targeting needs, asked of the modules that own them
+     * (feature 075, Phase C). Both are gated: with `customer_accounts` or
+     * `organizations` switched off the send refuses rather than pushing to an
+     * audience it could not resolve.
+     */
+    customerAccounts: CustomerAccountReadPort, organizations: OrganizationDetailsPort);
+    createAndEnqueue(input: CreateMessageInput): Promise<CreateMessageResult>;
+    private resolveAudience;
+    /**
+     * Batch-resolve `{ organizationId, effective customerGroupId }` for each
+     * linked customer account. The effective group follows the same chain the
+     * pricing engine uses: `account.customerGroupId ?? organization.customerGroupId`.
+     *
+     * Both rows arrive over their owners' published ports, so a switched-off
+     * `customer_accounts` or `organizations` refuses here rather than reporting
+     * an audience of nobody — which reads as a legitimate answer and is not one.
+     */
+    private loadCustomerContexts;
+}
+//# sourceMappingURL=push-message-service.d.ts.map

package/dist/backend/services/push-message-service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"push-message-service.d.ts","sourceRoot":"","sources":["../../../src/backend/services/push-message-service.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,QAAQ,CAAC;AACpC,OAAO,KAAK,EACV,uBAAuB,EACvB,uBAAuB,EACvB,YAAY,EACZ,WAAW,EACZ,MAAM,4BAA4B,CAAC;AAKpC,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAQpE,MAAM,WAAW,kBAAkB;IACjC,cAAc,EAAE,MAAM,CAAC;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,QAAQ,EAAE,YAAY,CAAC;IACvB,OAAO,EAAE,WAAW,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,oBAAoB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACtC;AAED,MAAM,WAAW,mBAAmB;IAClC,SAAS,EAAE,MAAM,CAAC;IAClB,gBAAgB,EAAE,MAAM,CAAC;CAC1B;AAED;;;;;GAKG;AACH,qBAAa,kBAAkB;IAE3B,OAAO,CAAC,QAAQ,CAAC,SAAS;IAC1B,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB;;;;;OAKG;IACH,OAAO,CAAC,QAAQ,CAAC,gBAAgB;IACjC,OAAO,CAAC,QAAQ,CAAC,aAAa;gBATb,SAAS,EAAE,MAAM,aAAa,EAC9B,KAAK,EAAE,KAAK,CAAC,mBAAmB,CAAC;IAClD;;;;;OAKG;IACc,gBAAgB,EAAE,uBAAuB,EACzC,aAAa,EAAE,uBAAuB;IAGnD,gBAAgB,CAAC,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,mBAAmB,CAAC;YA0DjE,eAAe;IAsC7B;;;;;;;;OAQG;YACW,oBAAoB;CA6BnC"}

package/dist/backend/services/push-message-service.js

@@ -0,0 +1,145 @@
+import { PushMessage } from '../entities/push-message.entity.js';
+import { PushMessageDelivery } from '../entities/push-message-delivery.entity.js';
+import { PushSubscription } from '../entities/push-subscription.entity.js';
+import { evaluatePushAudienceRule } from './push-audience-evaluator.js';
+/**
+ * Push message lifecycle (US4). Creates a message, expands the audience into
+ * delivery rows, and enqueues one BullMQ job per delivery (producer-only — it
+ * never sends inline, Principle X). Event-triggered messages are idempotent on
+ * `(trigger, source_event_id)` via the partial unique index.
+ */
+export class PushMessageService {
+    emFactory;
+    queue;
+    customerAccounts;
+    organizations;
+    constructor(emFactory, queue, 
+    /**
+     * The two rows rule targeting needs, asked of the modules that own them
+     * (feature 075, Phase C). Both are gated: with `customer_accounts` or
+     * `organizations` switched off the send refuses rather than pushing to an
+     * audience it could not resolve.
+     */
+    customerAccounts, organizations) {
+        this.emFactory = emFactory;
+        this.queue = queue;
+        this.customerAccounts = customerAccounts;
+        this.organizations = organizations;
+    }
+    async createAndEnqueue(input) {
+        // command-coverage-ignore: push-notification infrastructure — device
+        // subscription / message delivery / icon asset, not audited domain state.
+        const em = this.emFactory();
+        // Idempotency guard for event-triggered sends: a duplicate event is a no-op.
+        if (input.sourceEventId) {
+            const dup = await em.findOne(PushMessage, {
+                trigger: input.trigger,
+                sourceEventId: input.sourceEventId,
+            });
+            if (dup)
+                return { messageId: dup.id, queuedDeliveries: 0 };
+        }
+        // Expanded **before** the message row is written. Rule targeting now asks
+        // two other modules for the rows it resolves a subscriber's context from,
+        // so it can refuse (503 `MODULE_DISABLED`); persisting first would leave a
+        // `queued` message behind that nothing will ever deliver.
+        const subscriptions = await this.resolveAudience(em, input.salesChannelId, input.audience);
+        const message = em.create(PushMessage, {
+            salesChannelId: input.salesChannelId,
+            title: input.title,
+            body: input.body,
+            url: input.url ?? null,
+            iconUrl: input.iconUrl ?? null,
+            audience: input.audience,
+            trigger: input.trigger,
+            sourceEventId: input.sourceEventId ?? null,
+            status: 'queued',
+            sentCount: 0,
+            failedCount: 0,
+            createdByAdminUserId: input.createdByAdminUserId ?? null,
+        });
+        await em.persistAndFlush(message);
+        const deliveries = subscriptions.map((sub) => em.create(PushMessageDelivery, {
+            messageId: message.id,
+            subscriptionId: sub.id,
+            status: 'pending',
+            attempts: 0,
+        }));
+        if (deliveries.length > 0) {
+            await em.persistAndFlush(deliveries);
+            await this.queue.addBulk(deliveries.map((d) => ({
+                name: 'deliver',
+                data: { deliveryId: d.id },
+                opts: { jobId: d.id },
+            })));
+        }
+        return { messageId: message.id, queuedDeliveries: deliveries.length };
+    }
+    async resolveAudience(em, salesChannelId, audience) {
+        if (audience.kind === 'all') {
+            return em.find(PushSubscription, { salesChannelId, status: 'active' });
+        }
+        if (audience.kind === 'customers') {
+            return em.find(PushSubscription, {
+                salesChannelId,
+                status: 'active',
+                customerAccountId: { $in: audience.customerAccountIds },
+            });
+        }
+        // kind === 'rule' — narrow active channel subscribers by their resolved
+        // customer context. Anonymous subscribers only match salesChannel/all.
+        const subscriptions = await em.find(PushSubscription, { salesChannelId, status: 'active' });
+        const accountIds = [
+            ...new Set(subscriptions
+                .map((s) => s.customerAccountId)
+                .filter((id) => typeof id === 'string')),
+        ];
+        const contexts = await this.loadCustomerContexts(accountIds);
+        return subscriptions.filter((sub) => {
+            const ctx = sub.customerAccountId ? contexts.get(sub.customerAccountId) : undefined;
+            return evaluatePushAudienceRule(audience.rule, {
+                salesChannelId,
+                customerAccountId: sub.customerAccountId ?? null,
+                organizationId: ctx?.organizationId ?? null,
+                customerGroupId: ctx?.customerGroupId ?? null,
+            });
+        });
+    }
+    /**
+     * Batch-resolve `{ organizationId, effective customerGroupId }` for each
+     * linked customer account. The effective group follows the same chain the
+     * pricing engine uses: `account.customerGroupId ?? organization.customerGroupId`.
+     *
+     * Both rows arrive over their owners' published ports, so a switched-off
+     * `customer_accounts` or `organizations` refuses here rather than reporting
+     * an audience of nobody — which reads as a legitimate answer and is not one.
+     */
+    async loadCustomerContexts(accountIds) {
+        const map = new Map();
+        if (accountIds.length === 0)
+            return map;
+        const accounts = await this.customerAccounts.findByIds(accountIds);
+        const orgIds = [
+            ...new Set(accounts
+                .map((a) => a.organizationId)
+                .filter((id) => typeof id === 'string')),
+        ];
+        const orgGroups = new Map();
+        if (orgIds.length > 0) {
+            const orgs = await this.organizations.findByIds(orgIds);
+            for (const org of orgs)
+                orgGroups.set(org.id, org.customerGroupId ?? null);
+        }
+        for (const account of accounts) {
+            const orgGroup = account.organizationId
+                ? orgGroups.get(account.organizationId) ?? null
+                : null;
+            map.set(account.id, {
+                organizationId: account.organizationId ?? null,
+                customerGroupId: account.customerGroupId ?? orgGroup,
+            });
+        }
+        return map;
+    }
+}
+//# sourceMappingURL=push-message-service.js.map

package/dist/backend/services/push-message-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"push-message-service.js","sourceRoot":"","sources":["../../../src/backend/services/push-message-service.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,WAAW,EAAE,MAAM,oCAAoC,CAAC;AACjE,OAAO,EAAE,mBAAmB,EAAE,MAAM,6CAA6C,CAAC;AAClF,OAAO,EAAE,gBAAgB,EAAE,MAAM,yCAAyC,CAAC;AAC3E,OAAO,EAAE,wBAAwB,EAAE,MAAM,8BAA8B,CAAC;AA0BxE;;;;;GAKG;AACH,MAAM,OAAO,kBAAkB;IAEV;IACA;IAOA;IACA;IAVnB,YACmB,SAA8B,EAC9B,KAAiC;IAClD;;;;;OAKG;IACc,gBAAyC,EACzC,aAAsC;QATtC,cAAS,GAAT,SAAS,CAAqB;QAC9B,UAAK,GAAL,KAAK,CAA4B;QAOjC,qBAAgB,GAAhB,gBAAgB,CAAyB;QACzC,kBAAa,GAAb,aAAa,CAAyB;IACtD,CAAC;IAEJ,KAAK,CAAC,gBAAgB,CAAC,KAAyB;QAC9C,qEAAqE;QACrE,0EAA0E;QAC1E,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAE5B,6EAA6E;QAC7E,IAAI,KAAK,CAAC,aAAa,EAAE,CAAC;YACxB,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,WAAW,EAAE;gBACxC,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,aAAa,EAAE,KAAK,CAAC,aAAa;aACnC,CAAC,CAAC;YACH,IAAI,GAAG;gBAAE,OAAO,EAAE,SAAS,EAAE,GAAG,CAAC,EAAE,EAAE,gBAAgB,EAAE,CAAC,EAAE,CAAC;QAC7D,CAAC;QAED,0EAA0E;QAC1E,0EAA0E;QAC1E,2EAA2E;QAC3E,0DAA0D;QAC1D,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,EAAE,EAAE,KAAK,CAAC,cAAc,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;QAE3F,MAAM,OAAO,GAAG,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE;YACrC,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,GAAG,EAAE,KAAK,CAAC,GAAG,IAAI,IAAI;YACtB,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,IAAI;YAC9B,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,aAAa,EAAE,KAAK,CAAC,aAAa,IAAI,IAAI;YAC1C,MAAM,EAAE,QAAQ;YAChB,SAAS,EAAE,CAAC;YACZ,WAAW,EAAE,CAAC;YACd,oBAAoB,EAAE,KAAK,CAAC,oBAAoB,IAAI,IAAI;SACzD,CAAC,CAAC;QACH,MAAM,EAAE,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;QAElC,MAAM,UAAU,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAC3C,EAAE,CAAC,MAAM,CAAC,mBAAmB,EAAE;YAC7B,SAAS,EAAE,OAAO,CAAC,EAAE;YACrB,cAAc,EAAE,GAAG,CAAC,EAAE;YACtB,MAAM,EAAE,SAAS;YACjB,QAAQ,EAAE,CAAC;SACZ,CAAC,CACH,CAAC;QACF,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1B,MAAM,EAAE,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC;YACrC,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CACtB,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACrB,IAAI,EAAE,SAAS;gBACf,IAAI,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC,EAAE,EAAE;gBAC1B,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE;aACtB,CAAC,CAAC,CACJ,CAAC;QACJ,CAAC;QAED,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,gBAAgB,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC;IACxE,CAAC;IAEO,KAAK,CAAC,eAAe,CAC3B,EAAiB,EACjB,cAAsB,EACtB,QAAsB;QAEtB,IAAI,QAAQ,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;YAC5B,OAAO,EAAE,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,cAAc,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;QACzE,CAAC;QACD,IAAI,QAAQ,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;YAClC,OAAO,EAAE,CAAC,IAAI,CAAC,gBAAgB,EAAE;gBAC/B,cAAc;gBACd,MAAM,EAAE,QAAQ;gBAChB,iBAAiB,EAAE,EAAE,GAAG,EAAE,QAAQ,CAAC,kBAAkB,EAAE;aACxD,CAAC,CAAC;QACL,CAAC;QAED,wEAAwE;QACxE,uEAAuE;QACvE,MAAM,aAAa,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,cAAc,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC5F,MAAM,UAAU,GAAG;YACjB,GAAG,IAAI,GAAG,CACR,aAAa;iBACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,iBAAiB,CAAC;iBAC/B,MAAM,CAAC,CAAC,EAAE,EAAgB,EAAE,CAAC,OAAO,EAAE,KAAK,QAAQ,CAAC,CACxD;SACF,CAAC;QACF,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,UAAU,CAAC,CAAC;QAC7D,OAAO,aAAa,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE;YAClC,MAAM,GAAG,GAAG,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACpF,OAAO,wBAAwB,CAAC,QAAQ,CAAC,IAAI,EAAE;gBAC7C,cAAc;gBACd,iBAAiB,EAAE,GAAG,CAAC,iBAAiB,IAAI,IAAI;gBAChD,cAAc,EAAE,GAAG,EAAE,cAAc,IAAI,IAAI;gBAC3C,eAAe,EAAE,GAAG,EAAE,eAAe,IAAI,IAAI;aAC9C,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;;OAQG;IACK,KAAK,CAAC,oBAAoB,CAAC,UAAoB;QACrD,MAAM,GAAG,GAAG,IAAI,GAAG,EAA2B,CAAC;QAC/C,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,GAAG,CAAC;QAExC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QACnE,MAAM,MAAM,GAAG;YACb,GAAG,IAAI,GAAG,CACR,QAAQ;iBACL,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,cAAc,CAAC;iBAC5B,MAAM,CAAC,CAAC,EAAE,EAAgB,EAAE,CAAC,OAAO,EAAE,KAAK,QAAQ,CAAC,CACxD;SACF,CAAC;QACF,MAAM,SAAS,GAAG,IAAI,GAAG,EAAyB,CAAC;QACnD,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;YACxD,KAAK,MAAM,GAAG,IAAI,IAAI;gBAAE,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,eAAe,IAAI,IAAI,CAAC,CAAC;QAC7E,CAAC;QAED,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,MAAM,QAAQ,GAAG,OAAO,CAAC,cAAc;gBACrC,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,IAAI,IAAI;gBAC/C,CAAC,CAAC,IAAI,CAAC;YACT,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE;gBAClB,cAAc,EAAE,OAAO,CAAC,cAAc,IAAI,IAAI;gBAC9C,eAAe,EAAE,OAAO,CAAC,eAAe,IAAI,QAAQ;aACrD,CAAC,CAAC;QACL,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;CACF"}

package/dist/backend/services/push-provider-registry.d.ts

@@ -0,0 +1,17 @@
+import type { PushProvider, PushProviderRegistryPort } from '@endora-commerce/contracts';
+/**
+ * Provider-agnostic push registry (FR-019). Mirrors the payment/shipping adapter
+ * registries: providers register at composition time; the default ('web_push')
+ * is resolved per channel. Swapping the default backend is a server-side change
+ * that leaves the storefront subscription flow untouched.
+ */
+export declare class PushProviderRegistry implements PushProviderRegistryPort {
+    private readonly providers;
+    private defaultKey;
+    register(provider: PushProvider): void;
+    /** Set which provider key is used as the default for new sends. */
+    setDefaultKey(key: string): void;
+    get(key: string): PushProvider | undefined;
+    resolveDefault(_salesChannelId: string): Promise<PushProvider>;
+}
+//# sourceMappingURL=push-provider-registry.d.ts.map

package/dist/backend/services/push-provider-registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"push-provider-registry.d.ts","sourceRoot":"","sources":["../../../src/backend/services/push-provider-registry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,wBAAwB,EAAE,MAAM,4BAA4B,CAAC;AAEzF;;;;;GAKG;AACH,qBAAa,oBAAqB,YAAW,wBAAwB;IACnE,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAmC;IAC7D,OAAO,CAAC,UAAU,CAAc;IAEhC,QAAQ,CAAC,QAAQ,EAAE,YAAY,GAAG,IAAI;IAQtC,mEAAmE;IACnE,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI;IAIhC,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,YAAY,GAAG,SAAS;IAIpC,cAAc,CAAC,eAAe,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC;CAOrE"}

package/dist/backend/services/push-provider-registry.js

@@ -0,0 +1,32 @@
+/**
+ * Provider-agnostic push registry (FR-019). Mirrors the payment/shipping adapter
+ * registries: providers register at composition time; the default ('web_push')
+ * is resolved per channel. Swapping the default backend is a server-side change
+ * that leaves the storefront subscription flow untouched.
+ */
+export class PushProviderRegistry {
+    providers = new Map();
+    defaultKey = 'web_push';
+    register(provider) {
+        if (this.providers.has(provider.key)) {
+            // Last-writer-wins, with a visible signal (same posture as the adapter registries).
+            console.warn(`[pwa] push provider "${provider.key}" re-registered; overriding.`);
+        }
+        this.providers.set(provider.key, provider);
+    }
+    /** Set which provider key is used as the default for new sends. */
+    setDefaultKey(key) {
+        this.defaultKey = key;
+    }
+    get(key) {
+        return this.providers.get(key);
+    }
+    async resolveDefault(_salesChannelId) {
+        const provider = this.providers.get(this.defaultKey);
+        if (!provider) {
+            throw new Error(`[pwa] no push provider registered for default key "${this.defaultKey}".`);
+        }
+        return provider;
+    }
+}
+//# sourceMappingURL=push-provider-registry.js.map

package/dist/backend/services/push-provider-registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"push-provider-registry.js","sourceRoot":"","sources":["../../../src/backend/services/push-provider-registry.ts"],"names":[],"mappings":"AAEA;;;;;GAKG;AACH,MAAM,OAAO,oBAAoB;IACd,SAAS,GAAG,IAAI,GAAG,EAAwB,CAAC;IACrD,UAAU,GAAG,UAAU,CAAC;IAEhC,QAAQ,CAAC,QAAsB;QAC7B,IAAI,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YACrC,oFAAoF;YACpF,OAAO,CAAC,IAAI,CAAC,wBAAwB,QAAQ,CAAC,GAAG,8BAA8B,CAAC,CAAC;QACnF,CAAC;QACD,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAC7C,CAAC;IAED,mEAAmE;IACnE,aAAa,CAAC,GAAW;QACvB,IAAI,CAAC,UAAU,GAAG,GAAG,CAAC;IACxB,CAAC;IAED,GAAG,CAAC,GAAW;QACb,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACjC,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,eAAuB;QAC1C,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACrD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,KAAK,CAAC,sDAAsD,IAAI,CAAC,UAAU,IAAI,CAAC,CAAC;QAC7F,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF"}

package/dist/backend/services/push-subscription-service.d.ts

@@ -0,0 +1,67 @@
+import type { EntityManager } from '@mikro-orm/postgresql';
+import type { CustomerAccountReadPort, PushSubscriptionInput } from '@endora-commerce/contracts';
+export interface RegisterSubscriptionInput extends PushSubscriptionInput {
+    salesChannelId: string;
+    customerAccountId?: string | null;
+}
+export interface RegisterSubscriptionResult {
+    id: string;
+    status: 'active';
+    created: boolean;
+}
+/**
+ * Push subscription registry (US4). Upsert on `endpoint` (idempotent re-subscribe,
+ * FR-017, multi-device edge case), revoke (FR-018), and prune dead endpoints
+ * reported by the provider (FR-022).
+ */
+export declare class PushSubscriptionService {
+    #private;
+    private readonly emFactory;
+    /**
+     * `customer_accounts`' read model, for the one field the owner stamp needs:
+     * the organisation the owning account belongs to (feature 087, D-187).
+     *
+     * Required rather than optional, because this module has exactly one
+     * construction site (`plugin.ts`) and it holds the gated port already. A
+     * composition that cannot answer "which organisation owns this account"
+     * cannot write this table at all, and saying so in the constructor is
+     * cheaper than a runtime refusal at the write.
+     *
+     * Resolved through `lazyPort`, so a switched-off `customer_accounts`
+     * refuses at the call with the 503 `MODULE_DISABLED` envelope rather than
+     * at composition time.
+     */
+    private readonly customerAccounts;
+    constructor(emFactory: () => EntityManager, 
+    /**
+     * `customer_accounts`' read model, for the one field the owner stamp needs:
+     * the organisation the owning account belongs to (feature 087, D-187).
+     *
+     * Required rather than optional, because this module has exactly one
+     * construction site (`plugin.ts`) and it holds the gated port already. A
+     * composition that cannot answer "which organisation owns this account"
+     * cannot write this table at all, and saying so in the constructor is
+     * cheaper than a runtime refusal at the write.
+     *
+     * Resolved through `lazyPort`, so a switched-off `customer_accounts`
+     * refuses at the call with the 503 `MODULE_DISABLED` envelope rather than
+     * at composition time.
+     */
+    customerAccounts: CustomerAccountReadPort);
+    register(input: RegisterSubscriptionInput): Promise<RegisterSubscriptionResult>;
+    /** Revoke by endpoint. Idempotent — returns false if nothing was deleted. */
+    revoke(endpoint: string): Promise<boolean>;
+    /** Mark a subscription invalid and delete it (provider reported the endpoint gone). */
+    prune(subscriptionId: string): Promise<void>;
+    /**
+     * `null` = the admin asked for a scope this deployment has no channel for, so
+     * there is nothing subscribed to count. The column is `NOT NULL`, so the
+     * query matches no row and the honest answer is zero — where the `'default'`
+     * sentinel used to make PostgreSQL reject the comparison outright.
+     */
+    statsForChannel(salesChannelId: string | null): Promise<{
+        active: number;
+        invalid: number;
+    }>;
+}
+//# sourceMappingURL=push-subscription-service.d.ts.map

package/dist/backend/services/push-subscription-service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"push-subscription-service.d.ts","sourceRoot":"","sources":["../../../src/backend/services/push-subscription-service.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,KAAK,EAAE,uBAAuB,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AAGjG,MAAM,WAAW,yBAA0B,SAAQ,qBAAqB;IACtE,cAAc,EAAE,MAAM,CAAC;IACvB,iBAAiB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACnC;AAED,MAAM,WAAW,0BAA0B;IACzC,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,QAAQ,CAAC;IACjB,OAAO,EAAE,OAAO,CAAC;CAClB;AAkDD;;;;GAIG;AACH,qBAAa,uBAAuB;;IAEhC,OAAO,CAAC,QAAQ,CAAC,SAAS;IAC1B;;;;;;;;;;;;;OAaG;IACH,OAAO,CAAC,QAAQ,CAAC,gBAAgB;gBAfhB,SAAS,EAAE,MAAM,aAAa;IAC/C;;;;;;;;;;;;;OAaG;IACc,gBAAgB,EAAE,uBAAuB;IAoCtD,QAAQ,CAAC,KAAK,EAAE,yBAAyB,GAAG,OAAO,CAAC,0BAA0B,CAAC;IAoDrF,6EAA6E;IACvE,MAAM,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAUhD,uFAAuF;IACjF,KAAK,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IASlD;;;;;OAKG;IACG,eAAe,CACnB,cAAc,EAAE,MAAM,GAAG,IAAI,GAC5B,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;CAQhD"}

package/dist/backend/services/push-subscription-service.js

@@ -0,0 +1,165 @@
+import { PushSubscription } from '../entities/push-subscription.entity.js';
+/**
+ * The two attribution columns, written together from one resolved owner.
+ *
+ * Both directions of the upsert go through this function, which is the whole
+ * point: signing in on a subscribed device stamps the account and the
+ * organisation, and re-subscribing that same device anonymously clears both.
+ */
+function ownerColumns(owner) {
+    return owner.kind === 'customer'
+        ? { customerAccountId: owner.customerAccountId, organizationId: owner.organizationId }
+        : {
+            customerAccountId: null,
+            // FR-011 / FR-023 — an anonymous device belongs to no organisation, and
+            // the constraint says nothing about it. Who it *should* belong to is
+            // R-6's open question and is not answered here. What matters is that
+            // the organisation is cleared rather than left behind: a row with no
+            // account and a stale organisation is disclosed to a representative of
+            // an organisation that no longer owns the device.
+            organizationId: null,
+        };
+}
+/**
+ * Push subscription registry (US4). Upsert on `endpoint` (idempotent re-subscribe,
+ * FR-017, multi-device edge case), revoke (FR-018), and prune dead endpoints
+ * reported by the provider (FR-022).
+ */
+export class PushSubscriptionService {
+    emFactory;
+    customerAccounts;
+    constructor(emFactory, 
+    /**
+     * `customer_accounts`' read model, for the one field the owner stamp needs:
+     * the organisation the owning account belongs to (feature 087, D-187).
+     *
+     * Required rather than optional, because this module has exactly one
+     * construction site (`plugin.ts`) and it holds the gated port already. A
+     * composition that cannot answer "which organisation owns this account"
+     * cannot write this table at all, and saying so in the constructor is
+     * cheaper than a runtime refusal at the write.
+     *
+     * Resolved through `lazyPort`, so a switched-off `customer_accounts`
+     * refuses at the call with the 503 `MODULE_DISABLED` envelope rather than
+     * at composition time.
+     */
+    customerAccounts) {
+        this.emFactory = emFactory;
+        this.customerAccounts = customerAccounts;
+    }
+    /**
+     * The organisation that owns a subscription belonging to this account —
+     * feature 087 Group B, D-187.
+     *
+     * Total, and refuses rather than returning `null`:
+     * `customer_accounts.organization_id` is `NOT NULL` (D-178), so an account
+     * that resolves always has one, and an account that does not resolve is a
+     * caller naming a row that is not there. Either way there is no organisation
+     * to stamp, and a subscription written without one is a device hidden from
+     * the representative who serves its buyer — which is the whole defect this
+     * column exists to close. So the write stops here, where the message can name
+     * the account, instead of at the constraint.
+     */
+    async #organizationOf(customerAccountId) {
+        const account = await this.customerAccounts.findById(customerAccountId);
+        if (!account) {
+            throw new Error(`PushSubscriptionService: customer account ${customerAccountId} does not resolve, so the push subscription it would own has no organisation to carry.`);
+        }
+        return account.organizationId;
+    }
+    /** The caller's owner input, with the organisation a customer owner implies. */
+    async #resolveOwner(customerAccountId) {
+        if (customerAccountId === null || customerAccountId === undefined)
+            return { kind: 'anonymous' };
+        return {
+            kind: 'customer',
+            customerAccountId,
+            organizationId: await this.#organizationOf(customerAccountId),
+        };
+    }
+    async register(input) {
+        // command-coverage-ignore: push-notification infrastructure — device
+        // subscription / message delivery / icon asset, not audited domain state.
+        const em = this.emFactory();
+        const existing = await em.findOne(PushSubscription, { endpoint: input.endpoint });
+        // D-187 — resolved **before** the managed entity is touched, not between
+        // the account assignment and the flush. `existing` is managed, so a throw
+        // after the assignment would leave an owned, unattributed subscription in
+        // the unit of work for whatever flushes this request next.
+        const owner = await this.#resolveOwner(input.customerAccountId);
+        if (existing) {
+            existing.p256dh = input.keys.p256dh;
+            existing.auth = input.keys.auth;
+            existing.salesChannelId = input.salesChannelId;
+            // D-187 — the account and the organisation move together, in **both**
+            // directions. Signing in on this device stamps both; re-subscribing it
+            // anonymously clears both. The `CHECK` catches only the first of those,
+            // by design (it is an implication, so R-6 stays open); the second is
+            // held here, by there being no arm of `ownerColumns` that writes one
+            // without the other. `em.assign` rather than two statements, for the same
+            // reason `ownerColumns` returns both columns as one value: two statements
+            // are two things to remember, and the second one is the one that was
+            // never written.
+            em.assign(existing, ownerColumns(owner));
+            existing.status = 'active';
+            existing.lastSeenAt = new Date();
+            if (input.userAgent !== undefined)
+                existing.userAgent = input.userAgent;
+            await em.flush();
+            return { id: existing.id, status: 'active', created: false };
+        }
+        const sub = em.create(PushSubscription, {
+            salesChannelId: input.salesChannelId,
+            // D-187 — the only place a subscription is inserted, and the organisation
+            // goes in with the account. `ownerColumns` takes a *resolved* owner, so
+            // the customer branch has no shape in which the organisation could be
+            // omitted; the anonymous branch has none to carry (FR-011/FR-023).
+            ...ownerColumns(owner),
+            endpoint: input.endpoint,
+            p256dh: input.keys.p256dh,
+            auth: input.keys.auth,
+            provider: 'web_push',
+            status: 'active',
+            userAgent: input.userAgent ?? null,
+            lastSeenAt: new Date(),
+        });
+        await em.persistAndFlush(sub);
+        return { id: sub.id, status: 'active', created: true };
+    }
+    /** Revoke by endpoint. Idempotent — returns false if nothing was deleted. */
+    async revoke(endpoint) {
+        // command-coverage-ignore: push-notification infrastructure — device
+        // subscription / message delivery / icon asset, not audited domain state.
+        const em = this.emFactory();
+        const existing = await em.findOne(PushSubscription, { endpoint });
+        if (!existing)
+            return false;
+        await em.removeAndFlush(existing);
+        return true;
+    }
+    /** Mark a subscription invalid and delete it (provider reported the endpoint gone). */
+    async prune(subscriptionId) {
+        // command-coverage-ignore: push-notification infrastructure — device
+        // subscription / message delivery / icon asset, not audited domain state.
+        const em = this.emFactory();
+        const existing = await em.findOne(PushSubscription, { id: subscriptionId });
+        if (!existing)
+            return;
+        await em.removeAndFlush(existing);
+    }
+    /**
+     * `null` = the admin asked for a scope this deployment has no channel for, so
+     * there is nothing subscribed to count. The column is `NOT NULL`, so the
+     * query matches no row and the honest answer is zero — where the `'default'`
+     * sentinel used to make PostgreSQL reject the comparison outright.
+     */
+    async statsForChannel(salesChannelId) {
+        const em = this.emFactory();
+        const [active, invalid] = await Promise.all([
+            em.count(PushSubscription, { salesChannelId, status: 'active' }),
+            em.count(PushSubscription, { salesChannelId, status: 'invalid' }),
+        ]);
+        return { active, invalid };
+    }
+}
+//# sourceMappingURL=push-subscription-service.js.map

package/dist/backend/services/push-subscription-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"push-subscription-service.js","sourceRoot":"","sources":["../../../src/backend/services/push-subscription-service.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,gBAAgB,EAAE,MAAM,yCAAyC,CAAC;AAoC3E;;;;;;GAMG;AACH,SAAS,YAAY,CAAC,KAAgC;IAIpD,OAAO,KAAK,CAAC,IAAI,KAAK,UAAU;QAC9B,CAAC,CAAC,EAAE,iBAAiB,EAAE,KAAK,CAAC,iBAAiB,EAAE,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE;QACtF,CAAC,CAAC;YACE,iBAAiB,EAAE,IAAI;YACvB,wEAAwE;YACxE,qEAAqE;YACrE,qEAAqE;YACrE,qEAAqE;YACrE,uEAAuE;YACvE,kDAAkD;YAClD,cAAc,EAAE,IAAI;SACrB,CAAC;AACR,CAAC;AAED;;;;GAIG;AACH,MAAM,OAAO,uBAAuB;IAEf;IAeA;IAhBnB,YACmB,SAA8B;IAC/C;;;;;;;;;;;;;OAaG;IACc,gBAAyC;QAfzC,cAAS,GAAT,SAAS,CAAqB;QAe9B,qBAAgB,GAAhB,gBAAgB,CAAyB;IACzD,CAAC;IAEJ;;;;;;;;;;;;OAYG;IACH,KAAK,CAAC,eAAe,CAAC,iBAAyB;QAC7C,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC;QACxE,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CACb,6CAA6C,iBAAiB,wFAAwF,CACvJ,CAAC;QACJ,CAAC;QACD,OAAO,OAAO,CAAC,cAAc,CAAC;IAChC,CAAC;IAED,gFAAgF;IAChF,KAAK,CAAC,aAAa,CAAC,iBAA4C;QAC9D,IAAI,iBAAiB,KAAK,IAAI,IAAI,iBAAiB,KAAK,SAAS;YAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;QAChG,OAAO;YACL,IAAI,EAAE,UAAU;YAChB,iBAAiB;YACjB,cAAc,EAAE,MAAM,IAAI,CAAC,eAAe,CAAC,iBAAiB,CAAC;SAC9D,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,KAAgC;QAC7C,qEAAqE;QACrE,0EAA0E;QAC1E,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAC5B,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,gBAAgB,EAAE,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;QAElF,yEAAyE;QACzE,0EAA0E;QAC1E,0EAA0E;QAC1E,2DAA2D;QAC3D,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;QAEhE,IAAI,QAAQ,EAAE,CAAC;YACb,QAAQ,CAAC,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC;YACpC,QAAQ,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC;YAChC,QAAQ,CAAC,cAAc,GAAG,KAAK,CAAC,cAAc,CAAC;YAC/C,sEAAsE;YACtE,uEAAuE;YACvE,wEAAwE;YACxE,qEAAqE;YACrE,qEAAqE;YACrE,0EAA0E;YAC1E,0EAA0E;YAC1E,qEAAqE;YACrE,iBAAiB;YACjB,EAAE,CAAC,MAAM,CAAC,QAAQ,EAAE,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;YACzC,QAAQ,CAAC,MAAM,GAAG,QAAQ,CAAC;YAC3B,QAAQ,CAAC,UAAU,GAAG,IAAI,IAAI,EAAE,CAAC;YACjC,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS;gBAAE,QAAQ,CAAC,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC;YACxE,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC;YACjB,OAAO,EAAE,EAAE,EAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QAC/D,CAAC;QAED,MAAM,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,gBAAgB,EAAE;YACtC,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,0EAA0E;YAC1E,wEAAwE;YACxE,sEAAsE;YACtE,mEAAmE;YACnE,GAAG,YAAY,CAAC,KAAK,CAAC;YACtB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM;YACzB,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI;YACrB,QAAQ,EAAE,UAAU;YACpB,MAAM,EAAE,QAAQ;YAChB,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,IAAI;YAClC,UAAU,EAAE,IAAI,IAAI,EAAE;SACvB,CAAC,CAAC;QACH,MAAM,EAAE,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC;QAC9B,OAAO,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IACzD,CAAC;IAED,6EAA6E;IAC7E,KAAK,CAAC,MAAM,CAAC,QAAgB;QAC3B,qEAAqE;QACrE,0EAA0E;QAC1E,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAC5B,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,gBAAgB,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;QAClE,IAAI,CAAC,QAAQ;YAAE,OAAO,KAAK,CAAC;QAC5B,MAAM,EAAE,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;QAClC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,uFAAuF;IACvF,KAAK,CAAC,KAAK,CAAC,cAAsB;QAChC,qEAAqE;QACrE,0EAA0E;QAC1E,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAC5B,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,gBAAgB,EAAE,EAAE,EAAE,EAAE,cAAc,EAAE,CAAC,CAAC;QAC5E,IAAI,CAAC,QAAQ;YAAE,OAAO;QACtB,MAAM,EAAE,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;IACpC,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,eAAe,CACnB,cAA6B;QAE7B,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAC5B,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAC1C,EAAE,CAAC,KAAK,CAAC,gBAAgB,EAAE,EAAE,cAAc,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;YAChE,EAAE,CAAC,KAAK,CAAC,gBAAgB,EAAE,EAAE,cAAc,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;SAClE,CAAC,CAAC;QACH,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;IAC7B,CAAC;CACF"}

package/dist/backend/services/pwa-config-resolver.d.ts

@@ -0,0 +1,29 @@
+import type { EntityManager } from '@mikro-orm/postgresql';
+import { z } from 'zod';
+import { type PwaIconDescriptor, type PwaPublicConfig } from '@endora-commerce/contracts';
+/**
+ * Minimal read port over SettingsService — the resolver only needs `get`.
+ * SettingsService already provides read-through caching + write invalidation,
+ * so the resolver does not add a second cache (YAGNI; FR-009 propagation is the
+ * Settings cache's job).
+ */
+export interface SettingsReadPort {
+    get<T>(code: string, salesChannelId: string | null, schema: z.ZodType<T>): Promise<T>;
+}
+export declare class PwaConfigResolver {
+    private readonly settings;
+    private readonly emFactory;
+    constructor(settings: SettingsReadPort, emFactory: () => EntityManager);
+    private getString;
+    private getBool;
+    private getDisplayMode;
+    /**
+     * Build the icon descriptors for a channel from derived renditions. Falls back
+     * to the per-channel renditions, then the global (null-channel) renditions, then
+     * the bundled placeholders.
+     */
+    resolveIcons(salesChannelId: string | null): Promise<PwaIconDescriptor[]>;
+    /** Public, storefront-facing config for a channel (no private secrets). */
+    getPublicConfig(salesChannelId: string | null): Promise<PwaPublicConfig>;
+}
+//# sourceMappingURL=pwa-config-resolver.d.ts.map

package/dist/backend/services/pwa-config-resolver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pwa-config-resolver.d.ts","sourceRoot":"","sources":["../../../src/backend/services/pwa-config-resolver.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAIL,KAAK,iBAAiB,EACtB,KAAK,eAAe,EACrB,MAAM,4BAA4B,CAAC;AAGpC;;;;;GAKG;AACH,MAAM,WAAW,gBAAgB;IAC/B,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,GAAG,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;CACvF;AAYD,qBAAa,iBAAiB;IAE1B,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,SAAS;gBADT,QAAQ,EAAE,gBAAgB,EAC1B,SAAS,EAAE,MAAM,aAAa;YAGnC,SAAS;YAYT,OAAO;YAYP,cAAc;IAQ5B;;;;OAIG;IACG,YAAY,CAAC,cAAc,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,iBAAiB,EAAE,CAAC;IAkB/E,2EAA2E;IACrE,eAAe,CAAC,cAAc,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,eAAe,CAAC;CAoC/E"}

package/dist/backend/services/pwa-config-resolver.js

@@ -0,0 +1,92 @@
+import { z } from 'zod';
+import { PWA_SETTING_CODES, PwaDisplayModeSchema, } from '@endora-commerce/contracts';
+import { PwaIconRendition } from '../entities/pwa-icon-rendition.entity.js';
+const StringSchema = z.string();
+const BoolSchema = z.boolean();
+/** Bundled placeholder icons shipped by the storefront when no source is configured. */
+const PLACEHOLDER_ICONS = [
+    { src: '/icons/icon-192.png', sizes: '192x192', type: 'image/png', purpose: 'any' },
+    { src: '/icons/icon-512.png', sizes: '512x512', type: 'image/png', purpose: 'any' },
+    { src: '/icons/icon-512-maskable.png', sizes: '512x512', type: 'image/png', purpose: 'maskable' },
+];
+export class PwaConfigResolver {
+    settings;
+    emFactory;
+    constructor(settings, emFactory) {
+        this.settings = settings;
+        this.emFactory = emFactory;
+    }
+    async getString(code, channelId, fallback) {
+        try {
+            return await this.settings.get(code, channelId, StringSchema);
+        }
+        catch {
+            return fallback;
+        }
+    }
+    async getBool(code, channelId, fallback) {
+        try {
+            return await this.settings.get(code, channelId, BoolSchema);
+        }
+        catch {
+            return fallback;
+        }
+    }
+    async getDisplayMode(channelId) {
+        try {
+            return await this.settings.get(PWA_SETTING_CODES.DISPLAY_MODE, channelId, PwaDisplayModeSchema);
+        }
+        catch {
+            return 'standalone';
+        }
+    }
+    /**
+     * Build the icon descriptors for a channel from derived renditions. Falls back
+     * to the per-channel renditions, then the global (null-channel) renditions, then
+     * the bundled placeholders.
+     */
+    async resolveIcons(salesChannelId) {
+        const em = this.emFactory();
+        // `null` = no channel to resolve for, so start at the global renditions —
+        // the same row set the per-channel lookup falls back to anyway.
+        const channelRows = salesChannelId === null ? [] : await em.find(PwaIconRendition, { salesChannelId });
+        const rows = channelRows.length > 0
+            ? channelRows
+            : await em.find(PwaIconRendition, { salesChannelId: null });
+        if (rows.length === 0)
+            return PLACEHOLDER_ICONS;
+        return rows.map((r) => ({
+            src: `/api/v1/storefront/pwa/icons/${r.size}-${r.purpose}.png`,
+            sizes: `${r.size}x${r.size}`,
+            type: 'image/png',
+            purpose: r.purpose,
+        }));
+    }
+    /** Public, storefront-facing config for a channel (no private secrets). */
+    async getPublicConfig(salesChannelId) {
+        const [appName, shortName, themeColor, backgroundColor, displayMode, cachingEnabled, pushEnabled, vapidPublicKey, icons,] = await Promise.all([
+            this.getString(PWA_SETTING_CODES.APP_NAME, salesChannelId, 'B2B Platform'),
+            this.getString(PWA_SETTING_CODES.SHORT_NAME, salesChannelId, 'B2B'),
+            this.getString(PWA_SETTING_CODES.THEME_COLOR, salesChannelId, '#1d4ed8'),
+            this.getString(PWA_SETTING_CODES.BACKGROUND_COLOR, salesChannelId, '#fafafa'),
+            this.getDisplayMode(salesChannelId),
+            this.getBool(PWA_SETTING_CODES.CACHING_ENABLED, salesChannelId, false),
+            this.getBool(PWA_SETTING_CODES.PUSH_ENABLED, salesChannelId, false),
+            this.getString(PWA_SETTING_CODES.VAPID_PUBLIC_KEY, salesChannelId, ''),
+            this.resolveIcons(salesChannelId),
+        ]);
+        return {
+            appName,
+            shortName,
+            themeColor,
+            backgroundColor,
+            displayMode,
+            icons,
+            cachingEnabled,
+            // Push is only "on" for the client when both enabled AND a public key exists.
+            pushEnabled: pushEnabled && vapidPublicKey.length > 0,
+            vapidPublicKey: pushEnabled ? vapidPublicKey : '',
+        };
+    }
+}
+//# sourceMappingURL=pwa-config-resolver.js.map