@marinoscar/platform-api 0.1.0-next.3 → 0.1.0-next.5

package/dist/notifications/broadcasts/broadcasts.controller.js

@@ -0,0 +1,368 @@
+"use strict";
+// =============================================================================
+// The broadcast admin routes (issue #324, epic #319)
+// =============================================================================
+//
+// Eight routes at `/api/admin/broadcasts`. The controller binds, documents and
+// authorizes; every decision about what a request means lives in
+// `broadcasts.service.ts`, and everything about how a broadcast is actually
+// DELIVERED lives one layer further out in the two job handlers.
+//
+// MOUNTED UNDER `/admin`, NOT ON `NotificationsController`. Every route on
+// that controller is `@Auth()`-only and scoped to the token bearer's OWN
+// notifications; these eight are admin-only and act on everybody's. One
+// controller enforcing two entirely different authorization models is how a
+// route ends up with the wrong one.
+//
+// -----------------------------------------------------------------------------
+// ⚠ LITERAL ROUTES ARE DECLARED BEFORE `:id`, AND THE ORDER IS LOAD-BEARING
+// -----------------------------------------------------------------------------
+//
+// Nest matches routes in DECLARATION ORDER, not by specificity — the same
+// constraint `job-admin.controller.ts`'s header documents at length, and the
+// same failure mode. Move `@Get(':id')` above `@Get('audience')` and
+// `GET /api/admin/broadcasts/audience` is answered by `ParseUUIDPipe` with a
+// 400 about a malformed UUID; move `@Post(':id/cancel')`-style parameterised
+// routes above `@Post('test')` and a test send becomes unreachable. There is
+// no boot error and no log line for either — an admin just gets a nonsense
+// 400, or worse, a 404 for a broadcast whose id is the literal text "test".
+//
+// The declaration order below is therefore: `audience`, `test`, `/` (GET),
+// `/` (POST), then `:id`, `:id/cancel`, `:id/resume` (#459) and `DELETE :id`.
+// Keep every literal above every parameterised route — `test/broadcasts/broadcasts.integration.spec.ts`
+// drives both literals through the real router precisely so that re-ordering
+// these methods fails a test rather than causing a production incident.
+//
+// -----------------------------------------------------------------------------
+// TWO PERMISSIONS, SPLIT ON READ VERSUS WRITE
+// -----------------------------------------------------------------------------
+//
+// `broadcasts:read` for `audience`, the list and the detail; `broadcasts:write`
+// for create, test, cancel, resume and delete. Both seeded to ADMIN ONLY (#320), and
+// `@Auth({ roles: [ROLES.ADMIN], permissions: [...] })` states both — the role
+// admits, the permission is what the guard checks. The pair is what a settings
+// card's `permission` field must mirror byte-for-byte (CLAUDE.md, Settings UI
+// Pattern rule 3), so these strings are the API's half of that contract.
+//
+// The split earns its keep here more than anywhere else in this API: reading
+// this surface shows what has been announced, while writing it sends a message
+// to every active user — the highest-consequence action the application has.
+//
+// -----------------------------------------------------------------------------
+// ORG BROADCASTS (#738): TWO SCOPES, ONE SET OF ROUTES
+// -----------------------------------------------------------------------------
+//
+// `org_broadcasts:read|write` (ORG scope, `org_admin`) reach the same routes
+// for the caller's ACTIVE organization only. Each route therefore declares
+// `@Auth({ anyPermissions: [system, org] })` (the guard admits either; the
+// system role requirement is dropped, since an org administrator holds no
+// system role) and the handler resolves the caller's `BroadcastScope` from
+// which one they hold: the system permission wins, so an operator who is also
+// an org admin keeps the deployment-wide view. The service enforces the
+// scope: an org-scoped caller's target is forced to its active organization
+// (any other `targetOrgId` is a 422), it lists only that organization's
+// broadcasts, and another organization's broadcast is a 404.
+// =============================================================================
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.BroadcastsController = void 0;
+const common_1 = require("@nestjs/common");
+const swagger_1 = require("@nestjs/swagger");
+const index_1 = require("../../identity/index");
+const notifications_constants_1 = require("../notifications.constants");
+const index_2 = require("../../core/index");
+const broadcast_audience_1 = require("./broadcast-audience");
+const broadcasts_service_1 = require("./broadcasts.service");
+const broadcast_list_query_dto_1 = require("./dto/broadcast-list-query.dto");
+const broadcast_response_dto_1 = require("./dto/broadcast-response.dto");
+const create_broadcast_dto_1 = require("./dto/create-broadcast.dto");
+const BroadcastCallerParam = (0, common_1.createParamDecorator)((_data, ctx) => {
+    const request = ctx.switchToHttp().getRequest();
+    const permissions = (0, index_1.principalOf)(request)?.permissions ?? request.user?.permissions ?? [];
+    return { permissions, orgId: (0, index_1.activeOrgIdOf)(request) ?? null };
+});
+/**
+ * The scope a caller acts in (#738): system when it holds the system
+ * permission for this action, else its active organization when it holds the
+ * org one. The guard already admitted one of the two.
+ */
+function scopeOf(caller, action) {
+    const system = action === 'read' ? notifications_constants_1.PERMISSIONS.BROADCASTS_READ : notifications_constants_1.PERMISSIONS.BROADCASTS_WRITE;
+    const org = action === 'read' ? notifications_constants_1.PERMISSIONS.ORG_BROADCASTS_READ : notifications_constants_1.PERMISSIONS.ORG_BROADCASTS_WRITE;
+    if (caller.permissions.includes(system))
+        return { kind: 'system' };
+    if (caller.permissions.includes(org) && caller.orgId)
+        return { kind: 'org', orgId: caller.orgId };
+    throw new common_1.ForbiddenException(`Missing permissions: one of ${system}, ${org} (with an active organization)`);
+}
+const READ = [notifications_constants_1.PERMISSIONS.BROADCASTS_READ, notifications_constants_1.PERMISSIONS.ORG_BROADCASTS_READ];
+const WRITE = [notifications_constants_1.PERMISSIONS.BROADCASTS_WRITE, notifications_constants_1.PERMISSIONS.ORG_BROADCASTS_WRITE];
+/**
+ * `/api/admin/broadcasts`: compose, schedule, list, cancel, resume and delete
+ * broadcasts, for the whole deployment (`broadcasts:*`) or the caller's
+ * active organization (`org_broadcasts:*`).
+ *
+ * @stability experimental
+ *
+ * @internal
+ */
+let BroadcastsController = class BroadcastsController {
+    broadcasts;
+    constructor(broadcasts) {
+        this.broadcasts = broadcasts;
+    }
+    // -------------------------------------------------------------------------
+    // Literal routes. These MUST stay above `:id` — see the file header.
+    // -------------------------------------------------------------------------
+    async audience(query, caller) {
+        return this.broadcasts.audience(scopeOf(caller, 'read'), query.targetOrgId);
+    }
+    async test(dto, adminUserId, caller) {
+        scopeOf(caller, 'write');
+        return this.broadcasts.sendTest(dto, adminUserId);
+    }
+    async list(query, caller) {
+        return this.broadcasts.list(query, scopeOf(caller, 'read'));
+    }
+    async create(dto, adminUserId, caller) {
+        return this.broadcasts.create(dto, adminUserId, scopeOf(caller, 'write'));
+    }
+    // -------------------------------------------------------------------------
+    // Parameterised routes. Nothing literal may be declared below this line.
+    // -------------------------------------------------------------------------
+    async get(id, caller) {
+        return this.broadcasts.get(id, scopeOf(caller, 'read'));
+    }
+    async cancel(id, adminUserId, caller) {
+        return this.broadcasts.cancel(id, adminUserId, scopeOf(caller, 'write'));
+    }
+    async resume(id, adminUserId, caller) {
+        return this.broadcasts.resume(id, adminUserId, scopeOf(caller, 'write'));
+    }
+    async remove(id, adminUserId, caller) {
+        await this.broadcasts.remove(id, adminUserId, scopeOf(caller, 'write'));
+    }
+};
+exports.BroadcastsController = BroadcastsController;
+__decorate([
+    (0, common_1.Get)('audience'),
+    (0, index_1.Auth)({ anyPermissions: READ }),
+    (0, swagger_1.ApiOperation)({
+        summary: 'Count the users a broadcast would reach',
+        description: 'How many active users a broadcast created right now would target, counted with the same ' +
+            'audience predicate the fan-out itself pages with — so the number shown in the composer ' +
+            'and the confirmation dialog cannot disagree with the number the send later reports. It ' +
+            'is an estimate for a SCHEDULED broadcast: the real audience is frozen at a cutoff ' +
+            'stamped when sending begins, so users created or deactivated in between change it.',
+    }),
+    (0, swagger_1.ApiQuery)({
+        name: 'targetOrgId',
+        required: false,
+        type: String,
+        format: 'uuid',
+        description: 'Count the active members of this organization instead of every active user (#738). ' +
+            'An `org_broadcasts:read` holder may only name their active organization (any other is a 422); ' +
+            'their count is always that organization\'s.',
+    }),
+    (0, swagger_1.ApiResponse)({ status: 200, description: 'Current audience size', type: broadcast_response_dto_1.BroadcastAudienceDto }),
+    (0, swagger_1.ApiResponse)({ status: 422, description: 'targetOrgId is not an organization, or not the caller\'s' }),
+    __param(0, (0, common_1.Query)()),
+    __param(1, BroadcastCallerParam()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [broadcast_response_dto_1.BroadcastAudienceQueryDto, Object]),
+    __metadata("design:returntype", Promise)
+], BroadcastsController.prototype, "audience", null);
+__decorate([
+    (0, common_1.Post)('test'),
+    (0, index_1.Auth)({ anyPermissions: WRITE }),
+    (0, common_1.HttpCode)(common_1.HttpStatus.OK),
+    (0, swagger_1.ApiOperation)({
+        summary: 'Send this composition to yourself',
+        description: 'Dispatches the composition to the CALLING USER ONLY, over the channels selected, using ' +
+            'the same event key, the same payload and the same templates a real send would use. ' +
+            'Writes no broadcast row and queues no job, so nothing appears in the list and nobody ' +
+            'else is contacted. There is no recipient parameter by design — an endpoint that could ' +
+            'send arbitrary admin-composed content to an arbitrary address would be a spam relay. ' +
+            'A 200 means the dispatch was attempted, not that every channel succeeded: per-channel ' +
+            'outcomes are recorded as delivery rows, exactly as they are for a real send.',
+    }),
+    (0, swagger_1.ApiResponse)({ status: 200, description: 'What was dispatched', type: broadcast_response_dto_1.BroadcastTestResultDto }),
+    (0, swagger_1.ApiResponse)({ status: 400, description: 'Validation error' }),
+    __param(0, (0, common_1.Body)()),
+    __param(1, (0, index_1.CurrentUser)('id')),
+    __param(2, BroadcastCallerParam()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [create_broadcast_dto_1.TestBroadcastDto, String, Object]),
+    __metadata("design:returntype", Promise)
+], BroadcastsController.prototype, "test", null);
+__decorate([
+    (0, common_1.Get)(),
+    (0, index_1.Auth)({ anyPermissions: READ }),
+    (0, swagger_1.ApiOperation)({
+        summary: 'List broadcasts',
+        description: 'Newest first, paginated, optionally filtered by lifecycle status. Includes the composed ' +
+            'title and body, the channels chosen, the schedule, and the progress counters ' +
+            '(`recipientsTargeted` and `recipientsDispatched`) the fan-out maintains.',
+    }),
+    (0, swagger_1.ApiQuery)({ name: 'page', required: false, type: Number }),
+    (0, swagger_1.ApiQuery)({ name: 'pageSize', required: false, type: Number, description: 'Max 100.' }),
+    (0, swagger_1.ApiQuery)({ name: 'status', required: false, enum: broadcast_response_dto_1.BROADCAST_STATUSES }),
+    (0, index_2.ApiDataResponse)(broadcast_response_dto_1.BroadcastDto, { pagination: 'flat', description: 'Paginated broadcast list' }),
+    __param(0, (0, common_1.Query)()),
+    __param(1, BroadcastCallerParam()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [broadcast_list_query_dto_1.BroadcastListQueryDto, Object]),
+    __metadata("design:returntype", Promise)
+], BroadcastsController.prototype, "list", null);
+__decorate([
+    (0, common_1.Post)(),
+    (0, index_1.Auth)({ anyPermissions: WRITE }),
+    (0, swagger_1.ApiOperation)({
+        summary: 'Create and queue a broadcast',
+        description: 'Records the broadcast as `scheduled` and enqueues its fan-out. Omit `scheduledFor` to ' +
+            'send immediately; supply a future timestamp to schedule it — the queued job is simply ' +
+            'not claimable until then, so a scheduled broadcast survives every restart between now ' +
+            'and its send time. The event key is DERIVED from `critical` and is never accepted from ' +
+            'the client. A critical broadcast must include the `browser` channel: the durable in-app ' +
+            'notification is the only record a recipient can go back and read. ' +
+            'Returns the row plus a non-fatal `warnings` array — in particular, selecting `browser` ' +
+            'while browser notifications are disabled deployment-wide is a warning, not an error, ' +
+            'because scheduling an announcement for after that switch is flipped back is legitimate.',
+    }),
+    (0, swagger_1.ApiResponse)({ status: 201, description: 'The queued broadcast', type: broadcast_response_dto_1.BroadcastCreateResultDto }),
+    (0, swagger_1.ApiResponse)({ status: 400, description: 'Validation error' }),
+    (0, swagger_1.ApiResponse)({ status: 422, description: 'targetOrgId is not an organization, or not the caller\'s' }),
+    __param(0, (0, common_1.Body)()),
+    __param(1, (0, index_1.CurrentUser)('id')),
+    __param(2, BroadcastCallerParam()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [create_broadcast_dto_1.CreateBroadcastDto, String, Object]),
+    __metadata("design:returntype", Promise)
+], BroadcastsController.prototype, "create", null);
+__decorate([
+    (0, common_1.Get)(':id'),
+    (0, index_1.Auth)({ anyPermissions: READ }),
+    (0, swagger_1.ApiOperation)({
+        summary: 'Get one broadcast',
+        description: 'The full row plus `approximateDeliveryAttempts`, a per-channel/per-status breakdown of ' +
+            'delivery rows recorded WHILE THIS BROADCAST WAS SENDING. It is APPROXIMATE and is named ' +
+            'so: delivery rows carry no broadcast id, so attribution is by event key and time window ' +
+            '(`startedAt` to `finishedAt`, or now). A second broadcast raised under the same event ' +
+            'key during this one\'s send contributes to the total, and nothing here can separate ' +
+            'them. Empty for a broadcast that has not started.',
+    }),
+    (0, swagger_1.ApiParam)({ name: 'id', type: String, format: 'uuid' }),
+    (0, swagger_1.ApiResponse)({ status: 200, description: 'The broadcast', type: broadcast_response_dto_1.BroadcastDetailDto }),
+    (0, swagger_1.ApiResponse)({ status: 404, description: 'Broadcast not found' }),
+    __param(0, (0, common_1.Param)('id', common_1.ParseUUIDPipe)),
+    __param(1, BroadcastCallerParam()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, Object]),
+    __metadata("design:returntype", Promise)
+], BroadcastsController.prototype, "get", null);
+__decorate([
+    (0, common_1.Post)(':id/cancel'),
+    (0, index_1.Auth)({ anyPermissions: WRITE }),
+    (0, common_1.HttpCode)(common_1.HttpStatus.OK),
+    (0, swagger_1.ApiOperation)({
+        summary: 'Cancel a scheduled, in-flight or failed broadcast',
+        description: 'The only recall mechanism this feature has. Accepted for a `scheduled`, `sending` or ' +
+            '`failed` broadcast and refused with 409 for any other status (`sent`, `canceled`). ' +
+            'Applied as a conditional write, so it races the fan-out\'s own claim — and the flip to ' +
+            '`failed` when a fan-out job gives up — inside the database where exactly one of them can ' +
+            'win. Cancelling a `failed` broadcast is how an operator who will not resume it closes the ' +
+            'record.\n\n' +
+            '⚠ CANCELLING A BROADCAST THAT IS ALREADY `sending` MAY STILL LET ONE IN-FLIGHT BATCH GO ' +
+            'OUT: the fan-out re-checks the status between batches, so up to one chunk\'s worth of ' +
+            `recipients (BROADCAST_CHUNK_SIZE, currently ${broadcast_audience_1.BROADCAST_CHUNK_SIZE}) can already have ` +
+            'been dispatched or be ' +
+            'mid-dispatch when the cancel lands. Cancel stops everything after that point; it cannot ' +
+            'recall what has already been sent.\n\n' +
+            'The row is kept, not deleted — a pulled announcement is exactly what an operator needs ' +
+            'to look up later. Queued job rows are also left alone: deleting them would race a ' +
+            'worker claiming one, the handlers\' status checks are the durable gate, and the rows are ' +
+            'the audit history of what the fan-out actually did.',
+    }),
+    (0, swagger_1.ApiParam)({ name: 'id', type: String, format: 'uuid' }),
+    (0, swagger_1.ApiResponse)({ status: 200, description: 'The cancelled broadcast', type: broadcast_response_dto_1.BroadcastDto }),
+    (0, swagger_1.ApiResponse)({ status: 404, description: 'Broadcast not found' }),
+    (0, swagger_1.ApiResponse)({
+        status: 409,
+        description: 'The broadcast is not scheduled, sending or failed',
+    }),
+    __param(0, (0, common_1.Param)('id', common_1.ParseUUIDPipe)),
+    __param(1, (0, index_1.CurrentUser)('id')),
+    __param(2, BroadcastCallerParam()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, String, Object]),
+    __metadata("design:returntype", Promise)
+], BroadcastsController.prototype, "cancel", null);
+__decorate([
+    (0, common_1.Post)(':id/resume'),
+    (0, index_1.Auth)({ anyPermissions: WRITE }),
+    (0, common_1.HttpCode)(common_1.HttpStatus.OK),
+    (0, swagger_1.ApiOperation)({
+        summary: 'Resume a failed broadcast',
+        description: 'Continues a `failed` broadcast from where its fan-out stopped. A broadcast becomes ' +
+            '`failed` when one of its fan-out jobs gives up permanently (its attempt or rate-limit ' +
+            'budget is spent); `lastError` says which job and why. Resume flips it back to `sending`, ' +
+            'clears `lastError` and `finishedAt`, and queues a fresh chunk job that pages from the ' +
+            'persisted cursor — recipients already reached are not sent to again, except that up to ' +
+            `one chunk (BROADCAST_CHUNK_SIZE, currently ${broadcast_audience_1.BROADCAST_CHUNK_SIZE}) may be re-sent if ` +
+            'the failed page had partly gone out. `recipientsDispatched` is cumulative and is kept.\n\n' +
+            'Refused with 409 for any status other than `failed`. Retrying the failed chunk job from ' +
+            'the Jobs page does NOT resume the broadcast — the chunk sees `failed` and sends nothing; ' +
+            'use this route. If the chunk job cannot be queued the broadcast is returned to `failed` ' +
+            'with the reason in `lastError` and the request fails.',
+    }),
+    (0, swagger_1.ApiParam)({ name: 'id', type: String, format: 'uuid' }),
+    (0, swagger_1.ApiResponse)({ status: 200, description: 'The resumed broadcast', type: broadcast_response_dto_1.BroadcastDto }),
+    (0, swagger_1.ApiResponse)({ status: 404, description: 'Broadcast not found' }),
+    (0, swagger_1.ApiResponse)({ status: 409, description: 'The broadcast is not failed' }),
+    __param(0, (0, common_1.Param)('id', common_1.ParseUUIDPipe)),
+    __param(1, (0, index_1.CurrentUser)('id')),
+    __param(2, BroadcastCallerParam()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, String, Object]),
+    __metadata("design:returntype", Promise)
+], BroadcastsController.prototype, "resume", null);
+__decorate([
+    (0, common_1.Delete)(':id'),
+    (0, index_1.Auth)({ anyPermissions: WRITE }),
+    (0, common_1.HttpCode)(common_1.HttpStatus.NO_CONTENT),
+    (0, swagger_1.ApiOperation)({
+        summary: 'Delete a broadcast',
+        description: 'Removes the record. Refused with 409 while the broadcast is `sending`: deleting the row ' +
+            'would not stop the fan-out, which would then keep running against a record that no ' +
+            'longer exists. Cancel it first. A `scheduled`, `sent`, `canceled` or `failed` broadcast ' +
+            'can be deleted; a queued start job for a deleted broadcast is a harmless no-op when it ' +
+            'is eventually claimed.',
+    }),
+    (0, swagger_1.ApiParam)({ name: 'id', type: String, format: 'uuid' }),
+    (0, swagger_1.ApiResponse)({ status: 204, description: 'Broadcast deleted' }),
+    (0, swagger_1.ApiResponse)({ status: 404, description: 'Broadcast not found' }),
+    (0, swagger_1.ApiResponse)({ status: 409, description: 'The broadcast is currently sending' }),
+    __param(0, (0, common_1.Param)('id', common_1.ParseUUIDPipe)),
+    __param(1, (0, index_1.CurrentUser)('id')),
+    __param(2, BroadcastCallerParam()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, String, Object]),
+    __metadata("design:returntype", Promise)
+], BroadcastsController.prototype, "remove", null);
+exports.BroadcastsController = BroadcastsController = __decorate([
+    (0, swagger_1.ApiTags)('Notification Broadcasts'),
+    (0, common_1.Controller)('admin/broadcasts'),
+    __metadata("design:paramtypes", [broadcasts_service_1.BroadcastsService])
+], BroadcastsController);
+//# sourceMappingURL=broadcasts.controller.js.map

package/dist/notifications/broadcasts/broadcasts.controller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"broadcasts.controller.js","sourceRoot":"","sources":["../../../src/notifications/broadcasts/broadcasts.controller.ts"],"names":[],"mappings":";AAAA,gFAAgF;AAChF,qDAAqD;AACrD,gFAAgF;AAChF,EAAE;AACF,+EAA+E;AAC/E,iEAAiE;AACjE,4EAA4E;AAC5E,iEAAiE;AACjE,EAAE;AACF,2EAA2E;AAC3E,yEAAyE;AACzE,wEAAwE;AACxE,4EAA4E;AAC5E,oCAAoC;AACpC,EAAE;AACF,gFAAgF;AAChF,4EAA4E;AAC5E,gFAAgF;AAChF,EAAE;AACF,0EAA0E;AAC1E,6EAA6E;AAC7E,qEAAqE;AACrE,6EAA6E;AAC7E,6EAA6E;AAC7E,6EAA6E;AAC7E,2EAA2E;AAC3E,4EAA4E;AAC5E,EAAE;AACF,2EAA2E;AAC3E,8EAA8E;AAC9E,wGAAwG;AACxG,6EAA6E;AAC7E,wEAAwE;AACxE,EAAE;AACF,gFAAgF;AAChF,8CAA8C;AAC9C,gFAAgF;AAChF,EAAE;AACF,gFAAgF;AAChF,qFAAqF;AACrF,+EAA+E;AAC/E,+EAA+E;AAC/E,8EAA8E;AAC9E,yEAAyE;AACzE,EAAE;AACF,6EAA6E;AAC7E,+EAA+E;AAC/E,6EAA6E;AAC7E,EAAE;AACF,gFAAgF;AAChF,uDAAuD;AACvD,gFAAgF;AAChF,EAAE;AACF,6EAA6E;AAC7E,2EAA2E;AAC3E,2EAA2E;AAC3E,0EAA0E;AAC1E,2EAA2E;AAC3E,8EAA8E;AAC9E,wEAAwE;AACxE,4EAA4E;AAC5E,wEAAwE;AACxE,6DAA6D;AAC7D,gFAAgF;;;;;;;;;;;;;;;AAEhF,2CAcwB;AACxB,6CAAyF;AAEzF,gDAAqF;AACrF,wEAAyD;AACzD,4CAAmD;AACnD,6DAA4D;AAC5D,6DAA8E;AAC9E,6EAAuE;AACvE,yEAQsC;AACtC,qEAAkF;AAQlF,MAAM,oBAAoB,GAAG,IAAA,6BAAoB,EAAC,CAAC,KAAc,EAAE,GAAqB,EAAmB,EAAE;IAC3G,MAAM,OAAO,GAAG,GAAG,CAAC,YAAY,EAAE,CAAC,UAAU,EAAE,CAAC;IAChD,MAAM,WAAW,GACf,IAAA,mBAAW,EAAC,OAAO,CAAC,EAAE,WAAW,IAAK,OAAO,CAAC,IAA+C,EAAE,WAAW,IAAI,EAAE,CAAC;IACnH,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,IAAA,qBAAa,EAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC;AAChE,CAAC,CAAC,CAAC;AAEH;;;;GAIG;AACH,SAAS,OAAO,CAAC,MAAuB,EAAE,MAAwB;IAChE,MAAM,MAAM,GAAG,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,qCAAW,CAAC,eAAe,CAAC,CAAC,CAAC,qCAAW,CAAC,gBAAgB,CAAC;IAC9F,MAAM,GAAG,GAAG,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,qCAAW,CAAC,mBAAmB,CAAC,CAAC,CAAC,qCAAW,CAAC,oBAAoB,CAAC;IACnG,IAAI,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IACnE,IAAI,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,KAAK;QAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;IAClG,MAAM,IAAI,2BAAkB,CAAC,+BAA+B,MAAM,KAAK,GAAG,gCAAgC,CAAC,CAAC;AAC9G,CAAC;AAED,MAAM,IAAI,GAAG,CAAC,qCAAW,CAAC,eAAe,EAAE,qCAAW,CAAC,mBAAmB,CAAC,CAAC;AAC5E,MAAM,KAAK,GAAG,CAAC,qCAAW,CAAC,gBAAgB,EAAE,qCAAW,CAAC,oBAAoB,CAAC,CAAC;AAE/E;;;;;;;;GAQG;AAGI,IAAM,oBAAoB,GAA1B,MAAM,oBAAoB;IACF;IAA7B,YAA6B,UAA6B;QAA7B,eAAU,GAAV,UAAU,CAAmB;IAAG,CAAC;IAE9D,4EAA4E;IAC5E,qEAAqE;IACrE,4EAA4E;IAyBtE,AAAN,KAAK,CAAC,QAAQ,CACH,KAAgC,EACjB,MAAuB;QAE/C,OAAO,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC;IAC9E,CAAC;IAkBK,AAAN,KAAK,CAAC,IAAI,CACA,GAAqB,EACV,WAAmB,EACd,MAAuB;QAE/C,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACzB,OAAO,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IACpD,CAAC;IAeK,AAAN,KAAK,CAAC,IAAI,CACC,KAA4B,EACb,MAAuB;QAE/C,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAC9D,CAAC;IAoBK,AAAN,KAAK,CAAC,MAAM,CACF,GAAuB,EACZ,WAAmB,EACd,MAAuB;QAE/C,OAAO,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,GAAG,EAAE,WAAW,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAC5E,CAAC;IAED,4EAA4E;IAC5E,yEAAyE;IACzE,4EAA4E;IAiBtE,AAAN,KAAK,CAAC,GAAG,CACqB,EAAU,EACd,MAAuB;QAE/C,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,EAAE,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAC1D,CAAC;IAgCK,AAAN,KAAK,CAAC,MAAM,CACkB,EAAU,EACnB,WAAmB,EACd,MAAuB;QAE/C,OAAO,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,EAAE,WAAW,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAC3E,CAAC;IAwBK,AAAN,KAAK,CAAC,MAAM,CACkB,EAAU,EACnB,WAAmB,EACd,MAAuB;QAE/C,OAAO,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,EAAE,WAAW,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAC3E,CAAC;IAkBK,AAAN,KAAK,CAAC,MAAM,CACkB,EAAU,EACnB,WAAmB,EACd,MAAuB;QAE/C,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,EAAE,WAAW,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAC1E,CAAC;CACF,CAAA;AAjOY,oDAAoB;AA8BzB;IAvBL,IAAA,YAAG,EAAC,UAAU,CAAC;IACf,IAAA,YAAI,EAAC,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC;IAC9B,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,yCAAyC;QAClD,WAAW,EACT,0FAA0F;YAC1F,yFAAyF;YACzF,yFAAyF;YACzF,oFAAoF;YACpF,oFAAoF;KACvF,CAAC;IACD,IAAA,kBAAQ,EAAC;QACR,IAAI,EAAE,aAAa;QACnB,QAAQ,EAAE,KAAK;QACf,IAAI,EAAE,MAAM;QACZ,MAAM,EAAE,MAAM;QACd,WAAW,EACT,qFAAqF;YACrF,gGAAgG;YAChG,6CAA6C;KAChD,CAAC;IACD,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,uBAAuB,EAAE,IAAI,EAAE,6CAAoB,EAAE,CAAC;IAC9F,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,0DAA0D,EAAE,CAAC;IAEnG,WAAA,IAAA,cAAK,GAAE,CAAA;IACP,WAAA,oBAAoB,EAAE,CAAA;;qCADP,kDAAyB;;oDAI1C;AAkBK;IAhBL,IAAA,aAAI,EAAC,MAAM,CAAC;IACZ,IAAA,YAAI,EAAC,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC;IAC/B,IAAA,iBAAQ,EAAC,mBAAU,CAAC,EAAE,CAAC;IACvB,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,mCAAmC;QAC5C,WAAW,EACT,yFAAyF;YACzF,qFAAqF;YACrF,uFAAuF;YACvF,wFAAwF;YACxF,uFAAuF;YACvF,wFAAwF;YACxF,8EAA8E;KACjF,CAAC;IACD,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,qBAAqB,EAAE,IAAI,EAAE,+CAAsB,EAAE,CAAC;IAC9F,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,kBAAkB,EAAE,CAAC;IAE3D,WAAA,IAAA,aAAI,GAAE,CAAA;IACN,WAAA,IAAA,mBAAW,EAAC,IAAI,CAAC,CAAA;IACjB,WAAA,oBAAoB,EAAE,CAAA;;qCAFV,uCAAgB;;gDAM9B;AAeK;IAbL,IAAA,YAAG,GAAE;IACL,IAAA,YAAI,EAAC,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC;IAC9B,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,iBAAiB;QAC1B,WAAW,EACT,0FAA0F;YAC1F,+EAA+E;YAC/E,0EAA0E;KAC7E,CAAC;IACD,IAAA,kBAAQ,EAAC,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IACzD,IAAA,kBAAQ,EAAC,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,CAAC;IACtF,IAAA,kBAAQ,EAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,2CAAkB,EAAE,CAAC;IACvE,IAAA,uBAAe,EAAC,qCAAY,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,0BAA0B,EAAE,CAAC;IAE5F,WAAA,IAAA,cAAK,GAAE,CAAA;IACP,WAAA,oBAAoB,EAAE,CAAA;;qCADP,gDAAqB;;gDAItC;AAoBK;IAlBL,IAAA,aAAI,GAAE;IACN,IAAA,YAAI,EAAC,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC;IAC/B,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,8BAA8B;QACvC,WAAW,EACT,wFAAwF;YACxF,wFAAwF;YACxF,wFAAwF;YACxF,yFAAyF;YACzF,0FAA0F;YAC1F,oEAAoE;YACpE,yFAAyF;YACzF,uFAAuF;YACvF,yFAAyF;KAC5F,CAAC;IACD,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,sBAAsB,EAAE,IAAI,EAAE,iDAAwB,EAAE,CAAC;IACjG,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,kBAAkB,EAAE,CAAC;IAC7D,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,0DAA0D,EAAE,CAAC;IAEnG,WAAA,IAAA,aAAI,GAAE,CAAA;IACN,WAAA,IAAA,mBAAW,EAAC,IAAI,CAAC,CAAA;IACjB,WAAA,oBAAoB,EAAE,CAAA;;qCAFV,yCAAkB;;kDAKhC;AAqBK;IAfL,IAAA,YAAG,EAAC,KAAK,CAAC;IACV,IAAA,YAAI,EAAC,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC;IAC9B,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,mBAAmB;QAC5B,WAAW,EACT,yFAAyF;YACzF,0FAA0F;YAC1F,0FAA0F;YAC1F,wFAAwF;YACxF,sFAAsF;YACtF,mDAAmD;KACtD,CAAC;IACD,IAAA,kBAAQ,EAAC,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IACtD,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,eAAe,EAAE,IAAI,EAAE,2CAAkB,EAAE,CAAC;IACpF,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,qBAAqB,EAAE,CAAC;IAE9D,WAAA,IAAA,cAAK,EAAC,IAAI,EAAE,sBAAa,CAAC,CAAA;IAC1B,WAAA,oBAAoB,EAAE,CAAA;;;;+CAGxB;AAgCK;IA9BL,IAAA,aAAI,EAAC,YAAY,CAAC;IAClB,IAAA,YAAI,EAAC,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC;IAC/B,IAAA,iBAAQ,EAAC,mBAAU,CAAC,EAAE,CAAC;IACvB,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,mDAAmD;QAC5D,WAAW,EACT,uFAAuF;YACvF,qFAAqF;YACrF,yFAAyF;YACzF,2FAA2F;YAC3F,4FAA4F;YAC5F,aAAa;YACb,0FAA0F;YAC1F,wFAAwF;YACxF,+CAA+C,yCAAoB,qBAAqB;YACxF,wBAAwB;YACxB,0FAA0F;YAC1F,wCAAwC;YACxC,yFAAyF;YACzF,oFAAoF;YACpF,2FAA2F;YAC3F,qDAAqD;KACxD,CAAC;IACD,IAAA,kBAAQ,EAAC,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IACtD,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,yBAAyB,EAAE,IAAI,EAAE,qCAAY,EAAE,CAAC;IACxF,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,qBAAqB,EAAE,CAAC;IAChE,IAAA,qBAAW,EAAC;QACX,MAAM,EAAE,GAAG;QACX,WAAW,EAAE,mDAAmD;KACjE,CAAC;IAEC,WAAA,IAAA,cAAK,EAAC,IAAI,EAAE,sBAAa,CAAC,CAAA;IAC1B,WAAA,IAAA,mBAAW,EAAC,IAAI,CAAC,CAAA;IACjB,WAAA,oBAAoB,EAAE,CAAA;;;;kDAGxB;AAwBK;IAtBL,IAAA,aAAI,EAAC,YAAY,CAAC;IAClB,IAAA,YAAI,EAAC,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC;IAC/B,IAAA,iBAAQ,EAAC,mBAAU,CAAC,EAAE,CAAC;IACvB,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,2BAA2B;QACpC,WAAW,EACT,qFAAqF;YACrF,wFAAwF;YACxF,2FAA2F;YAC3F,wFAAwF;YACxF,yFAAyF;YACzF,8CAA8C,yCAAoB,sBAAsB;YACxF,4FAA4F;YAC5F,0FAA0F;YAC1F,2FAA2F;YAC3F,0FAA0F;YAC1F,uDAAuD;KAC1D,CAAC;IACD,IAAA,kBAAQ,EAAC,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IACtD,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,uBAAuB,EAAE,IAAI,EAAE,qCAAY,EAAE,CAAC;IACtF,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,qBAAqB,EAAE,CAAC;IAChE,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,6BAA6B,EAAE,CAAC;IAEtE,WAAA,IAAA,cAAK,EAAC,IAAI,EAAE,sBAAa,CAAC,CAAA;IAC1B,WAAA,IAAA,mBAAW,EAAC,IAAI,CAAC,CAAA;IACjB,WAAA,oBAAoB,EAAE,CAAA;;;;kDAGxB;AAkBK;IAhBL,IAAA,eAAM,EAAC,KAAK,CAAC;IACb,IAAA,YAAI,EAAC,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC;IAC/B,IAAA,iBAAQ,EAAC,mBAAU,CAAC,UAAU,CAAC;IAC/B,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,oBAAoB;QAC7B,WAAW,EACT,0FAA0F;YAC1F,qFAAqF;YACrF,0FAA0F;YAC1F,yFAAyF;YACzF,wBAAwB;KAC3B,CAAC;IACD,IAAA,kBAAQ,EAAC,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IACtD,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,mBAAmB,EAAE,CAAC;IAC9D,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,qBAAqB,EAAE,CAAC;IAChE,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,oCAAoC,EAAE,CAAC;IAE7E,WAAA,IAAA,cAAK,EAAC,IAAI,EAAE,sBAAa,CAAC,CAAA;IAC1B,WAAA,IAAA,mBAAW,EAAC,IAAI,CAAC,CAAA;IACjB,WAAA,oBAAoB,EAAE,CAAA;;;;kDAGxB;+BAhOU,oBAAoB;IAFhC,IAAA,iBAAO,EAAC,yBAAyB,CAAC;IAClC,IAAA,mBAAU,EAAC,kBAAkB,CAAC;qCAEY,sCAAiB;GAD/C,oBAAoB,CAiOhC"}

package/dist/notifications/broadcasts/broadcasts.module.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Admin broadcasts (#366, #738): `/api/admin/broadcasts`, the audience, the
+ * two fan-out job handlers (`admin.broadcast.start`, `admin.broadcast.chunk`;
+ * permanent type strings) and the failure listener. A static module: it needs
+ * the global `NotificationsModule.forRoot()`, `JobsModule.forRoot()` and
+ * `SettingsModule.forRoot()`, and the core `PLATFORM_PRISMA` port. A broadcast
+ * targets every active user, or (`targetOrgId`) one organization's active
+ * members.
+ *
+ * @example
+ * ```ts
+ * @Module({ imports: [NotificationsModule, BroadcastsModule] })
+ * export class AppModule {}
+ * ```
+ *
+ * @stability experimental
+ */
+export declare class BroadcastsModule {
+}
+//# sourceMappingURL=broadcasts.module.d.ts.map

package/dist/notifications/broadcasts/broadcasts.module.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"broadcasts.module.d.ts","sourceRoot":"","sources":["../../../src/notifications/broadcasts/broadcasts.module.ts"],"names":[],"mappings":"AAkFA;;;;;;;;;;;;;;;;GAgBG;AACH,qBAUa,gBAAgB;CAAG"}

package/dist/notifications/broadcasts/broadcasts.module.js

@@ -0,0 +1,121 @@
+"use strict";
+// =============================================================================
+// Broadcasts module (issue #323, epic #319)
+// =============================================================================
+//
+// The fan-out half of admin broadcasts: the two job handlers and nothing else.
+// Its whole purpose is to be somewhere Nest constructs those handlers, so that
+// their `onModuleInit()` runs and each self-registers with
+// `JobHandlerRegistry`. That single `this.registry.register(this)` line per
+// handler is the entire wiring cost of a new job type — no migration, no enum
+// arm, no `switch` in the worker, no central list of types — and this module
+// is the "add it to your feature module" step from `jobs/handlers/README.md`.
+//
+// THE ADMIN SURFACE, ADDED BY #324: `BroadcastsController` and
+// `BroadcastsService` — `/api/admin/broadcasts` (audience count, test send,
+// list, create, get, cancel, delete — and, since #459, resume). #325 adds the admin page on top of them.
+// The handlers were shipped first, deliberately, in the same spirit as
+// `JobsModule` and `NotificationsModule` being registered in `app.module.ts`
+// before anything used them: a broken DI graph fails at boot, and the
+// handlers' self-registration is exercised on every boot, which is what proves
+// the extension point actually works. The fan-out still costs nothing at
+// runtime — no loop is started and no query is issued until a broadcast job is
+// claimed.
+//
+// THE CONTROLLER AND THE HANDLERS SHARE A MODULE BECAUSE THEY SHARE A FEATURE,
+// not because either needs the other: the controller enqueues a job by TYPE
+// STRING and never touches a handler, and the handlers never see a request.
+// What they genuinely share is `broadcast-audience.ts` — the one predicate the
+// composer's count and the fan-out's paging must not disagree about — and
+// keeping them in one directory is what makes that sharing obvious.
+//
+// A SIBLING OF `NotificationsModule`, NOT PART OF IT. The two are separate on
+// purpose: broadcasts CONSUME the dispatcher through its one public entry
+// point (`NotificationsService.notifyNow`) exactly as `UsersService` and
+// `AllowlistService` consume `notify()`. Folding these providers into
+// `NotificationsModule` would give the fan-out the dispatcher's internals —
+// the channel senders, the delivery service, the store — as constructor
+// candidates, which is precisely the surface that module's barrel comment
+// refuses to export because the preference gate and the `mandatory` override
+// live behind it.
+//
+// WHY EACH IMPORT IS HERE:
+//
+//   - `PrismaModule`  — `notification_broadcasts` and `users`; both handlers.
+//   - `JobsModule`    — `JobHandlerRegistry` (registration) and `JobsService`
+//                       (the chunk chain enqueues its own successor).
+//   - `NotificationsModule` — `NotificationsService.notifyNow`, the ONLY way
+//                       a recipient is reached. It exports that service and
+//                       nothing else, which is the point.
+//   - `SettingsModule` — `SystemSettingsService.getNotificationsPolicy()`, so
+//                       `create` can WARN (never refuse) when `browser` was
+//                       chosen while the deployment-wide kill switch is off.
+//                       Read through the settings service rather than
+//                       `NotificationPolicyService`, which `NotificationsModule`
+//                       deliberately does not export — it exports
+//                       `NotificationsService` and nothing else, and widening
+//                       that for a warning string is not a trade worth making.
+//   - `ConfigModule`  — `appUrl`, for the absolute CTA URL the email layout
+//                       requires. Listed explicitly even though
+//                       `ConfigModule.forRoot({ isGlobal: true })` in
+//                       `app.module.ts` already makes `ConfigService`
+//                       injectable everywhere: an import that states a real
+//                       dependency documents it, and survives the day somebody
+//                       reconsiders `isGlobal`.
+//
+// THE FAILURE LISTENER, ADDED BY #459: `BroadcastFailureListener` subscribes
+// to `JOB_SETTLED_EVENT` and moves a broadcast `sending` -> `failed` when one
+// of its fan-out jobs gives up. No new import is needed for it: `@OnEvent` is
+// wired by `EventEmitterModule.forRoot()` in `app.module.ts`, which is global,
+// and its only dependency is `PrismaService`. It lives here, beside the
+// handlers whose failures it interprets, rather than in `JobsModule` — the
+// queue stays ignorant of what any job's subject means.
+// =============================================================================
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.BroadcastsModule = void 0;
+const common_1 = require("@nestjs/common");
+const config_1 = require("@nestjs/config");
+const broadcasts_controller_1 = require("./broadcasts.controller");
+const broadcast_failure_listener_1 = require("./broadcast-failure.listener");
+const broadcasts_service_1 = require("./broadcasts.service");
+const broadcast_chunk_handler_1 = require("./handlers/broadcast-chunk.handler");
+const broadcast_start_handler_1 = require("./handlers/broadcast-start.handler");
+/**
+ * Admin broadcasts (#366, #738): `/api/admin/broadcasts`, the audience, the
+ * two fan-out job handlers (`admin.broadcast.start`, `admin.broadcast.chunk`;
+ * permanent type strings) and the failure listener. A static module: it needs
+ * the global `NotificationsModule.forRoot()`, `JobsModule.forRoot()` and
+ * `SettingsModule.forRoot()`, and the core `PLATFORM_PRISMA` port. A broadcast
+ * targets every active user, or (`targetOrgId`) one organization's active
+ * members.
+ *
+ * @example
+ * ```ts
+ * @Module({ imports: [NotificationsModule, BroadcastsModule] })
+ * export class AppModule {}
+ * ```
+ *
+ * @stability experimental
+ */
+let BroadcastsModule = class BroadcastsModule {
+};
+exports.BroadcastsModule = BroadcastsModule;
+exports.BroadcastsModule = BroadcastsModule = __decorate([
+    (0, common_1.Module)({
+        imports: [config_1.ConfigModule],
+        controllers: [broadcasts_controller_1.BroadcastsController],
+        providers: [
+            broadcast_start_handler_1.BroadcastStartHandler,
+            broadcast_chunk_handler_1.BroadcastChunkHandler,
+            broadcasts_service_1.BroadcastsService,
+            broadcast_failure_listener_1.BroadcastFailureListener,
+        ],
+    })
+], BroadcastsModule);
+//# sourceMappingURL=broadcasts.module.js.map

package/dist/notifications/broadcasts/broadcasts.module.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"broadcasts.module.js","sourceRoot":"","sources":["../../../src/notifications/broadcasts/broadcasts.module.ts"],"names":[],"mappings":";AAAA,gFAAgF;AAChF,4CAA4C;AAC5C,gFAAgF;AAChF,EAAE;AACF,+EAA+E;AAC/E,+EAA+E;AAC/E,2DAA2D;AAC3D,4EAA4E;AAC5E,8EAA8E;AAC9E,6EAA6E;AAC7E,8EAA8E;AAC9E,EAAE;AACF,+DAA+D;AAC/D,4EAA4E;AAC5E,yGAAyG;AACzG,uEAAuE;AACvE,6EAA6E;AAC7E,sEAAsE;AACtE,+EAA+E;AAC/E,yEAAyE;AACzE,+EAA+E;AAC/E,WAAW;AACX,EAAE;AACF,+EAA+E;AAC/E,4EAA4E;AAC5E,4EAA4E;AAC5E,+EAA+E;AAC/E,0EAA0E;AAC1E,oEAAoE;AACpE,EAAE;AACF,8EAA8E;AAC9E,0EAA0E;AAC1E,yEAAyE;AACzE,sEAAsE;AACtE,4EAA4E;AAC5E,wEAAwE;AACxE,0EAA0E;AAC1E,6EAA6E;AAC7E,kBAAkB;AAClB,EAAE;AACF,2BAA2B;AAC3B,EAAE;AACF,8EAA8E;AAC9E,8EAA8E;AAC9E,sEAAsE;AACtE,6EAA6E;AAC7E,4EAA4E;AAC5E,0DAA0D;AAC1D,8EAA8E;AAC9E,4EAA4E;AAC5E,6EAA6E;AAC7E,sEAAsE;AACtE,iFAAiF;AACjF,kEAAkE;AAClE,8EAA8E;AAC9E,+EAA+E;AAC/E,4EAA4E;AAC5E,gEAAgE;AAChE,sEAAsE;AACtE,sEAAsE;AACtE,4EAA4E;AAC5E,+EAA+E;AAC/E,gDAAgD;AAChD,EAAE;AACF,6EAA6E;AAC7E,8EAA8E;AAC9E,8EAA8E;AAC9E,+EAA+E;AAC/E,wEAAwE;AACxE,2EAA2E;AAC3E,wDAAwD;AACxD,gFAAgF;;;;;;;;;AAEhF,2CAAwC;AACxC,2CAA8C;AAE9C,mEAA+D;AAC/D,6EAAwE;AACxE,6DAAyD;AACzD,gFAA2E;AAC3E,gFAA2E;AAE3E;;;;;;;;;;;;;;;;GAgBG;AAWI,IAAM,gBAAgB,GAAtB,MAAM,gBAAgB;CAAG,CAAA;AAAnB,4CAAgB;2BAAhB,gBAAgB;IAV5B,IAAA,eAAM,EAAC;QACN,OAAO,EAAE,CAAC,qBAAY,CAAC;QACvB,WAAW,EAAE,CAAC,4CAAoB,CAAC;QACnC,SAAS,EAAE;YACT,+CAAqB;YACrB,+CAAqB;YACrB,sCAAiB;YACjB,qDAAwB;SACzB;KACF,CAAC;GACW,gBAAgB,CAAG"}

package/dist/notifications/broadcasts/broadcasts.notifications.d.ts

@@ -0,0 +1,11 @@
+import type { NotificationRegistration } from '../registry/bindings.registry';
+/**
+ * The two broadcast events (`admin.broadcast`, mutable, and
+ * `admin.broadcast_critical`, mandatory) with their email and browser
+ * bindings. Registered by `registerPlatformNotificationChannels`' companion,
+ * the app's notification manifest.
+ *
+ * @stability stable
+ */
+export declare const BROADCASTS_NOTIFICATIONS: readonly NotificationRegistration[];
+//# sourceMappingURL=broadcasts.notifications.d.ts.map

package/dist/notifications/broadcasts/broadcasts.notifications.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"broadcasts.notifications.d.ts","sourceRoot":"","sources":["../../../src/notifications/broadcasts/broadcasts.notifications.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAC;AAgC9E;;;;;;;GAOG;AACH,eAAO,MAAM,wBAAwB,EAAE,SAAS,wBAAwB,EAqCvE,CAAC"}