@open-mercato/core 0.6.8-develop.6983.1.e4f794099e → 0.6.8-develop.6985.1.fb93574faa

package/dist/modules/messages/notifications.js

@@ -1,6 +1,8 @@
 const notificationTypes = [
   {
     type: "messages.new",
+    // Ships without push — operators re-enable it per type from the Notification Delivery settings.
+    channels: ["in_app", "email"],
     module: "messages",
     titleKey: "messages.notifications.new.title",
     bodyKey: "messages.notifications.new.body",

package/dist/modules/messages/notifications.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../src/modules/messages/notifications.ts"],
-  "sourcesContent": ["import type { NotificationTypeDefinition } from '@open-mercato/shared/modules/notifications/types'\n\nexport const notificationTypes: NotificationTypeDefinition[] = [\n  {\n    type: 'messages.new',\n    module: 'messages',\n    titleKey: 'messages.notifications.new.title',\n    bodyKey: 'messages.notifications.new.body',\n    icon: 'mail',\n    severity: 'info',\n    actions: [\n      {\n        id: 'view',\n        labelKey: 'common.view',\n        variant: 'outline',\n        href: '/backend/messages/{sourceEntityId}',\n        icon: 'external-link',\n      },\n    ],\n    linkHref: '/backend/messages/{sourceEntityId}',\n    expiresAfterHours: 168,\n  },\n]\n\nexport default notificationTypes\n"],
-  "mappings": "AAEO,MAAM,oBAAkD;AAAA,EAC7D;AAAA,IACE,MAAM;AAAA,IACN,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,SAAS;AAAA,IACT,MAAM;AAAA,IACN,UAAU;AAAA,IACV,SAAS;AAAA,MACP;AAAA,QACE,IAAI;AAAA,QACJ,UAAU;AAAA,QACV,SAAS;AAAA,QACT,MAAM;AAAA,QACN,MAAM;AAAA,MACR;AAAA,IACF;AAAA,IACA,UAAU;AAAA,IACV,mBAAmB;AAAA,EACrB;AACF;AAEA,IAAO,wBAAQ;",
+  "sourcesContent": ["import type { NotificationTypeDefinition } from '@open-mercato/shared/modules/notifications/types'\n\nexport const notificationTypes: NotificationTypeDefinition[] = [\n  {\n    type: 'messages.new',\n    // Ships without push \u2014 operators re-enable it per type from the Notification Delivery settings.\n    channels: ['in_app', 'email'],\n    module: 'messages',\n    titleKey: 'messages.notifications.new.title',\n    bodyKey: 'messages.notifications.new.body',\n    icon: 'mail',\n    severity: 'info',\n    actions: [\n      {\n        id: 'view',\n        labelKey: 'common.view',\n        variant: 'outline',\n        href: '/backend/messages/{sourceEntityId}',\n        icon: 'external-link',\n      },\n    ],\n    linkHref: '/backend/messages/{sourceEntityId}',\n    expiresAfterHours: 168,\n  },\n]\n\nexport default notificationTypes\n"],
+  "mappings": "AAEO,MAAM,oBAAkD;AAAA,EAC7D;AAAA,IACE,MAAM;AAAA;AAAA,IAEN,UAAU,CAAC,UAAU,OAAO;AAAA,IAC5B,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,SAAS;AAAA,IACT,MAAM;AAAA,IACN,UAAU;AAAA,IACV,SAAS;AAAA,MACP;AAAA,QACE,IAAI;AAAA,QACJ,UAAU;AAAA,QACV,SAAS;AAAA,QACT,MAAM;AAAA,QACN,MAAM;AAAA,MACR;AAAA,IACF;AAAA,IACA,UAAU;AAAA,IACV,mBAAmB;AAAA,EACrB;AACF;AAEA,IAAO,wBAAQ;",
   "names": []
 }

package/dist/modules/notifications/acl.js

@@ -1,7 +1,9 @@
 const features = [
   { id: "notifications.view", title: "View own notifications", module: "notifications" },
   { id: "notifications.create", title: "Create notifications for others", module: "notifications" },
-  { id: "notifications.manage", title: "Manage all notifications", module: "notifications" }
+  { id: "notifications.manage", title: "Manage all notifications", module: "notifications" },
+  { id: "notifications.manage_preferences", title: "Manage own notification preferences", module: "notifications" },
+  { id: "notifications.manage_user_preferences", title: "Manage other users' notification preferences", module: "notifications" }
 ];
 var acl_default = features;
 export {

package/dist/modules/notifications/acl.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../src/modules/notifications/acl.ts"],
-  "sourcesContent": ["export const features = [\n  { id: 'notifications.view', title: 'View own notifications', module: 'notifications' },\n  { id: 'notifications.create', title: 'Create notifications for others', module: 'notifications' },\n  { id: 'notifications.manage', title: 'Manage all notifications', module: 'notifications' },\n]\n\nexport default features\n"],
-  "mappings": "AAAO,MAAM,WAAW;AAAA,EACtB,EAAE,IAAI,sBAAsB,OAAO,0BAA0B,QAAQ,gBAAgB;AAAA,EACrF,EAAE,IAAI,wBAAwB,OAAO,mCAAmC,QAAQ,gBAAgB;AAAA,EAChG,EAAE,IAAI,wBAAwB,OAAO,4BAA4B,QAAQ,gBAAgB;AAC3F;AAEA,IAAO,cAAQ;",
+  "sourcesContent": ["export const features = [\n  { id: 'notifications.view', title: 'View own notifications', module: 'notifications' },\n  { id: 'notifications.create', title: 'Create notifications for others', module: 'notifications' },\n  { id: 'notifications.manage', title: 'Manage all notifications', module: 'notifications' },\n  { id: 'notifications.manage_preferences', title: 'Manage own notification preferences', module: 'notifications' },\n  { id: 'notifications.manage_user_preferences', title: \"Manage other users' notification preferences\", module: 'notifications' },\n]\n\nexport default features\n"],
+  "mappings": "AAAO,MAAM,WAAW;AAAA,EACtB,EAAE,IAAI,sBAAsB,OAAO,0BAA0B,QAAQ,gBAAgB;AAAA,EACrF,EAAE,IAAI,wBAAwB,OAAO,mCAAmC,QAAQ,gBAAgB;AAAA,EAChG,EAAE,IAAI,wBAAwB,OAAO,4BAA4B,QAAQ,gBAAgB;AAAA,EACzF,EAAE,IAAI,oCAAoC,OAAO,uCAAuC,QAAQ,gBAAgB;AAAA,EAChH,EAAE,IAAI,yCAAyC,OAAO,gDAAgD,QAAQ,gBAAgB;AAChI;AAEA,IAAO,cAAQ;",
   "names": []
 }

package/dist/modules/notifications/api/admin/preferences/route.js

@@ -0,0 +1,167 @@
+import { NextResponse } from "next/server";
+import { z } from "zod";
+import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
+import { getAuthFromRequest } from "@open-mercato/shared/lib/auth/server";
+import { resolveTranslations } from "@open-mercato/shared/lib/i18n/server";
+import { readJsonSafe } from "@open-mercato/shared/lib/http/readJsonSafe";
+import { isCrudHttpError } from "@open-mercato/shared/lib/crud/errors";
+import { findOneWithDecryption } from "@open-mercato/shared/lib/encryption/find";
+import { User } from "../../../../auth/data/entities.js";
+import { assertActorCanAccessUserTarget } from "../../../../auth/lib/grantChecks.js";
+import { resolveOrganizationScopeForRequest } from "../../../../directory/utils/organizationScope.js";
+import { resolveNotificationPreferenceService } from "../../../lib/notificationPreferenceService.js";
+import {
+  runGuardedNotificationWrite,
+  notificationValidationErrorResponse,
+  NOTIFICATION_PREFERENCE_RESOURCE_KIND
+} from "../../../lib/routeHelpers.js";
+import { PREFERENCE_UPDATED_EVENT, emitNotificationEvent } from "../../../events.js";
+import {
+  adminPreferencesQuerySchema,
+  adminUpdatePreferencesSchema,
+  notificationPreferenceItemSchema
+} from "../../../data/validators.js";
+import { errorResponseSchema } from "../../openapi.js";
+const metadata = {
+  GET: { requireAuth: true, requireFeatures: ["notifications.manage_user_preferences"] },
+  PUT: { requireAuth: true, requireFeatures: ["notifications.manage_user_preferences"] }
+};
+const unauthorized = async () => {
+  const { t } = await resolveTranslations();
+  return NextResponse.json({ error: t("api.errors.unauthorized", "Unauthorized") }, { status: 401 });
+};
+async function authorizeTargetUser(container, em, auth, req, targetUserId) {
+  const { t } = await resolveTranslations();
+  const user = await findOneWithDecryption(
+    em,
+    User,
+    { id: targetUserId, tenantId: auth.tenantId, deletedAt: null },
+    void 0,
+    { tenantId: auth.tenantId, organizationId: null }
+  );
+  if (!user) {
+    return NextResponse.json({ error: t("notifications.preferences.userNotFound", "User not found") }, { status: 404 });
+  }
+  try {
+    const rbacService = container.resolve("rbacService");
+    await assertActorCanAccessUserTarget({
+      em,
+      rbacService,
+      actorUserId: auth.sub,
+      tenantId: auth.tenantId,
+      organizationId: auth.orgId ?? null,
+      targetUserId,
+      organizationScope: await resolveOrganizationScopeForRequest({
+        container,
+        auth,
+        request: req,
+        tenantId: auth.tenantId
+      })
+    });
+  } catch (err) {
+    if (isCrudHttpError(err)) return NextResponse.json(err.body, { status: err.status });
+    throw err;
+  }
+  return null;
+}
+async function GET(req) {
+  const auth = await getAuthFromRequest(req);
+  if (!auth?.sub || !auth.tenantId) return await unauthorized();
+  const url = new URL(req.url);
+  const parsed = adminPreferencesQuerySchema.safeParse({ userId: url.searchParams.get("userId") ?? void 0 });
+  if (!parsed.success) return notificationValidationErrorResponse(parsed.error);
+  const container = await createRequestContainer();
+  try {
+    const em = container.resolve("em");
+    const denied = await authorizeTargetUser(container, em, { ...auth, sub: auth.sub, tenantId: auth.tenantId }, req, parsed.data.userId);
+    if (denied) return denied;
+    const service = resolveNotificationPreferenceService(container);
+    const scope = { tenantId: auth.tenantId, userId: parsed.data.userId };
+    const rows = await service.listForUser(scope);
+    const items = rows.map((row) => ({
+      notificationTypeId: row.notificationTypeId,
+      channel: row.channel,
+      enabled: row.enabled
+    }));
+    return NextResponse.json({ items });
+  } finally {
+    const disposable = container;
+    if (typeof disposable.dispose === "function") await disposable.dispose();
+  }
+}
+async function PUT(req) {
+  const auth = await getAuthFromRequest(req);
+  if (!auth?.sub || !auth.tenantId) return await unauthorized();
+  const parsed = adminUpdatePreferencesSchema.safeParse(await readJsonSafe(req, {}));
+  if (!parsed.success) return notificationValidationErrorResponse(parsed.error);
+  const container = await createRequestContainer();
+  try {
+    const em = container.resolve("em");
+    const denied = await authorizeTargetUser(container, em, { ...auth, sub: auth.sub, tenantId: auth.tenantId }, req, parsed.data.userId);
+    if (denied) return denied;
+    const service = resolveNotificationPreferenceService(container);
+    const scope = { tenantId: auth.tenantId, userId: parsed.data.userId };
+    const guarded = await runGuardedNotificationWrite(
+      container,
+      { tenantId: auth.tenantId, organizationId: auth.orgId ?? null, userId: auth.sub },
+      req,
+      {
+        resourceKind: NOTIFICATION_PREFERENCE_RESOURCE_KIND,
+        resourceId: parsed.data.userId,
+        operation: "update",
+        payload: parsed.data
+      },
+      () => service.setPreferences(
+        scope,
+        parsed.data.preferences.map((p) => ({ typeId: p.notificationTypeId, channel: p.channel, enabled: p.enabled }))
+      )
+    );
+    if (!guarded.ok) return guarded.response;
+    if (guarded.result > 0) {
+      await emitNotificationEvent(PREFERENCE_UPDATED_EVENT, {
+        tenantId: auth.tenantId,
+        organizationId: auth.orgId ?? null,
+        userId: parsed.data.userId
+      });
+    }
+    return NextResponse.json({ ok: true });
+  } finally {
+    const disposable = container;
+    if (typeof disposable.dispose === "function") await disposable.dispose();
+  }
+}
+const openApi = {
+  GET: {
+    summary: "Get a user's notification preferences (admin)",
+    description: "Returns a target user's stored channel preferences. Requires notifications.manage_user_preferences.",
+    tags: ["Notifications"],
+    parameters: [{ name: "userId", in: "query", required: true, schema: { type: "string", format: "uuid" } }],
+    responses: {
+      200: {
+        description: "Stored preferences",
+        content: { "application/json": { schema: z.object({ items: z.array(notificationPreferenceItemSchema) }) } }
+      },
+      401: { description: "Unauthorized", content: { "application/json": { schema: errorResponseSchema } } },
+      404: { description: "User not found", content: { "application/json": { schema: errorResponseSchema } } }
+    }
+  },
+  PUT: {
+    summary: "Update a user's notification preferences (admin)",
+    description: "Bulk-updates a target user's channel preferences. Requires notifications.manage_user_preferences.",
+    tags: ["Notifications"],
+    requestBody: { required: true, content: { "application/json": { schema: adminUpdatePreferencesSchema } } },
+    responses: {
+      200: { description: "Preferences updated", content: { "application/json": { schema: z.object({ ok: z.boolean() }) } } },
+      400: { description: "Invalid request body", content: { "application/json": { schema: errorResponseSchema } } },
+      401: { description: "Unauthorized", content: { "application/json": { schema: errorResponseSchema } } },
+      404: { description: "User not found", content: { "application/json": { schema: errorResponseSchema } } }
+    }
+  }
+};
+export {
+  GET,
+  PUT,
+  metadata,
+  openApi
+};
+//# sourceMappingURL=route.js.map

package/dist/modules/notifications/api/admin/preferences/route.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../../src/modules/notifications/api/admin/preferences/route.ts"],
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport type { AwilixContainer } from 'awilix'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport type { AuthContext } from '@open-mercato/shared/lib/auth/server'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { readJsonSafe } from '@open-mercato/shared/lib/http/readJsonSafe'\nimport { isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { User } from '../../../../auth/data/entities'\nimport { assertActorCanAccessUserTarget } from '../../../../auth/lib/grantChecks'\nimport { resolveOrganizationScopeForRequest } from '../../../../directory/utils/organizationScope'\nimport type { RbacService } from '../../../../auth/services/rbacService'\nimport { resolveNotificationPreferenceService, type NotificationPreferenceScope } from '../../../lib/notificationPreferenceService'\nimport {\n  runGuardedNotificationWrite,\n  notificationValidationErrorResponse,\n  NOTIFICATION_PREFERENCE_RESOURCE_KIND,\n} from '../../../lib/routeHelpers'\nimport { PREFERENCE_UPDATED_EVENT, emitNotificationEvent } from '../../../events'\nimport {\n  adminPreferencesQuerySchema,\n  adminUpdatePreferencesSchema,\n  notificationPreferenceItemSchema,\n} from '../../../data/validators'\nimport { errorResponseSchema } from '../../openapi'\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['notifications.manage_user_preferences'] },\n  PUT: { requireAuth: true, requireFeatures: ['notifications.manage_user_preferences'] },\n}\n\nconst unauthorized = async () => {\n  const { t } = await resolveTranslations()\n  return NextResponse.json({ error: t('api.errors.unauthorized', 'Unauthorized') }, { status: 401 })\n}\n\n/**\n * Authorize the acting admin to manage a target user's preferences. Returns an error response to\n * send, or null when access is granted. Two gates, mirroring the platform's user-management scoping:\n *   - 404 when the user does not exist in the acting tenant (existence/tenant check \u2014 the shared\n *     `assertActorCanAccessUserTarget` delegates silently on a fully-missing target).\n *   - standard org scoping via `assertActorCanAccessUserTarget` (403 out-of-org / 404 cross-tenant,\n *     super-admin and `__all__` bypass) \u2014 the same guard `auth` user CRUD uses, instead of a\n *     hand-rolled tenant-only check.\n */\nasync function authorizeTargetUser(\n  container: AwilixContainer,\n  em: EntityManager,\n  auth: AuthContext & { sub: string; tenantId: string },\n  req: Request,\n  targetUserId: string,\n): Promise<NextResponse | null> {\n  const { t } = await resolveTranslations()\n  const user = await findOneWithDecryption(\n    em,\n    User,\n    { id: targetUserId, tenantId: auth.tenantId, deletedAt: null },\n    undefined,\n    { tenantId: auth.tenantId, organizationId: null },\n  )\n  if (!user) {\n    return NextResponse.json({ error: t('notifications.preferences.userNotFound', 'User not found') }, { status: 404 })\n  }\n  try {\n    const rbacService = container.resolve('rbacService') as RbacService\n    await assertActorCanAccessUserTarget({\n      em,\n      rbacService,\n      actorUserId: auth.sub,\n      tenantId: auth.tenantId,\n      organizationId: auth.orgId ?? null,\n      targetUserId,\n      organizationScope: await resolveOrganizationScopeForRequest({\n        container,\n        auth,\n        request: req,\n        tenantId: auth.tenantId,\n      }),\n    })\n  } catch (err) {\n    if (isCrudHttpError(err)) return NextResponse.json(err.body, { status: err.status })\n    throw err\n  }\n  return null\n}\n\nexport async function GET(req: Request) {\n  const auth = await getAuthFromRequest(req)\n  if (!auth?.sub || !auth.tenantId) return await unauthorized()\n\n  const url = new URL(req.url)\n  const parsed = adminPreferencesQuerySchema.safeParse({ userId: url.searchParams.get('userId') ?? undefined })\n  if (!parsed.success) return notificationValidationErrorResponse(parsed.error)\n\n  const container = await createRequestContainer()\n  try {\n    const em = container.resolve('em') as EntityManager\n    const denied = await authorizeTargetUser(container, em, { ...auth, sub: auth.sub, tenantId: auth.tenantId }, req, parsed.data.userId)\n    if (denied) return denied\n    const service = resolveNotificationPreferenceService(container)\n    const scope: NotificationPreferenceScope = { tenantId: auth.tenantId, userId: parsed.data.userId }\n    const rows = await service.listForUser(scope)\n    const items = rows.map((row) => ({\n      notificationTypeId: row.notificationTypeId,\n      channel: row.channel,\n      enabled: row.enabled,\n    }))\n    return NextResponse.json({ items })\n  } finally {\n    const disposable = container as unknown as { dispose?: () => Promise<void> }\n    if (typeof disposable.dispose === 'function') await disposable.dispose()\n  }\n}\n\nexport async function PUT(req: Request) {\n  const auth = await getAuthFromRequest(req)\n  if (!auth?.sub || !auth.tenantId) return await unauthorized()\n\n  const parsed = adminUpdatePreferencesSchema.safeParse(await readJsonSafe(req, {}))\n  if (!parsed.success) return notificationValidationErrorResponse(parsed.error)\n\n  const container = await createRequestContainer()\n  try {\n    const em = container.resolve('em') as EntityManager\n    const denied = await authorizeTargetUser(container, em, { ...auth, sub: auth.sub, tenantId: auth.tenantId }, req, parsed.data.userId)\n    if (denied) return denied\n    const service = resolveNotificationPreferenceService(container)\n    const scope: NotificationPreferenceScope = { tenantId: auth.tenantId, userId: parsed.data.userId }\n    const guarded = await runGuardedNotificationWrite(\n      container,\n      { tenantId: auth.tenantId, organizationId: auth.orgId ?? null, userId: auth.sub },\n      req,\n      {\n        resourceKind: NOTIFICATION_PREFERENCE_RESOURCE_KIND,\n        resourceId: parsed.data.userId,\n        operation: 'update',\n        payload: parsed.data as Record<string, unknown>,\n      },\n      () =>\n        service.setPreferences(\n          scope,\n          parsed.data.preferences.map((p) => ({ typeId: p.notificationTypeId, channel: p.channel, enabled: p.enabled })),\n        ),\n    )\n    if (!guarded.ok) return guarded.response\n\n    // Skip the event on no-op writes (nothing actually changed).\n    if (guarded.result > 0) {\n      await emitNotificationEvent(PREFERENCE_UPDATED_EVENT, {\n        tenantId: auth.tenantId,\n        organizationId: auth.orgId ?? null,\n        userId: parsed.data.userId,\n      })\n    }\n\n    return NextResponse.json({ ok: true })\n  } finally {\n    const disposable = container as unknown as { dispose?: () => Promise<void> }\n    if (typeof disposable.dispose === 'function') await disposable.dispose()\n  }\n}\n\nexport const openApi = {\n  GET: {\n    summary: \"Get a user's notification preferences (admin)\",\n    description: \"Returns a target user's stored channel preferences. Requires notifications.manage_user_preferences.\",\n    tags: ['Notifications'],\n    parameters: [{ name: 'userId', in: 'query', required: true, schema: { type: 'string', format: 'uuid' } }],\n    responses: {\n      200: {\n        description: 'Stored preferences',\n        content: { 'application/json': { schema: z.object({ items: z.array(notificationPreferenceItemSchema) }) } },\n      },\n      401: { description: 'Unauthorized', content: { 'application/json': { schema: errorResponseSchema } } },\n      404: { description: 'User not found', content: { 'application/json': { schema: errorResponseSchema } } },\n    },\n  },\n  PUT: {\n    summary: \"Update a user's notification preferences (admin)\",\n    description: \"Bulk-updates a target user's channel preferences. Requires notifications.manage_user_preferences.\",\n    tags: ['Notifications'],\n    requestBody: { required: true, content: { 'application/json': { schema: adminUpdatePreferencesSchema } } },\n    responses: {\n      200: { description: 'Preferences updated', content: { 'application/json': { schema: z.object({ ok: z.boolean() }) } } },\n      400: { description: 'Invalid request body', content: { 'application/json': { schema: errorResponseSchema } } },\n      401: { description: 'Unauthorized', content: { 'application/json': { schema: errorResponseSchema } } },\n      404: { description: 'User not found', content: { 'application/json': { schema: errorResponseSchema } } },\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAGlB,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AAEnC,SAAS,2BAA2B;AACpC,SAAS,oBAAoB;AAC7B,SAAS,uBAAuB;AAChC,SAAS,6BAA6B;AACtC,SAAS,YAAY;AACrB,SAAS,sCAAsC;AAC/C,SAAS,0CAA0C;AAEnD,SAAS,4CAA8E;AACvF;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,0BAA0B,6BAA6B;AAChE;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,2BAA2B;AAE7B,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,uCAAuC,EAAE;AAAA,EACrF,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,uCAAuC,EAAE;AACvF;AAEA,MAAM,eAAe,YAAY;AAC/B,QAAM,EAAE,EAAE,IAAI,MAAM,oBAAoB;AACxC,SAAO,aAAa,KAAK,EAAE,OAAO,EAAE,2BAA2B,cAAc,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AACnG;AAWA,eAAe,oBACb,WACA,IACA,MACA,KACA,cAC8B;AAC9B,QAAM,EAAE,EAAE,IAAI,MAAM,oBAAoB;AACxC,QAAM,OAAO,MAAM;AAAA,IACjB;AAAA,IACA;AAAA,IACA,EAAE,IAAI,cAAc,UAAU,KAAK,UAAU,WAAW,KAAK;AAAA,IAC7D;AAAA,IACA,EAAE,UAAU,KAAK,UAAU,gBAAgB,KAAK;AAAA,EAClD;AACA,MAAI,CAAC,MAAM;AACT,WAAO,aAAa,KAAK,EAAE,OAAO,EAAE,0CAA0C,gBAAgB,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACpH;AACA,MAAI;AACF,UAAM,cAAc,UAAU,QAAQ,aAAa;AACnD,UAAM,+BAA+B;AAAA,MACnC;AAAA,MACA;AAAA,MACA,aAAa,KAAK;AAAA,MAClB,UAAU,KAAK;AAAA,MACf,gBAAgB,KAAK,SAAS;AAAA,MAC9B;AAAA,MACA,mBAAmB,MAAM,mCAAmC;AAAA,QAC1D;AAAA,QACA;AAAA,QACA,SAAS;AAAA,QACT,UAAU,KAAK;AAAA,MACjB,CAAC;AAAA,IACH,CAAC;AAAA,EACH,SAAS,KAAK;AACZ,QAAI,gBAAgB,GAAG,EAAG,QAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AACnF,UAAM;AAAA,EACR;AACA,SAAO;AACT;AAEA,eAAsB,IAAI,KAAc;AACtC,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM,OAAO,CAAC,KAAK,SAAU,QAAO,MAAM,aAAa;AAE5D,QAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAC3B,QAAM,SAAS,4BAA4B,UAAU,EAAE,QAAQ,IAAI,aAAa,IAAI,QAAQ,KAAK,OAAU,CAAC;AAC5G,MAAI,CAAC,OAAO,QAAS,QAAO,oCAAoC,OAAO,KAAK;AAE5E,QAAM,YAAY,MAAM,uBAAuB;AAC/C,MAAI;AACF,UAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,UAAM,SAAS,MAAM,oBAAoB,WAAW,IAAI,EAAE,GAAG,MAAM,KAAK,KAAK,KAAK,UAAU,KAAK,SAAS,GAAG,KAAK,OAAO,KAAK,MAAM;AACpI,QAAI,OAAQ,QAAO;AACnB,UAAM,UAAU,qCAAqC,SAAS;AAC9D,UAAM,QAAqC,EAAE,UAAU,KAAK,UAAU,QAAQ,OAAO,KAAK,OAAO;AACjG,UAAM,OAAO,MAAM,QAAQ,YAAY,KAAK;AAC5C,UAAM,QAAQ,KAAK,IAAI,CAAC,SAAS;AAAA,MAC/B,oBAAoB,IAAI;AAAA,MACxB,SAAS,IAAI;AAAA,MACb,SAAS,IAAI;AAAA,IACf,EAAE;AACF,WAAO,aAAa,KAAK,EAAE,MAAM,CAAC;AAAA,EACpC,UAAE;AACA,UAAM,aAAa;AACnB,QAAI,OAAO,WAAW,YAAY,WAAY,OAAM,WAAW,QAAQ;AAAA,EACzE;AACF;AAEA,eAAsB,IAAI,KAAc;AACtC,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM,OAAO,CAAC,KAAK,SAAU,QAAO,MAAM,aAAa;AAE5D,QAAM,SAAS,6BAA6B,UAAU,MAAM,aAAa,KAAK,CAAC,CAAC,CAAC;AACjF,MAAI,CAAC,OAAO,QAAS,QAAO,oCAAoC,OAAO,KAAK;AAE5E,QAAM,YAAY,MAAM,uBAAuB;AAC/C,MAAI;AACF,UAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,UAAM,SAAS,MAAM,oBAAoB,WAAW,IAAI,EAAE,GAAG,MAAM,KAAK,KAAK,KAAK,UAAU,KAAK,SAAS,GAAG,KAAK,OAAO,KAAK,MAAM;AACpI,QAAI,OAAQ,QAAO;AACnB,UAAM,UAAU,qCAAqC,SAAS;AAC9D,UAAM,QAAqC,EAAE,UAAU,KAAK,UAAU,QAAQ,OAAO,KAAK,OAAO;AACjG,UAAM,UAAU,MAAM;AAAA,MACpB;AAAA,MACA,EAAE,UAAU,KAAK,UAAU,gBAAgB,KAAK,SAAS,MAAM,QAAQ,KAAK,IAAI;AAAA,MAChF;AAAA,MACA;AAAA,QACE,cAAc;AAAA,QACd,YAAY,OAAO,KAAK;AAAA,QACxB,WAAW;AAAA,QACX,SAAS,OAAO;AAAA,MAClB;AAAA,MACA,MACE,QAAQ;AAAA,QACN;AAAA,QACA,OAAO,KAAK,YAAY,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,oBAAoB,SAAS,EAAE,SAAS,SAAS,EAAE,QAAQ,EAAE;AAAA,MAC/G;AAAA,IACJ;AACA,QAAI,CAAC,QAAQ,GAAI,QAAO,QAAQ;AAGhC,QAAI,QAAQ,SAAS,GAAG;AACtB,YAAM,sBAAsB,0BAA0B;AAAA,QACpD,UAAU,KAAK;AAAA,QACf,gBAAgB,KAAK,SAAS;AAAA,QAC9B,QAAQ,OAAO,KAAK;AAAA,MACtB,CAAC;AAAA,IACH;AAEA,WAAO,aAAa,KAAK,EAAE,IAAI,KAAK,CAAC;AAAA,EACvC,UAAE;AACA,UAAM,aAAa;AACnB,QAAI,OAAO,WAAW,YAAY,WAAY,OAAM,WAAW,QAAQ;AAAA,EACzE;AACF;AAEO,MAAM,UAAU;AAAA,EACrB,KAAK;AAAA,IACH,SAAS;AAAA,IACT,aAAa;AAAA,IACb,MAAM,CAAC,eAAe;AAAA,IACtB,YAAY,CAAC,EAAE,MAAM,UAAU,IAAI,SAAS,UAAU,MAAM,QAAQ,EAAE,MAAM,UAAU,QAAQ,OAAO,EAAE,CAAC;AAAA,IACxG,WAAW;AAAA,MACT,KAAK;AAAA,QACH,aAAa;AAAA,QACb,SAAS,EAAE,oBAAoB,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,gCAAgC,EAAE,CAAC,EAAE,EAAE;AAAA,MAC5G;AAAA,MACA,KAAK,EAAE,aAAa,gBAAgB,SAAS,EAAE,oBAAoB,EAAE,QAAQ,oBAAoB,EAAE,EAAE;AAAA,MACrG,KAAK,EAAE,aAAa,kBAAkB,SAAS,EAAE,oBAAoB,EAAE,QAAQ,oBAAoB,EAAE,EAAE;AAAA,IACzG;AAAA,EACF;AAAA,EACA,KAAK;AAAA,IACH,SAAS;AAAA,IACT,aAAa;AAAA,IACb,MAAM,CAAC,eAAe;AAAA,IACtB,aAAa,EAAE,UAAU,MAAM,SAAS,EAAE,oBAAoB,EAAE,QAAQ,6BAA6B,EAAE,EAAE;AAAA,IACzG,WAAW;AAAA,MACT,KAAK,EAAE,aAAa,uBAAuB,SAAS,EAAE,oBAAoB,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,EAAE,EAAE,EAAE;AAAA,MACtH,KAAK,EAAE,aAAa,wBAAwB,SAAS,EAAE,oBAAoB,EAAE,QAAQ,oBAAoB,EAAE,EAAE;AAAA,MAC7G,KAAK,EAAE,aAAa,gBAAgB,SAAS,EAAE,oBAAoB,EAAE,QAAQ,oBAAoB,EAAE,EAAE;AAAA,MACrG,KAAK,EAAE,aAAa,kBAAkB,SAAS,EAAE,oBAAoB,EAAE,QAAQ,oBAAoB,EAAE,EAAE;AAAA,IACzG;AAAA,EACF;AACF;",
+  "names": []
+}

package/dist/modules/notifications/api/channels/route.js

@@ -0,0 +1,54 @@
+import { NextResponse } from "next/server";
+import { z } from "zod";
+import { getAuthFromRequest } from "@open-mercato/shared/lib/auth/server";
+import { resolveTranslations } from "@open-mercato/shared/lib/i18n/server";
+import { getNotificationChannels } from "../../lib/notification-channel-registry.js";
+import { errorResponseSchema } from "../openapi.js";
+const metadata = {
+  GET: { requireAuth: true, requireFeatures: ["notifications.view"] }
+};
+const channelItemSchema = z.object({
+  id: z.string(),
+  labelKey: z.string(),
+  descriptionKey: z.string().nullable()
+});
+async function GET(req) {
+  const { t } = await resolveTranslations();
+  const auth = await getAuthFromRequest(req);
+  if (!auth?.sub || !auth.tenantId) {
+    return NextResponse.json({ error: t("api.errors.unauthorized", "Unauthorized") }, { status: 401 });
+  }
+  const items = getNotificationChannels().map((channel) => ({
+    id: channel.id,
+    labelKey: channel.labelKey,
+    descriptionKey: channel.descriptionKey ?? null
+  }));
+  return NextResponse.json({ items });
+}
+const openApi = {
+  GET: {
+    summary: "List notification delivery channels",
+    description: "Returns the registered delivery channel catalogue (in-app, email, push, \u2026) so a preferences screen can render one column per channel without a hardcoded list.",
+    tags: ["Notifications"],
+    responses: {
+      200: {
+        description: "Notification channel catalogue",
+        content: {
+          "application/json": {
+            schema: z.object({ items: z.array(channelItemSchema) })
+          }
+        }
+      },
+      401: {
+        description: "Unauthorized",
+        content: { "application/json": { schema: errorResponseSchema } }
+      }
+    }
+  }
+};
+export {
+  GET,
+  metadata,
+  openApi
+};
+//# sourceMappingURL=route.js.map

package/dist/modules/notifications/api/channels/route.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../src/modules/notifications/api/channels/route.ts"],
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { getNotificationChannels } from '../../lib/notification-channel-registry'\nimport { errorResponseSchema } from '../openapi'\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['notifications.view'] },\n}\n\nconst channelItemSchema = z.object({\n  id: z.string(),\n  labelKey: z.string(),\n  descriptionKey: z.string().nullable(),\n})\n\nexport async function GET(req: Request) {\n  const { t } = await resolveTranslations()\n  const auth = await getAuthFromRequest(req)\n  if (!auth?.sub || !auth.tenantId) {\n    return NextResponse.json({ error: t('api.errors.unauthorized', 'Unauthorized') }, { status: 401 })\n  }\n\n  const items = getNotificationChannels().map((channel) => ({\n    id: channel.id,\n    labelKey: channel.labelKey,\n    descriptionKey: channel.descriptionKey ?? null,\n  }))\n  return NextResponse.json({ items })\n}\n\nexport const openApi = {\n  GET: {\n    summary: 'List notification delivery channels',\n    description:\n      'Returns the registered delivery channel catalogue (in-app, email, push, \u2026) so a preferences screen can render one column per channel without a hardcoded list.',\n    tags: ['Notifications'],\n    responses: {\n      200: {\n        description: 'Notification channel catalogue',\n        content: {\n          'application/json': {\n            schema: z.object({ items: z.array(channelItemSchema) }),\n          },\n        },\n      },\n      401: {\n        description: 'Unauthorized',\n        content: { 'application/json': { schema: errorResponseSchema } },\n      },\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAClB,SAAS,0BAA0B;AACnC,SAAS,2BAA2B;AACpC,SAAS,+BAA+B;AACxC,SAAS,2BAA2B;AAE7B,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,oBAAoB,EAAE;AACpE;AAEA,MAAM,oBAAoB,EAAE,OAAO;AAAA,EACjC,IAAI,EAAE,OAAO;AAAA,EACb,UAAU,EAAE,OAAO;AAAA,EACnB,gBAAgB,EAAE,OAAO,EAAE,SAAS;AACtC,CAAC;AAED,eAAsB,IAAI,KAAc;AACtC,QAAM,EAAE,EAAE,IAAI,MAAM,oBAAoB;AACxC,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM,OAAO,CAAC,KAAK,UAAU;AAChC,WAAO,aAAa,KAAK,EAAE,OAAO,EAAE,2BAA2B,cAAc,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACnG;AAEA,QAAM,QAAQ,wBAAwB,EAAE,IAAI,CAAC,aAAa;AAAA,IACxD,IAAI,QAAQ;AAAA,IACZ,UAAU,QAAQ;AAAA,IAClB,gBAAgB,QAAQ,kBAAkB;AAAA,EAC5C,EAAE;AACF,SAAO,aAAa,KAAK,EAAE,MAAM,CAAC;AACpC;AAEO,MAAM,UAAU;AAAA,EACrB,KAAK;AAAA,IACH,SAAS;AAAA,IACT,aACE;AAAA,IACF,MAAM,CAAC,eAAe;AAAA,IACtB,WAAW;AAAA,MACT,KAAK;AAAA,QACH,aAAa;AAAA,QACb,SAAS;AAAA,UACP,oBAAoB;AAAA,YAClB,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,iBAAiB,EAAE,CAAC;AAAA,UACxD;AAAA,QACF;AAAA,MACF;AAAA,MACA,KAAK;AAAA,QACH,aAAa;AAAA,QACb,SAAS,EAAE,oBAAoB,EAAE,QAAQ,oBAAoB,EAAE;AAAA,MACjE;AAAA,IACF;AAAA,EACF;AACF;",
+  "names": []
+}

package/dist/modules/notifications/api/preferences/route.js

@@ -0,0 +1,126 @@
+import { NextResponse } from "next/server";
+import { z } from "zod";
+import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
+import { getAuthFromRequest } from "@open-mercato/shared/lib/auth/server";
+import { resolveTranslations } from "@open-mercato/shared/lib/i18n/server";
+import { readJsonSafe } from "@open-mercato/shared/lib/http/readJsonSafe";
+import { resolveNotificationPreferenceService } from "../../lib/notificationPreferenceService.js";
+import {
+  runGuardedNotificationWrite,
+  notificationValidationErrorResponse,
+  NOTIFICATION_PREFERENCE_RESOURCE_KIND
+} from "../../lib/routeHelpers.js";
+import { PREFERENCE_UPDATED_EVENT, emitNotificationEvent } from "../../events.js";
+import { updatePreferencesSchema, notificationPreferenceItemSchema } from "../../data/validators.js";
+import { errorResponseSchema } from "../openapi.js";
+const metadata = {
+  GET: { requireAuth: true, requireFeatures: ["notifications.manage_preferences"] },
+  PUT: { requireAuth: true, requireFeatures: ["notifications.manage_preferences"] }
+};
+const unauthorized = async () => {
+  const { t } = await resolveTranslations();
+  return NextResponse.json({ error: t("api.errors.unauthorized", "Unauthorized") }, { status: 401 });
+};
+async function GET(req) {
+  const auth = await getAuthFromRequest(req);
+  if (!auth?.sub || !auth.tenantId) return await unauthorized();
+  const container = await createRequestContainer();
+  try {
+    const service = resolveNotificationPreferenceService(container);
+    const scope = { tenantId: auth.tenantId, userId: auth.sub };
+    const rows = await service.listForUser(scope);
+    const items = rows.map((row) => ({
+      notificationTypeId: row.notificationTypeId,
+      channel: row.channel,
+      enabled: row.enabled
+    }));
+    return NextResponse.json({ items });
+  } finally {
+    const disposable = container;
+    if (typeof disposable.dispose === "function") await disposable.dispose();
+  }
+}
+async function PUT(req) {
+  const auth = await getAuthFromRequest(req);
+  if (!auth?.sub || !auth.tenantId) return await unauthorized();
+  const parsed = updatePreferencesSchema.safeParse(await readJsonSafe(req, {}));
+  if (!parsed.success) return notificationValidationErrorResponse(parsed.error);
+  const container = await createRequestContainer();
+  try {
+    const service = resolveNotificationPreferenceService(container);
+    const scope = { tenantId: auth.tenantId, userId: auth.sub };
+    const guarded = await runGuardedNotificationWrite(
+      container,
+      { tenantId: auth.tenantId, organizationId: auth.orgId ?? null, userId: auth.sub },
+      req,
+      {
+        resourceKind: NOTIFICATION_PREFERENCE_RESOURCE_KIND,
+        resourceId: auth.sub,
+        operation: "update",
+        payload: parsed.data
+      },
+      () => service.setPreferences(
+        scope,
+        parsed.data.preferences.map((p) => ({
+          typeId: p.notificationTypeId,
+          channel: p.channel,
+          enabled: p.enabled
+        }))
+      )
+    );
+    if (!guarded.ok) return guarded.response;
+    if (guarded.result > 0) {
+      await emitNotificationEvent(PREFERENCE_UPDATED_EVENT, {
+        tenantId: auth.tenantId,
+        organizationId: auth.orgId ?? null,
+        userId: auth.sub
+      });
+    }
+    return NextResponse.json({ ok: true });
+  } finally {
+    const disposable = container;
+    if (typeof disposable.dispose === "function") await disposable.dispose();
+  }
+}
+const openApi = {
+  GET: {
+    summary: "Get notification preferences",
+    description: "Returns the current user's stored channel preferences (absent rows default to enabled).",
+    tags: ["Notifications"],
+    responses: {
+      200: {
+        description: "Stored preferences",
+        content: {
+          "application/json": {
+            schema: z.object({ items: z.array(notificationPreferenceItemSchema) })
+          }
+        }
+      },
+      401: { description: "Unauthorized", content: { "application/json": { schema: errorResponseSchema } } }
+    }
+  },
+  PUT: {
+    summary: "Update notification preferences",
+    description: "Bulk-updates the current user's channel preferences.",
+    tags: ["Notifications"],
+    requestBody: {
+      required: true,
+      content: { "application/json": { schema: updatePreferencesSchema } }
+    },
+    responses: {
+      200: {
+        description: "Preferences updated",
+        content: { "application/json": { schema: z.object({ ok: z.boolean() }) } }
+      },
+      400: { description: "Invalid request body", content: { "application/json": { schema: errorResponseSchema } } },
+      401: { description: "Unauthorized", content: { "application/json": { schema: errorResponseSchema } } }
+    }
+  }
+};
+export {
+  GET,
+  PUT,
+  metadata,
+  openApi
+};
+//# sourceMappingURL=route.js.map

package/dist/modules/notifications/api/preferences/route.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../src/modules/notifications/api/preferences/route.ts"],
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { readJsonSafe } from '@open-mercato/shared/lib/http/readJsonSafe'\nimport { resolveNotificationPreferenceService, type NotificationPreferenceScope } from '../../lib/notificationPreferenceService'\nimport {\n  runGuardedNotificationWrite,\n  notificationValidationErrorResponse,\n  NOTIFICATION_PREFERENCE_RESOURCE_KIND,\n} from '../../lib/routeHelpers'\nimport { PREFERENCE_UPDATED_EVENT, emitNotificationEvent } from '../../events'\nimport { updatePreferencesSchema, notificationPreferenceItemSchema } from '../../data/validators'\nimport { errorResponseSchema } from '../openapi'\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['notifications.manage_preferences'] },\n  PUT: { requireAuth: true, requireFeatures: ['notifications.manage_preferences'] },\n}\n\nconst unauthorized = async () => {\n  const { t } = await resolveTranslations()\n  return NextResponse.json({ error: t('api.errors.unauthorized', 'Unauthorized') }, { status: 401 })\n}\n\nexport async function GET(req: Request) {\n  const auth = await getAuthFromRequest(req)\n  if (!auth?.sub || !auth.tenantId) return await unauthorized()\n\n  const container = await createRequestContainer()\n  try {\n    const service = resolveNotificationPreferenceService(container)\n    const scope: NotificationPreferenceScope = { tenantId: auth.tenantId, userId: auth.sub }\n    const rows = await service.listForUser(scope)\n    const items = rows.map((row) => ({\n      notificationTypeId: row.notificationTypeId,\n      channel: row.channel,\n      enabled: row.enabled,\n    }))\n    return NextResponse.json({ items })\n  } finally {\n    const disposable = container as unknown as { dispose?: () => Promise<void> }\n    if (typeof disposable.dispose === 'function') await disposable.dispose()\n  }\n}\n\nexport async function PUT(req: Request) {\n  const auth = await getAuthFromRequest(req)\n  if (!auth?.sub || !auth.tenantId) return await unauthorized()\n\n  const parsed = updatePreferencesSchema.safeParse(await readJsonSafe(req, {}))\n  if (!parsed.success) return notificationValidationErrorResponse(parsed.error)\n\n  const container = await createRequestContainer()\n  try {\n    const service = resolveNotificationPreferenceService(container)\n    const scope: NotificationPreferenceScope = { tenantId: auth.tenantId, userId: auth.sub }\n    const guarded = await runGuardedNotificationWrite(\n      container,\n      { tenantId: auth.tenantId, organizationId: auth.orgId ?? null, userId: auth.sub },\n      req,\n      {\n        resourceKind: NOTIFICATION_PREFERENCE_RESOURCE_KIND,\n        resourceId: auth.sub,\n        operation: 'update',\n        payload: parsed.data as Record<string, unknown>,\n      },\n      () =>\n        service.setPreferences(\n          scope,\n          parsed.data.preferences.map((p) => ({\n            typeId: p.notificationTypeId,\n            channel: p.channel,\n            enabled: p.enabled,\n          })),\n        ),\n    )\n    if (!guarded.ok) return guarded.response\n\n    // Skip the event on no-op writes (nothing actually changed).\n    if (guarded.result > 0) {\n      await emitNotificationEvent(PREFERENCE_UPDATED_EVENT, {\n        tenantId: auth.tenantId,\n        organizationId: auth.orgId ?? null,\n        userId: auth.sub,\n      })\n    }\n\n    return NextResponse.json({ ok: true })\n  } finally {\n    const disposable = container as unknown as { dispose?: () => Promise<void> }\n    if (typeof disposable.dispose === 'function') await disposable.dispose()\n  }\n}\n\nexport const openApi = {\n  GET: {\n    summary: 'Get notification preferences',\n    description: \"Returns the current user's stored channel preferences (absent rows default to enabled).\",\n    tags: ['Notifications'],\n    responses: {\n      200: {\n        description: 'Stored preferences',\n        content: {\n          'application/json': {\n            schema: z.object({ items: z.array(notificationPreferenceItemSchema) }),\n          },\n        },\n      },\n      401: { description: 'Unauthorized', content: { 'application/json': { schema: errorResponseSchema } } },\n    },\n  },\n  PUT: {\n    summary: 'Update notification preferences',\n    description: \"Bulk-updates the current user's channel preferences.\",\n    tags: ['Notifications'],\n    requestBody: {\n      required: true,\n      content: { 'application/json': { schema: updatePreferencesSchema } },\n    },\n    responses: {\n      200: {\n        description: 'Preferences updated',\n        content: { 'application/json': { schema: z.object({ ok: z.boolean() }) } },\n      },\n      400: { description: 'Invalid request body', content: { 'application/json': { schema: errorResponseSchema } } },\n      401: { description: 'Unauthorized', content: { 'application/json': { schema: errorResponseSchema } } },\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAClB,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,2BAA2B;AACpC,SAAS,oBAAoB;AAC7B,SAAS,4CAA8E;AACvF;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,0BAA0B,6BAA6B;AAChE,SAAS,yBAAyB,wCAAwC;AAC1E,SAAS,2BAA2B;AAE7B,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,kCAAkC,EAAE;AAAA,EAChF,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,kCAAkC,EAAE;AAClF;AAEA,MAAM,eAAe,YAAY;AAC/B,QAAM,EAAE,EAAE,IAAI,MAAM,oBAAoB;AACxC,SAAO,aAAa,KAAK,EAAE,OAAO,EAAE,2BAA2B,cAAc,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AACnG;AAEA,eAAsB,IAAI,KAAc;AACtC,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM,OAAO,CAAC,KAAK,SAAU,QAAO,MAAM,aAAa;AAE5D,QAAM,YAAY,MAAM,uBAAuB;AAC/C,MAAI;AACF,UAAM,UAAU,qCAAqC,SAAS;AAC9D,UAAM,QAAqC,EAAE,UAAU,KAAK,UAAU,QAAQ,KAAK,IAAI;AACvF,UAAM,OAAO,MAAM,QAAQ,YAAY,KAAK;AAC5C,UAAM,QAAQ,KAAK,IAAI,CAAC,SAAS;AAAA,MAC/B,oBAAoB,IAAI;AAAA,MACxB,SAAS,IAAI;AAAA,MACb,SAAS,IAAI;AAAA,IACf,EAAE;AACF,WAAO,aAAa,KAAK,EAAE,MAAM,CAAC;AAAA,EACpC,UAAE;AACA,UAAM,aAAa;AACnB,QAAI,OAAO,WAAW,YAAY,WAAY,OAAM,WAAW,QAAQ;AAAA,EACzE;AACF;AAEA,eAAsB,IAAI,KAAc;AACtC,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM,OAAO,CAAC,KAAK,SAAU,QAAO,MAAM,aAAa;AAE5D,QAAM,SAAS,wBAAwB,UAAU,MAAM,aAAa,KAAK,CAAC,CAAC,CAAC;AAC5E,MAAI,CAAC,OAAO,QAAS,QAAO,oCAAoC,OAAO,KAAK;AAE5E,QAAM,YAAY,MAAM,uBAAuB;AAC/C,MAAI;AACF,UAAM,UAAU,qCAAqC,SAAS;AAC9D,UAAM,QAAqC,EAAE,UAAU,KAAK,UAAU,QAAQ,KAAK,IAAI;AACvF,UAAM,UAAU,MAAM;AAAA,MACpB;AAAA,MACA,EAAE,UAAU,KAAK,UAAU,gBAAgB,KAAK,SAAS,MAAM,QAAQ,KAAK,IAAI;AAAA,MAChF;AAAA,MACA;AAAA,QACE,cAAc;AAAA,QACd,YAAY,KAAK;AAAA,QACjB,WAAW;AAAA,QACX,SAAS,OAAO;AAAA,MAClB;AAAA,MACA,MACE,QAAQ;AAAA,QACN;AAAA,QACA,OAAO,KAAK,YAAY,IAAI,CAAC,OAAO;AAAA,UAClC,QAAQ,EAAE;AAAA,UACV,SAAS,EAAE;AAAA,UACX,SAAS,EAAE;AAAA,QACb,EAAE;AAAA,MACJ;AAAA,IACJ;AACA,QAAI,CAAC,QAAQ,GAAI,QAAO,QAAQ;AAGhC,QAAI,QAAQ,SAAS,GAAG;AACtB,YAAM,sBAAsB,0BAA0B;AAAA,QACpD,UAAU,KAAK;AAAA,QACf,gBAAgB,KAAK,SAAS;AAAA,QAC9B,QAAQ,KAAK;AAAA,MACf,CAAC;AAAA,IACH;AAEA,WAAO,aAAa,KAAK,EAAE,IAAI,KAAK,CAAC;AAAA,EACvC,UAAE;AACA,UAAM,aAAa;AACnB,QAAI,OAAO,WAAW,YAAY,WAAY,OAAM,WAAW,QAAQ;AAAA,EACzE;AACF;AAEO,MAAM,UAAU;AAAA,EACrB,KAAK;AAAA,IACH,SAAS;AAAA,IACT,aAAa;AAAA,IACb,MAAM,CAAC,eAAe;AAAA,IACtB,WAAW;AAAA,MACT,KAAK;AAAA,QACH,aAAa;AAAA,QACb,SAAS;AAAA,UACP,oBAAoB;AAAA,YAClB,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,gCAAgC,EAAE,CAAC;AAAA,UACvE;AAAA,QACF;AAAA,MACF;AAAA,MACA,KAAK,EAAE,aAAa,gBAAgB,SAAS,EAAE,oBAAoB,EAAE,QAAQ,oBAAoB,EAAE,EAAE;AAAA,IACvG;AAAA,EACF;AAAA,EACA,KAAK;AAAA,IACH,SAAS;AAAA,IACT,aAAa;AAAA,IACb,MAAM,CAAC,eAAe;AAAA,IACtB,aAAa;AAAA,MACX,UAAU;AAAA,MACV,SAAS,EAAE,oBAAoB,EAAE,QAAQ,wBAAwB,EAAE;AAAA,IACrE;AAAA,IACA,WAAW;AAAA,MACT,KAAK;AAAA,QACH,aAAa;AAAA,QACb,SAAS,EAAE,oBAAoB,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,EAAE,EAAE;AAAA,MAC3E;AAAA,MACA,KAAK,EAAE,aAAa,wBAAwB,SAAS,EAAE,oBAAoB,EAAE,QAAQ,oBAAoB,EAAE,EAAE;AAAA,MAC7G,KAAK,EAAE,aAAa,gBAAgB,SAAS,EAAE,oBAAoB,EAAE,QAAQ,oBAAoB,EAAE,EAAE;AAAA,IACvG;AAAA,EACF;AACF;",
+  "names": []
+}

package/dist/modules/notifications/api/route.js

@@ -10,6 +10,7 @@ import {
 import { Notification } from "../data/entities.js";
 import { listNotificationsSchema, createNotificationSchema } from "../data/validators.js";
 import { toNotificationDto } from "../lib/notificationMapper.js";
+import { inAppVisibleFilter } from "../lib/notificationVisibility.js";
 import {
   buildNotificationReadScopeWhere,
   getNotificationReadScopeTagOrganizationIds
@@ -89,7 +90,13 @@ async function GET(req) {
   const filters = {
     recipientUserId: userId,
     tenantId: scope.tenantId,
-    ...buildNotificationReadScopeWhere(scope)
+    // Read scope AND in-app visibility: both fragments carry their own `$or`, so they must be
+    // AND-composed instead of spread (a spread would silently drop one of them).
+    // Hidden rows are those not delivered to the in-app channel (push-only / opted-out); they remain as records.
+    $and: [
+      buildNotificationReadScopeWhere(scope),
+      inAppVisibleFilter()
+    ]
   };
   if (input.status) {
     filters.status = Array.isArray(input.status) ? { $in: input.status } : input.status;

package/dist/modules/notifications/api/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/notifications/api/route.ts"],
-  "sourcesContent": ["import { createHash } from 'node:crypto'\nimport { z } from 'zod'\nimport type { EntityManager } from '@mikro-orm/core'\nimport { runWithCacheTenant } from '@open-mercato/cache'\nimport {\n  buildCollectionTags,\n  debugCrudCache,\n  isCrudCacheEnabled,\n  resolveCrudCache,\n} from '@open-mercato/shared/lib/crud/cache'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi/types'\nimport { Notification } from '../data/entities'\nimport { listNotificationsSchema, createNotificationSchema } from '../data/validators'\nimport { toNotificationDto } from '../lib/notificationMapper'\nimport {\n  buildNotificationReadScopeWhere,\n  getNotificationReadScopeTagOrganizationIds,\n} from '../lib/notificationScope'\nimport {\n  NOTIFICATION_RESOURCE_KIND,\n  notificationCrudErrorResponse,\n  notificationValidationErrorResponse,\n  resolveGuardedNotificationContext,\n  resolveNotificationContext,\n  runGuardedNotificationWrite,\n  TENANT_SCOPE_REQUIRED_ERROR_CODE,\n} from '../lib/routeHelpers'\nimport {\n  buildNotificationsCrudOpenApi,\n  createPagedListResponseSchema,\n  notificationItemSchema,\n  scopeErrorResponseSchema,\n} from './openapi'\n\nexport const metadata = {\n  GET: { requireAuth: true },\n  POST: { requireAuth: true, requireFeatures: ['notifications.create'] },\n}\n\nconst NOTIFICATIONS_LIST_TTL_MS = 10_000\n// v2: the key gained the selected-organization scope (#4840). Bumping the version\n// retires v1 entries, which were shared across organizations for the same user.\nconst NOTIFICATIONS_LIST_CACHE_VERSION = 2\nconst NOTIFICATIONS_LIST_RESOURCE = 'notifications.notification'\n\ntype NotificationsListPayload = {\n  items: ReturnType<typeof toNotificationDto>[]\n  total: number\n  page: number\n  pageSize: number\n  totalPages: number\n}\n\nexport function buildNotificationsListCacheKey(\n  userId: string,\n  organizationScope: { organizationId: string | null; organizationIds: string[] },\n  input: z.infer<typeof listNotificationsSchema>,\n): string {\n  const normalizedIds = Array.from(new Set(\n    organizationScope.organizationIds.filter((value) => value.trim().length > 0),\n  )).sort((left, right) => left.localeCompare(right))\n  const scopeKey = normalizedIds.length === 0\n    ? 'no-access'\n    : `${organizationScope.organizationId ?? 'none'}:scope=${createHash('sha256')\n        .update(normalizedIds.join('\\0'))\n        .digest('hex')\n        .slice(0, 16)}`\n  const filterSignature = JSON.stringify({\n    status: Array.isArray(input.status)\n      ? [...input.status].sort((left, right) => left.localeCompare(right))\n      : input.status ?? null,\n    type: input.type ?? null,\n    severity: input.severity ?? null,\n    sourceEntityType: input.sourceEntityType ?? null,\n    sourceEntityId: input.sourceEntityId ?? null,\n    since: input.since ?? null,\n    page: input.page,\n    pageSize: input.pageSize,\n  })\n  return `notifications:list:v${NOTIFICATIONS_LIST_CACHE_VERSION}:u=${userId}:org=${scopeKey}:filters=${filterSignature}`\n}\n\nfunction isNotificationsListPayload(value: unknown): value is NotificationsListPayload {\n  if (!value || typeof value !== 'object') return false\n  const payload = value as Partial<NotificationsListPayload>\n  return (\n    Array.isArray(payload.items)\n    && typeof payload.total === 'number'\n    && typeof payload.page === 'number'\n    && typeof payload.pageSize === 'number'\n    && typeof payload.totalPages === 'number'\n  )\n}\n\nexport async function GET(req: Request) {\n  const resolved = await resolveGuardedNotificationContext(req)\n  if (!resolved.ok) return resolved.response\n  const { ctx, scope } = resolved\n  const em = ctx.container.resolve('em') as EntityManager\n\n  const url = new URL(req.url)\n  const queryParams = Object.fromEntries(url.searchParams.entries())\n  const input = listNotificationsSchema.parse(queryParams)\n  const userId = scope.userId\n  // Mirrors api/unread-count/route.ts: unrestricted and omitted legacy organization\n  // scopes cannot be safely tagged for invalidation, because organization-specific\n  // writes only invalidate their own collection tag. Leave those scopes uncached\n  // rather than serving a stale tenant-wide list until the TTL expires.\n  const cacheableOrganizationIds = Array.isArray(scope.organizationIds)\n    ? scope.organizationIds\n    : null\n  const cache = userId && cacheableOrganizationIds && isCrudCacheEnabled()\n    ? resolveCrudCache(ctx.container)\n    : null\n  const cacheKey = cache && userId && cacheableOrganizationIds\n    ? buildNotificationsListCacheKey(\n        userId,\n        { organizationId: scope.organizationId, organizationIds: cacheableOrganizationIds },\n        input,\n      )\n    : null\n\n  if (cache && cacheKey) {\n    try {\n      const cached = await runWithCacheTenant(scope.tenantId, () => cache.get(cacheKey))\n      if (isNotificationsListPayload(cached)) {\n        return Response.json(cached)\n      }\n    } catch (error) {\n      debugCrudCache('notifications-list-cache-read-failed', {\n        error: error instanceof Error ? error.message : String(error),\n      })\n    }\n  }\n\n  const filters: Record<string, unknown> = {\n    recipientUserId: userId,\n    tenantId: scope.tenantId,\n    ...buildNotificationReadScopeWhere(scope),\n  }\n\n  if (input.status) {\n    filters.status = Array.isArray(input.status) ? { $in: input.status } : input.status\n  } else {\n    filters.status = { $ne: 'dismissed' }\n  }\n  if (input.type) {\n    filters.type = input.type\n  }\n  if (input.severity) {\n    filters.severity = input.severity\n  }\n  if (input.sourceEntityType) {\n    filters.sourceEntityType = input.sourceEntityType\n  }\n  if (input.sourceEntityId) {\n    filters.sourceEntityId = input.sourceEntityId\n  }\n  if (input.since) {\n    filters.createdAt = { $gt: new Date(input.since) }\n  }\n\n  const [notifications, total] = await Promise.all([\n    em.find(Notification, filters, {\n      orderBy: { createdAt: 'desc' },\n      limit: input.pageSize,\n      offset: (input.page - 1) * input.pageSize,\n    }),\n    em.count(Notification, filters),\n  ])\n\n  const items = notifications.map(toNotificationDto)\n\n  const payload: NotificationsListPayload = {\n    items,\n    total,\n    page: input.page,\n    pageSize: input.pageSize,\n    totalPages: Math.ceil(total / input.pageSize),\n  }\n\n  if (cache && cacheKey) {\n    try {\n      await runWithCacheTenant(scope.tenantId, () =>\n        cache.set(cacheKey, payload, {\n          ttl: NOTIFICATIONS_LIST_TTL_MS,\n          tags: buildCollectionTags(\n            NOTIFICATIONS_LIST_RESOURCE,\n            scope.tenantId,\n            getNotificationReadScopeTagOrganizationIds(scope),\n          ),\n        }),\n      )\n    } catch (error) {\n      debugCrudCache('notifications-list-cache-write-failed', {\n        error: error instanceof Error ? error.message : String(error),\n      })\n    }\n  }\n\n  return Response.json(payload)\n}\n\nexport async function POST(req: Request) {\n  const { service, scope, ctx } = await resolveNotificationContext(req)\n\n  const body = await req.json().catch(() => ({}))\n  const parsed = createNotificationSchema.safeParse(body)\n  if (!parsed.success) {\n    return notificationValidationErrorResponse(parsed.error)\n  }\n\n  try {\n    const guarded = await runGuardedNotificationWrite(\n      ctx.container,\n      scope,\n      req,\n      {\n        resourceKind: NOTIFICATION_RESOURCE_KIND,\n        operation: 'create',\n        payload: parsed.data as Record<string, unknown>,\n      },\n      () => service.create(parsed.data, scope),\n    )\n    if (!guarded.ok) return guarded.response\n\n    return Response.json({ id: guarded.result.id }, { status: 201 })\n  } catch (error) {\n    const errorResponse = notificationCrudErrorResponse(error)\n    if (errorResponse) return errorResponse\n    throw error\n  }\n}\n\nconst notificationsCrudOpenApi = buildNotificationsCrudOpenApi({\n  resourceName: 'Notification',\n  querySchema: listNotificationsSchema,\n  listResponseSchema: createPagedListResponseSchema(notificationItemSchema),\n  create: {\n    schema: createNotificationSchema,\n    responseSchema: z.object({ id: z.string().uuid() }),\n    description: 'Creates a notification for a user.',\n  },\n})\n\nconst notificationsCrudGet = notificationsCrudOpenApi.methods?.GET ?? {}\n\n// The CRUD factory documents errors only for DELETE, and POST already gets an auto-generated 403\n// from its `requireFeatures` metadata. GET is authenticated-only, so its tenant-scope rejection has\n// to be declared here to reach the generated spec.\nexport const openApi: OpenApiRouteDoc = {\n  ...notificationsCrudOpenApi,\n  methods: {\n    ...notificationsCrudOpenApi.methods,\n    GET: {\n      ...notificationsCrudGet,\n      errors: [\n        ...(notificationsCrudGet.errors ?? []),\n        {\n          status: 403,\n          description: `Request could not be resolved to a tenant scope (code: ${TENANT_SCOPE_REQUIRED_ERROR_CODE})`,\n          schema: scopeErrorResponseSchema,\n        },\n      ],\n    },\n  },\n}\n"],
-  "mappings": "AAAA,SAAS,kBAAkB;AAC3B,SAAS,SAAS;AAElB,SAAS,0BAA0B;AACnC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEP,SAAS,oBAAoB;AAC7B,SAAS,yBAAyB,gCAAgC;AAClE,SAAS,yBAAyB;AAClC;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEA,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,KAAK;AAAA,EACzB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,sBAAsB,EAAE;AACvE;AAEA,MAAM,4BAA4B;AAGlC,MAAM,mCAAmC;AACzC,MAAM,8BAA8B;AAU7B,SAAS,+BACd,QACA,mBACA,OACQ;AACR,QAAM,gBAAgB,MAAM,KAAK,IAAI;AAAA,IACnC,kBAAkB,gBAAgB,OAAO,CAAC,UAAU,MAAM,KAAK,EAAE,SAAS,CAAC;AAAA,EAC7E,CAAC,EAAE,KAAK,CAAC,MAAM,UAAU,KAAK,cAAc,KAAK,CAAC;AAClD,QAAM,WAAW,cAAc,WAAW,IACtC,cACA,GAAG,kBAAkB,kBAAkB,MAAM,UAAU,WAAW,QAAQ,EACvE,OAAO,cAAc,KAAK,IAAI,CAAC,EAC/B,OAAO,KAAK,EACZ,MAAM,GAAG,EAAE,CAAC;AACnB,QAAM,kBAAkB,KAAK,UAAU;AAAA,IACrC,QAAQ,MAAM,QAAQ,MAAM,MAAM,IAC9B,CAAC,GAAG,MAAM,MAAM,EAAE,KAAK,CAAC,MAAM,UAAU,KAAK,cAAc,KAAK,CAAC,IACjE,MAAM,UAAU;AAAA,IACpB,MAAM,MAAM,QAAQ;AAAA,IACpB,UAAU,MAAM,YAAY;AAAA,IAC5B,kBAAkB,MAAM,oBAAoB;AAAA,IAC5C,gBAAgB,MAAM,kBAAkB;AAAA,IACxC,OAAO,MAAM,SAAS;AAAA,IACtB,MAAM,MAAM;AAAA,IACZ,UAAU,MAAM;AAAA,EAClB,CAAC;AACD,SAAO,uBAAuB,gCAAgC,MAAM,MAAM,QAAQ,QAAQ,YAAY,eAAe;AACvH;AAEA,SAAS,2BAA2B,OAAmD;AACrF,MAAI,CAAC,SAAS,OAAO,UAAU,SAAU,QAAO;AAChD,QAAM,UAAU;AAChB,SACE,MAAM,QAAQ,QAAQ,KAAK,KACxB,OAAO,QAAQ,UAAU,YACzB,OAAO,QAAQ,SAAS,YACxB,OAAO,QAAQ,aAAa,YAC5B,OAAO,QAAQ,eAAe;AAErC;AAEA,eAAsB,IAAI,KAAc;AACtC,QAAM,WAAW,MAAM,kCAAkC,GAAG;AAC5D,MAAI,CAAC,SAAS,GAAI,QAAO,SAAS;AAClC,QAAM,EAAE,KAAK,MAAM,IAAI;AACvB,QAAM,KAAK,IAAI,UAAU,QAAQ,IAAI;AAErC,QAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAC3B,QAAM,cAAc,OAAO,YAAY,IAAI,aAAa,QAAQ,CAAC;AACjE,QAAM,QAAQ,wBAAwB,MAAM,WAAW;AACvD,QAAM,SAAS,MAAM;AAKrB,QAAM,2BAA2B,MAAM,QAAQ,MAAM,eAAe,IAChE,MAAM,kBACN;AACJ,QAAM,QAAQ,UAAU,4BAA4B,mBAAmB,IACnE,iBAAiB,IAAI,SAAS,IAC9B;AACJ,QAAM,WAAW,SAAS,UAAU,2BAChC;AAAA,IACE;AAAA,IACA,EAAE,gBAAgB,MAAM,gBAAgB,iBAAiB,yBAAyB;AAAA,IAClF;AAAA,EACF,IACA;AAEJ,MAAI,SAAS,UAAU;AACrB,QAAI;AACF,YAAM,SAAS,MAAM,mBAAmB,MAAM,UAAU,MAAM,MAAM,IAAI,QAAQ,CAAC;AACjF,UAAI,2BAA2B,MAAM,GAAG;AACtC,eAAO,SAAS,KAAK,MAAM;AAAA,MAC7B;AAAA,IACF,SAAS,OAAO;AACd,qBAAe,wCAAwC;AAAA,QACrD,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AAAA,MAC9D,CAAC;AAAA,IACH;AAAA,EACF;AAEA,QAAM,UAAmC;AAAA,IACvC,iBAAiB;AAAA,IACjB,UAAU,MAAM;AAAA,IAChB,GAAG,gCAAgC,KAAK;AAAA,EAC1C;AAEA,MAAI,MAAM,QAAQ;AAChB,YAAQ,SAAS,MAAM,QAAQ,MAAM,MAAM,IAAI,EAAE,KAAK,MAAM,OAAO,IAAI,MAAM;AAAA,EAC/E,OAAO;AACL,YAAQ,SAAS,EAAE,KAAK,YAAY;AAAA,EACtC;AACA,MAAI,MAAM,MAAM;AACd,YAAQ,OAAO,MAAM;AAAA,EACvB;AACA,MAAI,MAAM,UAAU;AAClB,YAAQ,WAAW,MAAM;AAAA,EAC3B;AACA,MAAI,MAAM,kBAAkB;AAC1B,YAAQ,mBAAmB,MAAM;AAAA,EACnC;AACA,MAAI,MAAM,gBAAgB;AACxB,YAAQ,iBAAiB,MAAM;AAAA,EACjC;AACA,MAAI,MAAM,OAAO;AACf,YAAQ,YAAY,EAAE,KAAK,IAAI,KAAK,MAAM,KAAK,EAAE;AAAA,EACnD;AAEA,QAAM,CAAC,eAAe,KAAK,IAAI,MAAM,QAAQ,IAAI;AAAA,IAC/C,GAAG,KAAK,cAAc,SAAS;AAAA,MAC7B,SAAS,EAAE,WAAW,OAAO;AAAA,MAC7B,OAAO,MAAM;AAAA,MACb,SAAS,MAAM,OAAO,KAAK,MAAM;AAAA,IACnC,CAAC;AAAA,IACD,GAAG,MAAM,cAAc,OAAO;AAAA,EAChC,CAAC;AAED,QAAM,QAAQ,cAAc,IAAI,iBAAiB;AAEjD,QAAM,UAAoC;AAAA,IACxC;AAAA,IACA;AAAA,IACA,MAAM,MAAM;AAAA,IACZ,UAAU,MAAM;AAAA,IAChB,YAAY,KAAK,KAAK,QAAQ,MAAM,QAAQ;AAAA,EAC9C;AAEA,MAAI,SAAS,UAAU;AACrB,QAAI;AACF,YAAM;AAAA,QAAmB,MAAM;AAAA,QAAU,MACvC,MAAM,IAAI,UAAU,SAAS;AAAA,UAC3B,KAAK;AAAA,UACL,MAAM;AAAA,YACJ;AAAA,YACA,MAAM;AAAA,YACN,2CAA2C,KAAK;AAAA,UAClD;AAAA,QACF,CAAC;AAAA,MACH;AAAA,IACF,SAAS,OAAO;AACd,qBAAe,yCAAyC;AAAA,QACtD,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AAAA,MAC9D,CAAC;AAAA,IACH;AAAA,EACF;AAEA,SAAO,SAAS,KAAK,OAAO;AAC9B;AAEA,eAAsB,KAAK,KAAc;AACvC,QAAM,EAAE,SAAS,OAAO,IAAI,IAAI,MAAM,2BAA2B,GAAG;AAEpE,QAAM,OAAO,MAAM,IAAI,KAAK,EAAE,MAAM,OAAO,CAAC,EAAE;AAC9C,QAAM,SAAS,yBAAyB,UAAU,IAAI;AACtD,MAAI,CAAC,OAAO,SAAS;AACnB,WAAO,oCAAoC,OAAO,KAAK;AAAA,EACzD;AAEA,MAAI;AACF,UAAM,UAAU,MAAM;AAAA,MACpB,IAAI;AAAA,MACJ;AAAA,MACA;AAAA,MACA;AAAA,QACE,cAAc;AAAA,QACd,WAAW;AAAA,QACX,SAAS,OAAO;AAAA,MAClB;AAAA,MACA,MAAM,QAAQ,OAAO,OAAO,MAAM,KAAK;AAAA,IACzC;AACA,QAAI,CAAC,QAAQ,GAAI,QAAO,QAAQ;AAEhC,WAAO,SAAS,KAAK,EAAE,IAAI,QAAQ,OAAO,GAAG,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACjE,SAAS,OAAO;AACd,UAAM,gBAAgB,8BAA8B,KAAK;AACzD,QAAI,cAAe,QAAO;AAC1B,UAAM;AAAA,EACR;AACF;AAEA,MAAM,2BAA2B,8BAA8B;AAAA,EAC7D,cAAc;AAAA,EACd,aAAa;AAAA,EACb,oBAAoB,8BAA8B,sBAAsB;AAAA,EACxE,QAAQ;AAAA,IACN,QAAQ;AAAA,IACR,gBAAgB,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAAA,IAClD,aAAa;AAAA,EACf;AACF,CAAC;AAED,MAAM,uBAAuB,yBAAyB,SAAS,OAAO,CAAC;AAKhE,MAAM,UAA2B;AAAA,EACtC,GAAG;AAAA,EACH,SAAS;AAAA,IACP,GAAG,yBAAyB;AAAA,IAC5B,KAAK;AAAA,MACH,GAAG;AAAA,MACH,QAAQ;AAAA,QACN,GAAI,qBAAqB,UAAU,CAAC;AAAA,QACpC;AAAA,UACE,QAAQ;AAAA,UACR,aAAa,0DAA0D,gCAAgC;AAAA,UACvG,QAAQ;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;",
+  "sourcesContent": ["import { createHash } from 'node:crypto'\nimport { z } from 'zod'\nimport type { EntityManager } from '@mikro-orm/core'\nimport { runWithCacheTenant } from '@open-mercato/cache'\nimport {\n  buildCollectionTags,\n  debugCrudCache,\n  isCrudCacheEnabled,\n  resolveCrudCache,\n} from '@open-mercato/shared/lib/crud/cache'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi/types'\nimport { Notification } from '../data/entities'\nimport { listNotificationsSchema, createNotificationSchema } from '../data/validators'\nimport { toNotificationDto } from '../lib/notificationMapper'\nimport { inAppVisibleFilter } from '../lib/notificationVisibility'\nimport {\n  buildNotificationReadScopeWhere,\n  getNotificationReadScopeTagOrganizationIds,\n} from '../lib/notificationScope'\nimport {\n  NOTIFICATION_RESOURCE_KIND,\n  notificationCrudErrorResponse,\n  notificationValidationErrorResponse,\n  resolveGuardedNotificationContext,\n  resolveNotificationContext,\n  runGuardedNotificationWrite,\n  TENANT_SCOPE_REQUIRED_ERROR_CODE,\n} from '../lib/routeHelpers'\nimport {\n  buildNotificationsCrudOpenApi,\n  createPagedListResponseSchema,\n  notificationItemSchema,\n  scopeErrorResponseSchema,\n} from './openapi'\n\nexport const metadata = {\n  GET: { requireAuth: true },\n  POST: { requireAuth: true, requireFeatures: ['notifications.create'] },\n}\n\nconst NOTIFICATIONS_LIST_TTL_MS = 10_000\n// v2: the key gained the selected-organization scope (#4840). Bumping the version\n// retires v1 entries, which were shared across organizations for the same user.\nconst NOTIFICATIONS_LIST_CACHE_VERSION = 2\nconst NOTIFICATIONS_LIST_RESOURCE = 'notifications.notification'\n\ntype NotificationsListPayload = {\n  items: ReturnType<typeof toNotificationDto>[]\n  total: number\n  page: number\n  pageSize: number\n  totalPages: number\n}\n\nexport function buildNotificationsListCacheKey(\n  userId: string,\n  organizationScope: { organizationId: string | null; organizationIds: string[] },\n  input: z.infer<typeof listNotificationsSchema>,\n): string {\n  const normalizedIds = Array.from(new Set(\n    organizationScope.organizationIds.filter((value) => value.trim().length > 0),\n  )).sort((left, right) => left.localeCompare(right))\n  const scopeKey = normalizedIds.length === 0\n    ? 'no-access'\n    : `${organizationScope.organizationId ?? 'none'}:scope=${createHash('sha256')\n        .update(normalizedIds.join('\\0'))\n        .digest('hex')\n        .slice(0, 16)}`\n  const filterSignature = JSON.stringify({\n    status: Array.isArray(input.status)\n      ? [...input.status].sort((left, right) => left.localeCompare(right))\n      : input.status ?? null,\n    type: input.type ?? null,\n    severity: input.severity ?? null,\n    sourceEntityType: input.sourceEntityType ?? null,\n    sourceEntityId: input.sourceEntityId ?? null,\n    since: input.since ?? null,\n    page: input.page,\n    pageSize: input.pageSize,\n  })\n  return `notifications:list:v${NOTIFICATIONS_LIST_CACHE_VERSION}:u=${userId}:org=${scopeKey}:filters=${filterSignature}`\n}\n\nfunction isNotificationsListPayload(value: unknown): value is NotificationsListPayload {\n  if (!value || typeof value !== 'object') return false\n  const payload = value as Partial<NotificationsListPayload>\n  return (\n    Array.isArray(payload.items)\n    && typeof payload.total === 'number'\n    && typeof payload.page === 'number'\n    && typeof payload.pageSize === 'number'\n    && typeof payload.totalPages === 'number'\n  )\n}\n\nexport async function GET(req: Request) {\n  const resolved = await resolveGuardedNotificationContext(req)\n  if (!resolved.ok) return resolved.response\n  const { ctx, scope } = resolved\n  const em = ctx.container.resolve('em') as EntityManager\n\n  const url = new URL(req.url)\n  const queryParams = Object.fromEntries(url.searchParams.entries())\n  const input = listNotificationsSchema.parse(queryParams)\n  const userId = scope.userId\n  // Mirrors api/unread-count/route.ts: unrestricted and omitted legacy organization\n  // scopes cannot be safely tagged for invalidation, because organization-specific\n  // writes only invalidate their own collection tag. Leave those scopes uncached\n  // rather than serving a stale tenant-wide list until the TTL expires.\n  const cacheableOrganizationIds = Array.isArray(scope.organizationIds)\n    ? scope.organizationIds\n    : null\n  const cache = userId && cacheableOrganizationIds && isCrudCacheEnabled()\n    ? resolveCrudCache(ctx.container)\n    : null\n  const cacheKey = cache && userId && cacheableOrganizationIds\n    ? buildNotificationsListCacheKey(\n        userId,\n        { organizationId: scope.organizationId, organizationIds: cacheableOrganizationIds },\n        input,\n      )\n    : null\n\n  if (cache && cacheKey) {\n    try {\n      const cached = await runWithCacheTenant(scope.tenantId, () => cache.get(cacheKey))\n      if (isNotificationsListPayload(cached)) {\n        return Response.json(cached)\n      }\n    } catch (error) {\n      debugCrudCache('notifications-list-cache-read-failed', {\n        error: error instanceof Error ? error.message : String(error),\n      })\n    }\n  }\n\n  const filters: Record<string, unknown> = {\n    recipientUserId: userId,\n    tenantId: scope.tenantId,\n    // Read scope AND in-app visibility: both fragments carry their own `$or`, so they must be\n    // AND-composed instead of spread (a spread would silently drop one of them).\n    // Hidden rows are those not delivered to the in-app channel (push-only / opted-out); they remain as records.\n    $and: [\n      buildNotificationReadScopeWhere(scope),\n      inAppVisibleFilter(),\n    ],\n  }\n\n  if (input.status) {\n    filters.status = Array.isArray(input.status) ? { $in: input.status } : input.status\n  } else {\n    filters.status = { $ne: 'dismissed' }\n  }\n  if (input.type) {\n    filters.type = input.type\n  }\n  if (input.severity) {\n    filters.severity = input.severity\n  }\n  if (input.sourceEntityType) {\n    filters.sourceEntityType = input.sourceEntityType\n  }\n  if (input.sourceEntityId) {\n    filters.sourceEntityId = input.sourceEntityId\n  }\n  if (input.since) {\n    filters.createdAt = { $gt: new Date(input.since) }\n  }\n\n  const [notifications, total] = await Promise.all([\n    em.find(Notification, filters, {\n      orderBy: { createdAt: 'desc' },\n      limit: input.pageSize,\n      offset: (input.page - 1) * input.pageSize,\n    }),\n    em.count(Notification, filters),\n  ])\n\n  const items = notifications.map(toNotificationDto)\n\n  const payload: NotificationsListPayload = {\n    items,\n    total,\n    page: input.page,\n    pageSize: input.pageSize,\n    totalPages: Math.ceil(total / input.pageSize),\n  }\n\n  if (cache && cacheKey) {\n    try {\n      await runWithCacheTenant(scope.tenantId, () =>\n        cache.set(cacheKey, payload, {\n          ttl: NOTIFICATIONS_LIST_TTL_MS,\n          tags: buildCollectionTags(\n            NOTIFICATIONS_LIST_RESOURCE,\n            scope.tenantId,\n            getNotificationReadScopeTagOrganizationIds(scope),\n          ),\n        }),\n      )\n    } catch (error) {\n      debugCrudCache('notifications-list-cache-write-failed', {\n        error: error instanceof Error ? error.message : String(error),\n      })\n    }\n  }\n\n  return Response.json(payload)\n}\n\nexport async function POST(req: Request) {\n  const { service, scope, ctx } = await resolveNotificationContext(req)\n\n  const body = await req.json().catch(() => ({}))\n  const parsed = createNotificationSchema.safeParse(body)\n  if (!parsed.success) {\n    return notificationValidationErrorResponse(parsed.error)\n  }\n\n  try {\n    const guarded = await runGuardedNotificationWrite(\n      ctx.container,\n      scope,\n      req,\n      {\n        resourceKind: NOTIFICATION_RESOURCE_KIND,\n        operation: 'create',\n        payload: parsed.data as Record<string, unknown>,\n      },\n      () => service.create(parsed.data, scope),\n    )\n    if (!guarded.ok) return guarded.response\n\n    return Response.json({ id: guarded.result.id }, { status: 201 })\n  } catch (error) {\n    const errorResponse = notificationCrudErrorResponse(error)\n    if (errorResponse) return errorResponse\n    throw error\n  }\n}\n\nconst notificationsCrudOpenApi = buildNotificationsCrudOpenApi({\n  resourceName: 'Notification',\n  querySchema: listNotificationsSchema,\n  listResponseSchema: createPagedListResponseSchema(notificationItemSchema),\n  create: {\n    schema: createNotificationSchema,\n    responseSchema: z.object({ id: z.string().uuid() }),\n    description: 'Creates a notification for a user.',\n  },\n})\n\nconst notificationsCrudGet = notificationsCrudOpenApi.methods?.GET ?? {}\n\n// The CRUD factory documents errors only for DELETE, and POST already gets an auto-generated 403\n// from its `requireFeatures` metadata. GET is authenticated-only, so its tenant-scope rejection has\n// to be declared here to reach the generated spec.\nexport const openApi: OpenApiRouteDoc = {\n  ...notificationsCrudOpenApi,\n  methods: {\n    ...notificationsCrudOpenApi.methods,\n    GET: {\n      ...notificationsCrudGet,\n      errors: [\n        ...(notificationsCrudGet.errors ?? []),\n        {\n          status: 403,\n          description: `Request could not be resolved to a tenant scope (code: ${TENANT_SCOPE_REQUIRED_ERROR_CODE})`,\n          schema: scopeErrorResponseSchema,\n        },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,kBAAkB;AAC3B,SAAS,SAAS;AAElB,SAAS,0BAA0B;AACnC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEP,SAAS,oBAAoB;AAC7B,SAAS,yBAAyB,gCAAgC;AAClE,SAAS,yBAAyB;AAClC,SAAS,0BAA0B;AACnC;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEA,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,KAAK;AAAA,EACzB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,sBAAsB,EAAE;AACvE;AAEA,MAAM,4BAA4B;AAGlC,MAAM,mCAAmC;AACzC,MAAM,8BAA8B;AAU7B,SAAS,+BACd,QACA,mBACA,OACQ;AACR,QAAM,gBAAgB,MAAM,KAAK,IAAI;AAAA,IACnC,kBAAkB,gBAAgB,OAAO,CAAC,UAAU,MAAM,KAAK,EAAE,SAAS,CAAC;AAAA,EAC7E,CAAC,EAAE,KAAK,CAAC,MAAM,UAAU,KAAK,cAAc,KAAK,CAAC;AAClD,QAAM,WAAW,cAAc,WAAW,IACtC,cACA,GAAG,kBAAkB,kBAAkB,MAAM,UAAU,WAAW,QAAQ,EACvE,OAAO,cAAc,KAAK,IAAI,CAAC,EAC/B,OAAO,KAAK,EACZ,MAAM,GAAG,EAAE,CAAC;AACnB,QAAM,kBAAkB,KAAK,UAAU;AAAA,IACrC,QAAQ,MAAM,QAAQ,MAAM,MAAM,IAC9B,CAAC,GAAG,MAAM,MAAM,EAAE,KAAK,CAAC,MAAM,UAAU,KAAK,cAAc,KAAK,CAAC,IACjE,MAAM,UAAU;AAAA,IACpB,MAAM,MAAM,QAAQ;AAAA,IACpB,UAAU,MAAM,YAAY;AAAA,IAC5B,kBAAkB,MAAM,oBAAoB;AAAA,IAC5C,gBAAgB,MAAM,kBAAkB;AAAA,IACxC,OAAO,MAAM,SAAS;AAAA,IACtB,MAAM,MAAM;AAAA,IACZ,UAAU,MAAM;AAAA,EAClB,CAAC;AACD,SAAO,uBAAuB,gCAAgC,MAAM,MAAM,QAAQ,QAAQ,YAAY,eAAe;AACvH;AAEA,SAAS,2BAA2B,OAAmD;AACrF,MAAI,CAAC,SAAS,OAAO,UAAU,SAAU,QAAO;AAChD,QAAM,UAAU;AAChB,SACE,MAAM,QAAQ,QAAQ,KAAK,KACxB,OAAO,QAAQ,UAAU,YACzB,OAAO,QAAQ,SAAS,YACxB,OAAO,QAAQ,aAAa,YAC5B,OAAO,QAAQ,eAAe;AAErC;AAEA,eAAsB,IAAI,KAAc;AACtC,QAAM,WAAW,MAAM,kCAAkC,GAAG;AAC5D,MAAI,CAAC,SAAS,GAAI,QAAO,SAAS;AAClC,QAAM,EAAE,KAAK,MAAM,IAAI;AACvB,QAAM,KAAK,IAAI,UAAU,QAAQ,IAAI;AAErC,QAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAC3B,QAAM,cAAc,OAAO,YAAY,IAAI,aAAa,QAAQ,CAAC;AACjE,QAAM,QAAQ,wBAAwB,MAAM,WAAW;AACvD,QAAM,SAAS,MAAM;AAKrB,QAAM,2BAA2B,MAAM,QAAQ,MAAM,eAAe,IAChE,MAAM,kBACN;AACJ,QAAM,QAAQ,UAAU,4BAA4B,mBAAmB,IACnE,iBAAiB,IAAI,SAAS,IAC9B;AACJ,QAAM,WAAW,SAAS,UAAU,2BAChC;AAAA,IACE;AAAA,IACA,EAAE,gBAAgB,MAAM,gBAAgB,iBAAiB,yBAAyB;AAAA,IAClF;AAAA,EACF,IACA;AAEJ,MAAI,SAAS,UAAU;AACrB,QAAI;AACF,YAAM,SAAS,MAAM,mBAAmB,MAAM,UAAU,MAAM,MAAM,IAAI,QAAQ,CAAC;AACjF,UAAI,2BAA2B,MAAM,GAAG;AACtC,eAAO,SAAS,KAAK,MAAM;AAAA,MAC7B;AAAA,IACF,SAAS,OAAO;AACd,qBAAe,wCAAwC;AAAA,QACrD,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AAAA,MAC9D,CAAC;AAAA,IACH;AAAA,EACF;AAEA,QAAM,UAAmC;AAAA,IACvC,iBAAiB;AAAA,IACjB,UAAU,MAAM;AAAA;AAAA;AAAA;AAAA,IAIhB,MAAM;AAAA,MACJ,gCAAgC,KAAK;AAAA,MACrC,mBAAmB;AAAA,IACrB;AAAA,EACF;AAEA,MAAI,MAAM,QAAQ;AAChB,YAAQ,SAAS,MAAM,QAAQ,MAAM,MAAM,IAAI,EAAE,KAAK,MAAM,OAAO,IAAI,MAAM;AAAA,EAC/E,OAAO;AACL,YAAQ,SAAS,EAAE,KAAK,YAAY;AAAA,EACtC;AACA,MAAI,MAAM,MAAM;AACd,YAAQ,OAAO,MAAM;AAAA,EACvB;AACA,MAAI,MAAM,UAAU;AAClB,YAAQ,WAAW,MAAM;AAAA,EAC3B;AACA,MAAI,MAAM,kBAAkB;AAC1B,YAAQ,mBAAmB,MAAM;AAAA,EACnC;AACA,MAAI,MAAM,gBAAgB;AACxB,YAAQ,iBAAiB,MAAM;AAAA,EACjC;AACA,MAAI,MAAM,OAAO;AACf,YAAQ,YAAY,EAAE,KAAK,IAAI,KAAK,MAAM,KAAK,EAAE;AAAA,EACnD;AAEA,QAAM,CAAC,eAAe,KAAK,IAAI,MAAM,QAAQ,IAAI;AAAA,IAC/C,GAAG,KAAK,cAAc,SAAS;AAAA,MAC7B,SAAS,EAAE,WAAW,OAAO;AAAA,MAC7B,OAAO,MAAM;AAAA,MACb,SAAS,MAAM,OAAO,KAAK,MAAM;AAAA,IACnC,CAAC;AAAA,IACD,GAAG,MAAM,cAAc,OAAO;AAAA,EAChC,CAAC;AAED,QAAM,QAAQ,cAAc,IAAI,iBAAiB;AAEjD,QAAM,UAAoC;AAAA,IACxC;AAAA,IACA;AAAA,IACA,MAAM,MAAM;AAAA,IACZ,UAAU,MAAM;AAAA,IAChB,YAAY,KAAK,KAAK,QAAQ,MAAM,QAAQ;AAAA,EAC9C;AAEA,MAAI,SAAS,UAAU;AACrB,QAAI;AACF,YAAM;AAAA,QAAmB,MAAM;AAAA,QAAU,MACvC,MAAM,IAAI,UAAU,SAAS;AAAA,UAC3B,KAAK;AAAA,UACL,MAAM;AAAA,YACJ;AAAA,YACA,MAAM;AAAA,YACN,2CAA2C,KAAK;AAAA,UAClD;AAAA,QACF,CAAC;AAAA,MACH;AAAA,IACF,SAAS,OAAO;AACd,qBAAe,yCAAyC;AAAA,QACtD,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AAAA,MAC9D,CAAC;AAAA,IACH;AAAA,EACF;AAEA,SAAO,SAAS,KAAK,OAAO;AAC9B;AAEA,eAAsB,KAAK,KAAc;AACvC,QAAM,EAAE,SAAS,OAAO,IAAI,IAAI,MAAM,2BAA2B,GAAG;AAEpE,QAAM,OAAO,MAAM,IAAI,KAAK,EAAE,MAAM,OAAO,CAAC,EAAE;AAC9C,QAAM,SAAS,yBAAyB,UAAU,IAAI;AACtD,MAAI,CAAC,OAAO,SAAS;AACnB,WAAO,oCAAoC,OAAO,KAAK;AAAA,EACzD;AAEA,MAAI;AACF,UAAM,UAAU,MAAM;AAAA,MACpB,IAAI;AAAA,MACJ;AAAA,MACA;AAAA,MACA;AAAA,QACE,cAAc;AAAA,QACd,WAAW;AAAA,QACX,SAAS,OAAO;AAAA,MAClB;AAAA,MACA,MAAM,QAAQ,OAAO,OAAO,MAAM,KAAK;AAAA,IACzC;AACA,QAAI,CAAC,QAAQ,GAAI,QAAO,QAAQ;AAEhC,WAAO,SAAS,KAAK,EAAE,IAAI,QAAQ,OAAO,GAAG,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACjE,SAAS,OAAO;AACd,UAAM,gBAAgB,8BAA8B,KAAK;AACzD,QAAI,cAAe,QAAO;AAC1B,UAAM;AAAA,EACR;AACF;AAEA,MAAM,2BAA2B,8BAA8B;AAAA,EAC7D,cAAc;AAAA,EACd,aAAa;AAAA,EACb,oBAAoB,8BAA8B,sBAAsB;AAAA,EACxE,QAAQ;AAAA,IACN,QAAQ;AAAA,IACR,gBAAgB,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAAA,IAClD,aAAa;AAAA,EACf;AACF,CAAC;AAED,MAAM,uBAAuB,yBAAyB,SAAS,OAAO,CAAC;AAKhE,MAAM,UAA2B;AAAA,EACtC,GAAG;AAAA,EACH,SAAS;AAAA,IACP,GAAG,yBAAyB;AAAA,IAC5B,KAAK;AAAA,MACH,GAAG;AAAA,MACH,QAAQ;AAAA,QACN,GAAI,qBAAqB,UAAU,CAAC;AAAA,QACpC;AAAA,UACE,QAAQ;AAAA,UACR,aAAa,0DAA0D,gCAAgC;AAAA,UACvG,QAAQ;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;",
   "names": []
 }