@open-mercato/core 0.6.8-develop.6983.1.e4f794099e → 0.6.8-develop.6985.1.fb93574faa

package/dist/modules/notifications/api/types/[id]/channels/[channel]/route.js

@@ -0,0 +1,187 @@
+import { NextResponse } from "next/server";
+import { z } from "zod";
+import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
+import { getAuthFromRequest } from "@open-mercato/shared/lib/auth/server";
+import { resolveTranslations } from "@open-mercato/shared/lib/i18n/server";
+import { isUniqueViolation } from "@open-mercato/shared/lib/crud/errors";
+import { createLogger } from "@open-mercato/shared/lib/logger";
+import { NotificationType } from "../../../../../data/entities.js";
+import { syncNotificationTypes } from "../../../../../lib/notification-type-registry.js";
+import { computeChannelsPatch } from "../../../../../lib/typeChannelSettings.js";
+import {
+  applyTypeOverride,
+  loadTypeOverrideForUpdate,
+  resolveCatalogueTranslate,
+  resolveEffectiveChannels,
+  resolveRegisteredChannelIds,
+  typeItem
+} from "../../../../../lib/typeCatalogue.js";
+import { notificationTypeItemSchema } from "../../../../../data/validators.js";
+import { errorResponseSchema } from "../../../../openapi.js";
+import {
+  NOTIFICATION_SETTINGS_RESOURCE_KIND,
+  notificationCrudErrorResponse,
+  runGuardedNotificationWrite
+} from "../../../../../lib/routeHelpers.js";
+const logger = createLogger("notifications").child({ component: "type-channels-api" });
+const paramsSchema = z.object({
+  id: z.string().min(1),
+  channel: z.string().min(1)
+});
+const metadata = {
+  PUT: { requireAuth: true, requireFeatures: ["notifications.manage"] },
+  DELETE: { requireAuth: true, requireFeatures: ["notifications.manage"] }
+};
+async function readParams(ctx) {
+  const raw = await ctx.params;
+  return paramsSchema.parse({ id: raw?.id, channel: raw?.channel });
+}
+async function toggleChannel(req, ctx, enabled) {
+  const { t } = await resolveTranslations();
+  const auth = await getAuthFromRequest(req);
+  if (!auth?.sub || !auth.tenantId) {
+    return NextResponse.json({ error: t("api.errors.unauthorized", "Unauthorized") }, { status: 401 });
+  }
+  const tenantId = auth.tenantId;
+  let params;
+  try {
+    params = await readParams(ctx);
+  } catch {
+    return NextResponse.json(
+      { error: t("api.errors.invalidPayload", "Invalid request body") },
+      { status: 400 }
+    );
+  }
+  const container = await createRequestContainer();
+  try {
+    const em = container.resolve("em");
+    await syncNotificationTypes(em);
+    const row = await em.findOne(NotificationType, {
+      id: params.id,
+      $or: [{ tenantId: null }, { tenantId }]
+    });
+    if (!row) {
+      return NextResponse.json(
+        { error: t("notifications.types.unknownType", "Unknown notification type") },
+        { status: 404 }
+      );
+    }
+    const registeredChannelIds = resolveRegisteredChannelIds();
+    if (!registeredChannelIds.includes(params.channel)) {
+      return NextResponse.json(
+        { error: t("notifications.types.unknownChannel", "Unknown notification channel") },
+        { status: 404 }
+      );
+    }
+    const translate = await resolveCatalogueTranslate(req);
+    const guarded = await runGuardedNotificationWrite(
+      container,
+      {
+        tenantId,
+        organizationId: auth.orgId ?? null,
+        userId: auth.sub ?? null
+      },
+      req,
+      {
+        resourceKind: NOTIFICATION_SETTINGS_RESOURCE_KIND,
+        resourceId: row.id,
+        operation: "update",
+        payload: { id: row.id, channel: params.channel, enabled }
+      },
+      async () => {
+        const applyOnce = async () => {
+          return em.transactional(async (tem) => {
+            const existing = await loadTypeOverrideForUpdate(tem, tenantId, row.id);
+            const base = resolveEffectiveChannels(row.id, existing?.channels, registeredChannelIds);
+            const nextChannels = computeChannelsPatch(base, params.channel, enabled);
+            const override = applyTypeOverride(tem, {
+              tenantId,
+              notificationTypeId: row.id,
+              existing,
+              nextChannels,
+              nextNonOptOut: existing?.nonOptOut ?? null
+            });
+            await tem.flush();
+            return typeItem(row, override, translate);
+          });
+        };
+        try {
+          return await applyOnce();
+        } catch (err) {
+          if (!isUniqueViolation(err)) throw err;
+          em.clear();
+          return applyOnce();
+        }
+      }
+    );
+    if (!guarded.ok) return guarded.response;
+    return NextResponse.json({ ok: true, item: guarded.result });
+  } catch (error) {
+    const crudResponse = notificationCrudErrorResponse(error);
+    if (crudResponse) return crudResponse;
+    logger.error("notification type channel toggle failed", {
+      typeId: params.id,
+      channel: params.channel,
+      enabled,
+      error: error instanceof Error ? error.message : String(error)
+    });
+    return NextResponse.json(
+      { error: t("api.errors.internal", "Internal error") },
+      { status: 500 }
+    );
+  } finally {
+    const disposable = container;
+    if (typeof disposable.dispose === "function") await disposable.dispose();
+  }
+}
+async function PUT(req, ctx) {
+  return toggleChannel(req, ctx, true);
+}
+async function DELETE(req, ctx) {
+  return toggleChannel(req, ctx, false);
+}
+const toggleResponseSchema = z.object({
+  ok: z.literal(true),
+  item: notificationTypeItemSchema
+});
+const openApi = {
+  PUT: {
+    summary: "Enable one delivery channel for a notification type",
+    description: "Adds a single channel to the tenant's eligibility set for this notification type. The next set is derived server-side from the currently stored state under a row lock, so concurrent toggles of different channels do not overwrite each other \u2014 prefer this over `PATCH /api/notifications/types` with a full `channels` array whenever a UI toggles one cell at a time. Idempotent: enabling an already-enabled channel is a no-op. Returns the refreshed catalogue item.",
+    tags: ["Notifications"],
+    responses: {
+      200: {
+        description: "Updated notification type",
+        content: { "application/json": { schema: toggleResponseSchema } }
+      },
+      401: { description: "Unauthorized", content: { "application/json": { schema: errorResponseSchema } } },
+      404: {
+        description: "Unknown notification type or unregistered channel",
+        content: { "application/json": { schema: errorResponseSchema } }
+      }
+    }
+  },
+  DELETE: {
+    summary: "Disable one delivery channel for a notification type",
+    description: "Removes a single channel from the tenant's eligibility set for this notification type, with the same concurrency-safe server-side derivation as `PUT`. Removing the last remaining channel clears the override entirely so the code-declared default reapplies (an empty set is never stored \u2014 it would leave the type undeliverable). Idempotent: disabling an already-disabled channel is a no-op.",
+    tags: ["Notifications"],
+    responses: {
+      200: {
+        description: "Updated notification type",
+        content: { "application/json": { schema: toggleResponseSchema } }
+      },
+      401: { description: "Unauthorized", content: { "application/json": { schema: errorResponseSchema } } },
+      404: {
+        description: "Unknown notification type or unregistered channel",
+        content: { "application/json": { schema: errorResponseSchema } }
+      }
+    }
+  }
+};
+export {
+  DELETE,
+  PUT,
+  metadata,
+  openApi
+};
+//# sourceMappingURL=route.js.map

package/dist/modules/notifications/api/types/[id]/channels/[channel]/route.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../../../../src/modules/notifications/api/types/%5Bid%5D/channels/%5Bchannel%5D/route.ts"],
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { isUniqueViolation } from '@open-mercato/shared/lib/crud/errors'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\nimport { NotificationType } from '../../../../../data/entities'\nimport { syncNotificationTypes } from '../../../../../lib/notification-type-registry'\nimport { computeChannelsPatch } from '../../../../../lib/typeChannelSettings'\nimport {\n  applyTypeOverride,\n  loadTypeOverrideForUpdate,\n  resolveCatalogueTranslate,\n  resolveEffectiveChannels,\n  resolveRegisteredChannelIds,\n  typeItem,\n} from '../../../../../lib/typeCatalogue'\nimport { notificationTypeItemSchema } from '../../../../../data/validators'\nimport { errorResponseSchema } from '../../../../openapi'\nimport {\n  NOTIFICATION_SETTINGS_RESOURCE_KIND,\n  notificationCrudErrorResponse,\n  runGuardedNotificationWrite,\n} from '../../../../../lib/routeHelpers'\n\nconst logger = createLogger('notifications').child({ component: 'type-channels-api' })\n\nconst paramsSchema = z.object({\n  id: z.string().min(1),\n  channel: z.string().min(1),\n})\n\nexport const metadata = {\n  PUT: { requireAuth: true, requireFeatures: ['notifications.manage'] },\n  DELETE: { requireAuth: true, requireFeatures: ['notifications.manage'] },\n}\n\ntype RouteContext = { params?: { id?: string; channel?: string } | Promise<{ id?: string; channel?: string }> }\n\nasync function readParams(ctx: RouteContext) {\n  const raw = await ctx.params\n  return paramsSchema.parse({ id: raw?.id, channel: raw?.channel })\n}\n\n/**\n * Enable (`PUT`) or disable (`DELETE`) ONE channel for a notification type in the caller's tenant.\n *\n * Why a per-channel sub-resource rather than PATCHing the whole `channels` array: the array form\n * makes the client read-modify-write the full set, so two operators editing the same type from\n * stale views silently clobber each other \u2014 and while no override row exists yet there is no\n * `updated_at` to version-lock against, so the optimistic-lock guard cannot even detect it. Here\n * the server derives the next set from the CURRENT stored state under a row lock, so a concurrent\n * toggle of a different channel survives. Same shape as the other member-collection endpoints in\n * the repo (`customers/people/{id}/companies/{companyId}`, `catalog` media attach/detach).\n *\n * The full-array `PATCH /api/notifications/types` stays supported and unchanged for callers that\n * genuinely want to set the whole set at once.\n */\nasync function toggleChannel(req: Request, ctx: RouteContext, enabled: boolean): Promise<Response> {\n  const { t } = await resolveTranslations()\n  const auth = await getAuthFromRequest(req)\n  if (!auth?.sub || !auth.tenantId) {\n    return NextResponse.json({ error: t('api.errors.unauthorized', 'Unauthorized') }, { status: 401 })\n  }\n  const tenantId = auth.tenantId\n\n  let params: z.infer<typeof paramsSchema>\n  try {\n    params = await readParams(ctx)\n  } catch {\n    return NextResponse.json(\n      { error: t('api.errors.invalidPayload', 'Invalid request body') },\n      { status: 400 },\n    )\n  }\n\n  const container = await createRequestContainer()\n  try {\n    const em = container.resolve('em') as EntityManager\n    await syncNotificationTypes(em)\n    const row = await em.findOne(NotificationType, {\n      id: params.id,\n      $or: [{ tenantId: null }, { tenantId }],\n    })\n    if (!row) {\n      return NextResponse.json(\n        { error: t('notifications.types.unknownType', 'Unknown notification type') },\n        { status: 404 },\n      )\n    }\n\n    // Reject unregistered channels up front: silently storing one would put a dead entry in the\n    // eligibility set that no delivery strategy can ever satisfy.\n    const registeredChannelIds = resolveRegisteredChannelIds()\n    if (!registeredChannelIds.includes(params.channel)) {\n      return NextResponse.json(\n        { error: t('notifications.types.unknownChannel', 'Unknown notification channel') },\n        { status: 404 },\n      )\n    }\n\n    const translate = await resolveCatalogueTranslate(req)\n\n    const guarded = await runGuardedNotificationWrite(\n      container,\n      {\n        tenantId,\n        organizationId: auth.orgId ?? null,\n        userId: auth.sub ?? null,\n      },\n      req,\n      {\n        resourceKind: NOTIFICATION_SETTINGS_RESOURCE_KIND,\n        resourceId: row.id,\n        operation: 'update',\n        payload: { id: row.id, channel: params.channel, enabled },\n      },\n      async () => {\n        // optimistic-lock-exempt: notification type channel add/remove. The next set is derived\n        // server-side from the current stored state inside a transaction that holds a row lock on\n        // the override, so a concurrent toggle cannot be lost \u2014 there is no shared aggregate for a\n        // version check to protect. Mirrors the add/remove endpoints in customers/catalog/staff.\n        const applyOnce = async () => {\n          return em.transactional(async (tem) => {\n            const existing = await loadTypeOverrideForUpdate(tem, tenantId, row.id)\n            const base = resolveEffectiveChannels(row.id, existing?.channels, registeredChannelIds)\n            // Unchecking the last channel maps to `null` (clear the override \u2192 the code-declared\n            // default reapplies) rather than an empty set, which would black-hole the type.\n            const nextChannels = computeChannelsPatch(base, params.channel, enabled)\n            const override = applyTypeOverride(tem, {\n              tenantId,\n              notificationTypeId: row.id,\n              existing,\n              nextChannels,\n              nextNonOptOut: existing?.nonOptOut ?? null,\n            })\n            await tem.flush()\n            return typeItem(row, override, translate)\n          })\n        }\n\n        try {\n          return await applyOnce()\n        } catch (err) {\n          // First-write race: no row existed to lock, so a concurrent INSERT for this\n          // (tenant, type) won and the partial unique index rejected ours. A single-channel\n          // toggle is idempotent, so re-apply it on top of the winner instead of surfacing a\n          // conflict the operator would only have to resolve by clicking again.\n          if (!isUniqueViolation(err)) throw err\n          em.clear()\n          return applyOnce()\n        }\n      },\n    )\n    if (!guarded.ok) return guarded.response\n    return NextResponse.json({ ok: true, item: guarded.result })\n  } catch (error) {\n    const crudResponse = notificationCrudErrorResponse(error)\n    if (crudResponse) return crudResponse\n    logger.error('notification type channel toggle failed', {\n      typeId: params.id,\n      channel: params.channel,\n      enabled,\n      error: error instanceof Error ? error.message : String(error),\n    })\n    return NextResponse.json(\n      { error: t('api.errors.internal', 'Internal error') },\n      { status: 500 },\n    )\n  } finally {\n    const disposable = container as unknown as { dispose?: () => Promise<void> }\n    if (typeof disposable.dispose === 'function') await disposable.dispose()\n  }\n}\n\nexport async function PUT(req: Request, ctx: RouteContext): Promise<Response> {\n  return toggleChannel(req, ctx, true)\n}\n\nexport async function DELETE(req: Request, ctx: RouteContext): Promise<Response> {\n  return toggleChannel(req, ctx, false)\n}\n\nconst toggleResponseSchema = z.object({\n  ok: z.literal(true),\n  item: notificationTypeItemSchema,\n})\n\nexport const openApi = {\n  PUT: {\n    summary: 'Enable one delivery channel for a notification type',\n    description:\n      'Adds a single channel to the tenant\\'s eligibility set for this notification type. The next set is derived server-side from the currently stored state under a row lock, so concurrent toggles of different channels do not overwrite each other \u2014 prefer this over `PATCH /api/notifications/types` with a full `channels` array whenever a UI toggles one cell at a time. Idempotent: enabling an already-enabled channel is a no-op. Returns the refreshed catalogue item.',\n    tags: ['Notifications'],\n    responses: {\n      200: {\n        description: 'Updated notification type',\n        content: { 'application/json': { schema: toggleResponseSchema } },\n      },\n      401: { description: 'Unauthorized', content: { 'application/json': { schema: errorResponseSchema } } },\n      404: {\n        description: 'Unknown notification type or unregistered channel',\n        content: { 'application/json': { schema: errorResponseSchema } },\n      },\n    },\n  },\n  DELETE: {\n    summary: 'Disable one delivery channel for a notification type',\n    description:\n      'Removes a single channel from the tenant\\'s eligibility set for this notification type, with the same concurrency-safe server-side derivation as `PUT`. Removing the last remaining channel clears the override entirely so the code-declared default reapplies (an empty set is never stored \u2014 it would leave the type undeliverable). Idempotent: disabling an already-disabled channel is a no-op.',\n    tags: ['Notifications'],\n    responses: {\n      200: {\n        description: 'Updated notification type',\n        content: { 'application/json': { schema: toggleResponseSchema } },\n      },\n      401: { description: 'Unauthorized', content: { 'application/json': { schema: errorResponseSchema } } },\n      404: {\n        description: 'Unknown notification type or unregistered channel',\n        content: { 'application/json': { schema: errorResponseSchema } },\n      },\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAElB,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,2BAA2B;AACpC,SAAS,yBAAyB;AAClC,SAAS,oBAAoB;AAC7B,SAAS,wBAAwB;AACjC,SAAS,6BAA6B;AACtC,SAAS,4BAA4B;AACrC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,kCAAkC;AAC3C,SAAS,2BAA2B;AACpC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEP,MAAM,SAAS,aAAa,eAAe,EAAE,MAAM,EAAE,WAAW,oBAAoB,CAAC;AAErF,MAAM,eAAe,EAAE,OAAO;AAAA,EAC5B,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EACpB,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC;AAC3B,CAAC;AAEM,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,sBAAsB,EAAE;AAAA,EACpE,QAAQ,EAAE,aAAa,MAAM,iBAAiB,CAAC,sBAAsB,EAAE;AACzE;AAIA,eAAe,WAAW,KAAmB;AAC3C,QAAM,MAAM,MAAM,IAAI;AACtB,SAAO,aAAa,MAAM,EAAE,IAAI,KAAK,IAAI,SAAS,KAAK,QAAQ,CAAC;AAClE;AAgBA,eAAe,cAAc,KAAc,KAAmB,SAAqC;AACjG,QAAM,EAAE,EAAE,IAAI,MAAM,oBAAoB;AACxC,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM,OAAO,CAAC,KAAK,UAAU;AAChC,WAAO,aAAa,KAAK,EAAE,OAAO,EAAE,2BAA2B,cAAc,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACnG;AACA,QAAM,WAAW,KAAK;AAEtB,MAAI;AACJ,MAAI;AACF,aAAS,MAAM,WAAW,GAAG;AAAA,EAC/B,QAAQ;AACN,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,EAAE,6BAA6B,sBAAsB,EAAE;AAAA,MAChE,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,MAAI;AACF,UAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,UAAM,sBAAsB,EAAE;AAC9B,UAAM,MAAM,MAAM,GAAG,QAAQ,kBAAkB;AAAA,MAC7C,IAAI,OAAO;AAAA,MACX,KAAK,CAAC,EAAE,UAAU,KAAK,GAAG,EAAE,SAAS,CAAC;AAAA,IACxC,CAAC;AACD,QAAI,CAAC,KAAK;AACR,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,EAAE,mCAAmC,2BAA2B,EAAE;AAAA,QAC3E,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAIA,UAAM,uBAAuB,4BAA4B;AACzD,QAAI,CAAC,qBAAqB,SAAS,OAAO,OAAO,GAAG;AAClD,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,EAAE,sCAAsC,8BAA8B,EAAE;AAAA,QACjF,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAEA,UAAM,YAAY,MAAM,0BAA0B,GAAG;AAErD,UAAM,UAAU,MAAM;AAAA,MACpB;AAAA,MACA;AAAA,QACE;AAAA,QACA,gBAAgB,KAAK,SAAS;AAAA,QAC9B,QAAQ,KAAK,OAAO;AAAA,MACtB;AAAA,MACA;AAAA,MACA;AAAA,QACE,cAAc;AAAA,QACd,YAAY,IAAI;AAAA,QAChB,WAAW;AAAA,QACX,SAAS,EAAE,IAAI,IAAI,IAAI,SAAS,OAAO,SAAS,QAAQ;AAAA,MAC1D;AAAA,MACA,YAAY;AAKV,cAAM,YAAY,YAAY;AAC5B,iBAAO,GAAG,cAAc,OAAO,QAAQ;AACrC,kBAAM,WAAW,MAAM,0BAA0B,KAAK,UAAU,IAAI,EAAE;AACtE,kBAAM,OAAO,yBAAyB,IAAI,IAAI,UAAU,UAAU,oBAAoB;AAGtF,kBAAM,eAAe,qBAAqB,MAAM,OAAO,SAAS,OAAO;AACvE,kBAAM,WAAW,kBAAkB,KAAK;AAAA,cACtC;AAAA,cACA,oBAAoB,IAAI;AAAA,cACxB;AAAA,cACA;AAAA,cACA,eAAe,UAAU,aAAa;AAAA,YACxC,CAAC;AACD,kBAAM,IAAI,MAAM;AAChB,mBAAO,SAAS,KAAK,UAAU,SAAS;AAAA,UAC1C,CAAC;AAAA,QACH;AAEA,YAAI;AACF,iBAAO,MAAM,UAAU;AAAA,QACzB,SAAS,KAAK;AAKZ,cAAI,CAAC,kBAAkB,GAAG,EAAG,OAAM;AACnC,aAAG,MAAM;AACT,iBAAO,UAAU;AAAA,QACnB;AAAA,MACF;AAAA,IACF;AACA,QAAI,CAAC,QAAQ,GAAI,QAAO,QAAQ;AAChC,WAAO,aAAa,KAAK,EAAE,IAAI,MAAM,MAAM,QAAQ,OAAO,CAAC;AAAA,EAC7D,SAAS,OAAO;AACd,UAAM,eAAe,8BAA8B,KAAK;AACxD,QAAI,aAAc,QAAO;AACzB,WAAO,MAAM,2CAA2C;AAAA,MACtD,QAAQ,OAAO;AAAA,MACf,SAAS,OAAO;AAAA,MAChB;AAAA,MACA,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AAAA,IAC9D,CAAC;AACD,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,EAAE,uBAAuB,gBAAgB,EAAE;AAAA,MACpD,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF,UAAE;AACA,UAAM,aAAa;AACnB,QAAI,OAAO,WAAW,YAAY,WAAY,OAAM,WAAW,QAAQ;AAAA,EACzE;AACF;AAEA,eAAsB,IAAI,KAAc,KAAsC;AAC5E,SAAO,cAAc,KAAK,KAAK,IAAI;AACrC;AAEA,eAAsB,OAAO,KAAc,KAAsC;AAC/E,SAAO,cAAc,KAAK,KAAK,KAAK;AACtC;AAEA,MAAM,uBAAuB,EAAE,OAAO;AAAA,EACpC,IAAI,EAAE,QAAQ,IAAI;AAAA,EAClB,MAAM;AACR,CAAC;AAEM,MAAM,UAAU;AAAA,EACrB,KAAK;AAAA,IACH,SAAS;AAAA,IACT,aACE;AAAA,IACF,MAAM,CAAC,eAAe;AAAA,IACtB,WAAW;AAAA,MACT,KAAK;AAAA,QACH,aAAa;AAAA,QACb,SAAS,EAAE,oBAAoB,EAAE,QAAQ,qBAAqB,EAAE;AAAA,MAClE;AAAA,MACA,KAAK,EAAE,aAAa,gBAAgB,SAAS,EAAE,oBAAoB,EAAE,QAAQ,oBAAoB,EAAE,EAAE;AAAA,MACrG,KAAK;AAAA,QACH,aAAa;AAAA,QACb,SAAS,EAAE,oBAAoB,EAAE,QAAQ,oBAAoB,EAAE;AAAA,MACjE;AAAA,IACF;AAAA,EACF;AAAA,EACA,QAAQ;AAAA,IACN,SAAS;AAAA,IACT,aACE;AAAA,IACF,MAAM,CAAC,eAAe;AAAA,IACtB,WAAW;AAAA,MACT,KAAK;AAAA,QACH,aAAa;AAAA,QACb,SAAS,EAAE,oBAAoB,EAAE,QAAQ,qBAAqB,EAAE;AAAA,MAClE;AAAA,MACA,KAAK,EAAE,aAAa,gBAAgB,SAAS,EAAE,oBAAoB,EAAE,QAAQ,oBAAoB,EAAE,EAAE;AAAA,MACrG,KAAK;AAAA,QACH,aAAa;AAAA,QACb,SAAS,EAAE,oBAAoB,EAAE,QAAQ,oBAAoB,EAAE;AAAA,MACjE;AAAA,IACF;AAAA,EACF;AACF;",
+  "names": []
+}

package/dist/modules/notifications/api/types/route.js

@@ -0,0 +1,225 @@
+import { NextResponse } from "next/server";
+import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
+import { getAuthFromRequest } from "@open-mercato/shared/lib/auth/server";
+import { resolveTranslations } from "@open-mercato/shared/lib/i18n/server";
+import { enforceCommandOptimisticLock } from "@open-mercato/shared/lib/crud/optimistic-lock-command";
+import { conflict, isUniqueViolation } from "@open-mercato/shared/lib/crud/errors";
+import { createLogger } from "@open-mercato/shared/lib/logger";
+import { z } from "zod";
+import { NotificationType, NotificationTypeOverride } from "../../data/entities.js";
+import { syncNotificationTypes } from "../../lib/notification-type-registry.js";
+import { applyTypeOverride, resolveCatalogueTranslate, typeItem } from "../../lib/typeCatalogue.js";
+import { notificationTypeItemSchema, updateNotificationTypeSchema } from "../../data/validators.js";
+import { errorResponseSchema } from "../openapi.js";
+import {
+  NOTIFICATION_SETTINGS_RESOURCE_KIND,
+  notificationCrudErrorResponse,
+  runGuardedNotificationWrite
+} from "../../lib/routeHelpers.js";
+const logger = createLogger("notifications").child({ component: "types-api" });
+const metadata = {
+  GET: { requireAuth: true, requireFeatures: ["notifications.view"] },
+  PATCH: { requireAuth: true, requireFeatures: ["notifications.manage"] }
+};
+async function GET(req) {
+  const { t } = await resolveTranslations();
+  const auth = await getAuthFromRequest(req);
+  if (!auth?.sub || !auth.tenantId) {
+    return NextResponse.json({ error: t("api.errors.unauthorized", "Unauthorized") }, { status: 401 });
+  }
+  const container = await createRequestContainer();
+  try {
+    const em = container.resolve("em");
+    await syncNotificationTypes(em);
+    const rows = await em.find(
+      NotificationType,
+      { $or: [{ tenantId: null }, { tenantId: auth.tenantId }] },
+      { orderBy: { id: "asc" } }
+    );
+    const overrides = await em.find(NotificationTypeOverride, {
+      tenantId: auth.tenantId,
+      notificationTypeId: { $in: rows.map((row) => row.id) }
+    });
+    const overrideByType = new Map(overrides.map((override) => [override.notificationTypeId, override]));
+    const translate = await resolveCatalogueTranslate(req);
+    return NextResponse.json({
+      items: rows.map((row) => typeItem(row, overrideByType.get(row.id), translate))
+    });
+  } finally {
+    const disposable = container;
+    if (typeof disposable.dispose === "function") await disposable.dispose();
+  }
+}
+async function PATCH(req) {
+  const { t, translate } = await resolveTranslations();
+  const auth = await getAuthFromRequest(req);
+  if (!auth?.sub || !auth.tenantId) {
+    return NextResponse.json({ error: t("api.errors.unauthorized", "Unauthorized") }, { status: 401 });
+  }
+  const tenantId = auth.tenantId;
+  let body;
+  try {
+    body = await req.json();
+  } catch {
+    return NextResponse.json(
+      { error: t("api.errors.invalidPayload", "Invalid request body") },
+      { status: 400 }
+    );
+  }
+  const parsed = updateNotificationTypeSchema.safeParse(body);
+  if (!parsed.success) {
+    return NextResponse.json(
+      { error: t("notifications.types.invalidChannels", "Invalid channels payload") },
+      { status: 400 }
+    );
+  }
+  const container = await createRequestContainer();
+  try {
+    const em = container.resolve("em");
+    await syncNotificationTypes(em);
+    const row = await em.findOne(NotificationType, {
+      id: parsed.data.id,
+      $or: [{ tenantId: null }, { tenantId }]
+    });
+    if (!row) {
+      return NextResponse.json(
+        { error: t("notifications.types.unknownType", "Unknown notification type") },
+        { status: 404 }
+      );
+    }
+    const existing = await em.findOne(NotificationTypeOverride, {
+      tenantId,
+      notificationTypeId: row.id
+    });
+    const guarded = await runGuardedNotificationWrite(
+      container,
+      {
+        tenantId,
+        organizationId: auth.orgId ?? null,
+        userId: auth.sub ?? null
+      },
+      req,
+      {
+        resourceKind: NOTIFICATION_SETTINGS_RESOURCE_KIND,
+        resourceId: row.id,
+        operation: "update",
+        payload: parsed.data
+      },
+      async () => {
+        enforceCommandOptimisticLock({
+          resourceKind: NOTIFICATION_SETTINGS_RESOURCE_KIND,
+          resourceId: row.id,
+          current: existing?.updatedAt ?? null,
+          request: req
+        });
+        const nextChannels = parsed.data.channels !== void 0 ? parsed.data.channels : existing?.channels ?? null;
+        const nextNonOptOut = parsed.data.nonOptOut !== void 0 ? parsed.data.nonOptOut : existing?.nonOptOut ?? null;
+        const override = applyTypeOverride(em, {
+          tenantId,
+          notificationTypeId: row.id,
+          existing,
+          nextChannels,
+          nextNonOptOut
+        });
+        try {
+          await em.flush();
+        } catch (err) {
+          if (isUniqueViolation(err)) {
+            throw conflict(
+              t(
+                "notifications.types.overrideConflict",
+                "Another operator just saved this notification type. Reload and try again."
+              )
+            );
+          }
+          throw err;
+        }
+        return typeItem(row, override, translate);
+      }
+    );
+    if (!guarded.ok) return guarded.response;
+    return NextResponse.json({ ok: true, item: guarded.result });
+  } catch (error) {
+    const crudResponse = notificationCrudErrorResponse(error);
+    if (crudResponse) return crudResponse;
+    logger.error("notification type override update failed", {
+      typeId: parsed.data.id,
+      error: error instanceof Error ? error.message : String(error)
+    });
+    return NextResponse.json(
+      { error: t("api.errors.internal", "Internal error") },
+      { status: 500 }
+    );
+  } finally {
+    const disposable = container;
+    if (typeof disposable.dispose === "function") await disposable.dispose();
+  }
+}
+const openApi = {
+  GET: {
+    summary: "List notification types",
+    description: "Returns the notification type catalogue (system-wide + tenant) so clients can render a preferences screen. `channels` is the effective channel eligibility for the caller's tenant (stored override, else the code-declared set; `null` = every channel); a channel outside it never delivers in that tenant and cannot be enabled by users. `updatedAt` is the override row's optimistic-lock version (`null` when the tenant stores no override). `label`, `description` and `categoryLabel` are resolved server-side using the request locale (`?locale=`, `x-locale`, the `locale` cookie, or `Accept-Language`) so clients without the app dictionary can render them directly; `categoryLabel` falls back to the raw category key when the owning module ships no `notifications.categories.<key>` translation, so `categoryLabel === category` signals \"no server-side label\". `category` defaults to the prefix before the first dot in the type id and is the stable grouping key \u2014 group on `category`, display `categoryLabel`.",
+    tags: ["Notifications"],
+    responses: {
+      200: {
+        description: "Notification type catalogue",
+        content: {
+          "application/json": {
+            schema: z.object({ items: z.array(notificationTypeItemSchema) })
+          }
+        }
+      },
+      401: {
+        description: "Unauthorized",
+        content: { "application/json": { schema: errorResponseSchema } }
+      }
+    }
+  },
+  PATCH: {
+    summary: "Override a notification type's channel eligibility and opt-out governance for the caller's tenant",
+    description: "Tenant-scoped operator overrides for a notification type (stored in `notification_type_overrides`; other tenants are unaffected). `channels` replaces the code-declared eligibility (a channel outside the effective set is completely off for the tenant: it beats user preferences and `nonOptOut`, and preference UIs lock the cell). `nonOptOut` overrides the code-declared opt-out governance (`true` forces the type on for users, `false` makes a required type user-editable). Omitted fields stay untouched; pass `null` to clear a stored override and inherit the code declaration. Sends the standard optimistic-lock header contract: pass the item's `updatedAt` as `x-om-ext-optimistic-lock-expected-updated-at` to detect concurrent edits (409 on mismatch).",
+    tags: ["Notifications"],
+    requestBody: {
+      required: true,
+      content: {
+        "application/json": { schema: updateNotificationTypeSchema }
+      }
+    },
+    responses: {
+      200: {
+        description: "Override saved",
+        content: {
+          "application/json": {
+            schema: z.object({
+              ok: z.literal(true),
+              item: notificationTypeItemSchema
+            })
+          }
+        }
+      },
+      400: {
+        description: "Invalid request body",
+        content: { "application/json": { schema: errorResponseSchema } }
+      },
+      401: {
+        description: "Unauthorized",
+        content: { "application/json": { schema: errorResponseSchema } }
+      },
+      404: {
+        description: "Unknown notification type",
+        content: { "application/json": { schema: errorResponseSchema } }
+      },
+      409: {
+        description: "Optimistic-lock conflict \u2014 another operator saved a newer override",
+        content: { "application/json": { schema: errorResponseSchema } }
+      }
+    }
+  }
+};
+export {
+  GET,
+  PATCH,
+  metadata,
+  openApi
+};
+//# sourceMappingURL=route.js.map

package/dist/modules/notifications/api/types/route.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../src/modules/notifications/api/types/route.ts"],
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { enforceCommandOptimisticLock } from '@open-mercato/shared/lib/crud/optimistic-lock-command'\nimport { conflict, isUniqueViolation } from '@open-mercato/shared/lib/crud/errors'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\nimport { z } from 'zod'\nimport { NotificationType, NotificationTypeOverride } from '../../data/entities'\nimport { syncNotificationTypes } from '../../lib/notification-type-registry'\nimport { applyTypeOverride, resolveCatalogueTranslate, typeItem } from '../../lib/typeCatalogue'\nimport { notificationTypeItemSchema, updateNotificationTypeSchema } from '../../data/validators'\nimport { errorResponseSchema } from '../openapi'\nimport {\n  NOTIFICATION_SETTINGS_RESOURCE_KIND,\n  notificationCrudErrorResponse,\n  runGuardedNotificationWrite,\n} from '../../lib/routeHelpers'\n\nconst logger = createLogger('notifications').child({ component: 'types-api' })\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['notifications.view'] },\n  PATCH: { requireAuth: true, requireFeatures: ['notifications.manage'] },\n}\n\nexport async function GET(req: Request) {\n  const { t } = await resolveTranslations()\n  const auth = await getAuthFromRequest(req)\n  if (!auth?.sub || !auth.tenantId) {\n    return NextResponse.json({ error: t('api.errors.unauthorized', 'Unauthorized') }, { status: 401 })\n  }\n\n  const container = await createRequestContainer()\n  try {\n    const em = container.resolve('em') as EntityManager\n    // Read-through mirror: ensure the catalogue is reflected in the DB (once per process).\n    await syncNotificationTypes(em)\n    const rows = await em.find(\n      NotificationType,\n      { $or: [{ tenantId: null }, { tenantId: auth.tenantId }] },\n      { orderBy: { id: 'asc' } },\n    )\n    const overrides = await em.find(NotificationTypeOverride, {\n      tenantId: auth.tenantId,\n      notificationTypeId: { $in: rows.map((row) => row.id) },\n    })\n    const overrideByType = new Map(overrides.map((override) => [override.notificationTypeId, override]))\n    const translate = await resolveCatalogueTranslate(req)\n    return NextResponse.json({\n      items: rows.map((row) => typeItem(row, overrideByType.get(row.id), translate)),\n    })\n  } finally {\n    const disposable = container as unknown as { dispose?: () => Promise<void> }\n    if (typeof disposable.dispose === 'function') await disposable.dispose()\n  }\n}\n\nexport async function PATCH(req: Request) {\n  // Admin write: the echoed item stays on the request-context locale (no `?locale=`\n  // override), so the confirmation matches the operator's own session.\n  const { t, translate } = await resolveTranslations()\n  const auth = await getAuthFromRequest(req)\n  if (!auth?.sub || !auth.tenantId) {\n    return NextResponse.json({ error: t('api.errors.unauthorized', 'Unauthorized') }, { status: 401 })\n  }\n  const tenantId = auth.tenantId\n\n  let body: unknown\n  try {\n    body = await req.json()\n  } catch {\n    return NextResponse.json(\n      { error: t('api.errors.invalidPayload', 'Invalid request body') },\n      { status: 400 },\n    )\n  }\n\n  const parsed = updateNotificationTypeSchema.safeParse(body)\n  if (!parsed.success) {\n    return NextResponse.json(\n      { error: t('notifications.types.invalidChannels', 'Invalid channels payload') },\n      { status: 400 },\n    )\n  }\n\n  const container = await createRequestContainer()\n  try {\n    const em = container.resolve('em') as EntityManager\n    await syncNotificationTypes(em)\n    const row = await em.findOne(NotificationType, {\n      id: parsed.data.id,\n      $or: [{ tenantId: null }, { tenantId }],\n    })\n    if (!row) {\n      return NextResponse.json(\n        { error: t('notifications.types.unknownType', 'Unknown notification type') },\n        { status: 404 },\n      )\n    }\n    const existing = await em.findOne(NotificationTypeOverride, {\n      tenantId,\n      notificationTypeId: row.id,\n    })\n\n    const guarded = await runGuardedNotificationWrite(\n      container,\n      {\n        tenantId,\n        organizationId: auth.orgId ?? null,\n        userId: auth.sub ?? null,\n      },\n      req,\n      {\n        resourceKind: NOTIFICATION_SETTINGS_RESOURCE_KIND,\n        resourceId: row.id,\n        operation: 'update',\n        payload: parsed.data as unknown as Record<string, unknown>,\n      },\n      async () => {\n        // Same 409 contract as the CRUD guard: a stale admin view (another operator saved\n        // since this client loaded the catalogue) must not silently clobber the newer\n        // override \u2014 the full `channels` array replaces, so a blind write loses edits.\n        enforceCommandOptimisticLock({\n          resourceKind: NOTIFICATION_SETTINGS_RESOURCE_KIND,\n          resourceId: row.id,\n          current: existing?.updatedAt ?? null,\n          request: req,\n        })\n        const nextChannels = parsed.data.channels !== undefined ? parsed.data.channels : existing?.channels ?? null\n        const nextNonOptOut = parsed.data.nonOptOut !== undefined ? parsed.data.nonOptOut : existing?.nonOptOut ?? null\n        const override = applyTypeOverride(em, {\n          tenantId,\n          notificationTypeId: row.id,\n          existing,\n          nextChannels,\n          nextNonOptOut,\n        })\n        try {\n          await em.flush()\n        } catch (err) {\n          // Concurrent first-write race: another operator created the override for this (tenant, type)\n          // between our read (existing === null) and this flush, so the partial unique index rejects\n          // ours. There was no version to compare, so the optimistic-lock guard couldn't fire \u2014 surface\n          // the same 409 it would rather than letting the unique violation fall through to a generic 500.\n          if (isUniqueViolation(err)) {\n            throw conflict(\n              t(\n                'notifications.types.overrideConflict',\n                'Another operator just saved this notification type. Reload and try again.',\n              ),\n            )\n          }\n          throw err\n        }\n        return typeItem(row, override, translate)\n      },\n    )\n    if (!guarded.ok) return guarded.response\n    return NextResponse.json({ ok: true, item: guarded.result })\n  } catch (error) {\n    const crudResponse = notificationCrudErrorResponse(error)\n    if (crudResponse) return crudResponse\n    logger.error('notification type override update failed', {\n      typeId: parsed.data.id,\n      error: error instanceof Error ? error.message : String(error),\n    })\n    return NextResponse.json(\n      { error: t('api.errors.internal', 'Internal error') },\n      { status: 500 },\n    )\n  } finally {\n    const disposable = container as unknown as { dispose?: () => Promise<void> }\n    if (typeof disposable.dispose === 'function') await disposable.dispose()\n  }\n}\n\nexport const openApi = {\n  GET: {\n    summary: 'List notification types',\n    description: 'Returns the notification type catalogue (system-wide + tenant) so clients can render a preferences screen. `channels` is the effective channel eligibility for the caller\\'s tenant (stored override, else the code-declared set; `null` = every channel); a channel outside it never delivers in that tenant and cannot be enabled by users. `updatedAt` is the override row\\'s optimistic-lock version (`null` when the tenant stores no override). `label`, `description` and `categoryLabel` are resolved server-side using the request locale (`?locale=`, `x-locale`, the `locale` cookie, or `Accept-Language`) so clients without the app dictionary can render them directly; `categoryLabel` falls back to the raw category key when the owning module ships no `notifications.categories.<key>` translation, so `categoryLabel === category` signals \"no server-side label\". `category` defaults to the prefix before the first dot in the type id and is the stable grouping key \u2014 group on `category`, display `categoryLabel`.',\n    tags: ['Notifications'],\n    responses: {\n      200: {\n        description: 'Notification type catalogue',\n        content: {\n          'application/json': {\n            schema: z.object({ items: z.array(notificationTypeItemSchema) }),\n          },\n        },\n      },\n      401: {\n        description: 'Unauthorized',\n        content: { 'application/json': { schema: errorResponseSchema } },\n      },\n    },\n  },\n  PATCH: {\n    summary: 'Override a notification type\\'s channel eligibility and opt-out governance for the caller\\'s tenant',\n    description: 'Tenant-scoped operator overrides for a notification type (stored in `notification_type_overrides`; other tenants are unaffected). `channels` replaces the code-declared eligibility (a channel outside the effective set is completely off for the tenant: it beats user preferences and `nonOptOut`, and preference UIs lock the cell). `nonOptOut` overrides the code-declared opt-out governance (`true` forces the type on for users, `false` makes a required type user-editable). Omitted fields stay untouched; pass `null` to clear a stored override and inherit the code declaration. Sends the standard optimistic-lock header contract: pass the item\\'s `updatedAt` as `x-om-ext-optimistic-lock-expected-updated-at` to detect concurrent edits (409 on mismatch).',\n    tags: ['Notifications'],\n    requestBody: {\n      required: true,\n      content: {\n        'application/json': { schema: updateNotificationTypeSchema },\n      },\n    },\n    responses: {\n      200: {\n        description: 'Override saved',\n        content: {\n          'application/json': {\n            schema: z.object({\n              ok: z.literal(true),\n              item: notificationTypeItemSchema,\n            }),\n          },\n        },\n      },\n      400: {\n        description: 'Invalid request body',\n        content: { 'application/json': { schema: errorResponseSchema } },\n      },\n      401: {\n        description: 'Unauthorized',\n        content: { 'application/json': { schema: errorResponseSchema } },\n      },\n      404: {\n        description: 'Unknown notification type',\n        content: { 'application/json': { schema: errorResponseSchema } },\n      },\n      409: {\n        description: 'Optimistic-lock conflict \u2014 another operator saved a newer override',\n        content: { 'application/json': { schema: errorResponseSchema } },\n      },\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAE7B,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,2BAA2B;AACpC,SAAS,oCAAoC;AAC7C,SAAS,UAAU,yBAAyB;AAC5C,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAClB,SAAS,kBAAkB,gCAAgC;AAC3D,SAAS,6BAA6B;AACtC,SAAS,mBAAmB,2BAA2B,gBAAgB;AACvE,SAAS,4BAA4B,oCAAoC;AACzE,SAAS,2BAA2B;AACpC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEP,MAAM,SAAS,aAAa,eAAe,EAAE,MAAM,EAAE,WAAW,YAAY,CAAC;AAEtE,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,oBAAoB,EAAE;AAAA,EAClE,OAAO,EAAE,aAAa,MAAM,iBAAiB,CAAC,sBAAsB,EAAE;AACxE;AAEA,eAAsB,IAAI,KAAc;AACtC,QAAM,EAAE,EAAE,IAAI,MAAM,oBAAoB;AACxC,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM,OAAO,CAAC,KAAK,UAAU;AAChC,WAAO,aAAa,KAAK,EAAE,OAAO,EAAE,2BAA2B,cAAc,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACnG;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,MAAI;AACF,UAAM,KAAK,UAAU,QAAQ,IAAI;AAEjC,UAAM,sBAAsB,EAAE;AAC9B,UAAM,OAAO,MAAM,GAAG;AAAA,MACpB;AAAA,MACA,EAAE,KAAK,CAAC,EAAE,UAAU,KAAK,GAAG,EAAE,UAAU,KAAK,SAAS,CAAC,EAAE;AAAA,MACzD,EAAE,SAAS,EAAE,IAAI,MAAM,EAAE;AAAA,IAC3B;AACA,UAAM,YAAY,MAAM,GAAG,KAAK,0BAA0B;AAAA,MACxD,UAAU,KAAK;AAAA,MACf,oBAAoB,EAAE,KAAK,KAAK,IAAI,CAAC,QAAQ,IAAI,EAAE,EAAE;AAAA,IACvD,CAAC;AACD,UAAM,iBAAiB,IAAI,IAAI,UAAU,IAAI,CAAC,aAAa,CAAC,SAAS,oBAAoB,QAAQ,CAAC,CAAC;AACnG,UAAM,YAAY,MAAM,0BAA0B,GAAG;AACrD,WAAO,aAAa,KAAK;AAAA,MACvB,OAAO,KAAK,IAAI,CAAC,QAAQ,SAAS,KAAK,eAAe,IAAI,IAAI,EAAE,GAAG,SAAS,CAAC;AAAA,IAC/E,CAAC;AAAA,EACH,UAAE;AACA,UAAM,aAAa;AACnB,QAAI,OAAO,WAAW,YAAY,WAAY,OAAM,WAAW,QAAQ;AAAA,EACzE;AACF;AAEA,eAAsB,MAAM,KAAc;AAGxC,QAAM,EAAE,GAAG,UAAU,IAAI,MAAM,oBAAoB;AACnD,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM,OAAO,CAAC,KAAK,UAAU;AAChC,WAAO,aAAa,KAAK,EAAE,OAAO,EAAE,2BAA2B,cAAc,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACnG;AACA,QAAM,WAAW,KAAK;AAEtB,MAAI;AACJ,MAAI;AACF,WAAO,MAAM,IAAI,KAAK;AAAA,EACxB,QAAQ;AACN,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,EAAE,6BAA6B,sBAAsB,EAAE;AAAA,MAChE,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AAEA,QAAM,SAAS,6BAA6B,UAAU,IAAI;AAC1D,MAAI,CAAC,OAAO,SAAS;AACnB,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,EAAE,uCAAuC,0BAA0B,EAAE;AAAA,MAC9E,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,MAAI;AACF,UAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,UAAM,sBAAsB,EAAE;AAC9B,UAAM,MAAM,MAAM,GAAG,QAAQ,kBAAkB;AAAA,MAC7C,IAAI,OAAO,KAAK;AAAA,MAChB,KAAK,CAAC,EAAE,UAAU,KAAK,GAAG,EAAE,SAAS,CAAC;AAAA,IACxC,CAAC;AACD,QAAI,CAAC,KAAK;AACR,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,EAAE,mCAAmC,2BAA2B,EAAE;AAAA,QAC3E,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AACA,UAAM,WAAW,MAAM,GAAG,QAAQ,0BAA0B;AAAA,MAC1D;AAAA,MACA,oBAAoB,IAAI;AAAA,IAC1B,CAAC;AAED,UAAM,UAAU,MAAM;AAAA,MACpB;AAAA,MACA;AAAA,QACE;AAAA,QACA,gBAAgB,KAAK,SAAS;AAAA,QAC9B,QAAQ,KAAK,OAAO;AAAA,MACtB;AAAA,MACA;AAAA,MACA;AAAA,QACE,cAAc;AAAA,QACd,YAAY,IAAI;AAAA,QAChB,WAAW;AAAA,QACX,SAAS,OAAO;AAAA,MAClB;AAAA,MACA,YAAY;AAIV,qCAA6B;AAAA,UAC3B,cAAc;AAAA,UACd,YAAY,IAAI;AAAA,UAChB,SAAS,UAAU,aAAa;AAAA,UAChC,SAAS;AAAA,QACX,CAAC;AACD,cAAM,eAAe,OAAO,KAAK,aAAa,SAAY,OAAO,KAAK,WAAW,UAAU,YAAY;AACvG,cAAM,gBAAgB,OAAO,KAAK,cAAc,SAAY,OAAO,KAAK,YAAY,UAAU,aAAa;AAC3G,cAAM,WAAW,kBAAkB,IAAI;AAAA,UACrC;AAAA,UACA,oBAAoB,IAAI;AAAA,UACxB;AAAA,UACA;AAAA,UACA;AAAA,QACF,CAAC;AACD,YAAI;AACF,gBAAM,GAAG,MAAM;AAAA,QACjB,SAAS,KAAK;AAKZ,cAAI,kBAAkB,GAAG,GAAG;AAC1B,kBAAM;AAAA,cACJ;AAAA,gBACE;AAAA,gBACA;AAAA,cACF;AAAA,YACF;AAAA,UACF;AACA,gBAAM;AAAA,QACR;AACA,eAAO,SAAS,KAAK,UAAU,SAAS;AAAA,MAC1C;AAAA,IACF;AACA,QAAI,CAAC,QAAQ,GAAI,QAAO,QAAQ;AAChC,WAAO,aAAa,KAAK,EAAE,IAAI,MAAM,MAAM,QAAQ,OAAO,CAAC;AAAA,EAC7D,SAAS,OAAO;AACd,UAAM,eAAe,8BAA8B,KAAK;AACxD,QAAI,aAAc,QAAO;AACzB,WAAO,MAAM,4CAA4C;AAAA,MACvD,QAAQ,OAAO,KAAK;AAAA,MACpB,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AAAA,IAC9D,CAAC;AACD,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,EAAE,uBAAuB,gBAAgB,EAAE;AAAA,MACpD,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF,UAAE;AACA,UAAM,aAAa;AACnB,QAAI,OAAO,WAAW,YAAY,WAAY,OAAM,WAAW,QAAQ;AAAA,EACzE;AACF;AAEO,MAAM,UAAU;AAAA,EACrB,KAAK;AAAA,IACH,SAAS;AAAA,IACT,aAAa;AAAA,IACb,MAAM,CAAC,eAAe;AAAA,IACtB,WAAW;AAAA,MACT,KAAK;AAAA,QACH,aAAa;AAAA,QACb,SAAS;AAAA,UACP,oBAAoB;AAAA,YAClB,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,0BAA0B,EAAE,CAAC;AAAA,UACjE;AAAA,QACF;AAAA,MACF;AAAA,MACA,KAAK;AAAA,QACH,aAAa;AAAA,QACb,SAAS,EAAE,oBAAoB,EAAE,QAAQ,oBAAoB,EAAE;AAAA,MACjE;AAAA,IACF;AAAA,EACF;AAAA,EACA,OAAO;AAAA,IACL,SAAS;AAAA,IACT,aAAa;AAAA,IACb,MAAM,CAAC,eAAe;AAAA,IACtB,aAAa;AAAA,MACX,UAAU;AAAA,MACV,SAAS;AAAA,QACP,oBAAoB,EAAE,QAAQ,6BAA6B;AAAA,MAC7D;AAAA,IACF;AAAA,IACA,WAAW;AAAA,MACT,KAAK;AAAA,QACH,aAAa;AAAA,QACb,SAAS;AAAA,UACP,oBAAoB;AAAA,YAClB,QAAQ,EAAE,OAAO;AAAA,cACf,IAAI,EAAE,QAAQ,IAAI;AAAA,cAClB,MAAM;AAAA,YACR,CAAC;AAAA,UACH;AAAA,QACF;AAAA,MACF;AAAA,MACA,KAAK;AAAA,QACH,aAAa;AAAA,QACb,SAAS,EAAE,oBAAoB,EAAE,QAAQ,oBAAoB,EAAE;AAAA,MACjE;AAAA,MACA,KAAK;AAAA,QACH,aAAa;AAAA,QACb,SAAS,EAAE,oBAAoB,EAAE,QAAQ,oBAAoB,EAAE;AAAA,MACjE;AAAA,MACA,KAAK;AAAA,QACH,aAAa;AAAA,QACb,SAAS,EAAE,oBAAoB,EAAE,QAAQ,oBAAoB,EAAE;AAAA,MACjE;AAAA,MACA,KAAK;AAAA,QACH,aAAa;AAAA,QACb,SAAS,EAAE,oBAAoB,EAAE,QAAQ,oBAAoB,EAAE;AAAA,MACjE;AAAA,IACF;AAAA,EACF;AACF;",
+  "names": []
+}

package/dist/modules/notifications/api/unread-count/route.js

@@ -12,6 +12,7 @@ import {
   buildNotificationReadScopeWhere,
   getNotificationReadScopeTagOrganizationIds
 } from "../../lib/notificationScope.js";
+import { inAppVisibleFilter } from "../../lib/notificationVisibility.js";
 const metadata = {
   GET: { requireAuth: true }
 };
@@ -50,7 +51,10 @@ async function GET(req) {
     recipientUserId: userId,
     tenantId: scope.tenantId,
     status: "unread",
-    ...buildNotificationReadScopeWhere(scope)
+    $and: [
+      buildNotificationReadScopeWhere(scope),
+      inAppVisibleFilter()
+    ]
   });
   if (cache && cacheKey) {
     try {

package/dist/modules/notifications/api/unread-count/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../src/modules/notifications/api/unread-count/route.ts"],
-  "sourcesContent": ["import { createHash } from 'node:crypto'\nimport type { EntityManager } from '@mikro-orm/core'\nimport { runWithCacheTenant } from '@open-mercato/cache'\nimport {\n  buildCollectionTags,\n  isCrudCacheEnabled,\n  resolveCrudCache,\n} from '@open-mercato/shared/lib/crud/cache'\nimport { Notification } from '../../data/entities'\nimport { unreadCountResponseSchema } from '../openapi'\nimport { resolveGuardedNotificationContext } from '../../lib/routeHelpers'\nimport {\n  buildNotificationReadScopeWhere,\n  getNotificationReadScopeTagOrganizationIds,\n} from '../../lib/notificationScope'\n\nexport const metadata = {\n  GET: { requireAuth: true },\n}\n\nconst UNREAD_COUNT_RESOURCE = 'notifications.notification'\nconst UNREAD_COUNT_TTL_MS = 10_000\n\nfunction buildUnreadCountCacheKey(params: {\n  userId: string\n  organizationId: string | null\n  organizationIds: string[]\n}): string {\n  const normalizedIds = Array.from(new Set(\n    params.organizationIds.filter((value) => value.trim().length > 0),\n  )).sort((left, right) => left.localeCompare(right))\n  const scopeKey = normalizedIds.length === 0\n    ? 'no-access'\n    : `${params.organizationId ?? 'none'}:scope=${createHash('sha256')\n        .update(normalizedIds.join('\\0'))\n        .digest('hex')\n        .slice(0, 16)}`\n  return `notifications:unread-count:u=${params.userId}:org=${scopeKey}`\n}\n\nexport async function GET(req: Request) {\n  const resolved = await resolveGuardedNotificationContext(req)\n  if (!resolved.ok) return resolved.response\n  const { scope, ctx } = resolved\n  const em = ctx.container.resolve('em') as EntityManager\n\n  const userId = scope.userId\n  const cacheableOrganizationIds = Array.isArray(scope.organizationIds)\n    ? scope.organizationIds\n    : null\n  // Unrestricted and omitted legacy scopes cannot be safely tagged for invalidation:\n  // org-specific writes only invalidate their own collection tag. Keep those scopes\n  // uncached rather than serving a stale tenant-wide total until the TTL expires.\n  const cache = userId && cacheableOrganizationIds && isCrudCacheEnabled()\n    ? resolveCrudCache(ctx.container)\n    : null\n  const cacheKey = cache && userId && cacheableOrganizationIds\n    ? buildUnreadCountCacheKey({\n        userId,\n        organizationId: scope.organizationId,\n        organizationIds: cacheableOrganizationIds,\n      })\n    : null\n\n  if (cache && cacheKey) {\n    try {\n      const cached = await runWithCacheTenant(scope.tenantId, () => cache.get(cacheKey))\n      if (typeof cached === 'number') {\n        return Response.json({ unreadCount: cached })\n      }\n    } catch {}\n  }\n\n  const count = await em.count(Notification, {\n    recipientUserId: userId,\n    tenantId: scope.tenantId,\n    status: 'unread',\n    ...buildNotificationReadScopeWhere(scope),\n  })\n\n  if (cache && cacheKey) {\n    try {\n      await runWithCacheTenant(scope.tenantId, () =>\n        cache.set(cacheKey, count, {\n          ttl: UNREAD_COUNT_TTL_MS,\n          tags: buildCollectionTags(\n            UNREAD_COUNT_RESOURCE,\n            scope.tenantId,\n            getNotificationReadScopeTagOrganizationIds(scope),\n          ),\n        }),\n      )\n    } catch {}\n  }\n\n  return Response.json({ unreadCount: count })\n}\n\nexport const openApi = {\n  GET: {\n    summary: 'Get unread notification count',\n    tags: ['Notifications'],\n    responses: {\n      200: {\n        description: 'Unread count',\n        content: {\n          'application/json': {\n            schema: unreadCountResponseSchema,\n          },\n        },\n      },\n    },\n  },\n}\n"],
-  "mappings": "AAAA,SAAS,kBAAkB;AAE3B,SAAS,0BAA0B;AACnC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,oBAAoB;AAC7B,SAAS,iCAAiC;AAC1C,SAAS,yCAAyC;AAClD;AAAA,EACE;AAAA,EACA;AAAA,OACK;AAEA,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,KAAK;AAC3B;AAEA,MAAM,wBAAwB;AAC9B,MAAM,sBAAsB;AAE5B,SAAS,yBAAyB,QAIvB;AACT,QAAM,gBAAgB,MAAM,KAAK,IAAI;AAAA,IACnC,OAAO,gBAAgB,OAAO,CAAC,UAAU,MAAM,KAAK,EAAE,SAAS,CAAC;AAAA,EAClE,CAAC,EAAE,KAAK,CAAC,MAAM,UAAU,KAAK,cAAc,KAAK,CAAC;AAClD,QAAM,WAAW,cAAc,WAAW,IACtC,cACA,GAAG,OAAO,kBAAkB,MAAM,UAAU,WAAW,QAAQ,EAC5D,OAAO,cAAc,KAAK,IAAI,CAAC,EAC/B,OAAO,KAAK,EACZ,MAAM,GAAG,EAAE,CAAC;AACnB,SAAO,gCAAgC,OAAO,MAAM,QAAQ,QAAQ;AACtE;AAEA,eAAsB,IAAI,KAAc;AACtC,QAAM,WAAW,MAAM,kCAAkC,GAAG;AAC5D,MAAI,CAAC,SAAS,GAAI,QAAO,SAAS;AAClC,QAAM,EAAE,OAAO,IAAI,IAAI;AACvB,QAAM,KAAK,IAAI,UAAU,QAAQ,IAAI;AAErC,QAAM,SAAS,MAAM;AACrB,QAAM,2BAA2B,MAAM,QAAQ,MAAM,eAAe,IAChE,MAAM,kBACN;AAIJ,QAAM,QAAQ,UAAU,4BAA4B,mBAAmB,IACnE,iBAAiB,IAAI,SAAS,IAC9B;AACJ,QAAM,WAAW,SAAS,UAAU,2BAChC,yBAAyB;AAAA,IACvB;AAAA,IACA,gBAAgB,MAAM;AAAA,IACtB,iBAAiB;AAAA,EACnB,CAAC,IACD;AAEJ,MAAI,SAAS,UAAU;AACrB,QAAI;AACF,YAAM,SAAS,MAAM,mBAAmB,MAAM,UAAU,MAAM,MAAM,IAAI,QAAQ,CAAC;AACjF,UAAI,OAAO,WAAW,UAAU;AAC9B,eAAO,SAAS,KAAK,EAAE,aAAa,OAAO,CAAC;AAAA,MAC9C;AAAA,IACF,QAAQ;AAAA,IAAC;AAAA,EACX;AAEA,QAAM,QAAQ,MAAM,GAAG,MAAM,cAAc;AAAA,IACzC,iBAAiB;AAAA,IACjB,UAAU,MAAM;AAAA,IAChB,QAAQ;AAAA,IACR,GAAG,gCAAgC,KAAK;AAAA,EAC1C,CAAC;AAED,MAAI,SAAS,UAAU;AACrB,QAAI;AACF,YAAM;AAAA,QAAmB,MAAM;AAAA,QAAU,MACvC,MAAM,IAAI,UAAU,OAAO;AAAA,UACzB,KAAK;AAAA,UACL,MAAM;AAAA,YACJ;AAAA,YACA,MAAM;AAAA,YACN,2CAA2C,KAAK;AAAA,UAClD;AAAA,QACF,CAAC;AAAA,MACH;AAAA,IACF,QAAQ;AAAA,IAAC;AAAA,EACX;AAEA,SAAO,SAAS,KAAK,EAAE,aAAa,MAAM,CAAC;AAC7C;AAEO,MAAM,UAAU;AAAA,EACrB,KAAK;AAAA,IACH,SAAS;AAAA,IACT,MAAM,CAAC,eAAe;AAAA,IACtB,WAAW;AAAA,MACT,KAAK;AAAA,QACH,aAAa;AAAA,QACb,SAAS;AAAA,UACP,oBAAoB;AAAA,YAClB,QAAQ;AAAA,UACV;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;",
+  "sourcesContent": ["import { createHash } from 'node:crypto'\nimport type { EntityManager } from '@mikro-orm/core'\nimport { runWithCacheTenant } from '@open-mercato/cache'\nimport {\n  buildCollectionTags,\n  isCrudCacheEnabled,\n  resolveCrudCache,\n} from '@open-mercato/shared/lib/crud/cache'\nimport { Notification } from '../../data/entities'\nimport { unreadCountResponseSchema } from '../openapi'\nimport { resolveGuardedNotificationContext } from '../../lib/routeHelpers'\nimport {\n  buildNotificationReadScopeWhere,\n  getNotificationReadScopeTagOrganizationIds,\n} from '../../lib/notificationScope'\nimport { inAppVisibleFilter } from '../../lib/notificationVisibility'\n\nexport const metadata = {\n  GET: { requireAuth: true },\n}\n\nconst UNREAD_COUNT_RESOURCE = 'notifications.notification'\nconst UNREAD_COUNT_TTL_MS = 10_000\n\nfunction buildUnreadCountCacheKey(params: {\n  userId: string\n  organizationId: string | null\n  organizationIds: string[]\n}): string {\n  const normalizedIds = Array.from(new Set(\n    params.organizationIds.filter((value) => value.trim().length > 0),\n  )).sort((left, right) => left.localeCompare(right))\n  const scopeKey = normalizedIds.length === 0\n    ? 'no-access'\n    : `${params.organizationId ?? 'none'}:scope=${createHash('sha256')\n        .update(normalizedIds.join('\\0'))\n        .digest('hex')\n        .slice(0, 16)}`\n  return `notifications:unread-count:u=${params.userId}:org=${scopeKey}`\n}\n\nexport async function GET(req: Request) {\n  const resolved = await resolveGuardedNotificationContext(req)\n  if (!resolved.ok) return resolved.response\n  const { scope, ctx } = resolved\n  const em = ctx.container.resolve('em') as EntityManager\n\n  const userId = scope.userId\n  const cacheableOrganizationIds = Array.isArray(scope.organizationIds)\n    ? scope.organizationIds\n    : null\n  // Unrestricted and omitted legacy scopes cannot be safely tagged for invalidation:\n  // org-specific writes only invalidate their own collection tag. Keep those scopes\n  // uncached rather than serving a stale tenant-wide total until the TTL expires.\n  const cache = userId && cacheableOrganizationIds && isCrudCacheEnabled()\n    ? resolveCrudCache(ctx.container)\n    : null\n  const cacheKey = cache && userId && cacheableOrganizationIds\n    ? buildUnreadCountCacheKey({\n        userId,\n        organizationId: scope.organizationId,\n        organizationIds: cacheableOrganizationIds,\n      })\n    : null\n\n  if (cache && cacheKey) {\n    try {\n      const cached = await runWithCacheTenant(scope.tenantId, () => cache.get(cacheKey))\n      if (typeof cached === 'number') {\n        return Response.json({ unreadCount: cached })\n      }\n    } catch {}\n  }\n\n  const count = await em.count(Notification, {\n    recipientUserId: userId,\n    tenantId: scope.tenantId,\n    status: 'unread',\n    $and: [\n      buildNotificationReadScopeWhere(scope),\n      inAppVisibleFilter(),\n    ],\n  })\n\n  if (cache && cacheKey) {\n    try {\n      await runWithCacheTenant(scope.tenantId, () =>\n        cache.set(cacheKey, count, {\n          ttl: UNREAD_COUNT_TTL_MS,\n          tags: buildCollectionTags(\n            UNREAD_COUNT_RESOURCE,\n            scope.tenantId,\n            getNotificationReadScopeTagOrganizationIds(scope),\n          ),\n        }),\n      )\n    } catch {}\n  }\n\n  return Response.json({ unreadCount: count })\n}\n\nexport const openApi = {\n  GET: {\n    summary: 'Get unread notification count',\n    tags: ['Notifications'],\n    responses: {\n      200: {\n        description: 'Unread count',\n        content: {\n          'application/json': {\n            schema: unreadCountResponseSchema,\n          },\n        },\n      },\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,kBAAkB;AAE3B,SAAS,0BAA0B;AACnC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,oBAAoB;AAC7B,SAAS,iCAAiC;AAC1C,SAAS,yCAAyC;AAClD;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAS,0BAA0B;AAE5B,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,KAAK;AAC3B;AAEA,MAAM,wBAAwB;AAC9B,MAAM,sBAAsB;AAE5B,SAAS,yBAAyB,QAIvB;AACT,QAAM,gBAAgB,MAAM,KAAK,IAAI;AAAA,IACnC,OAAO,gBAAgB,OAAO,CAAC,UAAU,MAAM,KAAK,EAAE,SAAS,CAAC;AAAA,EAClE,CAAC,EAAE,KAAK,CAAC,MAAM,UAAU,KAAK,cAAc,KAAK,CAAC;AAClD,QAAM,WAAW,cAAc,WAAW,IACtC,cACA,GAAG,OAAO,kBAAkB,MAAM,UAAU,WAAW,QAAQ,EAC5D,OAAO,cAAc,KAAK,IAAI,CAAC,EAC/B,OAAO,KAAK,EACZ,MAAM,GAAG,EAAE,CAAC;AACnB,SAAO,gCAAgC,OAAO,MAAM,QAAQ,QAAQ;AACtE;AAEA,eAAsB,IAAI,KAAc;AACtC,QAAM,WAAW,MAAM,kCAAkC,GAAG;AAC5D,MAAI,CAAC,SAAS,GAAI,QAAO,SAAS;AAClC,QAAM,EAAE,OAAO,IAAI,IAAI;AACvB,QAAM,KAAK,IAAI,UAAU,QAAQ,IAAI;AAErC,QAAM,SAAS,MAAM;AACrB,QAAM,2BAA2B,MAAM,QAAQ,MAAM,eAAe,IAChE,MAAM,kBACN;AAIJ,QAAM,QAAQ,UAAU,4BAA4B,mBAAmB,IACnE,iBAAiB,IAAI,SAAS,IAC9B;AACJ,QAAM,WAAW,SAAS,UAAU,2BAChC,yBAAyB;AAAA,IACvB;AAAA,IACA,gBAAgB,MAAM;AAAA,IACtB,iBAAiB;AAAA,EACnB,CAAC,IACD;AAEJ,MAAI,SAAS,UAAU;AACrB,QAAI;AACF,YAAM,SAAS,MAAM,mBAAmB,MAAM,UAAU,MAAM,MAAM,IAAI,QAAQ,CAAC;AACjF,UAAI,OAAO,WAAW,UAAU;AAC9B,eAAO,SAAS,KAAK,EAAE,aAAa,OAAO,CAAC;AAAA,MAC9C;AAAA,IACF,QAAQ;AAAA,IAAC;AAAA,EACX;AAEA,QAAM,QAAQ,MAAM,GAAG,MAAM,cAAc;AAAA,IACzC,iBAAiB;AAAA,IACjB,UAAU,MAAM;AAAA,IAChB,QAAQ;AAAA,IACR,MAAM;AAAA,MACJ,gCAAgC,KAAK;AAAA,MACrC,mBAAmB;AAAA,IACrB;AAAA,EACF,CAAC;AAED,MAAI,SAAS,UAAU;AACrB,QAAI;AACF,YAAM;AAAA,QAAmB,MAAM;AAAA,QAAU,MACvC,MAAM,IAAI,UAAU,OAAO;AAAA,UACzB,KAAK;AAAA,UACL,MAAM;AAAA,YACJ;AAAA,YACA,MAAM;AAAA,YACN,2CAA2C,KAAK;AAAA,UAClD;AAAA,QACF,CAAC;AAAA,MACH;AAAA,IACF,QAAQ;AAAA,IAAC;AAAA,EACX;AAEA,SAAO,SAAS,KAAK,EAAE,aAAa,MAAM,CAAC;AAC7C;AAEO,MAAM,UAAU;AAAA,EACrB,KAAK;AAAA,IACH,SAAS;AAAA,IACT,MAAM,CAAC,eAAe;AAAA,IACtB,WAAW;AAAA,MACT,KAAK;AAAA,QACH,aAAa;AAAA,QACb,SAAS;AAAA,UACP,oBAAoB;AAAA,YAClB,QAAQ;AAAA,UACV;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/modules/notifications/backend/notifications/user-preferences/page.js

@@ -0,0 +1,10 @@
+import { jsx } from "react/jsx-runtime";
+import { Page, PageBody } from "@open-mercato/ui/backend/Page";
+import { NotificationUserPreferencesAdminPageClient } from "../../../frontend/NotificationUserPreferencesAdminPageClient.js";
+async function NotificationUserPreferencesAdminPage() {
+  return /* @__PURE__ */ jsx(Page, { children: /* @__PURE__ */ jsx(PageBody, { children: /* @__PURE__ */ jsx(NotificationUserPreferencesAdminPageClient, {}) }) });
+}
+export {
+  NotificationUserPreferencesAdminPage as default
+};
+//# sourceMappingURL=page.js.map

package/dist/modules/notifications/backend/notifications/user-preferences/page.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../../src/modules/notifications/backend/notifications/user-preferences/page.tsx"],
+  "sourcesContent": ["import { Page, PageBody } from '@open-mercato/ui/backend/Page'\nimport { NotificationUserPreferencesAdminPageClient } from '../../../frontend/NotificationUserPreferencesAdminPageClient'\n\nexport default async function NotificationUserPreferencesAdminPage() {\n  return (\n    <Page>\n      <PageBody>\n        <NotificationUserPreferencesAdminPageClient />\n      </PageBody>\n    </Page>\n  )\n}\n"],
+  "mappings": "AAOQ;AAPR,SAAS,MAAM,gBAAgB;AAC/B,SAAS,kDAAkD;AAE3D,eAAO,uCAA8D;AACnE,SACE,oBAAC,QACC,8BAAC,YACC,8BAAC,8CAA2C,GAC9C,GACF;AAEJ;",
+  "names": []
+}

package/dist/modules/notifications/backend/notifications/user-preferences/page.meta.js

@@ -0,0 +1,28 @@
+import React from "react";
+const usersCogIcon = React.createElement(
+  "svg",
+  { width: 16, height: 16, viewBox: "0 0 24 24", fill: "none", stroke: "currentColor", strokeWidth: 2, strokeLinecap: "round", strokeLinejoin: "round" },
+  React.createElement("path", { d: "M17 21v-2a4 4 0 0 0-4-4H5a4 4 0 0 0-4 4v2" }),
+  React.createElement("circle", { cx: 9, cy: 7, r: 4 }),
+  React.createElement("circle", { cx: 19, cy: 16, r: 2 }),
+  React.createElement("path", { d: "M19 12v1" }),
+  React.createElement("path", { d: "M19 19v1" })
+);
+const metadata = {
+  requireAuth: true,
+  requireFeatures: ["notifications.manage_user_preferences"],
+  pageTitle: "User Notification Preferences",
+  pageTitleKey: "notifications.preferences.admin.pageTitle",
+  pageGroup: "Auth",
+  pageGroupKey: "settings.sections.auth",
+  pageOrder: 5,
+  icon: usersCogIcon,
+  pageContext: "settings",
+  breadcrumb: [
+    { label: "User Notification Preferences", labelKey: "notifications.preferences.admin.pageTitle" }
+  ]
+};
+export {
+  metadata
+};
+//# sourceMappingURL=page.meta.js.map

package/dist/modules/notifications/backend/notifications/user-preferences/page.meta.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../../src/modules/notifications/backend/notifications/user-preferences/page.meta.ts"],
+  "sourcesContent": ["import React from 'react'\n\nconst usersCogIcon = React.createElement(\n  'svg',\n  { width: 16, height: 16, viewBox: '0 0 24 24', fill: 'none', stroke: 'currentColor', strokeWidth: 2, strokeLinecap: 'round', strokeLinejoin: 'round' },\n  React.createElement('path', { d: 'M17 21v-2a4 4 0 0 0-4-4H5a4 4 0 0 0-4 4v2' }),\n  React.createElement('circle', { cx: 9, cy: 7, r: 4 }),\n  React.createElement('circle', { cx: 19, cy: 16, r: 2 }),\n  React.createElement('path', { d: 'M19 12v1' }),\n  React.createElement('path', { d: 'M19 19v1' }),\n)\n\nexport const metadata = {\n  requireAuth: true,\n  requireFeatures: ['notifications.manage_user_preferences'],\n  pageTitle: 'User Notification Preferences',\n  pageTitleKey: 'notifications.preferences.admin.pageTitle',\n  pageGroup: 'Auth',\n  pageGroupKey: 'settings.sections.auth',\n  pageOrder: 5,\n  icon: usersCogIcon,\n  pageContext: 'settings' as const,\n  breadcrumb: [\n    { label: 'User Notification Preferences', labelKey: 'notifications.preferences.admin.pageTitle' },\n  ],\n} as const\n"],
+  "mappings": "AAAA,OAAO,WAAW;AAElB,MAAM,eAAe,MAAM;AAAA,EACzB;AAAA,EACA,EAAE,OAAO,IAAI,QAAQ,IAAI,SAAS,aAAa,MAAM,QAAQ,QAAQ,gBAAgB,aAAa,GAAG,eAAe,SAAS,gBAAgB,QAAQ;AAAA,EACrJ,MAAM,cAAc,QAAQ,EAAE,GAAG,4CAA4C,CAAC;AAAA,EAC9E,MAAM,cAAc,UAAU,EAAE,IAAI,GAAG,IAAI,GAAG,GAAG,EAAE,CAAC;AAAA,EACpD,MAAM,cAAc,UAAU,EAAE,IAAI,IAAI,IAAI,IAAI,GAAG,EAAE,CAAC;AAAA,EACtD,MAAM,cAAc,QAAQ,EAAE,GAAG,WAAW,CAAC;AAAA,EAC7C,MAAM,cAAc,QAAQ,EAAE,GAAG,WAAW,CAAC;AAC/C;AAEO,MAAM,WAAW;AAAA,EACtB,aAAa;AAAA,EACb,iBAAiB,CAAC,uCAAuC;AAAA,EACzD,WAAW;AAAA,EACX,cAAc;AAAA,EACd,WAAW;AAAA,EACX,cAAc;AAAA,EACd,WAAW;AAAA,EACX,MAAM;AAAA,EACN,aAAa;AAAA,EACb,YAAY;AAAA,IACV,EAAE,OAAO,iCAAiC,UAAU,4CAA4C;AAAA,EAClG;AACF;",
+  "names": []
+}

package/dist/modules/notifications/backend/profile/notification-preferences/page.js

@@ -0,0 +1,10 @@
+import { jsx } from "react/jsx-runtime";
+import { Page, PageBody } from "@open-mercato/ui/backend/Page";
+import { NotificationPreferencesPageClient } from "../../../frontend/NotificationPreferencesPageClient.js";
+async function NotificationPreferencesProfilePage() {
+  return /* @__PURE__ */ jsx(Page, { children: /* @__PURE__ */ jsx(PageBody, { children: /* @__PURE__ */ jsx(NotificationPreferencesPageClient, {}) }) });
+}
+export {
+  NotificationPreferencesProfilePage as default
+};
+//# sourceMappingURL=page.js.map

package/dist/modules/notifications/backend/profile/notification-preferences/page.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../../src/modules/notifications/backend/profile/notification-preferences/page.tsx"],
+  "sourcesContent": ["import { Page, PageBody } from '@open-mercato/ui/backend/Page'\nimport { NotificationPreferencesPageClient } from '../../../frontend/NotificationPreferencesPageClient'\n\nexport default async function NotificationPreferencesProfilePage() {\n  return (\n    <Page>\n      <PageBody>\n        <NotificationPreferencesPageClient />\n      </PageBody>\n    </Page>\n  )\n}\n"],
+  "mappings": "AAOQ;AAPR,SAAS,MAAM,gBAAgB;AAC/B,SAAS,yCAAyC;AAElD,eAAO,qCAA4D;AACjE,SACE,oBAAC,QACC,8BAAC,YACC,8BAAC,qCAAkC,GACrC,GACF;AAEJ;",
+  "names": []
+}