@open-mercato/core 0.10.1-develop.7741.1.61a2652671 → 0.10.1-develop.7749.1.ea3edf75e3

package/dist/modules/notifications/api/route.js

@@ -7,6 +7,7 @@ import {
   isCrudCacheEnabled,
   resolveCrudCache
 } from "@open-mercato/shared/lib/crud/cache";
+import { NOTIFICATION_ACTION_COMMAND_NOT_ALLOWED_ERROR_CODE } from "@open-mercato/shared/modules/notifications/types";
 import { Notification } from "../data/entities.js";
 import { listNotificationsSchema, createNotificationSchema } from "../data/validators.js";
 import { toNotificationDto } from "../lib/notificationMapper.js";
@@ -19,12 +20,14 @@ import {
   NOTIFICATION_RESOURCE_KIND,
   notificationCrudErrorResponse,
   notificationValidationErrorResponse,
+  rejectNotificationActionCommands,
   resolveGuardedNotificationContext,
   resolveNotificationContext,
   runGuardedNotificationWrite,
   TENANT_SCOPE_REQUIRED_ERROR_CODE
 } from "../lib/routeHelpers.js";
 import {
+  actionConflictResponseSchema,
   buildNotificationsCrudOpenApi,
   createPagedListResponseSchema,
   notificationItemSchema,
@@ -162,6 +165,8 @@ async function POST(req) {
   if (!parsed.success) {
     return notificationValidationErrorResponse(parsed.error);
   }
+  const commandRejection = await rejectNotificationActionCommands(parsed.data);
+  if (commandRejection) return commandRejection;
   try {
     const guarded = await runGuardedNotificationWrite(
       ctx.container,
@@ -193,6 +198,7 @@ const notificationsCrudOpenApi = buildNotificationsCrudOpenApi({
   }
 });
 const notificationsCrudGet = notificationsCrudOpenApi.methods?.GET ?? {};
+const notificationsCrudPost = notificationsCrudOpenApi.methods?.POST ?? {};
 const openApi = {
   ...notificationsCrudOpenApi,
   methods: {
@@ -207,6 +213,17 @@ const openApi = {
           schema: scopeErrorResponseSchema
         }
       ]
+    },
+    POST: {
+      ...notificationsCrudPost,
+      errors: [
+        ...notificationsCrudPost.errors ?? [],
+        {
+          status: 400,
+          description: `Invalid payload, or an action carries a \`commandId\` (code: ${NOTIFICATION_ACTION_COMMAND_NOT_ALLOWED_ERROR_CODE})`,
+          schema: actionConflictResponseSchema
+        }
+      ]
     }
   }
 };

package/dist/modules/notifications/api/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/notifications/api/route.ts"],
-  "sourcesContent": ["import { createHash } from 'node:crypto'\nimport { z } from 'zod'\nimport type { EntityManager } from '@mikro-orm/core'\nimport { runWithCacheTenant } from '@open-mercato/cache'\nimport {\n  buildCollectionTags,\n  debugCrudCache,\n  isCrudCacheEnabled,\n  resolveCrudCache,\n} from '@open-mercato/shared/lib/crud/cache'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi/types'\nimport { Notification } from '../data/entities'\nimport { listNotificationsSchema, createNotificationSchema } from '../data/validators'\nimport { toNotificationDto } from '../lib/notificationMapper'\nimport { inAppVisibleFilter } from '../lib/notificationVisibility'\nimport {\n  buildNotificationReadScopeWhere,\n  getNotificationReadScopeTagOrganizationIds,\n} from '../lib/notificationScope'\nimport {\n  NOTIFICATION_RESOURCE_KIND,\n  notificationCrudErrorResponse,\n  notificationValidationErrorResponse,\n  resolveGuardedNotificationContext,\n  resolveNotificationContext,\n  runGuardedNotificationWrite,\n  TENANT_SCOPE_REQUIRED_ERROR_CODE,\n} from '../lib/routeHelpers'\nimport {\n  buildNotificationsCrudOpenApi,\n  createPagedListResponseSchema,\n  notificationItemSchema,\n  scopeErrorResponseSchema,\n} from './openapi'\n\nexport const metadata = {\n  GET: { requireAuth: true },\n  POST: { requireAuth: true, requireFeatures: ['notifications.create'] },\n}\n\nconst NOTIFICATIONS_LIST_TTL_MS = 10_000\n// v2: the key gained the selected-organization scope (#4840). Bumping the version\n// retires v1 entries, which were shared across organizations for the same user.\nconst NOTIFICATIONS_LIST_CACHE_VERSION = 2\nconst NOTIFICATIONS_LIST_RESOURCE = 'notifications.notification'\n\ntype NotificationsListPayload = {\n  items: ReturnType<typeof toNotificationDto>[]\n  total: number\n  page: number\n  pageSize: number\n  totalPages: number\n}\n\nexport function buildNotificationsListCacheKey(\n  userId: string,\n  organizationScope: { organizationId: string | null; organizationIds: string[] },\n  input: z.infer<typeof listNotificationsSchema>,\n): string {\n  const normalizedIds = Array.from(new Set(\n    organizationScope.organizationIds.filter((value) => value.trim().length > 0),\n  )).sort((left, right) => left.localeCompare(right))\n  const scopeKey = normalizedIds.length === 0\n    ? 'no-access'\n    : `${organizationScope.organizationId ?? 'none'}:scope=${createHash('sha256')\n        .update(normalizedIds.join('\\0'))\n        .digest('hex')\n        .slice(0, 16)}`\n  const filterSignature = JSON.stringify({\n    status: Array.isArray(input.status)\n      ? [...input.status].sort((left, right) => left.localeCompare(right))\n      : input.status ?? null,\n    type: input.type ?? null,\n    severity: input.severity ?? null,\n    sourceEntityType: input.sourceEntityType ?? null,\n    sourceEntityId: input.sourceEntityId ?? null,\n    since: input.since ?? null,\n    page: input.page,\n    pageSize: input.pageSize,\n  })\n  return `notifications:list:v${NOTIFICATIONS_LIST_CACHE_VERSION}:u=${userId}:org=${scopeKey}:filters=${filterSignature}`\n}\n\nfunction isNotificationsListPayload(value: unknown): value is NotificationsListPayload {\n  if (!value || typeof value !== 'object') return false\n  const payload = value as Partial<NotificationsListPayload>\n  return (\n    Array.isArray(payload.items)\n    && typeof payload.total === 'number'\n    && typeof payload.page === 'number'\n    && typeof payload.pageSize === 'number'\n    && typeof payload.totalPages === 'number'\n  )\n}\n\nexport async function GET(req: Request) {\n  const resolved = await resolveGuardedNotificationContext(req)\n  if (!resolved.ok) return resolved.response\n  const { ctx, scope } = resolved\n  const em = ctx.container.resolve('em') as EntityManager\n\n  const url = new URL(req.url)\n  const queryParams = Object.fromEntries(url.searchParams.entries())\n  const input = listNotificationsSchema.parse(queryParams)\n  const userId = scope.userId\n  // Mirrors api/unread-count/route.ts: unrestricted and omitted legacy organization\n  // scopes cannot be safely tagged for invalidation, because organization-specific\n  // writes only invalidate their own collection tag. Leave those scopes uncached\n  // rather than serving a stale tenant-wide list until the TTL expires.\n  const cacheableOrganizationIds = Array.isArray(scope.organizationIds)\n    ? scope.organizationIds\n    : null\n  const cache = userId && cacheableOrganizationIds && isCrudCacheEnabled()\n    ? resolveCrudCache(ctx.container)\n    : null\n  const cacheKey = cache && userId && cacheableOrganizationIds\n    ? buildNotificationsListCacheKey(\n        userId,\n        { organizationId: scope.organizationId, organizationIds: cacheableOrganizationIds },\n        input,\n      )\n    : null\n\n  if (cache && cacheKey) {\n    try {\n      const cached = await runWithCacheTenant(scope.tenantId, () => cache.get(cacheKey))\n      if (isNotificationsListPayload(cached)) {\n        return Response.json(cached)\n      }\n    } catch (error) {\n      debugCrudCache('notifications-list-cache-read-failed', {\n        error: error instanceof Error ? error.message : String(error),\n      })\n    }\n  }\n\n  const filters: Record<string, unknown> = {\n    recipientUserId: userId,\n    tenantId: scope.tenantId,\n    // Read scope AND in-app visibility: both fragments carry their own `$or`, so they must be\n    // AND-composed instead of spread (a spread would silently drop one of them).\n    // Hidden rows are those not delivered to the in-app channel (push-only / opted-out); they remain as records.\n    $and: [\n      buildNotificationReadScopeWhere(scope),\n      inAppVisibleFilter(),\n    ],\n  }\n\n  if (input.status) {\n    filters.status = Array.isArray(input.status) ? { $in: input.status } : input.status\n  } else {\n    filters.status = { $ne: 'dismissed' }\n  }\n  if (input.type) {\n    filters.type = input.type\n  }\n  if (input.severity) {\n    filters.severity = input.severity\n  }\n  if (input.sourceEntityType) {\n    filters.sourceEntityType = input.sourceEntityType\n  }\n  if (input.sourceEntityId) {\n    filters.sourceEntityId = input.sourceEntityId\n  }\n  if (input.since) {\n    filters.createdAt = { $gt: new Date(input.since) }\n  }\n\n  const [notifications, total] = await Promise.all([\n    em.find(Notification, filters, {\n      orderBy: { createdAt: 'desc' },\n      limit: input.pageSize,\n      offset: (input.page - 1) * input.pageSize,\n    }),\n    em.count(Notification, filters),\n  ])\n\n  const items = notifications.map(toNotificationDto)\n\n  const payload: NotificationsListPayload = {\n    items,\n    total,\n    page: input.page,\n    pageSize: input.pageSize,\n    totalPages: Math.ceil(total / input.pageSize),\n  }\n\n  if (cache && cacheKey) {\n    try {\n      await runWithCacheTenant(scope.tenantId, () =>\n        cache.set(cacheKey, payload, {\n          ttl: NOTIFICATIONS_LIST_TTL_MS,\n          tags: buildCollectionTags(\n            NOTIFICATIONS_LIST_RESOURCE,\n            scope.tenantId,\n            getNotificationReadScopeTagOrganizationIds(scope),\n          ),\n        }),\n      )\n    } catch (error) {\n      debugCrudCache('notifications-list-cache-write-failed', {\n        error: error instanceof Error ? error.message : String(error),\n      })\n    }\n  }\n\n  return Response.json(payload)\n}\n\nexport async function POST(req: Request) {\n  const { service, scope, ctx } = await resolveNotificationContext(req)\n\n  const body = await req.json().catch(() => ({}))\n  const parsed = createNotificationSchema.safeParse(body)\n  if (!parsed.success) {\n    return notificationValidationErrorResponse(parsed.error)\n  }\n\n  try {\n    const guarded = await runGuardedNotificationWrite(\n      ctx.container,\n      scope,\n      req,\n      {\n        resourceKind: NOTIFICATION_RESOURCE_KIND,\n        operation: 'create',\n        payload: parsed.data as Record<string, unknown>,\n      },\n      () => service.create(parsed.data, scope),\n    )\n    if (!guarded.ok) return guarded.response\n\n    return Response.json({ id: guarded.result.id }, { status: 201 })\n  } catch (error) {\n    const errorResponse = notificationCrudErrorResponse(error)\n    if (errorResponse) return errorResponse\n    throw error\n  }\n}\n\nconst notificationsCrudOpenApi = buildNotificationsCrudOpenApi({\n  resourceName: 'Notification',\n  querySchema: listNotificationsSchema,\n  listResponseSchema: createPagedListResponseSchema(notificationItemSchema),\n  create: {\n    schema: createNotificationSchema,\n    responseSchema: z.object({ id: z.string().uuid() }),\n    description: 'Creates a notification for a user.',\n  },\n})\n\nconst notificationsCrudGet = notificationsCrudOpenApi.methods?.GET ?? {}\n\n// The CRUD factory documents errors only for DELETE, and POST already gets an auto-generated 403\n// from its `requireFeatures` metadata. GET is authenticated-only, so its tenant-scope rejection has\n// to be declared here to reach the generated spec.\nexport const openApi: OpenApiRouteDoc = {\n  ...notificationsCrudOpenApi,\n  methods: {\n    ...notificationsCrudOpenApi.methods,\n    GET: {\n      ...notificationsCrudGet,\n      errors: [\n        ...(notificationsCrudGet.errors ?? []),\n        {\n          status: 403,\n          description: `Request could not be resolved to a tenant scope (code: ${TENANT_SCOPE_REQUIRED_ERROR_CODE})`,\n          schema: scopeErrorResponseSchema,\n        },\n      ],\n    },\n  },\n}\n"],
-  "mappings": "AAAA,SAAS,kBAAkB;AAC3B,SAAS,SAAS;AAElB,SAAS,0BAA0B;AACnC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEP,SAAS,oBAAoB;AAC7B,SAAS,yBAAyB,gCAAgC;AAClE,SAAS,yBAAyB;AAClC,SAAS,0BAA0B;AACnC;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEA,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,KAAK;AAAA,EACzB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,sBAAsB,EAAE;AACvE;AAEA,MAAM,4BAA4B;AAGlC,MAAM,mCAAmC;AACzC,MAAM,8BAA8B;AAU7B,SAAS,+BACd,QACA,mBACA,OACQ;AACR,QAAM,gBAAgB,MAAM,KAAK,IAAI;AAAA,IACnC,kBAAkB,gBAAgB,OAAO,CAAC,UAAU,MAAM,KAAK,EAAE,SAAS,CAAC;AAAA,EAC7E,CAAC,EAAE,KAAK,CAAC,MAAM,UAAU,KAAK,cAAc,KAAK,CAAC;AAClD,QAAM,WAAW,cAAc,WAAW,IACtC,cACA,GAAG,kBAAkB,kBAAkB,MAAM,UAAU,WAAW,QAAQ,EACvE,OAAO,cAAc,KAAK,IAAI,CAAC,EAC/B,OAAO,KAAK,EACZ,MAAM,GAAG,EAAE,CAAC;AACnB,QAAM,kBAAkB,KAAK,UAAU;AAAA,IACrC,QAAQ,MAAM,QAAQ,MAAM,MAAM,IAC9B,CAAC,GAAG,MAAM,MAAM,EAAE,KAAK,CAAC,MAAM,UAAU,KAAK,cAAc,KAAK,CAAC,IACjE,MAAM,UAAU;AAAA,IACpB,MAAM,MAAM,QAAQ;AAAA,IACpB,UAAU,MAAM,YAAY;AAAA,IAC5B,kBAAkB,MAAM,oBAAoB;AAAA,IAC5C,gBAAgB,MAAM,kBAAkB;AAAA,IACxC,OAAO,MAAM,SAAS;AAAA,IACtB,MAAM,MAAM;AAAA,IACZ,UAAU,MAAM;AAAA,EAClB,CAAC;AACD,SAAO,uBAAuB,gCAAgC,MAAM,MAAM,QAAQ,QAAQ,YAAY,eAAe;AACvH;AAEA,SAAS,2BAA2B,OAAmD;AACrF,MAAI,CAAC,SAAS,OAAO,UAAU,SAAU,QAAO;AAChD,QAAM,UAAU;AAChB,SACE,MAAM,QAAQ,QAAQ,KAAK,KACxB,OAAO,QAAQ,UAAU,YACzB,OAAO,QAAQ,SAAS,YACxB,OAAO,QAAQ,aAAa,YAC5B,OAAO,QAAQ,eAAe;AAErC;AAEA,eAAsB,IAAI,KAAc;AACtC,QAAM,WAAW,MAAM,kCAAkC,GAAG;AAC5D,MAAI,CAAC,SAAS,GAAI,QAAO,SAAS;AAClC,QAAM,EAAE,KAAK,MAAM,IAAI;AACvB,QAAM,KAAK,IAAI,UAAU,QAAQ,IAAI;AAErC,QAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAC3B,QAAM,cAAc,OAAO,YAAY,IAAI,aAAa,QAAQ,CAAC;AACjE,QAAM,QAAQ,wBAAwB,MAAM,WAAW;AACvD,QAAM,SAAS,MAAM;AAKrB,QAAM,2BAA2B,MAAM,QAAQ,MAAM,eAAe,IAChE,MAAM,kBACN;AACJ,QAAM,QAAQ,UAAU,4BAA4B,mBAAmB,IACnE,iBAAiB,IAAI,SAAS,IAC9B;AACJ,QAAM,WAAW,SAAS,UAAU,2BAChC;AAAA,IACE;AAAA,IACA,EAAE,gBAAgB,MAAM,gBAAgB,iBAAiB,yBAAyB;AAAA,IAClF;AAAA,EACF,IACA;AAEJ,MAAI,SAAS,UAAU;AACrB,QAAI;AACF,YAAM,SAAS,MAAM,mBAAmB,MAAM,UAAU,MAAM,MAAM,IAAI,QAAQ,CAAC;AACjF,UAAI,2BAA2B,MAAM,GAAG;AACtC,eAAO,SAAS,KAAK,MAAM;AAAA,MAC7B;AAAA,IACF,SAAS,OAAO;AACd,qBAAe,wCAAwC;AAAA,QACrD,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AAAA,MAC9D,CAAC;AAAA,IACH;AAAA,EACF;AAEA,QAAM,UAAmC;AAAA,IACvC,iBAAiB;AAAA,IACjB,UAAU,MAAM;AAAA;AAAA;AAAA;AAAA,IAIhB,MAAM;AAAA,MACJ,gCAAgC,KAAK;AAAA,MACrC,mBAAmB;AAAA,IACrB;AAAA,EACF;AAEA,MAAI,MAAM,QAAQ;AAChB,YAAQ,SAAS,MAAM,QAAQ,MAAM,MAAM,IAAI,EAAE,KAAK,MAAM,OAAO,IAAI,MAAM;AAAA,EAC/E,OAAO;AACL,YAAQ,SAAS,EAAE,KAAK,YAAY;AAAA,EACtC;AACA,MAAI,MAAM,MAAM;AACd,YAAQ,OAAO,MAAM;AAAA,EACvB;AACA,MAAI,MAAM,UAAU;AAClB,YAAQ,WAAW,MAAM;AAAA,EAC3B;AACA,MAAI,MAAM,kBAAkB;AAC1B,YAAQ,mBAAmB,MAAM;AAAA,EACnC;AACA,MAAI,MAAM,gBAAgB;AACxB,YAAQ,iBAAiB,MAAM;AAAA,EACjC;AACA,MAAI,MAAM,OAAO;AACf,YAAQ,YAAY,EAAE,KAAK,IAAI,KAAK,MAAM,KAAK,EAAE;AAAA,EACnD;AAEA,QAAM,CAAC,eAAe,KAAK,IAAI,MAAM,QAAQ,IAAI;AAAA,IAC/C,GAAG,KAAK,cAAc,SAAS;AAAA,MAC7B,SAAS,EAAE,WAAW,OAAO;AAAA,MAC7B,OAAO,MAAM;AAAA,MACb,SAAS,MAAM,OAAO,KAAK,MAAM;AAAA,IACnC,CAAC;AAAA,IACD,GAAG,MAAM,cAAc,OAAO;AAAA,EAChC,CAAC;AAED,QAAM,QAAQ,cAAc,IAAI,iBAAiB;AAEjD,QAAM,UAAoC;AAAA,IACxC;AAAA,IACA;AAAA,IACA,MAAM,MAAM;AAAA,IACZ,UAAU,MAAM;AAAA,IAChB,YAAY,KAAK,KAAK,QAAQ,MAAM,QAAQ;AAAA,EAC9C;AAEA,MAAI,SAAS,UAAU;AACrB,QAAI;AACF,YAAM;AAAA,QAAmB,MAAM;AAAA,QAAU,MACvC,MAAM,IAAI,UAAU,SAAS;AAAA,UAC3B,KAAK;AAAA,UACL,MAAM;AAAA,YACJ;AAAA,YACA,MAAM;AAAA,YACN,2CAA2C,KAAK;AAAA,UAClD;AAAA,QACF,CAAC;AAAA,MACH;AAAA,IACF,SAAS,OAAO;AACd,qBAAe,yCAAyC;AAAA,QACtD,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AAAA,MAC9D,CAAC;AAAA,IACH;AAAA,EACF;AAEA,SAAO,SAAS,KAAK,OAAO;AAC9B;AAEA,eAAsB,KAAK,KAAc;AACvC,QAAM,EAAE,SAAS,OAAO,IAAI,IAAI,MAAM,2BAA2B,GAAG;AAEpE,QAAM,OAAO,MAAM,IAAI,KAAK,EAAE,MAAM,OAAO,CAAC,EAAE;AAC9C,QAAM,SAAS,yBAAyB,UAAU,IAAI;AACtD,MAAI,CAAC,OAAO,SAAS;AACnB,WAAO,oCAAoC,OAAO,KAAK;AAAA,EACzD;AAEA,MAAI;AACF,UAAM,UAAU,MAAM;AAAA,MACpB,IAAI;AAAA,MACJ;AAAA,MACA;AAAA,MACA;AAAA,QACE,cAAc;AAAA,QACd,WAAW;AAAA,QACX,SAAS,OAAO;AAAA,MAClB;AAAA,MACA,MAAM,QAAQ,OAAO,OAAO,MAAM,KAAK;AAAA,IACzC;AACA,QAAI,CAAC,QAAQ,GAAI,QAAO,QAAQ;AAEhC,WAAO,SAAS,KAAK,EAAE,IAAI,QAAQ,OAAO,GAAG,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACjE,SAAS,OAAO;AACd,UAAM,gBAAgB,8BAA8B,KAAK;AACzD,QAAI,cAAe,QAAO;AAC1B,UAAM;AAAA,EACR;AACF;AAEA,MAAM,2BAA2B,8BAA8B;AAAA,EAC7D,cAAc;AAAA,EACd,aAAa;AAAA,EACb,oBAAoB,8BAA8B,sBAAsB;AAAA,EACxE,QAAQ;AAAA,IACN,QAAQ;AAAA,IACR,gBAAgB,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAAA,IAClD,aAAa;AAAA,EACf;AACF,CAAC;AAED,MAAM,uBAAuB,yBAAyB,SAAS,OAAO,CAAC;AAKhE,MAAM,UAA2B;AAAA,EACtC,GAAG;AAAA,EACH,SAAS;AAAA,IACP,GAAG,yBAAyB;AAAA,IAC5B,KAAK;AAAA,MACH,GAAG;AAAA,MACH,QAAQ;AAAA,QACN,GAAI,qBAAqB,UAAU,CAAC;AAAA,QACpC;AAAA,UACE,QAAQ;AAAA,UACR,aAAa,0DAA0D,gCAAgC;AAAA,UACvG,QAAQ;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;",
+  "sourcesContent": ["import { createHash } from 'node:crypto'\nimport { z } from 'zod'\nimport type { EntityManager } from '@mikro-orm/core'\nimport { runWithCacheTenant } from '@open-mercato/cache'\nimport {\n  buildCollectionTags,\n  debugCrudCache,\n  isCrudCacheEnabled,\n  resolveCrudCache,\n} from '@open-mercato/shared/lib/crud/cache'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi/types'\nimport { NOTIFICATION_ACTION_COMMAND_NOT_ALLOWED_ERROR_CODE } from '@open-mercato/shared/modules/notifications/types'\nimport { Notification } from '../data/entities'\nimport { listNotificationsSchema, createNotificationSchema } from '../data/validators'\nimport { toNotificationDto } from '../lib/notificationMapper'\nimport { inAppVisibleFilter } from '../lib/notificationVisibility'\nimport {\n  buildNotificationReadScopeWhere,\n  getNotificationReadScopeTagOrganizationIds,\n} from '../lib/notificationScope'\nimport {\n  NOTIFICATION_RESOURCE_KIND,\n  notificationCrudErrorResponse,\n  notificationValidationErrorResponse,\n  rejectNotificationActionCommands,\n  resolveGuardedNotificationContext,\n  resolveNotificationContext,\n  runGuardedNotificationWrite,\n  TENANT_SCOPE_REQUIRED_ERROR_CODE,\n} from '../lib/routeHelpers'\nimport {\n  actionConflictResponseSchema,\n  buildNotificationsCrudOpenApi,\n  createPagedListResponseSchema,\n  notificationItemSchema,\n  scopeErrorResponseSchema,\n} from './openapi'\n\nexport const metadata = {\n  GET: { requireAuth: true },\n  POST: { requireAuth: true, requireFeatures: ['notifications.create'] },\n}\n\nconst NOTIFICATIONS_LIST_TTL_MS = 10_000\n// v2: the key gained the selected-organization scope (#4840). Bumping the version\n// retires v1 entries, which were shared across organizations for the same user.\nconst NOTIFICATIONS_LIST_CACHE_VERSION = 2\nconst NOTIFICATIONS_LIST_RESOURCE = 'notifications.notification'\n\ntype NotificationsListPayload = {\n  items: ReturnType<typeof toNotificationDto>[]\n  total: number\n  page: number\n  pageSize: number\n  totalPages: number\n}\n\nexport function buildNotificationsListCacheKey(\n  userId: string,\n  organizationScope: { organizationId: string | null; organizationIds: string[] },\n  input: z.infer<typeof listNotificationsSchema>,\n): string {\n  const normalizedIds = Array.from(new Set(\n    organizationScope.organizationIds.filter((value) => value.trim().length > 0),\n  )).sort((left, right) => left.localeCompare(right))\n  const scopeKey = normalizedIds.length === 0\n    ? 'no-access'\n    : `${organizationScope.organizationId ?? 'none'}:scope=${createHash('sha256')\n        .update(normalizedIds.join('\\0'))\n        .digest('hex')\n        .slice(0, 16)}`\n  const filterSignature = JSON.stringify({\n    status: Array.isArray(input.status)\n      ? [...input.status].sort((left, right) => left.localeCompare(right))\n      : input.status ?? null,\n    type: input.type ?? null,\n    severity: input.severity ?? null,\n    sourceEntityType: input.sourceEntityType ?? null,\n    sourceEntityId: input.sourceEntityId ?? null,\n    since: input.since ?? null,\n    page: input.page,\n    pageSize: input.pageSize,\n  })\n  return `notifications:list:v${NOTIFICATIONS_LIST_CACHE_VERSION}:u=${userId}:org=${scopeKey}:filters=${filterSignature}`\n}\n\nfunction isNotificationsListPayload(value: unknown): value is NotificationsListPayload {\n  if (!value || typeof value !== 'object') return false\n  const payload = value as Partial<NotificationsListPayload>\n  return (\n    Array.isArray(payload.items)\n    && typeof payload.total === 'number'\n    && typeof payload.page === 'number'\n    && typeof payload.pageSize === 'number'\n    && typeof payload.totalPages === 'number'\n  )\n}\n\nexport async function GET(req: Request) {\n  const resolved = await resolveGuardedNotificationContext(req)\n  if (!resolved.ok) return resolved.response\n  const { ctx, scope } = resolved\n  const em = ctx.container.resolve('em') as EntityManager\n\n  const url = new URL(req.url)\n  const queryParams = Object.fromEntries(url.searchParams.entries())\n  const input = listNotificationsSchema.parse(queryParams)\n  const userId = scope.userId\n  // Mirrors api/unread-count/route.ts: unrestricted and omitted legacy organization\n  // scopes cannot be safely tagged for invalidation, because organization-specific\n  // writes only invalidate their own collection tag. Leave those scopes uncached\n  // rather than serving a stale tenant-wide list until the TTL expires.\n  const cacheableOrganizationIds = Array.isArray(scope.organizationIds)\n    ? scope.organizationIds\n    : null\n  const cache = userId && cacheableOrganizationIds && isCrudCacheEnabled()\n    ? resolveCrudCache(ctx.container)\n    : null\n  const cacheKey = cache && userId && cacheableOrganizationIds\n    ? buildNotificationsListCacheKey(\n        userId,\n        { organizationId: scope.organizationId, organizationIds: cacheableOrganizationIds },\n        input,\n      )\n    : null\n\n  if (cache && cacheKey) {\n    try {\n      const cached = await runWithCacheTenant(scope.tenantId, () => cache.get(cacheKey))\n      if (isNotificationsListPayload(cached)) {\n        return Response.json(cached)\n      }\n    } catch (error) {\n      debugCrudCache('notifications-list-cache-read-failed', {\n        error: error instanceof Error ? error.message : String(error),\n      })\n    }\n  }\n\n  const filters: Record<string, unknown> = {\n    recipientUserId: userId,\n    tenantId: scope.tenantId,\n    // Read scope AND in-app visibility: both fragments carry their own `$or`, so they must be\n    // AND-composed instead of spread (a spread would silently drop one of them).\n    // Hidden rows are those not delivered to the in-app channel (push-only / opted-out); they remain as records.\n    $and: [\n      buildNotificationReadScopeWhere(scope),\n      inAppVisibleFilter(),\n    ],\n  }\n\n  if (input.status) {\n    filters.status = Array.isArray(input.status) ? { $in: input.status } : input.status\n  } else {\n    filters.status = { $ne: 'dismissed' }\n  }\n  if (input.type) {\n    filters.type = input.type\n  }\n  if (input.severity) {\n    filters.severity = input.severity\n  }\n  if (input.sourceEntityType) {\n    filters.sourceEntityType = input.sourceEntityType\n  }\n  if (input.sourceEntityId) {\n    filters.sourceEntityId = input.sourceEntityId\n  }\n  if (input.since) {\n    filters.createdAt = { $gt: new Date(input.since) }\n  }\n\n  const [notifications, total] = await Promise.all([\n    em.find(Notification, filters, {\n      orderBy: { createdAt: 'desc' },\n      limit: input.pageSize,\n      offset: (input.page - 1) * input.pageSize,\n    }),\n    em.count(Notification, filters),\n  ])\n\n  const items = notifications.map(toNotificationDto)\n\n  const payload: NotificationsListPayload = {\n    items,\n    total,\n    page: input.page,\n    pageSize: input.pageSize,\n    totalPages: Math.ceil(total / input.pageSize),\n  }\n\n  if (cache && cacheKey) {\n    try {\n      await runWithCacheTenant(scope.tenantId, () =>\n        cache.set(cacheKey, payload, {\n          ttl: NOTIFICATIONS_LIST_TTL_MS,\n          tags: buildCollectionTags(\n            NOTIFICATIONS_LIST_RESOURCE,\n            scope.tenantId,\n            getNotificationReadScopeTagOrganizationIds(scope),\n          ),\n        }),\n      )\n    } catch (error) {\n      debugCrudCache('notifications-list-cache-write-failed', {\n        error: error instanceof Error ? error.message : String(error),\n      })\n    }\n  }\n\n  return Response.json(payload)\n}\n\nexport async function POST(req: Request) {\n  const { service, scope, ctx } = await resolveNotificationContext(req)\n\n  const body = await req.json().catch(() => ({}))\n  const parsed = createNotificationSchema.safeParse(body)\n  if (!parsed.success) {\n    return notificationValidationErrorResponse(parsed.error)\n  }\n  const commandRejection = await rejectNotificationActionCommands(parsed.data)\n  if (commandRejection) return commandRejection\n\n  try {\n    const guarded = await runGuardedNotificationWrite(\n      ctx.container,\n      scope,\n      req,\n      {\n        resourceKind: NOTIFICATION_RESOURCE_KIND,\n        operation: 'create',\n        payload: parsed.data as Record<string, unknown>,\n      },\n      () => service.create(parsed.data, scope),\n    )\n    if (!guarded.ok) return guarded.response\n\n    return Response.json({ id: guarded.result.id }, { status: 201 })\n  } catch (error) {\n    const errorResponse = notificationCrudErrorResponse(error)\n    if (errorResponse) return errorResponse\n    throw error\n  }\n}\n\nconst notificationsCrudOpenApi = buildNotificationsCrudOpenApi({\n  resourceName: 'Notification',\n  querySchema: listNotificationsSchema,\n  listResponseSchema: createPagedListResponseSchema(notificationItemSchema),\n  create: {\n    schema: createNotificationSchema,\n    responseSchema: z.object({ id: z.string().uuid() }),\n    description: 'Creates a notification for a user.',\n  },\n})\n\nconst notificationsCrudGet = notificationsCrudOpenApi.methods?.GET ?? {}\nconst notificationsCrudPost = notificationsCrudOpenApi.methods?.POST ?? {}\n\n// The CRUD factory documents errors only for DELETE, and POST already gets an auto-generated 403\n// from its `requireFeatures` metadata. GET is authenticated-only, so its tenant-scope rejection has\n// to be declared here to reach the generated spec.\nexport const openApi: OpenApiRouteDoc = {\n  ...notificationsCrudOpenApi,\n  methods: {\n    ...notificationsCrudOpenApi.methods,\n    GET: {\n      ...notificationsCrudGet,\n      errors: [\n        ...(notificationsCrudGet.errors ?? []),\n        {\n          status: 403,\n          description: `Request could not be resolved to a tenant scope (code: ${TENANT_SCOPE_REQUIRED_ERROR_CODE})`,\n          schema: scopeErrorResponseSchema,\n        },\n      ],\n    },\n    POST: {\n      ...notificationsCrudPost,\n      errors: [\n        ...(notificationsCrudPost.errors ?? []),\n        {\n          status: 400,\n          description: `Invalid payload, or an action carries a \\`commandId\\` (code: ${NOTIFICATION_ACTION_COMMAND_NOT_ALLOWED_ERROR_CODE})`,\n          schema: actionConflictResponseSchema,\n        },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,kBAAkB;AAC3B,SAAS,SAAS;AAElB,SAAS,0BAA0B;AACnC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEP,SAAS,0DAA0D;AACnE,SAAS,oBAAoB;AAC7B,SAAS,yBAAyB,gCAAgC;AAClE,SAAS,yBAAyB;AAClC,SAAS,0BAA0B;AACnC;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEA,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,KAAK;AAAA,EACzB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,sBAAsB,EAAE;AACvE;AAEA,MAAM,4BAA4B;AAGlC,MAAM,mCAAmC;AACzC,MAAM,8BAA8B;AAU7B,SAAS,+BACd,QACA,mBACA,OACQ;AACR,QAAM,gBAAgB,MAAM,KAAK,IAAI;AAAA,IACnC,kBAAkB,gBAAgB,OAAO,CAAC,UAAU,MAAM,KAAK,EAAE,SAAS,CAAC;AAAA,EAC7E,CAAC,EAAE,KAAK,CAAC,MAAM,UAAU,KAAK,cAAc,KAAK,CAAC;AAClD,QAAM,WAAW,cAAc,WAAW,IACtC,cACA,GAAG,kBAAkB,kBAAkB,MAAM,UAAU,WAAW,QAAQ,EACvE,OAAO,cAAc,KAAK,IAAI,CAAC,EAC/B,OAAO,KAAK,EACZ,MAAM,GAAG,EAAE,CAAC;AACnB,QAAM,kBAAkB,KAAK,UAAU;AAAA,IACrC,QAAQ,MAAM,QAAQ,MAAM,MAAM,IAC9B,CAAC,GAAG,MAAM,MAAM,EAAE,KAAK,CAAC,MAAM,UAAU,KAAK,cAAc,KAAK,CAAC,IACjE,MAAM,UAAU;AAAA,IACpB,MAAM,MAAM,QAAQ;AAAA,IACpB,UAAU,MAAM,YAAY;AAAA,IAC5B,kBAAkB,MAAM,oBAAoB;AAAA,IAC5C,gBAAgB,MAAM,kBAAkB;AAAA,IACxC,OAAO,MAAM,SAAS;AAAA,IACtB,MAAM,MAAM;AAAA,IACZ,UAAU,MAAM;AAAA,EAClB,CAAC;AACD,SAAO,uBAAuB,gCAAgC,MAAM,MAAM,QAAQ,QAAQ,YAAY,eAAe;AACvH;AAEA,SAAS,2BAA2B,OAAmD;AACrF,MAAI,CAAC,SAAS,OAAO,UAAU,SAAU,QAAO;AAChD,QAAM,UAAU;AAChB,SACE,MAAM,QAAQ,QAAQ,KAAK,KACxB,OAAO,QAAQ,UAAU,YACzB,OAAO,QAAQ,SAAS,YACxB,OAAO,QAAQ,aAAa,YAC5B,OAAO,QAAQ,eAAe;AAErC;AAEA,eAAsB,IAAI,KAAc;AACtC,QAAM,WAAW,MAAM,kCAAkC,GAAG;AAC5D,MAAI,CAAC,SAAS,GAAI,QAAO,SAAS;AAClC,QAAM,EAAE,KAAK,MAAM,IAAI;AACvB,QAAM,KAAK,IAAI,UAAU,QAAQ,IAAI;AAErC,QAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAC3B,QAAM,cAAc,OAAO,YAAY,IAAI,aAAa,QAAQ,CAAC;AACjE,QAAM,QAAQ,wBAAwB,MAAM,WAAW;AACvD,QAAM,SAAS,MAAM;AAKrB,QAAM,2BAA2B,MAAM,QAAQ,MAAM,eAAe,IAChE,MAAM,kBACN;AACJ,QAAM,QAAQ,UAAU,4BAA4B,mBAAmB,IACnE,iBAAiB,IAAI,SAAS,IAC9B;AACJ,QAAM,WAAW,SAAS,UAAU,2BAChC;AAAA,IACE;AAAA,IACA,EAAE,gBAAgB,MAAM,gBAAgB,iBAAiB,yBAAyB;AAAA,IAClF;AAAA,EACF,IACA;AAEJ,MAAI,SAAS,UAAU;AACrB,QAAI;AACF,YAAM,SAAS,MAAM,mBAAmB,MAAM,UAAU,MAAM,MAAM,IAAI,QAAQ,CAAC;AACjF,UAAI,2BAA2B,MAAM,GAAG;AACtC,eAAO,SAAS,KAAK,MAAM;AAAA,MAC7B;AAAA,IACF,SAAS,OAAO;AACd,qBAAe,wCAAwC;AAAA,QACrD,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AAAA,MAC9D,CAAC;AAAA,IACH;AAAA,EACF;AAEA,QAAM,UAAmC;AAAA,IACvC,iBAAiB;AAAA,IACjB,UAAU,MAAM;AAAA;AAAA;AAAA;AAAA,IAIhB,MAAM;AAAA,MACJ,gCAAgC,KAAK;AAAA,MACrC,mBAAmB;AAAA,IACrB;AAAA,EACF;AAEA,MAAI,MAAM,QAAQ;AAChB,YAAQ,SAAS,MAAM,QAAQ,MAAM,MAAM,IAAI,EAAE,KAAK,MAAM,OAAO,IAAI,MAAM;AAAA,EAC/E,OAAO;AACL,YAAQ,SAAS,EAAE,KAAK,YAAY;AAAA,EACtC;AACA,MAAI,MAAM,MAAM;AACd,YAAQ,OAAO,MAAM;AAAA,EACvB;AACA,MAAI,MAAM,UAAU;AAClB,YAAQ,WAAW,MAAM;AAAA,EAC3B;AACA,MAAI,MAAM,kBAAkB;AAC1B,YAAQ,mBAAmB,MAAM;AAAA,EACnC;AACA,MAAI,MAAM,gBAAgB;AACxB,YAAQ,iBAAiB,MAAM;AAAA,EACjC;AACA,MAAI,MAAM,OAAO;AACf,YAAQ,YAAY,EAAE,KAAK,IAAI,KAAK,MAAM,KAAK,EAAE;AAAA,EACnD;AAEA,QAAM,CAAC,eAAe,KAAK,IAAI,MAAM,QAAQ,IAAI;AAAA,IAC/C,GAAG,KAAK,cAAc,SAAS;AAAA,MAC7B,SAAS,EAAE,WAAW,OAAO;AAAA,MAC7B,OAAO,MAAM;AAAA,MACb,SAAS,MAAM,OAAO,KAAK,MAAM;AAAA,IACnC,CAAC;AAAA,IACD,GAAG,MAAM,cAAc,OAAO;AAAA,EAChC,CAAC;AAED,QAAM,QAAQ,cAAc,IAAI,iBAAiB;AAEjD,QAAM,UAAoC;AAAA,IACxC;AAAA,IACA;AAAA,IACA,MAAM,MAAM;AAAA,IACZ,UAAU,MAAM;AAAA,IAChB,YAAY,KAAK,KAAK,QAAQ,MAAM,QAAQ;AAAA,EAC9C;AAEA,MAAI,SAAS,UAAU;AACrB,QAAI;AACF,YAAM;AAAA,QAAmB,MAAM;AAAA,QAAU,MACvC,MAAM,IAAI,UAAU,SAAS;AAAA,UAC3B,KAAK;AAAA,UACL,MAAM;AAAA,YACJ;AAAA,YACA,MAAM;AAAA,YACN,2CAA2C,KAAK;AAAA,UAClD;AAAA,QACF,CAAC;AAAA,MACH;AAAA,IACF,SAAS,OAAO;AACd,qBAAe,yCAAyC;AAAA,QACtD,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AAAA,MAC9D,CAAC;AAAA,IACH;AAAA,EACF;AAEA,SAAO,SAAS,KAAK,OAAO;AAC9B;AAEA,eAAsB,KAAK,KAAc;AACvC,QAAM,EAAE,SAAS,OAAO,IAAI,IAAI,MAAM,2BAA2B,GAAG;AAEpE,QAAM,OAAO,MAAM,IAAI,KAAK,EAAE,MAAM,OAAO,CAAC,EAAE;AAC9C,QAAM,SAAS,yBAAyB,UAAU,IAAI;AACtD,MAAI,CAAC,OAAO,SAAS;AACnB,WAAO,oCAAoC,OAAO,KAAK;AAAA,EACzD;AACA,QAAM,mBAAmB,MAAM,iCAAiC,OAAO,IAAI;AAC3E,MAAI,iBAAkB,QAAO;AAE7B,MAAI;AACF,UAAM,UAAU,MAAM;AAAA,MACpB,IAAI;AAAA,MACJ;AAAA,MACA;AAAA,MACA;AAAA,QACE,cAAc;AAAA,QACd,WAAW;AAAA,QACX,SAAS,OAAO;AAAA,MAClB;AAAA,MACA,MAAM,QAAQ,OAAO,OAAO,MAAM,KAAK;AAAA,IACzC;AACA,QAAI,CAAC,QAAQ,GAAI,QAAO,QAAQ;AAEhC,WAAO,SAAS,KAAK,EAAE,IAAI,QAAQ,OAAO,GAAG,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACjE,SAAS,OAAO;AACd,UAAM,gBAAgB,8BAA8B,KAAK;AACzD,QAAI,cAAe,QAAO;AAC1B,UAAM;AAAA,EACR;AACF;AAEA,MAAM,2BAA2B,8BAA8B;AAAA,EAC7D,cAAc;AAAA,EACd,aAAa;AAAA,EACb,oBAAoB,8BAA8B,sBAAsB;AAAA,EACxE,QAAQ;AAAA,IACN,QAAQ;AAAA,IACR,gBAAgB,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAAA,IAClD,aAAa;AAAA,EACf;AACF,CAAC;AAED,MAAM,uBAAuB,yBAAyB,SAAS,OAAO,CAAC;AACvE,MAAM,wBAAwB,yBAAyB,SAAS,QAAQ,CAAC;AAKlE,MAAM,UAA2B;AAAA,EACtC,GAAG;AAAA,EACH,SAAS;AAAA,IACP,GAAG,yBAAyB;AAAA,IAC5B,KAAK;AAAA,MACH,GAAG;AAAA,MACH,QAAQ;AAAA,QACN,GAAI,qBAAqB,UAAU,CAAC;AAAA,QACpC;AAAA,UACE,QAAQ;AAAA,UACR,aAAa,0DAA0D,gCAAgC;AAAA,UACvG,QAAQ;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA,MAAM;AAAA,MACJ,GAAG;AAAA,MACH,QAAQ;AAAA,QACN,GAAI,sBAAsB,UAAU,CAAC;AAAA,QACrC;AAAA,UACE,QAAQ;AAAA,UACR,aAAa,gEAAgE,kDAAkD;AAAA,UAC/H,QAAQ;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/modules/notifications/data/validators.js

@@ -12,7 +12,7 @@ const notificationActionSchema = z.object({
   labelKey: z.string().optional(),
   variant: z.enum(["default", "secondary", "destructive", "outline", "ghost"]).optional(),
   icon: z.string().optional(),
-  commandId: z.string().optional(),
+  commandId: z.string().optional().describe("Refused by the HTTP create routes (400 notification_action_command_not_allowed); command actions are attached by server code from the notification type definition"),
   href: safeRelativeHrefSchema.optional(),
   confirmRequired: z.boolean().optional(),
   confirmMessage: z.string().optional()

package/dist/modules/notifications/data/validators.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/notifications/data/validators.ts"],
-  "sourcesContent": ["import { z } from 'zod'\nimport { isSafeNotificationHref } from '../lib/safeHref'\n\nexport const notificationStatusSchema = z.enum(['unread', 'read', 'actioned', 'dismissed'])\nexport const notificationSeveritySchema = z.enum(['info', 'warning', 'success', 'error'])\n\nexport const safeRelativeHrefSchema = z.string().min(1).refine(\n  (href) => isSafeNotificationHref(href),\n  { message: 'Href must be a same-origin relative path starting with /' }\n)\n\nexport const notificationActionSchema = z.object({\n  id: z.string().min(1),\n  label: z.string().min(1),\n  labelKey: z.string().optional(),\n  variant: z.enum(['default', 'secondary', 'destructive', 'outline', 'ghost']).optional(),\n  icon: z.string().optional(),\n  commandId: z.string().optional(),\n  href: safeRelativeHrefSchema.optional(),\n  confirmRequired: z.boolean().optional(),\n  confirmMessage: z.string().optional(),\n})\n\n/**\n * Flat per-provider push customization. Known keys are mapped onto each provider's native message\n * by the push adapters; unknown keys are accepted (passthrough) for providers that understand them.\n * See `communication_channels/lib/push-envelope.ts` (`PushOptions`).\n */\nexport const pushOptionsSchema = z\n  .object({\n    sound: z.string().optional(),\n    badge: z.number().int().nonnegative().optional(),\n    image: z.string().optional(),\n    priority: z.enum(['high', 'normal']).optional(),\n    channelId: z.string().optional(),\n    body: z.string().optional(),\n  })\n  .catchall(z.unknown())\n\nconst baseNotificationFieldsSchema = z.object({\n  type: z.string().min(1).max(100),\n  titleKey: z.string().min(1).max(200).optional(),\n  bodyKey: z.string().min(1).max(200).optional(),\n  titleVariables: z.record(z.string(), z.string()).optional(),\n  bodyVariables: z.record(z.string(), z.string()).optional(),\n  title: z.string().min(1).max(500).optional(),\n  body: z.string().max(2000).optional(),\n  icon: z.string().max(100).optional(),\n  severity: notificationSeveritySchema.optional().default('info'),\n  actions: z.array(notificationActionSchema).optional(),\n  primaryActionId: z.string().optional(),\n  sourceModule: z.string().optional(),\n  sourceEntityType: z.string().optional(),\n  sourceEntityId: z.string().uuid().optional(),\n  linkHref: safeRelativeHrefSchema.optional(),\n  groupKey: z.string().optional(),\n  expiresAt: z.string().datetime().optional(),\n  // Arbitrary app-readable key/values delivered with the push (and visible to in-app clients).\n  data: z.record(z.string(), z.string()).optional(),\n  // Per-provider push customization (sound, badge, image, priority, channelId, body override).\n  pushOptions: pushOptionsSchema.optional(),\n  // Explicit per-send channel target. When present, delivery is restricted to these channels\n  // (intersected with the type's eligibility, the registered strategies, and the recipient's\n  // preferences). Absent \u2192 all registered channels (pre-Phase-7 behavior). Must be non-empty when\n  // provided: an empty array would resolve to zero deliverable channels and silently black-hole the\n  // notification (invisible + undelivered) \u2014 omit the field instead to target every channel.\n  channels: z.array(z.string().min(1).max(32)).min(1).optional(),\n})\n\nconst titleRequiredRefinement = {\n  refine: (data: { titleKey?: string; title?: string }) => data.titleKey || data.title,\n  message: 'Either titleKey or title must be provided',\n} as const\n\nexport const createNotificationSchema = baseNotificationFieldsSchema\n  .extend({ recipientUserId: z.string().uuid() })\n  .refine(titleRequiredRefinement.refine, { message: titleRequiredRefinement.message })\n\nexport const createBatchNotificationSchema = baseNotificationFieldsSchema\n  .extend({ recipientUserIds: z.array(z.string().uuid()).min(1).max(1000) })\n  .refine(titleRequiredRefinement.refine, { message: titleRequiredRefinement.message })\n\nexport const createRoleNotificationSchema = baseNotificationFieldsSchema\n  .extend({ roleId: z.string().uuid() })\n  .refine(titleRequiredRefinement.refine, { message: titleRequiredRefinement.message })\n\nexport const createFeatureNotificationSchema = baseNotificationFieldsSchema\n  .extend({ requiredFeature: z.string().min(1).max(100) })\n  .refine(titleRequiredRefinement.refine, { message: titleRequiredRefinement.message })\n\nexport const listNotificationsSchema = z.object({\n  status: z.union([notificationStatusSchema, z.array(notificationStatusSchema)]).optional(),\n  type: z.string().optional(),\n  severity: notificationSeveritySchema.optional(),\n  sourceEntityType: z.string().optional(),\n  sourceEntityId: z.string().uuid().optional(),\n  since: z.string().datetime().optional(),\n  page: z.coerce.number().int().min(1).optional().default(1),\n  pageSize: z.coerce.number().int().min(1).max(100).optional().default(20),\n})\n\nexport const executeActionSchema = z.object({\n  actionId: z.string().min(1),\n  payload: z.record(z.string(), z.unknown()).optional(),\n})\n\nexport const restoreNotificationSchema = z.object({\n  status: z.enum(['read', 'unread']).optional(),\n})\n\nconst notificationDeliveryStrategySchema = z.object({\n  enabled: z.boolean().optional(),\n})\n\nconst notificationDeliveryEmailSchema = notificationDeliveryStrategySchema.extend({\n  from: z.string().trim().min(1).optional(),\n  replyTo: z.string().trim().min(1).optional(),\n  subjectPrefix: z.string().trim().min(1).optional(),\n})\n\nconst notificationDeliveryCustomSchema = notificationDeliveryStrategySchema.extend({\n  config: z.unknown().optional(),\n})\n\nexport const notificationDeliveryConfigSchema = z.object({\n  appUrl: z.string().url().optional(),\n  panelPath: safeRelativeHrefSchema.optional(),\n  strategies: z.object({\n    database: notificationDeliveryStrategySchema.optional(),\n    email: notificationDeliveryEmailSchema.optional(),\n    custom: z.record(z.string(), notificationDeliveryCustomSchema).optional(),\n  }).optional(),\n})\n\nexport type CreateNotificationInput = z.infer<typeof createNotificationSchema>\nexport type CreateBatchNotificationInput = z.infer<typeof createBatchNotificationSchema>\nexport type CreateRoleNotificationInput = z.infer<typeof createRoleNotificationSchema>\nexport type CreateFeatureNotificationInput = z.infer<typeof createFeatureNotificationSchema>\nexport type ListNotificationsInput = z.infer<typeof listNotificationsSchema>\nexport type ExecuteActionInput = z.infer<typeof executeActionSchema>\nexport type NotificationDeliveryConfigInput = z.infer<typeof notificationDeliveryConfigSchema>\n\n// Notification type catalogue (DB-mirrored read model)\nexport const notificationTypeItemSchema = z.object({\n  id: z.string(),\n  labelKey: z.string(),\n  descriptionKey: z.string().nullable().optional(),\n  // Free-form grouping label so a client can list/group types under a heading. Defaults to\n  // the prefix before the first dot in the type id (`sales.order.created` \u2192 `sales`), so in\n  // practice it is always populated; kept nullable to avoid narrowing the response contract.\n  // This is the STABLE grouping key \u2014 clients group on it and display `categoryLabel`.\n  category: z.string().nullable().optional(),\n  // Localized heading for `category`, resolved server-side from\n  // `notifications.categories.<key>` with a humanized fallback. Display-only: grouping on it\n  // re-partitions the list whenever the locale changes.\n  categoryLabel: z.string().nullable(),\n  // Server-resolved display strings so clients without the app dictionary (the mobile app)\n  // need no i18n bundle. `null` iff the corresponding `*Key` is null.\n  label: z.string().nullable(),\n  description: z.string().nullable(),\n  // When true the type is delivered as a silent / content-available push.\n  silent: z.boolean(),\n  // Effective \"cannot be opted out of\" flag (operator override ?? code-declared); a preferences\n  // UI should lock the type on when true.\n  nonOptOut: z.boolean(),\n  // Effective channel eligibility for the caller's tenant (stored override ?? code-declared\n  // `type.channels`). `null` = no restriction (every registered channel). A channel outside\n  // the set never delivers for this type in the tenant and users cannot opt into it \u2014\n  // preference UIs lock the cell off.\n  channels: z.array(z.string()).nullable(),\n  // The raw tenant-stored override (`notification_type_overrides.channels`; `null` = inherit\n  // code). Admin editors base PATCH payloads on the EFFECTIVE set, but this shows whether an\n  // override exists at all.\n  storedChannels: z.array(z.string()).nullable(),\n  // The raw tenant-stored `nonOptOut` override (`null` = inherit the code-declared flag).\n  storedNonOptOut: z.boolean().nullable(),\n  // Optimistic-lock version of the tenant's override row (ISO timestamp; `null` when the\n  // tenant stores no override yet). PATCH callers echo it back via the standard\n  // `x-om-ext-optimistic-lock-expected-updated-at` header.\n  updatedAt: z.string().nullable(),\n})\n\n// PATCH /api/notifications/types \u2014 operator override of a type's channel eligibility and/or\n// nonOptOut governance. Omitted fields stay untouched; `null` clears the stored override so\n// the code declaration applies again.\nexport const updateNotificationTypeSchema = z\n  .object({\n    id: z.string().min(1),\n    // Mirror the create guard: a non-empty array restricts eligibility, `null` clears the override\n    // (code declaration reapplies). An empty array is rejected \u2014 it would resolve to zero deliverable\n    // channels and silently black-hole the type (invisible + undelivered); clear with `null` instead.\n    channels: z.array(z.string().min(1)).min(1).nullable().optional(),\n    nonOptOut: z.boolean().nullable().optional(),\n  })\n  .refine((value) => value.channels !== undefined || value.nonOptOut !== undefined, {\n    message: 'At least one of channels or nonOptOut must be provided',\n  })\n\n// Per-user channel preferences\nexport const notificationPreferenceItemSchema = z.object({\n  notificationTypeId: z.string(),\n  channel: z.string(),\n  enabled: z.boolean(),\n})\n\nexport const updatePreferencesSchema = z.object({\n  preferences: z\n    .array(\n      z.object({\n        notificationTypeId: z.string().trim().min(1).max(128),\n        channel: z.string().trim().min(1).max(32),\n        enabled: z.boolean(),\n      }),\n    )\n    .max(500),\n})\n\n// Admin-on-behalf preference management (target a specific user)\nexport const adminPreferencesQuerySchema = z.object({\n  userId: z.string().uuid(),\n})\n\nexport const adminUpdatePreferencesSchema = updatePreferencesSchema.extend({\n  userId: z.string().uuid(),\n})\n\nexport type NotificationTypeItem = z.infer<typeof notificationTypeItemSchema>\nexport type UpdateNotificationTypeInput = z.infer<typeof updateNotificationTypeSchema>\nexport type NotificationPreferenceItem = z.infer<typeof notificationPreferenceItemSchema>\nexport type UpdatePreferencesInput = z.infer<typeof updatePreferencesSchema>\nexport type AdminUpdatePreferencesInput = z.infer<typeof adminUpdatePreferencesSchema>\n"],
-  "mappings": "AAAA,SAAS,SAAS;AAClB,SAAS,8BAA8B;AAEhC,MAAM,2BAA2B,EAAE,KAAK,CAAC,UAAU,QAAQ,YAAY,WAAW,CAAC;AACnF,MAAM,6BAA6B,EAAE,KAAK,CAAC,QAAQ,WAAW,WAAW,OAAO,CAAC;AAEjF,MAAM,yBAAyB,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE;AAAA,EACtD,CAAC,SAAS,uBAAuB,IAAI;AAAA,EACrC,EAAE,SAAS,2DAA2D;AACxE;AAEO,MAAM,2BAA2B,EAAE,OAAO;AAAA,EAC/C,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EACpB,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EACvB,UAAU,EAAE,OAAO,EAAE,SAAS;AAAA,EAC9B,SAAS,EAAE,KAAK,CAAC,WAAW,aAAa,eAAe,WAAW,OAAO,CAAC,EAAE,SAAS;AAAA,EACtF,MAAM,EAAE,OAAO,EAAE,SAAS;AAAA,EAC1B,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,EAC/B,MAAM,uBAAuB,SAAS;AAAA,EACtC,iBAAiB,EAAE,QAAQ,EAAE,SAAS;AAAA,EACtC,gBAAgB,EAAE,OAAO,EAAE,SAAS;AACtC,CAAC;AAOM,MAAM,oBAAoB,EAC9B,OAAO;AAAA,EACN,OAAO,EAAE,OAAO,EAAE,SAAS;AAAA,EAC3B,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,SAAS;AAAA,EAC/C,OAAO,EAAE,OAAO,EAAE,SAAS;AAAA,EAC3B,UAAU,EAAE,KAAK,CAAC,QAAQ,QAAQ,CAAC,EAAE,SAAS;AAAA,EAC9C,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,EAC/B,MAAM,EAAE,OAAO,EAAE,SAAS;AAC5B,CAAC,EACA,SAAS,EAAE,QAAQ,CAAC;AAEvB,MAAM,+BAA+B,EAAE,OAAO;AAAA,EAC5C,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EAC/B,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EAC9C,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EAC7C,gBAAgB,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,OAAO,CAAC,EAAE,SAAS;AAAA,EAC1D,eAAe,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,OAAO,CAAC,EAAE,SAAS;AAAA,EACzD,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EAC3C,MAAM,EAAE,OAAO,EAAE,IAAI,GAAI,EAAE,SAAS;AAAA,EACpC,MAAM,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EACnC,UAAU,2BAA2B,SAAS,EAAE,QAAQ,MAAM;AAAA,EAC9D,SAAS,EAAE,MAAM,wBAAwB,EAAE,SAAS;AAAA,EACpD,iBAAiB,EAAE,OAAO,EAAE,SAAS;AAAA,EACrC,cAAc,EAAE,OAAO,EAAE,SAAS;AAAA,EAClC,kBAAkB,EAAE,OAAO,EAAE,SAAS;AAAA,EACtC,gBAAgB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EAC3C,UAAU,uBAAuB,SAAS;AAAA,EAC1C,UAAU,EAAE,OAAO,EAAE,SAAS;AAAA,EAC9B,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA;AAAA,EAE1C,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,OAAO,CAAC,EAAE,SAAS;AAAA;AAAA,EAEhD,aAAa,kBAAkB,SAAS;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMxC,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,CAAC,EAAE,SAAS;AAC/D,CAAC;AAED,MAAM,0BAA0B;AAAA,EAC9B,QAAQ,CAAC,SAAgD,KAAK,YAAY,KAAK;AAAA,EAC/E,SAAS;AACX;AAEO,MAAM,2BAA2B,6BACrC,OAAO,EAAE,iBAAiB,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,EAC7C,OAAO,wBAAwB,QAAQ,EAAE,SAAS,wBAAwB,QAAQ,CAAC;AAE/E,MAAM,gCAAgC,6BAC1C,OAAO,EAAE,kBAAkB,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,IAAI,CAAC,EAAE,IAAI,GAAI,EAAE,CAAC,EACxE,OAAO,wBAAwB,QAAQ,EAAE,SAAS,wBAAwB,QAAQ,CAAC;AAE/E,MAAM,+BAA+B,6BACzC,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,EACpC,OAAO,wBAAwB,QAAQ,EAAE,SAAS,wBAAwB,QAAQ,CAAC;AAE/E,MAAM,kCAAkC,6BAC5C,OAAO,EAAE,iBAAiB,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,CAAC,EACtD,OAAO,wBAAwB,QAAQ,EAAE,SAAS,wBAAwB,QAAQ,CAAC;AAE/E,MAAM,0BAA0B,EAAE,OAAO;AAAA,EAC9C,QAAQ,EAAE,MAAM,CAAC,0BAA0B,EAAE,MAAM,wBAAwB,CAAC,CAAC,EAAE,SAAS;AAAA,EACxF,MAAM,EAAE,OAAO,EAAE,SAAS;AAAA,EAC1B,UAAU,2BAA2B,SAAS;AAAA,EAC9C,kBAAkB,EAAE,OAAO,EAAE,SAAS;AAAA,EACtC,gBAAgB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EAC3C,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EACtC,MAAM,EAAE,OAAO,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,SAAS,EAAE,QAAQ,CAAC;AAAA,EACzD,UAAU,EAAE,OAAO,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,SAAS,EAAE,QAAQ,EAAE;AACzE,CAAC;AAEM,MAAM,sBAAsB,EAAE,OAAO;AAAA,EAC1C,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EAC1B,SAAS,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,EAAE,SAAS;AACtD,CAAC;AAEM,MAAM,4BAA4B,EAAE,OAAO;AAAA,EAChD,QAAQ,EAAE,KAAK,CAAC,QAAQ,QAAQ,CAAC,EAAE,SAAS;AAC9C,CAAC;AAED,MAAM,qCAAqC,EAAE,OAAO;AAAA,EAClD,SAAS,EAAE,QAAQ,EAAE,SAAS;AAChC,CAAC;AAED,MAAM,kCAAkC,mCAAmC,OAAO;AAAA,EAChF,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA,EACxC,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA,EAC3C,eAAe,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,SAAS;AACnD,CAAC;AAED,MAAM,mCAAmC,mCAAmC,OAAO;AAAA,EACjF,QAAQ,EAAE,QAAQ,EAAE,SAAS;AAC/B,CAAC;AAEM,MAAM,mCAAmC,EAAE,OAAO;AAAA,EACvD,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS;AAAA,EAClC,WAAW,uBAAuB,SAAS;AAAA,EAC3C,YAAY,EAAE,OAAO;AAAA,IACnB,UAAU,mCAAmC,SAAS;AAAA,IACtD,OAAO,gCAAgC,SAAS;AAAA,IAChD,QAAQ,EAAE,OAAO,EAAE,OAAO,GAAG,gCAAgC,EAAE,SAAS;AAAA,EAC1E,CAAC,EAAE,SAAS;AACd,CAAC;AAWM,MAAM,6BAA6B,EAAE,OAAO;AAAA,EACjD,IAAI,EAAE,OAAO;AAAA,EACb,UAAU,EAAE,OAAO;AAAA,EACnB,gBAAgB,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA;AAAA;AAAA;AAAA;AAAA,EAK/C,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA;AAAA;AAAA;AAAA,EAIzC,eAAe,EAAE,OAAO,EAAE,SAAS;AAAA;AAAA;AAAA,EAGnC,OAAO,EAAE,OAAO,EAAE,SAAS;AAAA,EAC3B,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA;AAAA,EAEjC,QAAQ,EAAE,QAAQ;AAAA;AAAA;AAAA,EAGlB,WAAW,EAAE,QAAQ;AAAA;AAAA;AAAA;AAAA;AAAA,EAKrB,UAAU,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,SAAS;AAAA;AAAA;AAAA;AAAA,EAIvC,gBAAgB,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,SAAS;AAAA;AAAA,EAE7C,iBAAiB,EAAE,QAAQ,EAAE,SAAS;AAAA;AAAA;AAAA;AAAA,EAItC,WAAW,EAAE,OAAO,EAAE,SAAS;AACjC,CAAC;AAKM,MAAM,+BAA+B,EACzC,OAAO;AAAA,EACN,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA;AAAA;AAAA;AAAA,EAIpB,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,SAAS,EAAE,SAAS;AAAA,EAChE,WAAW,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS;AAC7C,CAAC,EACA,OAAO,CAAC,UAAU,MAAM,aAAa,UAAa,MAAM,cAAc,QAAW;AAAA,EAChF,SAAS;AACX,CAAC;AAGI,MAAM,mCAAmC,EAAE,OAAO;AAAA,EACvD,oBAAoB,EAAE,OAAO;AAAA,EAC7B,SAAS,EAAE,OAAO;AAAA,EAClB,SAAS,EAAE,QAAQ;AACrB,CAAC;AAEM,MAAM,0BAA0B,EAAE,OAAO;AAAA,EAC9C,aAAa,EACV;AAAA,IACC,EAAE,OAAO;AAAA,MACP,oBAAoB,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,MACpD,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE;AAAA,MACxC,SAAS,EAAE,QAAQ;AAAA,IACrB,CAAC;AAAA,EACH,EACC,IAAI,GAAG;AACZ,CAAC;AAGM,MAAM,8BAA8B,EAAE,OAAO;AAAA,EAClD,QAAQ,EAAE,OAAO,EAAE,KAAK;AAC1B,CAAC;AAEM,MAAM,+BAA+B,wBAAwB,OAAO;AAAA,EACzE,QAAQ,EAAE,OAAO,EAAE,KAAK;AAC1B,CAAC;",
+  "sourcesContent": ["import { z } from 'zod'\nimport { isSafeNotificationHref } from '../lib/safeHref'\n\nexport const notificationStatusSchema = z.enum(['unread', 'read', 'actioned', 'dismissed'])\nexport const notificationSeveritySchema = z.enum(['info', 'warning', 'success', 'error'])\n\nexport const safeRelativeHrefSchema = z.string().min(1).refine(\n  (href) => isSafeNotificationHref(href),\n  { message: 'Href must be a same-origin relative path starting with /' }\n)\n\nexport const notificationActionSchema = z.object({\n  id: z.string().min(1),\n  label: z.string().min(1),\n  labelKey: z.string().optional(),\n  variant: z.enum(['default', 'secondary', 'destructive', 'outline', 'ghost']).optional(),\n  icon: z.string().optional(),\n  commandId: z.string().optional().describe('Refused by the HTTP create routes (400 notification_action_command_not_allowed); command actions are attached by server code from the notification type definition'),\n  href: safeRelativeHrefSchema.optional(),\n  confirmRequired: z.boolean().optional(),\n  confirmMessage: z.string().optional(),\n})\n\n/**\n * Flat per-provider push customization. Known keys are mapped onto each provider's native message\n * by the push adapters; unknown keys are accepted (passthrough) for providers that understand them.\n * See `communication_channels/lib/push-envelope.ts` (`PushOptions`).\n */\nexport const pushOptionsSchema = z\n  .object({\n    sound: z.string().optional(),\n    badge: z.number().int().nonnegative().optional(),\n    image: z.string().optional(),\n    priority: z.enum(['high', 'normal']).optional(),\n    channelId: z.string().optional(),\n    body: z.string().optional(),\n  })\n  .catchall(z.unknown())\n\nconst baseNotificationFieldsSchema = z.object({\n  type: z.string().min(1).max(100),\n  titleKey: z.string().min(1).max(200).optional(),\n  bodyKey: z.string().min(1).max(200).optional(),\n  titleVariables: z.record(z.string(), z.string()).optional(),\n  bodyVariables: z.record(z.string(), z.string()).optional(),\n  title: z.string().min(1).max(500).optional(),\n  body: z.string().max(2000).optional(),\n  icon: z.string().max(100).optional(),\n  severity: notificationSeveritySchema.optional().default('info'),\n  actions: z.array(notificationActionSchema).optional(),\n  primaryActionId: z.string().optional(),\n  sourceModule: z.string().optional(),\n  sourceEntityType: z.string().optional(),\n  sourceEntityId: z.string().uuid().optional(),\n  linkHref: safeRelativeHrefSchema.optional(),\n  groupKey: z.string().optional(),\n  expiresAt: z.string().datetime().optional(),\n  // Arbitrary app-readable key/values delivered with the push (and visible to in-app clients).\n  data: z.record(z.string(), z.string()).optional(),\n  // Per-provider push customization (sound, badge, image, priority, channelId, body override).\n  pushOptions: pushOptionsSchema.optional(),\n  // Explicit per-send channel target. When present, delivery is restricted to these channels\n  // (intersected with the type's eligibility, the registered strategies, and the recipient's\n  // preferences). Absent \u2192 all registered channels (pre-Phase-7 behavior). Must be non-empty when\n  // provided: an empty array would resolve to zero deliverable channels and silently black-hole the\n  // notification (invisible + undelivered) \u2014 omit the field instead to target every channel.\n  channels: z.array(z.string().min(1).max(32)).min(1).optional(),\n})\n\nconst titleRequiredRefinement = {\n  refine: (data: { titleKey?: string; title?: string }) => data.titleKey || data.title,\n  message: 'Either titleKey or title must be provided',\n} as const\n\nexport const createNotificationSchema = baseNotificationFieldsSchema\n  .extend({ recipientUserId: z.string().uuid() })\n  .refine(titleRequiredRefinement.refine, { message: titleRequiredRefinement.message })\n\nexport const createBatchNotificationSchema = baseNotificationFieldsSchema\n  .extend({ recipientUserIds: z.array(z.string().uuid()).min(1).max(1000) })\n  .refine(titleRequiredRefinement.refine, { message: titleRequiredRefinement.message })\n\nexport const createRoleNotificationSchema = baseNotificationFieldsSchema\n  .extend({ roleId: z.string().uuid() })\n  .refine(titleRequiredRefinement.refine, { message: titleRequiredRefinement.message })\n\nexport const createFeatureNotificationSchema = baseNotificationFieldsSchema\n  .extend({ requiredFeature: z.string().min(1).max(100) })\n  .refine(titleRequiredRefinement.refine, { message: titleRequiredRefinement.message })\n\nexport const listNotificationsSchema = z.object({\n  status: z.union([notificationStatusSchema, z.array(notificationStatusSchema)]).optional(),\n  type: z.string().optional(),\n  severity: notificationSeveritySchema.optional(),\n  sourceEntityType: z.string().optional(),\n  sourceEntityId: z.string().uuid().optional(),\n  since: z.string().datetime().optional(),\n  page: z.coerce.number().int().min(1).optional().default(1),\n  pageSize: z.coerce.number().int().min(1).max(100).optional().default(20),\n})\n\nexport const executeActionSchema = z.object({\n  actionId: z.string().min(1),\n  payload: z.record(z.string(), z.unknown()).optional(),\n})\n\nexport const restoreNotificationSchema = z.object({\n  status: z.enum(['read', 'unread']).optional(),\n})\n\nconst notificationDeliveryStrategySchema = z.object({\n  enabled: z.boolean().optional(),\n})\n\nconst notificationDeliveryEmailSchema = notificationDeliveryStrategySchema.extend({\n  from: z.string().trim().min(1).optional(),\n  replyTo: z.string().trim().min(1).optional(),\n  subjectPrefix: z.string().trim().min(1).optional(),\n})\n\nconst notificationDeliveryCustomSchema = notificationDeliveryStrategySchema.extend({\n  config: z.unknown().optional(),\n})\n\nexport const notificationDeliveryConfigSchema = z.object({\n  appUrl: z.string().url().optional(),\n  panelPath: safeRelativeHrefSchema.optional(),\n  strategies: z.object({\n    database: notificationDeliveryStrategySchema.optional(),\n    email: notificationDeliveryEmailSchema.optional(),\n    custom: z.record(z.string(), notificationDeliveryCustomSchema).optional(),\n  }).optional(),\n})\n\nexport type CreateNotificationInput = z.infer<typeof createNotificationSchema>\nexport type CreateBatchNotificationInput = z.infer<typeof createBatchNotificationSchema>\nexport type CreateRoleNotificationInput = z.infer<typeof createRoleNotificationSchema>\nexport type CreateFeatureNotificationInput = z.infer<typeof createFeatureNotificationSchema>\nexport type ListNotificationsInput = z.infer<typeof listNotificationsSchema>\nexport type ExecuteActionInput = z.infer<typeof executeActionSchema>\nexport type NotificationDeliveryConfigInput = z.infer<typeof notificationDeliveryConfigSchema>\n\n// Notification type catalogue (DB-mirrored read model)\nexport const notificationTypeItemSchema = z.object({\n  id: z.string(),\n  labelKey: z.string(),\n  descriptionKey: z.string().nullable().optional(),\n  // Free-form grouping label so a client can list/group types under a heading. Defaults to\n  // the prefix before the first dot in the type id (`sales.order.created` \u2192 `sales`), so in\n  // practice it is always populated; kept nullable to avoid narrowing the response contract.\n  // This is the STABLE grouping key \u2014 clients group on it and display `categoryLabel`.\n  category: z.string().nullable().optional(),\n  // Localized heading for `category`, resolved server-side from\n  // `notifications.categories.<key>` with a humanized fallback. Display-only: grouping on it\n  // re-partitions the list whenever the locale changes.\n  categoryLabel: z.string().nullable(),\n  // Server-resolved display strings so clients without the app dictionary (the mobile app)\n  // need no i18n bundle. `null` iff the corresponding `*Key` is null.\n  label: z.string().nullable(),\n  description: z.string().nullable(),\n  // When true the type is delivered as a silent / content-available push.\n  silent: z.boolean(),\n  // Effective \"cannot be opted out of\" flag (operator override ?? code-declared); a preferences\n  // UI should lock the type on when true.\n  nonOptOut: z.boolean(),\n  // Effective channel eligibility for the caller's tenant (stored override ?? code-declared\n  // `type.channels`). `null` = no restriction (every registered channel). A channel outside\n  // the set never delivers for this type in the tenant and users cannot opt into it \u2014\n  // preference UIs lock the cell off.\n  channels: z.array(z.string()).nullable(),\n  // The raw tenant-stored override (`notification_type_overrides.channels`; `null` = inherit\n  // code). Admin editors base PATCH payloads on the EFFECTIVE set, but this shows whether an\n  // override exists at all.\n  storedChannels: z.array(z.string()).nullable(),\n  // The raw tenant-stored `nonOptOut` override (`null` = inherit the code-declared flag).\n  storedNonOptOut: z.boolean().nullable(),\n  // Optimistic-lock version of the tenant's override row (ISO timestamp; `null` when the\n  // tenant stores no override yet). PATCH callers echo it back via the standard\n  // `x-om-ext-optimistic-lock-expected-updated-at` header.\n  updatedAt: z.string().nullable(),\n})\n\n// PATCH /api/notifications/types \u2014 operator override of a type's channel eligibility and/or\n// nonOptOut governance. Omitted fields stay untouched; `null` clears the stored override so\n// the code declaration applies again.\nexport const updateNotificationTypeSchema = z\n  .object({\n    id: z.string().min(1),\n    // Mirror the create guard: a non-empty array restricts eligibility, `null` clears the override\n    // (code declaration reapplies). An empty array is rejected \u2014 it would resolve to zero deliverable\n    // channels and silently black-hole the type (invisible + undelivered); clear with `null` instead.\n    channels: z.array(z.string().min(1)).min(1).nullable().optional(),\n    nonOptOut: z.boolean().nullable().optional(),\n  })\n  .refine((value) => value.channels !== undefined || value.nonOptOut !== undefined, {\n    message: 'At least one of channels or nonOptOut must be provided',\n  })\n\n// Per-user channel preferences\nexport const notificationPreferenceItemSchema = z.object({\n  notificationTypeId: z.string(),\n  channel: z.string(),\n  enabled: z.boolean(),\n})\n\nexport const updatePreferencesSchema = z.object({\n  preferences: z\n    .array(\n      z.object({\n        notificationTypeId: z.string().trim().min(1).max(128),\n        channel: z.string().trim().min(1).max(32),\n        enabled: z.boolean(),\n      }),\n    )\n    .max(500),\n})\n\n// Admin-on-behalf preference management (target a specific user)\nexport const adminPreferencesQuerySchema = z.object({\n  userId: z.string().uuid(),\n})\n\nexport const adminUpdatePreferencesSchema = updatePreferencesSchema.extend({\n  userId: z.string().uuid(),\n})\n\nexport type NotificationTypeItem = z.infer<typeof notificationTypeItemSchema>\nexport type UpdateNotificationTypeInput = z.infer<typeof updateNotificationTypeSchema>\nexport type NotificationPreferenceItem = z.infer<typeof notificationPreferenceItemSchema>\nexport type UpdatePreferencesInput = z.infer<typeof updatePreferencesSchema>\nexport type AdminUpdatePreferencesInput = z.infer<typeof adminUpdatePreferencesSchema>\n"],
+  "mappings": "AAAA,SAAS,SAAS;AAClB,SAAS,8BAA8B;AAEhC,MAAM,2BAA2B,EAAE,KAAK,CAAC,UAAU,QAAQ,YAAY,WAAW,CAAC;AACnF,MAAM,6BAA6B,EAAE,KAAK,CAAC,QAAQ,WAAW,WAAW,OAAO,CAAC;AAEjF,MAAM,yBAAyB,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE;AAAA,EACtD,CAAC,SAAS,uBAAuB,IAAI;AAAA,EACrC,EAAE,SAAS,2DAA2D;AACxE;AAEO,MAAM,2BAA2B,EAAE,OAAO;AAAA,EAC/C,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EACpB,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EACvB,UAAU,EAAE,OAAO,EAAE,SAAS;AAAA,EAC9B,SAAS,EAAE,KAAK,CAAC,WAAW,aAAa,eAAe,WAAW,OAAO,CAAC,EAAE,SAAS;AAAA,EACtF,MAAM,EAAE,OAAO,EAAE,SAAS;AAAA,EAC1B,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,oKAAoK;AAAA,EAC9M,MAAM,uBAAuB,SAAS;AAAA,EACtC,iBAAiB,EAAE,QAAQ,EAAE,SAAS;AAAA,EACtC,gBAAgB,EAAE,OAAO,EAAE,SAAS;AACtC,CAAC;AAOM,MAAM,oBAAoB,EAC9B,OAAO;AAAA,EACN,OAAO,EAAE,OAAO,EAAE,SAAS;AAAA,EAC3B,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,SAAS;AAAA,EAC/C,OAAO,EAAE,OAAO,EAAE,SAAS;AAAA,EAC3B,UAAU,EAAE,KAAK,CAAC,QAAQ,QAAQ,CAAC,EAAE,SAAS;AAAA,EAC9C,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,EAC/B,MAAM,EAAE,OAAO,EAAE,SAAS;AAC5B,CAAC,EACA,SAAS,EAAE,QAAQ,CAAC;AAEvB,MAAM,+BAA+B,EAAE,OAAO;AAAA,EAC5C,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EAC/B,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EAC9C,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EAC7C,gBAAgB,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,OAAO,CAAC,EAAE,SAAS;AAAA,EAC1D,eAAe,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,OAAO,CAAC,EAAE,SAAS;AAAA,EACzD,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EAC3C,MAAM,EAAE,OAAO,EAAE,IAAI,GAAI,EAAE,SAAS;AAAA,EACpC,MAAM,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EACnC,UAAU,2BAA2B,SAAS,EAAE,QAAQ,MAAM;AAAA,EAC9D,SAAS,EAAE,MAAM,wBAAwB,EAAE,SAAS;AAAA,EACpD,iBAAiB,EAAE,OAAO,EAAE,SAAS;AAAA,EACrC,cAAc,EAAE,OAAO,EAAE,SAAS;AAAA,EAClC,kBAAkB,EAAE,OAAO,EAAE,SAAS;AAAA,EACtC,gBAAgB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EAC3C,UAAU,uBAAuB,SAAS;AAAA,EAC1C,UAAU,EAAE,OAAO,EAAE,SAAS;AAAA,EAC9B,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA;AAAA,EAE1C,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,OAAO,CAAC,EAAE,SAAS;AAAA;AAAA,EAEhD,aAAa,kBAAkB,SAAS;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMxC,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,CAAC,EAAE,SAAS;AAC/D,CAAC;AAED,MAAM,0BAA0B;AAAA,EAC9B,QAAQ,CAAC,SAAgD,KAAK,YAAY,KAAK;AAAA,EAC/E,SAAS;AACX;AAEO,MAAM,2BAA2B,6BACrC,OAAO,EAAE,iBAAiB,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,EAC7C,OAAO,wBAAwB,QAAQ,EAAE,SAAS,wBAAwB,QAAQ,CAAC;AAE/E,MAAM,gCAAgC,6BAC1C,OAAO,EAAE,kBAAkB,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,IAAI,CAAC,EAAE,IAAI,GAAI,EAAE,CAAC,EACxE,OAAO,wBAAwB,QAAQ,EAAE,SAAS,wBAAwB,QAAQ,CAAC;AAE/E,MAAM,+BAA+B,6BACzC,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,EACpC,OAAO,wBAAwB,QAAQ,EAAE,SAAS,wBAAwB,QAAQ,CAAC;AAE/E,MAAM,kCAAkC,6BAC5C,OAAO,EAAE,iBAAiB,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,CAAC,EACtD,OAAO,wBAAwB,QAAQ,EAAE,SAAS,wBAAwB,QAAQ,CAAC;AAE/E,MAAM,0BAA0B,EAAE,OAAO;AAAA,EAC9C,QAAQ,EAAE,MAAM,CAAC,0BAA0B,EAAE,MAAM,wBAAwB,CAAC,CAAC,EAAE,SAAS;AAAA,EACxF,MAAM,EAAE,OAAO,EAAE,SAAS;AAAA,EAC1B,UAAU,2BAA2B,SAAS;AAAA,EAC9C,kBAAkB,EAAE,OAAO,EAAE,SAAS;AAAA,EACtC,gBAAgB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EAC3C,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EACtC,MAAM,EAAE,OAAO,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,SAAS,EAAE,QAAQ,CAAC;AAAA,EACzD,UAAU,EAAE,OAAO,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,SAAS,EAAE,QAAQ,EAAE;AACzE,CAAC;AAEM,MAAM,sBAAsB,EAAE,OAAO;AAAA,EAC1C,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EAC1B,SAAS,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,EAAE,SAAS;AACtD,CAAC;AAEM,MAAM,4BAA4B,EAAE,OAAO;AAAA,EAChD,QAAQ,EAAE,KAAK,CAAC,QAAQ,QAAQ,CAAC,EAAE,SAAS;AAC9C,CAAC;AAED,MAAM,qCAAqC,EAAE,OAAO;AAAA,EAClD,SAAS,EAAE,QAAQ,EAAE,SAAS;AAChC,CAAC;AAED,MAAM,kCAAkC,mCAAmC,OAAO;AAAA,EAChF,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA,EACxC,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA,EAC3C,eAAe,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,SAAS;AACnD,CAAC;AAED,MAAM,mCAAmC,mCAAmC,OAAO;AAAA,EACjF,QAAQ,EAAE,QAAQ,EAAE,SAAS;AAC/B,CAAC;AAEM,MAAM,mCAAmC,EAAE,OAAO;AAAA,EACvD,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS;AAAA,EAClC,WAAW,uBAAuB,SAAS;AAAA,EAC3C,YAAY,EAAE,OAAO;AAAA,IACnB,UAAU,mCAAmC,SAAS;AAAA,IACtD,OAAO,gCAAgC,SAAS;AAAA,IAChD,QAAQ,EAAE,OAAO,EAAE,OAAO,GAAG,gCAAgC,EAAE,SAAS;AAAA,EAC1E,CAAC,EAAE,SAAS;AACd,CAAC;AAWM,MAAM,6BAA6B,EAAE,OAAO;AAAA,EACjD,IAAI,EAAE,OAAO;AAAA,EACb,UAAU,EAAE,OAAO;AAAA,EACnB,gBAAgB,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA;AAAA;AAAA;AAAA;AAAA,EAK/C,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA;AAAA;AAAA;AAAA,EAIzC,eAAe,EAAE,OAAO,EAAE,SAAS;AAAA;AAAA;AAAA,EAGnC,OAAO,EAAE,OAAO,EAAE,SAAS;AAAA,EAC3B,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA;AAAA,EAEjC,QAAQ,EAAE,QAAQ;AAAA;AAAA;AAAA,EAGlB,WAAW,EAAE,QAAQ;AAAA;AAAA;AAAA;AAAA;AAAA,EAKrB,UAAU,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,SAAS;AAAA;AAAA;AAAA;AAAA,EAIvC,gBAAgB,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,SAAS;AAAA;AAAA,EAE7C,iBAAiB,EAAE,QAAQ,EAAE,SAAS;AAAA;AAAA;AAAA;AAAA,EAItC,WAAW,EAAE,OAAO,EAAE,SAAS;AACjC,CAAC;AAKM,MAAM,+BAA+B,EACzC,OAAO;AAAA,EACN,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA;AAAA;AAAA;AAAA,EAIpB,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,SAAS,EAAE,SAAS;AAAA,EAChE,WAAW,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS;AAC7C,CAAC,EACA,OAAO,CAAC,UAAU,MAAM,aAAa,UAAa,MAAM,cAAc,QAAW;AAAA,EAChF,SAAS;AACX,CAAC;AAGI,MAAM,mCAAmC,EAAE,OAAO;AAAA,EACvD,oBAAoB,EAAE,OAAO;AAAA,EAC7B,SAAS,EAAE,OAAO;AAAA,EAClB,SAAS,EAAE,QAAQ;AACrB,CAAC;AAEM,MAAM,0BAA0B,EAAE,OAAO;AAAA,EAC9C,aAAa,EACV;AAAA,IACC,EAAE,OAAO;AAAA,MACP,oBAAoB,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,MACpD,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE;AAAA,MACxC,SAAS,EAAE,QAAQ;AAAA,IACrB,CAAC;AAAA,EACH,EACC,IAAI,GAAG;AACZ,CAAC;AAGM,MAAM,8BAA8B,EAAE,OAAO;AAAA,EAClD,QAAQ,EAAE,OAAO,EAAE,KAAK;AAC1B,CAAC;AAEM,MAAM,+BAA+B,wBAAwB,OAAO;AAAA,EACzE,QAAQ,EAAE,OAAO,EAAE,KAAK;AAC1B,CAAC;",
   "names": []
 }

package/dist/modules/notifications/lib/notificationService.js

@@ -3,8 +3,11 @@ import { CrudHttpError } from "@open-mercato/shared/lib/crud/errors";
 import { invalidateCrudCache } from "@open-mercato/shared/lib/crud/cache";
 import { Notification } from "../data/entities.js";
 import {
-  NOTIFICATION_ACTION_ALREADY_EXECUTED_ERROR_CODE
+  NOTIFICATION_ACTION_ALREADY_EXECUTED_ERROR_CODE,
+  NOTIFICATION_ACTION_FORBIDDEN_ERROR_CODE
 } from "@open-mercato/shared/modules/notifications/types";
+import { resolveTranslations } from "@open-mercato/shared/lib/i18n/server";
+import { getTelemetryRuntime } from "@open-mercato/shared/lib/telemetry/runtime";
 import { NOTIFICATION_EVENTS, NOTIFICATION_SSE_EVENTS } from "./events.js";
 import { findOneWithDecryption, findWithDecryption } from "@open-mercato/shared/lib/encryption/find";
 import {
@@ -72,6 +75,20 @@ function actionAlreadyExecuted() {
     code: NOTIFICATION_ACTION_ALREADY_EXECUTED_ERROR_CODE
   });
 }
+async function actionForbidden() {
+  const { translate } = await resolveTranslations();
+  return new CrudHttpError(403, {
+    error: translate("notifications.error.actionForbidden", "You are not allowed to run this notification action"),
+    code: NOTIFICATION_ACTION_FORBIDDEN_ERROR_CODE
+  });
+}
+function findDeclaredCommandAction(type, action) {
+  const definition = getNotificationType(type);
+  if (!definition) return null;
+  const declared = [...definition.actions, ...definition.optionalActions ?? []].find((candidate) => candidate.id === action.id);
+  if (!declared?.commandId || declared.commandId !== action.commandId) return null;
+  return declared;
+}
 function applyNotificationContent(notification, input, recipientUserId, ctx, channels) {
   const actions = sanitizeNotificationActions(input.actions);
   const linkHref = assertSafeNotificationHref(input.linkHref);
@@ -173,6 +190,25 @@ async function createOrRefreshNotification(em, input, recipientUserId, ctx, chan
 }
 function createNotificationService(deps) {
   const { em: rootEm, eventBus, commandBus, container } = deps;
+  const userHoldsActionFeatures = async (requiredFeatures, scopeCtx) => {
+    if (!requiredFeatures || requiredFeatures.length === 0) return true;
+    if (!scopeCtx.userId || !container) return false;
+    try {
+      const rbacService = container.resolve("rbacService");
+      const allowed = await rbacService.userHasAllFeatures(
+        scopeCtx.userId,
+        requiredFeatures,
+        { tenantId: scopeCtx.tenantId, organizationId: scopeCtx.organizationId ?? null }
+      );
+      return allowed === true;
+    } catch (err) {
+      getTelemetryRuntime()?.reportError(err, {
+        module: "notifications",
+        code: "notifications.action_feature_check_failed"
+      });
+      return false;
+    }
+  };
   const resolveChannelsFor = async (content, recipientUserId, scopeCtx, preferences = createNotificationPreferenceService({ em: rootEm.fork() }), typeOverrides) => {
     const registeredChannels = getNotificationDeliveryStrategies().map((strategy) => strategy.id);
     if (registeredChannels.length === 0) return null;
@@ -471,6 +507,12 @@ function createNotificationService(deps) {
       if (notification.status === "actioned" || notification.actionedAt != null) {
         throw actionAlreadyExecuted();
       }
+      if (action.commandId) {
+        const declared = findDeclaredCommandAction(notification.type, action);
+        if (!declared || !await userHoldsActionFeatures(declared.requiredFeatures, ctx)) {
+          throw await actionForbidden();
+        }
+      }
       const actionedAt = /* @__PURE__ */ new Date();
       const previousStatus = notification.status;
       const previousActionedAt = notification.actionedAt ?? null;
@@ -493,8 +535,8 @@ function createNotificationService(deps) {
       let result = null;
       if (action.commandId && commandBus && container) {
         const commandInput = {
-          id: notification.sourceEntityId,
-          ...input.payload
+          ...input.payload,
+          id: notification.sourceEntityId
         };
         const commandCtx = {
           container,

package/dist/modules/notifications/lib/notificationService.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/notifications/lib/notificationService.ts"],
-  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport { type Kysely, sql } from 'kysely'\nimport { CrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { invalidateCrudCache } from '@open-mercato/shared/lib/crud/cache'\nimport { Notification, type NotificationStatus } from '../data/entities'\nimport type { CreateNotificationInput, CreateBatchNotificationInput, CreateRoleNotificationInput, CreateFeatureNotificationInput, ExecuteActionInput } from '../data/validators'\nimport {\n  NOTIFICATION_ACTION_ALREADY_EXECUTED_ERROR_CODE,\n  type NotificationPollData,\n} from '@open-mercato/shared/modules/notifications/types'\nimport { NOTIFICATION_EVENTS, NOTIFICATION_SSE_EVENTS } from './events'\nimport { findOneWithDecryption, findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport {\n  buildNotificationEntity,\n  emitNotificationCreated,\n  emitNotificationCreatedBatch,\n  type NotificationContentInput,\n  type NotificationTenantContext,\n} from './notificationFactory'\nimport { toNotificationDto } from './notificationMapper'\nimport { buildNotificationReadScopeWhere } from './notificationScope'\nimport {\n  getRecipientUserIdsForFeature,\n  getRecipientUserIdsForRole,\n  getScopedNotificationRecipientUserIds,\n} from './notificationRecipients'\nimport { assertSafeNotificationHref, sanitizeNotificationActions } from './safeHref'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\nimport { getNotificationType } from './notification-type-registry'\nimport { getNotificationTypeOverrides, type NotificationTypeOverrides } from './typeOverrides'\nimport { getNotificationDeliveryStrategies } from './deliveryStrategies'\nimport { resolveEffectiveChannels } from './shouldDeliver'\nimport {\n  createNotificationPreferenceService,\n  type NotificationPreferenceService,\n} from './notificationPreferenceService'\nimport { inAppVisibleFilter, inAppVisibleSql, isInAppVisible } from './notificationVisibility'\n\nconst logger = createLogger('notifications').child({ component: 'service' })\n\nfunction debug(message: string, ...details: unknown[]): void {\n  logger.debug(message, details.length ? { details } : undefined)\n}\n\nfunction getDb(em: EntityManager): Kysely<any> {\n  return em.getKysely<any>()\n}\n\nconst UNIQUE_NOTIFICATION_ACTIVE_STATUSES: NotificationStatus[] = ['unread', 'read', 'actioned']\nconst NOTIFICATION_RESOURCE_KIND = 'notifications.notification'\n\nfunction normalizeOrgScope(organizationId: string | null | undefined): string | null {\n  return organizationId ?? null\n}\n\nasync function invalidateNotificationCache(\n  container: NotificationServiceDeps['container'],\n  ctx: Pick<NotificationServiceContext, 'tenantId' | 'organizationId'>,\n  reason: string,\n  notificationId?: string,\n): Promise<void> {\n  if (!container) return\n  await invalidateCrudCache(\n    container as Parameters<typeof invalidateCrudCache>[0],\n    NOTIFICATION_RESOURCE_KIND,\n    {\n      id: notificationId,\n      tenantId: ctx.tenantId,\n      organizationId: normalizeOrgScope(ctx.organizationId),\n    },\n    ctx.tenantId,\n    reason,\n  )\n}\n\nasync function assertNotificationRecipientsInScope(\n  em: EntityManager,\n  recipientUserIds: string[],\n  ctx: NotificationServiceContext,\n): Promise<void> {\n  const scopedRecipientUserIds = await getScopedNotificationRecipientUserIds(\n    getDb(em),\n    ctx.tenantId,\n    normalizeOrgScope(ctx.organizationId),\n    recipientUserIds,\n  )\n\n  if (scopedRecipientUserIds.length !== recipientUserIds.length) {\n    throw new CrudHttpError(404, { error: 'Notification recipient not found' })\n  }\n}\n\nfunction actionAlreadyExecuted(): CrudHttpError {\n  return new CrudHttpError(409, {\n    error: 'Notification action already executed',\n    code: NOTIFICATION_ACTION_ALREADY_EXECUTED_ERROR_CODE,\n  })\n}\n\nfunction applyNotificationContent(\n  notification: Notification,\n  input: NotificationContentInput,\n  recipientUserId: string,\n  ctx: NotificationTenantContext,\n  channels: string[] | null,\n) {\n  const actions = sanitizeNotificationActions(input.actions)\n  const linkHref = assertSafeNotificationHref(input.linkHref)\n\n  notification.recipientUserId = recipientUserId\n  notification.type = input.type\n  notification.titleKey = input.titleKey\n  notification.bodyKey = input.bodyKey\n  notification.titleVariables = input.titleVariables\n  notification.bodyVariables = input.bodyVariables\n  notification.title = input.title || input.titleKey || ''\n  notification.body = input.body\n  notification.icon = input.icon\n  notification.severity = input.severity ?? 'info'\n  notification.actionData = actions\n    ? {\n        actions,\n        primaryActionId: input.primaryActionId,\n      }\n    : null\n  notification.sourceModule = input.sourceModule\n  notification.sourceEntityType = input.sourceEntityType\n  notification.sourceEntityId = input.sourceEntityId\n  notification.linkHref = linkHref\n  notification.groupKey = input.groupKey\n  notification.channels = channels\n  notification.expiresAt = input.expiresAt ? new Date(input.expiresAt) : null\n  notification.tenantId = ctx.tenantId\n  notification.organizationId = normalizeOrgScope(ctx.organizationId)\n  notification.status = 'unread'\n  notification.readAt = null\n  notification.actionedAt = null\n  notification.dismissedAt = null\n  notification.actionTaken = null\n  notification.actionResult = null\n  notification.createdAt = new Date()\n}\n\nasync function findScopedNotificationOrThrow(\n  em: EntityManager,\n  notificationId: string,\n  ctx: NotificationServiceContext,\n): Promise<Notification> {\n  const notification = await findOneWithDecryption(\n    em,\n    Notification,\n    {\n      id: notificationId,\n      recipientUserId: ctx.userId,\n      tenantId: ctx.tenantId,\n    },\n    undefined,\n    {\n      tenantId: ctx.tenantId,\n      organizationId: ctx.organizationId ?? null,\n    },\n  )\n  if (!notification) {\n    throw new CrudHttpError(404, { error: 'Notification not found' })\n  }\n  return notification\n}\n\nasync function emitNotificationSseEvents(\n  eventBus: { emit: (event: string, payload: unknown) => Promise<void> },\n  notifications: Notification[],\n  ctx: NotificationServiceContext,\n): Promise<void> {\n  // Live bell updates only for notifications actually delivered to the in-app channel; the others\n  // exist as records but must not bump anyone's badge/inbox.\n  const visible = notifications.filter((notification) => isInAppVisible(notification.channels))\n  if (visible.length === 0) return\n\n  const visibleRecipientUserIds = Array.from(new Set(visible.map((n) => n.recipientUserId)))\n  await eventBus.emit(NOTIFICATION_SSE_EVENTS.BATCH_CREATED, {\n    tenantId: ctx.tenantId,\n    organizationId: normalizeOrgScope(ctx.organizationId),\n    recipientUserIds: visibleRecipientUserIds,\n    count: visible.length,\n  })\n\n  for (const notification of visible) {\n    await eventBus.emit(NOTIFICATION_SSE_EVENTS.CREATED, {\n      tenantId: notification.tenantId,\n      organizationId: notification.organizationId ?? null,\n      recipientUserId: notification.recipientUserId,\n      notification: toNotificationDto(notification),\n    })\n  }\n}\n\nasync function createOrRefreshNotification(\n  em: EntityManager,\n  input: NotificationContentInput,\n  recipientUserId: string,\n  ctx: NotificationTenantContext,\n  channels: string[] | null,\n): Promise<Notification> {\n  if (input.groupKey && input.groupKey.trim().length > 0) {\n    const orgScope = normalizeOrgScope(ctx.organizationId) ?? 'global'\n    const lockKey = `notifications:${ctx.tenantId}:${orgScope}:${recipientUserId}:${input.type}:${input.groupKey}`\n    try {\n      const db = getDb(em)\n      await sql`select pg_advisory_xact_lock(hashtext(${lockKey}))`.execute(db)\n    } catch {\n      // If advisory locks are unavailable, continue with best-effort dedupe.\n    }\n\n    const existing = await em.findOne(Notification, {\n      recipientUserId,\n      tenantId: ctx.tenantId,\n      organizationId: normalizeOrgScope(ctx.organizationId),\n      type: input.type,\n      groupKey: input.groupKey,\n      status: { $in: UNIQUE_NOTIFICATION_ACTIVE_STATUSES },\n    }, {\n      orderBy: { createdAt: 'desc' },\n    })\n\n    if (existing) {\n      applyNotificationContent(existing, input, recipientUserId, ctx, channels)\n      return existing\n    }\n  }\n\n  return buildNotificationEntity(em, input, recipientUserId, ctx, channels)\n}\n\nexport interface NotificationServiceContext {\n  tenantId: string\n  organizationId?: string | null\n  organizationIds?: string[] | null\n  userId?: string | null\n}\n\nexport type CreateFeatureNotificationServiceInput = CreateFeatureNotificationInput & {\n  restrictRecipientsToOrganization?: boolean\n}\n\nexport interface NotificationService {\n  create(input: CreateNotificationInput, ctx: NotificationServiceContext): Promise<Notification>\n  createBatch(input: CreateBatchNotificationInput, ctx: NotificationServiceContext): Promise<Notification[]>\n  createForRole(input: CreateRoleNotificationInput, ctx: NotificationServiceContext): Promise<Notification[]>\n  createForFeature(input: CreateFeatureNotificationServiceInput, ctx: NotificationServiceContext): Promise<Notification[]>\n  markAsRead(notificationId: string, ctx: NotificationServiceContext): Promise<Notification>\n  markAllAsRead(ctx: NotificationServiceContext): Promise<number>\n  dismiss(notificationId: string, ctx: NotificationServiceContext): Promise<Notification>\n  restoreDismissed(\n    notificationId: string,\n    status: 'read' | 'unread' | undefined,\n    ctx: NotificationServiceContext\n  ): Promise<Notification>\n  executeAction(\n    notificationId: string,\n    input: ExecuteActionInput,\n    ctx: NotificationServiceContext\n  ): Promise<{ notification: Notification; result: unknown }>\n  getUnreadCount(ctx: NotificationServiceContext): Promise<number>\n  getPollData(ctx: NotificationServiceContext, since?: string): Promise<NotificationPollData>\n  cleanupExpired(): Promise<number>\n  deleteBySource(\n    sourceEntityType: string,\n    sourceEntityId: string,\n    ctx: NotificationServiceContext\n  ): Promise<number>\n}\n\nexport interface NotificationServiceDeps {\n  em: EntityManager\n  eventBus: { emit: (event: string, payload: unknown) => Promise<void> }\n  commandBus?: {\n    execute: (\n      commandId: string,\n      options: { input: unknown; ctx: unknown; metadata?: unknown }\n    ) => Promise<{ result: unknown }>\n  }\n  container?: { resolve: (name: string) => unknown }\n}\n\nexport function createNotificationService(deps: NotificationServiceDeps): NotificationService {\n  const { em: rootEm, eventBus, commandBus, container } = deps\n\n  /**\n   * Resolves the authoritative delivery-channel set for one recipient at create time \u2014 the single\n   * gate that folds per-send target, per-type eligibility, registered strategies, and the\n   * recipient's per-channel preferences (`nonOptOut` bypasses opt-out). Stored on the row and\n   * replayed by the dispatcher; `in_app` membership also drives bell/inbox visibility.\n   *\n   * Returns `null` (\u21D2 \"all channels\", legacy behavior) when no delivery strategies are registered\n   * (e.g. a minimal bootstrap/test), so notifications never become silently undeliverable/invisible\n   * in an environment that simply hasn't wired the seam.\n   */\n  const resolveChannelsFor = async (\n    content: NotificationContentInput,\n    recipientUserId: string,\n    scopeCtx: NotificationServiceContext,\n    preferences: NotificationPreferenceService = createNotificationPreferenceService({ em: rootEm.fork() }),\n    typeOverrides?: NotificationTypeOverrides | null,\n  ): Promise<string[] | null> => {\n    const registeredChannels = getNotificationDeliveryStrategies().map((strategy) => strategy.id)\n    if (registeredChannels.length === 0) return null\n    // Treat an empty target as \"no restriction\" (all channels) rather than \"no deliverable channel\":\n    // a programmatic caller that computed an empty array should not silently black-hole the\n    // notification. The HTTP layer rejects an empty `channels` outright (see validators.ts).\n    const targetChannels = content.channels && content.channels.length > 0 ? content.channels : null\n    const overrides = typeOverrides === undefined\n      ? (await getNotificationTypeOverrides(rootEm.fork(), scopeCtx.tenantId, [content.type])).get(content.type) ?? null\n      : typeOverrides\n    return resolveEffectiveChannels({\n      typeId: content.type,\n      type: getNotificationType(content.type),\n      scope: { tenantId: scopeCtx.tenantId, userId: recipientUserId },\n      targetChannels,\n      registeredChannels,\n      preferences,\n      channelsOverride: overrides?.channels ?? null,\n      nonOptOutOverride: overrides?.nonOptOut ?? null,\n    })\n  }\n\n  /**\n   * Broadcast counterpart of {@link resolveChannelsFor}: resolves the channel set for every recipient\n   * up front, BEFORE the write transaction opens, reusing a single forked EM / preference service\n   * across the whole set. This keeps the preference reads out of the write transaction (matching\n   * `create`, which resolves before its transaction) and avoids one EM fork per recipient on large\n   * role/feature broadcasts.\n   */\n  const resolveChannelsForRecipients = async (\n    content: NotificationContentInput,\n    recipientUserIds: string[],\n    scopeCtx: NotificationServiceContext,\n  ): Promise<Array<{ recipientUserId: string; channels: string[] | null }>> => {\n    const preferences = createNotificationPreferenceService({ em: rootEm.fork() })\n    // Stored overrides are per-type (not per-recipient) \u2014 read once for the whole broadcast.\n    const typeOverrides =\n      (await getNotificationTypeOverrides(rootEm.fork(), scopeCtx.tenantId, [content.type])).get(content.type) ?? null\n    const resolved: Array<{ recipientUserId: string; channels: string[] | null }> = []\n    for (const recipientUserId of recipientUserIds) {\n      resolved.push({\n        recipientUserId,\n        channels: await resolveChannelsFor(content, recipientUserId, scopeCtx, preferences, typeOverrides),\n      })\n    }\n    return resolved\n  }\n\n  return {\n    async create(input, ctx) {\n      const { recipientUserId, ...content } = input\n      const channels = await resolveChannelsFor(content, recipientUserId, ctx)\n      const writeEm = rootEm.fork()\n      const notification = await writeEm.transactional(async (tx) => {\n        await assertNotificationRecipientsInScope(tx, [recipientUserId], ctx)\n        const entity = await createOrRefreshNotification(tx, content, recipientUserId, ctx, channels)\n        await tx.flush()\n        return entity\n      })\n\n      await invalidateNotificationCache(container, ctx, 'created')\n      // Always emit the domain event (drives the deliver subscriber \u2192 push/email/\u2026). Only bump the\n      // live in-app bell when this notification is actually visible in-app.\n      await emitNotificationCreated(eventBus, notification, ctx)\n      if (isInAppVisible(notification.channels)) {\n        await eventBus.emit(NOTIFICATION_SSE_EVENTS.CREATED, {\n          tenantId: notification.tenantId,\n          organizationId: notification.organizationId ?? null,\n          recipientUserId: notification.recipientUserId,\n          notification: toNotificationDto(notification),\n        })\n      }\n\n      return notification\n    },\n\n    async createBatch(input, ctx) {\n      const recipientUserIds = Array.from(new Set(input.recipientUserIds))\n      const { recipientUserIds: _recipientUserIds, ...content } = input\n      const notifications: Notification[] = []\n      const resolved = await resolveChannelsForRecipients(content, recipientUserIds, ctx)\n      const writeEm = rootEm.fork()\n\n      await writeEm.transactional(async (tx) => {\n        await assertNotificationRecipientsInScope(tx, recipientUserIds, ctx)\n        for (const { recipientUserId, channels } of resolved) {\n          const notification = await createOrRefreshNotification(tx, content, recipientUserId, ctx, channels)\n          notifications.push(notification)\n        }\n        await tx.flush()\n      })\n\n      await invalidateNotificationCache(container, ctx, 'created')\n      await emitNotificationCreatedBatch(eventBus, notifications, ctx)\n      await emitNotificationSseEvents(eventBus, notifications, ctx)\n\n      return notifications\n    },\n\n    async createForRole(input, ctx) {\n      const em = rootEm.fork()\n\n      const db = getDb(em)\n      const recipientUserIds = await getRecipientUserIdsForRole(db, ctx.tenantId, input.roleId)\n      if (recipientUserIds.length === 0) {\n        return []\n      }\n\n      const { roleId: _roleId, ...content } = input\n      const notifications: Notification[] = []\n      const uniqueRecipientUserIds = Array.from(new Set(recipientUserIds))\n      const resolved = await resolveChannelsForRecipients(content, uniqueRecipientUserIds, ctx)\n      const writeEm = rootEm.fork()\n\n      await writeEm.transactional(async (tx) => {\n        for (const { recipientUserId, channels } of resolved) {\n          const notification = await createOrRefreshNotification(tx, content, recipientUserId, ctx, channels)\n          notifications.push(notification)\n        }\n        await tx.flush()\n      })\n\n      await invalidateNotificationCache(container, ctx, 'created')\n      await emitNotificationCreatedBatch(eventBus, notifications, ctx)\n      await emitNotificationSseEvents(eventBus, notifications, ctx)\n\n      return notifications\n    },\n\n    async createForFeature(input, ctx) {\n      const em = rootEm.fork()\n      const db = getDb(em)\n      const recipientUserIds = await getRecipientUserIdsForFeature(db, ctx.tenantId, input.requiredFeature)\n\n      if (recipientUserIds.length === 0) {\n        debug('No users found with feature:', input.requiredFeature, 'in tenant:', ctx.tenantId)\n        return []\n      }\n\n      let authorizedRecipientUserIds = recipientUserIds\n      if (input.restrictRecipientsToOrganization) {\n        const uniqueCandidateUserIds = Array.from(new Set(recipientUserIds))\n        if (!ctx.organizationId) {\n          logger.warn('Organization-restricted feature fan-out skipped because organization scope is missing', {\n            tenantId: ctx.tenantId,\n            requiredFeature: input.requiredFeature,\n          })\n          return []\n        }\n\n        if (uniqueCandidateUserIds.length > 200) {\n          logger.warn('Organization-restricted feature fan-out skipped because the candidate cap was exceeded', {\n            tenantId: ctx.tenantId,\n            organizationId: ctx.organizationId,\n            requiredFeature: input.requiredFeature,\n            candidateCount: uniqueCandidateUserIds.length,\n            candidateCap: 200,\n          })\n          return []\n        }\n\n        if (!container) {\n          logger.warn('Organization-restricted feature fan-out skipped because the DI container is unavailable', {\n            tenantId: ctx.tenantId,\n            organizationId: ctx.organizationId,\n            requiredFeature: input.requiredFeature,\n          })\n          return []\n        }\n\n        try {\n          const rbacService = container.resolve('rbacService') as {\n            userHasAllFeatures: (\n              userId: string,\n              features: string[],\n              scope: { tenantId: string | null; organizationId: string | null },\n            ) => Promise<boolean>\n          }\n          const allowedRecipientUserIds: string[] = []\n          for (let offset = 0; offset < uniqueCandidateUserIds.length; offset += 10) {\n            const candidates = uniqueCandidateUserIds.slice(offset, offset + 10)\n            const results = await Promise.all(candidates.map(async (recipientUserId) => ({\n              recipientUserId,\n              allowed: await rbacService.userHasAllFeatures(\n                recipientUserId,\n                [input.requiredFeature],\n                { tenantId: ctx.tenantId, organizationId: ctx.organizationId ?? null },\n              ),\n            })))\n            for (const result of results) {\n              if (result.allowed) allowedRecipientUserIds.push(result.recipientUserId)\n            }\n          }\n          authorizedRecipientUserIds = allowedRecipientUserIds\n        } catch (err) {\n          logger.warn('Organization-restricted feature fan-out skipped because RBAC filtering failed', {\n            tenantId: ctx.tenantId,\n            organizationId: ctx.organizationId,\n            requiredFeature: input.requiredFeature,\n            err,\n          })\n          return []\n        }\n\n        if (authorizedRecipientUserIds.length === 0) {\n          debug('No users found with feature in organization:', input.requiredFeature, ctx.organizationId)\n          return []\n        }\n      }\n\n      debug('Creating notifications for', authorizedRecipientUserIds.length, 'user(s) with feature:', input.requiredFeature)\n\n      const {\n        requiredFeature: _requiredFeature,\n        restrictRecipientsToOrganization: _restrictRecipientsToOrganization,\n        ...content\n      } = input\n      const notifications: Notification[] = []\n      const uniqueRecipientUserIds = Array.from(new Set(authorizedRecipientUserIds))\n      const resolved = await resolveChannelsForRecipients(content, uniqueRecipientUserIds, ctx)\n      const writeEm = rootEm.fork()\n\n      await writeEm.transactional(async (tx) => {\n        for (const { recipientUserId, channels } of resolved) {\n          const notification = await createOrRefreshNotification(tx, content, recipientUserId, ctx, channels)\n          notifications.push(notification)\n        }\n        await tx.flush()\n      })\n\n      await invalidateNotificationCache(container, ctx, 'created')\n      await emitNotificationCreatedBatch(eventBus, notifications, ctx)\n      await emitNotificationSseEvents(eventBus, notifications, ctx)\n\n      return notifications\n    },\n\n    async markAsRead(notificationId, ctx) {\n      const em = rootEm.fork()\n      const notification = await findScopedNotificationOrThrow(em, notificationId, ctx)\n\n      if (notification.status === 'unread') {\n        notification.status = 'read'\n        notification.readAt = new Date()\n        await em.flush()\n\n        await invalidateNotificationCache(container, ctx, 'updated', notification.id)\n        await eventBus.emit(NOTIFICATION_EVENTS.READ, {\n          notificationId: notification.id,\n          userId: ctx.userId,\n          tenantId: ctx.tenantId,\n        })\n      }\n\n      return notification\n    },\n\n    async markAllAsRead(ctx) {\n      const em = rootEm.fork()\n      const db = getDb(em)\n      const applyScope = <QB extends { where: (...args: any[]) => QB }>(q: QB): QB => {\n        let chain = q\n          .where('recipient_user_id' as any, '=', ctx.userId as any)\n          .where('tenant_id' as any, '=', ctx.tenantId)\n          .where('status' as any, '=', 'unread')\n          // Only in-app-visible rows count toward the badge (see getUnreadCount),\n          // so \"mark all as read\" must scope to the SAME set \u2014 otherwise it flips\n          // push/email-only rows the user never saw and SSE-broadcasts a read for\n          // notifications that were never in the bell, inflating the returned\n          // count past what the badge showed.\n          .where(inAppVisibleSql() as any)\n        if (ctx.organizationId) {\n          chain = chain.where('organization_id' as any, '=', ctx.organizationId)\n        }\n        return chain\n      }\n\n      const targetRows = await applyScope(\n        db\n          .selectFrom('notifications' as any)\n          .select([\n            'id' as any,\n            'organization_id' as any,\n            'recipient_user_id' as any,\n          ]),\n      ).execute() as Array<{ id: string }>\n\n      if (!targetRows.length) {\n        return 0\n      }\n\n      const updateResult = await applyScope(\n        db.updateTable('notifications' as any).set({\n          status: 'read',\n          read_at: sql`now()`,\n        } as any) as any,\n      ).executeTakeFirst() as { numUpdatedRows?: bigint | number } | undefined\n      const result = Number(updateResult?.numUpdatedRows ?? targetRows.length)\n\n      await invalidateNotificationCache(container, ctx, 'updated')\n\n      const notifications = await findWithDecryption(em, Notification, {\n        id: { $in: targetRows.map((row) => row.id) },\n      }, undefined, {\n        tenantId: ctx.tenantId,\n        organizationId: ctx.organizationId ?? null,\n      })\n\n      for (const notification of notifications) {\n        await eventBus.emit(NOTIFICATION_EVENTS.READ, {\n          notificationId: notification.id,\n          userId: ctx.userId,\n          tenantId: ctx.tenantId,\n        })\n\n        await eventBus.emit(NOTIFICATION_SSE_EVENTS.CREATED, {\n          tenantId: notification.tenantId,\n          organizationId: notification.organizationId ?? null,\n          recipientUserId: notification.recipientUserId,\n          notification: toNotificationDto(notification),\n        })\n      }\n\n      return result\n    },\n\n    async dismiss(notificationId, ctx) {\n      const em = rootEm.fork()\n      const notification = await findScopedNotificationOrThrow(em, notificationId, ctx)\n\n      notification.status = 'dismissed'\n      notification.dismissedAt = new Date()\n      await em.flush()\n\n      await invalidateNotificationCache(container, ctx, 'updated', notification.id)\n      await eventBus.emit(NOTIFICATION_EVENTS.DISMISSED, {\n        notificationId: notification.id,\n        userId: ctx.userId,\n        tenantId: ctx.tenantId,\n      })\n\n      return notification\n    },\n\n    async restoreDismissed(notificationId, status, ctx) {\n      const em = rootEm.fork()\n      const notification = await findScopedNotificationOrThrow(em, notificationId, ctx)\n\n      if (notification.status !== 'dismissed') {\n        return notification\n      }\n\n      // A dismissed notification whose action already ran comes back as `actioned`,\n      // whatever the caller asked for: `actioned_at` outlives the dismissal.\n      const targetStatus: NotificationStatus = notification.actionedAt != null ? 'actioned' : status ?? 'read'\n      notification.status = targetStatus\n      notification.dismissedAt = null\n\n      if (targetStatus === 'unread') {\n        notification.readAt = null\n      } else if (!notification.readAt) {\n        notification.readAt = new Date()\n      }\n\n      await em.flush()\n\n      await invalidateNotificationCache(container, ctx, 'updated', notification.id)\n      await eventBus.emit(NOTIFICATION_EVENTS.RESTORED, {\n        notificationId: notification.id,\n        userId: ctx.userId,\n        tenantId: ctx.tenantId,\n        status: targetStatus,\n      })\n\n      return notification\n    },\n\n    async executeAction(notificationId, input, ctx) {\n      const em = rootEm.fork()\n      const notification = await findScopedNotificationOrThrow(em, notificationId, ctx)\n\n      const actionData = notification.actionData\n      const action = actionData?.actions?.find((a) => a.id === input.actionId)\n\n      if (!action) {\n        throw new Error('Action not found')\n      }\n\n      // Reject an already-actioned notification before dispatching the command,\n      // so a retry or double-click cannot re-run the side effect. `actioned_at` is\n      // the durable marker: `status` is overwritten by a dismissal.\n      if (notification.status === 'actioned' || notification.actionedAt != null) {\n        throw actionAlreadyExecuted()\n      }\n\n      const actionedAt = new Date()\n      const previousStatus = notification.status\n      const previousActionedAt = notification.actionedAt ?? null\n      const previousActionTaken = notification.actionTaken ?? null\n\n      // Atomically claim the notification so only one concurrent request can run\n      // the side-effecting command. The conditional UPDATE matches only while the\n      // notification has not been actioned yet; a losing request updates 0 rows.\n      const claimResult = (await getDb(em)\n        .updateTable('notifications' as any)\n        .set({\n          status: 'actioned',\n          actioned_at: actionedAt,\n          action_taken: input.actionId,\n        } as any)\n        .where('id' as any, '=', notification.id)\n        .where('recipient_user_id' as any, '=', ctx.userId as any)\n        .where('tenant_id' as any, '=', ctx.tenantId)\n        .where('status' as any, '!=', 'actioned')\n        .where('actioned_at' as any, 'is', null)\n        .executeTakeFirst()) as { numUpdatedRows?: bigint | number } | undefined\n\n      if (Number(claimResult?.numUpdatedRows ?? 0) === 0) {\n        throw actionAlreadyExecuted()\n      }\n\n      // The claim is provisional: if the side-effecting command fails, the action\n      // never actually completed, so release the claim to its prior state. This\n      // lets the user retry the action instead of the notification being locked as\n      // `actioned` forever. The claim is owned through its own `actioned_at` and\n      // `action_taken`, not through `status`: a dismissal that lands while the\n      // command runs overwrites `status`, and the release must still clear the\n      // claim then \u2014 while leaving that dismissal in place.\n      const releaseClaim = async () => {\n        await getDb(em)\n          .updateTable('notifications' as any)\n          .set({\n            status: sql`case when status = 'actioned' then ${previousStatus} else status end`,\n            actioned_at: previousActionedAt,\n            action_taken: previousActionTaken,\n          } as any)\n          .where('id' as any, '=', notification.id)\n          .where('recipient_user_id' as any, '=', ctx.userId as any)\n          .where('tenant_id' as any, '=', ctx.tenantId)\n          .where('actioned_at' as any, '=', actionedAt)\n          .where('action_taken' as any, '=', input.actionId)\n          .executeTakeFirst()\n      }\n\n      let result: unknown = null\n\n      if (action.commandId && commandBus && container) {\n        const commandInput = {\n          id: notification.sourceEntityId,\n          ...input.payload,\n        }\n\n        // Build a CommandRuntimeContext from the notification service context\n        const commandCtx = {\n          container,\n          auth: {\n            sub: ctx.userId,\n            tenantId: ctx.tenantId,\n            orgId: ctx.organizationId,\n          },\n          organizationScope: null,\n          selectedOrganizationId: ctx.organizationId ?? null,\n          organizationIds: ctx.organizationId ? [ctx.organizationId] : null,\n        }\n\n        let commandResult: { result: unknown }\n        try {\n          commandResult = await commandBus.execute(action.commandId, {\n            input: commandInput,\n            ctx: commandCtx,\n            metadata: {\n              tenantId: ctx.tenantId,\n              organizationId: ctx.organizationId,\n              resourceKind: 'notifications',\n            },\n          })\n        } catch (err) {\n          // Never let a rollback failure mask the original command error \u2014 the\n          // caller needs the real failure to decide whether to retry.\n          try {\n            await releaseClaim()\n          } catch (releaseErr) {\n            debug('failed to release notification action claim', releaseErr)\n          }\n          throw err\n        }\n\n        result = commandResult.result\n      }\n\n      notification.status = 'actioned'\n      notification.actionedAt = actionedAt\n      notification.actionTaken = input.actionId\n      notification.actionResult = result as Record<string, unknown>\n\n      if (!notification.readAt) {\n        notification.readAt = new Date()\n      }\n\n      await em.flush()\n\n      await invalidateNotificationCache(container, ctx, 'updated', notification.id)\n      await eventBus.emit(NOTIFICATION_EVENTS.ACTIONED, {\n        notificationId: notification.id,\n        actionId: input.actionId,\n        userId: ctx.userId,\n        tenantId: ctx.tenantId,\n      })\n\n      return { notification, result }\n    },\n\n    async getUnreadCount(ctx) {\n      const em = rootEm.fork()\n      return em.count(Notification, {\n        recipientUserId: ctx.userId,\n        tenantId: ctx.tenantId,\n        status: 'unread',\n        $and: [\n          buildNotificationReadScopeWhere(ctx),\n          inAppVisibleFilter(),\n        ],\n      })\n    },\n\n    async getPollData(ctx, since) {\n      const em = rootEm.fork()\n      const filters: Record<string, unknown> = {\n        recipientUserId: ctx.userId,\n        tenantId: ctx.tenantId,\n        $and: [\n          buildNotificationReadScopeWhere(ctx),\n          inAppVisibleFilter(),\n        ],\n      }\n\n      if (since) {\n        filters.createdAt = { $gt: new Date(since) }\n      }\n\n      const [notifications, unreadCount] = await Promise.all([\n        em.find(Notification, filters, {\n          orderBy: { createdAt: 'desc' },\n          limit: 50,\n        }),\n        em.count(Notification, {\n          recipientUserId: ctx.userId,\n          tenantId: ctx.tenantId,\n          status: 'unread',\n          $and: [\n            buildNotificationReadScopeWhere(ctx),\n            inAppVisibleFilter(),\n          ],\n        }),\n      ])\n\n      const recent = notifications.map(toNotificationDto)\n      const hasNew = since ? recent.length > 0 : false\n\n      return {\n        unreadCount,\n        recent,\n        hasNew,\n        lastId: recent[0]?.id,\n      }\n    },\n\n    async cleanupExpired() {\n      const em = rootEm.fork()\n      const db = getDb(em)\n\n      const affectedScopes = await db\n        .selectFrom('notifications' as any)\n        .select([\n          'tenant_id' as any,\n          'organization_id' as any,\n        ])\n        .where('expires_at' as any, '<', sql`now()`)\n        .where('status' as any, 'not in', ['actioned', 'dismissed'])\n        .distinct()\n        .execute() as Array<{ tenant_id: string; organization_id: string | null }>\n\n      if (!affectedScopes.length) return 0\n\n      const updateResult = await db\n        .updateTable('notifications' as any)\n        .set({\n          status: 'dismissed',\n          dismissed_at: sql`now()`,\n        } as any)\n        .where('expires_at' as any, '<', sql`now()`)\n        .where('status' as any, 'not in', ['actioned', 'dismissed'])\n        .executeTakeFirst() as { numUpdatedRows?: bigint | number } | undefined\n\n      for (const scope of affectedScopes) {\n        await invalidateNotificationCache(container, {\n          tenantId: scope.tenant_id,\n          organizationId: scope.organization_id,\n        }, 'updated')\n      }\n\n      return Number(updateResult?.numUpdatedRows ?? 0)\n    },\n\n    async deleteBySource(sourceEntityType, sourceEntityId, ctx) {\n      const em = rootEm.fork()\n      const db = getDb(em)\n\n      const deleteResult = await db\n        .deleteFrom('notifications' as any)\n        .where('source_entity_type' as any, '=', sourceEntityType)\n        .where('source_entity_id' as any, '=', sourceEntityId)\n        .where('tenant_id' as any, '=', ctx.tenantId)\n        .executeTakeFirst() as { numDeletedRows?: bigint | number } | undefined\n\n      const deletedCount = Number(deleteResult?.numDeletedRows ?? 0)\n      if (deletedCount > 0) {\n        await invalidateNotificationCache(container, ctx, 'deleted')\n      }\n\n      return deletedCount\n    },\n  }\n}\n\n/**\n * Helper to create notification service from a DI container.\n * Use this in API routes and commands to avoid DI resolution issues.\n */\nexport function resolveNotificationService(container: {\n  resolve: (name: string) => unknown\n}): NotificationService {\n  const em = container.resolve('em') as EntityManager\n  const eventBus = container.resolve('eventBus') as { emit: (event: string, payload: unknown) => Promise<void> }\n\n  // commandBus may not be registered in all contexts, so resolve it safely\n  let commandBus: NotificationServiceDeps['commandBus']\n  try {\n    commandBus = container.resolve('commandBus') as typeof commandBus\n  } catch {\n    // commandBus not available - actions with commandId won't work\n    commandBus = undefined\n  }\n\n  return createNotificationService({ em, eventBus, commandBus, container })\n}\n"],
-  "mappings": "AACA,SAAsB,WAAW;AACjC,SAAS,qBAAqB;AAC9B,SAAS,2BAA2B;AACpC,SAAS,oBAA6C;AAEtD;AAAA,EACE;AAAA,OAEK;AACP,SAAS,qBAAqB,+BAA+B;AAC7D,SAAS,uBAAuB,0BAA0B;AAC1D;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OAGK;AACP,SAAS,yBAAyB;AAClC,SAAS,uCAAuC;AAChD;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,4BAA4B,mCAAmC;AACxE,SAAS,oBAAoB;AAC7B,SAAS,2BAA2B;AACpC,SAAS,oCAAoE;AAC7E,SAAS,yCAAyC;AAClD,SAAS,gCAAgC;AACzC;AAAA,EACE;AAAA,OAEK;AACP,SAAS,oBAAoB,iBAAiB,sBAAsB;AAEpE,MAAM,SAAS,aAAa,eAAe,EAAE,MAAM,EAAE,WAAW,UAAU,CAAC;AAE3E,SAAS,MAAM,YAAoB,SAA0B;AAC3D,SAAO,MAAM,SAAS,QAAQ,SAAS,EAAE,QAAQ,IAAI,MAAS;AAChE;AAEA,SAAS,MAAM,IAAgC;AAC7C,SAAO,GAAG,UAAe;AAC3B;AAEA,MAAM,sCAA4D,CAAC,UAAU,QAAQ,UAAU;AAC/F,MAAM,6BAA6B;AAEnC,SAAS,kBAAkB,gBAA0D;AACnF,SAAO,kBAAkB;AAC3B;AAEA,eAAe,4BACb,WACA,KACA,QACA,gBACe;AACf,MAAI,CAAC,UAAW;AAChB,QAAM;AAAA,IACJ;AAAA,IACA;AAAA,IACA;AAAA,MACE,IAAI;AAAA,MACJ,UAAU,IAAI;AAAA,MACd,gBAAgB,kBAAkB,IAAI,cAAc;AAAA,IACtD;AAAA,IACA,IAAI;AAAA,IACJ;AAAA,EACF;AACF;AAEA,eAAe,oCACb,IACA,kBACA,KACe;AACf,QAAM,yBAAyB,MAAM;AAAA,IACnC,MAAM,EAAE;AAAA,IACR,IAAI;AAAA,IACJ,kBAAkB,IAAI,cAAc;AAAA,IACpC;AAAA,EACF;AAEA,MAAI,uBAAuB,WAAW,iBAAiB,QAAQ;AAC7D,UAAM,IAAI,cAAc,KAAK,EAAE,OAAO,mCAAmC,CAAC;AAAA,EAC5E;AACF;AAEA,SAAS,wBAAuC;AAC9C,SAAO,IAAI,cAAc,KAAK;AAAA,IAC5B,OAAO;AAAA,IACP,MAAM;AAAA,EACR,CAAC;AACH;AAEA,SAAS,yBACP,cACA,OACA,iBACA,KACA,UACA;AACA,QAAM,UAAU,4BAA4B,MAAM,OAAO;AACzD,QAAM,WAAW,2BAA2B,MAAM,QAAQ;AAE1D,eAAa,kBAAkB;AAC/B,eAAa,OAAO,MAAM;AAC1B,eAAa,WAAW,MAAM;AAC9B,eAAa,UAAU,MAAM;AAC7B,eAAa,iBAAiB,MAAM;AACpC,eAAa,gBAAgB,MAAM;AACnC,eAAa,QAAQ,MAAM,SAAS,MAAM,YAAY;AACtD,eAAa,OAAO,MAAM;AAC1B,eAAa,OAAO,MAAM;AAC1B,eAAa,WAAW,MAAM,YAAY;AAC1C,eAAa,aAAa,UACtB;AAAA,IACE;AAAA,IACA,iBAAiB,MAAM;AAAA,EACzB,IACA;AACJ,eAAa,eAAe,MAAM;AAClC,eAAa,mBAAmB,MAAM;AACtC,eAAa,iBAAiB,MAAM;AACpC,eAAa,WAAW;AACxB,eAAa,WAAW,MAAM;AAC9B,eAAa,WAAW;AACxB,eAAa,YAAY,MAAM,YAAY,IAAI,KAAK,MAAM,SAAS,IAAI;AACvE,eAAa,WAAW,IAAI;AAC5B,eAAa,iBAAiB,kBAAkB,IAAI,cAAc;AAClE,eAAa,SAAS;AACtB,eAAa,SAAS;AACtB,eAAa,aAAa;AAC1B,eAAa,cAAc;AAC3B,eAAa,cAAc;AAC3B,eAAa,eAAe;AAC5B,eAAa,YAAY,oBAAI,KAAK;AACpC;AAEA,eAAe,8BACb,IACA,gBACA,KACuB;AACvB,QAAM,eAAe,MAAM;AAAA,IACzB;AAAA,IACA;AAAA,IACA;AAAA,MACE,IAAI;AAAA,MACJ,iBAAiB,IAAI;AAAA,MACrB,UAAU,IAAI;AAAA,IAChB;AAAA,IACA;AAAA,IACA;AAAA,MACE,UAAU,IAAI;AAAA,MACd,gBAAgB,IAAI,kBAAkB;AAAA,IACxC;AAAA,EACF;AACA,MAAI,CAAC,cAAc;AACjB,UAAM,IAAI,cAAc,KAAK,EAAE,OAAO,yBAAyB,CAAC;AAAA,EAClE;AACA,SAAO;AACT;AAEA,eAAe,0BACb,UACA,eACA,KACe;AAGf,QAAM,UAAU,cAAc,OAAO,CAAC,iBAAiB,eAAe,aAAa,QAAQ,CAAC;AAC5F,MAAI,QAAQ,WAAW,EAAG;AAE1B,QAAM,0BAA0B,MAAM,KAAK,IAAI,IAAI,QAAQ,IAAI,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;AACzF,QAAM,SAAS,KAAK,wBAAwB,eAAe;AAAA,IACzD,UAAU,IAAI;AAAA,IACd,gBAAgB,kBAAkB,IAAI,cAAc;AAAA,IACpD,kBAAkB;AAAA,IAClB,OAAO,QAAQ;AAAA,EACjB,CAAC;AAED,aAAW,gBAAgB,SAAS;AAClC,UAAM,SAAS,KAAK,wBAAwB,SAAS;AAAA,MACnD,UAAU,aAAa;AAAA,MACvB,gBAAgB,aAAa,kBAAkB;AAAA,MAC/C,iBAAiB,aAAa;AAAA,MAC9B,cAAc,kBAAkB,YAAY;AAAA,IAC9C,CAAC;AAAA,EACH;AACF;AAEA,eAAe,4BACb,IACA,OACA,iBACA,KACA,UACuB;AACvB,MAAI,MAAM,YAAY,MAAM,SAAS,KAAK,EAAE,SAAS,GAAG;AACtD,UAAM,WAAW,kBAAkB,IAAI,cAAc,KAAK;AAC1D,UAAM,UAAU,iBAAiB,IAAI,QAAQ,IAAI,QAAQ,IAAI,eAAe,IAAI,MAAM,IAAI,IAAI,MAAM,QAAQ;AAC5G,QAAI;AACF,YAAM,KAAK,MAAM,EAAE;AACnB,YAAM,4CAA4C,OAAO,KAAK,QAAQ,EAAE;AAAA,IAC1E,QAAQ;AAAA,IAER;AAEA,UAAM,WAAW,MAAM,GAAG,QAAQ,cAAc;AAAA,MAC9C;AAAA,MACA,UAAU,IAAI;AAAA,MACd,gBAAgB,kBAAkB,IAAI,cAAc;AAAA,MACpD,MAAM,MAAM;AAAA,MACZ,UAAU,MAAM;AAAA,MAChB,QAAQ,EAAE,KAAK,oCAAoC;AAAA,IACrD,GAAG;AAAA,MACD,SAAS,EAAE,WAAW,OAAO;AAAA,IAC/B,CAAC;AAED,QAAI,UAAU;AACZ,+BAAyB,UAAU,OAAO,iBAAiB,KAAK,QAAQ;AACxE,aAAO;AAAA,IACT;AAAA,EACF;AAEA,SAAO,wBAAwB,IAAI,OAAO,iBAAiB,KAAK,QAAQ;AAC1E;AAqDO,SAAS,0BAA0B,MAAoD;AAC5F,QAAM,EAAE,IAAI,QAAQ,UAAU,YAAY,UAAU,IAAI;AAYxD,QAAM,qBAAqB,OACzB,SACA,iBACA,UACA,cAA6C,oCAAoC,EAAE,IAAI,OAAO,KAAK,EAAE,CAAC,GACtG,kBAC6B;AAC7B,UAAM,qBAAqB,kCAAkC,EAAE,IAAI,CAAC,aAAa,SAAS,EAAE;AAC5F,QAAI,mBAAmB,WAAW,EAAG,QAAO;AAI5C,UAAM,iBAAiB,QAAQ,YAAY,QAAQ,SAAS,SAAS,IAAI,QAAQ,WAAW;AAC5F,UAAM,YAAY,kBAAkB,UAC/B,MAAM,6BAA6B,OAAO,KAAK,GAAG,SAAS,UAAU,CAAC,QAAQ,IAAI,CAAC,GAAG,IAAI,QAAQ,IAAI,KAAK,OAC5G;AACJ,WAAO,yBAAyB;AAAA,MAC9B,QAAQ,QAAQ;AAAA,MAChB,MAAM,oBAAoB,QAAQ,IAAI;AAAA,MACtC,OAAO,EAAE,UAAU,SAAS,UAAU,QAAQ,gBAAgB;AAAA,MAC9D;AAAA,MACA;AAAA,MACA;AAAA,MACA,kBAAkB,WAAW,YAAY;AAAA,MACzC,mBAAmB,WAAW,aAAa;AAAA,IAC7C,CAAC;AAAA,EACH;AASA,QAAM,+BAA+B,OACnC,SACA,kBACA,aAC2E;AAC3E,UAAM,cAAc,oCAAoC,EAAE,IAAI,OAAO,KAAK,EAAE,CAAC;AAE7E,UAAM,iBACH,MAAM,6BAA6B,OAAO,KAAK,GAAG,SAAS,UAAU,CAAC,QAAQ,IAAI,CAAC,GAAG,IAAI,QAAQ,IAAI,KAAK;AAC9G,UAAM,WAA0E,CAAC;AACjF,eAAW,mBAAmB,kBAAkB;AAC9C,eAAS,KAAK;AAAA,QACZ;AAAA,QACA,UAAU,MAAM,mBAAmB,SAAS,iBAAiB,UAAU,aAAa,aAAa;AAAA,MACnG,CAAC;AAAA,IACH;AACA,WAAO;AAAA,EACT;AAEA,SAAO;AAAA,IACL,MAAM,OAAO,OAAO,KAAK;AACvB,YAAM,EAAE,iBAAiB,GAAG,QAAQ,IAAI;AACxC,YAAM,WAAW,MAAM,mBAAmB,SAAS,iBAAiB,GAAG;AACvE,YAAM,UAAU,OAAO,KAAK;AAC5B,YAAM,eAAe,MAAM,QAAQ,cAAc,OAAO,OAAO;AAC7D,cAAM,oCAAoC,IAAI,CAAC,eAAe,GAAG,GAAG;AACpE,cAAM,SAAS,MAAM,4BAA4B,IAAI,SAAS,iBAAiB,KAAK,QAAQ;AAC5F,cAAM,GAAG,MAAM;AACf,eAAO;AAAA,MACT,CAAC;AAED,YAAM,4BAA4B,WAAW,KAAK,SAAS;AAG3D,YAAM,wBAAwB,UAAU,cAAc,GAAG;AACzD,UAAI,eAAe,aAAa,QAAQ,GAAG;AACzC,cAAM,SAAS,KAAK,wBAAwB,SAAS;AAAA,UACnD,UAAU,aAAa;AAAA,UACvB,gBAAgB,aAAa,kBAAkB;AAAA,UAC/C,iBAAiB,aAAa;AAAA,UAC9B,cAAc,kBAAkB,YAAY;AAAA,QAC9C,CAAC;AAAA,MACH;AAEA,aAAO;AAAA,IACT;AAAA,IAEA,MAAM,YAAY,OAAO,KAAK;AAC5B,YAAM,mBAAmB,MAAM,KAAK,IAAI,IAAI,MAAM,gBAAgB,CAAC;AACnE,YAAM,EAAE,kBAAkB,mBAAmB,GAAG,QAAQ,IAAI;AAC5D,YAAM,gBAAgC,CAAC;AACvC,YAAM,WAAW,MAAM,6BAA6B,SAAS,kBAAkB,GAAG;AAClF,YAAM,UAAU,OAAO,KAAK;AAE5B,YAAM,QAAQ,cAAc,OAAO,OAAO;AACxC,cAAM,oCAAoC,IAAI,kBAAkB,GAAG;AACnE,mBAAW,EAAE,iBAAiB,SAAS,KAAK,UAAU;AACpD,gBAAM,eAAe,MAAM,4BAA4B,IAAI,SAAS,iBAAiB,KAAK,QAAQ;AAClG,wBAAc,KAAK,YAAY;AAAA,QACjC;AACA,cAAM,GAAG,MAAM;AAAA,MACjB,CAAC;AAED,YAAM,4BAA4B,WAAW,KAAK,SAAS;AAC3D,YAAM,6BAA6B,UAAU,eAAe,GAAG;AAC/D,YAAM,0BAA0B,UAAU,eAAe,GAAG;AAE5D,aAAO;AAAA,IACT;AAAA,IAEA,MAAM,cAAc,OAAO,KAAK;AAC9B,YAAM,KAAK,OAAO,KAAK;AAEvB,YAAM,KAAK,MAAM,EAAE;AACnB,YAAM,mBAAmB,MAAM,2BAA2B,IAAI,IAAI,UAAU,MAAM,MAAM;AACxF,UAAI,iBAAiB,WAAW,GAAG;AACjC,eAAO,CAAC;AAAA,MACV;AAEA,YAAM,EAAE,QAAQ,SAAS,GAAG,QAAQ,IAAI;AACxC,YAAM,gBAAgC,CAAC;AACvC,YAAM,yBAAyB,MAAM,KAAK,IAAI,IAAI,gBAAgB,CAAC;AACnE,YAAM,WAAW,MAAM,6BAA6B,SAAS,wBAAwB,GAAG;AACxF,YAAM,UAAU,OAAO,KAAK;AAE5B,YAAM,QAAQ,cAAc,OAAO,OAAO;AACxC,mBAAW,EAAE,iBAAiB,SAAS,KAAK,UAAU;AACpD,gBAAM,eAAe,MAAM,4BAA4B,IAAI,SAAS,iBAAiB,KAAK,QAAQ;AAClG,wBAAc,KAAK,YAAY;AAAA,QACjC;AACA,cAAM,GAAG,MAAM;AAAA,MACjB,CAAC;AAED,YAAM,4BAA4B,WAAW,KAAK,SAAS;AAC3D,YAAM,6BAA6B,UAAU,eAAe,GAAG;AAC/D,YAAM,0BAA0B,UAAU,eAAe,GAAG;AAE5D,aAAO;AAAA,IACT;AAAA,IAEA,MAAM,iBAAiB,OAAO,KAAK;AACjC,YAAM,KAAK,OAAO,KAAK;AACvB,YAAM,KAAK,MAAM,EAAE;AACnB,YAAM,mBAAmB,MAAM,8BAA8B,IAAI,IAAI,UAAU,MAAM,eAAe;AAEpG,UAAI,iBAAiB,WAAW,GAAG;AACjC,cAAM,gCAAgC,MAAM,iBAAiB,cAAc,IAAI,QAAQ;AACvF,eAAO,CAAC;AAAA,MACV;AAEA,UAAI,6BAA6B;AACjC,UAAI,MAAM,kCAAkC;AAC1C,cAAM,yBAAyB,MAAM,KAAK,IAAI,IAAI,gBAAgB,CAAC;AACnE,YAAI,CAAC,IAAI,gBAAgB;AACvB,iBAAO,KAAK,yFAAyF;AAAA,YACnG,UAAU,IAAI;AAAA,YACd,iBAAiB,MAAM;AAAA,UACzB,CAAC;AACD,iBAAO,CAAC;AAAA,QACV;AAEA,YAAI,uBAAuB,SAAS,KAAK;AACvC,iBAAO,KAAK,0FAA0F;AAAA,YACpG,UAAU,IAAI;AAAA,YACd,gBAAgB,IAAI;AAAA,YACpB,iBAAiB,MAAM;AAAA,YACvB,gBAAgB,uBAAuB;AAAA,YACvC,cAAc;AAAA,UAChB,CAAC;AACD,iBAAO,CAAC;AAAA,QACV;AAEA,YAAI,CAAC,WAAW;AACd,iBAAO,KAAK,2FAA2F;AAAA,YACrG,UAAU,IAAI;AAAA,YACd,gBAAgB,IAAI;AAAA,YACpB,iBAAiB,MAAM;AAAA,UACzB,CAAC;AACD,iBAAO,CAAC;AAAA,QACV;AAEA,YAAI;AACF,gBAAM,cAAc,UAAU,QAAQ,aAAa;AAOnD,gBAAM,0BAAoC,CAAC;AAC3C,mBAAS,SAAS,GAAG,SAAS,uBAAuB,QAAQ,UAAU,IAAI;AACzE,kBAAM,aAAa,uBAAuB,MAAM,QAAQ,SAAS,EAAE;AACnE,kBAAM,UAAU,MAAM,QAAQ,IAAI,WAAW,IAAI,OAAO,qBAAqB;AAAA,cAC3E;AAAA,cACA,SAAS,MAAM,YAAY;AAAA,gBACzB;AAAA,gBACA,CAAC,MAAM,eAAe;AAAA,gBACtB,EAAE,UAAU,IAAI,UAAU,gBAAgB,IAAI,kBAAkB,KAAK;AAAA,cACvE;AAAA,YACF,EAAE,CAAC;AACH,uBAAW,UAAU,SAAS;AAC5B,kBAAI,OAAO,QAAS,yBAAwB,KAAK,OAAO,eAAe;AAAA,YACzE;AAAA,UACF;AACA,uCAA6B;AAAA,QAC/B,SAAS,KAAK;AACZ,iBAAO,KAAK,iFAAiF;AAAA,YAC3F,UAAU,IAAI;AAAA,YACd,gBAAgB,IAAI;AAAA,YACpB,iBAAiB,MAAM;AAAA,YACvB;AAAA,UACF,CAAC;AACD,iBAAO,CAAC;AAAA,QACV;AAEA,YAAI,2BAA2B,WAAW,GAAG;AAC3C,gBAAM,gDAAgD,MAAM,iBAAiB,IAAI,cAAc;AAC/F,iBAAO,CAAC;AAAA,QACV;AAAA,MACF;AAEA,YAAM,8BAA8B,2BAA2B,QAAQ,yBAAyB,MAAM,eAAe;AAErH,YAAM;AAAA,QACJ,iBAAiB;AAAA,QACjB,kCAAkC;AAAA,QAClC,GAAG;AAAA,MACL,IAAI;AACJ,YAAM,gBAAgC,CAAC;AACvC,YAAM,yBAAyB,MAAM,KAAK,IAAI,IAAI,0BAA0B,CAAC;AAC7E,YAAM,WAAW,MAAM,6BAA6B,SAAS,wBAAwB,GAAG;AACxF,YAAM,UAAU,OAAO,KAAK;AAE5B,YAAM,QAAQ,cAAc,OAAO,OAAO;AACxC,mBAAW,EAAE,iBAAiB,SAAS,KAAK,UAAU;AACpD,gBAAM,eAAe,MAAM,4BAA4B,IAAI,SAAS,iBAAiB,KAAK,QAAQ;AAClG,wBAAc,KAAK,YAAY;AAAA,QACjC;AACA,cAAM,GAAG,MAAM;AAAA,MACjB,CAAC;AAED,YAAM,4BAA4B,WAAW,KAAK,SAAS;AAC3D,YAAM,6BAA6B,UAAU,eAAe,GAAG;AAC/D,YAAM,0BAA0B,UAAU,eAAe,GAAG;AAE5D,aAAO;AAAA,IACT;AAAA,IAEA,MAAM,WAAW,gBAAgB,KAAK;AACpC,YAAM,KAAK,OAAO,KAAK;AACvB,YAAM,eAAe,MAAM,8BAA8B,IAAI,gBAAgB,GAAG;AAEhF,UAAI,aAAa,WAAW,UAAU;AACpC,qBAAa,SAAS;AACtB,qBAAa,SAAS,oBAAI,KAAK;AAC/B,cAAM,GAAG,MAAM;AAEf,cAAM,4BAA4B,WAAW,KAAK,WAAW,aAAa,EAAE;AAC5E,cAAM,SAAS,KAAK,oBAAoB,MAAM;AAAA,UAC5C,gBAAgB,aAAa;AAAA,UAC7B,QAAQ,IAAI;AAAA,UACZ,UAAU,IAAI;AAAA,QAChB,CAAC;AAAA,MACH;AAEA,aAAO;AAAA,IACT;AAAA,IAEA,MAAM,cAAc,KAAK;AACvB,YAAM,KAAK,OAAO,KAAK;AACvB,YAAM,KAAK,MAAM,EAAE;AACnB,YAAM,aAAa,CAA+C,MAAc;AAC9E,YAAI,QAAQ,EACT,MAAM,qBAA4B,KAAK,IAAI,MAAa,EACxD,MAAM,aAAoB,KAAK,IAAI,QAAQ,EAC3C,MAAM,UAAiB,KAAK,QAAQ,EAMpC,MAAM,gBAAgB,CAAQ;AACjC,YAAI,IAAI,gBAAgB;AACtB,kBAAQ,MAAM,MAAM,mBAA0B,KAAK,IAAI,cAAc;AAAA,QACvE;AACA,eAAO;AAAA,MACT;AAEA,YAAM,aAAa,MAAM;AAAA,QACvB,GACG,WAAW,eAAsB,EACjC,OAAO;AAAA,UACN;AAAA,UACA;AAAA,UACA;AAAA,QACF,CAAC;AAAA,MACL,EAAE,QAAQ;AAEV,UAAI,CAAC,WAAW,QAAQ;AACtB,eAAO;AAAA,MACT;AAEA,YAAM,eAAe,MAAM;AAAA,QACzB,GAAG,YAAY,eAAsB,EAAE,IAAI;AAAA,UACzC,QAAQ;AAAA,UACR,SAAS;AAAA,QACX,CAAQ;AAAA,MACV,EAAE,iBAAiB;AACnB,YAAM,SAAS,OAAO,cAAc,kBAAkB,WAAW,MAAM;AAEvE,YAAM,4BAA4B,WAAW,KAAK,SAAS;AAE3D,YAAM,gBAAgB,MAAM,mBAAmB,IAAI,cAAc;AAAA,QAC/D,IAAI,EAAE,KAAK,WAAW,IAAI,CAAC,QAAQ,IAAI,EAAE,EAAE;AAAA,MAC7C,GAAG,QAAW;AAAA,QACZ,UAAU,IAAI;AAAA,QACd,gBAAgB,IAAI,kBAAkB;AAAA,MACxC,CAAC;AAED,iBAAW,gBAAgB,eAAe;AACxC,cAAM,SAAS,KAAK,oBAAoB,MAAM;AAAA,UAC5C,gBAAgB,aAAa;AAAA,UAC7B,QAAQ,IAAI;AAAA,UACZ,UAAU,IAAI;AAAA,QAChB,CAAC;AAED,cAAM,SAAS,KAAK,wBAAwB,SAAS;AAAA,UACnD,UAAU,aAAa;AAAA,UACvB,gBAAgB,aAAa,kBAAkB;AAAA,UAC/C,iBAAiB,aAAa;AAAA,UAC9B,cAAc,kBAAkB,YAAY;AAAA,QAC9C,CAAC;AAAA,MACH;AAEA,aAAO;AAAA,IACT;AAAA,IAEA,MAAM,QAAQ,gBAAgB,KAAK;AACjC,YAAM,KAAK,OAAO,KAAK;AACvB,YAAM,eAAe,MAAM,8BAA8B,IAAI,gBAAgB,GAAG;AAEhF,mBAAa,SAAS;AACtB,mBAAa,cAAc,oBAAI,KAAK;AACpC,YAAM,GAAG,MAAM;AAEf,YAAM,4BAA4B,WAAW,KAAK,WAAW,aAAa,EAAE;AAC5E,YAAM,SAAS,KAAK,oBAAoB,WAAW;AAAA,QACjD,gBAAgB,aAAa;AAAA,QAC7B,QAAQ,IAAI;AAAA,QACZ,UAAU,IAAI;AAAA,MAChB,CAAC;AAED,aAAO;AAAA,IACT;AAAA,IAEA,MAAM,iBAAiB,gBAAgB,QAAQ,KAAK;AAClD,YAAM,KAAK,OAAO,KAAK;AACvB,YAAM,eAAe,MAAM,8BAA8B,IAAI,gBAAgB,GAAG;AAEhF,UAAI,aAAa,WAAW,aAAa;AACvC,eAAO;AAAA,MACT;AAIA,YAAM,eAAmC,aAAa,cAAc,OAAO,aAAa,UAAU;AAClG,mBAAa,SAAS;AACtB,mBAAa,cAAc;AAE3B,UAAI,iBAAiB,UAAU;AAC7B,qBAAa,SAAS;AAAA,MACxB,WAAW,CAAC,aAAa,QAAQ;AAC/B,qBAAa,SAAS,oBAAI,KAAK;AAAA,MACjC;AAEA,YAAM,GAAG,MAAM;AAEf,YAAM,4BAA4B,WAAW,KAAK,WAAW,aAAa,EAAE;AAC5E,YAAM,SAAS,KAAK,oBAAoB,UAAU;AAAA,QAChD,gBAAgB,aAAa;AAAA,QAC7B,QAAQ,IAAI;AAAA,QACZ,UAAU,IAAI;AAAA,QACd,QAAQ;AAAA,MACV,CAAC;AAED,aAAO;AAAA,IACT;AAAA,IAEA,MAAM,cAAc,gBAAgB,OAAO,KAAK;AAC9C,YAAM,KAAK,OAAO,KAAK;AACvB,YAAM,eAAe,MAAM,8BAA8B,IAAI,gBAAgB,GAAG;AAEhF,YAAM,aAAa,aAAa;AAChC,YAAM,SAAS,YAAY,SAAS,KAAK,CAAC,MAAM,EAAE,OAAO,MAAM,QAAQ;AAEvE,UAAI,CAAC,QAAQ;AACX,cAAM,IAAI,MAAM,kBAAkB;AAAA,MACpC;AAKA,UAAI,aAAa,WAAW,cAAc,aAAa,cAAc,MAAM;AACzE,cAAM,sBAAsB;AAAA,MAC9B;AAEA,YAAM,aAAa,oBAAI,KAAK;AAC5B,YAAM,iBAAiB,aAAa;AACpC,YAAM,qBAAqB,aAAa,cAAc;AACtD,YAAM,sBAAsB,aAAa,eAAe;AAKxD,YAAM,cAAe,MAAM,MAAM,EAAE,EAChC,YAAY,eAAsB,EAClC,IAAI;AAAA,QACH,QAAQ;AAAA,QACR,aAAa;AAAA,QACb,cAAc,MAAM;AAAA,MACtB,CAAQ,EACP,MAAM,MAAa,KAAK,aAAa,EAAE,EACvC,MAAM,qBAA4B,KAAK,IAAI,MAAa,EACxD,MAAM,aAAoB,KAAK,IAAI,QAAQ,EAC3C,MAAM,UAAiB,MAAM,UAAU,EACvC,MAAM,eAAsB,MAAM,IAAI,EACtC,iBAAiB;AAEpB,UAAI,OAAO,aAAa,kBAAkB,CAAC,MAAM,GAAG;AAClD,cAAM,sBAAsB;AAAA,MAC9B;AASA,YAAM,eAAe,YAAY;AAC/B,cAAM,MAAM,EAAE,EACX,YAAY,eAAsB,EAClC,IAAI;AAAA,UACH,QAAQ,yCAAyC,cAAc;AAAA,UAC/D,aAAa;AAAA,UACb,cAAc;AAAA,QAChB,CAAQ,EACP,MAAM,MAAa,KAAK,aAAa,EAAE,EACvC,MAAM,qBAA4B,KAAK,IAAI,MAAa,EACxD,MAAM,aAAoB,KAAK,IAAI,QAAQ,EAC3C,MAAM,eAAsB,KAAK,UAAU,EAC3C,MAAM,gBAAuB,KAAK,MAAM,QAAQ,EAChD,iBAAiB;AAAA,MACtB;AAEA,UAAI,SAAkB;AAEtB,UAAI,OAAO,aAAa,cAAc,WAAW;AAC/C,cAAM,eAAe;AAAA,UACnB,IAAI,aAAa;AAAA,UACjB,GAAG,MAAM;AAAA,QACX;AAGA,cAAM,aAAa;AAAA,UACjB;AAAA,UACA,MAAM;AAAA,YACJ,KAAK,IAAI;AAAA,YACT,UAAU,IAAI;AAAA,YACd,OAAO,IAAI;AAAA,UACb;AAAA,UACA,mBAAmB;AAAA,UACnB,wBAAwB,IAAI,kBAAkB;AAAA,UAC9C,iBAAiB,IAAI,iBAAiB,CAAC,IAAI,cAAc,IAAI;AAAA,QAC/D;AAEA,YAAI;AACJ,YAAI;AACF,0BAAgB,MAAM,WAAW,QAAQ,OAAO,WAAW;AAAA,YACzD,OAAO;AAAA,YACP,KAAK;AAAA,YACL,UAAU;AAAA,cACR,UAAU,IAAI;AAAA,cACd,gBAAgB,IAAI;AAAA,cACpB,cAAc;AAAA,YAChB;AAAA,UACF,CAAC;AAAA,QACH,SAAS,KAAK;AAGZ,cAAI;AACF,kBAAM,aAAa;AAAA,UACrB,SAAS,YAAY;AACnB,kBAAM,+CAA+C,UAAU;AAAA,UACjE;AACA,gBAAM;AAAA,QACR;AAEA,iBAAS,cAAc;AAAA,MACzB;AAEA,mBAAa,SAAS;AACtB,mBAAa,aAAa;AAC1B,mBAAa,cAAc,MAAM;AACjC,mBAAa,eAAe;AAE5B,UAAI,CAAC,aAAa,QAAQ;AACxB,qBAAa,SAAS,oBAAI,KAAK;AAAA,MACjC;AAEA,YAAM,GAAG,MAAM;AAEf,YAAM,4BAA4B,WAAW,KAAK,WAAW,aAAa,EAAE;AAC5E,YAAM,SAAS,KAAK,oBAAoB,UAAU;AAAA,QAChD,gBAAgB,aAAa;AAAA,QAC7B,UAAU,MAAM;AAAA,QAChB,QAAQ,IAAI;AAAA,QACZ,UAAU,IAAI;AAAA,MAChB,CAAC;AAED,aAAO,EAAE,cAAc,OAAO;AAAA,IAChC;AAAA,IAEA,MAAM,eAAe,KAAK;AACxB,YAAM,KAAK,OAAO,KAAK;AACvB,aAAO,GAAG,MAAM,cAAc;AAAA,QAC5B,iBAAiB,IAAI;AAAA,QACrB,UAAU,IAAI;AAAA,QACd,QAAQ;AAAA,QACR,MAAM;AAAA,UACJ,gCAAgC,GAAG;AAAA,UACnC,mBAAmB;AAAA,QACrB;AAAA,MACF,CAAC;AAAA,IACH;AAAA,IAEA,MAAM,YAAY,KAAK,OAAO;AAC5B,YAAM,KAAK,OAAO,KAAK;AACvB,YAAM,UAAmC;AAAA,QACvC,iBAAiB,IAAI;AAAA,QACrB,UAAU,IAAI;AAAA,QACd,MAAM;AAAA,UACJ,gCAAgC,GAAG;AAAA,UACnC,mBAAmB;AAAA,QACrB;AAAA,MACF;AAEA,UAAI,OAAO;AACT,gBAAQ,YAAY,EAAE,KAAK,IAAI,KAAK,KAAK,EAAE;AAAA,MAC7C;AAEA,YAAM,CAAC,eAAe,WAAW,IAAI,MAAM,QAAQ,IAAI;AAAA,QACrD,GAAG,KAAK,cAAc,SAAS;AAAA,UAC7B,SAAS,EAAE,WAAW,OAAO;AAAA,UAC7B,OAAO;AAAA,QACT,CAAC;AAAA,QACD,GAAG,MAAM,cAAc;AAAA,UACrB,iBAAiB,IAAI;AAAA,UACrB,UAAU,IAAI;AAAA,UACd,QAAQ;AAAA,UACR,MAAM;AAAA,YACJ,gCAAgC,GAAG;AAAA,YACnC,mBAAmB;AAAA,UACrB;AAAA,QACF,CAAC;AAAA,MACH,CAAC;AAED,YAAM,SAAS,cAAc,IAAI,iBAAiB;AAClD,YAAM,SAAS,QAAQ,OAAO,SAAS,IAAI;AAE3C,aAAO;AAAA,QACL;AAAA,QACA;AAAA,QACA;AAAA,QACA,QAAQ,OAAO,CAAC,GAAG;AAAA,MACrB;AAAA,IACF;AAAA,IAEA,MAAM,iBAAiB;AACrB,YAAM,KAAK,OAAO,KAAK;AACvB,YAAM,KAAK,MAAM,EAAE;AAEnB,YAAM,iBAAiB,MAAM,GAC1B,WAAW,eAAsB,EACjC,OAAO;AAAA,QACN;AAAA,QACA;AAAA,MACF,CAAC,EACA,MAAM,cAAqB,KAAK,UAAU,EAC1C,MAAM,UAAiB,UAAU,CAAC,YAAY,WAAW,CAAC,EAC1D,SAAS,EACT,QAAQ;AAEX,UAAI,CAAC,eAAe,OAAQ,QAAO;AAEnC,YAAM,eAAe,MAAM,GACxB,YAAY,eAAsB,EAClC,IAAI;AAAA,QACH,QAAQ;AAAA,QACR,cAAc;AAAA,MAChB,CAAQ,EACP,MAAM,cAAqB,KAAK,UAAU,EAC1C,MAAM,UAAiB,UAAU,CAAC,YAAY,WAAW,CAAC,EAC1D,iBAAiB;AAEpB,iBAAW,SAAS,gBAAgB;AAClC,cAAM,4BAA4B,WAAW;AAAA,UAC3C,UAAU,MAAM;AAAA,UAChB,gBAAgB,MAAM;AAAA,QACxB,GAAG,SAAS;AAAA,MACd;AAEA,aAAO,OAAO,cAAc,kBAAkB,CAAC;AAAA,IACjD;AAAA,IAEA,MAAM,eAAe,kBAAkB,gBAAgB,KAAK;AAC1D,YAAM,KAAK,OAAO,KAAK;AACvB,YAAM,KAAK,MAAM,EAAE;AAEnB,YAAM,eAAe,MAAM,GACxB,WAAW,eAAsB,EACjC,MAAM,sBAA6B,KAAK,gBAAgB,EACxD,MAAM,oBAA2B,KAAK,cAAc,EACpD,MAAM,aAAoB,KAAK,IAAI,QAAQ,EAC3C,iBAAiB;AAEpB,YAAM,eAAe,OAAO,cAAc,kBAAkB,CAAC;AAC7D,UAAI,eAAe,GAAG;AACpB,cAAM,4BAA4B,WAAW,KAAK,SAAS;AAAA,MAC7D;AAEA,aAAO;AAAA,IACT;AAAA,EACF;AACF;AAMO,SAAS,2BAA2B,WAEnB;AACtB,QAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,QAAM,WAAW,UAAU,QAAQ,UAAU;AAG7C,MAAI;AACJ,MAAI;AACF,iBAAa,UAAU,QAAQ,YAAY;AAAA,EAC7C,QAAQ;AAEN,iBAAa;AAAA,EACf;AAEA,SAAO,0BAA0B,EAAE,IAAI,UAAU,YAAY,UAAU,CAAC;AAC1E;",
+  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport { type Kysely, sql } from 'kysely'\nimport { CrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { invalidateCrudCache } from '@open-mercato/shared/lib/crud/cache'\nimport { Notification, type NotificationStatus } from '../data/entities'\nimport type { CreateNotificationInput, CreateBatchNotificationInput, CreateRoleNotificationInput, CreateFeatureNotificationInput, ExecuteActionInput } from '../data/validators'\nimport {\n  NOTIFICATION_ACTION_ALREADY_EXECUTED_ERROR_CODE,\n  NOTIFICATION_ACTION_FORBIDDEN_ERROR_CODE,\n  type NotificationAction,\n  type NotificationPollData,\n  type NotificationTypeAction,\n} from '@open-mercato/shared/modules/notifications/types'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { getTelemetryRuntime } from '@open-mercato/shared/lib/telemetry/runtime'\nimport { NOTIFICATION_EVENTS, NOTIFICATION_SSE_EVENTS } from './events'\nimport { findOneWithDecryption, findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport {\n  buildNotificationEntity,\n  emitNotificationCreated,\n  emitNotificationCreatedBatch,\n  type NotificationContentInput,\n  type NotificationTenantContext,\n} from './notificationFactory'\nimport { toNotificationDto } from './notificationMapper'\nimport { buildNotificationReadScopeWhere } from './notificationScope'\nimport {\n  getRecipientUserIdsForFeature,\n  getRecipientUserIdsForRole,\n  getScopedNotificationRecipientUserIds,\n} from './notificationRecipients'\nimport { assertSafeNotificationHref, sanitizeNotificationActions } from './safeHref'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\nimport { getNotificationType } from './notification-type-registry'\nimport { getNotificationTypeOverrides, type NotificationTypeOverrides } from './typeOverrides'\nimport { getNotificationDeliveryStrategies } from './deliveryStrategies'\nimport { resolveEffectiveChannels } from './shouldDeliver'\nimport {\n  createNotificationPreferenceService,\n  type NotificationPreferenceService,\n} from './notificationPreferenceService'\nimport { inAppVisibleFilter, inAppVisibleSql, isInAppVisible } from './notificationVisibility'\n\nconst logger = createLogger('notifications').child({ component: 'service' })\n\nfunction debug(message: string, ...details: unknown[]): void {\n  logger.debug(message, details.length ? { details } : undefined)\n}\n\nfunction getDb(em: EntityManager): Kysely<any> {\n  return em.getKysely<any>()\n}\n\nconst UNIQUE_NOTIFICATION_ACTIVE_STATUSES: NotificationStatus[] = ['unread', 'read', 'actioned']\nconst NOTIFICATION_RESOURCE_KIND = 'notifications.notification'\n\nfunction normalizeOrgScope(organizationId: string | null | undefined): string | null {\n  return organizationId ?? null\n}\n\nasync function invalidateNotificationCache(\n  container: NotificationServiceDeps['container'],\n  ctx: Pick<NotificationServiceContext, 'tenantId' | 'organizationId'>,\n  reason: string,\n  notificationId?: string,\n): Promise<void> {\n  if (!container) return\n  await invalidateCrudCache(\n    container as Parameters<typeof invalidateCrudCache>[0],\n    NOTIFICATION_RESOURCE_KIND,\n    {\n      id: notificationId,\n      tenantId: ctx.tenantId,\n      organizationId: normalizeOrgScope(ctx.organizationId),\n    },\n    ctx.tenantId,\n    reason,\n  )\n}\n\nasync function assertNotificationRecipientsInScope(\n  em: EntityManager,\n  recipientUserIds: string[],\n  ctx: NotificationServiceContext,\n): Promise<void> {\n  const scopedRecipientUserIds = await getScopedNotificationRecipientUserIds(\n    getDb(em),\n    ctx.tenantId,\n    normalizeOrgScope(ctx.organizationId),\n    recipientUserIds,\n  )\n\n  if (scopedRecipientUserIds.length !== recipientUserIds.length) {\n    throw new CrudHttpError(404, { error: 'Notification recipient not found' })\n  }\n}\n\nfunction actionAlreadyExecuted(): CrudHttpError {\n  return new CrudHttpError(409, {\n    error: 'Notification action already executed',\n    code: NOTIFICATION_ACTION_ALREADY_EXECUTED_ERROR_CODE,\n  })\n}\n\nasync function actionForbidden(): Promise<CrudHttpError> {\n  const { translate } = await resolveTranslations()\n  return new CrudHttpError(403, {\n    error: translate('notifications.error.actionForbidden', 'You are not allowed to run this notification action'),\n    code: NOTIFICATION_ACTION_FORBIDDEN_ERROR_CODE,\n  })\n}\n\n/**\n * The command action the notification's registered type declares for a stored action: same action\n * id (across `actions` and `optionalActions`) and same `commandId`. Anything else is not dispatched.\n */\nfunction findDeclaredCommandAction(type: string, action: NotificationAction): NotificationTypeAction | null {\n  const definition = getNotificationType(type)\n  if (!definition) return null\n  const declared = [...definition.actions, ...(definition.optionalActions ?? [])]\n    .find((candidate) => candidate.id === action.id)\n  if (!declared?.commandId || declared.commandId !== action.commandId) return null\n  return declared\n}\n\nfunction applyNotificationContent(\n  notification: Notification,\n  input: NotificationContentInput,\n  recipientUserId: string,\n  ctx: NotificationTenantContext,\n  channels: string[] | null,\n) {\n  const actions = sanitizeNotificationActions(input.actions)\n  const linkHref = assertSafeNotificationHref(input.linkHref)\n\n  notification.recipientUserId = recipientUserId\n  notification.type = input.type\n  notification.titleKey = input.titleKey\n  notification.bodyKey = input.bodyKey\n  notification.titleVariables = input.titleVariables\n  notification.bodyVariables = input.bodyVariables\n  notification.title = input.title || input.titleKey || ''\n  notification.body = input.body\n  notification.icon = input.icon\n  notification.severity = input.severity ?? 'info'\n  notification.actionData = actions\n    ? {\n        actions,\n        primaryActionId: input.primaryActionId,\n      }\n    : null\n  notification.sourceModule = input.sourceModule\n  notification.sourceEntityType = input.sourceEntityType\n  notification.sourceEntityId = input.sourceEntityId\n  notification.linkHref = linkHref\n  notification.groupKey = input.groupKey\n  notification.channels = channels\n  notification.expiresAt = input.expiresAt ? new Date(input.expiresAt) : null\n  notification.tenantId = ctx.tenantId\n  notification.organizationId = normalizeOrgScope(ctx.organizationId)\n  notification.status = 'unread'\n  notification.readAt = null\n  notification.actionedAt = null\n  notification.dismissedAt = null\n  notification.actionTaken = null\n  notification.actionResult = null\n  notification.createdAt = new Date()\n}\n\nasync function findScopedNotificationOrThrow(\n  em: EntityManager,\n  notificationId: string,\n  ctx: NotificationServiceContext,\n): Promise<Notification> {\n  const notification = await findOneWithDecryption(\n    em,\n    Notification,\n    {\n      id: notificationId,\n      recipientUserId: ctx.userId,\n      tenantId: ctx.tenantId,\n    },\n    undefined,\n    {\n      tenantId: ctx.tenantId,\n      organizationId: ctx.organizationId ?? null,\n    },\n  )\n  if (!notification) {\n    throw new CrudHttpError(404, { error: 'Notification not found' })\n  }\n  return notification\n}\n\nasync function emitNotificationSseEvents(\n  eventBus: { emit: (event: string, payload: unknown) => Promise<void> },\n  notifications: Notification[],\n  ctx: NotificationServiceContext,\n): Promise<void> {\n  // Live bell updates only for notifications actually delivered to the in-app channel; the others\n  // exist as records but must not bump anyone's badge/inbox.\n  const visible = notifications.filter((notification) => isInAppVisible(notification.channels))\n  if (visible.length === 0) return\n\n  const visibleRecipientUserIds = Array.from(new Set(visible.map((n) => n.recipientUserId)))\n  await eventBus.emit(NOTIFICATION_SSE_EVENTS.BATCH_CREATED, {\n    tenantId: ctx.tenantId,\n    organizationId: normalizeOrgScope(ctx.organizationId),\n    recipientUserIds: visibleRecipientUserIds,\n    count: visible.length,\n  })\n\n  for (const notification of visible) {\n    await eventBus.emit(NOTIFICATION_SSE_EVENTS.CREATED, {\n      tenantId: notification.tenantId,\n      organizationId: notification.organizationId ?? null,\n      recipientUserId: notification.recipientUserId,\n      notification: toNotificationDto(notification),\n    })\n  }\n}\n\nasync function createOrRefreshNotification(\n  em: EntityManager,\n  input: NotificationContentInput,\n  recipientUserId: string,\n  ctx: NotificationTenantContext,\n  channels: string[] | null,\n): Promise<Notification> {\n  if (input.groupKey && input.groupKey.trim().length > 0) {\n    const orgScope = normalizeOrgScope(ctx.organizationId) ?? 'global'\n    const lockKey = `notifications:${ctx.tenantId}:${orgScope}:${recipientUserId}:${input.type}:${input.groupKey}`\n    try {\n      const db = getDb(em)\n      await sql`select pg_advisory_xact_lock(hashtext(${lockKey}))`.execute(db)\n    } catch {\n      // If advisory locks are unavailable, continue with best-effort dedupe.\n    }\n\n    const existing = await em.findOne(Notification, {\n      recipientUserId,\n      tenantId: ctx.tenantId,\n      organizationId: normalizeOrgScope(ctx.organizationId),\n      type: input.type,\n      groupKey: input.groupKey,\n      status: { $in: UNIQUE_NOTIFICATION_ACTIVE_STATUSES },\n    }, {\n      orderBy: { createdAt: 'desc' },\n    })\n\n    if (existing) {\n      applyNotificationContent(existing, input, recipientUserId, ctx, channels)\n      return existing\n    }\n  }\n\n  return buildNotificationEntity(em, input, recipientUserId, ctx, channels)\n}\n\nexport interface NotificationServiceContext {\n  tenantId: string\n  organizationId?: string | null\n  organizationIds?: string[] | null\n  userId?: string | null\n}\n\nexport type CreateFeatureNotificationServiceInput = CreateFeatureNotificationInput & {\n  restrictRecipientsToOrganization?: boolean\n}\n\nexport interface NotificationService {\n  create(input: CreateNotificationInput, ctx: NotificationServiceContext): Promise<Notification>\n  createBatch(input: CreateBatchNotificationInput, ctx: NotificationServiceContext): Promise<Notification[]>\n  createForRole(input: CreateRoleNotificationInput, ctx: NotificationServiceContext): Promise<Notification[]>\n  createForFeature(input: CreateFeatureNotificationServiceInput, ctx: NotificationServiceContext): Promise<Notification[]>\n  markAsRead(notificationId: string, ctx: NotificationServiceContext): Promise<Notification>\n  markAllAsRead(ctx: NotificationServiceContext): Promise<number>\n  dismiss(notificationId: string, ctx: NotificationServiceContext): Promise<Notification>\n  restoreDismissed(\n    notificationId: string,\n    status: 'read' | 'unread' | undefined,\n    ctx: NotificationServiceContext\n  ): Promise<Notification>\n  executeAction(\n    notificationId: string,\n    input: ExecuteActionInput,\n    ctx: NotificationServiceContext\n  ): Promise<{ notification: Notification; result: unknown }>\n  getUnreadCount(ctx: NotificationServiceContext): Promise<number>\n  getPollData(ctx: NotificationServiceContext, since?: string): Promise<NotificationPollData>\n  cleanupExpired(): Promise<number>\n  deleteBySource(\n    sourceEntityType: string,\n    sourceEntityId: string,\n    ctx: NotificationServiceContext\n  ): Promise<number>\n}\n\nexport interface NotificationServiceDeps {\n  em: EntityManager\n  eventBus: { emit: (event: string, payload: unknown) => Promise<void> }\n  commandBus?: {\n    execute: (\n      commandId: string,\n      options: { input: unknown; ctx: unknown; metadata?: unknown }\n    ) => Promise<{ result: unknown }>\n  }\n  container?: { resolve: (name: string) => unknown }\n}\n\nexport function createNotificationService(deps: NotificationServiceDeps): NotificationService {\n  const { em: rootEm, eventBus, commandBus, container } = deps\n\n  /**\n   * Whether the clicking user holds every feature a declared notification action requires.\n   * Fails closed: no user, no container, or a failing RBAC check denies the action.\n   */\n  const userHoldsActionFeatures = async (\n    requiredFeatures: string[] | undefined,\n    scopeCtx: NotificationServiceContext,\n  ): Promise<boolean> => {\n    if (!requiredFeatures || requiredFeatures.length === 0) return true\n    if (!scopeCtx.userId || !container) return false\n    try {\n      const rbacService = container.resolve('rbacService') as {\n        userHasAllFeatures: (\n          userId: string,\n          features: string[],\n          scope: { tenantId: string | null; organizationId: string | null },\n        ) => Promise<boolean>\n      }\n      const allowed = await rbacService.userHasAllFeatures(\n        scopeCtx.userId,\n        requiredFeatures,\n        { tenantId: scopeCtx.tenantId, organizationId: scopeCtx.organizationId ?? null },\n      )\n      return allowed === true\n    } catch (err) {\n      getTelemetryRuntime()?.reportError(err, {\n        module: 'notifications',\n        code: 'notifications.action_feature_check_failed',\n      })\n      return false\n    }\n  }\n\n  /**\n   * Resolves the authoritative delivery-channel set for one recipient at create time \u2014 the single\n   * gate that folds per-send target, per-type eligibility, registered strategies, and the\n   * recipient's per-channel preferences (`nonOptOut` bypasses opt-out). Stored on the row and\n   * replayed by the dispatcher; `in_app` membership also drives bell/inbox visibility.\n   *\n   * Returns `null` (\u21D2 \"all channels\", legacy behavior) when no delivery strategies are registered\n   * (e.g. a minimal bootstrap/test), so notifications never become silently undeliverable/invisible\n   * in an environment that simply hasn't wired the seam.\n   */\n  const resolveChannelsFor = async (\n    content: NotificationContentInput,\n    recipientUserId: string,\n    scopeCtx: NotificationServiceContext,\n    preferences: NotificationPreferenceService = createNotificationPreferenceService({ em: rootEm.fork() }),\n    typeOverrides?: NotificationTypeOverrides | null,\n  ): Promise<string[] | null> => {\n    const registeredChannels = getNotificationDeliveryStrategies().map((strategy) => strategy.id)\n    if (registeredChannels.length === 0) return null\n    // Treat an empty target as \"no restriction\" (all channels) rather than \"no deliverable channel\":\n    // a programmatic caller that computed an empty array should not silently black-hole the\n    // notification. The HTTP layer rejects an empty `channels` outright (see validators.ts).\n    const targetChannels = content.channels && content.channels.length > 0 ? content.channels : null\n    const overrides = typeOverrides === undefined\n      ? (await getNotificationTypeOverrides(rootEm.fork(), scopeCtx.tenantId, [content.type])).get(content.type) ?? null\n      : typeOverrides\n    return resolveEffectiveChannels({\n      typeId: content.type,\n      type: getNotificationType(content.type),\n      scope: { tenantId: scopeCtx.tenantId, userId: recipientUserId },\n      targetChannels,\n      registeredChannels,\n      preferences,\n      channelsOverride: overrides?.channels ?? null,\n      nonOptOutOverride: overrides?.nonOptOut ?? null,\n    })\n  }\n\n  /**\n   * Broadcast counterpart of {@link resolveChannelsFor}: resolves the channel set for every recipient\n   * up front, BEFORE the write transaction opens, reusing a single forked EM / preference service\n   * across the whole set. This keeps the preference reads out of the write transaction (matching\n   * `create`, which resolves before its transaction) and avoids one EM fork per recipient on large\n   * role/feature broadcasts.\n   */\n  const resolveChannelsForRecipients = async (\n    content: NotificationContentInput,\n    recipientUserIds: string[],\n    scopeCtx: NotificationServiceContext,\n  ): Promise<Array<{ recipientUserId: string; channels: string[] | null }>> => {\n    const preferences = createNotificationPreferenceService({ em: rootEm.fork() })\n    // Stored overrides are per-type (not per-recipient) \u2014 read once for the whole broadcast.\n    const typeOverrides =\n      (await getNotificationTypeOverrides(rootEm.fork(), scopeCtx.tenantId, [content.type])).get(content.type) ?? null\n    const resolved: Array<{ recipientUserId: string; channels: string[] | null }> = []\n    for (const recipientUserId of recipientUserIds) {\n      resolved.push({\n        recipientUserId,\n        channels: await resolveChannelsFor(content, recipientUserId, scopeCtx, preferences, typeOverrides),\n      })\n    }\n    return resolved\n  }\n\n  return {\n    async create(input, ctx) {\n      const { recipientUserId, ...content } = input\n      const channels = await resolveChannelsFor(content, recipientUserId, ctx)\n      const writeEm = rootEm.fork()\n      const notification = await writeEm.transactional(async (tx) => {\n        await assertNotificationRecipientsInScope(tx, [recipientUserId], ctx)\n        const entity = await createOrRefreshNotification(tx, content, recipientUserId, ctx, channels)\n        await tx.flush()\n        return entity\n      })\n\n      await invalidateNotificationCache(container, ctx, 'created')\n      // Always emit the domain event (drives the deliver subscriber \u2192 push/email/\u2026). Only bump the\n      // live in-app bell when this notification is actually visible in-app.\n      await emitNotificationCreated(eventBus, notification, ctx)\n      if (isInAppVisible(notification.channels)) {\n        await eventBus.emit(NOTIFICATION_SSE_EVENTS.CREATED, {\n          tenantId: notification.tenantId,\n          organizationId: notification.organizationId ?? null,\n          recipientUserId: notification.recipientUserId,\n          notification: toNotificationDto(notification),\n        })\n      }\n\n      return notification\n    },\n\n    async createBatch(input, ctx) {\n      const recipientUserIds = Array.from(new Set(input.recipientUserIds))\n      const { recipientUserIds: _recipientUserIds, ...content } = input\n      const notifications: Notification[] = []\n      const resolved = await resolveChannelsForRecipients(content, recipientUserIds, ctx)\n      const writeEm = rootEm.fork()\n\n      await writeEm.transactional(async (tx) => {\n        await assertNotificationRecipientsInScope(tx, recipientUserIds, ctx)\n        for (const { recipientUserId, channels } of resolved) {\n          const notification = await createOrRefreshNotification(tx, content, recipientUserId, ctx, channels)\n          notifications.push(notification)\n        }\n        await tx.flush()\n      })\n\n      await invalidateNotificationCache(container, ctx, 'created')\n      await emitNotificationCreatedBatch(eventBus, notifications, ctx)\n      await emitNotificationSseEvents(eventBus, notifications, ctx)\n\n      return notifications\n    },\n\n    async createForRole(input, ctx) {\n      const em = rootEm.fork()\n\n      const db = getDb(em)\n      const recipientUserIds = await getRecipientUserIdsForRole(db, ctx.tenantId, input.roleId)\n      if (recipientUserIds.length === 0) {\n        return []\n      }\n\n      const { roleId: _roleId, ...content } = input\n      const notifications: Notification[] = []\n      const uniqueRecipientUserIds = Array.from(new Set(recipientUserIds))\n      const resolved = await resolveChannelsForRecipients(content, uniqueRecipientUserIds, ctx)\n      const writeEm = rootEm.fork()\n\n      await writeEm.transactional(async (tx) => {\n        for (const { recipientUserId, channels } of resolved) {\n          const notification = await createOrRefreshNotification(tx, content, recipientUserId, ctx, channels)\n          notifications.push(notification)\n        }\n        await tx.flush()\n      })\n\n      await invalidateNotificationCache(container, ctx, 'created')\n      await emitNotificationCreatedBatch(eventBus, notifications, ctx)\n      await emitNotificationSseEvents(eventBus, notifications, ctx)\n\n      return notifications\n    },\n\n    async createForFeature(input, ctx) {\n      const em = rootEm.fork()\n      const db = getDb(em)\n      const recipientUserIds = await getRecipientUserIdsForFeature(db, ctx.tenantId, input.requiredFeature)\n\n      if (recipientUserIds.length === 0) {\n        debug('No users found with feature:', input.requiredFeature, 'in tenant:', ctx.tenantId)\n        return []\n      }\n\n      let authorizedRecipientUserIds = recipientUserIds\n      if (input.restrictRecipientsToOrganization) {\n        const uniqueCandidateUserIds = Array.from(new Set(recipientUserIds))\n        if (!ctx.organizationId) {\n          logger.warn('Organization-restricted feature fan-out skipped because organization scope is missing', {\n            tenantId: ctx.tenantId,\n            requiredFeature: input.requiredFeature,\n          })\n          return []\n        }\n\n        if (uniqueCandidateUserIds.length > 200) {\n          logger.warn('Organization-restricted feature fan-out skipped because the candidate cap was exceeded', {\n            tenantId: ctx.tenantId,\n            organizationId: ctx.organizationId,\n            requiredFeature: input.requiredFeature,\n            candidateCount: uniqueCandidateUserIds.length,\n            candidateCap: 200,\n          })\n          return []\n        }\n\n        if (!container) {\n          logger.warn('Organization-restricted feature fan-out skipped because the DI container is unavailable', {\n            tenantId: ctx.tenantId,\n            organizationId: ctx.organizationId,\n            requiredFeature: input.requiredFeature,\n          })\n          return []\n        }\n\n        try {\n          const rbacService = container.resolve('rbacService') as {\n            userHasAllFeatures: (\n              userId: string,\n              features: string[],\n              scope: { tenantId: string | null; organizationId: string | null },\n            ) => Promise<boolean>\n          }\n          const allowedRecipientUserIds: string[] = []\n          for (let offset = 0; offset < uniqueCandidateUserIds.length; offset += 10) {\n            const candidates = uniqueCandidateUserIds.slice(offset, offset + 10)\n            const results = await Promise.all(candidates.map(async (recipientUserId) => ({\n              recipientUserId,\n              allowed: await rbacService.userHasAllFeatures(\n                recipientUserId,\n                [input.requiredFeature],\n                { tenantId: ctx.tenantId, organizationId: ctx.organizationId ?? null },\n              ),\n            })))\n            for (const result of results) {\n              if (result.allowed) allowedRecipientUserIds.push(result.recipientUserId)\n            }\n          }\n          authorizedRecipientUserIds = allowedRecipientUserIds\n        } catch (err) {\n          logger.warn('Organization-restricted feature fan-out skipped because RBAC filtering failed', {\n            tenantId: ctx.tenantId,\n            organizationId: ctx.organizationId,\n            requiredFeature: input.requiredFeature,\n            err,\n          })\n          return []\n        }\n\n        if (authorizedRecipientUserIds.length === 0) {\n          debug('No users found with feature in organization:', input.requiredFeature, ctx.organizationId)\n          return []\n        }\n      }\n\n      debug('Creating notifications for', authorizedRecipientUserIds.length, 'user(s) with feature:', input.requiredFeature)\n\n      const {\n        requiredFeature: _requiredFeature,\n        restrictRecipientsToOrganization: _restrictRecipientsToOrganization,\n        ...content\n      } = input\n      const notifications: Notification[] = []\n      const uniqueRecipientUserIds = Array.from(new Set(authorizedRecipientUserIds))\n      const resolved = await resolveChannelsForRecipients(content, uniqueRecipientUserIds, ctx)\n      const writeEm = rootEm.fork()\n\n      await writeEm.transactional(async (tx) => {\n        for (const { recipientUserId, channels } of resolved) {\n          const notification = await createOrRefreshNotification(tx, content, recipientUserId, ctx, channels)\n          notifications.push(notification)\n        }\n        await tx.flush()\n      })\n\n      await invalidateNotificationCache(container, ctx, 'created')\n      await emitNotificationCreatedBatch(eventBus, notifications, ctx)\n      await emitNotificationSseEvents(eventBus, notifications, ctx)\n\n      return notifications\n    },\n\n    async markAsRead(notificationId, ctx) {\n      const em = rootEm.fork()\n      const notification = await findScopedNotificationOrThrow(em, notificationId, ctx)\n\n      if (notification.status === 'unread') {\n        notification.status = 'read'\n        notification.readAt = new Date()\n        await em.flush()\n\n        await invalidateNotificationCache(container, ctx, 'updated', notification.id)\n        await eventBus.emit(NOTIFICATION_EVENTS.READ, {\n          notificationId: notification.id,\n          userId: ctx.userId,\n          tenantId: ctx.tenantId,\n        })\n      }\n\n      return notification\n    },\n\n    async markAllAsRead(ctx) {\n      const em = rootEm.fork()\n      const db = getDb(em)\n      const applyScope = <QB extends { where: (...args: any[]) => QB }>(q: QB): QB => {\n        let chain = q\n          .where('recipient_user_id' as any, '=', ctx.userId as any)\n          .where('tenant_id' as any, '=', ctx.tenantId)\n          .where('status' as any, '=', 'unread')\n          // Only in-app-visible rows count toward the badge (see getUnreadCount),\n          // so \"mark all as read\" must scope to the SAME set \u2014 otherwise it flips\n          // push/email-only rows the user never saw and SSE-broadcasts a read for\n          // notifications that were never in the bell, inflating the returned\n          // count past what the badge showed.\n          .where(inAppVisibleSql() as any)\n        if (ctx.organizationId) {\n          chain = chain.where('organization_id' as any, '=', ctx.organizationId)\n        }\n        return chain\n      }\n\n      const targetRows = await applyScope(\n        db\n          .selectFrom('notifications' as any)\n          .select([\n            'id' as any,\n            'organization_id' as any,\n            'recipient_user_id' as any,\n          ]),\n      ).execute() as Array<{ id: string }>\n\n      if (!targetRows.length) {\n        return 0\n      }\n\n      const updateResult = await applyScope(\n        db.updateTable('notifications' as any).set({\n          status: 'read',\n          read_at: sql`now()`,\n        } as any) as any,\n      ).executeTakeFirst() as { numUpdatedRows?: bigint | number } | undefined\n      const result = Number(updateResult?.numUpdatedRows ?? targetRows.length)\n\n      await invalidateNotificationCache(container, ctx, 'updated')\n\n      const notifications = await findWithDecryption(em, Notification, {\n        id: { $in: targetRows.map((row) => row.id) },\n      }, undefined, {\n        tenantId: ctx.tenantId,\n        organizationId: ctx.organizationId ?? null,\n      })\n\n      for (const notification of notifications) {\n        await eventBus.emit(NOTIFICATION_EVENTS.READ, {\n          notificationId: notification.id,\n          userId: ctx.userId,\n          tenantId: ctx.tenantId,\n        })\n\n        await eventBus.emit(NOTIFICATION_SSE_EVENTS.CREATED, {\n          tenantId: notification.tenantId,\n          organizationId: notification.organizationId ?? null,\n          recipientUserId: notification.recipientUserId,\n          notification: toNotificationDto(notification),\n        })\n      }\n\n      return result\n    },\n\n    async dismiss(notificationId, ctx) {\n      const em = rootEm.fork()\n      const notification = await findScopedNotificationOrThrow(em, notificationId, ctx)\n\n      notification.status = 'dismissed'\n      notification.dismissedAt = new Date()\n      await em.flush()\n\n      await invalidateNotificationCache(container, ctx, 'updated', notification.id)\n      await eventBus.emit(NOTIFICATION_EVENTS.DISMISSED, {\n        notificationId: notification.id,\n        userId: ctx.userId,\n        tenantId: ctx.tenantId,\n      })\n\n      return notification\n    },\n\n    async restoreDismissed(notificationId, status, ctx) {\n      const em = rootEm.fork()\n      const notification = await findScopedNotificationOrThrow(em, notificationId, ctx)\n\n      if (notification.status !== 'dismissed') {\n        return notification\n      }\n\n      // A dismissed notification whose action already ran comes back as `actioned`,\n      // whatever the caller asked for: `actioned_at` outlives the dismissal.\n      const targetStatus: NotificationStatus = notification.actionedAt != null ? 'actioned' : status ?? 'read'\n      notification.status = targetStatus\n      notification.dismissedAt = null\n\n      if (targetStatus === 'unread') {\n        notification.readAt = null\n      } else if (!notification.readAt) {\n        notification.readAt = new Date()\n      }\n\n      await em.flush()\n\n      await invalidateNotificationCache(container, ctx, 'updated', notification.id)\n      await eventBus.emit(NOTIFICATION_EVENTS.RESTORED, {\n        notificationId: notification.id,\n        userId: ctx.userId,\n        tenantId: ctx.tenantId,\n        status: targetStatus,\n      })\n\n      return notification\n    },\n\n    async executeAction(notificationId, input, ctx) {\n      const em = rootEm.fork()\n      const notification = await findScopedNotificationOrThrow(em, notificationId, ctx)\n\n      const actionData = notification.actionData\n      const action = actionData?.actions?.find((a) => a.id === input.actionId)\n\n      if (!action) {\n        throw new Error('Action not found')\n      }\n\n      // Reject an already-actioned notification before dispatching the command,\n      // so a retry or double-click cannot re-run the side effect. `actioned_at` is\n      // the durable marker: `status` is overwritten by a dismissal.\n      if (notification.status === 'actioned' || notification.actionedAt != null) {\n        throw actionAlreadyExecuted()\n      }\n\n      if (action.commandId) {\n        const declared = findDeclaredCommandAction(notification.type, action)\n        if (!declared || !(await userHoldsActionFeatures(declared.requiredFeatures, ctx))) {\n          throw await actionForbidden()\n        }\n      }\n\n      const actionedAt = new Date()\n      const previousStatus = notification.status\n      const previousActionedAt = notification.actionedAt ?? null\n      const previousActionTaken = notification.actionTaken ?? null\n\n      // Atomically claim the notification so only one concurrent request can run\n      // the side-effecting command. The conditional UPDATE matches only while the\n      // notification has not been actioned yet; a losing request updates 0 rows.\n      const claimResult = (await getDb(em)\n        .updateTable('notifications' as any)\n        .set({\n          status: 'actioned',\n          actioned_at: actionedAt,\n          action_taken: input.actionId,\n        } as any)\n        .where('id' as any, '=', notification.id)\n        .where('recipient_user_id' as any, '=', ctx.userId as any)\n        .where('tenant_id' as any, '=', ctx.tenantId)\n        .where('status' as any, '!=', 'actioned')\n        .where('actioned_at' as any, 'is', null)\n        .executeTakeFirst()) as { numUpdatedRows?: bigint | number } | undefined\n\n      if (Number(claimResult?.numUpdatedRows ?? 0) === 0) {\n        throw actionAlreadyExecuted()\n      }\n\n      // The claim is provisional: if the side-effecting command fails, the action\n      // never actually completed, so release the claim to its prior state. This\n      // lets the user retry the action instead of the notification being locked as\n      // `actioned` forever. The claim is owned through its own `actioned_at` and\n      // `action_taken`, not through `status`: a dismissal that lands while the\n      // command runs overwrites `status`, and the release must still clear the\n      // claim then \u2014 while leaving that dismissal in place.\n      const releaseClaim = async () => {\n        await getDb(em)\n          .updateTable('notifications' as any)\n          .set({\n            status: sql`case when status = 'actioned' then ${previousStatus} else status end`,\n            actioned_at: previousActionedAt,\n            action_taken: previousActionTaken,\n          } as any)\n          .where('id' as any, '=', notification.id)\n          .where('recipient_user_id' as any, '=', ctx.userId as any)\n          .where('tenant_id' as any, '=', ctx.tenantId)\n          .where('actioned_at' as any, '=', actionedAt)\n          .where('action_taken' as any, '=', input.actionId)\n          .executeTakeFirst()\n      }\n\n      let result: unknown = null\n\n      if (action.commandId && commandBus && container) {\n        const commandInput = {\n          ...input.payload,\n          id: notification.sourceEntityId,\n        }\n\n        // Build a CommandRuntimeContext from the notification service context\n        const commandCtx = {\n          container,\n          auth: {\n            sub: ctx.userId,\n            tenantId: ctx.tenantId,\n            orgId: ctx.organizationId,\n          },\n          organizationScope: null,\n          selectedOrganizationId: ctx.organizationId ?? null,\n          organizationIds: ctx.organizationId ? [ctx.organizationId] : null,\n        }\n\n        let commandResult: { result: unknown }\n        try {\n          commandResult = await commandBus.execute(action.commandId, {\n            input: commandInput,\n            ctx: commandCtx,\n            metadata: {\n              tenantId: ctx.tenantId,\n              organizationId: ctx.organizationId,\n              resourceKind: 'notifications',\n            },\n          })\n        } catch (err) {\n          // Never let a rollback failure mask the original command error \u2014 the\n          // caller needs the real failure to decide whether to retry.\n          try {\n            await releaseClaim()\n          } catch (releaseErr) {\n            debug('failed to release notification action claim', releaseErr)\n          }\n          throw err\n        }\n\n        result = commandResult.result\n      }\n\n      notification.status = 'actioned'\n      notification.actionedAt = actionedAt\n      notification.actionTaken = input.actionId\n      notification.actionResult = result as Record<string, unknown>\n\n      if (!notification.readAt) {\n        notification.readAt = new Date()\n      }\n\n      await em.flush()\n\n      await invalidateNotificationCache(container, ctx, 'updated', notification.id)\n      await eventBus.emit(NOTIFICATION_EVENTS.ACTIONED, {\n        notificationId: notification.id,\n        actionId: input.actionId,\n        userId: ctx.userId,\n        tenantId: ctx.tenantId,\n      })\n\n      return { notification, result }\n    },\n\n    async getUnreadCount(ctx) {\n      const em = rootEm.fork()\n      return em.count(Notification, {\n        recipientUserId: ctx.userId,\n        tenantId: ctx.tenantId,\n        status: 'unread',\n        $and: [\n          buildNotificationReadScopeWhere(ctx),\n          inAppVisibleFilter(),\n        ],\n      })\n    },\n\n    async getPollData(ctx, since) {\n      const em = rootEm.fork()\n      const filters: Record<string, unknown> = {\n        recipientUserId: ctx.userId,\n        tenantId: ctx.tenantId,\n        $and: [\n          buildNotificationReadScopeWhere(ctx),\n          inAppVisibleFilter(),\n        ],\n      }\n\n      if (since) {\n        filters.createdAt = { $gt: new Date(since) }\n      }\n\n      const [notifications, unreadCount] = await Promise.all([\n        em.find(Notification, filters, {\n          orderBy: { createdAt: 'desc' },\n          limit: 50,\n        }),\n        em.count(Notification, {\n          recipientUserId: ctx.userId,\n          tenantId: ctx.tenantId,\n          status: 'unread',\n          $and: [\n            buildNotificationReadScopeWhere(ctx),\n            inAppVisibleFilter(),\n          ],\n        }),\n      ])\n\n      const recent = notifications.map(toNotificationDto)\n      const hasNew = since ? recent.length > 0 : false\n\n      return {\n        unreadCount,\n        recent,\n        hasNew,\n        lastId: recent[0]?.id,\n      }\n    },\n\n    async cleanupExpired() {\n      const em = rootEm.fork()\n      const db = getDb(em)\n\n      const affectedScopes = await db\n        .selectFrom('notifications' as any)\n        .select([\n          'tenant_id' as any,\n          'organization_id' as any,\n        ])\n        .where('expires_at' as any, '<', sql`now()`)\n        .where('status' as any, 'not in', ['actioned', 'dismissed'])\n        .distinct()\n        .execute() as Array<{ tenant_id: string; organization_id: string | null }>\n\n      if (!affectedScopes.length) return 0\n\n      const updateResult = await db\n        .updateTable('notifications' as any)\n        .set({\n          status: 'dismissed',\n          dismissed_at: sql`now()`,\n        } as any)\n        .where('expires_at' as any, '<', sql`now()`)\n        .where('status' as any, 'not in', ['actioned', 'dismissed'])\n        .executeTakeFirst() as { numUpdatedRows?: bigint | number } | undefined\n\n      for (const scope of affectedScopes) {\n        await invalidateNotificationCache(container, {\n          tenantId: scope.tenant_id,\n          organizationId: scope.organization_id,\n        }, 'updated')\n      }\n\n      return Number(updateResult?.numUpdatedRows ?? 0)\n    },\n\n    async deleteBySource(sourceEntityType, sourceEntityId, ctx) {\n      const em = rootEm.fork()\n      const db = getDb(em)\n\n      const deleteResult = await db\n        .deleteFrom('notifications' as any)\n        .where('source_entity_type' as any, '=', sourceEntityType)\n        .where('source_entity_id' as any, '=', sourceEntityId)\n        .where('tenant_id' as any, '=', ctx.tenantId)\n        .executeTakeFirst() as { numDeletedRows?: bigint | number } | undefined\n\n      const deletedCount = Number(deleteResult?.numDeletedRows ?? 0)\n      if (deletedCount > 0) {\n        await invalidateNotificationCache(container, ctx, 'deleted')\n      }\n\n      return deletedCount\n    },\n  }\n}\n\n/**\n * Helper to create notification service from a DI container.\n * Use this in API routes and commands to avoid DI resolution issues.\n */\nexport function resolveNotificationService(container: {\n  resolve: (name: string) => unknown\n}): NotificationService {\n  const em = container.resolve('em') as EntityManager\n  const eventBus = container.resolve('eventBus') as { emit: (event: string, payload: unknown) => Promise<void> }\n\n  // commandBus may not be registered in all contexts, so resolve it safely\n  let commandBus: NotificationServiceDeps['commandBus']\n  try {\n    commandBus = container.resolve('commandBus') as typeof commandBus\n  } catch {\n    // commandBus not available - actions with commandId won't work\n    commandBus = undefined\n  }\n\n  return createNotificationService({ em, eventBus, commandBus, container })\n}\n"],
+  "mappings": "AACA,SAAsB,WAAW;AACjC,SAAS,qBAAqB;AAC9B,SAAS,2BAA2B;AACpC,SAAS,oBAA6C;AAEtD;AAAA,EACE;AAAA,EACA;AAAA,OAIK;AACP,SAAS,2BAA2B;AACpC,SAAS,2BAA2B;AACpC,SAAS,qBAAqB,+BAA+B;AAC7D,SAAS,uBAAuB,0BAA0B;AAC1D;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OAGK;AACP,SAAS,yBAAyB;AAClC,SAAS,uCAAuC;AAChD;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,4BAA4B,mCAAmC;AACxE,SAAS,oBAAoB;AAC7B,SAAS,2BAA2B;AACpC,SAAS,oCAAoE;AAC7E,SAAS,yCAAyC;AAClD,SAAS,gCAAgC;AACzC;AAAA,EACE;AAAA,OAEK;AACP,SAAS,oBAAoB,iBAAiB,sBAAsB;AAEpE,MAAM,SAAS,aAAa,eAAe,EAAE,MAAM,EAAE,WAAW,UAAU,CAAC;AAE3E,SAAS,MAAM,YAAoB,SAA0B;AAC3D,SAAO,MAAM,SAAS,QAAQ,SAAS,EAAE,QAAQ,IAAI,MAAS;AAChE;AAEA,SAAS,MAAM,IAAgC;AAC7C,SAAO,GAAG,UAAe;AAC3B;AAEA,MAAM,sCAA4D,CAAC,UAAU,QAAQ,UAAU;AAC/F,MAAM,6BAA6B;AAEnC,SAAS,kBAAkB,gBAA0D;AACnF,SAAO,kBAAkB;AAC3B;AAEA,eAAe,4BACb,WACA,KACA,QACA,gBACe;AACf,MAAI,CAAC,UAAW;AAChB,QAAM;AAAA,IACJ;AAAA,IACA;AAAA,IACA;AAAA,MACE,IAAI;AAAA,MACJ,UAAU,IAAI;AAAA,MACd,gBAAgB,kBAAkB,IAAI,cAAc;AAAA,IACtD;AAAA,IACA,IAAI;AAAA,IACJ;AAAA,EACF;AACF;AAEA,eAAe,oCACb,IACA,kBACA,KACe;AACf,QAAM,yBAAyB,MAAM;AAAA,IACnC,MAAM,EAAE;AAAA,IACR,IAAI;AAAA,IACJ,kBAAkB,IAAI,cAAc;AAAA,IACpC;AAAA,EACF;AAEA,MAAI,uBAAuB,WAAW,iBAAiB,QAAQ;AAC7D,UAAM,IAAI,cAAc,KAAK,EAAE,OAAO,mCAAmC,CAAC;AAAA,EAC5E;AACF;AAEA,SAAS,wBAAuC;AAC9C,SAAO,IAAI,cAAc,KAAK;AAAA,IAC5B,OAAO;AAAA,IACP,MAAM;AAAA,EACR,CAAC;AACH;AAEA,eAAe,kBAA0C;AACvD,QAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,SAAO,IAAI,cAAc,KAAK;AAAA,IAC5B,OAAO,UAAU,uCAAuC,qDAAqD;AAAA,IAC7G,MAAM;AAAA,EACR,CAAC;AACH;AAMA,SAAS,0BAA0B,MAAc,QAA2D;AAC1G,QAAM,aAAa,oBAAoB,IAAI;AAC3C,MAAI,CAAC,WAAY,QAAO;AACxB,QAAM,WAAW,CAAC,GAAG,WAAW,SAAS,GAAI,WAAW,mBAAmB,CAAC,CAAE,EAC3E,KAAK,CAAC,cAAc,UAAU,OAAO,OAAO,EAAE;AACjD,MAAI,CAAC,UAAU,aAAa,SAAS,cAAc,OAAO,UAAW,QAAO;AAC5E,SAAO;AACT;AAEA,SAAS,yBACP,cACA,OACA,iBACA,KACA,UACA;AACA,QAAM,UAAU,4BAA4B,MAAM,OAAO;AACzD,QAAM,WAAW,2BAA2B,MAAM,QAAQ;AAE1D,eAAa,kBAAkB;AAC/B,eAAa,OAAO,MAAM;AAC1B,eAAa,WAAW,MAAM;AAC9B,eAAa,UAAU,MAAM;AAC7B,eAAa,iBAAiB,MAAM;AACpC,eAAa,gBAAgB,MAAM;AACnC,eAAa,QAAQ,MAAM,SAAS,MAAM,YAAY;AACtD,eAAa,OAAO,MAAM;AAC1B,eAAa,OAAO,MAAM;AAC1B,eAAa,WAAW,MAAM,YAAY;AAC1C,eAAa,aAAa,UACtB;AAAA,IACE;AAAA,IACA,iBAAiB,MAAM;AAAA,EACzB,IACA;AACJ,eAAa,eAAe,MAAM;AAClC,eAAa,mBAAmB,MAAM;AACtC,eAAa,iBAAiB,MAAM;AACpC,eAAa,WAAW;AACxB,eAAa,WAAW,MAAM;AAC9B,eAAa,WAAW;AACxB,eAAa,YAAY,MAAM,YAAY,IAAI,KAAK,MAAM,SAAS,IAAI;AACvE,eAAa,WAAW,IAAI;AAC5B,eAAa,iBAAiB,kBAAkB,IAAI,cAAc;AAClE,eAAa,SAAS;AACtB,eAAa,SAAS;AACtB,eAAa,aAAa;AAC1B,eAAa,cAAc;AAC3B,eAAa,cAAc;AAC3B,eAAa,eAAe;AAC5B,eAAa,YAAY,oBAAI,KAAK;AACpC;AAEA,eAAe,8BACb,IACA,gBACA,KACuB;AACvB,QAAM,eAAe,MAAM;AAAA,IACzB;AAAA,IACA;AAAA,IACA;AAAA,MACE,IAAI;AAAA,MACJ,iBAAiB,IAAI;AAAA,MACrB,UAAU,IAAI;AAAA,IAChB;AAAA,IACA;AAAA,IACA;AAAA,MACE,UAAU,IAAI;AAAA,MACd,gBAAgB,IAAI,kBAAkB;AAAA,IACxC;AAAA,EACF;AACA,MAAI,CAAC,cAAc;AACjB,UAAM,IAAI,cAAc,KAAK,EAAE,OAAO,yBAAyB,CAAC;AAAA,EAClE;AACA,SAAO;AACT;AAEA,eAAe,0BACb,UACA,eACA,KACe;AAGf,QAAM,UAAU,cAAc,OAAO,CAAC,iBAAiB,eAAe,aAAa,QAAQ,CAAC;AAC5F,MAAI,QAAQ,WAAW,EAAG;AAE1B,QAAM,0BAA0B,MAAM,KAAK,IAAI,IAAI,QAAQ,IAAI,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;AACzF,QAAM,SAAS,KAAK,wBAAwB,eAAe;AAAA,IACzD,UAAU,IAAI;AAAA,IACd,gBAAgB,kBAAkB,IAAI,cAAc;AAAA,IACpD,kBAAkB;AAAA,IAClB,OAAO,QAAQ;AAAA,EACjB,CAAC;AAED,aAAW,gBAAgB,SAAS;AAClC,UAAM,SAAS,KAAK,wBAAwB,SAAS;AAAA,MACnD,UAAU,aAAa;AAAA,MACvB,gBAAgB,aAAa,kBAAkB;AAAA,MAC/C,iBAAiB,aAAa;AAAA,MAC9B,cAAc,kBAAkB,YAAY;AAAA,IAC9C,CAAC;AAAA,EACH;AACF;AAEA,eAAe,4BACb,IACA,OACA,iBACA,KACA,UACuB;AACvB,MAAI,MAAM,YAAY,MAAM,SAAS,KAAK,EAAE,SAAS,GAAG;AACtD,UAAM,WAAW,kBAAkB,IAAI,cAAc,KAAK;AAC1D,UAAM,UAAU,iBAAiB,IAAI,QAAQ,IAAI,QAAQ,IAAI,eAAe,IAAI,MAAM,IAAI,IAAI,MAAM,QAAQ;AAC5G,QAAI;AACF,YAAM,KAAK,MAAM,EAAE;AACnB,YAAM,4CAA4C,OAAO,KAAK,QAAQ,EAAE;AAAA,IAC1E,QAAQ;AAAA,IAER;AAEA,UAAM,WAAW,MAAM,GAAG,QAAQ,cAAc;AAAA,MAC9C;AAAA,MACA,UAAU,IAAI;AAAA,MACd,gBAAgB,kBAAkB,IAAI,cAAc;AAAA,MACpD,MAAM,MAAM;AAAA,MACZ,UAAU,MAAM;AAAA,MAChB,QAAQ,EAAE,KAAK,oCAAoC;AAAA,IACrD,GAAG;AAAA,MACD,SAAS,EAAE,WAAW,OAAO;AAAA,IAC/B,CAAC;AAED,QAAI,UAAU;AACZ,+BAAyB,UAAU,OAAO,iBAAiB,KAAK,QAAQ;AACxE,aAAO;AAAA,IACT;AAAA,EACF;AAEA,SAAO,wBAAwB,IAAI,OAAO,iBAAiB,KAAK,QAAQ;AAC1E;AAqDO,SAAS,0BAA0B,MAAoD;AAC5F,QAAM,EAAE,IAAI,QAAQ,UAAU,YAAY,UAAU,IAAI;AAMxD,QAAM,0BAA0B,OAC9B,kBACA,aACqB;AACrB,QAAI,CAAC,oBAAoB,iBAAiB,WAAW,EAAG,QAAO;AAC/D,QAAI,CAAC,SAAS,UAAU,CAAC,UAAW,QAAO;AAC3C,QAAI;AACF,YAAM,cAAc,UAAU,QAAQ,aAAa;AAOnD,YAAM,UAAU,MAAM,YAAY;AAAA,QAChC,SAAS;AAAA,QACT;AAAA,QACA,EAAE,UAAU,SAAS,UAAU,gBAAgB,SAAS,kBAAkB,KAAK;AAAA,MACjF;AACA,aAAO,YAAY;AAAA,IACrB,SAAS,KAAK;AACZ,0BAAoB,GAAG,YAAY,KAAK;AAAA,QACtC,QAAQ;AAAA,QACR,MAAM;AAAA,MACR,CAAC;AACD,aAAO;AAAA,IACT;AAAA,EACF;AAYA,QAAM,qBAAqB,OACzB,SACA,iBACA,UACA,cAA6C,oCAAoC,EAAE,IAAI,OAAO,KAAK,EAAE,CAAC,GACtG,kBAC6B;AAC7B,UAAM,qBAAqB,kCAAkC,EAAE,IAAI,CAAC,aAAa,SAAS,EAAE;AAC5F,QAAI,mBAAmB,WAAW,EAAG,QAAO;AAI5C,UAAM,iBAAiB,QAAQ,YAAY,QAAQ,SAAS,SAAS,IAAI,QAAQ,WAAW;AAC5F,UAAM,YAAY,kBAAkB,UAC/B,MAAM,6BAA6B,OAAO,KAAK,GAAG,SAAS,UAAU,CAAC,QAAQ,IAAI,CAAC,GAAG,IAAI,QAAQ,IAAI,KAAK,OAC5G;AACJ,WAAO,yBAAyB;AAAA,MAC9B,QAAQ,QAAQ;AAAA,MAChB,MAAM,oBAAoB,QAAQ,IAAI;AAAA,MACtC,OAAO,EAAE,UAAU,SAAS,UAAU,QAAQ,gBAAgB;AAAA,MAC9D;AAAA,MACA;AAAA,MACA;AAAA,MACA,kBAAkB,WAAW,YAAY;AAAA,MACzC,mBAAmB,WAAW,aAAa;AAAA,IAC7C,CAAC;AAAA,EACH;AASA,QAAM,+BAA+B,OACnC,SACA,kBACA,aAC2E;AAC3E,UAAM,cAAc,oCAAoC,EAAE,IAAI,OAAO,KAAK,EAAE,CAAC;AAE7E,UAAM,iBACH,MAAM,6BAA6B,OAAO,KAAK,GAAG,SAAS,UAAU,CAAC,QAAQ,IAAI,CAAC,GAAG,IAAI,QAAQ,IAAI,KAAK;AAC9G,UAAM,WAA0E,CAAC;AACjF,eAAW,mBAAmB,kBAAkB;AAC9C,eAAS,KAAK;AAAA,QACZ;AAAA,QACA,UAAU,MAAM,mBAAmB,SAAS,iBAAiB,UAAU,aAAa,aAAa;AAAA,MACnG,CAAC;AAAA,IACH;AACA,WAAO;AAAA,EACT;AAEA,SAAO;AAAA,IACL,MAAM,OAAO,OAAO,KAAK;AACvB,YAAM,EAAE,iBAAiB,GAAG,QAAQ,IAAI;AACxC,YAAM,WAAW,MAAM,mBAAmB,SAAS,iBAAiB,GAAG;AACvE,YAAM,UAAU,OAAO,KAAK;AAC5B,YAAM,eAAe,MAAM,QAAQ,cAAc,OAAO,OAAO;AAC7D,cAAM,oCAAoC,IAAI,CAAC,eAAe,GAAG,GAAG;AACpE,cAAM,SAAS,MAAM,4BAA4B,IAAI,SAAS,iBAAiB,KAAK,QAAQ;AAC5F,cAAM,GAAG,MAAM;AACf,eAAO;AAAA,MACT,CAAC;AAED,YAAM,4BAA4B,WAAW,KAAK,SAAS;AAG3D,YAAM,wBAAwB,UAAU,cAAc,GAAG;AACzD,UAAI,eAAe,aAAa,QAAQ,GAAG;AACzC,cAAM,SAAS,KAAK,wBAAwB,SAAS;AAAA,UACnD,UAAU,aAAa;AAAA,UACvB,gBAAgB,aAAa,kBAAkB;AAAA,UAC/C,iBAAiB,aAAa;AAAA,UAC9B,cAAc,kBAAkB,YAAY;AAAA,QAC9C,CAAC;AAAA,MACH;AAEA,aAAO;AAAA,IACT;AAAA,IAEA,MAAM,YAAY,OAAO,KAAK;AAC5B,YAAM,mBAAmB,MAAM,KAAK,IAAI,IAAI,MAAM,gBAAgB,CAAC;AACnE,YAAM,EAAE,kBAAkB,mBAAmB,GAAG,QAAQ,IAAI;AAC5D,YAAM,gBAAgC,CAAC;AACvC,YAAM,WAAW,MAAM,6BAA6B,SAAS,kBAAkB,GAAG;AAClF,YAAM,UAAU,OAAO,KAAK;AAE5B,YAAM,QAAQ,cAAc,OAAO,OAAO;AACxC,cAAM,oCAAoC,IAAI,kBAAkB,GAAG;AACnE,mBAAW,EAAE,iBAAiB,SAAS,KAAK,UAAU;AACpD,gBAAM,eAAe,MAAM,4BAA4B,IAAI,SAAS,iBAAiB,KAAK,QAAQ;AAClG,wBAAc,KAAK,YAAY;AAAA,QACjC;AACA,cAAM,GAAG,MAAM;AAAA,MACjB,CAAC;AAED,YAAM,4BAA4B,WAAW,KAAK,SAAS;AAC3D,YAAM,6BAA6B,UAAU,eAAe,GAAG;AAC/D,YAAM,0BAA0B,UAAU,eAAe,GAAG;AAE5D,aAAO;AAAA,IACT;AAAA,IAEA,MAAM,cAAc,OAAO,KAAK;AAC9B,YAAM,KAAK,OAAO,KAAK;AAEvB,YAAM,KAAK,MAAM,EAAE;AACnB,YAAM,mBAAmB,MAAM,2BAA2B,IAAI,IAAI,UAAU,MAAM,MAAM;AACxF,UAAI,iBAAiB,WAAW,GAAG;AACjC,eAAO,CAAC;AAAA,MACV;AAEA,YAAM,EAAE,QAAQ,SAAS,GAAG,QAAQ,IAAI;AACxC,YAAM,gBAAgC,CAAC;AACvC,YAAM,yBAAyB,MAAM,KAAK,IAAI,IAAI,gBAAgB,CAAC;AACnE,YAAM,WAAW,MAAM,6BAA6B,SAAS,wBAAwB,GAAG;AACxF,YAAM,UAAU,OAAO,KAAK;AAE5B,YAAM,QAAQ,cAAc,OAAO,OAAO;AACxC,mBAAW,EAAE,iBAAiB,SAAS,KAAK,UAAU;AACpD,gBAAM,eAAe,MAAM,4BAA4B,IAAI,SAAS,iBAAiB,KAAK,QAAQ;AAClG,wBAAc,KAAK,YAAY;AAAA,QACjC;AACA,cAAM,GAAG,MAAM;AAAA,MACjB,CAAC;AAED,YAAM,4BAA4B,WAAW,KAAK,SAAS;AAC3D,YAAM,6BAA6B,UAAU,eAAe,GAAG;AAC/D,YAAM,0BAA0B,UAAU,eAAe,GAAG;AAE5D,aAAO;AAAA,IACT;AAAA,IAEA,MAAM,iBAAiB,OAAO,KAAK;AACjC,YAAM,KAAK,OAAO,KAAK;AACvB,YAAM,KAAK,MAAM,EAAE;AACnB,YAAM,mBAAmB,MAAM,8BAA8B,IAAI,IAAI,UAAU,MAAM,eAAe;AAEpG,UAAI,iBAAiB,WAAW,GAAG;AACjC,cAAM,gCAAgC,MAAM,iBAAiB,cAAc,IAAI,QAAQ;AACvF,eAAO,CAAC;AAAA,MACV;AAEA,UAAI,6BAA6B;AACjC,UAAI,MAAM,kCAAkC;AAC1C,cAAM,yBAAyB,MAAM,KAAK,IAAI,IAAI,gBAAgB,CAAC;AACnE,YAAI,CAAC,IAAI,gBAAgB;AACvB,iBAAO,KAAK,yFAAyF;AAAA,YACnG,UAAU,IAAI;AAAA,YACd,iBAAiB,MAAM;AAAA,UACzB,CAAC;AACD,iBAAO,CAAC;AAAA,QACV;AAEA,YAAI,uBAAuB,SAAS,KAAK;AACvC,iBAAO,KAAK,0FAA0F;AAAA,YACpG,UAAU,IAAI;AAAA,YACd,gBAAgB,IAAI;AAAA,YACpB,iBAAiB,MAAM;AAAA,YACvB,gBAAgB,uBAAuB;AAAA,YACvC,cAAc;AAAA,UAChB,CAAC;AACD,iBAAO,CAAC;AAAA,QACV;AAEA,YAAI,CAAC,WAAW;AACd,iBAAO,KAAK,2FAA2F;AAAA,YACrG,UAAU,IAAI;AAAA,YACd,gBAAgB,IAAI;AAAA,YACpB,iBAAiB,MAAM;AAAA,UACzB,CAAC;AACD,iBAAO,CAAC;AAAA,QACV;AAEA,YAAI;AACF,gBAAM,cAAc,UAAU,QAAQ,aAAa;AAOnD,gBAAM,0BAAoC,CAAC;AAC3C,mBAAS,SAAS,GAAG,SAAS,uBAAuB,QAAQ,UAAU,IAAI;AACzE,kBAAM,aAAa,uBAAuB,MAAM,QAAQ,SAAS,EAAE;AACnE,kBAAM,UAAU,MAAM,QAAQ,IAAI,WAAW,IAAI,OAAO,qBAAqB;AAAA,cAC3E;AAAA,cACA,SAAS,MAAM,YAAY;AAAA,gBACzB;AAAA,gBACA,CAAC,MAAM,eAAe;AAAA,gBACtB,EAAE,UAAU,IAAI,UAAU,gBAAgB,IAAI,kBAAkB,KAAK;AAAA,cACvE;AAAA,YACF,EAAE,CAAC;AACH,uBAAW,UAAU,SAAS;AAC5B,kBAAI,OAAO,QAAS,yBAAwB,KAAK,OAAO,eAAe;AAAA,YACzE;AAAA,UACF;AACA,uCAA6B;AAAA,QAC/B,SAAS,KAAK;AACZ,iBAAO,KAAK,iFAAiF;AAAA,YAC3F,UAAU,IAAI;AAAA,YACd,gBAAgB,IAAI;AAAA,YACpB,iBAAiB,MAAM;AAAA,YACvB;AAAA,UACF,CAAC;AACD,iBAAO,CAAC;AAAA,QACV;AAEA,YAAI,2BAA2B,WAAW,GAAG;AAC3C,gBAAM,gDAAgD,MAAM,iBAAiB,IAAI,cAAc;AAC/F,iBAAO,CAAC;AAAA,QACV;AAAA,MACF;AAEA,YAAM,8BAA8B,2BAA2B,QAAQ,yBAAyB,MAAM,eAAe;AAErH,YAAM;AAAA,QACJ,iBAAiB;AAAA,QACjB,kCAAkC;AAAA,QAClC,GAAG;AAAA,MACL,IAAI;AACJ,YAAM,gBAAgC,CAAC;AACvC,YAAM,yBAAyB,MAAM,KAAK,IAAI,IAAI,0BAA0B,CAAC;AAC7E,YAAM,WAAW,MAAM,6BAA6B,SAAS,wBAAwB,GAAG;AACxF,YAAM,UAAU,OAAO,KAAK;AAE5B,YAAM,QAAQ,cAAc,OAAO,OAAO;AACxC,mBAAW,EAAE,iBAAiB,SAAS,KAAK,UAAU;AACpD,gBAAM,eAAe,MAAM,4BAA4B,IAAI,SAAS,iBAAiB,KAAK,QAAQ;AAClG,wBAAc,KAAK,YAAY;AAAA,QACjC;AACA,cAAM,GAAG,MAAM;AAAA,MACjB,CAAC;AAED,YAAM,4BAA4B,WAAW,KAAK,SAAS;AAC3D,YAAM,6BAA6B,UAAU,eAAe,GAAG;AAC/D,YAAM,0BAA0B,UAAU,eAAe,GAAG;AAE5D,aAAO;AAAA,IACT;AAAA,IAEA,MAAM,WAAW,gBAAgB,KAAK;AACpC,YAAM,KAAK,OAAO,KAAK;AACvB,YAAM,eAAe,MAAM,8BAA8B,IAAI,gBAAgB,GAAG;AAEhF,UAAI,aAAa,WAAW,UAAU;AACpC,qBAAa,SAAS;AACtB,qBAAa,SAAS,oBAAI,KAAK;AAC/B,cAAM,GAAG,MAAM;AAEf,cAAM,4BAA4B,WAAW,KAAK,WAAW,aAAa,EAAE;AAC5E,cAAM,SAAS,KAAK,oBAAoB,MAAM;AAAA,UAC5C,gBAAgB,aAAa;AAAA,UAC7B,QAAQ,IAAI;AAAA,UACZ,UAAU,IAAI;AAAA,QAChB,CAAC;AAAA,MACH;AAEA,aAAO;AAAA,IACT;AAAA,IAEA,MAAM,cAAc,KAAK;AACvB,YAAM,KAAK,OAAO,KAAK;AACvB,YAAM,KAAK,MAAM,EAAE;AACnB,YAAM,aAAa,CAA+C,MAAc;AAC9E,YAAI,QAAQ,EACT,MAAM,qBAA4B,KAAK,IAAI,MAAa,EACxD,MAAM,aAAoB,KAAK,IAAI,QAAQ,EAC3C,MAAM,UAAiB,KAAK,QAAQ,EAMpC,MAAM,gBAAgB,CAAQ;AACjC,YAAI,IAAI,gBAAgB;AACtB,kBAAQ,MAAM,MAAM,mBAA0B,KAAK,IAAI,cAAc;AAAA,QACvE;AACA,eAAO;AAAA,MACT;AAEA,YAAM,aAAa,MAAM;AAAA,QACvB,GACG,WAAW,eAAsB,EACjC,OAAO;AAAA,UACN;AAAA,UACA;AAAA,UACA;AAAA,QACF,CAAC;AAAA,MACL,EAAE,QAAQ;AAEV,UAAI,CAAC,WAAW,QAAQ;AACtB,eAAO;AAAA,MACT;AAEA,YAAM,eAAe,MAAM;AAAA,QACzB,GAAG,YAAY,eAAsB,EAAE,IAAI;AAAA,UACzC,QAAQ;AAAA,UACR,SAAS;AAAA,QACX,CAAQ;AAAA,MACV,EAAE,iBAAiB;AACnB,YAAM,SAAS,OAAO,cAAc,kBAAkB,WAAW,MAAM;AAEvE,YAAM,4BAA4B,WAAW,KAAK,SAAS;AAE3D,YAAM,gBAAgB,MAAM,mBAAmB,IAAI,cAAc;AAAA,QAC/D,IAAI,EAAE,KAAK,WAAW,IAAI,CAAC,QAAQ,IAAI,EAAE,EAAE;AAAA,MAC7C,GAAG,QAAW;AAAA,QACZ,UAAU,IAAI;AAAA,QACd,gBAAgB,IAAI,kBAAkB;AAAA,MACxC,CAAC;AAED,iBAAW,gBAAgB,eAAe;AACxC,cAAM,SAAS,KAAK,oBAAoB,MAAM;AAAA,UAC5C,gBAAgB,aAAa;AAAA,UAC7B,QAAQ,IAAI;AAAA,UACZ,UAAU,IAAI;AAAA,QAChB,CAAC;AAED,cAAM,SAAS,KAAK,wBAAwB,SAAS;AAAA,UACnD,UAAU,aAAa;AAAA,UACvB,gBAAgB,aAAa,kBAAkB;AAAA,UAC/C,iBAAiB,aAAa;AAAA,UAC9B,cAAc,kBAAkB,YAAY;AAAA,QAC9C,CAAC;AAAA,MACH;AAEA,aAAO;AAAA,IACT;AAAA,IAEA,MAAM,QAAQ,gBAAgB,KAAK;AACjC,YAAM,KAAK,OAAO,KAAK;AACvB,YAAM,eAAe,MAAM,8BAA8B,IAAI,gBAAgB,GAAG;AAEhF,mBAAa,SAAS;AACtB,mBAAa,cAAc,oBAAI,KAAK;AACpC,YAAM,GAAG,MAAM;AAEf,YAAM,4BAA4B,WAAW,KAAK,WAAW,aAAa,EAAE;AAC5E,YAAM,SAAS,KAAK,oBAAoB,WAAW;AAAA,QACjD,gBAAgB,aAAa;AAAA,QAC7B,QAAQ,IAAI;AAAA,QACZ,UAAU,IAAI;AAAA,MAChB,CAAC;AAED,aAAO;AAAA,IACT;AAAA,IAEA,MAAM,iBAAiB,gBAAgB,QAAQ,KAAK;AAClD,YAAM,KAAK,OAAO,KAAK;AACvB,YAAM,eAAe,MAAM,8BAA8B,IAAI,gBAAgB,GAAG;AAEhF,UAAI,aAAa,WAAW,aAAa;AACvC,eAAO;AAAA,MACT;AAIA,YAAM,eAAmC,aAAa,cAAc,OAAO,aAAa,UAAU;AAClG,mBAAa,SAAS;AACtB,mBAAa,cAAc;AAE3B,UAAI,iBAAiB,UAAU;AAC7B,qBAAa,SAAS;AAAA,MACxB,WAAW,CAAC,aAAa,QAAQ;AAC/B,qBAAa,SAAS,oBAAI,KAAK;AAAA,MACjC;AAEA,YAAM,GAAG,MAAM;AAEf,YAAM,4BAA4B,WAAW,KAAK,WAAW,aAAa,EAAE;AAC5E,YAAM,SAAS,KAAK,oBAAoB,UAAU;AAAA,QAChD,gBAAgB,aAAa;AAAA,QAC7B,QAAQ,IAAI;AAAA,QACZ,UAAU,IAAI;AAAA,QACd,QAAQ;AAAA,MACV,CAAC;AAED,aAAO;AAAA,IACT;AAAA,IAEA,MAAM,cAAc,gBAAgB,OAAO,KAAK;AAC9C,YAAM,KAAK,OAAO,KAAK;AACvB,YAAM,eAAe,MAAM,8BAA8B,IAAI,gBAAgB,GAAG;AAEhF,YAAM,aAAa,aAAa;AAChC,YAAM,SAAS,YAAY,SAAS,KAAK,CAAC,MAAM,EAAE,OAAO,MAAM,QAAQ;AAEvE,UAAI,CAAC,QAAQ;AACX,cAAM,IAAI,MAAM,kBAAkB;AAAA,MACpC;AAKA,UAAI,aAAa,WAAW,cAAc,aAAa,cAAc,MAAM;AACzE,cAAM,sBAAsB;AAAA,MAC9B;AAEA,UAAI,OAAO,WAAW;AACpB,cAAM,WAAW,0BAA0B,aAAa,MAAM,MAAM;AACpE,YAAI,CAAC,YAAY,CAAE,MAAM,wBAAwB,SAAS,kBAAkB,GAAG,GAAI;AACjF,gBAAM,MAAM,gBAAgB;AAAA,QAC9B;AAAA,MACF;AAEA,YAAM,aAAa,oBAAI,KAAK;AAC5B,YAAM,iBAAiB,aAAa;AACpC,YAAM,qBAAqB,aAAa,cAAc;AACtD,YAAM,sBAAsB,aAAa,eAAe;AAKxD,YAAM,cAAe,MAAM,MAAM,EAAE,EAChC,YAAY,eAAsB,EAClC,IAAI;AAAA,QACH,QAAQ;AAAA,QACR,aAAa;AAAA,QACb,cAAc,MAAM;AAAA,MACtB,CAAQ,EACP,MAAM,MAAa,KAAK,aAAa,EAAE,EACvC,MAAM,qBAA4B,KAAK,IAAI,MAAa,EACxD,MAAM,aAAoB,KAAK,IAAI,QAAQ,EAC3C,MAAM,UAAiB,MAAM,UAAU,EACvC,MAAM,eAAsB,MAAM,IAAI,EACtC,iBAAiB;AAEpB,UAAI,OAAO,aAAa,kBAAkB,CAAC,MAAM,GAAG;AAClD,cAAM,sBAAsB;AAAA,MAC9B;AASA,YAAM,eAAe,YAAY;AAC/B,cAAM,MAAM,EAAE,EACX,YAAY,eAAsB,EAClC,IAAI;AAAA,UACH,QAAQ,yCAAyC,cAAc;AAAA,UAC/D,aAAa;AAAA,UACb,cAAc;AAAA,QAChB,CAAQ,EACP,MAAM,MAAa,KAAK,aAAa,EAAE,EACvC,MAAM,qBAA4B,KAAK,IAAI,MAAa,EACxD,MAAM,aAAoB,KAAK,IAAI,QAAQ,EAC3C,MAAM,eAAsB,KAAK,UAAU,EAC3C,MAAM,gBAAuB,KAAK,MAAM,QAAQ,EAChD,iBAAiB;AAAA,MACtB;AAEA,UAAI,SAAkB;AAEtB,UAAI,OAAO,aAAa,cAAc,WAAW;AAC/C,cAAM,eAAe;AAAA,UACnB,GAAG,MAAM;AAAA,UACT,IAAI,aAAa;AAAA,QACnB;AAGA,cAAM,aAAa;AAAA,UACjB;AAAA,UACA,MAAM;AAAA,YACJ,KAAK,IAAI;AAAA,YACT,UAAU,IAAI;AAAA,YACd,OAAO,IAAI;AAAA,UACb;AAAA,UACA,mBAAmB;AAAA,UACnB,wBAAwB,IAAI,kBAAkB;AAAA,UAC9C,iBAAiB,IAAI,iBAAiB,CAAC,IAAI,cAAc,IAAI;AAAA,QAC/D;AAEA,YAAI;AACJ,YAAI;AACF,0BAAgB,MAAM,WAAW,QAAQ,OAAO,WAAW;AAAA,YACzD,OAAO;AAAA,YACP,KAAK;AAAA,YACL,UAAU;AAAA,cACR,UAAU,IAAI;AAAA,cACd,gBAAgB,IAAI;AAAA,cACpB,cAAc;AAAA,YAChB;AAAA,UACF,CAAC;AAAA,QACH,SAAS,KAAK;AAGZ,cAAI;AACF,kBAAM,aAAa;AAAA,UACrB,SAAS,YAAY;AACnB,kBAAM,+CAA+C,UAAU;AAAA,UACjE;AACA,gBAAM;AAAA,QACR;AAEA,iBAAS,cAAc;AAAA,MACzB;AAEA,mBAAa,SAAS;AACtB,mBAAa,aAAa;AAC1B,mBAAa,cAAc,MAAM;AACjC,mBAAa,eAAe;AAE5B,UAAI,CAAC,aAAa,QAAQ;AACxB,qBAAa,SAAS,oBAAI,KAAK;AAAA,MACjC;AAEA,YAAM,GAAG,MAAM;AAEf,YAAM,4BAA4B,WAAW,KAAK,WAAW,aAAa,EAAE;AAC5E,YAAM,SAAS,KAAK,oBAAoB,UAAU;AAAA,QAChD,gBAAgB,aAAa;AAAA,QAC7B,UAAU,MAAM;AAAA,QAChB,QAAQ,IAAI;AAAA,QACZ,UAAU,IAAI;AAAA,MAChB,CAAC;AAED,aAAO,EAAE,cAAc,OAAO;AAAA,IAChC;AAAA,IAEA,MAAM,eAAe,KAAK;AACxB,YAAM,KAAK,OAAO,KAAK;AACvB,aAAO,GAAG,MAAM,cAAc;AAAA,QAC5B,iBAAiB,IAAI;AAAA,QACrB,UAAU,IAAI;AAAA,QACd,QAAQ;AAAA,QACR,MAAM;AAAA,UACJ,gCAAgC,GAAG;AAAA,UACnC,mBAAmB;AAAA,QACrB;AAAA,MACF,CAAC;AAAA,IACH;AAAA,IAEA,MAAM,YAAY,KAAK,OAAO;AAC5B,YAAM,KAAK,OAAO,KAAK;AACvB,YAAM,UAAmC;AAAA,QACvC,iBAAiB,IAAI;AAAA,QACrB,UAAU,IAAI;AAAA,QACd,MAAM;AAAA,UACJ,gCAAgC,GAAG;AAAA,UACnC,mBAAmB;AAAA,QACrB;AAAA,MACF;AAEA,UAAI,OAAO;AACT,gBAAQ,YAAY,EAAE,KAAK,IAAI,KAAK,KAAK,EAAE;AAAA,MAC7C;AAEA,YAAM,CAAC,eAAe,WAAW,IAAI,MAAM,QAAQ,IAAI;AAAA,QACrD,GAAG,KAAK,cAAc,SAAS;AAAA,UAC7B,SAAS,EAAE,WAAW,OAAO;AAAA,UAC7B,OAAO;AAAA,QACT,CAAC;AAAA,QACD,GAAG,MAAM,cAAc;AAAA,UACrB,iBAAiB,IAAI;AAAA,UACrB,UAAU,IAAI;AAAA,UACd,QAAQ;AAAA,UACR,MAAM;AAAA,YACJ,gCAAgC,GAAG;AAAA,YACnC,mBAAmB;AAAA,UACrB;AAAA,QACF,CAAC;AAAA,MACH,CAAC;AAED,YAAM,SAAS,cAAc,IAAI,iBAAiB;AAClD,YAAM,SAAS,QAAQ,OAAO,SAAS,IAAI;AAE3C,aAAO;AAAA,QACL;AAAA,QACA;AAAA,QACA;AAAA,QACA,QAAQ,OAAO,CAAC,GAAG;AAAA,MACrB;AAAA,IACF;AAAA,IAEA,MAAM,iBAAiB;AACrB,YAAM,KAAK,OAAO,KAAK;AACvB,YAAM,KAAK,MAAM,EAAE;AAEnB,YAAM,iBAAiB,MAAM,GAC1B,WAAW,eAAsB,EACjC,OAAO;AAAA,QACN;AAAA,QACA;AAAA,MACF,CAAC,EACA,MAAM,cAAqB,KAAK,UAAU,EAC1C,MAAM,UAAiB,UAAU,CAAC,YAAY,WAAW,CAAC,EAC1D,SAAS,EACT,QAAQ;AAEX,UAAI,CAAC,eAAe,OAAQ,QAAO;AAEnC,YAAM,eAAe,MAAM,GACxB,YAAY,eAAsB,EAClC,IAAI;AAAA,QACH,QAAQ;AAAA,QACR,cAAc;AAAA,MAChB,CAAQ,EACP,MAAM,cAAqB,KAAK,UAAU,EAC1C,MAAM,UAAiB,UAAU,CAAC,YAAY,WAAW,CAAC,EAC1D,iBAAiB;AAEpB,iBAAW,SAAS,gBAAgB;AAClC,cAAM,4BAA4B,WAAW;AAAA,UAC3C,UAAU,MAAM;AAAA,UAChB,gBAAgB,MAAM;AAAA,QACxB,GAAG,SAAS;AAAA,MACd;AAEA,aAAO,OAAO,cAAc,kBAAkB,CAAC;AAAA,IACjD;AAAA,IAEA,MAAM,eAAe,kBAAkB,gBAAgB,KAAK;AAC1D,YAAM,KAAK,OAAO,KAAK;AACvB,YAAM,KAAK,MAAM,EAAE;AAEnB,YAAM,eAAe,MAAM,GACxB,WAAW,eAAsB,EACjC,MAAM,sBAA6B,KAAK,gBAAgB,EACxD,MAAM,oBAA2B,KAAK,cAAc,EACpD,MAAM,aAAoB,KAAK,IAAI,QAAQ,EAC3C,iBAAiB;AAEpB,YAAM,eAAe,OAAO,cAAc,kBAAkB,CAAC;AAC7D,UAAI,eAAe,GAAG;AACpB,cAAM,4BAA4B,WAAW,KAAK,SAAS;AAAA,MAC7D;AAEA,aAAO;AAAA,IACT;AAAA,EACF;AACF;AAMO,SAAS,2BAA2B,WAEnB;AACtB,QAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,QAAM,WAAW,UAAU,QAAQ,UAAU;AAG7C,MAAI;AACJ,MAAI;AACF,iBAAa,UAAU,QAAQ,YAAY;AAAA,EAC7C,QAAQ;AAEN,iBAAa;AAAA,EACf;AAEA,SAAO,0BAA0B,EAAE,IAAI,UAAU,YAAY,UAAU,CAAC;AAC1E;",
   "names": []
 }