@marinoscar/platform-web 0.1.0-next.3 → 0.1.0-next.4

package/dist/notifications/ui/NotificationSettings.js

@@ -0,0 +1,466 @@
+import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-runtime";
+/**
+ * The event x channel notification preferences matrix.
+ *
+ * Issue #126, epic #109. Rendered by `pages/UserNotificationsPage.tsx` at
+ * `/settings/notifications`.
+ *
+ * =============================================================================
+ * THE SPARSE ABSENT-KEY CONTRACT — READ THIS BEFORE CHANGING ANYTHING HERE
+ * =============================================================================
+ *
+ * The stored document is `user_settings.value.notifications`, channel-outer:
+ *
+ *     \{ email: \{ 'user.welcome': false \}, browser: \{ ... \} \}
+ *
+ * A key is present ONLY where the user deliberately chose. Absent — at the
+ * namespace, the channel, or the event level — means "use the registry's
+ * `defaultEnabled`", resolved at read time by the API
+ * (`notifications/notification-preferences.ts`). Three properties depend on
+ * that, and each breaks in a way nobody notices for weeks:
+ *
+ *   1. NO MIGRATION, NO BACKFILL. The feature shipped by reading a key that
+ *      does not exist for anybody.
+ *   2. NOBODY IS MUTED ON ARRIVAL. Every pre-existing account has no
+ *      `notifications` namespace at all; if absent meant "off", the framework
+ *      would ship silent for the entire user base, and the only symptom would
+ *      be mail nobody receives — a failure with no error anywhere.
+ *   3. AN EVENT ADDED LATER IS OPT-OUT, NOT SILENTLY OFF. A user who saved a
+ *      preference today has a stored map that says nothing about an event
+ *      declared next year; absent-means-default gives them that event's
+ *      intended default, where a materialised blob would give them "not in my
+ *      map, therefore off".
+ *
+ * THREE RULES THIS FILE ENFORCES, EACH THE PRECISE OPPOSITE OF THE OBVIOUS
+ * IMPLEMENTATION:
+ *
+ *   A. EVERY CONTROL DERIVES ITS STATE (see `isEventChannelEnabled`) from the
+ *      fetched preferences compared against the registry's `defaultEnabled`.
+ *      There is NO local `Record<event, boolean>` state in this component, and
+ *      there must never be one. The moment a defaulted local object exists, the
+ *      first save serialises it and materialises every key in it.
+ *
+ *   B. NEVER WRITE A FULL PREFERENCES OBJECT — not on mount, not on first
+ *      change. Each toggle emits exactly the one `(channel, event, value)` it
+ *      changed and the page PATCHes that single key; the API deep-merges per
+ *      event, so everything else stays absent.
+ *
+ *   C. RETURNING A CONTROL TO ITS DEFAULT SENDS A NULL-DELETE (see
+ *      `preferenceWriteFor`), never the default value. Writing the default
+ *      explicitly works today, and it opts that user in permanently: the key is
+ *      materialised, the blob grows for no reason, and if the default ever
+ *      changes that user is frozen at the old one with nothing to show why.
+ *
+ * NO SAVE BUTTON, DELIBERATELY. A batched save needs a full local mirror to
+ * diff against, which is exactly the shape that ends up POSTing a materialised
+ * object — rule A and rule B fall together the moment a Save button appears.
+ * Every toggle is its own PATCH and its own snackbar.
+ *
+ * =============================================================================
+ * RESPONSIVE WITHOUT A BREAKPOINT GATE
+ * =============================================================================
+ *
+ * There is no `useMediaQuery` here and no `display: { xs, sm }` switch between
+ * two layouts. `CLAUDE.md` names five coupled breakpoint gates that move
+ * together or not at all (`Layout.tsx`'s `showRail`, `BottomNav`'s self-gate,
+ * `<main>`'s padding, and `isCompactWindow` in both `SettingsHub.tsx` and
+ * `AppBar.tsx`); a sixth gate here would be a sixth thing to keep in lockstep
+ * for no gain.
+ *
+ * Instead each row is ONE flex container that wraps: the event's label and
+ * description take the left, the channel switches the right, and on a narrow
+ * viewport the switches simply flow underneath. Every switch carries its own
+ * visible channel label, so the matrix is self-describing at every width — no
+ * column header row that has to survive being wrapped away, which is precisely
+ * where a table layout breaks down in a 320px drill-down.
+ */
+import { useId } from 'react';
+import { Alert, AlertTitle, Box, Button, Card, CardContent, Chip, CircularProgress, Divider, FormControlLabel, Switch, Typography, } from '@mui/material';
+import LockIcon from '@mui/icons-material/Lock';
+import { AddToHomeScreenPanel } from './AddToHomeScreenPanel.js';
+// =============================================================================
+// Derivation — the pure half, exported so it can be reasoned about and tested
+// without a DOM.
+// =============================================================================
+/**
+ * Is this event enabled on this channel, for this user?
+ *
+ * THE MIRROR OF THE API'S `isChannelEnabled`, function for function, including
+ * the order of its checks — `mandatory` first, then the three-level fallback.
+ * Two implementations of one rule is a drift risk, and it is accepted here for
+ * one reason: the alternative is a per-user "resolved preferences" endpoint,
+ * i.e. the server materialising exactly the defaulted object this whole design
+ * refuses to store. The UI reads the raw sparse document and applies the same
+ * rule; the SERVER's copy remains the only one that decides delivery, so a
+ * drift shows as a wrong checkbox, never as a wrong send.
+ *
+ * `mandatory` is checked BEFORE the stored value, so a preference row that
+ * disables a mandatory event — one written before the event became mandatory,
+ * or by a crafted PATCH — renders as ON, which is what the user will actually
+ * receive. Rendering the stored `false` there would be an honest reading of the
+ * document and a lie about the behaviour.
+ *
+ * @param preferences - the raw stored namespace, or `undefined` when the user has
+ *                    never saved a preference — the single most common case.
+ */
+export function isEventChannelEnabled(event, channel, preferences) {
+    if (event.mandatory)
+        return true;
+    const channelPrefs = preferences?.[channel];
+    // Level 1: no namespace, or nothing stored for this channel.
+    if (!channelPrefs)
+        return event.defaultEnabled;
+    // Level 2: `hasOwnProperty`, never `channelPrefs[key] !== undefined` and
+    // never a truthiness test. A stored `false` is a real, deliberate choice and
+    // must not collapse into "absent"; and an own-property check is also what
+    // keeps an event key like `constructor` or `toString` from resolving to a
+    // function off `Object.prototype`. This object came out of a user-writable
+    // JSONB column, so that is not hypothetical.
+    if (!Object.prototype.hasOwnProperty.call(channelPrefs, event.key)) {
+        return event.defaultEnabled;
+    }
+    // Level 3: honour it only if it is a boolean. Anything else was not written
+    // by this system, so it is not a choice this system will honour.
+    const choice = channelPrefs[event.key];
+    return typeof choice === 'boolean' ? choice : event.defaultEnabled;
+}
+/**
+ * What to send for a control the user has just moved to `nextEnabled`.
+ *
+ * `null` is a JSON Merge Patch DELETE and is the WHOLE POINT of this function:
+ * when the new state equals the registry default, the correct write is to
+ * remove the key and return the user to "no opinion", not to pin today's
+ * default into their document. See rule C in the file header.
+ *
+ * Both directions matter, which is why this compares against `defaultEnabled`
+ * rather than special-casing "re-enabling":
+ *   * default `true`, user muted it, user un-mutes  -\> next `true`  -\> DELETE
+ *   * default `false`, user opted in, user opts out -\> next `false` -\> DELETE
+ * and a first, non-default change stores the explicit boolean.
+ */
+export function preferenceWriteFor(event, nextEnabled) {
+    return nextEnabled === event.defaultEnabled ? null : nextEnabled;
+}
+// =============================================================================
+// Channel presentation
+// =============================================================================
+/**
+ * The visible label of a channel: the label the API's channel registry gave it
+ * (`GET /api/notifications/channels`), or the raw id while the descriptors are
+ * not known. The bundle holds no label of its own: a newer server can register
+ * a channel this build has never heard of (the registry is server-owned, which
+ * is the entire point of fetching it rather than mirroring it), and an app's
+ * own channel needs no edit here to be drawn. Falling back to the raw id puts a
+ * legible, if plain, label on a live control rather than an empty one.
+ */
+function channelLabel(channel, descriptors) {
+    return descriptors?.find((descriptor) => descriptor.id === channel)?.label ?? channel;
+}
+/**
+ * How the browser column must behave for a given CAPABILITY state.
+ *
+ * SEPARATED FROM THE JSX so the honest answer to "what does `denied` do?" is
+ * one readable table rather than eight ternaries spread through a render, and
+ * so the copy is assertable without a DOM. #126 wrote this over the 4-state
+ * permission; #221 widened it to `NotificationCapability`, and the widening is
+ * the whole point:
+ *
+ *   EVERY ARM MUST NAME A DIFFERENT THING TO DO.
+ *
+ * That is the rule this function exists to keep. Before #221 an iOS Safari tab,
+ * a plain-HTTP origin and a browser from 2011 all rendered the identical "not
+ * supported by this browser" — one of which is a lie, one of which blames the
+ * wrong party, and none of which tells the user the fix. If a new state is
+ * added here and its copy could be swapped with another arm's without anyone
+ * noticing, the state is not pulling its weight and should not exist.
+ *
+ * `disabled` is true only where the app genuinely cannot deliver AND cannot
+ * recover — a control that looks live but can never take effect is worse than
+ * one that explains itself:
+ *   * `admin-disabled`   — the server will not send on this channel at all.
+ *   * `insecure-context` — the API cannot exist over plain HTTP.
+ *   * `unsupported`      — no `Notification` API at all. Nothing to configure.
+ *   * `denied`           — the browser refused; nothing this application does
+ *                          can undo that, only the user in their browser's site
+ *                          settings.
+ *   * `ios-needs-install`— nothing to configure until the app is installed;
+ *                          iOS does not even offer a permission before then.
+ *   * `sw-unavailable`   — NOT disabled. Degraded, not blocked, and reached
+ *                          only with permission ALREADY GRANTED: the page-level
+ *                          `Notification` fallback may still deliver, and a
+ *                          stored preference is still meaningful. A warning
+ *                          explains the risk; a disabled control would overstate
+ *                          it, and copy that told the user to enable something
+ *                          would be addressing a step they have already taken.
+ *   * `default`          — NOT disabled. The permission has not been asked for
+ *                          yet, and the stored preference is still meaningful:
+ *                          it is what takes effect the moment permission is
+ *                          granted. Disabling it would force the user to grant
+ *                          permission before they are allowed to express an
+ *                          opinion, which is backwards.
+ *   * `granted`          — nothing to say.
+ */
+export function browserChannelState(capability) {
+    switch (capability) {
+        case 'granted':
+            return { disabled: false, note: null, alert: null };
+        case 'admin-disabled':
+            return {
+                disabled: true,
+                note: 'Turned off by an administrator',
+                alert: {
+                    // `info`, not `warning`: nothing is broken and nothing is at risk.
+                    // This is a deliberate configuration, and the only useful thing to
+                    // say is that no amount of fiddling on this page will change it.
+                    severity: 'info',
+                    title: 'Browser notifications are turned off for this application',
+                    body: 'An administrator has disabled browser notifications for everyone, ' +
+                        'so nothing you change here will make them appear. Email ' +
+                        'notifications are unaffected. Ask an administrator if you need ' +
+                        'them turned back on.',
+                },
+            };
+        case 'insecure-context':
+            return {
+                disabled: true,
+                note: 'Requires a secure (HTTPS) connection',
+                alert: {
+                    severity: 'warning',
+                    title: 'Notifications need a secure connection',
+                    // NAMES THE localhost EXEMPTION on purpose: in practice the person
+                    // most likely to see this state is a developer running the app over
+                    // plain HTTP on a LAN address, and "use HTTPS" alone reads as
+                    // "impossible locally" when it is not.
+                    body: 'This page is not being served over HTTPS, so your browser will ' +
+                        'not allow notifications here. Open the site over HTTPS to turn ' +
+                        'them on. (localhost counts as secure — a plain http:// address ' +
+                        'on any other host does not.)',
+                },
+            };
+        case 'unsupported':
+            return {
+                disabled: true,
+                note: 'Not supported by this browser',
+                alert: {
+                    severity: 'info',
+                    // NARROWED BY #221. This arm used to absorb iOS tabs and insecure
+                    // origins, so its copy had to hedge about HTTPS; both now have their
+                    // own state, and this one can say the single true thing that is left.
+                    title: 'This browser cannot show notifications',
+                    body: 'This browser does not provide the notifications API, so there is ' +
+                        'nothing to turn on here. Email notifications are unaffected.',
+                },
+            };
+        case 'ios-needs-install':
+            return {
+                disabled: true,
+                note: 'Add to Home Screen to enable',
+                alert: {
+                    severity: 'info',
+                    title: 'Add this app to your Home Screen',
+                    // DELIBERATELY SHORT. #231 adds the illustrated step-by-step panel;
+                    // this is the inline note that has to be right on its own until then,
+                    // and the one thing it must not do is repeat the old lie that the
+                    // browser is incapable.
+                    body: 'On iPhone and iPad, notifications work only for a web app added ' +
+                        'to the Home Screen. In Safari, tap the Share button, choose "Add ' +
+                        'to Home Screen", then open the app from there and allow ' +
+                        'notifications.',
+                },
+            };
+        case 'sw-unavailable':
+            return {
+                // NOT DISABLED — degraded, not blocked. See the header above.
+                disabled: false,
+                note: 'Allowed, but delivery may be limited',
+                alert: {
+                    severity: 'warning',
+                    // THE COPY MUST NOT READ AS "YOU CANNOT ENABLE THESE". Permission is
+                    // already granted in this state — the capability hook only reports it
+                    // for a granted device (see `useNotificationCapability`'s header) —
+                    // so the user has done everything asked of them and the remaining
+                    // problem is ours, not theirs.
+                    title: 'Notifications are on, but may not always arrive',
+                    body: 'You have allowed browser notifications, but the background ' +
+                        'service worker did not register, so some may not appear — on ' +
+                        'Android in particular it is the only way they can be shown. ' +
+                        'Reloading the page usually fixes it, and everything still ' +
+                        'arrives in the notification centre either way.',
+                },
+            };
+        case 'denied':
+            return {
+                disabled: true,
+                note: 'Blocked by your browser',
+                alert: {
+                    severity: 'warning',
+                    title: 'Browser notifications are blocked',
+                    // Names the remedy AND who owns it. This application cannot re-ask
+                    // for a permission the user has denied, so telling them to "try
+                    // again here" would be a lie.
+                    //
+                    // PER-PLATFORM, because "allow it in your browser settings" is a
+                    // remedy nobody can follow: the control is in a different place in
+                    // every browser and is nowhere near anything labelled "settings" in
+                    // two of the three. Newlines render as a list (see `alert.body`).
+                    body: 'Your browser is blocking notifications from this site, so these ' +
+                        'preferences cannot take effect. Only you can undo this:\n' +
+                        '• Chrome or Edge: click the icon at the left of the address bar → Notifications → Allow\n' +
+                        '• Firefox: click the padlock in the address bar → Clear the blocked notifications permission\n' +
+                        '• Safari: Settings → Websites → Notifications → allow this site',
+                },
+            };
+        case 'default':
+        default:
+            return {
+                disabled: false,
+                note: 'Permission not granted yet',
+                alert: {
+                    severity: 'info',
+                    title: 'Browser notifications need your permission',
+                    body: 'Your browser has not been asked for permission yet, so these ' +
+                        'notifications will not appear until you allow them. Your choices ' +
+                        'here are saved and take effect as soon as permission is granted.',
+                },
+            };
+    }
+}
+/**
+ * How the push column must behave.
+ *
+ * `pushEnabled` is `GET /api/notifications/config`'s `pushEnabled` — `true`
+ * once an administrator has generated and enabled VAPID keys (#355).
+ *
+ *   * `pushEnabled === false` — disabled, "not available". Phrased as a
+ *                     deployment setting, never as a browser refusal: the
+ *                     user cannot fix it, and blaming their browser would
+ *                     send them looking for a setting that does not exist.
+ *   * `pushEnabled === true`  — never disabled: the preference is per ACCOUNT
+ *                     and applies on every device. When THIS device has not
+ *                     granted permission (`browserCapability` is anything but
+ *                     `granted`/`sw-unavailable`), the row says so in a note;
+ *                     the remedy lives in the browser banner and the app-wide
+ *                     banner, so there is no second alert here.
+ */
+export function pushChannelState(pushEnabled, browserCapability) {
+    if (pushEnabled) {
+        const deviceReady = browserCapability === undefined ||
+            browserCapability === 'granted' ||
+            browserCapability === 'sw-unavailable';
+        return {
+            disabled: false,
+            note: deviceReady ? null : 'Not enabled on this device',
+            alert: null,
+        };
+    }
+    return {
+        disabled: true,
+        note: 'Not available yet',
+        alert: {
+            severity: 'info',
+            title: 'Push notifications are not available yet',
+            body: 'Push notifications have not been turned on for this server. ' +
+                'Email and browser notifications are unaffected.',
+        },
+    };
+}
+export function NotificationSettings({ events, preferences, onToggle, isSaving = false, browserCapability, onRequestPermission, isRequestingPermission = false, pushEnabled = false, channels: channelDescriptors, channelStates: extraChannelStates, }) {
+    // `useId` rather than interpolating `event.key`: two instances of this
+    // component (or a future second matrix on the page) would otherwise emit
+    // duplicate ids, and a duplicated id silently points every `aria-describedby`
+    // at the first match.
+    const idPrefix = useId();
+    const browser = browserChannelState(browserCapability);
+    const push = pushChannelState(pushEnabled, browserCapability);
+    // ONE LOOKUP, BUILT ONCE PER RENDER, REPLACING A GROWING `isBrowser` /
+    // `isPush` TERNARY CHAIN. With one gated channel the explicit-branch style
+    // the rest of this file favours (see the file header's "READ THIS BEFORE
+    // CHANGING ANYTHING" rules, all written as explicit named checks) still
+    // read fine; with two — and #229/#230 plausibly landing a third kind of
+    // gating later, once real push delivery exists — the ternary chain grows
+    // one branch per channel while this map grows one KEY per channel, in the
+    // same shape every time. `email` is deliberately absent: it is never
+    // gated, so it has no entry, and the per-channel lookups below (`?? false`,
+    // `?? null`) fall through to "nothing to disable, nothing to say" for it
+    // and for any channel a newer server declares that this build has no
+    // `ChannelState` for at all.
+    const channelStates = {
+        push,
+        ...extraChannelStates,
+        browser,
+    };
+    // Only relevant if some event actually declares the channel. Today only
+    // `security.role_changed` declares `browser`, and an event list that
+    // declares none must not show a banner about a column that is not on
+    // screen.
+    const showsBrowserChannel = events.some((event) => event.channels.includes('browser'));
+    // The banners of every other gated channel (push, and any an app supplied in
+    // `channelStates`), by the same rule as `showsBrowserChannel`: a channel's
+    // banner appears only when some registry event declares it. Registration
+    // order of `channelStates`, so push still comes first.
+    const channelBanners = Object.entries(channelStates).filter(([channel, state]) => channel !== 'browser' && state?.alert && events.some((event) => event.channels.includes(channel)));
+    if (events.length === 0) {
+        // A REAL ANSWER, not a loading state — the caller renders a spinner while
+        // the registry is unknown. An empty matrix with no explanation reads as a
+        // page that failed to load.
+        return (_jsx(Alert, { severity: "info", children: "This application does not send any notifications yet." }));
+    }
+    return (_jsx(Card, { children: _jsxs(CardContent, { children: [_jsx(Typography, { variant: "h6", gutterBottom: true, children: "Notifications" }), _jsx(Typography, { variant: "body2", color: "text.secondary", sx: { mb: 2 }, children: "Choose what reaches you, and how. Changes are saved as you make them." }), showsBrowserChannel && browserCapability === 'ios-needs-install' && (_jsx(Box, { sx: { mb: 2 }, children: _jsx(AddToHomeScreenPanel, {}) })), showsBrowserChannel && browserCapability !== 'ios-needs-install' && browser.alert && (_jsxs(Alert, { severity: browser.alert.severity, sx: { mb: 2 }, children: [_jsx(AlertTitle, { children: browser.alert.title }), _jsx(Box, { component: "span", sx: { whiteSpace: 'pre-line' }, children: browser.alert.body }), browserCapability === 'default' && onRequestPermission && (_jsx(Box, { sx: { mt: 1.5 }, children: _jsx(Button, { variant: "outlined", size: "small", onClick: onRequestPermission, disabled: isRequestingPermission, startIcon: isRequestingPermission ? _jsx(CircularProgress, { size: 16 }) : undefined, children: isRequestingPermission ? 'Waiting for your browser…' : 'Allow notifications' }) }))] })), channelBanners.map(([channel, state]) => (_jsxs(Alert, { severity: state.alert.severity, sx: { mb: 2 }, children: [_jsx(AlertTitle, { children: state.alert.title }), state.alert.body] }, channel))), _jsx(Box, { component: "ul", sx: { listStyle: 'none', m: 0, p: 0 }, children: events.map((event, index) => {
+                        const descriptionId = `${idPrefix}-${event.key}-description`;
+                        return (_jsxs(Box, { component: "li", children: [index > 0 && _jsx(Divider, {}), _jsxs(Box, { sx: {
+                                        display: 'flex',
+                                        flexWrap: 'wrap',
+                                        alignItems: 'center',
+                                        justifyContent: 'space-between',
+                                        gap: 1,
+                                        py: 2,
+                                    }, children: [_jsxs(Box, { sx: { flex: '1 1 260px', minWidth: 0 }, children: [_jsxs(Box, { sx: { display: 'flex', alignItems: 'center', gap: 1, flexWrap: 'wrap' }, children: [_jsx(Typography, { variant: "subtitle1", component: "h3", children: event.label }), event.mandatory && (_jsx(Chip, { size: "small", icon: _jsx(LockIcon, { fontSize: "small" }), label: "Always on" }))] }), _jsxs(Typography, { id: descriptionId, variant: "body2", color: "text.secondary", children: [event.description, event.mandatory && (_jsxs(_Fragment, { children: [' ', _jsx(Box, { component: "span", sx: { fontStyle: 'italic' }, children: "This is a security notification and cannot be turned off." })] }))] })] }), _jsx(Box, { sx: {
+                                                display: 'flex',
+                                                flexWrap: 'wrap',
+                                                alignItems: 'flex-start',
+                                                columnGap: 2,
+                                                rowGap: 0.5,
+                                            }, children: event.channels.map((channel) => {
+                                                const checked = isEventChannelEnabled(event, channel, preferences);
+                                                // See `channelStates` above: `email` (and any channel a
+                                                // newer server declares that this build has no
+                                                // `ChannelState` for) has no entry, so both fallbacks
+                                                // below apply — nothing disabled, nothing to note.
+                                                const channelState = channelStates[channel];
+                                                const channelDisabled = channelState?.disabled ?? false;
+                                                const note = channelState?.note ?? null;
+                                                const noteId = note ? `${idPrefix}-${event.key}-${channel}-note` : undefined;
+                                                return (_jsxs(Box, { sx: { display: 'flex', flexDirection: 'column', alignItems: 'flex-start' }, children: [_jsx(FormControlLabel
+                                                        // `mandatory` disables EVERY channel, not "all but
+                                                        // one": the API resolves a mandatory event as
+                                                        // all-or-nothing, so a per-channel opt-out here
+                                                        // would render a choice the server ignores.
+                                                        , { 
+                                                            // `mandatory` disables EVERY channel, not "all but
+                                                            // one": the API resolves a mandatory event as
+                                                            // all-or-nothing, so a per-channel opt-out here
+                                                            // would render a choice the server ignores.
+                                                            disabled: isSaving || event.mandatory || channelDisabled, label: channelLabel(channel, channelDescriptors), control: _jsx(Switch, { checked: checked, onChange: (_e, next) => onToggle(channel, event, preferenceWriteFor(event, next)), 
+                                                                // `slotProps.input`, never `<Switch aria-label>`:
+                                                                // MUI forwards unknown props to the ROOT span,
+                                                                // leaving the element that actually carries
+                                                                // `role="switch"` nameless. Same rule as
+                                                                // `admin/featureFlagColumns.tsx`.
+                                                                //
+                                                                // The name is per ROW as well as per channel —
+                                                                // "Email" alone repeats on every row and gives a
+                                                                // screen-reader user three identically-named
+                                                                // switches with no way to tell them apart.
+                                                                slotProps: {
+                                                                    input: {
+                                                                        'aria-label': `${channelLabel(channel, channelDescriptors)} notifications for ${event.label}`,
+                                                                        'aria-describedby': [descriptionId, noteId]
+                                                                            .filter(Boolean)
+                                                                            .join(' '),
+                                                                    },
+                                                                } }), sx: { mr: 0 } }), note && (_jsx(Typography, { id: noteId, variant: "caption", color: "text.secondary", sx: { ml: 6, mt: -0.5 }, children: note }))] }, channel));
+                                            }) })] })] }, event.key));
+                    }) })] }) }));
+}
+export default NotificationSettings;
+//# sourceMappingURL=NotificationSettings.js.map

package/dist/notifications/ui/NotificationSettings.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"NotificationSettings.js","sourceRoot":"","sources":["../../../src/notifications/ui/NotificationSettings.tsx"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0EG;AAEH,OAAO,EAAE,KAAK,EAAE,MAAM,OAAO,CAAC;AAC9B,OAAO,EACL,KAAK,EACL,UAAU,EACV,GAAG,EACH,MAAM,EACN,IAAI,EACJ,WAAW,EACX,IAAI,EACJ,gBAAgB,EAChB,OAAO,EACP,gBAAgB,EAChB,MAAM,EACN,UAAU,GACX,MAAM,eAAe,CAAC;AACvB,OAAO,QAAQ,MAAM,0BAA0B,CAAC;AAQhD,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AAEjE,gFAAgF;AAChF,8EAA8E;AAC9E,iBAAiB;AACjB,gFAAgF;AAEhF;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,UAAU,qBAAqB,CACnC,KAA2B,EAC3B,OAA4B,EAC5B,WAAgD;IAEhD,IAAI,KAAK,CAAC,SAAS;QAAE,OAAO,IAAI,CAAC;IAEjC,MAAM,YAAY,GAAG,WAAW,EAAE,CAAC,OAAO,CAAC,CAAC;IAC5C,6DAA6D;IAC7D,IAAI,CAAC,YAAY;QAAE,OAAO,KAAK,CAAC,cAAc,CAAC;IAE/C,yEAAyE;IACzE,6EAA6E;IAC7E,0EAA0E;IAC1E,0EAA0E;IAC1E,2EAA2E;IAC3E,6CAA6C;IAC7C,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,YAAY,EAAE,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACnE,OAAO,KAAK,CAAC,cAAc,CAAC;IAC9B,CAAC;IAED,4EAA4E;IAC5E,iEAAiE;IACjE,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACvC,OAAO,OAAO,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC;AACrE,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,kBAAkB,CAChC,KAA2B,EAC3B,WAAoB;IAEpB,OAAO,WAAW,KAAK,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC;AACnE,CAAC;AAED,gFAAgF;AAChF,uBAAuB;AACvB,gFAAgF;AAEhF;;;;;;;;GAQG;AACH,SAAS,YAAY,CACnB,OAA4B,EAC5B,WAAiE;IAEjE,OAAO,WAAW,EAAE,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,EAAE,KAAK,OAAO,CAAC,EAAE,KAAK,IAAI,OAAO,CAAC;AACxF,CAAC;AA+CD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;AACH,MAAM,UAAU,mBAAmB,CACjC,UAAkC;IAElC,QAAQ,UAAU,EAAE,CAAC;QACnB,KAAK,SAAS;YACZ,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QAEtD,KAAK,gBAAgB;YACnB,OAAO;gBACL,QAAQ,EAAE,IAAI;gBACd,IAAI,EAAE,gCAAgC;gBACtC,KAAK,EAAE;oBACL,mEAAmE;oBACnE,mEAAmE;oBACnE,iEAAiE;oBACjE,QAAQ,EAAE,MAAM;oBAChB,KAAK,EAAE,2DAA2D;oBAClE,IAAI,EACF,oEAAoE;wBACpE,0DAA0D;wBAC1D,iEAAiE;wBACjE,sBAAsB;iBACzB;aACF,CAAC;QAEJ,KAAK,kBAAkB;YACrB,OAAO;gBACL,QAAQ,EAAE,IAAI;gBACd,IAAI,EAAE,sCAAsC;gBAC5C,KAAK,EAAE;oBACL,QAAQ,EAAE,SAAS;oBACnB,KAAK,EAAE,wCAAwC;oBAC/C,mEAAmE;oBACnE,oEAAoE;oBACpE,8DAA8D;oBAC9D,uCAAuC;oBACvC,IAAI,EACF,iEAAiE;wBACjE,iEAAiE;wBACjE,iEAAiE;wBACjE,8BAA8B;iBACjC;aACF,CAAC;QAEJ,KAAK,aAAa;YAChB,OAAO;gBACL,QAAQ,EAAE,IAAI;gBACd,IAAI,EAAE,+BAA+B;gBACrC,KAAK,EAAE;oBACL,QAAQ,EAAE,MAAM;oBAChB,kEAAkE;oBAClE,qEAAqE;oBACrE,sEAAsE;oBACtE,KAAK,EAAE,wCAAwC;oBAC/C,IAAI,EACF,mEAAmE;wBACnE,8DAA8D;iBACjE;aACF,CAAC;QAEJ,KAAK,mBAAmB;YACtB,OAAO;gBACL,QAAQ,EAAE,IAAI;gBACd,IAAI,EAAE,8BAA8B;gBACpC,KAAK,EAAE;oBACL,QAAQ,EAAE,MAAM;oBAChB,KAAK,EAAE,kCAAkC;oBACzC,oEAAoE;oBACpE,sEAAsE;oBACtE,kEAAkE;oBAClE,wBAAwB;oBACxB,IAAI,EACF,kEAAkE;wBAClE,mEAAmE;wBACnE,0DAA0D;wBAC1D,gBAAgB;iBACnB;aACF,CAAC;QAEJ,KAAK,gBAAgB;YACnB,OAAO;gBACL,8DAA8D;gBAC9D,QAAQ,EAAE,KAAK;gBACf,IAAI,EAAE,sCAAsC;gBAC5C,KAAK,EAAE;oBACL,QAAQ,EAAE,SAAS;oBACnB,qEAAqE;oBACrE,sEAAsE;oBACtE,oEAAoE;oBACpE,kEAAkE;oBAClE,+BAA+B;oBAC/B,KAAK,EAAE,iDAAiD;oBACxD,IAAI,EACF,6DAA6D;wBAC7D,+DAA+D;wBAC/D,8DAA8D;wBAC9D,4DAA4D;wBAC5D,gDAAgD;iBACnD;aACF,CAAC;QAEJ,KAAK,QAAQ;YACX,OAAO;gBACL,QAAQ,EAAE,IAAI;gBACd,IAAI,EAAE,yBAAyB;gBAC/B,KAAK,EAAE;oBACL,QAAQ,EAAE,SAAS;oBACnB,KAAK,EAAE,mCAAmC;oBAC1C,mEAAmE;oBACnE,gEAAgE;oBAChE,8BAA8B;oBAC9B,EAAE;oBACF,iEAAiE;oBACjE,mEAAmE;oBACnE,oEAAoE;oBACpE,kEAAkE;oBAClE,IAAI,EACF,kEAAkE;wBAClE,2DAA2D;wBAC3D,2FAA2F;wBAC3F,gGAAgG;wBAChG,iEAAiE;iBACpE;aACF,CAAC;QAEJ,KAAK,SAAS,CAAC;QACf;YACE,OAAO;gBACL,QAAQ,EAAE,KAAK;gBACf,IAAI,EAAE,4BAA4B;gBAClC,KAAK,EAAE;oBACL,QAAQ,EAAE,MAAM;oBAChB,KAAK,EAAE,4CAA4C;oBACnD,IAAI,EACF,+DAA+D;wBAC/D,mEAAmE;wBACnE,kEAAkE;iBACrE;aACF,CAAC;IACN,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,gBAAgB,CAC9B,WAAoB,EACpB,iBAA0C;IAE1C,IAAI,WAAW,EAAE,CAAC;QAChB,MAAM,WAAW,GACf,iBAAiB,KAAK,SAAS;YAC/B,iBAAiB,KAAK,SAAS;YAC/B,iBAAiB,KAAK,gBAAgB,CAAC;QACzC,OAAO;YACL,QAAQ,EAAE,KAAK;YACf,IAAI,EAAE,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,4BAA4B;YACvD,KAAK,EAAE,IAAI;SACZ,CAAC;IACJ,CAAC;IACD,OAAO;QACL,QAAQ,EAAE,IAAI;QACd,IAAI,EAAE,mBAAmB;QACzB,KAAK,EAAE;YACL,QAAQ,EAAE,MAAM;YAChB,KAAK,EAAE,0CAA0C;YACjD,IAAI,EACF,8DAA8D;gBAC9D,iDAAiD;SACpD;KACF,CAAC;AACJ,CAAC;AAwFD,MAAM,UAAU,oBAAoB,CAAC,EACnC,MAAM,EACN,WAAW,EACX,QAAQ,EACR,QAAQ,GAAG,KAAK,EAChB,iBAAiB,EACjB,mBAAmB,EACnB,sBAAsB,GAAG,KAAK,EAC9B,WAAW,GAAG,KAAK,EACnB,QAAQ,EAAE,kBAAkB,EAC5B,aAAa,EAAE,kBAAkB,GACP;IAC1B,uEAAuE;IACvE,yEAAyE;IACzE,8EAA8E;IAC9E,sBAAsB;IACtB,MAAM,QAAQ,GAAG,KAAK,EAAE,CAAC;IAEzB,MAAM,OAAO,GAAG,mBAAmB,CAAC,iBAAiB,CAAC,CAAC;IACvD,MAAM,IAAI,GAAG,gBAAgB,CAAC,WAAW,EAAE,iBAAiB,CAAC,CAAC;IAE9D,uEAAuE;IACvE,2EAA2E;IAC3E,yEAAyE;IACzE,wEAAwE;IACxE,wEAAwE;IACxE,yEAAyE;IACzE,0EAA0E;IAC1E,qEAAqE;IACrE,4EAA4E;IAC5E,yEAAyE;IACzE,qEAAqE;IACrE,6BAA6B;IAC7B,MAAM,aAAa,GAAuD;QACxE,IAAI;QACJ,GAAG,kBAAkB;QACrB,OAAO;KACR,CAAC;IAEF,wEAAwE;IACxE,qEAAqE;IACrE,qEAAqE;IACrE,UAAU;IACV,MAAM,mBAAmB,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC;IACvF,6EAA6E;IAC7E,2EAA2E;IAC3E,yEAAyE;IACzE,uDAAuD;IACvD,MAAM,cAAc,GAAG,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,MAAM,CACzD,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,EAAE,CACnB,OAAO,KAAK,SAAS,IAAI,KAAK,EAAE,KAAK,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CACN,CAAC;IAEhG,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,0EAA0E;QAC1E,0EAA0E;QAC1E,4BAA4B;QAC5B,OAAO,CACL,KAAC,KAAK,IAAC,QAAQ,EAAC,MAAM,sEAEd,CACT,CAAC;IACJ,CAAC;IAED,OAAO,CACL,KAAC,IAAI,cACH,MAAC,WAAW,eACV,KAAC,UAAU,IAAC,OAAO,EAAC,IAAI,EAAC,YAAY,oCAExB,EACb,KAAC,UAAU,IAAC,OAAO,EAAC,OAAO,EAAC,KAAK,EAAC,gBAAgB,EAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,sFAEnD,EAWZ,mBAAmB,IAAI,iBAAiB,KAAK,mBAAmB,IAAI,CACnE,KAAC,GAAG,IAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,YAChB,KAAC,oBAAoB,KAAG,GACpB,CACP,EAEA,mBAAmB,IAAI,iBAAiB,KAAK,mBAAmB,IAAI,OAAO,CAAC,KAAK,IAAI,CACpF,MAAC,KAAK,IAAC,QAAQ,EAAE,OAAO,CAAC,KAAK,CAAC,QAAQ,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,aACpD,KAAC,UAAU,cAAE,OAAO,CAAC,KAAK,CAAC,KAAK,GAAc,EAO9C,KAAC,GAAG,IAAC,SAAS,EAAC,MAAM,EAAC,EAAE,EAAE,EAAE,UAAU,EAAE,UAAU,EAAE,YACjD,OAAO,CAAC,KAAK,CAAC,IAAI,GACf,EAgDL,iBAAiB,KAAK,SAAS,IAAI,mBAAmB,IAAI,CACzD,KAAC,GAAG,IAAC,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,YAClB,KAAC,MAAM,IACL,OAAO,EAAC,UAAU,EAClB,IAAI,EAAC,OAAO,EACZ,OAAO,EAAE,mBAAmB,EAC5B,QAAQ,EAAE,sBAAsB,EAChC,SAAS,EACP,sBAAsB,CAAC,CAAC,CAAC,KAAC,gBAAgB,IAAC,IAAI,EAAE,EAAE,GAAI,CAAC,CAAC,CAAC,SAAS,YAOpE,sBAAsB,CAAC,CAAC,CAAC,2BAA2B,CAAC,CAAC,CAAC,qBAAqB,GACtE,GACL,CACP,IACK,CACT,EAEA,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CACxC,MAAC,KAAK,IAAe,QAAQ,EAAE,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,aAChE,KAAC,UAAU,cAAE,KAAK,CAAC,KAAK,CAAC,KAAK,GAAc,EAC3C,KAAK,CAAC,KAAK,CAAC,IAAI,KAFP,OAAO,CASX,CACT,CAAC,EAEF,KAAC,GAAG,IAAC,SAAS,EAAC,IAAI,EAAC,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,YACtD,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;wBAC3B,MAAM,aAAa,GAAG,GAAG,QAAQ,IAAI,KAAK,CAAC,GAAG,cAAc,CAAC;wBAE7D,OAAO,CACL,MAAC,GAAG,IAAC,SAAS,EAAC,IAAI,aAChB,KAAK,GAAG,CAAC,IAAI,KAAC,OAAO,KAAG,EAQzB,MAAC,GAAG,IACF,EAAE,EAAE;wCACF,OAAO,EAAE,MAAM;wCACf,QAAQ,EAAE,MAAM;wCAChB,UAAU,EAAE,QAAQ;wCACpB,cAAc,EAAE,eAAe;wCAC/B,GAAG,EAAE,CAAC;wCACN,EAAE,EAAE,CAAC;qCACN,aAED,MAAC,GAAG,IAAC,EAAE,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,CAAC,EAAE,aACzC,MAAC,GAAG,IAAC,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,aAC1E,KAAC,UAAU,IAAC,OAAO,EAAC,WAAW,EAAC,SAAS,EAAC,IAAI,YAC3C,KAAK,CAAC,KAAK,GACD,EACZ,KAAK,CAAC,SAAS,IAAI,CAQlB,KAAC,IAAI,IACH,IAAI,EAAC,OAAO,EACZ,IAAI,EAAE,KAAC,QAAQ,IAAC,QAAQ,EAAC,OAAO,GAAG,EACnC,KAAK,EAAC,WAAW,GACjB,CACH,IACG,EACN,MAAC,UAAU,IAAC,EAAE,EAAE,aAAa,EAAE,OAAO,EAAC,OAAO,EAAC,KAAK,EAAC,gBAAgB,aAClE,KAAK,CAAC,WAAW,EACjB,KAAK,CAAC,SAAS,IAAI,CAClB,8BACG,GAAG,EACJ,KAAC,GAAG,IAAC,SAAS,EAAC,MAAM,EAAC,EAAE,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,0EAE3C,IACL,CACJ,IACU,IACT,EAEN,KAAC,GAAG,IACF,EAAE,EAAE;gDACF,OAAO,EAAE,MAAM;gDACf,QAAQ,EAAE,MAAM;gDAChB,UAAU,EAAE,YAAY;gDACxB,SAAS,EAAE,CAAC;gDACZ,MAAM,EAAE,GAAG;6CACZ,YAQA,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE;gDAC9B,MAAM,OAAO,GAAG,qBAAqB,CAAC,KAAK,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;gDACnE,wDAAwD;gDACxD,+CAA+C;gDAC/C,sDAAsD;gDACtD,mDAAmD;gDACnD,MAAM,YAAY,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;gDAC5C,MAAM,eAAe,GAAG,YAAY,EAAE,QAAQ,IAAI,KAAK,CAAC;gDACxD,MAAM,IAAI,GAAG,YAAY,EAAE,IAAI,IAAI,IAAI,CAAC;gDACxC,MAAM,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,GAAG,QAAQ,IAAI,KAAK,CAAC,GAAG,IAAI,OAAO,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;gDAE7E,OAAO,CACL,MAAC,GAAG,IAEF,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,QAAQ,EAAE,UAAU,EAAE,YAAY,EAAE,aAE1E,KAAC,gBAAgB;wDACf,mDAAmD;wDACnD,8CAA8C;wDAC9C,gDAAgD;wDAChD,4CAA4C;;4DAH5C,mDAAmD;4DACnD,8CAA8C;4DAC9C,gDAAgD;4DAChD,4CAA4C;4DAC5C,QAAQ,EAAE,QAAQ,IAAI,KAAK,CAAC,SAAS,IAAI,eAAe,EACxD,KAAK,EAAE,YAAY,CAAC,OAAO,EAAE,kBAAkB,CAAC,EAChD,OAAO,EACL,KAAC,MAAM,IACL,OAAO,EAAE,OAAO,EAChB,QAAQ,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE,CACrB,QAAQ,CAAC,OAAO,EAAE,KAAK,EAAE,kBAAkB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;gEAE3D,kDAAkD;gEAClD,+CAA+C;gEAC/C,4CAA4C;gEAC5C,yCAAyC;gEACzC,kCAAkC;gEAClC,EAAE;gEACF,+CAA+C;gEAC/C,iDAAiD;gEACjD,6CAA6C;gEAC7C,2CAA2C;gEAC3C,SAAS,EAAE;oEACT,KAAK,EAAE;wEACL,YAAY,EAAE,GAAG,YAAY,CAAC,OAAO,EAAE,kBAAkB,CAAC,sBAAsB,KAAK,CAAC,KAAK,EAAE;wEAC7F,kBAAkB,EAAE,CAAC,aAAa,EAAE,MAAM,CAAC;6EACxC,MAAM,CAAC,OAAO,CAAC;6EACf,IAAI,CAAC,GAAG,CAAC;qEACb;iEACF,GACD,EAEJ,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,GACb,EACD,IAAI,IAAI,CAKP,KAAC,UAAU,IACT,EAAE,EAAE,MAAM,EACV,OAAO,EAAC,SAAS,EACjB,KAAK,EAAC,gBAAgB,EACtB,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,GAAG,EAAE,YAEtB,IAAI,GACM,CACd,KAnDI,OAAO,CAoDR,CACP,CAAC;4CACJ,CAAC,CAAC,GACE,IACF,KAxIiB,KAAK,CAAC,GAAG,CAyI5B,CACP,CAAC;oBACJ,CAAC,CAAC,GACE,IACM,GACT,CACR,CAAC;AACJ,CAAC;AAED,eAAe,oBAAoB,CAAC"}

package/dist/notifications/ui/NotificationSettingsPage.d.ts

@@ -0,0 +1,80 @@
+/**
+ * Admin → Settings → Notifications (`/admin/settings/notifications`).
+ *
+ * Issue #225, epic #215. The `Notifications` card in `config/adminSections.tsx`
+ * routes here, and — per the MANDATORY settings-hub rules in `CLAUDE.md` — that
+ * registry entry is what makes this page reachable from the hub, the Console
+ * rail and the AppBar title resolver at once. It is deliberately NOT a fourth
+ * tab on an existing settings page: a tab gate is about CONTENT within one
+ * destination, and this is a destination of its own.
+ *
+ * NOTHING ENFORCES THESE VALUES YET, AND THAT IS NOT A BUG. #225 adds the
+ * setting, its persistence and this editor. The server-side enforcement — the
+ * browser channel consulting `browserEnabled` / `disabledEvents` before it
+ * writes a notification, and the non-admin read endpoint that lets the web app
+ * stop asking for OS permission when the capability is off — is issue #226.
+ * Until that lands, saving here changes the stored document and changes nothing
+ * an end user can observe.
+ *
+ * WHY THE CHECKBOX IS INVERTED RELATIVE TO THE STORED FIELD. The document
+ * stores `disabledEvents` (a suppression list), and this page renders a box
+ * that is CHECKED when the event is delivered. That matches
+ * `/settings/notifications`, where a switch being on means "you receive this" —
+ * two notification surfaces whose controls read in opposite directions would be
+ * a genuine hazard on a page whose whole job is silencing things. The inversion
+ * happens in exactly one place (`toggleEvent`), never in render.
+ *
+ * ONLY BROWSER-CAPABLE EVENTS ARE LISTED. `disabledEvents` suppresses the
+ * BROWSER notification; offering the control for an email-only event
+ * (`user.welcome`, `allowlist.invitation`) would render a checkbox that cannot
+ * do anything. The registry is the authority on which those are — this page
+ * filters on `declaredChannels.includes('browser')` and never restates the list.
+ *
+ * THE CHANNEL SWITCHES (PP-14.10). Beyond the browser switch, every channel an
+ * app registered (anything but the platform's `email`, `browser` and `push`,
+ * which are configured on their own pages) gets a switch of its own, drawn
+ * from `GET /api/notifications/channels` with the label the registry gave it.
+ * A switch writes `channels.<id>.enabled`; the section does not render at all
+ * while the deployment registers no such channel, so a deployment with only
+ * the platform's channels sees the page exactly as it was.
+ *
+ * `declaredChannels`, NOT `channels` (#521). `channels` is what a USER will
+ * receive: the API narrows it by this very policy, so a non-mandatory event
+ * this page has suppressed (or every one, while the switch is off) no longer
+ * lists `browser` there. Filtering on it made a suppressed event vanish from
+ * the one page that can lift the suppression. `declaredChannels` is the
+ * registry's declaration before policy, so a suppressed event stays listed,
+ * unchecked, and can be re-enabled.
+ */
+import type { PageSlotsBase } from '../../core/index.js';
+/**
+ * The slots of {@link NotificationSettingsPage}: the page-slot contract. `Sections` is drawn at both ends of the body, around the deployment-wide switch and the per-event list; the per-user channel columns come from the channel registry.
+ *
+ * @example
+ * ```tsx
+ * <NotificationSettingsPage slots={{ BeforeContent: () => <Alert severity="info">Changes apply to every user.</Alert> }} />
+ * ```
+ *
+ * @extensionPoint slot
+ * @stability experimental
+ */
+export type NotificationSettingsPageSlots = PageSlotsBase;
+/**
+ * The props of {@link NotificationSettingsPage}.
+ *
+ * @stability experimental
+ */
+export interface NotificationSettingsPageProps {
+    /** Optional extension slots; omitted, the page renders exactly as it always did. */
+    slots?: NotificationSettingsPageSlots;
+}
+/**
+ * The `/admin/settings/notifications` page: the deployment-wide browser channel switch and the per-event suppression list (`system_settings:read`; writes gated by `system_settings:write`).
+ *
+ * @returns the page.
+ *
+ * @extensionPoint component
+ * @stability experimental
+ */
+export default function NotificationSettingsPage(props?: NotificationSettingsPageProps): import("react").JSX.Element;
+//# sourceMappingURL=NotificationSettingsPage.d.ts.map

package/dist/notifications/ui/NotificationSettingsPage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"NotificationSettingsPage.d.ts","sourceRoot":"","sources":["../../../src/notifications/ui/NotificationSettingsPage.tsx"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+CG;AAiBH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAiGzD;;;;;;;;;;GAUG;AACH,MAAM,MAAM,6BAA6B,GAAG,aAAa,CAAC;AAE1D;;;;GAIG;AACH,MAAM,WAAW,6BAA6B;IAC5C,oFAAoF;IACpF,KAAK,CAAC,EAAE,6BAA6B,CAAC;CACvC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,OAAO,UAAU,wBAAwB,CAAC,KAAK,GAAE,6BAAkC,+BAkBzF"}